For AT&T Dedicated Internet on Demand...Managed Internet Service on Demand) services) and then connect a computer to your new Internet connection once available. After you activate

April 12, 2017 © 2016 AT&T Intellectual Property. All rights reserved. AT&T and the Globe logo are registered trademarks of AT&T Intellectual Property.

AT&T Business Center – AT&T Dedicated Internet on Demand: User Guide

For AT&T Dedicated Internet on Demand

This guide provides the basic steps and information you need to get started with AT&T Dedicated Internet on Demand (formerly known as Managed Internet Service on Demand). The guide is divided into three sections:

Activate Your Service walks you through setting up your initial Internet connection, which you ordered with an A&T sales agent. With this initial order you will need to activate your new Business Center account (or login with an existing account), test your new Internet connection, and get started right away.

Manage Your Service shows how to increase or decrease bandwidth, as well as how to make firewall configuration changes to your Internet connection.

Add New Internet Connection shows you how to order a new Internet connection for a new or existing site.

For AT&T Dedicated Internet on Demand .................................................................... 1

Activate Your Service .................................................................................................... 3

Activate Your AT&T Business Center Account ................................................................... 3

Your New Dedicated Internet on Demand ........................................................................ 7

Prepare Your Site for the Turn-up of AT&T Dedicated Internet on Demand .................... 8

Equipment required .......................................................................................................... 8

Activate Your AT&T Dedicated Internet ............................................................................ 9

Test Your AT&T Dedicated Internet on Demand ............................................................... 9

Locating Key Information ................................................................................................ 10

Edit Your L3 (LAN) Settings .............................................................................................. 11

Router LAN Assignments ................................................................................................. 12

Change Your Internet Bandwidth .................................................................................... 15

Add a New Internet Connection ................................................................................. 16

Add a New Site ................................................................................................................ 16

Activate ADI on Demand at New Site .............................................................................. 18

Specify the ADI on Demand Configuration ...................................................................... 19

April 12, 2017 © 2016 AT&T Intellectual Property. All rights reserved. AT&T and the Globe logo are registered trademarks of AT&T Intellectual Property. Page 2

AT&T Business Center – AT&T Dedicated Internet on Demand: Getting Started Guide

Completing the Order ...................................................................................................... 32

Your New Internet Connection ................................................................................... 32

Test Your Internet Connection ........................................................................................ 33

Appendix ..................................................................................................................... 34

Preparing Your Site .......................................................................................................... 34

Default Internet Settings............................................................................................. 38

Frequently Asked Questions ....................................................................................... 39

Configuring Your Firewall ................................................................................................ 40

April 12, 2017 © 2016 AT&T Intellectual Property. All rights reserved. AT&T and the Globe logo are registered trademarks of AT&T Intellectual Property.

AT&T Business Center – AT&T Dedicated Internet on Demand: User Guide

Activate Your Service

After you order your Internet connection, the simple two-stage path to getting up and running is to activate your AT&T Business Center account (which gives you access to manage your AT&T Dedicated Internet on Demand (also known as Managed Internet Service on Demand) services) and then connect a computer to your new Internet connection once available. After you activate your AT&T Business Center account, you can make changes to your Internet settings before or after your Internet connection is active. After you complete your order with AT&T, you’ll receive a welcome email that contains a link to the AT&T Business Center Step One, if you have an existing Business Center account, skip the following steps. Step Two, if you do not have an existing Business Center account, follow these steps to create one.

Activate Your AT&T Business Center Account

1. To activate your AT&T Business Center account, click on the link in the welcome email. If you did not receive a welcome email, call (844) ATT NoD3 and choose option 3.



Figure 1 AT&T Business Center Network on Demand welcome email

To get started, click Activate Now. You’ll be redirected to AT&T Business Center, where you can login with your existing ID and Password or if you do not have an existing account, the Appendix will detail where you can complete your registration and set up your login and password. Step 2: Provide Your User Information

On the first screen (User Information), provide your Contact Information.



Step 3: Provide Account Information

For account information, you’ll need to create a username and password the first time you access Business Center. This will be your ongoing access to AT&T Business Center and your AT&T Dedicated Internet on Demand.



Figure 2 Account information

The security questions will help us to recover your password if you forget it. Be sure to use questions and answers that you will easily remember. Step 4: Read and Agree to Your AT&T Business Center Agreement

Please read through your AT&T Business Center Agreement and click I have read and agree to the AT&T Business Center agreement



Figure 3 AT&T Business Center agreement

After you agree to the AT&T Business Center Agreement, click Complete Activation to activate your Business Center account. Once you do this, you’ll have access to your AT&T Dedicated Internet on Demand.

Your New Dedicated Internet on Demand

You’ll receive email notification when your AT&T Dedicated Internet on Demand order has completed. At this point, you may begin using your service.



Figure 5 Your Order is Complete

Prepare Your Site for the Turn-up of AT&T Dedicated Internet on Demand

Equipment required

o Router o Firewall o Switch

Connection to the Network Termination Equipment (NTE) (include diagram or picture)

o Customers Inside Wire (plug in to NTE and take it some distance – customer responsibility)

Connect your LAN (Switch or Router) to the AT&T NTE within your building.

Insert Diagram of NTE Connection (What does it look like and how to



Activate Your AT&T Dedicated Internet

After receiving email, login in to AT&T Business Center and Select the Activate ADIoD button to activate the ADIoD service.

Select Configure Firewall to view your firewall rules. By default the firewall will prevent all internet sourced traffic. To allow inbound “Internet source” traffic to your network, please refer to the Manage Your Service section in this User Guide.

Test Your AT&T Dedicated Internet on Demand

Test your AT&T Dedicated Internet on Demand by connecting a device (host), such as a desktop or laptop computer with DHCP enabled, and attempting to reach an Internet address (i.e.: http://www.att.com). If, for some reason, you can’t get an Internet connection after your AT&T Dedicated Internet on Demand connection has been activated, call 1-844-ATT-NOD3 (844-288-6633).

http://www.att.com/



Locating Key Information

After you have successfully validated your Internet connection is active, you will want to locate key information about your new Internet connection such as IP Address information, Routing protocols, Firewall Rules, etc.

Figure 6 Key Information

To get more information about your Internet connection locate the site you want more information on in your Inventory, click the expand icon ( ), Select Manage, and a series of options will be displayed:

Select Edit Bandwidth to view your current bandwidth and make a bandwidth increase or decrease.

Select Edit L3 (LAN) to view AT&T virtual router IP information for your Internet connection.

Select Configure Firewall to view your firewall rules. By default the firewall will prevent all internet sourced traffic. To allow inbound “Internet source” traffic to your network, please refer to the Manage Your Service section in this User Guide.



Manage Your Service

To bring your environment and its applications online it may be necessary to make configuration changes to your Internet setting under Edit L3 (LAN) and Configure Firewall.

Edit Your L3 (LAN) Settings

When you first order your Internet connection, the settings will be set to AT&T defaults – See Appendix: AT&T Default Settings. You can change your LAN settings for any active Internet connection. You can do any of the following:

Add or edit LAN blocks for IPv4 and IPv6 (Step 4)

Add or edit static routes for IPv4 and IPv6

Enable or edit Network Address Translation (NAT) (Step 5)

Enable or edit Port Address Translation (PAT) (Step 6)

Edit DHCP (Step 7)

Edit firewall settings (Step 8)

Add or edit your SWIP (Shared Whois Project) contact information (Step 9)

To edit your L3 (LAN) settings:

1. Open https://www.att.com/ebiz/sdnom and enter your user ID and password. An inventory screen appears.

2. On the inventory page, next to the site you want, click the expand icon ( ). 3. Find the Internet connection you want, click Manage ( ), and then select Edit L3 (LAN).

Figure 7 Edit LAN settings

4. Find the feature you want to change, and then, in the upper right of the panel, click Edit. 5. Make the changes you want to your order, and then click Add to Cart.

https://www.att.com/ebiz/sdnom



6. On the Review Order tab, click Submit Order.

Figure 8 Existing LAN settings

Router LAN Assignments

IPv4 Public LAN Block: This is the IP Gateway address. All IP traffic from the premise going out to the Internet must be directed to this address. Also known as the “next-hop,” or Default route.

Note – The IP addressing connection between the cloud virtual router and the premise CPE is the following format. The virtual Router IP is: 10.192.1.254 and the premise CPE IP is: 10.192.1.253. The 10.192.1.0/24 network is just the example network used here to explain this.



Additional Public IP addresses may be acquired by taking the following actions:

1. After you select Edit L3 (LAN), Find the IPv4 or IPv6 section you want to edit 2. Click Edit and select the IP block size you wish to add and then click Add to Cart. 3. On the Review Order tab, click Submit Order.

Figure 9 Existing LAN settings

The virtual router performs Network Address Translation (NAT) to translate the premise Private IP subnet of /24 addresses to the one Public Loopback IP to then be used to access the Internet.

Port Address Translation (PAT) (covered on page 30) is also performed by the virtual router’s built-in Firewall along with NAT to enable all the premise IP’s and associated internet activities to use the one Public Loopback IP on the router. AT&T provides a stateful firewall by default. This means that internet sourced traffic will be blocked, but outgoing traffic is allowed by default. You can make changes to your firewall after your order is complete.



Go to your inventory page, find the Internet connection whose firewall settings you want to configure, click the gear icon ( ) next to the order, and then select Configure Firewall (see page 41).

Figure 10 Select Configure Firewall

This action will open a new window where you can configure IPv4, IPv6, and MAC filter rules. You can configure your firewall filters as often as you need to add, remove, or change a filter rule.

Figure 11 Configure Stateful firewall

To allow all incoming traffic

To allow incoming traffic to your LAN, under WAN Rules – Add Rule Action permit | Dst address x.x.x.x | Dst Mask xx Ex: Action permit | Dst address 12.12.12.12 | Dsk Mask 30



Change Your Internet Bandwidth

You can change your Internet bandwidth settings for any active Internet connection. You can do any of the following:

Increase or decrease the Internet bandwidth

Change your billing type

Change your minimum bandwidth commitment for usage-based billing

To change your Internet bandwidth:

7. Open https://www.att.com/ebiz/sdnom and enter your user ID and password. An inventory screen appears.

8. On the inventory page, next to the site you want, click the expand icon ( ).

9. Find the Internet connection you want, click the gear icon ( ), and then, from the menu, select Edit Bandwidth.

Figure 12 Edit bandwidth

The Internet settings open to the place where you can change your bandwidth settings. Note: the change will not go into effect for at least ONE hour by default. Click Edit to schedule the change immediately if you want this change now (allow time for system to process).




Figure 13 Change Internet bandwidth settings

10. Make the changes you want, verify your selections, and then click Add to Cart. The Review opens showing the changes you made.

11. On the Review page, click Submit Order.

Add a New Internet Connection Add a New Site

Adding a new site lets you expand your network to a new location. Any new site you add will require a new Internet connection as well.

1. Go to https://www.att.com/ebiz/sdnom and enter your user ID and password. The

inventory screen appears.

2. Click Add New Site.




Figure 14 Add new site

3. Enter the address information in the fields, and then click Verify Address.

Figure 15 Enter address information

Our system verifies that the address is valid and that AT&T Dedicated Internet on Demand capabilities are available for that location. If valid, you’ll see confirmation that you can add the site.



Figure 16 Validated site address

If the address validates, you can click Add Site

If the address is not valid, or AT&T Dedicated Internet on Demand capabilities are not

available at the address, or if there is already an active site or a pending installation at

the address, you’ll see an error message indicating the issue. You can cancel at this point

or try to verify another address.

If the address you enter produces multiple matches, you’ll be able to select the correct address.

Activate ADI on Demand at New Site

Utilizing the Site you verified and added previously follow these steps to activate ADI on Demand at the new site.

1. Open https://www.att.com/ebiz/sdnom and enter your user ID and password, which you created the first time you logged in to AT&T Business Center. An inventory screen appears.

2. Select the site where you want to add internet service, and then click the gear icon ( ).

Figure 17 Select Add Internet




3. Select Add Internet. The AT&T Dedicated Internet on Demand page appears.

Figure 18 AT&T Dedicated Internet on Demand page

4. Configure your Internet connection by specifying the settings for the virtual router.

There are five panels of settings, which are shown at the top of the page. After you’ve

made your selections for each panel, click Continue to save the settings and continue to

the next panel.

Specify the ADI on Demand Configuration

Step 1: Set Up Your Port

Based on the equipment (switch or router) and bandwidth you will be utilizing with the ADI on Demand connection, select an interface type. Under Building Equipment Interface, choose one of the following:

100Mbps Electrical Ethernet

1Gbps Electrical

1Gbps Single-Mode Optical

1Gbps Multi-Mode Optical



Figure 19 Choose the building equipment interface

5. You’ll need to install any required inside wiring at your location. Inside wiring is the wiring that runs from your Ethernet connection point (usually a box on the outside of your building or in a telco room inside) to the telephone jacks or outlets inside your building.

Step 2: Identify Your Technical Contacts

In order to ensure successful installation of your building equipment interface and wiring, we need you to provide on-site technical contact information.

The local technical contact provides access to the building and any help our technician needs to establish network connectivity

The alternate local technical contact provides back-up as needed.

The building manager contact may be required to provide access to the equipment

panel if the site has multiple tenants.

Step 3: Specify Your Internet Gateway Settings

In the Internet Gateway Settings panel, you set up the basic settings for accessing the Internet. Many of these settings are configured to default values.

6. The Router Location is set automatically based on your location.



Figure 20 Router location

7. Under Internet Bandwidth, select the bandwidth you want for the virtual router. The

bandwidth is the Internet access speed, expressed in megabits per second (Mbps), that

you want dedicated to this router. The maximum bandwidth is 150Mbps.

Figure 21 Internet bandwidth

8. Under Billing Type, select whether you want Fixed-Rate Billing or Usage-Based Billing.

Figure 22 Select billing type

If you select fixed-rate billing, you’re charged the same amount each billing cycle

based on the Internet bandwidth you selected in step 2. If you select usage-based

billing, you can select a lower minimum bandwidth commitment, but still use the

higher bandwidth as needed. You’ll be charged for your minimum bandwidth and



you may also incur usage-based billing if your bandwidth use exceeds the minimum

bandwidth commitment for an extended period of time.

Figure 22 Usage-based billing

9. Under IP Address Versions, select Dual Stack or IPv6. If you select Dual Stack, you’ll be able to use IPv4 and IPv6 addresses together. If you select IPv6, all IPv4 settings will become unavailable.

Figure 23 Select IP address version.

Routing protocol for IPv4 and IPv6 Addresses, is set to Static by default.

Figure 24 IPv4 address routing



Note: Steps 4 through 8 are optional and are provided for advanced users. The default settings for these steps are sufficient for most Internet connections. You can proceed to step 9 by clicking Confirm or Continue in each panel without making changes. You can always make changes later. For information about making changes, see the section Edit Your Internet Connection later in this document.

Step 4 (Optional): Specify Your Virtual Router LAN Assignments (Advanced)

The virtual router Local Area Network (LAN) assignments should only be set by advanced users. If you leave the settings blank, AT&T will use default settings to provision your service.

If you’re an advanced user, you can use this panel to specify the static IP addresses that identify your virtual router on the Internet. You’ll select the subnet prefixes for your IPv4 and, optionally, IPv6 IP addresses, and you’ll add any additional LAN blocks for your network.

Set Your Router LAN Assignments Because the default setup for the virtual router is dual stack (IPv4 and IPv6), you must assign a private IPv4 address and prefix length. However, assigning an IPv6 address and prefix is optional.

This initial assignment sets the IP addresses for the virtual router and also sets up the initial IPv4 subnet for the hosts on your network. The number of available hosts is based on the prefix length you choose.

1. In the IPv4 IP address field, enter the private IPv4 IP address that identifies the virtual router for the devices at your site that access the Internet.

2. From the IPv4 IP subnet size menu, select the subnet prefix you want.

3. If you will use IPv6 IP addresses, in the IPv6 IP address field, enter the private IPv6 IP address that identifies the virtual router for the devices at your site that access the Internet.



4. From the IPv6 IP subnet size menu, select the subnet prefix you want that is associated with the IPv6 address. Note that if you assign an IPv6 address, these addresses are not routable from the Internet. Leave this field blank to have a routable private IPv6 address assigned by AT&T.

Figure 25 Router LAN assignments (advanced only)

Set Up Additional Public IP LAN Blocks If you want more available Internet routable host addresses than are provided in the initial LAN assignment, you can add additional public LAN blocks for IPv4 or IPv6. To utilize your PUBLIC LAN Blocks, you MUST install a device (router/firewall/layer3 switch) or configure NAT on the vCE Portal.

To add IPv4 or IPv6 public IP LAN blocks (optional):

5. From the Assignment type menu, select who will assign the IP addresses for the LAN block. Only IP addresses assigned by AT&T are currently supported.

6. From the Prefix size menu, select the prefix you want.



Figure 26 Add public LAN block

To add multiple LAN blocks:

After you have assigned one LAN block, you can add additional blocks by clicking Add new IPv4 Block or Add new IPv6 Block. These options appear only if one or more LAN blocks have been added.

To edit or remove LAN blocks:

7. To edit a LAN block you’ve added, click Edit ( ) next to the LAN block in the list of added LAN blocks that appear in the panel. Make the changes you want, and then click Save. If you don’t want to save the changes, click Cancel.

8. To remove a LAN block you’ve added, click Delete ( ) next to the LAN block in the list of added LAN blocks that appear in the panel.



Figure 27 Add, edit, or remove LAN blocks

Step 5 (Optional): Specify Your IPv4 Network Address Translation Settings (Advanced)

Specify whether you want to use network address translation (NAT) for IPv4 on your network. This option is only available if your network is set up for dual stack.

9. Under Do you want to enable NAT for IPv4? Select Yes or No to enable IPv4 NAT. It is not enabled by default.

10. In the Internal IP address field, enter the internal IPv4 address.

11. In the Next-hop address field, enter the next-hop address. Note that if validation determines that the internal address is within the IPv4 LAN block, you will need to remove the next-hop address you entered.



12. In the External IP address field, enter the public IP address that you previously obtained from a public LAN block. This address identifies your network on the Internet.

13. Click Add NAT.

To add multiple NAT configurations:

Click Add another IPv4 NAT and configure it as above. This option appears only if at least one NAT configuration has been added.

To edit or remove NAT configurations:

14. To edit an existing IPv4 NAT configuration, click Edit ( ).This option appears only if at least one NAT configuration has been added.

15. To delete an existing IPv4 NAT address pool, click Delete ( ). This option appears only if at least one NAT configuration has been added.

Figure 28 Add NAT

Step 6 (Optional): Specify Your IPv4 Port Address Translation (PAT) Settings (Advanced)

Specify whether you want to use port address translation (PAT) for private IPv4 addresses on your network. This option is only available if your network is set up for dual stack. You can specify up to 5 IPv4 PAT address pools.

16. Under Do you want to enable PAT for IPv4? select Yes or No to enable IPv4 PAT. It is

enabled by default.

17. If you enable PAT for hosts that are directly connected to the virtual router, select Use

the default PAT for private IPv4 addresses on the same network as the virtual router.

You can add up to 4 additional PAT pools.

To add an IPv4 PAT address pool:



18. In the Next-hop address field, enter the next-hop address to use for the PAT address

pool (or group of address pools). For each next-hop address you can add up to four

address pools.

19. In the IPv4 pool address field, enter the IPv4 address for the pool that will be used on

the Internet.

20. From the IPv4 pool prefix list, select the subnet prefix you want.

21. To add another address pool, click Add a new PAT pool. Or, to add the PAT

configuration, click Add PAT.

Figure 29 Add PAT

To add multiple IPv4 PAT address pools:

Click Add another IPv4 PAT and configure it as above. This option appears only if at

least one IPv4 PAT address pool has been added.

To edit or remove IPv4 PAT address pools:

To edit an existing IPv4 PAT address pool, click Edit ( ).This option appears only if at least one IPv4 PAT address pool has been added.

To delete an existing IPv4 PAT address pool, click Delete ( ).This option appears only if at least one IPv4 PAT address pool has been added.

Step 7 (Optional): Specify Your IPv4 or IPv6 DHCP (Dynamic Host Configuration Protocol) Settings (Advanced)

Specify whether you want to use DHCP or IPv4 (if dual stack) and IPv6. You can configure up to 5 DHCP address pools for IPv4 and IPv6.



Figure 30 Configure IPv4 DHCP

To configure Dynamic Host Configuration Protocol (DHCP) for IPv4 or IPv6:

22. Under IPv4 DHCP Pools (or IPv6 DHCP Pools), select Yes or No. DHCP is enabled by default.

23. If DHCP is enabled for hosts directly connected to the virtual router, select Use DHCP for IPv4 addresses on the same network as the virtual router (or Use DHCP for IPv6 addresses on the same network as the virtual router).

24. If you select this option, you can specify up to eight IP addresses that DHCP will not assign. To exclude an IP address from being dynamically assigned, enter it in the IPv4 DHCP excluded address pool (or IPv6 DHCP excluded address pool) field. The IP addresses you enter are validated for length and format.

To add DHCP address pools:

25. In the IPv4 DHCP next-hop address (or IPv6 DHCP next-hop address) field, enter a next-hop address. You can add up to four DHCP address pools per next-hop address. This field is optional. If you enter a next-hop address, you can associate up to four DHCP address pools with it.

26. In the IPv4 DHCP pool address (or IPv6 DHCP pool address) field, enter the address that will identify the address pool on the Internet.

27. From the IPv4 pool size (or IPv6 pool size) menu, select the subnet size for the address pool.

28. In the IPv4 DHCP relay gateway address (or IPv6 DHCP relay gateway address) field, enter the relay gateway address. This is the IP address of the router at your site, which is



configured as the DHCP relay agent and is in the same subnet as the DHCP clients (hosts).

29. In the IPv4 DHCP excluded address pool (or IPv6 DHCP excluded address pool) field, enter up to eight IP addresses that you don’t want to be assigned dynamically.

To add multiple DHCP address pools:

Click Add another IPv4 DHCP address pool (or Add another IPv6 DHCP address pool) and configure as above.

To delete DHCP address pools:

To delete an existing DHCP address pool, click Delete ( ).This option appears only if at least one DHCP address pool has been added.

Step 8 (Optional): Firewall Settings

AT&T provides a stateful firewall by default. You can’t configure your firewall settings while ordering the Internet connection. Instead, you’ll see a note stating that you can configure your firewall setting after you submit your change.

Figure 31 Stateful firewall notice



After your order is complete, go to your inventory page, find the Internet connection whose firewall settings you want to configure, click the gear icon ( ) next to the order, and then select Configure Firewall.

Figure 32 Select Configure Firewall

This action takes you to a site outside of AT&T Business Center where you can configure IPv4, IPv6, and MAC filter rules. You can configure your firewall filters as often as you need to add, remove, or change a filter rule.

Figure 33 Configure stateful firewall

Step 9: Specify Your SWIP Contact

The Shared Whois Project (SWIP) maintains and updates information about who is using specific IP addresses, or a specific block of IP addresses, on the Internet. Because AT&T is allocating IP addresses to you, we need to have a contact in your organization for any SWIP related issues.

30. Enter the contact information in the available fields. The fields are required unless marked as optional.



31. To go to the summary page and complete the order, click Continue.

Completing the Order

The final step is to set the activation date for your router. If your premise is eligible, you can choose to activate immediately or to schedule activation later. You can schedule an activation date up to 30 days from the time you submit your order.

32. Click the Date menu, and on the calendar that opens, select the date you want for activation.

33. Click the Time menu and click the time you want for activation. Note that the time zone is preset according to the time zone you selected when you provided your account

information.

34. To add the virtual router to your order, click Continue. By default, ALL orders are set to

for “Schedule for 1+ hour from current time”. Choose immediately if you want your

order to be processed now.

Figure 34 Schedule activation date

Your New Internet Connection You’ll receive email notification when your AT&T Dedicated Internet on Demand order has completed. At this point, you may begin using your connection.



Figure 35 Your Order is Complete

Test Your Internet Connection

You should test your Internet connection by connecting a device (host), such as a desktop or laptop computer, and attempting to reach an Internet address, ex. www.att.com. If, for some reason, you can’t get an Internet connection after your AT&T Dedicated Internet on Demand connection has been activated, call 1-844-ATT-NOD3 (844-288-6633).



Appendix

Preparing Your Site

AT&T Dedicated Internet on Demand uses a virtual router in the AT&T Integrated Cloud to access the Internet. You’ll need to provide equipment for your end of the connection, such as an Ethernet hub, switch, or router, and configure it to work with the AT&T virtual router in the AT&T Integrated Cloud.

The AT&T virtual router is your dedicated service gateway to the Internet. Its default configuration is sufficient to provide secure “plug and play” access to the Internet for all your office workstations and laptops. The virtual router performs all the necessary Internet gateway functions, such as IP routing, dynamic IP address assignment, private IP address translation, and stateful firewall security.

Your equipment and configuration needs depend on how you expect to use your Internet connection. We have defined three basic profiles and offer the following basic guidelines for your equipment and configuration needs for each profile. For each profile, we provide the following information:

Your equipment needs

Equipment installation and configuration

Virtual router configuration

These are guidelines only. For more detailed information about equipment installation and configuration, you’ll need to contact the manufacturer of your equipment.

Profile 1: Basic Internet Access

This profile describes a site where users access the Internet with a Web browser and a Web-based email program. This profile is the simplest and requires minimal equipment or configuration needs.



Equipment – A simple Ethernet Layer2 (or dumb) switch is all that’s required for this profile. An Ethernet hub is a networking device that connects multiple Ethernet devices (such as computers and printers) into one domain. An Ethernet switch has more software features and configuration options than a hub. The essential software feature for a switch (or router) is traffic shaping, which helps you optimize performance and get the most out of your Internet bandwidth. Traffic shaping is needed if sending higher volume of internet bound traffic from your site. This includes file uploads, concurrent input from many active users, or testing to public speed test sites. See the “Advanced Network” section of this Appendix for more information on shaping.

Equipment installation and configuration – Follow the manufacturer’s instructions for installing the device you purchase and connect it to the AT&T Ethernet port using a CAT6 Ethernet cable. Connect all the wired devices to the Ethernet Hub using CAT6 cables. Make sure that the Ethernet hub or switch you purchase has enough interfaces to support all the cables for all your workstations and the Ethernet port. There’s no further configuration needed unless you need to employ traffic shaping (See the “Profile 3: Advanced Network” section). By default, your devices are enabled as DHCP clients and acquire a dynamic IP address from the virtual router, which is enabled as a dynamic host configuration protocol (DHCP) server.

Virtual router configuration – The default virtual router configuration should meet all your needs for this profile without any further configuration. All your devices will access the Internet and use all the default IP functionality, such as dynamic IP address assignment, PAT, Internet routing, and stateful firewall.

For additional information on Profiles 2 (Wireless Device Access) and 3 (Advanced) see Appendix



Profile 2: Wireless Device Access

This profile describes a site that is similar to profile 1, but also has users who access the Internet using wireless devices, such as tablets and smart phones.

Equipment – You’ll need a wireless access point that connects your wireless devices with the wired Ethernet network. You can connect the wireless access point directly to the AT&T Ethernet port, or connect to an Ethernet hub or switch using a CAT6 Ethernet cable.

Equipment installation and configuration – Follow the manufacturer’s instructions for setting up the wireless access point. The device should include setup software that allows you to provide a network name (SSID), password, radio band frequency, and channel for the wireless signal.

Virtual router configuration – The virtual router works by default with a wireless access point, no further configuration is needed.

Profile 3: Advanced Network

This profile describes a site whose business needs require advanced networking features that are maintained locally by a network administrator, such as voice over IP (VoIP), interactive or streaming video, hosting servers, maintaining a data center, or providing local dynamic host configuration protocol (DHCP) support.



Equipment – You can install a router at your site to serve as the interface between your network and AT&T Dedicated Internet on Demand, which is accessed via the virtual router in the AT&T Integrated Cloud. The AT&T virtual router supports the advanced features you need, whether on a wired or wireless network. We recommend that you make sure the router you install at your site will support your Internet bandwidth and can perform traffic shaping to the AT&T virtual router at the same bandwidth.

You need to be concerned about traffic shaping since the NIC (Network Interface Controller) cards employed by your computers and the network interface of your local device (switch or router) are faster than the Internet bandwidth you’ve subscribed to for your Internet connection. For example, most modern computers and network devices employ 1Gbps network interfaces. So, if your Internet bandwidth is 50Mbps, your local device can send 20 times faster than the network is programmed to receive resulting in dropped traffic (think of connecting a fire hose to a garden hose without also inserting a valve to control the flow rate from the fire hose). To ensure that you don’t lose data, you should set the traffic shaping rate to be the same as your Internet bandwidth. This is most important if you send “bursty traffic” such as file uploads, concurrent input from many active users, or testing to public speed test sites.

For example, shaping can be configured on most current Cisco router platforms as follows:

interface <if-name>

service-policy output <policy-name>

policy-map <policy-name>

class class-default

shape average <Internet-bandwidth>

Example for 50 Mbps:



interface GigabitEthernet0/0/1

service-policy output Shaping-Policy

policy-map Shaping-Policy

class class-default

shape average 50000000

Equipment installation and configuration – Follow the manufacturer’s instructions for setting up your router. Use the following configuration values:

Configure the WAN interface on your router with the IP address 10.192.1.253/24.

Configure a default static route with the next-hop address 10.192.1.254.

Configure the traffic shaping speed to be equal to your Internet bandwidth setting.

Virtual router configuration – The AT&T virtual router functions as the Internet

gateway with or without a router at your site. The default IP address for the AT&T

virtual router is 10.192.1.254/24 and the expected IP address for the router at your

site is 10.192.1.253/24. You can change these default IP addresses on the AT&T

Dedicated Internet on Demand web site. The AT&T virtual router will continue to

serve as the Internet gateway and be responsible for routing to the Internet, private

address translation, and security.

You can enable the DHCP Server function on either the AT&T virtual router or the router at your site. If you configure your onsite router as the DHCP server, the DHCP function of the AT&T virtual router is ignored. If you want to use the DHCP server function on the AT&T virtual router, you can configure your onsite router as a relay agent that routes the DHCP clients to the virtual router.

Default Internet Settings

Feature Default Settings

Internet speed Up to 150 mbp/s

IP Version Dual Stack

Routing Protocol Static only

Routable IPv4 blocks

AT&T Provided only; set to a /32 address [PATed]

Routable IPv6 blocks

AT&T Provided only; set to a /64 block (vCE LAN Subnet)



vCE v4 LAN address

Highest address from the vCE v4 LAN Subnet provided by AT&T, e.g., 10.192.1.254/24

vCE v6 LAN address

Highest address from the vCE v6 LAN Subnet v4 LAN Subnet provided by AT&T.

PAT 1 default pool provided (vCE v4 LAN Subnet)

NAT Not Enabled

V4 DHCP 1 default pool provided (vCE v4 LAN Subnet)

V6 HDCP 1 default pool provided (vCE v6 LAN Subnet)

Firewall options Stateful set to ‘Y’ – allows outbound traffic only

Figure 36 Default Internet Settings

Frequently Asked Questions The following are some frequently asked questions about AT&T Dedicated Internet on Demand.

Do I need to do any extra configuration if I want to use a router on my premises?

If you use a layer-2 switch, hub, or access point, any connected layer-3 devices (such as laptops, workstations, tablets) dynamically acquire an IP address from a DHCP server. The AT&T virtual router is configured by default as the DHCP Server and the layer-3 devices are configured as DHCP clients.

If you use a router (whether wireline or wireless) at your premise, you need to manually configure the IP addresses, routing, DHCP settings, NAT, PAT, and firewall.

Can I increase my Internet bandwidth above my minimum bandwidth commitment for usage-based billing?

When you change your Internet bandwidth, you have available the whole range from 2Mbps to 150Mbps. The range of committed minimum bandwidth depends on your Internet bandwidth. When you change your Internet bandwidth, you’ll need to select a new minimum bandwidth commitment for your usage-based billing.

Can I configure a separate firewall for my Internet connection?

Not at this time. The firewall is provisioned at the virtual router as part of the virtual router configuration.

To configure IPv4, IPv6, and MAC filter rules for the firewall, do the following:



35. Go to the AT&T Dedicated Internet on Demand web site

(https://www.att.com/ebiz/sdnom).

36. Find the Internet connection.

37. Find the Internet connection you want, click the gear icon ( ), and then, from the

menu, select Configure Firewall.

You’ll go to a site outside of AT&T Business Center where you can add, remove, and edit your filter rules.

Configuring Your Firewall

More details on how to Configure your Firewall are available on Care Central.


http://carecentral.att.com/downloads/ADIoD_Firewall_Guide_4.5.17.pdf

For AT&T Dedicated Internet on Demand...Managed Internet Service on Demand) services) and then connect a computer to your new Internet connection once available. After you activate

Documents