3Com 3CR856-95 manual

dua 08 569 - 5a a a 02. b o o k Pa g e 1 T hur s da y , No ve m b e r 7 , 2002 3: 09 PM[...]

3Com Corporati on 5400 Bayfront Plaza Santa Clara, Califor nia 95052-8145 Copyright © 2002, 3Com Corporation. A ll rights reser ved. No part of this do cumentation may be repr oduced in any form or by any means or used to make any der ivative work (such as transl ation, transformation, or adapta tion) without written permission from 3Com T echnolo[...]

3 C ONTENTS Contents 3 About This Guide 7 Naming Convention 7 Conventions 7 Introducing the OfficeConnec t Cable/DSL Secure Gateway 9 OfficeConnect Cable/DSL Secure Gateway 9 Cable/DSL Secur e Gateway Advantages 10 Package Contents 11 Minimum System and Component Requirements 11 Fr ont Panel 12 Rear Panel 13 Installing the Gateway 15 Introduction 1[...]

4 LAN Settings 35 LAN IP Settings 35 DHCP Clients List 37 Internet Settings 38 Connection to ISP 39 Setting up NA T 43 Configuring the Firewall 45 The Virtual Servers Menu 45 PC Privileges 47 Special Applications 49 Advanced 52 Configuring VPNs 53 Setting the VPN Mode 53 Viewing VPN Connections 55 Editing IPSec Routes 60 Accessing the System T ools[...]

5 Cable Specifications 78 Safety Information 79 Important Safety Information 79 Wichtige Sicherheitshinweise 79 Consignes im portantes de sécurité 80 End User Software Licence Agreement 83 3Com Corporation END USER SOF TW ARE LICENSE AGREEMENT 83 ISP Information 85 Information Regarding Popular ISPs 85 Glossary 87 Index 93 Regulator y Notices 99 [...]

6 dua 08 569 - 5aa a02. b o o k Pag e 6 T hur s da y , No ve m b e r 7 , 2002 3: 09 PM[...]

7 A BOUT T HIS G UIDE This guide is intended for use by th ose responsible for install ing and setting up network equi pment; consequently , it assumes a basic working knowledge of LANs (Local Area Networks) and Internet gateway systems. If a release note is shipp ed wi th this OfficeConnect Cable/DSL Secure Gatewa y and contains in formation that [...]

8 Feedback about this User Guide Y our suggestions ar e very important to us. They will help make our documentation mor e useful to you. Please e-mail comments about this document to 3Com at: pddtechpubs_comments@3com.com Please include the following information when commenting: ■ Document title ■ Document part number (o n the title page) ■ P[...]

9 I NTR ODUCING THE O FF I C E C ONNECT C ABLE /DSL S ECUR E G ATEWAY Welcome to the world of networking with 3Com ® . In the modern business environment, communi cation and sharing information is crucial. Computer ne tworks have proved to be one of the fastest modes of communication but, until r ecently , only large businesses could af ford the n[...]

10 Figure 2 Example Network Usi ng a Cable/DSL Sec ure Gateway Cable/DSL Secu re Gateway Advantages The advantages of using a Gateway include: ■ Shared Internet connection. ■ No need for a dedicated, “always on” computer serving as your Internet connection. ■ Cross-platform op eration for compatibility with Windows, Unix and Macintosh com[...]

11 Package Conten ts The Of ficeConnect Cable/DSL Secure Gateway kit includes the following items: ■ One OfficeCo nnect Cable/DSL Secure Gatewa y ■ One power ad apter for use with the Gateway ■ Four rubber feet ■ One stacking clip ■ One Ethernet cable ■ One CD-ROM containing ■ the Gateway Discovery pr ogram ■ a backup copy of the Ga[...]

12 Front Panel The fr ont panel of the Gateway c ontains a series of indica tor lights (LEDs) that help describe the state of various networking and connection operations. Figure 3 Cabl e/DSL Secur e Gateway - Fr ont Pane l 1 Alert LED (Orange) Indicates a number of dif ferent condi tions, as described below . Off T he Gateway is operating normall [...]

13 ■ the connected device is switched off ■ there i s a problem with the conn ection. “ T roubleshooting ” on page 67 . 4 Cable/DSL Status LED Green (100 Mbps link ) / Y ell ow (10 Mbps link) Indicates a number of dif ferent condi tions, as described below . On The link between the Gateway and the cable or DSL modem is OK. Flashing The link[...]

14 dua 08 569 - 5aa a02. b o o k Pag e 14 T hur s da y , No ve m b e r 7 , 2002 3: 09 PM[...]

15 I NSTALLING THE G ATEWAY Introd uction This chapter will guide you through a ba sic installation of the OfficeConnect Cabl e/DSL Secure Gateway , including: ■ Connecting the Gateway to the Internet. ■ Connecting the Gateway to your network. Positioning the Ga teway Y ou should place the Cable/DSL Secur e Gateway in a location that: ■ is co[...]

16 PPPoE If your ISP allocates IP information dynami cally over PPPoE, you need a User Name and Passwor d: PPTP If your ISP allocates IP information dynami cally over PPTP , you need a User Name and Passwor d Only enter a PPP oE Service Name or Host Name or a PP TP Server Address if your ISP requires you to do this. Do not e nter anything if your I[...]

17 Powering Up the Gateway 1 Plug the power adapter into the power adapter socket located on the back panel of the Gateway (r efer to “ Power Adapter socket ” on page 13 ). 2 Plug the power adapter into a standar d electrical wall socket. Connecting the Cable/DSL Secur e Gateway The first step for install ing your Cable/DSL Secur e Gateway is t[...]

18 dua 08 569 - 5aa a02. b o o k Pag e 18 T hur s day , No ve m b er 7 , 2002 3: 09 PM[...]

19 S ETTING U P Y OUR C OMPUTERS The Of ficeConnect Cable/DSL Secure Gateway has the abi lity to dynamically allocate network addresses to the computers on your network, using DHCP . However , your computers need to be configured co rrectly for this to take place. T o change the configur ation of your compu ters to allow this, follow th e instructi[...]

20 Figure 7 Int ernet Protocol Propertie s 7 Restart your computer . Windows 95, 98 , ME 1 From the Windows Start Menu, select Settings > Control Panel . 2 Double click on Network . Select the TCP/IP item for your network card and click on Properties . 3 In the TCP/IP dialo g, select the IP Address tab, and ensur e that Obtain IP addre ss automa[...]

21 Figure 8 Int ernet Properti es Y ou may wish to remove the PPPoE client software from your computer to free resources, as it is not required for use with the Gateway . Disabling W eb Proxy Ensure that you do not have a web pr oxy enabled on your computer . Go to the Control Panel and cli ck on Internet Options . Select the Connections tab and cl[...]

22 dua 08 569 - 5aa a02. b o o k Pag e 22 T hur s da y , No ve m b e r 7 , 2002 3: 09 PM[...]

23 R UNNING THE S ETUP W IZARD If the Gateway needs to be confi gur ed, for example if it has not yet been used or has been reset, it will run the Setup W izar d automatically . This detects some of the settings the Gateway needs to function and asks that you input the others. Accessing the Wizar d The Cable/DSL Secur e Gateway Setup W izar d is We[...]

24 Figure 11 Welcome Screen If the Wiza rd does not launch automatically (this may occur if the Gateway has been power ed up or configured pr eviously) you can launch the Wi za rd manually . 5 T o launch the Wizar d manually click on the Setup Wizard tab in the welcome scre en followed by the WIZARD... button. Figure 12 W izard Screen Click Next to[...]

25 Figure 13 Change Administration P assword Screen Choose a password that you can remember but that others are unlikely to guess. Remember that th e password is case sensitive. Click Next to display the Tim e Zone setup screen ( Figur e 14 ). Setting the Time Zone The Gateway sets its time automati cally w hen it connects to the Internet. This tim[...]

26 Auto-Configuration Sett ings If the Gateway is able to detect a PPPoE or DHCP server on it s Ethernet Cable/DSL port then it will of fer you the option of configurin g its Internet se ttings au tomatic ally . As an ex ample, the Auto-Configuration screen for PPPoE is shown in Figure 15 below . Figure 15 PPPoE Aut o-configuration Screen Click Nex[...]

27 Static IP Mode T o setup the Gateway for use with a static IP address connection, use the followi ng procedure: Figure 17 Stati c IP Mode Screen 1 Enter your IP Address i n the IP Address text box. 2 Enter your subnet mask in the Subnet Mask text box. 3 Enter your ISP gateway addr ess in the Internet (ISP) Gateway Address text box. 4 Enter your [...]

28 Figure 19 Clone MAC Address Screen 4 If your ISP r equires an assigned MAC addr ess, select the appropriate radi o button: ■ Y es, please clone the MAC address from the PC I’m currently using if the computer you are using now is the one that was previ ously connected directly to the cab le or DSL modem. ■ Y es, I would like to enter a MAC [...]

29 4 If your ISP r equires the addr esses of a Primary and Secondary DNS Server then enter them in the fields labelled Primary DNS Address and Secondary DNS Address . 5 If your ISP r equires you to supply a host name en ter it in the Host Name box, otherwise leave the box blank. 6 Click Next to conti nue. Continue at “ C hoosing your LAN Settings[...]

30 Choosing your LAN Settings The LAN settings screen, shown in Figure 23 below , displays the Gateway’ s current IP addr ess and su bnet mask. If this is the first time the Wizard has been run it will display the default addr ess and subnet mask. Figure 23 LAN IP Addr ess Screen 1 Enter yo ur chosen IP addr ess for the Gateway in the IP Addres s[...]

31 Figure 24 DHCP Serv er Setup Screen 3Com recommends that you activate the DHCP server and leave it at the default values unless you already have a DHCP Server on your netw ork. ■ T o activate the DHCP Server option, select Enable the DHCP server with the following settings: . The DHCP server will default to the addr esses 192.168.1.100 to 192.[...]

32 If want to make changes, click the Back button until you reach the screen whic h contains the settings you want to change and follow the instructio ns from th at point. Y our Gateway is now configur ed. Y ou can start using your Gatewa y straight away or further configure you r Gateway (see “ Gateway Configuration ” on page 33 ). dua 08 569 [...]

33 G ATEWAY C ONFIGURATION This chapter de scribes all the options ava ilable throug h the Gateway configuration pages, and is pr ovided as a refer ence. Navigating Thr ough the Gateway Configuration Pages T o get to the configuration pages, br owse to the Gateway by entering the URL in the location bar of your br owser . The default URL is http://[...]

34 We lcome Screen The We lco me section allows you to view the Notice board and to change your Passwor d. Y ou can also gain access to the Configuration Wizard. See “ Accessing the W izar d ” on page 23 for details. Viewin g the Notice Board The Notice Boar d, shown in Figure 27 bel ow , is used to display important messages. For example, you [...]

35 Setup Wizard Figure 29 W izard Screen Click the WIZARD... button to launch the configuration wizar d. Refer to “ Running the Setup Wizar d” on page 23 for information on how to run the wizard. LAN Settings The LAN Settings menu allows you to view and amend you r Gateway’ s: ■ LAN settings. ■ DHCP server settings. ■ DHCP client settin[...]

36 When changing the IP Addr ess of the Gateway choose an address that will be un ique in your network and in your network’ s subnet. The default IP Address of the Gateway is 192.168.1.1. When you change the IP Address o f the Gateway you must reboot all computers that gain th eir IP add ress from the Gate way before they will be able to access t[...]

37 DHCP Clients List The DHCP Client s screen pr ovides details of the devices that ha ve been given IP addr esses by the Gateway’ s DHCP server . For each device that has been granted a lease, the IP address , Host Name and MAC address of that device is displayed. Figure 31 DHCP Client s Screen The Gateway grants leases for 7 days. If a computer[...]

38 Figure 32 Fixed DHCP Mapping Screen Internet Settings Befor e you can configure the Gateway , you need to know the IP information allocati on method used by your ISP . There ar e four differ ent ways that ISPs can allocate IP i nformation, as described below . When you install the Gateway , you will not need to use the PPPoE software on your PC.[...]

39 Connectio n to ISP This option, shown in Figure 33 , allows you to change th e method your Gateway uses to connect to your ISP . Y ou should only need to change these setti ngs if: ■ you change your Internet connection password (PPPoE only), or ■ your ISP informs you of a change in their settings or you change ISPs. Figure 33 Connect ion to [...]

40 Configur ing a Static IP Address If your ISP has allocated you o ne or more static addre sses you will have selected Static IP address (to be sp ecified manually) as your IP Allo cation Mode . Figure 34 Stati c Address Setup Screen The following se ttings are r equire d to set up Static IP addr ess connection. Enter the values pr ovided by your [...]

41 Configur ing a Dynamic IP Address If your ISP has allocated you a dynamic addr ess using DHCP you will have selected Dynamic IP a ddress (automatically allocated) as your IP Allo cation Mode . Figure 35 Dynamic Address Setup Screen T o setup the Gateway for use with a dynamic IP address connection the following settings ar e configured: ■ IP A[...]

42 Configuring a PPPoE conne ction If your ISP has allocated you a dynamic addr ess using PPPoE you will have selected PPPoE (PP P over Ethernet) as yo ur IP Allocat ion Mode . Figure 36 PPPoE Set up Screen Y our ISP may n eed you to enter host name or PPPoE settings. T o setup the Gateway for use with a PPPoE connection the following fields will n[...]

43 Configur ing a PPTP connection If your ISP has allocated you a dynamic addr ess using PPTP you will have selected PP TP (used by some European providers) as your IP Allo cation Mode. Figure 37 PPTP Setup Screen T o setup the Gateway for use with a PPTP connection the following fields will need to be completed. ■ IP Address — The internet add[...]

44 Figure 38 One-to -Many and One-to- One NA T Figure 39 Networ k Address T ranslation Sc reen Setting up On e-to-Many NA T This is very easy to set up a nd the Gateway’ s default mode. It works with any IP Allocation Mode and will map all the addresses on your LAN to the Inter net addr ess of your Gateway . T o set up One-to-Many NA T : 1 Select[...]

45 Setting up On e-to-One NA T The following criteria must be me t to be able to use One-to-One NA T : ■ Y ou must have a static Internet IP address for every computer on your network plu s one for the Gateway itse lf. ■ The addr esses must be in one continuous block in the sa me subnet ■ Y ou must have selected Static IP Address as your IP A[...]

46 Figure 41 Virt ual Servers Sc reen Creating a Virtual DMZ A virtual DMZ (De-Militarized Zone) Host is a computer on your network with r educed prote ction provided b y the firewall. This feature al lows a single computer to be exposed to 2-way communication fr om outside of your network. The PC is still protected ag ainst DoS and hacker attacks.[...]

47 Figure 42 Virt ual Servers Se ttings Screen Or select Custom to specify a suitable name for the service and then enter the port numbers requir ed for that service. If a service requi res more th an one port number enter the multiple ports as a comma separated list. Figure 43 Custom Se tup Screen 4 Click Add to save the settings. PC Privile ges S[...]

48 PC Priv ileges allows you to assign differ ent access rights for differ ent computers on your network, r estricting this access and controlli ng your users’ a ccess to outside resources. T o use a ccess control for all comp uters: 1 Click the Control PC Access to the Intern et radio button. 2 Click on All PCs to setup the access rights for all[...]

49 5 Either: ■ Enter the additional services th at you wish to allow in the except (specify ports) box and set the dr op down box to Allow . ■ Enter the services that you wish to deny in the except (specify ports) box and set the dr op down box to Deny . Enter multip le ports as either a comma separated list e.g. 101, 105, 107, or as a range, e[...]

50 So that these spe cial applications can work prop erly and are not blocked, the fir ewall needs to be told about them. In each instance there wil l be an outgoing trigger which tells the Gateway’ s firewall that the app lication has started and to allow the incoming connections. Each defined Special Appli cation only supports a single computer[...]

51 Figure 49 Custom Sp ecial Applicat ions Setup Screen ■ Application Name — Each specia l application is named and will detect the ports that need to be opened so you do not need to specify them. This name is not used by the Gatewa y and is only to enable you to identify the connecti on. ■ T rigger Port — This is the TCP/IP port number tha[...]

52 Advanced Select Advanced to display the Advanced Settings screen. See Figur e 50 below . Figure 50 Advanc ed Settings Screen The Internet connects millions of computer users throughout the world. The vast majority of the computer users on the Internet are fri endly and have no intention of brea king into, stealing from, or damagin g your network[...]

53 Configuring VPNs A Virtual Private Network (VPN) is a secure tunnel between networks or between a network and a user . The Gateway supports both network to network connections and network to remote client connectio ns. The Gateway supports IPSec tunnels, L2TP over IPSec, and PPTP connections and allows VPN pass-thr ough to enable other secure de[...]

54 Figure 51 VPN Mode Screen L2TP Configura tion If you have enabled L2TP over IPSec you must enter the following items: 1 In the IPSe c Configur ation field, enter This Gateway’ s ID as an Internet IP address or name of the Gateway that you ar e configuring. This valu e is common across all IPSec connectio ns but does not apply to PPTP connectio[...]

55 PPTP Configuration T o set up the Gateway for PPTP you must allocate IP addresses from the Gateway’ s LAN for use with PPTP . The connec tions made by PPTP will appear to come fro m these addresses. The addresses must be in a contin uous range. In the Address Pool for PP TP and L2TP clients fi eld enter: ■ The first LAN addr ess you wish to [...]

56 ■ Name — Identifies the tunnel. Clicki ng the name of a connection displa ys the Edit VPN Connection screen. See “ Adding and Editing VPN C onnectio ns ” below. ■ Description — A text description that enables you to identify a connection. This field in the tabl e additionally displays whether the connection is curr ently active. ■ [...]

57 Depending on which T unnel T ype you have selected, choose fr om the following to edit or add the r emaining fields: ■ “I PSec Connecti ons using Remote User Access ” on page 57 ■ “ IPSec Connections u sin g Gateway to Gateway ” on page 57 ■ “ L2TP over IPSec Connections ” on page 59 ■ “P PTP Connections ” on page 60 I PS[...]

58 Figure 54 IPSec Connectio n - Gateway to Gatew ay If the remote Gateway has a LAN IP address of 192.168 .1.1 and a subnet mask of 255.255.255.0 then th e LAN IP address of the remote subnet is 192.16 8.1.0. The Gateways must be configured with LAN IP address ranges that do not overl ap. ■ Remote Subnet address — this is set as 255.255 .255.0[...]

59 Gateway T w o is located at the sale s office and is configur ed with the following settings: ■ Internet IP address: 174.27. 34.202 ■ LAN IP addr ess: 192.168.2.1 ■ Remote Subnet Mask: 255 .255.255.0 T o set up an IPSec Connection between the two Gateways, do the following on each Gateway: 1 Select IPSec Enabled from the VPN Mode screen. 2[...]

60 Click Apply to save your changes o r Close to return without saving. When you have created a user account the user wi ll need to know in order to enable conne ction. PPTP Connec tions If you have selected PPTP as a T unnel T ype, enter the following: ■ Password — The Password that the user will need to supply to connect. ( Figure 56 ) When y[...]

61 Figure 57 IPSec Routes Figure 58 Edit Rou te Accessing the System T ools The System T ools menu includes four administration items: Restart, Time Zone, Configuration , and Upgrade . See Figur e 59 . Restart Pressing the Restart the Gateway button has the same ef fect as power cycling the unit. No configur ation information will be lost but the l[...]

62 Any network users who are curr ently accessing the Internet will have their access interrupted whil st the restart takes place, and they may need to reboot their comp uters when the restart has completed and the Gateway is ope rational again. Time Zone Choose the time zone that is closest to your actual locati on. The time zone setting is used b[...]

63 ■ If you want to reinstate the configuration settings pr eviously saved to a file, click Browse to locate the backup file on your computer , and then RESTORE to copy the configurati on back to the Gateway . For security purposes restori ng the confi guration does not change the password. ■ If you want to r eset the settings on your Gateway t[...]

64 The upgrade pr ocedure c an take a few minutes, and is complete when the Alert LED has stopped fl ashing and is permanently off. Make sure that you do not interrupt power to the Gateway during the upgrade pr ocedure; if you do, the softwar e may be corrupted and the Gateway may no t start up properly afterwards. If the Alert LED comes on continu[...]

65 Figure 64 Log Sett ings Screen Obtaining Support and Feedback for your Gateway Selecting Support/Feedback on the main menu generates bo th: ■ The support links scree n, which contains a list of Internet links that provide informati on and support concerning the Gateway . ( Figur e 65 ) Figure 65 Suppor t Screen dua 08 569 - 5aa a02. b o o k Pa[...]

66 ■ The feedback links scr een, which contains an Inte rn et link to the 3Com website so that you can pro vide feedback on the produ ct. ( Figur e 66 ) Figure 66 Feedba ck Screen dua 08 569 - 5aa a02. b o o k Pag e 66 T hur s da y , No ve m b e r 7 , 2002 3: 09 PM[...]

67 T ROUBLESHOOTING Basic Connection Checks ■ Check that the Gateway is connected to your computers and to the Cable/DSL modem, and that all the equip ment is power ed on. Check that the LAN and Cable/DSL port link status LEDs on the Gateway ar e illuminated, and that any corr esponding LEDs on the Cable/DSL modem and the NIC are also illuminated[...]

68 Connecting to the Internet If you can br owse to the Gateway configuration screens but cannot access sites on the Internet, check the followin g: ■ Confirm that the physical connection betwe en the Gateway and the Cable/DS L modem is OK, and that the link status LEDs on both Gateway and modem are ill uminated. ■ Confirm that the connection b[...]

69 6 Re-apply power to the Gateway , and when the start-up sequence has completed, br owse to: http://192.168.1.1 and run the configurati on wizard. Y ou may need to restart your computer before y ou attempt this. 7 When the configuration wizar d has completed, you may reconnect your network as it wa s before. Alert LED The Alert LED will fla sh wh[...]

70 5 Follow the on-scr een instructions. Enter the path an d filename of the software image file. 6 When the upload has completed, the Gateway wil l restart, run the self-test and, if successful, r esume normal operati on. The Alert LED will go out. 7 Refer to the Instal lation Guide to r econnect your Gateway to the Cable/DSL modem and the compute[...]

71 U SING D ISCOVERY Running the Discovery Application 3Com provid es a user -friendly Discovery applic ation for detecting the OfficeConnect Cabl e/DSL Secure Gateway on the network. Windows Installa tion (95/98/2000/Me /NT) 1 Insert the Gateway CD-ROM in the CD-ROM drive on your computer . A menu will appear; select Gateway Discovery . Discovery [...]

72 3 Figur e 68 shows an example Discovered Dev ices screen. Highlight the Cable/DSL Secur e Gateway by clicking on it, and press Next . Figure 69 Discov ery Finish Screen 4 Click on Finish to launch a web br owser and display the login page for the Gateway . dua 08 569 - 5aa a 02. b o o k Pag e 7 2 T hur s da y , No ve m b e r 7 , 2002 3: 09 PM[...]

73 IP A DDR ESSING The Internet Protocol Suite The Internet protocol suite consis ts of a well-defined set of communications pr otocols and several standar d application protocols. T ransmission Control Pr otocol/Internet Protocol (TCP/ IP) is pr obably the most wid ely known and is a combination of two of the protocol s (IP and TCP) working togeth[...]

74 Ty p e Tw o In larger networks, wher e there ar e more devices, th e IP address of ‘192.168.100.8’ is, again, split into two parts but is structured differ ently: ■ Part one (‘192.168’) identifies the network on which the device r esides. ■ Part two (‘.100.8’) i dentifies the device within the network. This type of IP Address ope[...]

75 Auto-IP Addr essing Network devices use automatic IP addr essing if they are configur ed to acquire an addr ess using DHCP but ar e unable to contact a DHCP server . Automatic IP addressing is a scheme where devi ces allocate themselves an IP addr ess at random from the industry standar d subnet of 169.254.x.x (with a subnet mask of 255.255.0.0)[...]

76 dua 08 569 - 5aa a 02. b o o k Pag e 7 6 T hur s da y , No ve m b e r 7 , 2002 3: 09 PM[...]

77 T ECHNICAL S PECIFICATIONS This section lists the technical specifica tions for the OfficeConnect Cable/DSL Secure Gateway . Interfaces Cable or DSL modem connection - one 10/100 Mbps Ethernet port (10BASE-T/100 BASE-TX) with auto-MDIX. LAN connection - four 10/100 Mbps Ether net ports (10BASE-T/100BAS E-TX) with auto-MDIX. Operating T emperatur[...]

78 System Requir ements Operating Systems The Cable/DSL Secur e Gateway will support the followin g Operating Systems: ■ Windows 95, 98, Me ■ Windows NT 4.0 ■ Windows 2000 ■ Windows XP ■ Mac OS 8.5 or higher ■ Unix Ethernet Performance The Cable/DSL Secur e Gateway complies to the IEEE 802.3i, u and x specifications. Cable Specification[...]

79 S AFETY I NFORMATION Important Safety Inform ation WAR NI NG : W arnings contain directions that you must follow for your personal safety . Follow all directions carefully . Y ou must read the following safety informat ion carefully before you install or remove the unit: WAR NI NG : Exceptional care must be taken during installation and removal [...]

80 VORSICHT : Die Netzsteckdose muß in der Nähe des Geräts und leicht zugänglich sein. Die Stromversorgung des Geräts kann nur durch Herausziehen des Gerätenetzkabels aus der Netzsteckdose unterbrochen werden. VORSICHT : Der Betrieb dieses Geräts erfolgt unter den SEL V -Bedingungen (Sicherheitskleinstspannung) gemäß IEC 60950. Diese Bedin[...]

81 si l'équipement auquel il est raccordé fonctionne dans les mêmes conditions. A VERTISSEMENT : Il n’y a pas de partie s remplaceables par les utilisateurs ou entretenues par les utilisateurs à l’intérieur du moyeu. Si vous avez un problème physique avec le moyeu qui ne peut pas être résolu avec les actions de la résolution des p[...]

82 dua 08 569 - 5aa a 02. b o o k Pag e 8 2 T hur s da y , No ve m b e r 7 , 2002 3: 09 PM[...]

83 E ND U SER S OFTWAR E L ICENCE A GR EEMENT 3Com Corporation END USER SOF TW ARE LICENSE AGREEMENT YOU SHOULD CAREFULLY READ THE FOLLOWING TERMS AND CON DITIONS BEFORE DOWNLOADING, INSTAL LING AND USING TH IS PRODUCT, THE US E OF WHICH IS LICENSED BY 3COM CORPORATION ("3COM") TO ITS CUSTOMERS FOR THEIR USE ONLY AS SET FORTH BELOW. DOWNL[...]

84 such termination you agree to destroy the Software and Do cumentation, together with all copies and merged portions in any form. LIMITED WARRANTIE S AND LIMITATION OF LIAB ILITY: All warrant ies and limitations of liability applicable to t he Software are as stated on the Limited Warranty Card or in the product manual, whether in paper or electr[...]

85 ISP I NFORMATION Information Regar ding Popular ISPs Intern et Connection Ty p e s Characteristics Popular ISPs Dynamic IP (Clone MAC) Cable modem ISP , non-hostname based. Need to clone MAC in the DHCP page of router . MediaOne , RoadRunner , Optimu m Online, T ime W arn er , Charter and Adelphia, Metrocast, RCN Dynamic IP (Hostname) Cable ISP [...]

86 dua 08 569 - 5aa a 02. b o o k Pag e 8 6 T hur s da y , No ve m b e r 7 , 2002 3: 09 PM[...]

87 G LOSSARY 10BASE- T The IEEE specification for 10 Mbps Ethernet over Category 3, 4 or 5 twisted pair cable. 100BASE- TX The IEEE specification for 100 Mbps Fast Ethernet over Category 5 twisted-pair cable. 3DES T riple DES (See DES). 3DES is an extremely secur e encryption system that works by applying the DES encryption sy stem three times on t[...]

88 software that runs on Windows NT Server , and Windows 95 and Windows 98 will call the server to obtain the addr ess. W indows 98 will allocate itself an addr ess if no DHCP server can be found. DNS Domain Name System. DNS all ows Internet host computers to have a domain name (such as 3com.com) and one or more IP addresses (s uch as 192.34.45.8).[...]

89 IETF Internet Engineering T ask Force . An organization responsib le for providing engineering solutions for TCP/IP networks. In the network management ar ea, this gro up is responsible for the development of the SNMP pr otocol. IP Internet Protocol. IP is a l ayer 3 network protocol that is the standard for sending da ta through a networ k. IP [...]

90 Network A Network is a collection of computers and other computer equipment that ar e connected for the purpose of exchanging information or sharing r esources. Networks vary in size, some ar e within a single r oom, others span continents. Network Interface Car d (NIC) A circuit bo ard installed into a piece of computi ng equipment, for example[...]

91 TCP/IP is now supported on almost all platforms, and is the protocol of the Internet. TCP relates to the content of the data travel ling through a network — ensuring that the information sent arrives in one piece when it reach es its destination. IP relate s to the address of the end station to which data is be ing sent, as well as the address[...]

92 dua 08 569 - 5aa a 02. b o o k Pag e 9 2 T hur s da y , No vem b e r 7 , 2002 3: 09 PM[...]

93 I NDEX Numbers 100BASE-TX 87 10BASE-T 87 3DES defined 87 upgrading to 63 A access rights 48 adding special appli cations 50 address TCP/IP 73 admin passwor d 23 changing 34 advanced settings 52 alert LED 12 Apple Macintosh. see Ma cintosh auto-configuration wi zard 26 Auto-IP addr essing 75 Auto-negotiation 87 B bandwidth 87 BCIQ statement 99 bl[...]

94 digital subscriber line 88 disabling IPSec 56 disabling PPPoE cli ent software 20 disabling th e firewa ll 52 disabling web pr oxies 21 discovery application 71 DMZ virtual 46 DNS 88 domain name syste m 88 DSL 88 DSL Ethernet port 13 DSL modem 88 DSL status LED 13 dynamic host contr ol pro tocol 87 E End User Software Licence Agreement 83 Ethern[...]

95 Internet settings blocking access 48 configuring 38 DHCP 41 PPPoE 42 static addr ess 40 wizard 26 inventor y 11 IP addr ess 73 IP defined 89 IPSec defined 89 IPSec Routes editing 60 ISP defined 89 ISP Information 85 L L2TP 53 editing 59 LAN defined 89 LAN Ethernet port 13 LAN settings configuring 35 wizard 30 LAN status LED 12 LED alert 12 cable[...]

96 P package contents 11 passwor d changing 34 system 23 wizard 24 PC privileges setting 47 PING allowing 52 port cable/DSL Ethernet 13 LAN Ethernet 13 positioning the Gate way 15 power adapter socket 13 power cycle 61 power LED 12 powering up the Gateway 17 PPPoE changing the passwor d 38 defined 90 disabling 20 disabling client softwa re 20 Inter[...]

97 adding 50 custom 50 static addre ss recor ding settings 16 static Internet settings 40 status viewing 64 status LED cable/DSL 13 LAN 12 subnet mask 36, 90 support 65 switch 90 system password 23 system requir ements 78 system tools 61 T TCP/IP 73, 89 defined 90 technical specifica tions 77 technical support 65 time zone setting 62 wizard 25 traf[...]

98 dua 08 569 - 5aa a 02. b o o k Pag e 9 8 T hur s day , No ve m b er 7 , 2002 3: 09 PM[...]

99 R EGULATORY N OTICES FCC Statement This equipment has b een tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FC C Rules, and the Canadian Department of Communications Equipment Standards en titled , “Digital Apparatus,” ICES-003. These limits are designed to provide reasonable protection aga[...]

100 dua 08 569 - 5aa a02. b o o k Pag e 100 T hur s day , No ve m b er 7 , 2002 3: 09 PM[...]

dua 08 569 - 5aa a02. b o o k Pag e 101 T hur s day , No ve m b er 7 , 2002 3: 09 PM[...]

DUA08569-5AAA02 Published November 2002 dua 08 569 - 5aa a02. b o o k Pag e 102 T hur s day , No ve m b er 7 , 2002 3: 09 PM[...]