CUSTDATA USER GUIDE


Add to my manuals
42 Pages

advertisement

CUSTDATA USER GUIDE | Manualzz

CUSTDATA

USER GUIDE

How to manage your Telstra Data

Services online

START

01. Welcome to CustData

02. Access and Message Services

03. Navigation and Functionality

04. Usage Threshold Alerts

05. Reports

06. Access Control Lists

07. Managing Your Routing

08. Routing Tests

09. Domain Name Service

10. Additional IP Address Services

11. Conclusion

PREVIOUS NEXT

WELCOME

TO CUSTDATA

As a Telstra Business, Enterprise or Wholesale customer, you can take full advantage of complimentary access to CustData to manage your services as and when it suits you.

CustData is a secure account information and management portal which is available to you 24/7. Simply log in to:

• configure your services

• test your services

• view outage reports and log faults

• use comprehensive service performance reporting tools

• manage your contact details

• check monthly usage reports

• manage your usage threshold alerts.

Obtaining the best results is as simple as making sure CustData is set up to meet your requirements.

CustData makes it easy for you to monitor and manage your internet service.

For example, CustData could provide first evidence of a

Denial of Service (DoS) attacks, mail relay issue, open proxy issue, virus activity or poor network configuration.

This guide will help you make the most of your CustData tools.

Business Broadband uses the Telstra Internet Direct network. For more information, please see telstra.com.au/internetdirect. Access is subject to scheduled maintenance or service outages. The spectrum device and ™ are trade marks and ® are registered trade marks of Telstra Corporation Limited ABN 33 051 775 556.

C188 APR15

01. Welcome to CustData

02. Access and Message Services

02.01 Logging in

02.02 Setting a new password

02.03 Update contact details

03. Navigation and Functionality

04. Usage Threshold Alerts

05. Reports

06. Access Control Lists

07. Managing Your Routing

08. Routing Tests

09. Domain Name Service

10. Additional IP Address Services

11. Conclusion

02 ACCESS AND MESSAGE SERVICES

Any access to CustData requires a secure login. You can access the login page at https://www.telstra.net/custdata

02.01 LOGGING IN

To log in, go to the login page and enter either your:

• Account Number;

• Service ID (opshandle); OR

• Full National Number (FNN);

• PLUS your Password.

(Initially this will be the password provided in your service configuration email.)

For assistance, contact the Technical Helpdesk – refer to Section 11 for contact details.

02.02 SETTING A NEW PASSWORD

02.02.01 Change your initial password

02.02.02 Change your reset password

02.02.03 If you forget your password

02.02.04 Password lifetime

Because of the critical data that can be accessed and controlled via CustData, it is essential to protect access to your CustData information with stringent password management procedures.

Your CustData password must be:

1. A minimum of 8 characters in length

2. Dissimilar to your last five passwords used

3. Made up from at least 3 of the 4 following character groups:

• english uppercase (A through Z).

• english lowercase (A through Z).

• digits (0 through 9).

• non-alphanumeric (for example !, $, #, %).

• further assistance is available via Online Help.

02.02.01 Change your initial password

If your Telstra service is new and is not associated to an existing CustData account, you will be provided with a default password in your configuration email.

This is a temporary password that you will be prompted to change the first time you log in.

PREVIOUS NEXT

01. Welcome to CustData

02. Access and Message Services

02.01 Logging in

02.02 Setting a new password

02.03 Update contact details

03. Navigation and Functionality

04. Usage Threshold Alerts

05. Reports

06. Access Control Lists

07. Managing Your Routing

08. Routing Tests

09. Domain Name Service

10. Additional IP Address Services

11. Conclusion

02 ACCESS AND MESSAGE SERVICES

Figure 1. Initial password change

02.02.02 Change your password

If you need your password reset for any reason, you will be issued with a temporary replacement. To prevent this replacement password from expiring, you must set a new password when you next log in to CustData.

1. On login, you may see a password expiry warning on your Welcome screen.

2. Click on Account Management link on the Home screen.

3. Click on Change Password tab.

4. Enter a new password, confirm your new password and click Submit.

Further assistance is available via Online Help.

02.02.03 If you forget your password

If you cannot remember your password, click Forgot your password? link on the CustData login page. This will take you to the CustData Password Reset screen.

1. You will need to enter your:

• Account number;

• Service ID (opshandle); and

• Full National Number (FNN).

2. Click the Reset Password button to validate your account details.

3. On successful validation, a temporary password will be generated and emailed to the contact listed in the

Update Contact Details tab of the Manage Account screen. This is also known as your Billing Contact Email ID.

If you need to change this address, see the Billing Contact information at 02.03 below.

* If you do not have an email listed in the billing contact section of CustData, you must contact the Technical Helpdesk for password resets – refer to Section 11 for contact details.

4. When you receive your temporary password, follow the steps for changing a reset password at 02.02.02 above.

Figure 2. Password Reset Screen

02.02.04 Password lifetime

Your CustData password is only valid for 180 days. If you don’t change your password for 180 days it will expire and you will be required to change the password on your next login.

You will get a warning on the login screen and you must set a new password as shown in figure 3.

PREVIOUS NEXT

01. Welcome to CustData

02. Access and Message Services

02.01 Logging in

02.02 Setting a new password

02.03 Update contact details

03. Navigation and Functionality

04. Usage Threshold Alerts

05. Reports

06. Access Control Lists

07. Managing Your Routing

08. Routing Tests

09. Domain Name Service

10. Additional IP Address Services

11. Conclusion

02 ACCESS AND MESSAGE SERVICES

Figure 3. Password Expiry – Change Password Screen

You only need to enter contact details – a name, phone number and email address – for the services you require.

Each option has an Edit function for changing or updating those details.

We recommend that you review your contact details on a regular basis to ensure they’re accurate and up to date.

For example, you will be unable to review any routing detail notifications if there is no nominated contact details set up in the Routing Contact field and you will not receive Usage

Notification Alerts where there is an incorrect email address for Billing Contact.

Figure 4. Update Contact Details Screen

02.03 UPDATE CONTACT DETAILS

The Account Summary tab under Manage – > Account provides you a summary of your service and contact information. The contact summary allows you to nominate email addresses for receiving important service, usage and access notifications related to all services on your account.

The available options are:

• Billing Contact – your primary account contact for billing and product information, scheduled reports, reset passwords and Usage Alert emails. You can also enter a secondary email address for the billing contact

• DNS Contact – for notices about any primary or Secondary domain name system (DNS) services you have

• Operations Contact – for technical information, such as warnings about an overloaded service

• Outage Contact – for notices about any outages that may affect your service

• Routing Contact – for routing change authorisations and any routing issues

• Statistics Contact – for reports on service usage.

To edit your contact information:

1. Log in to CustData

2. Click on Account Management link which is available at the centre of the Home screen

3. Click on Update Contact Details tab

4. Locate the contact you need to change, scroll to the right and click on Edit

5. On the new screen that appears, enter the new authorised contact details and click on Save.

PREVIOUS NEXT

01. Welcome to CustData

02. Access and Message Services

03. Navigation and Functionality

03.01 Home

03.02 Reports

03.03 Manage

03.04 Support

03.05 Logout

04. Usage Threshold Alerts

05. Reports

06. Access Control Lists

07. Managing Your Routing

08. Routing Tests

09. Domain Name Service

10. Additional IP Address Services

11. Conclusion

PREVIOUS NEXT

03 NAVIGATION AND FUNCTIONALITY

Each time you log in to CustData you’ll see the

Welcome Screen with further navigation options on the top right corner of the screen.

We’ll look at the basic functionality of these menu options here.

Figure 5. Welcome Screen

03.01 HOME

The Home or the welcome screen provides menus to select reports, manage account and service(s) and other support options. This screen also provides quick links to Account

Management and Reporting features of CustData.

03.02 REPORTS

The reports menu option provides access to the following reports:

03.02.01 Service Usage

This screen provides tabs to view usage summary and various daily and monthly reports

Usage Meter

View usage summary of your service(s). Also configure scheduled reporting:

• Configure Usage Notification – manage internet usage alerts for your service. See Section 04 for more details on Usage Threshold Notifications. There are also links to the following external URLs, which provide management functions and information for Telstra

Business Broadband customers.

• Configure scheduled reporting – arrange to receive an aggregated monthly summary (in csv format) for services associated with your account or Multi Site plan for the most recent billing cycle period.

Monthly Reports

Tabular and graphical traffic data for your service over a selected billing cycle.

Daily Reports

Tabular and graphical traffic data for your service through selected start and end dates.

See Section 05 for information on viewing and interpreting reports.

03.02.02 Network Performance

Check network performance statistics, including Latency and Intercapital Domestic Links.

01. Welcome to CustData

02. Access and Message Services

03. Navigation and Functionality

03.01 Home

03.02 Reports

03.03 Manage

03.04 Support

03.05 Logout

04. Usage Threshold Alerts

05. Reports

06. Access Control Lists

07. Managing Your Routing

08. Routing Tests

09. Domain Name Service

10. Additional IP Address Services

11. Conclusion

03 NAVIGATION AND FUNCTIONALITY

03.03 MANAGE

03.03.01 Account

This screen provides tabs to view your account summary update your contact and details and also allows you to change your login password.

• Account Summary – provides a summary of your services and DNS configurations.

• Update Contact Details – refer section 2.03.

• Change Password – refer section 2.02.

03.03.02 Service

• Access Control – refer section 06.

• IP Routing – refer section 07.

• Additional IP – refer section 10.

• Bandwidth Change – control your Ethernet Dual

Uplink Premium Package bandwidth on demand.

03.03.03 DNS

• Primary DNS – refer section 9.01.

• Secondary DNS – refer section 9.02.

• Reverse DNS – manage your reverse DNS records; control .in-addr.arpa entries (up to a/25 IPv4 subnet, ie maximum 128 IP addresses) and ip6.arpa entries

(up to 128 entries per allocated IPv6 prefix).

03.03.04 Secondary Mail Services

Use Telstra Internet Direct as a secondary mail exchange, to store emails if your Primary mail server is down.

03.04 SUPPORT

03.04.01 Diagnostic Toolkit

• Network Visibility –this tab provides feature to perform

Node to Node or Node to Host Testing.

• Node To Node Ping – for real-time statistics between two

Telstra Internet Direct (TID) nodes (Points of Presence).

• Node To Host Ping – for real-time statistics between a TID node and any given host.

• Node To Host Trace – for the network path between a TID node and any given host.

• DNS Visibility – allows to check status of your domain.

• Mail Visibility – allows testing reachability from Internet

Direct to the mail server of a given domain.

• BackChannel Tariff– allows you to enter your expected traffic in and traffic out to calculate the possible Backchannel tariff should this tariff apply to your agreement with us.

Note: The testing feature is not available for Telstra services on the NBN.

03.04.02 Report a Fault

Submit a fault report online. A shortcut link for this function is also provided on the Welcome screen.

03.04.03 Contact Telstra

A list of key Telstra contact details. The Contact Us button provided on the Welcome screen will also take you there.

03.04.04 Online Help

Detailed guidance for using CustData functions. This feature is also available as a shortcut link on the Welcome Screen.

03.05 LOGOUT

This button (available on the Welcome screen) closes your secure session and returns you to the main login page.

PREVIOUS NEXT

01. Welcome to CustData

02. Access and Message Services

03. Navigation and Functionality

04. Usage Threshold Alerts

04.01 How to receive usage threshold alerts

04.02 Usage threshold alert triggers

04.03 How to de-activate usage threshold alerts

05. Reports

06. Access Control Lists

07. Managing Your Routing

08. Routing Tests

09. Domain Name Service

10. Additional IP Address Services

11. Conclusion

04 USAGE THRESHOLD ALERTS

You won’t be charged any fixed broadband excess data charges for your first two bills when you are a new customer or recontracting your service. It’s part of our Peace of

Mind Commitment. If you are eligible for Peace of Mind you will also see a notification which shows ‘Peace of Mind Committment applies’ next to Data used section.

The Usage Threshold Alerts service is now built into all standard tiered plans, and will be provided as long as you’ve included an active email address in the Billing Contact line of the Update Contact Details screen. (Refer to 02.03 for details.)

Usage Threshold Alerts are not available for:

• Fixed and Unlimited plans

• Multi Site Volume Based plans

• Customised Pricing plans.

04.02 USAGE THRESHOLD ALERT TRIGGERS

A Usage Threshold Alert will be triggered when CustData recognises that you have reached the nominated percentage of the usage associated with your plan. You’ll receive your alert email within approximately 48 hours. You may also nominate to include an additional email contact to receive this alert.

You may also nominate to include an additional email contact in the secondary email billing address to receive this alert

(refer to 02.03).

3. Select Usage Notification from the Manage menu.

4. Click the notification options that you do not want to receive. If you don’t want any Usage Threshold Alerts, just select I do not wish to receive notification for any of the listed thresholds.

5. Click the Save button.

6. The confirmation message Changes to your internet usage notifications have been amended will appear.

Changes to your Usage Threshold Alert options will take effect immediately.

Figure 6. Usage Alerts Notification screen

04.03 HOW TO DE-ACTIVATE USAGE

THRESHOLD ALERTS

You can choose to not receive notices for any of the nominated threshold levels, by clicking the appropriate check box(es) in the Usage Alerts screen in the Account Management submenu.

1. Log in to CustData.

2. Navigate to Manage menu from the top right corner of the

Home screen.

PREVIOUS NEXT

01. Welcome to CustData

02. Access and Message Services

03. Navigation and Functionality

04. Usage Threshold Alerts

05. Reports

05.01 Account level & multi site level usage reporting

05.02 Usage meter

05.03 Daily usage reports

05.04 Monthly usage reports

05.05 Scheduled reports

05.06 Trend analysis

05.07 Drilling down into suspect usage

05.08 Checking service changes

05.09 Account level report analysis

05.10 Multi site report analysis

06. Access Control Lists

07. Managing Your Routing

08. Routing Tests

09. Domain Name Service

10. Additional IP Address Services

11. Conclusion

PREVIOUS NEXT

05 REPORTS

CustData makes it easy for you to monitor and manage your internet service by providing a range of valuable reports. Each offers different functionality and can be used to analyse usage trends and perform trouble shooting.

This regular monitoring of your services is highly recommended.

Doing so can help you identify and remedy issues early.

Early detection makes it a lot easier to diagnose a problem and put effective prevention in place.

By becoming familiar with the reports available from

CustData, you can accurately identify trends and/or issues affecting your service. For example, you can now view monthly or daily statistics in both graphical and tabular formats, including usage data at an Account, Multi Site

Aggregator or Single Service level.

The “View Details“ link directs you to the Monthly Reports page where you can run a more detailed report for the selected service.

05.01 ACCOUNT LEVEL AND MULTI SITE

LEVEL USAGE REPORTING

Account level and Multi Site level reporting are supported for daily and monthly usage reporting. Scheduled reporting is also supported with frequencies aligned to your monthly billing cycle. Account or Multi Site level reports are not available for usage data recorded before 19 May 2009.

05.02 USAGE METER

CustData’s Usage Meter provides a summary of your data usage for each service attached to your account. The first time you click on the Usage Meter feature, your first 10 services will be displayed on the left under “My Services”. You can click the “Next” and “Previous” buttons to navigate through all your services.

Click on a service under “My Services” to display a summary of the usage as shown in the example below. The service ID is displayed at the top, followed by the service’s plan name and billing cycle start and end dates.

The “Data Used“ bar graphically illustrates the amount of data consumed from your data allowance. The “Days Left“ bar points to the number of days remaining in the current billing cycle.

There are two types of services shown in the usage meter – the services that you see under “My Services” will depend on the data plans purchased:

• Individual services: these are denoted by “Service ID” along with the service identifier and Full National Number

(FNN). Individual services will display the usage meter for standalone data plans.

• Aggregated/Multisite services: these are denoted by

“Aggregator ID” along with the aggregator/group plan identifier. These could be group plans for Digital Office

Technology customers or multisite tiered/volume plans for TID customers. The data shown is the aggregation of all individual services under the group or multisite service.

Individual services under an aggregated service will not be listed under “My Services”. For usage details of individual sites, you can view current usage information via “Daily” and “Monthly” Reports.

01. Welcome to CustData

02. Access and Message Services

03. Navigation and Functionality

04. Usage Threshold Alerts

05. Reports

05.01 Account level & multi site level usage reporting

05.02 Usage meter

05.03 Daily usage reports

05.04 Monthly usage reports

05.05 Scheduled reports

05.06 Trend analysis

05.07 Drilling down into suspect usage

05.08 Checking service changes

05.09 Account level report analysis

05.10 Multi site report analysis

06. Access Control Lists

07. Managing Your Routing

08. Routing Tests

09. Domain Name Service

10. Additional IP Address Services

11. Conclusion

PREVIOUS NEXT

05 REPORTS

05.03 DAILY USAGE REPORTS

05.03.01 To produce Daily Usage Reports

05.03.02 Using the Calendar box

05.03.03 Producing reports at the Service/

Multi Site/Account level

05.03.04 Download reporting option

Daily Usage Reports allow you to monitor your daily usage statistics at an Account, Multi Site Group or Individual Service level. Usage data is available at two levels of granularity:

Daily Summary and 5 Minute Polling Data.

For Daily Summary reports, usage data is available for last seven years in Custdata. For 5 Minute Polling Reports, usage data is available for the last one year in CustData.

For 5 minute data older than one year (but not more than 7 years), please use the “Report A Fault” function in Custdata to request usage data for the required time period.

05.03.01 To produce Daily Usage Reports

1. Log in to CustData.

2. Navigate to the Reports menu on the top-right hand of the screen and select Service Usage.

3. Click on Daily Reports tab on the Service Usage

Reports screen.

4. In the screen that appears, select the required service, account number or Multi Site Aggregator ID from the dropdown list in the Service/Multi Site/Account field.

5. Now select Daily Summary in the Data Type field.

6. Enter the Start and Through to dates for the days you want included; or select dates on screen by opening the

Calendar icon (see 05.03.02 below).

7. Click on the Generate Report button.

(If you do not enter a From or Through to date, the day before the current day will be used by default.)

Further assistance is available via Online Help.

Figure 7. Daily reports screen

05.03.02 Using the Calendar Box

If required, CustData lets you choose reporting dates from a calendar.

Simply click the Calendar icon next to the From or Through to text fields to open the calendar window. The current month will be displayed by default, however you can select a different month from the dropdown list. This option is useful if you wish to view usage for a calendar month.

Figure 8. Report Calendar

01. Welcome to CustData

02. Access and Message Services

03. Navigation and Functionality

04. Usage Threshold Alerts

05. Reports

05.01 Account level & multi site level usage reporting

05.02 Usage meter

05.03 Daily usage reports

05.04 Monthly usage reports

05.05 Scheduled reports

05.06 Trend analysis

05.07 Drilling down into suspect usage

05.08 Checking service changes

05.09 Account level report analysis

05.10 Multi site report analysis

06. Access Control Lists

07. Managing Your Routing

08. Routing Tests

09. Domain Name Service

10. Additional IP Address Services

11. Conclusion

PREVIOUS NEXT

05 REPORTS

05.03.03 Producing reports at the Service/

Multi Site/Account level

05.03.03.01 Account level reports: Additional information

05.03.03.02 Multi Site level reports: Additional information

It is now possible to generate daily reports of your Account,

Multi Site or Individual Service usage.

Figure 9. Daily Usage Summary Report screen

05.03.03.01 Account level Reports: Additional information

When you produce a daily usage report at the account level, the graph and data will be consolidated from all the services under that account. The report looks similar to an Individual

Service report, however it has your account number in the header. There is no breakdown of Individual Service data within the Account level report.

The Account level report will also include data from cancelled services if they had billable usage during the selected reporting period.

5 Minute Polling Data isn’t available on Account level reports and will be greyed out.

Figure 10. Daily Usage summary screens for an Account level report

1-3. Access the Daily Reports screen as per section

05.03.01 above.

4. Select your account number from dropdown labelled

Service/Multi Site/Account.

5. Choose your daily summary details by selecting the appropriate radio buttons under Data Type.

6. Enter your preferred Start and Through to dates in the text field, or click the Calendar icon to open and use the calendar window.

7. Click on the Generate Report button.

If you request an Account or Multi Site daily usage report, there may be a short delay as the data is processed.

The following message will be displayed: Your request is being processed and may take up to 5 minutes to complete.

Followed by: Process complete.

5 Minute Polling Data is only available for Individual

Service reports.

01. Welcome to CustData

02. Access and Message Services

03. Navigation and Functionality

04. Usage Threshold Alerts

05. Reports

05.01 Account level & multi site level usage reporting

05.02 Usage meter

05.03 Daily usage reports

05.04 Monthly usage reports

05.05 Scheduled reports

05.06 Trend analysis

05.07 Drilling down into suspect usage

05.08 Checking service changes

05.09 Account level report analysis

05.10 Multi site report analysis

06. Access Control Lists

07. Managing Your Routing

08. Routing Tests

09. Domain Name Service

10. Additional IP Address Services

11. Conclusion

PREVIOUS NEXT

05 REPORTS

05.03.03.02 Multi Site level reports: Additional information

Multi Site reports show aggregated usage data for all the services covered by your Multi Site plan. You must have a

Multi Site plan to generate Multi Site reports. The displayed screens look similar to Account level reporting, but will reference your Multi Site plan and Aggregator ID.

These reports will not advise when you have reached your minimum spend threshold, so we recommend that you have details of your Multi Site plan on hand.

5 Minute Polling Data isn’t available on Multi Site plan reports and will be greyed out.

Figure 11. Daily Usage summary screen for a Multi Site report

Note: For Telstra services on the NBN only, the Service

Capacity, Line Occupancy IN, Line Occupancy OUT, 24 Hour avg Kbps, 24 Hour avg Line Occupancy, 4 Hour peak Line

Occupancy, 1 Hour peak Line Occupancy and 15 Min peak

Line Occupancy will be reported as zero.

05.03.04 Download reporting option

A Download button has been provided on all reporting screens. Selecting this button allows you to download your reported data, tabulated in an Excel spreadsheet.

You can then use the data to create your own tables and charts as required.

01. Welcome to CustData

02. Access and Message Services

03. Navigation and Functionality

04. Usage Threshold Alerts

05. Reports

05.01 Account level & multi site level usage reporting

05.02 Usage meter

05.03 Daily usage reports

05.04 Monthly usage reports

05.05 Scheduled reports

05.06 Trend analysis

05.07 Drilling down into suspect usage

05.08 Checking service changes

05.09 Account level report analysis

05.10 Multi site report analysis

06. Access Control Lists

07. Managing Your Routing

08. Routing Tests

09. Domain Name Service

10. Additional IP Address Services

11. Conclusion

PREVIOUS NEXT

05 REPORTS

05.04 MONTHLY USAGE REPORTS

05.04.01 To produce Monthly Usage Reports

05.04.02 Producing reports at the Service/Multi Site/

Account level

05.04.03 Monthly Report Table Headers

05.04.04 Daily Traffic Logs and Traffic Profiles

05.04.05 Daily Traffic Totals

05.04.06 Download Reporting option

Our enhanced Monthly Usage Reports allow you to check your service usage for a complete billing cycle at an Account,

Multi Site Group or Individual Service level.

This billing cycle data replaces the calendar month basis of our previous monthly reporting option – and should prove more relevant for your account.

If you require calendar month reporting, we recommend you use the daily reporting function which allows you to select from the first to the last day of a specific month.

05.04.01 To produce Monthly Usage Reports

Figure 12. Monthly Usage Report screen

1. Log in to CustData.

2. Navigate to Reports menu at the top right corner of the screen and select Service Usage.

3. Click on Monthly Reports tab on the Service Usage

Reports screen.

4. In the main screen, select the required service, account number or Multi Site Aggregator ID from the dropdown list in the Service/Multi Site/Account field.

5. Now select the required Billing Cycle.

6. Select the year of your required Billing Cycle.

7. Click on the Generate Report button.

The Billing Cycle dropdown at step 5 will automatically show the monthly billing cycle dates for the account you have selected, with our last complete billing cycle as the default.

You can select any of the billing cycles for the period you wish to review – just remember to choose the correct year at step 6.

Note: Monthly reporting data is not available until 48 hours after the completion of the billing cycle.

Further assistance is available via Online Help.

05.04.02 Producing reports at the Service/Multi Site/

Account level

You can generate monthly reports of your Account,

Multi Site or Individual Service usage.

Simply select the desired Service, Multi Site or account number from the Service/Multi Site/Account dropdown at step 4 in the section above.

Account and Multi Site level reports will include data from cancelled services if they had billable usage during the selected billing cycle.

01. Welcome to CustData

02. Access and Message Services

03. Navigation and Functionality

04. Usage Threshold Alerts

05. Reports

05.01 Account level & multi site level usage reporting

05.02 Usage meter

05.03 Daily usage reports

05.04 Monthly usage reports

05.05 Scheduled reports

05.06 Trend analysis

05.07 Drilling down into suspect usage

05.08 Checking service changes

05.09 Account level report analysis

05.10 Multi site report analysis

06. Access Control Lists

07. Managing Your Routing

08. Routing Tests

09. Domain Name Service

10. Additional IP Address Services

11. Conclusion

PREVIOUS NEXT

05 REPORTS

05.04.03 Monthly Report Table Headers

Once you have generated a Monthly Usage Report, the table header will reflect the level of reporting you have selected.

• Account Name and Account Number are the same as those that appear in the bar at the top of each screen in CustData.

• Service Name is the name that appears against the service on your account.

• Deal Name is the name of the plan you are on (this will appear only when viewing single service level reporting).

• Multi Site Deal Name is a generic name for all Multi Site plans. For details of your plan, please refer to your broadband service contract.

• Aggregator Number is the 10-digit number that appears on your account. This number is used to accrue and summarise all usage generated by the services within your Multi Site plan.

05.04.03.01 Sample Monthly Report Table Headers

Monthly Report: <Account Number> – <Bill Cycle>

Account Name

Account Number

Monthly Total Data Volumes

Mbytes Uploaded

Mbytes Downloaded

95% peak bandwidth

<Account Name>

<Account Number>

<Acct Total Mbytes>

<Acct Total Mbytes>

39.0 kbps

Monthly Report: <Service Name>

Service Name

Account Number

Deal Name

Monthly Total Data Volumes

Mbytes Uploaded

Mbytes Downloaded

95% peak bandwidth

<service description>

<nxxxxxxr>

<Deal Name>

1111 Mbytes

1111 Mbytes

62.0 kbps

Monthly Report: <Group Aggregator ID> –

<Bill Cycle Date>

Multi Site Deal Name

Aggregator Number

Monthly Total Data Volumes

Mbytes Uploaded

Multi Site Plan

<Aggregator Number>

<Acct Total Mbytes>

Mbytes Downloaded <Acct Total Mbytes>

95% peak bandwidth 39.0 kbps

Uploaded is connected service TO Telstra 1000 Mbytes = 1 Gbyte (GB)

Downloaded is Telstra TO connected service 1000 Gbytes = 1 Tbyte (TB)

95th PERCENTILE (95%) PEAK BANDWIDTH or “bursting usage” is determined based on samples of your service’s peak utilisation taken every 5 minutes during the monthly billing cycle.

At the end of the month all 5 minute samples are sorted highest to lowest. The top 5% of the samples are excluded and the next sample value becomes the 95th percentile peak bandwidth for the month.

01. Welcome to CustData

02. Access and Message Services

03. Navigation and Functionality

04. Usage Threshold Alerts

05. Reports

05.01 Account level & multi site level usage reporting

05.02 Usage meter

05.03 Daily usage reports

05.04 Monthly usage reports

05.05 Scheduled reports

05.06 Trend analysis

05.07 Drilling down into suspect usage

05.08 Checking service changes

05.09 Account level report analysis

05.10 Multi site report analysis

06. Access Control Lists

07. Managing Your Routing

08. Routing Tests

09. Domain Name Service

10. Additional IP Address Services

11. Conclusion

PREVIOUS NEXT

05 REPORTS

05.04.04 Daily Traffic Logs and Traffic Profiles

Included in the monthly report for Individual Services are the daily traffic log, 5 minute traffic log and traffic profile charts. These charts can assist you to identify peak periods during the billing cycle and provide a bandwidth profile of the traffic for your service. Daily traffic logs are also displayed for Account and Multi Site level reports, however, 5 Minute

Polling Log and Traffic profile options are only available at the Individual Service level.

Figure 13. Daily Traffic Log screen – Account level

05.04.05 Daily Traffic Totals

The Daily Traffic Total table within the Monthly Usage

Report provides day-by-day upload and download details for the Individual Service, Account or Multi Site plan.

Figure 14. Daily Traffic Totals screen – Account level

01. Welcome to CustData

02. Access and Message Services

03. Navigation and Functionality

04. Usage Threshold Alerts

05. Reports

05.01 Account level & multi site level usage reporting

05.02 Usage meter

05.03 Daily usage reports

05.04 Monthly usage reports

05.05 Scheduled reports

05.06 Trend analysis

05.07 Drilling down into suspect usage

05.08 Checking service changes

05.09 Account level report analysis

05.10 Multi site report analysis

06. Access Control Lists

07. Managing Your Routing

08. Routing Tests

09. Domain Name Service

10. Additional IP Address Services

11. Conclusion

PREVIOUS NEXT

05 REPORTS

05.04.06 Download Reporting option

A download button has been provided on all reporting screens.

Selecting this button allows you to download your reported data, tabulated in an Excel spreadsheet. You can the use the data to create your own tables and charts as required.

05.05 SCHEDULED REPORTS

05.05.01 To set up Scheduled Reporting

05.05.02 Scheduled Reporting options

05.05.02 Scheduled Reporting options

The following reporting options exist:

• a monthly report at the Account level, covering all services listed on your account

• a monthly report at the Multi Site level, covering all services within the nominated Multi Site plan. Simply select a Multi

Site Aggregator ID from the dropdown list to activate this option. (You must have a Multi Site plan.)

Figure 15. Scheduled reporting screens

If you wish to receive a regular monthly summary (aligned with your billing cycle) of usage for all the services associated with your account, Scheduled Reports will automatically deliver this data in csv format for you.

These reports will detail usage for all services on your

Account and/or Multi Site plan.

This feature is not available for Telstra Wholesale customers with Virtual Internet Service Provider (vISP)

Broadband Services.

05.05.01 To set up Scheduled Reporting

1. Log in to CustData.

2. Navigate to Reports menu at the top-right hand corner of the screen and select Service Usage menu item.

3. On the Usage Meter tab click on Configure Scheduling

Reporting.

4. Choose your preferred Scheduled Reporting option and click save.

Your first report will be generated 48 hours after the completion of your current billing cycle, and 2 days after each subsequent billing cycle. The reports will be emailed to your nominated billing contact, as listed on your Update

Contact Details screen. (Refer to section 02.03.)

Note: Scheduled reports are generated for administration purposes only. They are not a substitute for your monthly

Telstra invoice as we cannot guarantee the completeness of the supplied data.

01. Welcome to CustData

02. Access and Message Services

03. Navigation and Functionality

04. Usage Threshold Alerts

05. Reports

05.01 Account level & multi site level usage reporting

05.02 Usage meter

05.03 Daily usage reports

05.04 Monthly usage reports

05.05 Scheduled reports

05.06 Trend analysis

05.07 Drilling down into suspect usage

05.08 Checking service changes

05.09 Account level report analysis

05.10 Multi site report analysis

06. Access Control Lists

07. Managing Your Routing

08. Routing Tests

09. Domain Name Service

10. Additional IP Address Services

11. Conclusion

PREVIOUS NEXT

05 REPORTS

05.06 TREND ANALYSIS

05.06.01 Producing Reports for a Trend Analysis

05.06.02 Reading the Daily Traffic Usage Graph

05.06.03 Interpreting your data

05.06.04 Analysing the trends

The reporting tools available via CustData can enable you to carry out a trend analysis on your internet service usage.

The process is a relatively simple matter of producing and analysing the available data.

05.06.01 Producing Reports for a Trend Analysis

1. Log in to CustData.

2. Navigate to Reports menu on the top-right corner of the screen and select Service Usage.

3. Click on Daily Reports tab on the Service Usage Reports

Screen.

4. Choose the required Service from the dropdown list.

5. Now select Daily Summary in the Data Type field.

6. Enter the Start and Through to dates for the days you want included; or select dates on screen by opening the

Calendar icon (see section 05.03.02 above).

7. Click on the Generate Report button.

Further assistance is available via Online Help.

Figure 16. Daily Reports screen

05.06.02 Reading the Daily Traffic Usage Graph

Reading the Daily Traffic Usage graph is relatively simple.

You can find info about legends for traffic graphs from Online

Help section which is available from the Support menu on the top right corner of the screen.

In every traffic graph:

• cyan – peak 15-minute usage (daily report only)

• magenta – peak 1-hour usage (daily report only)

• blue – peak 4-hour usage (daily report only)

• red histogram – average uploads (connected service to Telstra)

• green histogram = average downloads (Telstra to the connected service).

The numbers to the left of the graph represent bandwidth in kilobits per second.

Figure 17. Daily Report Graph

Your graphs may differ depending on service speeds and bandwidth usage.

01. Welcome to CustData

02. Access and Message Services

03. Navigation and Functionality

04. Usage Threshold Alerts

05. Reports

05.01 Account level & multi site level usage reporting

05.02 Usage meter

05.03 Daily usage reports

05.04 Monthly usage reports

05.05 Scheduled reports

05.06 Trend analysis

05.07 Drilling down into suspect usage

05.08 Checking service changes

05.09 Account level report analysis

05.10 Multi site report analysis

06. Access Control Lists

07. Managing Your Routing

08. Routing Tests

09. Domain Name Service

10. Additional IP Address Services

11. Conclusion

PREVIOUS NEXT

05 REPORTS

05.06.03 Interpreting your data

The sample graph shows several jumps in usage over the reported period. If these can’t be explained by changes in business activity, it is highly likely that other issues are affecting the service.

A more detailed analysis shows:

• an increase in uploads from the service to Telstra Internet

Direct (in red) in January, April, July through August, and

September through early November

• increasing downloads from Telstra Internet Direct to this service (in green) in January, July through August, and

September through early November. Note that all downloads count as billable usage

• apparently normal usage in February/March and May/June

• looking closely, the red line (sent traffic) is almost equal to the green line (received traffic). When the green line is dominant, the red will appear as a stripe in the green histogram.

05.06.04 Analysing the trends

05.06.04.01 Analysing upload increases

05.06.04.02 Analysing download increases

05.06.04.03 Analysing uploads over downloads

In the sample, the increasing uploads may still not have added billable charges to your account, as Telstra Internet

Connect includes free uploads up to the Backchannel

Threshold Ratio of 1:4. (ie upload traffic remains less than one-fourth of downloads.)

Similarly, significant increases in download traffic may not affect your bill if you had chosen a fixed price plan, but the speed of your service could be downgraded if downloads exceed the plan’s preset level.

Regular monitoring of your service usage through CustData can help you become aware of increasing traffic levels before they impact your bill or service speed.

Important: Any further investigation should be conducted at the Individual Service level.

05.06.04.01 Analysing upload increases

Possible causes of increasing upload traffic include:

• significant increases in the number of emails being sent

(a change to online catalogue distribution, for example)

• a server being hijacked and used as a launch site for spam

• malicious activity such as a Denial of Service (DOS) attack

• more frequent use of the website by the public (ie more content is being sent from the web server to other parties)

• PC, mail server or network malfunction.

Of course, this list is far from exhaustive and only illustrates some of the more common causes for increased traffic.

05.06.04.02 Analysing download increases

Possible causes of increasing download traffic include:

• a natural increase in online activity. Normally, however, such increases are more organic and don’t occur in spurts

• malicious activity such as a virus or DOS attack

• large web downloads such as music and video can cause huge increases in activity.

Of course, this list is far from exhaustive and only illustrates some of the more common causes for increased traffic.

05.06.04.03 Analysing uploads over downloads

A service may generate more upload usage than download usage when:

• Data is rejected due to improper router configuration.

When a data packet is sent, the receiving router consults its routing table and forwards the data to the appropriate interface. If your router isn’t configured properly the data packet may be sent back to the default gateway (the Telstra

Internet Direct access router in this case). The access router will then send the packet back to your router, in accordance with its routing table. In this way, a closed loop is established between the your misconfigured router and its default gateway – generating an endless traffic source.

01. Welcome to CustData

02. Access and Message Services

03. Navigation and Functionality

04. Usage Threshold Alerts

05. Reports

05.01 Account level & multi site level usage reporting

05.02 Usage meter

05.03 Daily usage reports

05.04 Monthly usage reports

05.05 Scheduled reports

05.06 Trend analysis

05.07 Drilling down into suspect usage

05.08 Checking service changes

05.09 Account level report analysis

05.10 Multi site report analysis

06. Access Control Lists

07. Managing Your Routing

08. Routing Tests

09. Domain Name Service

10. Additional IP Address Services

11. Conclusion

PREVIOUS NEXT

05 REPORTS

• Equipment being used as a data relay. Data traffic, especially email, is often relayed via an intermediate router to affect delivery. However, allowing unknown users to relay data via your equipment (an Open Relay) increases traffic on your account. Services that use Open Relay type services include Open WEB Proxy, Open Mail Relay, Open Socks Proxy, and Anonymous FTP (for sending and receiving files and a host of others. Allowing Open Relay or Open proxy services on your equipment leaves your account open for abuse by spammers, amongst others. Your servers may even be blacklisted as a source of unwanted email.

Again, there are other reason why uploads may exceed downloads. However, this event always warrants careful scrutiny of your equipment and online activity.

5. Now select 5 Minute Polling Data in the Data Type field.

6. Enter the Start and Through to dates for the days you want included; or select dates on screen by opening the

Calendar icon (see section 05.03.02).

7. Click on the Generate Report button.

Further assistance is available via Online Help.

Note: 5 Minute Polling is only available at the Individual

Service reporting level.

05.07.02 Interpreting the graph

In 5 Minute Polling Graphs:

• red line – uploads (connected service to Telstra)

• green line – downloads (Telstra to the connected service).

Figure 18. Daily Report Traffic Plot

05.07 DRILLING DOWN INTO SUSPECT USAGE

05.07.01 Producing 5 Minute Polling Reports

05.07.02 Interpreting the graph

05.07.03 Analysing the results

05.07.04 Identifying the cause

05.07.05 Identifying the solution for malicious activity

Once you have identified a period of inconsistent or suspect traffic usage, CustData allows you to drill down into that period to see the usage patterns in more detail.

05.07.01 Producing 5 Minute Polling Reports

1. Log in to CustData.

2. Navigate to Reports menu at the top-right hand corner and select Service Reports menu item.

3. Click on Daily Reports tab on the Service Usage

Reports screen.

4. Choose the required Service from the dropdown list.

In this example, the uploads and downloads show a close correlation. This is unusual in itself. There is also little difference between day and night. A typical traffic pattern would have noticeable peak periods and a long quiet downtime.

01. Welcome to CustData

02. Access and Message Services

03. Navigation and Functionality

04. Usage Threshold Alerts

05. Reports

05.01 Account level & multi site level usage reporting

05.02 Usage meter

05.03 Daily usage reports

05.04 Monthly usage reports

05.05 Scheduled reports

05.06 Trend analysis

05.07 Drilling down into suspect usage

05.08 Checking service changes

05.09 Account level report analysis

05.10 Multi site report analysis

06. Access Control Lists

07. Managing Your Routing

08. Routing Tests

09. Domain Name Service

10. Additional IP Address Services

11. Conclusion

PREVIOUS NEXT

05 REPORTS

So overall, these traffic patterns appear highly suspicious.

This can be confirmed by checking the tabulated usage data for the same period, as shown below:

Figure 19. Daily Report Tabulated Data

The tabulated report includes five data columns.

From left to right, these are:

1. Date:time

2. Upload bandwidth in kilobits per second (kbps) averaged over the 5 minute period

Download bandwidth in kilobits per second (kbps) averaged over the 5 minute period

4. Upload usage for the 5 minutes, in bytes

5. Download usage for the 5 minutes, in bytes.

05.07.03 Analysing the results

Business data patterns will normally vary quite a bit over 24 hours – dropping considerably after hours, for example.

A typical office running a mail server with people accessing the web will probably send a lot more data than it receives, and encounter less traffic overnight. On the other hand, a business hosting a number of websites and/or mail services might have more data going out than in, and traffic at night could be quite high.

Carrying out regular trend analyses and establishing typical patterns for your business will make it easier to identify any unusual changes in your usage.

05.07.04 Identifying the cause

Going back to our example, the tabulated data confirms high traffic (with similar upload and download levels) outside normal business hours. This could well indicate that data is being turned around or rejected by a site. Some of the most common causes include:

• poorly configured router causing a routing loop

(See section 05.06.04.03)

• malicious activity such as virus or Denial of Service

(DOS) attacks

• your equipment is being used for proxy services. There are numerous proxy services that servers can offer, depending on the operating system and router configuration.

A few more common examples include:

• open web proxy – having a web proxy server that allows access by external internet users means an unknown user can have their browser set up to use your server as their proxy. This can result in high volumes of unwanted traffic being passed through your proxy server – clogging your service and causing excessive usage

01. Welcome to CustData

02. Access and Message Services

03. Navigation and Functionality

04. Usage Threshold Alerts

05. Reports

05.01 Account level & multi site level usage reporting

05.02 Usage meter

05.03 Daily usage reports

05.04 Monthly usage reports

05.05 Scheduled reports

05.06 Trend analysis

05.07 Drilling down into suspect usage

05.08 Checking service changes

05.09 Account level report analysis

05.10 Multi site report analysis

06. Access Control Lists

07. Managing Your Routing

08. Routing Tests

09. Domain Name Service

10. Additional IP Address Services

11. Conclusion

PREVIOUS NEXT

05 REPORTS

• open sock proxy – this also allows unknown external users to generate unwanted data, emails, web requests, etc on your server

• your equipment is being used for Mail Relay. A mail server set up in Open Relay can be used by unknown parties to relay mail to unknown recipients or other mail servers.

In other words, your server can be used to distribute spam or other illegal emails

• your equipment is being used as another kind of relay,

FTP dump, etc. Allowing full access to ‘anonymous FTP’ can result in your server being used to store and forward very large data files to internet users worldwide – without your knowledge, but at your expense. If your site allows

FTP services, it should be configured to prevent unknown users from writing data to your server.

Note: This is not an exhaustive list and you should consult with your IT support.

Be aware that servers found to be in open proxy or open relay may be included on Black Hole lists, and can have extreme difficulty sending legitimate mail and data to domains that subscribe to these lists.

05.07.05 Identifying the solution for Malicious activity

Introducing Telstra Cloud Applications

A security compromise such as a virus, Trojan or hacking is the most obvious cause of unauthorised data usage. Telstra offers a range of security options as Cloud based applications to help you protect your business information.

Email and Web Security applications

Telstra offers a number of applications which help you protect your business by providing state-of-the-art security for a low monthly fee through T-suite applications. Installation occurs over the web with updates applied automatically, even when you are out of the office, providing hassle-free access to the very latest virus detection every time your staff log on.

Email and Web Security applications include:

• McAfee

® security)

SaaS Endpoint Protection (server and desktop

• Symantec

™ anti-spam)

Email Protect.cloud (email anti-virus and

• Symantec.cloud Email Safeguard (emails anti-virus and anti-spam, and blocks inappropriate email use)

• Symantec.cloud Web Safeguard (web anti-virus and anti-spyware, and also controls and monitors web use)

• Symantec.cloud Email and Web Safeguard.

Along with a low monthly subscription, most T-Suite applications include a 30-day free trial.

To find out more about the benefits of using T-Suite applications and how these services make protecting your business easy:

• visit telstrabusiness.com

• call 1800 878 483 9am to 5pm AEST, Monday to Friday.

05.08 CHECKING SERVICE CHANGES

Every time you make a change to your service, it’s best to check that the changes haven’t caused an adverse effect.

The data shown in Figures 18 and 19 in 05.07.02, for example, highlight an incorrectly configured router which can then be fixed. The graph below shows 5 Minute Polling Data for approximately 12 days on the same service – before and after the router was reconfigured.

01. Welcome to CustData

02. Access and Message Services

03. Navigation and Functionality

04. Usage Threshold Alerts

05. Reports

05.01 Account level & multi site level usage reporting

05.02 Usage meter

05.03 Daily usage reports

05.04 Monthly usage reports

05.05 Scheduled reports

05.06 Trend analysis

05.07 Drilling down into suspect usage

05.08 Checking service changes

05.09 Account level report analysis

05.10 Multi site report analysis

06. Access Control Lists

07. Managing Your Routing

08. Routing Tests

09. Domain Name Service

10. Additional IP Address Services

11. Conclusion

PREVIOUS NEXT

05 REPORTS

Figure 20. Daily Report Traffic Plot.

There was a sharp decline in traffic as soon as the offending router was fixed. From that point there is a distinct difference between business and non-business hours, with almost no traffic on weekends. There is also a significant difference between upload and download traffic, which represents normal usage patterns.

05.09 ACCOUNT LEVEL REPORT ANALYSIS

Account level reporting can be used to identify trends across the entire account, with both graphical and tabular data being available.

Account level analysis is best managed by using the

Scheduled Reporting option. (Refer to section 05.05.)

Schedule Reports are sent automatically after each billing cycle and detail the account level records with aggregated service usage data.

You can use the data to follow some of the suggested trend analysis activities outlined above.

05.10 MULTI SITE REPORT ANALYSIS

Multi Site reporting allows you to review and analyse aggregated usage data for a whole Multi Site plan.

Both graphical and tabular data is available on screen.

As with Account level analysis, Multi Site data is best managed with scheduled reporting. (Refer to section 05.05.)

Schedule reports are sent automatically after each billing cycle and will provide aggregated details of usage for the

Multi Site plan.

You can use the data to follow some of the suggested trend analysis activities outlined above.

01. Welcome to CustData

02. Access and Message Services

03. Navigation and Functionality

04. Usage Threshold Alerts

05. Reports

06. Access Control Lists

06.01 Tips for using ACLs

06.02 ACL management

06.03 Manage ACLs

06.04 Example of a poor ACL

06.05 Testing your ACL

06.06 Deleting and ACL

07. Managing Your Routing

08. Routing Tests

09. Domain Name Service

10. Additional IP Address Services

11. Conclusion

PREVIOUS NEXT

06 ACCESS CONTROL LISTS

You can use CustData to create, manage and apply Access Control

Lists (ACLs) on Ethernet, ATM and Serial (eg Megalink) interfaces.

Your ACLs are then applied outbound on the interface pointing to your service.

Up to 20 lines can be entered into each list.

Internet Protocol version 4 (IPv4) ACLs are supported for Ethernet, ATM and Serial services.

Internet Protocol version 6 (IPv6) ACLs are supported for Ethernet services only.

Note: You are responsible for understanding and managing the ACLs on your Telstra Internet Direct Service:

• you need to read and accept (via a web button) the

Conditions of Use, and provide an Operations Contact, before you can implement any ACLs

• you will not be able to create an ACL that blocks you from accessing CustData. You must be able to manage your own ACLs

• we cannot apply any ACLs on your behalf.

ACLs are not available with ADSL, BDSL, FTTP, NBN or

Frame Relay services, for technical and security reasons.

06.01 TIPS FOR USING ACLS

06.01.01 Priorities

06.01.02 Wildcards

06.01.03 Protocol errors

06.01.04 Syntax errors

06.01.05 Planning

By default, an ACL is NOT applied to your service. Once you configure an ACL entry via CustData, it will have an implied

“deny ip any any” (deny everything) rule at the end of the list.

06.01.01 Priorities

All ACLs are read from top to bottom. Once a rule has been met, the checking stops.

For example, in the list:

1. permit tcp any host 10.10.10.10 eq smtp

2. deny ip any any

3. permit tcp any eq www any

The first line will allow mail through from any address to the host 10.10.10.10

The second line will deny any IP from any address to any address.

The third line, allowing www data through, will never be read – because the second line has already provided a criterion for all addresses.

So this access list will allow mail through to 10.10.10.10 and deny everything else.

01. Welcome to CustData

02. Access and Message Services

03. Navigation and Functionality

04. Usage Threshold Alerts

05. Reports

06. Access Control Lists

06.01 Tips for using ACLs

06.02 ACL management

06.03 Manage ACLs

06.04 Example of a poor ACL

06.05 Testing your ACL

06.06 Deleting and ACL

07. Managing Your Routing

08. Routing Tests

09. Domain Name Service

10. Additional IP Address Services

11. Conclusion

PREVIOUS NEXT

06 ACCESS CONTROL LISTS

06.01.02 Wildcards

Incorrect addresses and wildcards will be accepted, as any valid IP address can be added to an ACL. Therefore, wildcard masking must be clearly understood and correctly applied.

An incorrect wildcard mask may produce unexpected results.

Here are some examples of IPv4 address wildcard masking:

Network

10.10.10.0

10.10.10.0

10.10.10.0

10.10.10.0

10.10.10.0

10.10.10.0

10.10.10.0

10.10.10.0

Netmask

255.254.0.0

255.255.255.0

255.255.255.128

255.255.255.192

255.255.255.224

255.255.255.240

255.255.255.248

255.255.255.252

CIDR

Notation

10.10.10.0/23

10.10.10.0/24

10.10.10.0/25

10.10.10.0/26

10.10.10.0/27

10.10.10.0/28

10.10.10.0/29

10.10.10.0/30

Network/

Wildcard

10.10.10.0 0.0.1.255

10.10.10.0 0.0.0.255

10.10.10.0 0.0.0.127

10.10.10.0 0.0.0.63

10.10.10.0 0.0.0.31

10.10.10.0 0.0.0.15

10.10.10.0 0.0.0.7

10.10.10.0 0.0.0.3

IPv6 ACLs follow a simpler format compared to IPv4. Wildcards are not used, rather, the prefix length identifies the valid IPv6 range much like IPv4 CIDR notation.

For example, an IPv6 network identified as 2001:db8:e::/60 is specified in the ACL with an address of 2001:db8:e:: and a prefix length of 60.

Supported prefix lengths are/0 to/64. Host/128 entries are also supported. See RFC4291 for valid text representations of IPv6 addresses.

06.01.03 Protocol errors

Errors will occur if an incorrect protocol is added to an ACL, as CustData may accept lines that cannot be accepted by the router.

When the Apply Access List button has been clicked the following error message may be returned: Failed to add access list to the access router. For further assistance, please ring the Technical Helpdesk. Refer to Section 11.01 for contact details.

In these cases, the line in error will simply not be added to the router’s configuration. However any correct lines will still be added to the router’s configuration.

06.01.04 Syntax errors

CustData can recognise incorrect syntax and generate an error message. The line containing the error will not be added to the ACL.

For example, the line: permit tcp host 10.10.10.10 eq any gt 1 will result in an error message because a port number must be added after the match “eq” statement.

(If an access line is to cover all ports, select N/A in the

Match area.)

06.01.05 Planning

The easiest way to avoid errors in your ACLs is to design your rules first, using a spreadsheet.

CustData will allow you to reorganise the lines of your ACL, however it is good practice to design your ACL (reading from top to bottom) first. Doing so can help you check that the list will behave as expected and provide you with a record of your intentions.

01. Welcome to CustData

02. Access and Message Services

03. Navigation and Functionality

04. Usage Threshold Alerts

05. Reports

06. Access Control Lists

06.01 Tips for using ACLs

06.02 ACL management

06.03 Manage ACLs

06.04 Example of a poor ACL

06.05 Testing your ACL

06.06 Deleting and ACL

07. Managing Your Routing

08. Routing Tests

09. Domain Name Service

10. Additional IP Address Services

11. Conclusion

PREVIOUS NEXT

06 ACCESS CONTROL LISTS

The best method is to write your intention, and then the

ACL line. For example:

Rule

Permit any tcp reply to requests generated here

Permit any host mail access to host 10.10.10.10

Permit host 10.6.6.6 telnet access to servers 8 through 11

Permit hosts in the

2001:db8:e::/60 network to access the web server

ACL Line

permit tcp any any established permit tcp any host

10.10.10.10 eq 25 permit tcp host 10.6.6.6

10.10.10.8 0.0.0.3 eq 23 permit tcp 2001:db8:e::/

60 host 2001:db8:e::401 eq 443

Note: These tips are provided to highlight a few of the common traps to avoid when using ACLs with CustData.

This is not intended to be a substitute for proper training in the design and writing of ACLs.

06.02 ACL MANAGEMENT

06.02.01 Provide an Operations Contact

06.02.02 Enter via the Conditions of Use

Before you can enter the Access Control List Management area of CustData, you must provide an Operations Contact and agree to the Conditions of Use.

06.02.01 Provide an Operations Contact

1. Log in to CustData.

2. Click on Account Management quick link provided on the home page.

3. Click on the Update Contact Details tab.

4. Click the Edit button next to the Operations line.

You’ll then be able to enter and save contact details for your Operations Contact.

Figure 21. Manage Account screen

06.02.02 Access Control Lists Page

To view the ACL Summary screen, select Service from

Manage menu on the top right hand corner of Custdata.

The Access Control screen will show you all IPv4 and IPv6

Access Lists for your respective Service.

To view or edit an ACL simply select the service from the list provided in the Access Control List screen.

Figure 22. Access Control Lists page

01. Welcome to CustData

02. Access and Message Services

03. Navigation and Functionality

04. Usage Threshold Alerts

05. Reports

06. Access Control Lists

06.01 Tips for using ACLs

06.02 ACL management

06.03 Manage ACLs

06.04 Example of a poor ACL

06.05 Testing your ACL

06.06 Deleting and ACL

07. Managing Your Routing

08. Routing Tests

09. Domain Name Service

10. Additional IP Address Services

11. Conclusion

PREVIOUS NEXT

06 ACCESS CONTROL LISTS

06.03 MANAGE ACLS

06.03.01 Step 1 – ACL Type

06.03.02 Step 2 – Source Address and Ports

06.03.03 Step 3 – Destination Address and Ports

06.03.04 Suffix

06.03.05 The ‘Apply Access List’ button

Figure 23. Create/Amend Access Control Lists

Figure 24. View/Edit ACL – ACL Type

To create or modify ACLs for a service, select appropriate

Service on the Access Control List page and click on Manage

ACL link provided at the bottom right corner of the ACL frame.

You will be taken to the Manage ACL page.

To create a new rule, click on Add Line button (your rules must comply with the criteria for creating an ACL on a Cisco Router).

06.03.01 Step 1 – ACL Type

Each ACL line must start with the ACL address family

(IPv4 or IPv6), a Rule type (Deny, Permit, or Remark) and the protocol (must be ICMP, IP, IPv6, TCP or UDP).

Select appropriate values from ACL, Rule and Protocol drop down fields respectively.

06.03.02 Step 2 – Source Address and Ports

Each ACL line must have Source Address Details

(Any, Host, or Network).

Any does not require an address.

Host requires a specific host IPv4 or IPv6 address.

Network is defined by a starting address and wildcard

(A.B.C.D) for IPv4 or prefix length for IPv6.

IPv4 eg Address 10.10.10.10 wildcard 0.0.0.127 – for an address range of 10.10.10.0/25

IPv6 eg Address 2001:db8:e::1 prefix length 60 – for an address range of 2001:db8:e::/60

Each line must also have a rule for matching the type and ports (or range of ports):

eq (equal to) must have a specific port number.

gt (greater than) must have a specific port number.

lt (less than) must have a specific port number.

neq (not equal to) must have a specific port number range, with the starting port and the ending port separated by a space, eg “135 140” means “from ports 135 to 140”

(inclusive).

N/A (not applicable) is used when all ports are affected by the rule.

01. Welcome to CustData

02. Access and Message Services

03. Navigation and Functionality

04. Usage Threshold Alerts

05. Reports

06. Access Control Lists

06.01 Tips for using ACLs

06.02 ACL management

06.03 Manage ACLs

06.04 Example of a poor ACL

06.05 Testing your ACL

06.06 Deleting and ACL

07. Managing Your Routing

08. Routing Tests

09. Domain Name Service

10. Additional IP Address Services

11. Conclusion

PREVIOUS NEXT

Figure 25. View/Edit ACL – Source

06 ACCESS CONTROL LISTS

Figure 26. View/Edit ACL – Destination

06.03.03 Step 3 – Destination Address and Ports

Each ACL line must include Destination Address Details

(Any, Host, or Network).

Any does not require an address.

Host requires a specific host IPv4 or IPv6 address.

Network is defined by a starting address and wildcard

(A.B.C.D) for IPv4 or prefix length for IPv6.

IPv4 example: Address 10.10.10.10 wildcard 0.0.0.127 – for an address range of 10.10.10.0/25

IPv6 example: Address 2001:db8:e::1 prefix length 60 – for an address range of 2001:db8:e::/60

Each line must also have a rule for matching the type and ports (or range of ports):

eq (equal to) must have a specific port number.

gt (greater than) must have a specific port number.

lt (less than) must have a specific port number.

neq (not equal to) must have a specific port number range, with the starting port and the ending port separated by a space, eg “135 140” means “from ports 135 to 140”

(inclusive).

N/A (not applicable) is used when all ports are affected by the rule.

06.03.04 Suffix

An ACL line may also contain the ‘Established’ suffix.

This is a TCP option, used when the session has already been established at the destination end or by a previously enacted rule.

06.03.05 The ‘Apply Access List’ button

Once you have gone through the steps in sections 6.03.01 through 6.03.04, click on the Submit button.

Figure 27. Manage ACL – Apply Access List

Note the implied “deny ip any any” at the end of the list shown above. (If applied, this list would only permit the address range

172.16.16.0 to 15 to access telnet on host 10.10.10.10. All other traffic would be denied.) Click on Apply Access List to apply to router.

01. Welcome to CustData

02. Access and Message Services

03. Navigation and Functionality

04. Usage Threshold Alerts

05. Reports

06. Access Control Lists

06.01 Tips for using ACLs

06.02 ACL management

06.03 Manage ACLs

06.04 Example of a poor ACL

06.05 Testing your ACL

06.06 Deleting and ACL

07. Managing Your Routing

08. Routing Tests

09. Domain Name Service

10. Additional IP Address Services

11. Conclusion

PREVIOUS NEXT

06 ACCESS CONTROL LISTS

06.04 EXAMPLE OF A POOR ACL

Figure 28. Incorrect entries in a pending Access Control List

This list highlights the importance of constructing and writing ACLs carefully. While ACLs can be reorganised within CustData, correctly designing access lists on paper or a spreadsheet first will save time and the reduce the likelihood of introducing errors.

06.05 TESTING YOUR ACL

Once you have created your ACL, you should test it from a remote site.

To test the example given in Figure 28:

Telnet from devices in the 172.16.16.0.255.255.255.240 network to host 10.10.10.10 (Use devices from both end of the range, as well as in the middle).

The Access Control List shown on this screen has several problems:

• Line 1: permit TCP 172.16.16.1.1.1.15 host 10.10.10.10 eq telnet The rule is valid and will allow telnet access from 172.16.16.0/28 to 10.10.10.10.

• Line 2: permit udp any 10.10.10.0 0.0.0.255 eq finger.

While this line may look fine, ‘finger’ is a TCP option and is not available in UDP. This line will not be written to the router and CustData will display an error message after the ACL is applied.

• Line 3: “deny ip any any statement” This line is valid.

However, recall that ACLs are read from the top down and stopped when a match has been found. As this line will match any address on any port, it will act on all traffic that didn’t match one of the earlier rules and no further lines will be read.

• Line 4: This line was probably intended to allow any outgoing requests to receive a response. With good ACL design, it would have been more efficient to write this line early. Then fewer lines would need to be red in many cases, speeding up the data handling.

• Line 5: This line would have allowed mail servers to respond to mail being sent to them – however this was probably not the intention. Line 5 was more likely intended that mail could be sent to the mail server, and should have been written as

“permit tcp any host 10.10.10.10 eq 25”.

06.06 DELETING AN ACL

To delete an access control list, navigate to the Manage

ACL page (refer section 06.03), then click on the Delete

Access List button. This will clear the ACL from the router and from CustData.

Figure 29. Delete ACL

01. Welcome to CustData

02. Access and Message Services

03. Navigation and Functionality

04. Usage Threshold Alerts

05. Reports

06. Access Control Lists

07. Managing Your Routing

07.01 Maintaining your contact details

07.02 Changing routing to your service

07.03 Manage the IPV6 prefix delegation for your

ADSL service

07.04 Test your changes

08. Routing Tests

09. Domain Name Service

10. Additional IP Address Services

11. Conclusion

07 MANAGING YOUR ROUTING

CustData gives you the ability to manage many routing options for your

Telstra Internet Direct service. This means you can better control and customise your service, at any time that it suits you.

Note: The Routing feature is not available for Telstra services on the NBN.

07.01 MAINTAINING YOUR CONTACT DETAILS

07.01.01 IP addresses allocated by Telstra

07.01.02 IP addresses not allocated by Telstra

Before you can use CustData to manage the routing to your service, you need to set up a Routing contact in the Update

Contact Details tab of Manage Account section. (See section

02.03 for instructions.)

When a change is made to your routing via CustData, an email requesting approval for the change will be sent to the contact for the relevant IP address block, as listed in the register of the body that allocates that IP address range.

While the Routing contact you nominate in CustData Update

Contact Details section does not have to be the same as this registered contact, it is preferable.

It is important that both sets of contact details are updated if the listed person leaves your organisation and/or their email address changes.

07.01.01 IP addresses allocated by Telstra

You must take the time to maintain accurate contact details.

Here’s how to check the current registered contact details for an IP address range allocated by Telstra:

1. Log in to CustData

2. Select Service menu option from Manage menu on the top right corner of the Home screen.

3. Click on IP Routing tab on the Manage Service screen.

4. At the bottom of the screen, click on Contact details for

Telstra-allocated IP blocks

5. Check that the email address is correct. Remember, this email address is where approval requests for all routing changes will be sent for confirmation before they are actioned

6. Make any required changes and click on the

Submit button.

Further assistance is available via Online Help.

PREVIOUS NEXT

01. Welcome to CustData

02. Access and Message Services

03. Navigation and Functionality

04. Usage Threshold Alerts

05. Reports

06. Access Control Lists

07. Managing Your Routing

07.01 Maintaining your contact details

07.02 Changing routing to your service

07.03 Manage the IPV6 prefix delegation for your

ADSL service

07.04 Test your changes

08. Routing Tests

09. Domain Name Service

10. Additional IP Address Services

11. Conclusion

07 MANAGING YOUR ROUTING

Figure 30. IP Routing screen

07.02 CHANGING ROUTING TO YOUR SERVICE

07.02.01 To change routing to your service

07.02.02 Add static routes

07.02.03 Add BGP routes

07.02.04 Subnetting

07.02.05 Deleting address ranges

07.02.06 Update as path filter

07.01.02 IP addresses not allocated by Telstra

07.01.02.01 Non-Telstra IPv4 subnets

You will need to call the Telstra Business Technical Helpdesk

(refer to Section 11 for contact details) if you are subnetting

Class B or Class C IPv4 address ranges not assigned to you by

Telstra. (If you’re not sure who your IP Address registrar is, you can check by using the Whois lookup service at www.apnic.

com) Please note that the minimum subnet advertisement that can be propagated between ISPs is a/24 subnet (Class C).

If you intend to assign a smaller subnet than this (/25 to/32) from your non-Telstra allocated IP address range to any of your Broadband services, you will need to call the Technical

Helpdesk (refer to Section 11 for contact details) to establish a/24 summary route before you request routing changes through CustData.

07.01.02.02 Non-Telstra IPv6 subnets

The longest IPv6 prefix length advertisement which can be propagated between ISPs is a/48 subnet. The/48 prefix route must be originated from the customer AS. The longest prefixlength that Telstra will accept for a route advertised to it using

BGP is/48. Telstra Internet Direct customers may use address blocks of prefix-length up to/56 for prefix delegation on their

ADSL Services.

You can use CustData to control the routing to your service.

However, the following important notes apply: use extreme care – a mistake could remove your IP networks from the internet if you have IP Addresses that are not allocated by Telstra, refer to section 07.01.02 for important routing policy information. (You may need to contact the Technical

Helpdesk (refer to Section 11 for contact details) for assistance with creating summary routes

Routing change implementation is scheduled at 08:05,

10:05, 12:05, 14:05, 16:05, 18:05, 20:05, 22:05 and 00:05

AEST (or AEDT during daylight savings period in eastern states) daily

RADIUS server login authentication. Telstra Internet

Direct connections via ADSL set up user details in the

Telstra Internet Direct access router and use a RADIUS server for login authentication. If you submit a routing request for one of these services you will need to disconnect from the service and reconnect at least 1 hour after the change has been authorised and implemented.

Authorised routing changes will not take effect until after you have disconnected and reconnected test your service. Once changes have been implemented, we highly recommend that you use CustData to test your service for correct configuration. Please see Section 08 for information about Routing Tests.

PREVIOUS NEXT

01. Welcome to CustData

02. Access and Message Services

03. Navigation and Functionality

04. Usage Threshold Alerts

05. Reports

06. Access Control Lists

07. Managing Your Routing

07.01 Maintaining your contact details

07.02 Changing routing to your service

07.03 Manage the IPV6 prefix delegation for your

ADSL service

07.04 Test your changes

08. Routing Tests

09. Domain Name Service

10. Additional IP Address Services

11. Conclusion

07 MANAGING YOUR ROUTING

07.02.01 To change routing to your service

1. Log in to CustData.

2. Select Service menu item from the Manage menu on the top right corner of the Home screen.

3. Click on IP Routing tab on the Manage Service screen.

4. Click on the View/Edit Routes button for the relevant service you would like to view or modify.

5. Add, change or delete routes as described below.

07.02.02 Add Static Routes

Use this procedure if your service uses Static routing.

1. Access the View/Edit Routes screen as described in

Section 07.02.01.

2. Enter the new route in the Network Address field and select the CIDR value.

07.02.03 Add BGP Routes

Use this procedure if your service uses BGP routing.

To update your AS Filter, refer to Section 07.02.06.

1. Access the View/Edit Routes screen as described in

Section 07.02.01.

2. If you only need to add a single prefix to your BGP filter/ prefix list, leave the Variable Prefix checkbox unticked, enter the new prefix in the Network Address field and select the CIDR value. See the screenshot below for an example – this would be an exact match for prefix

203.50.0.0 with subnet mask 255.255.252.0.

3. Click the Add button after you have entered the prefix details.

4. In the next confirmation screen, clicking the Submit button will automatically send an authorisation email to the registered contact of the prefix. It is imperative that this email is responded to promptly and exactly as instructed.

The request will be in Pending Approval status until it has been authorised.

5. When authorisation is received the request will be updated to Approved Pending Action status.

6. The new static route will be added to the access router at the next scheduled implementation time (see note 3 in Section 07.02 for routing implementation schedule).

If you want to specify a range of prefix lengths for a given prefix, tick the Variable Prefix checkbox, enter the new prefix in the Network Address field and select the CIDR value.

Then select the upper and lower bounds of the prefix length to match on using the ge (greater than or equal to) and le

(less than or equal to) fields. See the screenshot below for an example – this would match on any prefix in the IP address block 203.50.0.0/16 with a prefix length between 20 and 24 bits, inclusive.

3. Click the Add button after you have entered the prefix details.

4. In the next confirmation screen, clicking the Submit button will automatically send an authorisation email to the registered contact of the prefix. It is imperative that this email is responded to promptly and exactly as instructed.

The request will be in Pending Approval status until it has been authorised.

5. When authorisation is received the request will be updated to Approved Pending Action status.

6. The new prefix will be added to the access router at the next scheduled implementation time (see note 3 in Section

07.02 for routing implementation schedule).

PREVIOUS NEXT

01. Welcome to CustData

02. Access and Message Services

03. Navigation and Functionality

04. Usage Threshold Alerts

05. Reports

06. Access Control Lists

07. Managing Your Routing

07.01 Maintaining your contact details

07.02 Changing routing to your service

07.03 Manage the IPV6 prefix delegation for your

ADSL service

07.04 Test your changes

08. Routing Tests

09. Domain Name Service

10. Additional IP Address Services

11. Conclusion

07 MANAGING YOUR ROUTING

07.02.04 Subnetting

1. Follow 07.02.01 and 07.02.02 (above) to change the size of your IP address range.

2. Once the new range has been added, it will be safe to delete the existing range. (The same email authorisation and action procedures apply as for adding address ranges.)

Note: If your IP address range is not allocated by Telstra, you need to call the Technical Helpdesk (refer to Section 11 for contact details) to confirm that any routing changes will not remove your broadband service from the internet.

If your subnet address range is less than Class C (/24) then a summary route will need to be established before you request routing changes through CustData.

07.02.05 Delete routes

1. Access the View/Edit Routes screen as described in 07.02.01.

2. Click on the Delete button at the right of the range

To be deleted.

3. The request will be listed as Pending Approval.

4. CustData will automatically send an authorisation email to the registered contact. It is imperative that this email is responded to promptly and exactly as instructed.

5. When authorisation is received the changes will be implemented in the next scheduled session.

(See Note 3 of 07.02 for times.)

07.02.06 Update AS Path Filter

Use this procedure if your service uses BGP routing and you want to update your Autonomous System (AS) path filter.

1. Log in to CustData.

2. Select Service menu item from the Manage menu at the top right hand of the Home screen.

3. Select IP Routing tab from the Manage Service screen.

4. Click on the View/Edit AS Filters button.

5. Enter the AS number in the Add AS Number field.

6. Select whether the AS is terminating, transiting or terminating and transiting using the AS Type drop-down.

Terminating – TID network will accept routes that have originated from the specified AS.

Transiting – TID network will accept routes that have passed through the specified AS. If you are using AS path prepending to influence route selection, set the prepended

AS numbers as Transiting.

Transiting and Terminating – TID network will accept routes that have originated from or passed through the specified AS.

7. Click Submit to confirm the changes. Your AS path filter will be updated on the access router at the next scheduled implementation time (see note 3 in Section 07.02 for implementation schedule).

Please be aware that in some cases adding more than 31 transiting AS Numbers will be unsuccessful without warning.

Please contact Telstra for assistance in such cases.

PREVIOUS NEXT

01. Welcome to CustData

02. Access and Message Services

03. Navigation and Functionality

04. Usage Threshold Alerts

05. Reports

06. Access Control Lists

07. Managing Your Routing

07.01 Maintaining your contact details

07.02 Changing routing to your service

07.03 Manage the IPV6 prefix delegation for your

ADSL service

07.04 Test your changes

08. Routing Tests

09. Domain Name Service

10. Additional IP Address Services

11. Conclusion

07 MANAGING YOUR ROUTING

07.03 MANAGE THE IPV6 PREFIX

DELEGATION FOR YOUR ADSL SERVICE

07.03.01 View Delegated IPv6 Prefix

07.03.02 Add Delegated IPv6 Prefix

07.03.03 Modify Delegated IPv6 Prefix

07.03.04 Delete Delegated IPv6 Prefix

This section applies only to IPv6-enabled (ie dual-stack)

ADSL services.

You can use CustData to manage the Delegated IPv6

Prefix associated with your ADSL service. The term Delegated

IPv6 Prefix refers to a RADIUS attribute that carries an IPv6 prefix to be delegated to you, for use in the your network.

For example, a prefix in a Delegated IPv6 Prefix attribute can be further delegated to another node through DHCP

Prefix Delegation.

The following important notes apply:

1. use extreme care – a mistake could disconnect you from the internet

2. customers with IPv6 prefixes allocated by Telstra are only permitted to view their Delegated IPv6 Prefix

3. customers with IPv6 prefixes not allocated by Telstra

(ie provider-independent allocations) are permitted to view and modify their Delegated IPv6 Prefix. Refer to section

07.01.02 for important routing policy information

4. IPv6 Prefix change implementation is scheduled to occur every hour on the hour

5. RADIUS server login authentication. Telstra Internet

Direct connections via ADSL use a RADIUS server for login authentication. If you submit a delegated IPv6 prefix change request, you will need to reset your modem after the change has been authorised and implemented in order for the change to take effect

6. test your service. Once changes have been implemented, we highly recommend that you use CustData to test your service for correct configuration. Please see Section 08 for information about Routing Tests.

07.03.01 View Delegated IPv6 Prefix

1. Log in to CustData.

2. Select Service menu item from the Manage menu at the top right hand of the Home screen.

3. Select IP Routing tab from the Manage Service screen.

4. Click on the Manage Delegated IPv6 Prefix button.

5. The ADSL Delegated IPv6 Prefix Management page will display the Delegated IPv6 Prefix assigned to your service.

6. For customers using provider-independent ranges, you can Add, Modify or Delete your Delegated IPv6 Prefix as described below.

07.03.02 Add Delegated IPv6 Prefix

1. Access the Manage Delegated IPv6 Prefix screen as described in 07.03.01 above.

2. Enter the new IPv6 prefix in the Add Delegated IPv6

Prefix field using CIDR notation eg 2001:db8:e::/56.

3. The add prefix request will be listed as Pending Approval.

4. CustData will automatically send an authorisation email to the registered contact. It is imperative that this email is responded to promptly and exactly as instructed.

5. When authorisation is received the add prefix request will be updated to Approved Pending Action status.

6. The new prefix will be added to RADIUS at the next scheduled implementation time, after which the ADSL modem will need to be reset for the changes to take effect.

PREVIOUS NEXT

01. Welcome to CustData

02. Access and Message Services

03. Navigation and Functionality

04. Usage Threshold Alerts

05. Reports

06. Access Control Lists

07. Managing Your Routing

07.01 Maintaining your contact details

07.02 Changing routing to your service

07.03 Manage the IPV6 prefix delegation for your

ADSL service

07.04 Test your changes

08. Routing Tests

09. Domain Name Service

10. Additional IP Address Services

11. Conclusion

07 MANAGING YOUR ROUTING

07.03.03 Modify Delegated IPv6 Prefix

1. Access the Manage Delegated IPv6 Prefix screen as described in 07.03.01 above.

2. Click on the Update button.

3. Enter the new IPv6 prefix using CIDR notation, eg

2001:db8:e::/56 and click Update.

4. The modify prefix request will be listed as Pending Approval.

5. CustData will automatically send an authorisation email to the registered contact. It is imperative that this email is responded to promptly and exactly as instructed.

6. When authorisation is received the modify prefix request will be updated to Approved Pending Action status.

7. The new prefix will be updated in RADIUS at the next scheduled implementation time, after which the ADSL modem will need to be reset for the changes to take effect.

07.03.04 Delete Delegated IPv6 Prefix

1. Access the Manage Delegated IPv6 screen as described in 07.03.01 above.

2. Click the Delete button.

3. The delete prefix request will be listed as Pending Approval.

4. CustData will automatically send an authorisation email to the registered contact. It is imperative that this email is responded to promptly and exactly as instructed.

5. When authorisation is received the delete prefix request will be updated to Approved Pending Action status.

6. The prefix will be removed from RADIUS at the next scheduled implementation time, after which the ADSL modem will need to be reset for the changes to take effect.

07.04 TEST YOUR CHANGES

Once any routing changes have been implemented, we highly recommend that you use CustData to test your service for correct configuration. Please see Section 08 for information about Routing Tests.

Further assistance is available via Online Help.

PREVIOUS NEXT

01. Welcome to CustData

02. Access and Message Services

03. Navigation and Functionality

04. Usage Threshold Alerts

05. Reports

06. Access Control Lists

07. Managing Your Routing

08. Routing Tests

08.01 How to test your routing

08.02 Common trace route results

09. Domain Name Service

10. Additional IP Address Services

11. Conclusion

08 ROUTING TESTS

Once you have set up routing to your service (see Section 07 above) you should use CustData to perform a Node to Host Trace to check that the routes are correct.

CustData’s Network Visibility feature provides end-to-end visibility of your internet service to enable you to resolve issues with less delay. To access the Network Visibility feature, select Diagnostic Toolkit menu-item from the Support menu available at the top right corner of CustData screen, then click the Network Visibility tab. This tab has three functions:

• Node to Node Testing: Ping test between two TID Points of Presence (POP)

• Node to Host Testing: Ping or trace test between a

TID POP and any Internet host

• Route Lookup: Query TID’s BGP routing tables.

It is important to use a routing test after adding or removing an IP address range, to confirm that your proposed routing changes have been implemented.

• Successfully Adding IP Addresses will result in a successful trace, as described under 08.02.01 below.

• Successfully Deleting IP addresses may return a result similar to that under 08.02.02 below.

Note: The Testing feature is not available for Telstra services on the NBN.

08.01 HOW TO TEST YOUR ROUTING

08.01.01 Node to Host Testing

Figure 31. Node to Host Testing

1. Log in to CustData.

2. Select Diagnostic Toolkit menu item from Support menu on the top right hand corner of the Home screen.

3. On the Network Visibility tab scroll down to the Node to

Host Testing section.

4. In the Test type field, select either Ping or Trace based on your testing requirement.

PREVIOUS NEXT

01. Welcome to CustData

02. Access and Message Services

03. Navigation and Functionality

04. Usage Threshold Alerts

05. Reports

06. Access Control Lists

07. Managing Your Routing

08. Routing Tests

08.01 How to test your routing

08.02 Common trace route results

09. Domain Name Service

10. Additional IP Address Services

11. Conclusion

08 ROUTING TESTS

5. In the From field, select a remote Telstra Internet Direct

PoP from the list. Be sure to choose a remote PoP as your local PoP may not detect a ‘routing loop’ caused by incorrect router configuration.

6. In the To field, enter the IPv4 or IPv6 address that you wish to trace or ping.

7. Click on the Get Statistics button.

Your test results may take some time to come back, especially if the test is made to a device that is not correctly configured.

08.01.02 BGP Route Lookup

Figure 32. Diagnostic Toolkit BGP Route lookup

The example in the figure below shows the BGP routing table entries for the route to the ‘F’ root name server at 192.5.5.241.

The command executed on the route server was ‘show ip bgp

192.5.5.241’

Figure 33. Diagnostic Toolkit BGP Route Output

The Route Lookup tool allows you to query TID’s BGP routing tables. There are two query types:

· IP Route:

1. Log in to CustData.

2. Navigate to Support menu on the top right hand menu and select Diagnostic Toolkit menu item.

3. On the Network Visibility tab, scroll down to BGP Route

Lookup section at the bottom of the screen.

4. In the Test Type field, select IP Address/prefix and in the

Test From field select the appropriate site to lookup from.

5. In the IP Address/AS-Path Regex field, enter an IPv4 or IPv6 address/route.

6. Click on Get Results button.

· AS Path (regex):

1. Log in to CustData.

2. Navigate to Support menu on the top right hand menu and select Diagnostic Toolkit menu item.

3. On the Network Visibility tab, scroll down to BGP Route

Lookup section at the bottom of the screen.

4. In the Test Type field, select AS-Path regex and in the

Test From field select the appropriate site to lookup from.

5. In the IP Address/AS-Path Regex field, enter an AS number or regular expression to query the AS paths in the BGP table.

6. Click on Get Results button.

The example below shows the output when querying the

BGP routing table for AS paths that terminate in ASN 3557.

The command executed on the route server was ‘show ip bgp regexp _3557$’.

PREVIOUS NEXT

08 ROUTING TESTS

Figure 34. Diagnostic Toolkit BGP Route AS Path Output Figure 35. Node to Host Trace results

01. Welcome to CustData

02. Access and Message Services

03. Navigation and Functionality

04. Usage Threshold Alerts

05. Reports

06. Access Control Lists

07. Managing Your Routing

08. Routing Tests

08.01 How to test your routing

08.02 Common trace route results

09. Domain Name Service

10. Additional IP Address Services

11. Conclusion

08.02 COMMON TRACEROUTE RESULTS

08.02.01 Successful trace results

08.02.02 Unsuccessful trace results

Once you conduct a test, a table similar to that illustrated in Figure 35 will come up.

• Network Device shows the pathway that traffic will follow from the nominated PoP to your nominated IP address.

• Round Trip Times indicate the time taken for traffic to bounce from one access point to another.

08.02.01 Successful trace results

• Result – The trace goes to your service, which responds with a message that the appropriate host is reachable and the trace stops.

Note: When doing the trace from a server, a series of question marks and asterisks may be returned, even though your router and/or device has been properly configured. This occurs when the trace is denied access by the server – and will be indicated by an !A** notation in the Round Trip Times column.

PREVIOUS NEXT

01. Welcome to CustData

02. Access and Message Services

03. Navigation and Functionality

04. Usage Threshold Alerts

05. Reports

06. Access Control Lists

07. Managing Your Routing

08. Routing Tests

08.01 How to test your routing

08.02 Common trace route results

09. Domain Name Service

10. Additional IP Address Services

11. Conclusion

PREVIOUS NEXT

08 ROUTING TESTS

08.02.02 Unsuccessful trace results

08.02.02.01 Trace route to an unconfigured route

08.02.02.02 Trace route to an unconfigured device

The following results will help you interpret some of the more common results from an unsuccessful test, however this is not a complete list.

There are many other reasons for unusual or unsuccessful trace routes, including the service not being connected when the trace is conducted.

If you require help interpreting a test result, we suggest you consult with your IT support.

08.02.02.01 Traceroute to an unconfigured route

• Result 1 – Route is unconfigured

The trace goes to your Telstra Internet Direct access router and stops, with a series of question marks and asterisks appearing on the last line of the report. This often indicates that the access device is not properly configured. You should check the configuration and/or seek assistance from your supplier or IT support. Telstra Business also offers a range of

IT support options for Telstra Business Broadband available through the ‘Business Support’ Extra. Consult with your Telstra

Business Account Executive or call 13 2000.

• Result 2 – Routing Loop

The trace goes past the Telstra Internet Direct access router to your network router, is returned to the access router, which returns it to the network router, and so on.

This routing loop can lead to abnormally high usage and poor service performance.

To resolve this issue, the route needs to be terminated at your end by correctly configuring your router. You should seek the assistance of your router supplier or IT support as the correct termination/configuration method will depend on your specific device.

Alternatively, you can simply delete the tested IP address.

Routing loops can easily occur if you have a number of advertised IP addresses but only use a few – leaving the rest unconfigured. You can check the subnets routed to a service by clicking the View/Edit Routes button.

08.02.02.02 Trace route to an unconfigured device

• Result 1 – The trace ends at your link, then returns a series of question marks and asterisks. This often indicates that your access device is not properly configured and you should seek assistance from your router supplier or IT support.

• Result 2 – If your trace is directed to an address range that isn’t in the routing tables of the access router will usually stop at the Telstra Internet Direct Core Router with a series of question marks and asterisks.

The address range (having been deleted) is simply undeliverable and this result does not affect your service.

Note: A similar result may occur if your Telstra Internet Direct service is not connected at the time of the test.

Figure 36. Node to Host Trace results for a trace to an unconfigured device

01. Welcome to CustData

02. Access and Message Services

03. Navigation and Functionality

04. Usage Threshold Alerts

05. Reports

06. Access Control Lists

07. Managing Your Routing

08. Routing Tests

09. Domain Name Service

09.01 Managing a primary DNS

09.02 Managing a secondary DNS

09.03 Cancelling an account

10. Additional IP Address Services

11. Conclusion

09 DOMAIN NAME SERVICE

The Domain Name Service (DNS) functions of CustData are divided into two sections – Primary DNS management and Secondary DNS management.

Both are found in the Manage DNS Screen (Navigate via

Manage – > DNS), and both are available to Telstra Business,

Enterprise and Wholesale customers. However, their use is only recommended if you are managing a small network.

• Use Primary DNS if your DNS zone is hosted on the

Telstra Internet Direct nameservers.

• Use Secondary DNS if your DNS zone is hosted by another provider.

09.01 MANAGING A PRIMARY DNS

09.01.01 To record a new Primary DNS

09.01.02 To update an existing Primary DNS

The Primary DNS allows you to host and configure your

Domain Name on the Telstra Internet Direct nameservers.

Once your domain has been configured on CustData, you will need to have your registrar (MelbourneIT, Ausregistry, etc) delegate the domain so all DNS queries are successfully passed to Telstra Internet Direct.

The relevant delegation details are:

• Primary DNS ns0.telstra.net 139.130.204.47

• Secondary DNS ns1.telstra.net 139.130.4.5

Note: CustData’s Primary DNS feature does not support zone transfers to non-Telstra DNS servers (e.g. using the

‘allow-transfer’ directive). However, the full zone file is viewable from within CustData’s View Zone function, or can be delivered as a text file upon request.

09.01.01 To record a new Primary DNS

1. Log in to CustData.

2. Select DNS menu item from the Manage menu on the top right hand corner of the Home screen.

3. In the Add Domain section on the Primary DNS tab enter the Domain Name and the email address of the person responsible for managing that domain.

4. Set the TTL (or leave as the default if unsure).

5. Click on the Add button.

09.01.02 To update an existing Primary DNS

If you’ve already entered a Primary DNS on CustData, you can update the:

• Start of Authority (SOA). Change the email details of the person responsible for the domain, and change the TTL

(Time To Live)

• Assign IP Address. Enter the IP address against the domain name, so web users can access your web server without using ‘www’.

PREVIOUS NEXT

01. Welcome to CustData

02. Access and Message Services

03. Navigation and Functionality

04. Usage Threshold Alerts

05. Reports

06. Access Control Lists

07. Managing Your Routing

08. Routing Tests

09. Domain Name Service

09.01 Managing a primary DNS

09.02 Managing a secondary DNS

09.03 Cancelling an account

10. Additional IP Address Services

11. Conclusion

09 DOMAIN NAME SERVICE

• Assign hosts or aliases. Select one of the following record types:

A – links a hostname with an IPv4 address

AAAA – links a hostname with an IPv6 address

CNAME – Canonical Name records are used as an alias for a host name

NS – Name Server records are used for subdomain delegation

MX – Mail Exchanger records link a domain name to

Message Transfer Agents (mail servers) for that domain

HINFO – Host Info records describe the type of computer/ operating system a host uses

SRV – Service records define the hostname and port number of servers for specified services

TXT – Text records carry arbitrary data (must be enclosed within double quotes eg “MS=ms722939”).

1. Log in to CustData.

2. Select DNS menu item from the Manage menu on the top right hand corner of the Home screen.

3. Scroll down to the Manage DNS Domain section of the

Primary DNS tab and click the Update button next to the relevant domain.

4. Select and update the information you wish to change or, if a host/alias is no longer required, click Delete next to that alias.

5. Click on the Submit button.

09.02 MANAGING A SECONDARY DNS

09.02.01 To record a Secondary DNS

The Secondary DNS screen allows you to set Telstra as the secondary server for your domain, while it is being primarily hosted on another provider’s nameserver.

To do this, you need to:

• Enter the Primary Server’s IP address and your Domain

Name on CustData

• Ensure that the Primary Server accepts AXFR queries from the Internet Direct Secondary DNS ns1.telstra.net

(139.130.4.5).

09.02.02 To record a Secondary DNS

1. Log in to CustData.

2. Select DNS menu item from the Manage menu at the top right hand corner of the Home screen.

3. Click on Secondary DNS tab on the Manage DNS screen.

4. Enter the Domain Name and the email address of the person responsible for managing that domain.

5. Add the Domain Name and IP address of the primary nameserver.

6. Click on the Add button.

09.03 CANCELLING AN ACCOUNT

If CustData is used to Host your Domain Name Service (DNS) and you are cancelling all services on your account, you will need to align your DNS hosting with another account or arrange for your DNS to be hosted with an alternate Internet

Service Provider.

PREVIOUS NEXT

01. Welcome to CustData

02. Access and Message Services

03. Navigation and Functionality

04. Usage Threshold Alerts

05. Reports

06. Access Control Lists

07. Managing Your Routing

08. Routing Tests

09. Domain Name Service

10. Additional IP Address Services

11. Conclusion

10 ADDITIONAL IP ADDRESS SERVICES

To order additional IP address blocks in Custdata, follow the steps below:

1. Log in to CustData.

2. Select Service from Manage menu on the top left-hand menu.

3. On the Manage Service screen, click on Additional IP tab.

The IP Address Form screen will open up in a different tab on your Internet browser.

This feature is not available for Telstra services on the

NBN – please contact your Telstra Representative or call us on 13 2000 should you require additional IP address space for your Telstra services on the NBN.

This feature is also not available to Telstra Wholesale customers.

The following is a brief description of the rules that apply for requesting additional IP addresses.

A reference to Telstra Internet Direct (TID) includes TID that is provided as part of a Business Broadband service.

TID

will allocate provider-based non-portable IP address space to those direct clients of the TID service who are single-homed to TID, as a component of the services TID provides to its customer base.

Those parties who are multi-homed (connected to more than one Internet Service Provider), and large Internet

Service Providers should contact the Asia Pacific Network

Information Centre for allocation of ISP provider space or large enterprise address space.

APPLICATION JUSTIFICATION

If you are requesting up to 16 IPv4 Addresses (4 BITS), you will need provide information describing the proposed use of the requested address block.

If you are requesting larger IPv4 Blocks, ie more than 16 IPv4 addresses or additional IPv6 prefixes (eg/48), you will need to provide information describing the proposed use of the requested address block as well as a network diagram or plan that shows the proposed use of requested addresses.

For all requests, you will need to include responses to the following:

• are you using all your currently allocated IP addresses?

• what is your forecasted growth for IP address use?

• description of network topology

• description of network routing plans

• why NAT or private addressing is not an option?

• Subnetting Plan.

Note:

• The address space allocation will be provisional on you remaining connected to TID. When the connection ceases, the addresses will be reclaimed.

• Addresses allocated via this mechanism will only be routed by TID – they cannot be used with a different service provider.

• All of the address space allocated must be routed and visible to the global internet – the addresses must not be used in a private context.

• You will need to provide your 10 digit account number before addresses can be allocated.

• Applications for IP addresses will usually be processed within 7 days of receipt.

• If we accept your application, any usage of the IP addresses will be governed by the terms and conditions set out in our agreement with you.

PREVIOUS NEXT

01. Welcome to CustData

02. Access and Message Services

03. Navigation and Functionality

04. Usage Threshold Alerts

05. Reports

06. Access Control Lists

07. Managing Your Routing

08. Routing Tests

09. Domain Name Service

10. Additional IP Address Services

11. Conclusion

11 CONCLUSION

Using CustData can be a vital part of your Broadband management strategy. Using the tools and reports provided here will help to ensure your service is properly configured.

While it is almost impossible to remedy a problem after the fact, regular checking of your service statistics can enhance your network’s performance and reduce your costs.

Of course it is also essential to maintain your hardware and security systems, keeping both up to date by installing all applicable patches and updates as recommended by the vendors.

The Internet is a powerful business tool. We hope we can help it play a key role in your ongoing success.

11.01 Further Assistance

Further assistance is available via CustData’s Online.

Help feature – simply click on the Online Help button available on the Home screen (Online Help option is also available from the Support menu on the top right hand corner of Custdata screens).

For CustData Faults:

Use the Report A Fault function in CustData or contact the Technical Helpdesk using one of the numbers below:

• Telstra Business customers can call 132999

• Telstra Enterprise and Government customers can call

1800 066 594

• Telstra Wholesale customers can call 18 02288 (Option2,

Option1).

For Internet Service Faults:

Telstra Business customers can call 132999 for assistance with the following broadband products:

• Business Broadband

• BizEssentials

• DOT (Digital Office Technology)

• T-Biz (NBN).

Telstra Enterprise and Government customers can call

1800 066 594 for assistance with Telstra Internet Direct.

Telstra Wholesale customers can call 18 02288 (option 2, option 1) for assistance with the following products:

• Telstra Wholesale Internet (TWI)

• Virtual Internet Service Provider (vISP) Broadband.

PREVIOUS

advertisement

Was this manual useful for you? Yes No
Thank you for your participation!

* Your assessment is very important for improving the workof artificial intelligence, which forms the content of this project

Related manuals

advertisement