Netopia 4753 manual

Net opia ™ 4753 G.SH DSL Integra ted Access Device Administration Guide[...]

C o p yright ©2001 Netopia, Inc., v .051601 All rights reser ved. Printed in the U.S.A. This manual and any associated ar twork, software, and product designs ar e copyrighted with all rights reser ved. Under the copyright laws such materials may not be copied, in whole or par t, without the prior written consent of Netopia, Inc. Under the law , c[...]

Contents iii G Part I: Getting Started Chapter 1 — Intr oduction.......................................................... 1-1 Over view ....................................................................... 1-1 Features and Capabilities ............................................... 1-1 How to Use This Guide ...................................[...]

iv Administration Guide Chapter 5 — Connecting to Y our Local Network ......................... 5-1 Readying Computers on Y our Local Network ..................... 5-2 Connecting to an IP and T elephone Network ..................... 5-3 Chapter 6 — Console-Based Management ................................. 6-1 Connecting through a T elnet Sessi[...]

Contents v G Creating a New Connection Pr ofile................................. 9-10 The W AN Default Profile ................................................ 9-13 IP Parameters (Default Profile) scr een ................. 9-14 The A TMP/PPTP Default Pr ofile ..................................... 9-15 System Configuration Screens .............[...]

vi Administration Guide Suppor ted traf fic ............................................... 11-5 MultiNA T Configuration ................................................. 11-6 Easy Setup Profile configuration .......................... 11-6 Ser ver Lists and Dynamic NA T configuration ......... 11-6 IP setup ...................................[...]

Contents vii G Allowing VPNs through a Fir ewall ................................. 12-21 PPTP example .................................................. 12-23 A TMP example ................................................. 12-26 Chapter 13 — Security ........................................................... 13-1 Suggested Security Measures.....[...]

viii Administration Guide Cur rent status ................................................... 14-3 Status lights ...................................................... 14-3 Statistics & Logs ......................................................... 14-4 Event Histories ............................................................ 14-4 W AN Event[...]

Contents ix G Part III: Appendixes Appendix A — Troubleshooting .................................................. A-1 Configuration Problems .................................................. A-1 Console connection problems ............................... A-2 Network problems ................................................ A-2 How to Reset the[...]

x Administration Guide Agency Approvals ........................................................... E-2 Regulator y notices ............................................... E-2 Impor tant Safety instr uctions ............................... E-4 Netopia 4753 Specifications .......................................... E-5 Physical inter face ..........[...]

P P P P a a a a r r r r t t t t II I I : : : : G G G G e e e e t t t t t t t t ii i i n n n n g g g g S S S S t t t t a a a a r r r r t t t t e e e e d d d d[...]

Administration Guide[...]

Introduction 1-1 C C C C h h h h a a a a p p p p t t t t e e e e r r r r 1 1 1 1 II I I n n n n t t t t r r r r o o o o d d d d u u u u c c c c t t t t ii i i o o o o n n n n O O O O v v v v e e e e r r r r v v v v ii i i e e e e w w w w The Netopia 4753 V oice/Data Integrated Access Devices (IADs) make it possible for small businesses to take adva[...]

1-2 Administration Guide An IAD combines the voice telephony features of a telephone PBX system with the data r outing features of an IP data router . The device uses a single outside line connection to car r y all voice and data transmissions. If the device uses a DSL inter face, it can car r y all of these ser vices over a single existing copper [...]

Setting Up Internet Services 2-1 C C C C h h h h a a a a p p p p t t t t e e e e r r r r 2 2 2 2 S S S S e e e e t t t t t t t t ii i i n n n n g g g g U U U U p p p p II I I n n n n t t t t e e e e r r r r n n n n e e e e t t t t S S S S e e e e r r r r v v v v ii i i c c c c e e e e s s s s This chapter describes how to obtain and set up Internet[...]

2-2 Administration Guide Finding an Internet Service Provider The Netopia 4753 G.SHDSL Integrated Access Device provides its high speed symmetric (two-way) digital connection to the Internet thr ough a Competitive Local Exchange Car rier (CLEC) -- a type of mini phone company . The CLEC uses a compatible type of switching equipment known as a Digit[...]

Setting Up Internet Services 2-3 Setting up a Netopia 4753 account Check whether your ISP has the Netopia 4753 on its list of suppor ted pr oducts that have been tested with a par ticular configuration. If the ISP does not have the Netopia 4753 on such a list, describe the Netopia 4753 in as much detail as needed, so your ISP account can be optimi[...]

2-4 Administration Guide not define the IP address infor mation on your local LAN. Y ou can define this infor mation based on an IP configuration that may already be in place for the existing network. Alter natively , you can use the default IP address range used by the r outer . Without Network Addr ess T ranslation If you are not using Network[...]

Making the Physical Connections 3-1 C C C C h h h h a a a a p p p p t t t t e e e e r r r r 3 3 3 3 M M M M a a a a k k k k ii i i n n n n g g g g t t t t h h h h e e e e P P P P h h h h y y y y s s s s ii i i c c c c a a a a ll l l C C C C o o o o n n n n n n n n e e e e c c c c t t t t ii i i o o o o n n n n s s s s This section tells you how to [...]

3-2 Administration Guide What Y ou Need Locate all items that you need for the installation. Included in your package are: ■ The Netopia 4753 G.SHDSL Integrated Access Device ■ A power adapter and cord with a mini-DIN8 connector ■ One 6 ft. RJ45 10/100 Ethernet cable ■ One 6 ft. RJ45 DSL W AN (or Line) cable ■ A DB-9 to DB-9 console cable[...]

Making the Physical Connections 3-3 Important Safety instructions CAUTION: Depending on the power supply provided with the pr oduct, either the direct plug-in power supply blades, power supply cord plug or the appliance coupler ser ves as the main power disconnect. It is impor tant that the dir ect plug-in power supply , socket-outlet or appliance [...]

3-4 Administration Guide Identify the Connectors and Attach the Cables Identify the connectors on the back panel and attach the necessar y Netopia cables. The figure below displays the back of the Netopia 4753 G.SHDSL Integrated Access Device. Netopia 4753 back panel The following table describes all the Netopia 4753 G.SHDSL Integrated Access Devi[...]

Making the Physical Connections 3-5 Netopia 4753 Status Lights The figure below r epresents the Netopia 4753 status light (LED) panel. Netopia 4753 LED front panel The following table summarizes the meaning of the various LED states and colors: When this happens... the LEDs... The power is of f (button is not pressed in) 1 is dark . The power is o[...]

3-6 Administration Guide[...]

Sharing the Connection 4-1 C C C C h h h h a a a a p p p p t t t t e e e e r r r r 4 4 4 4 S S S S h h h h a a a a r r r r ii i i n n n n g g g g t t t t h h h h e e e e C C C C o o o o n n n n n n n n e e e e c c c c t t t t ii i i o o o o n n n n Once you have set up your physical local area network, you will need to configur e the TCP/IP stack [...]

4-2 Administration Guide Configuring TCP/IP on Windows-based Computers Configuring TCP/IP on a Windows computer requir es the following: ■ An Ethernet car d (also known as a network adapter) ■ The TCP/IP protocol must be “bound” to the adapter or car d Dynamic configuration (r ecommended) T o configure your PC for dynamic addr essing do[...]

Sharing the Connection 4-3 Static configuration (optional) If you are manually configuring for a fixed or static IP addr ess, per for m the following: 1. Go to Star t Menu/Settings/Contr ol Panels and double click the Network icon. From the Network components list, select the Configuration tab. 2. Select TCP/IP-->Y our Network Card . Then se[...]

4-4 Administration Guide 4. Click OK in this window and the next window . When prompted, r eboot the computer . Note: Y ou can also use these instr uctions to configure other computers on your network with manual or static IP addresses. Be sur e each computer on your network has its own IP address. Click on the DNS Configuration tab. Click Enable[...]

Sharing the Connection 4-5 Configuring TCP/IP on Macintosh Computers The following is a quick guide to configuring TCP/IP for MacOS computers. Configuring TCP/IP in a Macintosh computer requir es the following: ■ Y ou must have either Open T ranspor t or Classic Networking (MacTCP) installed. Note: If you want to use the Dynamic Host Configur[...]

4-6 Administration Guide Static configuration (optional) 3. In the TCP/IP window or in the MacTCP/More window , select or type infor mation into the fields as shown in the following table. 4. Close the TCP/IP or MacTCP control panel and save the settings. 5. If you are using MacTCP , you must restar t the computer . If you ar e using Open T ransp[...]

Sharing the Connection 4-7 Note: Y ou can also use these instr uctions to configure other computers on your network with manual or static IP addresses. Be sur e each computer on your network has its own IP address. More infor mation about configuring your Macintosh computer for TCP/IP connectivity through a Netopia 4753 can be found in T echnote [...]

4-8 Administration Guide[...]

Connecting to Y our Local Network 5-1 C C C C h h h h a a a a p p p p t t t t e e e e r r r r 5 5 5 5 C C C C o o o o n n n n n n n n e e e e c c c c t t t t ii i i n n n n g g g g t t t t o o o o Y Y Y Y o o o o u u u u r r r r L L L L o o o o c c c c a a a a ll l l N N N N e e e e t t t t w w w w o o o o r r r r k k k k This chapter describes how[...]

5-2 Administration Guide Readying Computers on Y our Local Network PC and Macintosh computers must have cer tain components installed befor e they can communicate through the Netopia 4753. The following illustration shows the minimal requir ements for a typical PC or Macintosh computer . Application software: This is the softwar e you use to send e[...]

Connecting to Y our Local Network 5-3 Connecting to an IP and T elephone Network The Netopia 4753 suppor ts Ether net connections through its Ether net por t. Y ou can connect a standar d 10 or 100Base-T Ethernet network to the Netopia 4753 using its Ether net por t. Netopia 4753 back panel Note: The Ringer Equivalence Number (REN) is used to deter[...]

5-4 Administration Guide[...]

Console-Based Management 6-1 C C C C h h h h a a a a p p p p t t t t e e e e r r r r 6 6 6 6 C C C C o o o o n n n n s s s s o o o o ll l l e e e e - - - - B B B B a a a a s s s s e e e e d d d d M M M M a a a a n n n n a a a a g g g g e e e e m m m m e e e e n n n n t t t t Console-based management is a menu-driven inter face for the capabilities [...]

6-2 Administration Guide may be using the router to connect to mor e than one ser vice provider or r emote site. ■ The System Configuration menus display and per mit changing: ■ Internet pr otocol setup. See “IP Setup” on page 10-1 . ■ Filter sets (firewalls). See “Security” on page 13-1 . ■ IP address ser ving. See “IP Address [...]

Console-Based Management 6-3 from the Star t menu. ■ If you connect a Macintosh computer , you can use the NCSA T elnet program supplied on the Netopia 4753 CD. Y ou install NCSA T elnet by simply dragging the application fr om the CD to your hard disk. Connecting a Console Cable to Y our Device Y ou can per for m all of the system configuration[...]

6-4 Administration Guide Launch your ter minal emulation software and configure the communications softwar e for the values shown in the table below . These are the default communication parameters that the Netopia 4753 uses. Parameter Suggested V alue T er minal type PC : ANSI-BBS Mac : ANSI, VT-100, or VT-200 Data bits 8 Parity None Stop bits 1 [...]

Console-Based Management 6-5 Navigating thr ough the Console Screens Use your keyboard to navigate the Netopia 4753’s configuration scr eens, enter and edit information, and make choices. The following table lists the keys to use to navigate through the console scr eens. T o... Use These Keys... Move through selectable items in a scr een or pop-[...]

6-6 Administration Guide[...]

Easy Setup 7-1 C C C C h h h h a a a a p p p p t t t t e e e e r r r r 7 7 7 7 E E E E a a a a s s s s y y y y S S S S e e e e t t t t u u u u p p p p This chapter describes how to use the Easy Setup console screens on your Netopia 4753 G.SHDSL Integrated Access Device. After completing the Easy Setup console screens, your device will be r eady to [...]

7-2 Administration Guide A screen similar to the following Main Menu appears: If you do not see the Main Menu, verify that: ■ If you are using a serial connection, that your serial por t speed is the same as the Netopia 4753’s default 9600 baud, for first use. ■ The computer used to view the console screen has its serial por t connected to t[...]

Easy Setup 7-3 Quick Easy Setup Connection Path This section may be all you need to do to configure your Netopia 4753 G.SHDSL Integrated Access Device to connect to the Internet. Y our ser vice provider must supply you with several parameter values for you to enter in the device. The ser vice provider will pr ovide values for the parameters shown [...]

7-4 Administration Guide (If you want to recor d these values, you can print these pages and use the spaces above.) If your provider assigns your device a Static IP addr ess, do the following: 1. Open a T elnet session to 192.168.1.1 to bring up the Main Menu. If you don't know how to do this, see “Connecting through a T elnet Session” on [...]

Easy Setup 7-5 2. Select the first item on the Main Menu list, Easy Setup . Press Retur n to bring up the DSL Line Configuration menu screen. DSL Line Configuration 3. Select Regional Setting and from the pop-up menu select either Annex A or Annex B. Nor th American users select Annex A; non-Nor th American users select Annex B. 4. Select Data L[...]

7-6 Administration Guide V oice Easy Setup 1. Select V oice Gateway and press Retur n. The pop-up menu will of fer you the choice of popular voice gateway devices. Y our selection depends on which type your ISP uses: CopperCom, JetStr eam, T ollBridge, TDSoft, or Zhone. 2. For any V oice Gateway other than T ollbridge, the V oice VPI and V oice VCI[...]

Easy Setup 7-7 Easy Setup Profile The Easy Setup Profile scr een is where you configure the parameters that contr ol the Netopia 4753’s connection to a specific remote destination, usually your ISP or a corporate site. On a Netopia 4753 G.SHDSL Integrated Access Device you can add up to 15 more connection pr ofiles, for a total of 16, althou[...]

7-8 Administration Guide IP Easy Setup The IP Easy Setup screen is wher e you enter information about your Netopia Router’s: ■ Ethernet IP addr ess ■ Ethernet Subnet mask ■ Domain Name ■ Domain Name Ser ver IP addr ess ■ Default gateway IP address Consult with your network administrator to obtain the infor mation you will need. For more[...]

Easy Setup 7-9 5. Type the Primar y Domain Name Ser ver address your ISP gave you. Pr ess Return. A new field Secondary Domain Name Ser ver will appear . If your ISP gave you a secondar y domain name ser ver addr ess, enter it here. Pr ess Return until the next field Default IP Gateway is highlighted. 6. If you do not enter a Default IP Gateway v[...]

7-10 Administration Guide The final step in configuring the Easy Setup console screens is to r estar t the Netopia 4753, so that the configuration settings take ef fect. 1. Select REST ART DEVICE . A prompt asks you to confir m your choice. 2. Select CONTINUE to restar t the Netopia Router and have your selections take ef fect. Note: Y ou can a[...]

V oice Configuration 8-1 C C C C h h h h a a a a p p p p t t t t e e e e r r r r 8 8 8 8 V V V V o o o o ii i i c c c c e e e e C C C C o o o o n n n n f f f f ii i i g g g g u u u u r r r r a a a a t t t t ii i i o o o o n n n n This chapter describes the telephony ser vices and configuration of the Netopia 4753 G.SHDSL Integrated Access Device.[...]

8-2 Administration Guide distance or local calls. T oll Restriction Operation - PBX/Local Switching Mode: When you pick up the phone, you receive local PBX dial tone. When a 9 (or outside line code) is pressed, the IAD detects the digit and r eturns busy (locally generated). Incoming calls are allowed. Extension calls (locally switched) ar e allowe[...]

V oice Configuration 8-3 ■ Select V oice Gateway and fr om the pop-up menu, choose the type of voice gateway device to which you will be connected. The choices are: CopperCom, JetStr eam, T ollBridge, TDSoft, or Zhone. ■ Select Ring Cadence and press Retur n. A pop-up menu allows you to choose between 20Hz (the default) and 25Hz for compliance[...]

8-4 Administration Guide Echo cancellation is set to Y es by default. For or dinar y telephone handsets, echo cancellation should be set to Y es (tur ned on) to eliminate echoes on the voice line. T oggling a por t to No allows you to connect a fax machine or modem to the phone por t (since fax machines and modems automatically cancel echoes). If y[...]

P P P P a a a a r r r r t t t t II I I II I I : : : : A A A A d d d d v v v v a a a a n n n n c c c c e e e e d d d d C C C C o o o o n n n n f f f f ii i i g g g g u u u u r r r r a a a a t t t t ii i i o o o o n n n n[...]

Administration Guide[...]

W AN and System Configuration 9-1 C C C C h h h h a a a a p p p p t t t t e e e e r r r r 9 9 9 9 W W W W A A A A N N N N a a a a n n n n d d d d S S S S y y y y s s s s t t t t e e e e m m m m C C C C o o o o n n n n f f f f ii i i g g g g u u u u r r r r a a a a t t t t ii i i o o o o n n n n This chapter describes how to use the console-based m[...]

9-2 Administration Guide W AN Configuration T o configure your Wide Ar ea Network (W AN) connection, navigate to the WAN Configuration screen from the Main Menu and select W AN Configuration , then W AN (W ide Area Network) Setup . The DSL Line Configuration screen appears. Each access concentrator (DSLAM) has a dif ferent set of defaults and [...]

W AN and System Configuration 9-3 need to change it unless your provider specifically tells you to do so. ■ Select Data Link Encapsulation and from the pop-up menu choose your DLE. ■ If you selected RFC1483, the next pop-up menu RFC1483 Mode of fers the choice of Bridged 1483 or Routed 1483. If you select Bridged 1483, a new option PPP over E[...]

9-4 Administration Guide M M M M u u u u ll l l t t t t ii i i p p p p ll l l e e e e A A A A T T T T M M M M P P P P V V V V C C C C c c c c o o o o n n n n f f f f ii i i g g g g u u u u r r r r a a a a t t t t ii i i o o o o n n n n Y ou configur e Vir tual Circuits in the Add/Change Cir cuit screen. From the Main Menu, navigate to the DSL Line[...]

W AN and System Configuration 9-5 Choosing Display/Change Circuit (or Delete Cir cuit) displays a pop-up menu that allows you to select the circuit to be modified or deleted. C C C C h h h h a a a a n n n n g g g g ii i i n n n n g g g g a a a a c c c c ii i i r r r r c c c c u u u u ii i i t t t t If you want to make any changes to the circuit y[...]

9-6 Administration Guide ■ Circuit Enabled allows you to enable or disable the cir cuit, using the T ab key . The default is enabled. ■ Traffic Type allows you to select which type of traf fic will be routed on this cir cuit, V oice or Data. If you choose V oice, the Connection Profile is field becomes unavailable and does not display . ■[...]

W AN and System Configuration 9-7 A A A A d d d d d d d d ii i i n n n n g g g g a a a a c c c c ii i i r r r r c c c c u u u u ii i i t t t t Choosing Add Circuit displays the Add Cir cuit screen. The fields in the Add Circuit scr een are the similar to the fields in the Change Circuit scr een described above. Y ou can add up to seven cir cuits[...]

9-8 Administration Guide M M M M o o o o n n n n ii i i t t t t o o o o r r r r ii i i n n n n g g g g m m m m u u u u ll l l t t t t ii i i p p p p ll l l e e e e v v v v ii i i r r r r t t t t u u u u a a a a ll l l c c c c ii i i r r r r c c c c u u u u ii i i t t t t s s s s The General Statistics screen adds a selection for A TM VC Statistics.[...]

W AN and System Configuration 9-9 The A TM VC Statistics scr een appears. ■ T o display more infor mation about each circuit associated with the selected WAN module, use the up or down ar row key to highlight the circuit you want to view . Press Retur n. A pop-up window appears, displaying detailed infor mation for the selected circuit. ATM VC S[...]

9-10 Administration Guide Cr eating a New Connection Profile For a Netopia 4753, connection profiles ar e useful for configuring the connection and authentication settings for negotiating a PPP connection on the DSL link. If you are using the PPP data link encapsulation method, you can store your authentication infor mation in the connection pro[...]

W AN and System Configuration 9-11 3. Select Data Link Encapsulation and press Retur n. The pop-up menu of fers the possible data link encapsulation methods for connection profiles used for a variety of purposes: PPP , RFC1483, A TMP , PPTP , or IPsec. If you select any data link encapsulation method other than RFC1483, a Data Link Options menu i[...]

9-12 Administration Guide 7. T oggle or enter any IP Parameters you requir e and return to the Add Connection Pr ofile screen by pressing Escape. For more infor mation, see “IP Setup” on page 10-1 . 8. Select COMMIT and press Retur n. Y our new Connection Profile will be added. If you want to view the Connection Profiles in your device, r et[...]

W AN and System Configuration 9-13 The W AN Default Pr ofile If you are using RFC1483 datalink encapsulation, the WAN Default Profile screen contr ols whether or not the DSL link will come up without an explicitly configured connection pr ofile. (PPP datalink encapsulation does not suppor t a default pr ofile, and the corr esponding menu item[...]

9-14 Administration Guide IP Parameters (Default Profile) scr een If you are using RFC1483 datalink encapsulation, the IP Parameters (Default Pr ofile) screen allows you to configure various IP parameters for DSL connections established without an explicitly configur ed connection profile: For most DSL links, Network Address T ranslation (NA T[...]

W AN and System Configuration 9-15 The A TMP/PPTP Default Pr ofile The A TMP/PPTP Default Pr ofile screen controls whether or not your device will answer VPN connection attempts without an explicitly configured connection pr ofile. See “Vir tual Private Networks (VPNs)” on page 12-1 for more infor mation. System Configuration Scr eens Y o[...]

9-16 Administration Guide This par ticular path guide shows how to get to the IP Setup scr eens. The path guide represents these steps: ■ Beginning in the Main Menu, select System Configuration and press Retur n. The System Configuration screen appears. ■ Select IP Setup and press Retur n. The IP Setup screen appears. T o go back in this sequ[...]

W AN and System Configuration 9-17 The System Configuration menu screen appears: Network pr otocols setup These screens allow you to configur e your network’s use of the standard networking protocols: ■ IP: Details are given in “IP Setup” on page 10-2 . Filter sets These screens allow you to configur e security on your network by means [...]

9-18 Administration Guide The Netopia 4753 uses Network Time Protocol (NTP) by default to set the date and time automatically . Y ou may want to modify the default settings for your own environment. NTP takes ef fect five minutes after the device boots. At that time NTP attempts to connect to a central Time Ser ver and set the device’s clock. If[...]

W AN and System Configuration 9-19 DD/MM/YY , or YY/MM/DD. ■ Enter the Current Date in whatever for mat you have chosen. ■ From the pop-up System Time For mat menu select your prefer red time notation: AM/PM or 24hr . ■ Enter the Current Time in whatever for mat you have chosen. ■ From the AM or PM pop-up menu, select AM or PM. Console con[...]

9-20 Administration Guide SNMP (Simple Network Management Pr otocol) These screens allow you to monitor and configur e many of the data routing features of your network by means of a standard Simple Network Management Pr otocol (SNMP) agent. ■ Details are given in “SNMP” on page 14-13 . Security These screens allow you to add users and defi[...]

W AN and System Configuration 9-21 By default, all events are logged in the event histor y . ■ By toggling each event descriptor to either Ye s or No , you can deter mine which ones are logged and which are ignor ed. ■ Y ou can enable or disable the syslog client dynamically . When enabled, it will r epor t any appr opriate and previously unr [...]

9-22 Administration Guide[...]

IP Setup 10-1 C C C C h h h h a a a a p p p p t t t t e e e e r r r r 1 1 1 1 0 0 0 0 II I I P P P P S S S S e e e e t t t t u u u u p p p p The Netopia 4753 uses Internet Pr otocol (IP) to communicate both locally and with remote networks. This chapter shows you how to configure the r outer to route IP traf fic. Y ou also lear n how to configur[...]

10-2 Administration Guide IP Setup The IP Setup options screen is wher e you configure the Ethernet side of the Netopia 4753. The infor mation you enter here contr ols how the router routes IP traf fic. Consult your network administrator or ISP to obtain the IP setup infor mation (such as the Ethernet IP address, Ethernet subnet mask, default IP [...]

IP Setup 10-3 The Netopia 4753 G.SHDSL Integrated Access Device suppor ts multiple IP subnets on the Ether net inter face. Y ou may want to configure multiple IP subnets to ser vice more hosts than are possible with your primar y subnet. It is not always possible to obtain a lar ger subnet fr om your ISP . For example, if you already have a full C[...]

10-4 Administration Guide IP subnets The IP Subnets screen allows you to configur e up to eight Ethernet IP subnets on unlimited-user models, one “primar y” subnet and up to seven secondar y subnets, by entering IP address/subnet mask pairs: Note: Y ou need not use this scr een if you have only a single Ethernet IP subnet. In that case, you ca[...]

IP Setup 10-5 For example: ■ T o delete a configured subnet, set both the IP addr ess and subnet mask values to 0.0.0.0, either explicitly or by clearing each field and pressing Retur n to commit the change. When a configured subnet is deleted, the values in subsequent rows adjust up to fill the vacant fields. The subnets configured on this[...]

10-6 Administration Guide If you have configured multiple Ether net IP subnets, the IP Setup screen changes slightly: The IP address and Subnet mask items ar e hidden, and the Define Additional Subnets... item becomes Subnet Configuration... . If you select Subnet Configuration , you will retur n to the IP Subnets screen that allows you to de?[...]

IP Setup 10-7 The Static Routes screen will appear . Viewing static r outes T o display a view-only table of static routes, select Display/Change Static Route . The table shown below will appear . The table has the following columns: Dest. Network: The network IP address of the destination network. Static Routes Display/Change Static Route... Add S[...]

10-8 Administration Guide Subnet Mask: The subnet mask associated with the destination network. Next Gateway: The IP address of the r outer that will be used to reach the destination network. Priority: An indication of whether the Netopia 4753 will use the static route when it conflicts with infor mation received fr om RIP packets. Enabled: An ind[...]

IP Setup 10-9 infor mation; Low means that the RIP information takes pr ecedence over the static route. ■ If the static route conflicts with a connection pr ofile, the connection profile will always take precedence. ■ T o make sure that the static r oute is known only to the Netopia 4753, select Adver tise Route V ia RIP and toggle it to No [...]

10-10 Administration Guide IP Addr ess Ser ving In addition to being a router , the Netopia 4753 is also an IP address ser ver . There are thr ee protocols it can use to distribute IP addresses. ■ The first, called Dynamic Host Configuration Protocol (DHCP), is widely suppor ted on PC networks, as well as Apple Macintosh computers using Open T [...]

IP Setup 10-11 Follow these steps to configure IP Addr ess Ser ving: ■ If you enabled IP Address Ser ving, then DHCP , BootP clients and Dynamic WAN clients are automatically enabled. ■ The IP Address Ser ving Mode pop-up menu allows you to choose the way in which the Netopia 4753 will ser ve IP addr esses. The device can act as either a DHCP [...]

10-12 Administration Guide If you have configured multiple Ether net IP subnets, the appearance of the IP Address Ser ving screen is altered slightly: The first three menu items ar e hidden, and Configure Address Pools... appears instead. If you select Configure Address Pools... you will be taken to the IP Addr ess Pools screen that allows you [...]

IP Setup 10-13 IP Addr ess Pools The IP Address Pools scr een allows you to configure a separate IP address ser ving pool for each of up to eight configured Ether net IP subnets: This screen consists of between two and eight r ows of four columns each. There are exactly as many r ows as there ar e Ethernet IP subnets configured on the IP Subnets[...]

10-14 Administration Guide Numerous factors influence the choice of ser ved address. It is dif ficult to specify the addr ess that will be ser ved to a par ticular client in all circumstances. However , when the addr ess ser ver has been configured, and the clients involved have no prior address ser ving interactions, the Netopia 4753 will gener[...]

IP Setup 10-15 DHCP NetBIOS Options If your network uses NetBIOS, you can enable the Netopia 4753 to use DHCP to distribute NetBIOS infor mation. NetBIOS stands for Network Basic Input/Output System. It is a layer of software originally developed by IBM and Sytek to link a network operating system with specific hardwar e. NetBIOS has been adopted [...]

10-16 Administration Guide ■ From the NetBios Type pop-up menu, select the type of NetBIOS used on your network. ■ T o ser ve DHCP clients with the NetBIOS scope, select Ser ve NetBios Scope and toggle it to Ye s . Select NetBios Scope and enter the scope. ■ T o ser ve DHCP clients with the IP addr ess of a NetBIOS name ser ver , select Serve[...]

IP Setup 10-17 Select Release BootP Leases and press Retur n. Mor e Address Serving Options The Netopia 4753 includes a number of enhancements in the built-in DHCP IP address ser ver . These enhancements include: ■ The ability to exclude one or more IP addr esses from the address ser ving pool so the addresses will not be ser ved to clients. ■ [...]

10-18 Administration Guide Configuring the IP Addr ess Ser ver options T o access the enhanced DHCP ser ver functions, fr om the Main Menu navigate to Statistics & Logs and then Ser ved IP Addresses . The following example shows the Ser ved IP Addr esses screen after three clients have leased IP addr esses. The first client did not provide a [...]

IP Setup 10-19 Y ou can select the entries in the Ser ved IP Addresses scr een. Use the up and down arr ow keys to move the selection to one of the entries in the list of ser ved IP addr esses. Once you select an entr y , pressing Retur n displays an action pop-up menu that lists operations that can be per for med on that entr y . Possible operatio[...]

10-20 Administration Guide ■ Details… is displayed if the entr y is associated with both a host name and a client identifier . Selecting Details… displays a pop-up menu that provides additional infor mation associated with the IP address. The pop-up menu includes the IP addr ess as well as the host name and client identifier supplied by the[...]

IP Setup 10-21 ■ Include is displayed if the entr y is either excluded or declined. An IP address is marked declined when a client to whom the DHCP ser ver of fers the address declines the address. A client declines an addr ess if it determines that a leased addr ess is already in use by another device. Selecting Include restor es the selected IP[...]

10-22 Administration Guide The router’s Ether net IP address(es) will be automatically excluded from the addr ess ser ving pool(s) on star tup. Entries in the ser ved IP addr ess list corr esponding to the router’s Ether net IP address(es) that have been automatically excluded on star tup ar e not selectable. Served IP Addresses -IP Address----[...]

IP Setup 10-23 D D D D H H H H C C C C P P P P R R R R e e e e ll l l a a a a y y y y A A A A g g g g e e e e n n n n t t t t The Netopia 4753 of fers DHCP Relay Agent functionality , as defined in RFC1542. A DHCP r elay agent is a computer system or a router that is configur ed to for ward DHCP r equests from clients on the LAN to a remote DHCP [...]

10-24 Administration Guide Select IP Address Ser ving and press Retur n. The IP Address Ser ving screen appears. Select IP Address Ser ving Mode . The pop-up menu of fers the choices of Disabled , DHCP Server (the default), and DHCP Relay Agent . If you select DHCP Relay Agent and press Retur n, the screen changes as shown below . Now you can enter[...]

IP Setup 10-25 Note: The remote DHCP ser ver(s) to which the Netopia Router is relaying DHCP r equests must be capable of ser vicing r elayed requests. Not all DHCP ser vers suppor t this feature. For example, the DHCP ser ver in the Netopia Router does not . The DHCP ser ver(s) to which the Netopia Router is r elaying DHCP requests must be config[...]

10-26 Administration Guide 1. Select Profile Name and enter a name for this connection pr ofile. It can be any name you wish. For example: the name of your ISP . 2. T oggle the Profile Enabled value to Ye s or No . The default is Y es. 3. Select IP Profile Parameters and press Retur n. The IP Profile Parameters scr een appears. 4. T oggle or e[...]

IP Setup 10-27 5. Select ADD PROFILE NOW and press Retur n. Y our new connection profile will be added. If you want to view the connection profiles in your r outer , r eturn to the W AN Configuration scr een, and select Display/Change Connection Profile . The list of connection pr ofiles is displayed in a scrolling pop-up screen. WAN Configura[...]

10-28 Administration Guide[...]

Multiple Network Address T ranslation 11-1 C C C C h h h h a a a a p p p p t t t t e e e e r r r r 1 1 1 1 1 1 1 1 M M M M u u u u ll l l t t t t ii i i p p p p ll l l e e e e N N N N e e e e t t t t w w w w o o o o r r r r k k k k A A A A d d d d d d d d r r r r e e e e s s s s s s s s T T T T r r r r a a a a n n n n s s s s ll l l a a a a t t t t[...]

11-2 Administration Guide The following is a general description of these features: Port Address T ranslation The simplest for m of classic Network Address T ranslation is PAT (Por t Addr ess T ranslation). P A T allows a gr oup of computers on a LAN, such as might be found in a home or small of fice, to share a single Inter net connection using o[...]

Multiple Network Address T ranslation 11-3 When addresses ar e returned to the gr oup of available addresses, they are r eturned to the head of the gr oup, being the most recently used. If that same host r equests a connection an hour later , and the same public address is still available, then it will be mapped to the same private host. If a new h[...]

11-4 Administration Guide Exterior addresses ar e allocated to internal hosts on a demand, or as-needed, basis and then made available when traf fic from that host ceases. Once an inter nal host has been allocated an address, it will use that address for all traf fic. Five minutes after all traf fic ceases – no pings, all TCP connections close[...]

Multiple Network Address T ranslation 11-5 In order to suppor t this type of mapping, you define two address ranges. First, you define a public range which contains the first and last public address to be used and the way in which these addr esses should be used (P A T , static, or dynamic). Y ou then configure an addr ess map which defines th[...]

11-6 Administration Guide MultiNA T Configuration Y ou configur e the MultiNA T features thr ough the console menu: ■ For a simple 1-to-many NA T configuration (classic NA T or P A T), use the Easy Setup Profile configuration , described below . ■ For the more advanced featur es, such as ser ver lists and dynamic NA T , follow the instr uc[...]

Multiple Network Address T ranslation 11-7 1. Define the public range of addresses that exter nal computers should use to get to the NA T inter nal machines. These are the addr esses that someone on the Internet would see. 2. Create a List name that will act as a r ule or ser ver holder . 3. Create a map or r ule that specifies the internal range[...]

11-8 Administration Guide The Network Address T ranslation scr een appears. Public Range defines an external addr ess range and indicates what type of mapping to apply when using this range. The types of mapping available are dynamic , static and pat . Map Lists define collections of mapping r ules. A r ule maps interior range addresses to exteri[...]

Multiple Network Address T ranslation 11-9 The Add NA T Public Range scr een appears. ■ Select Range Name and give a descriptive name to this range. ■ Select Type and from the pop-up menu, assign its type. Options are static , dynamic , or pat (the default). ■ If you choose pat as the range type, select Public Address and enter the exterior I[...]

11-10 Administration Guide Once the public ranges have been assigned, the next step is to bind interior addresses to them. Because these bindings occur in order ed lists, called map lists , you must first define the list, then add mappings to it. From the Network Addr ess T ranslation scr een select Add Map List and press Return. The Add NA T Map[...]

Multiple Network Address T ranslation 11-11 to this mapping. ■ Select Use NA T Public Range and press Return. A scr een appears displaying the public ranges you have defined. ■ From the list of public ranges you defined, select the one that you want to map to the interior range for this Add NAT Map ("my_map") +-Public Address Range-[...]

11-12 Administration Guide mapping and press Retur n. If none of your preconfigur ed ranges are suitable for this mapping, you can select <<NEW RANGE>> and create a new range. If you choose <<NEW RANGE>> , the Add NA T Public Range screen displays and you can create a new public range to be used by this map. See Add NA T Pu[...]

Multiple Network Address T ranslation 11-13 Modifying map lists Y ou can make changes to an existing map list after you have cr eated it. Since there may be more than one map list you must select which one you are modifying. From the Network Addr ess T ranslation scr een select Show/Change Map List and pr ess Return. ■ Select the map list you wan[...]

11-14 Administration Guide ■ Add Map allows you to add a new map to the map list. ■ Show/Change Maps allows you to modify the individual maps within the list. ■ Delete Map allows you to delete a map from the list. ■ Move Map allows you to change the priority order in which the map is evaluated within the list. See Moving maps on page 11-15 [...]

Multiple Network Address T ranslation 11-15 Make any modifications you need and then select CHANGE NA T MAP and pr ess Return. Y our changes will become ef fective and you will be retur ned to the Show/Change NA T Map List scr een. Moving maps The Move Maps screen per mits reor dering the priority of maps in a map list. Since the maps are read fr [...]

11-16 Administration Guide ■ Y ou can pr ess Escape at any time in the pop-up menu to abor t the move and restor e the map list to its original ordering. Note: The pat map is generally left at the bottom of the list. Show/Change NAT Map List +---Private Address Range---------Type----Public Address Range------------+ +-----------------------------[...]

Multiple Network Address T ranslation 11-17 Adding Server Lists Ser ver lists, also known as Expor ts, are handled similarly to map lists. If you want to make a par ticular ser ver’s por t accessible (and it isn’t accessible thr ough other means, such as a static mapping), you must create a ser ver list, or use the pr e-existing Easy Ser vers l[...]

11-18 Administration Guide ■ Select Add Ser ver and press Return. The Add NA T Ser ver screen appears. ■ Select Ser vice and press Return. A pop-up menu appears listing a selection of commonly expor ted ser vices. ■ Choose the ser vice you want to expor t and press Retur n. Y ou can choose a pr econfigured ser vice fr om the list, or define[...]

Multiple Network Address T ranslation 11-19 ■ Enter the First and Last Por t Number between por ts 1 and 65535. Select OK and pr ess Return. Y ou will be retur ned to the Add NA T Ser ver screen. ■ Enter the Ser ver Private IP Address of the ser ver whose ser vice you are expor ting. Since MultiNA T per mits the mapping of multiple private IP a[...]

11-20 Administration Guide Modifying server lists Once a ser ver list exists, you can select it for modification or deletion. ■ Select Show/Change Ser ver List from the Network Address T ranslation screen. ■ Select the Ser ver List Name you want to modify fr om the pop-up menu and press Retur n. The Show/Change NA T Ser ver List screen appears[...]

Multiple Network Address T ranslation 11-21 ■ Selecting Show/Change Ser ver or Delete Server displays the same pop-up menu. Select any ser ver fr om the list and press Retur n. The Change NA T Ser ver scr een appears. Y ou can make changes to the ser ver’s ser vice and por t or internal or exter nal address. Select CHANGE NA T SERVER and press [...]

11-22 Administration Guide Deleting a server T o delete a ser ver fr om the list, select Delete Server fr om the Show/Change NA T Ser ver List menu and pr ess Return. A pop-up menu lists your configured ser vers. Select the one you want to delete and press Retur n. A dialog box asks you to confir m your choice. Choose CONTINUE and press Retur n. [...]

Multiple Network Address T ranslation 11-23 Binding Map Lists and Server Lists Once you have created your map lists and ser ver lists, for most Netopia Router models you must bind them to a profile, either a Connection Pr ofile or the Default Profile. Y ou do this in one of the following scr eens: ■ the IP profile parameters scr een (see belo[...]

11-24 Administration Guide ■ Select NA T Map List and press Return. A pop-up menu displays a list of your defined map lists. ■ Select the map list you want to bind to this Connection Profile and pr ess Return. The map list you selected will now be bound to this Connection Profile. ■ Select NA T Server List and pr ess Return. A pop-up menu [...]

Multiple Network Address T ranslation 11-25 IP Parameters (W AN Default Pr ofile) The Netopia 4753 in HDLC (Copper Mountain) Operation Mode suppor ts a WAN default profile that per mits several parameters to be configured without an explicitly configur ed Connection Profile. The procedur e is similar to the procedure to bind map lists and ser [...]

11-26 Administration Guide ■ Select NA T Map List and press Return. A pop-up menu displays a list of your defined map lists. ■ Select the map list you want to bind to the default profile and pr ess Return. The map list you selected will now be bound to the default profile. ■ Select NA T Server List and pr ess Return. A pop-up menu displays[...]

Multiple Network Address T ranslation 11-27 NA T Associations Configuration of map and ser ver lists alone is not suf ficient to enable NA T for a W AN connection because map and ser ver lists must be linked to a pr ofile that controls the W AN inter face. This can be a Connection Profile, a W AN Ether net inter face, a default profile, or a d[...]

11-28 Administration Guide keys. Select the item by pressing Retur n to display a pop-up menu of all of your configured lists. ■ Select the list name you want to assign and press Retur n again. Y our selection will then be associated with the cor responding profile or inter face. NAT Associations +NAT Map List Name-+ Profile/Interface Name-----[...]

Multiple Network Address T ranslation 11-29 MultiNA T Configuration Example T o help you understand a typical MultiNA T configuration, this section describes an example of the type of configuration you may want to implement on your site. The values shown are for example purposes only . Make your own appropriate substitutions. A typical DSL ser v[...]

11-30 Administration Guide Enter your ISP-supplied values as shown below . Select NEXT SCREEN and press Retur n. Y our IP values ar e shown here. Then navigate to the Network Address T ranslation (NA T) screen. Connection Profile 1: Easy Setup Profile Connection Profile Name: Easy Setup Profile Address Translation Enabled: Yes IP Addressing... Numb[...]

Multiple Network Address T ranslation 11-31 Select Show/Change Public Range , then Easy-P A T Range , and pr ess Return. Enter the value your ISP assigned for your public address (206.1.1.6, in this example). T oggle Type to pat. Y our public address is then mapped to the remaining private IP addr esses using P A T . (If you were not using the Easy[...]

11-32 Administration Guide Select ADD NA T PUBLIC RANGE and press Return. Y ou are retur ned to the Network Address T ranslation screen. Next, select Show/Change Map List and choose Easy-P A T List . Select Add Map . The Add NA T Map scr een appears. (Now the name Easy-P A T List is a misnomer since it has a static map included in its list.) Enter [...]

Multiple Network Address T ranslation 11-33 T o make these changes, first limit the range of remapped addr esses on the Static Map and then edit the default ser ver list called Easy-Ser vers. ■ First, navigate to the Show/Change Map List screen, select Easy-P A T List and then Show/Change Maps . Choose the Static Map you created and change the F[...]

11-34 Administration Guide[...]

Virtual Private Networks (VPNs) 12-1 C C C C h h h h a a a a p p p p t t t t e e e e r r r r 1 1 1 1 2 2 2 2 V V V V ii i i r r r r t t t t u u u u a a a a ll l l P P P P r r r r ii i i v v v v a a a a t t t t e e e e N N N N e e e e t t t t w w w w o o o o r r r r k k k k s s s s ( ( ( ( V V V V P P P P N N N N s s s s ) ) ) ) The Netopia 4753 of [...]

12-2 Administration Guide T unneling is a process of cr eating a private path between a remote user or private network and another private network over some inter mediate network, such as the IP-based Internet. A VPN allows remote of fices or employees access to your internal business LAN thr ough means of encr yption allowing the use of the publi[...]

Virtual Private Networks (VPNs) 12-3 In either case, the Netopia Router wraps, or encapsulates, infor mation that one end of the tunnel exchanges with the other , in a wrapper called General Routing Encapsulation (GRE), at one end of the tunnel, and unwraps, or decapsulates, it at the other end. ■ IPsec stands for IP Security , a set of protocols[...]

12-4 Administration Guide PPTP configuration T o set up the router as a PPTP Network Ser ver (PNS) capable of answering PPTP tunnel requests you must also configure the VPN Default Answer Pr ofile. See A TMP/PPTP Default Answer Profile on page 12-13 for mor e infor mation. PPTP is a Datalink Encapsulation option in Connection Profiles. It is n[...]

Virtual Private Networks (VPNs) 12-5 When you define a Connection Profile as using PPTP by selecting PPTP as the datalink encapsulation method, and then select Data Link Options , the PPTP T unnel Options screen appears. Note: Profiles using PPTP do not of fer a T elco Options scr een. ■ Enter the PPTP Par tner IP Addr ess . This specifies th[...]

12-6 Administration Guide itself a compression pr otocol. Note: The Netopia 4753 suppor ts 128-bit (“str ong”) encr yption. Unlike MS-CHAP version 1, which suppor ts one-way authentication, MS-CHAP version 2 suppor ts mutual authentication between connected r outers and is incompatible with MS-CHAP version 1 (MS-CHAP-V1). When you choose MS-CHA[...]

Virtual Private Networks (VPNs) 12-7 The IP Profile Parameters scr een appears. ■ Enter the Remote IP Address and Remote IP Mask for the host to which you want to tunnel. The remote IP address and r emote IP mask refer to the remote private network into which your device will be tunnelling. About IPsec T unnels IPsec stands for IP Security , a s[...]

12-8 Administration Guide The Add Connection Profile scr een appears. ■ From the Data Link Encapsulation pop-up menu select IPsec . ■ Then select Data Link Options . The IPsec Encr yption & Authentication Options scr een appears. ■ Y ou must specify an Encr yption T ransform . The choices ar e DES or NULL . The default is DES . Add Conne[...]

Virtual Private Networks (VPNs) 12-9 ■ Y ou must enter an Encr yption Key if the Encr yption T ransfor m is DES. The key for DES must be a hexadecimal string of 16 characters, using Hex characters only: '0'-'9', 'A'-'F' and 'a' - 'f'. No key entr y appears if the encr yption transfor m i[...]

12-10 Administration Guide IP Pr ofile Parameters The following IP Profile Options scr een is displayed for an IPsec Connection Profile. ■ Y ou must specify an SPI (Security Parameters Index) , which is the ESP receive side SPI and the default SPI for ESP transmit, AH receive, and AH transmit. It must be unique r elative to any other configur[...]

Virtual Private Networks (VPNs) 12-11 ■ Y ou can r emove a Filter Set . ■ Y ou can choose to configur e Advanced IP Profile Options (see “Advanced IP Profile Options,” in the following section). Note: The SPI title field above changes to SPI (Security Parameters Index) -- Use Advanced IP Profile Options if any of the SPI values dif fer[...]

12-12 Administration Guide Inter operation with other features ■ Address ser ving is not suppor ted thr ough IPsec T unnels. ■ AH is not suppor ted thr ough an inter face that has NA T applied to it. NA T may be applied to the inner payload. ■ AH is not suppor ted thr ough an inter face which is either Unnumbered or Number ed with a dynamical[...]

Virtual Private Networks (VPNs) 12-13 A TMP/PPTP Default Answer Pr ofile The W AN Configuration menu of fers a A TMP/PPTP Default Answer Profile option. Use this selection when your router is acting as the ser ver for VPN connections, that is, when you are on the answering end of the tunnel establishment. The A TMP/PPTP Default Answer Pr ofile [...]

12-14 Administration Guide default) if you do not. This applies to both A TMP and PPTP connections. ■ For PPTP tunnel connections only , you must define what type of authentication these connections will use. Select Receive Authentication and press Retur n. A pop-up menu of fers the following options: P AP (the default), CHAP , or MS-CHAP . ■ [...]

Virtual Private Networks (VPNs) 12-15 Dial-Up Networking for VPN Microsoft Windows Dial-Up Networking softwar e permits a r emote standalone workstation to establish a VPN tunnel to a PPTP ser ver such as a Netopia Router located at a central site. Dial-Up Networking also allows a mobile user who may not be connected to a P AC to dial into an inter[...]

12-16 Administration Guide Note: The public IP address is the same as the r outer's Local W AN IP address if Address Translation (NA T) is enabled on your router , or if your router is configur ed for a Numbered inter face. If NA T is not enabled, and your router is configur ed for an Unnumbered inter face, you will enter the Ether net IP ad[...]

Virtual Private Networks (VPNs) 12-17 11. V erify that the TCP/IP option in Dial out Protocols is the only option checked, and then click OK . 12. Click Continue . 13. Close Network , shut down, and then restar t your workstation. 14. Once your workstation has completely rebooted, go to the Star t Menu , select Accessories , then click-on and selec[...]

12-18 Administration Guide Note: If the router you ar e connecting to is not running NA T and has IP Addressing set to Unnumber ed, there will be no Local W AN IP Address. In this case, use the Ether net IP Address instead. 6. In the Connection A vailability window , Windows will ask if you want all users to be able to use this VPN or just yourself[...]

Virtual Private Networks (VPNs) 12-19 About A TMP T unnels T o set up an A TMP tunnel, you cr eate a Connection Profile including the IP address and other r elevant infor mation for the remote A TMP par tner . A TMP uses the ter minology of a foreign agent that initiates tunnels and a home agent that ter minates them. Y ou use the same procedur e [...]

12-20 Administration Guide When you define a Connection Profile as using A TMP by selecting A TMP as the datalink encapsulation method, and then select Data Link Options , the A TMP T unnel Options scr een appears. Note: An A TMP tunnel cannot be assigned a dynamic IP addr ess by the remote ser ver, as in a PPP connection. When you define an A T[...]

Virtual Private Networks (VPNs) 12-21 ■ Y ou must specify a Key String of up to (and including) 20 characters when DES is selected. When encr yption is None, this field is invisible. ■ Y ou can specify that this r outer will Initiate Connections , acting as a foreign agent ( Ye s ), or only answer them, acting as a home agent ( No ). ■ T unn[...]

12-22 Administration Guide A strict firewall may not be pr ovisioned to allow VPN traf fic to pass back and for th as needed. In order to ensure that a firewall will allow a VPN, cer tain attributes must be added to the firewall's provisioning. The pr ovisions necessar y var y slightly between A TMP and PPTP , but both protocols operate on[...]

Virtual Private Networks (VPNs) 12-23 PPTP example T o enable a firewall to allow PPTP traf fic, you must pr ovision the firewall to allow inbound and outbound TCP packets specifically destined for por t 1723. The sour ce por t may be dynamic, so often it is not useful to apply a compare function upon this por tion of the control/negotiation pa[...]

12-24 Administration Guide For Input Filter 2 set the Protocol Type to allow GRE as shown below . In the Display/Change IP Filter Set screen select Display/Change Output Filter . Display/Change Output Filter screen For Output Filter 1 set the Protocol Type and Destination Por t infor mation as shown below . Change Input Filter 2 Enabled: Yes Forwar[...]

Virtual Private Networks (VPNs) 12-25 For Output Filter 2 set the Protocol Type to allow GRE as shown below . Change Output Filter 2 Enabled: Yes Forward: Yes Source IP Address: 0.0.0.0 Source IP Address Mask: 0.0.0.0 Dest. IP Address: 0.0.0.0 Dest. IP Address Mask: 0.0.0.0 Protocol Type: GRE[...]

12-26 Administration Guide A TMP example T o enable a firewall to allow A TMP traf fic, you must provision the fir ewall to allow inbound and outbound UDP packets specifically destined for por t 5150. The sour ce por t may be dynamic, so often it is not useful to apply a compare function on this por tion of the control/negotiation packets. Y ou[...]

Virtual Private Networks (VPNs) 12-27 For Input Filter 2 set the Protocol Type to allow GRE as shown below . In the Display/Change IP Filter Set screen select Display/Change Output Filter . Display/Change Output Filter screen For Output Filter 1 set the Protocol Type and Destination Por t infor mation as shown below . Change Input Filter 2 Enabled:[...]

12-28 Administration Guide For Output Filter 2 set the Protocol Type to allow GRE as shown below . Change Output Filter 2 Enabled: Yes Forward: Yes Source IP Address: 0.0.0.0 Source IP Address Mask: 0.0.0.0 Dest. IP Address: 0.0.0.0 Dest. IP Address Mask: 0.0.0.0 Protocol Type: GRE[...]

Security 13-1 C C C C h h h h a a a a p p p p t t t t e e e e r r r r 1 1 1 1 3 3 3 3 S S S S e e e e c c c c u u u u r r r r ii i i t t t t y y y y The Netopia 4753 provides a number of security featur es to help protect its configuration screens and your local network from unauthorized access. Although these featur es are optional, it is strongl[...]

13-2 Administration Guide CAUTION! Y ou ar e strongly encouraged to add protection to the configuration scr eens. Unprotected screens could allow an unauthorized user to compromise the operation of your entir e network. Once user accounts are cr eated, users who attempt to access protected screens will be challenged. Users who enter an incor rect [...]

Security 13-3 T o add a new user account, select Add User in the Security Options screen and press Retur n. The Add Name With Write Access screen appears. Follow these steps to configure the new account: 1. Select Enter Name and enter a descriptive name (for example, the user’s first name). 2. Select Enter Password and enter a passwor d. 3. T o[...]

13-4 Administration Guide it to No . (See “SNMP traps” on page 14-15. ) ■ T o restrict T elnet access to all of the configuration scr eens, select Enable T elnet Console Access and toggle it to No . About Filters and Filter Sets Security should be a high priority for anyone administering a network connected to the Internet. Using packet fil[...]

Security 13-5 Filter priority Continuing the customs inspectors analogy , imagine the inspectors lined up to examine a package. If the package matches the first inspector’s criteria, the package is either rejected or passed on to its destination, depending on the first inspector’s par ticular or ders. In this case, the package is never seen b[...]

13-6 Administration Guide How individual filters work As described above, a filter applies criteria to an IP packet and then takes one of three actions: ■ For war ds the packet to the local or remote network ■ Blocks (discards) the packet ■ Ignores the packet A filter for war ds or blocks a packet only if it finds a match after applying i[...]

Security 13-7 Port number comparisons A filter can also use a comparison option to evaluate a packet’s source or destination por t number . The comparison options are: No Compare: No comparison of the por t number specified in the filter with the packet’s por t number . Not Equal T o: For the filter to match, the packet’s por t number can[...]

13-8 Administration Guide Other filter attributes There ar e three other attributes to each filter: ■ The filter’s order (i.e., priority) in the filter set ■ Whether the filter is cur rently active ■ Whether the filter is set to for war d packets or to block (discard) packets Putting the parts together When you display a filter set, [...]

Security 13-9 Src. Por t: The source por t to match. This is the por t on the sending host that originated the packet. D. Por t: The destination por t to match. This is the por t on the receiving host for which the packet is intended. On?: Displays Ye s when the filter is in ef fect or No when it is not. Fwd: Shows whether the filter for war ds ([...]

13-10 Administration Guide Filtering example #2 Suppose a filter is configured to block all incoming IP packets with the sour ce IP address of 200.233.14.0, regar dless of the type of connection or its destination. The filter would look like this: This filter blocks any packets coming from a r emote network with the IP network address 200.233.1[...]

Security 13-11 option in the answer profile, P AP or CHAP in connection pr ofiles, callback, and general awareness of how your network may be vulnerable. An approach to using filters The ultimate goal of network security is to prevent unauthorized access to the network without compr omising authorized access. Using filter sets is par t of r eac[...]

13-12 Administration Guide 1. Add a new filter set. 2. Create the filters for the new filter set. 3. View , change, or delete individual filters and filter sets. The sections below explain how to execute these steps. Adding a filter set Y ou can cr eate up to eight dif fer ent custom filter sets. Each filter set can contain up to 256 filte[...]

Security 13-13 Input and output filters—source and destination There ar e two kinds of filters you can add to a filter set: input and output. Input filters check packets received from the Inter net, destined for your network. Output filters check packets transmitted from your network to the Internet. Packets in the Netopia 4753 pass through [...]

13-14 Administration Guide 1. T o make the filter active in the filter set, select Enabled and toggle it to Ye s . If Enabled is toggled to No , the filter can still exist in the filter set, but it will have no ef fect. 2. If you want the filter to for war d packets that match its criteria to the destination IP address, select Forwar d and tog[...]

Security 13-15 10. When you are finished configuring the filter , select ADD THIS FIL TER NOW to save the filter in the filter set. Select CANCEL to discard the filter and r eturn to the Add IP Filter Set screen. Viewing filters T o display a view-only table of input or output filters, select Display/Change Input Filter or Display/Change Ou[...]

13-16 Administration Guide Modifying filter sets T o modify a filter set, select Display/Change IP Filter Set in the IP Filter Sets screen to display a list of filter sets. Select a filter set from the list and pr ess Return. The Change IP Filter Set screen appears. The items in this screen ar e the same as the ones in the Add Filter screen (se[...]

Security 13-17 The five input filters and one output filter that make up Basic Firewall ar e shown in the table below . Basic Firewall’s filters play the following r oles. Input filters 1 and 2: These block W AN-originated OpenWindows and X-Windows sessions. Ser vice origination requests for these pr otocols use por ts 2000 and 6000, respect[...]

13-18 Administration Guide Basic Firewall is suitable for a LAN containing only client hosts that want to access ser vers on the W AN, but not for a LAN containing ser vers pr oviding ser vices to clients on the WAN. Basic Firewall’s general strategy is to explicitly for war d W AN-originated TCP and UDP traf fic to por ts gr eater than 1023. Po[...]

Security 13-19 FTP sessions. T o allow W AN-originated FTP sessions to a LAN-based FTP ser ver with the IP addr ess a.b.c.d (cor responding to a numbered IP addr ess such as 163.176.8.243), inser t the following input filter ahead of the cur rent input filter 1: ■ Enabled: Y es ■ For war d: Y es ■ Source IP Addr ess: 0.0.0.0 ■ Source IP A[...]

13-20 Administration Guide Basic IP packet components All IP packets contain the same basic header infor mation, as follows: This header infor mation is what the packet filter uses to make filtering decisions. It is impor tant to note that a packet filter does not look into the IP data stream (the User Data fr om above) to make filtering decisi[...]

Security 13-21 Fir ewall design rules There ar e two basic rules to fir ewall design: ■ “What is not explicitly allowed is denied.” and ■ “What is not explicitly denied is allowed.” The first r ule is far more secure, and is the best appr oach to firewall design. It is far easier (and more secur e) to allow in or out only cer tain se[...]

13-22 Administration Guide Logical AND function When a packet is compared (in most cases) a logical AND function is per for med. First the IP addresses and subnet masks are conver ted to binar y and then combined with AND. The r ules for the logical use of AND are as follows: 0 AND 0 = 0 0 AND 1 = 0 1 AND 0 = 0 1 AND 1 = 1 For example: Filter r ule[...]

Security 13-23 Example IP filter set screen This is an example of the Netopia IP filter set screen: Filter basics In the source or destination IP addr ess fields, the IP address that is entered must be the network addr ess of the subnet. A host address can be enter ed, but the applied subnet mask must be 32 bits (255.255.255.255). The Netopia 47[...]

13-24 Administration Guide Example network Example filters Example 1 Incoming packet has the source addr ess of 200.1.1.28 This incoming IP packet has a source IP addr ess that matches the network address in the Source IP Addr ess field (00000000) in the Netopia 4753. This will not for war d this packet. Filter Rule: 200.1.1.0 (Source IP Network [...]

Security 13-25 Example 2 Incoming packet has the source addr ess of 200.1.1.184. This incoming IP packet (10000000) has a source IP addr ess that does not match the network address in the Source IP Addr ess field (00000000) in the Netopia 4753. This r ule will for ward this packet because the packet does not match. Example 3 Incoming packet has th[...]

13-26 Administration Guide Example 4 Incoming packet has the source addr ess of 200.1.1.104. Since the Source IP Network Addr ess in the Netopia 4753 is 01100000, and the source IP address after the logical AND is 01100000, this r ule does match and this packet will not be for warded. Example 5 Incoming packet has the source addr ess of 200.1.1.96.[...]

Security 13-27 LAN IP Filtersets The Netopia 4753 of fers LAN-side filtering on the Ethernet hub. This per mits multiple IP addr esses or subnets on the Ethernet LAN to be kept separate fr om one another and operate as vir tual independent networks sharing a single Internet connection. Small- to medium-sized of fices can benefit by using a singl[...]

13-28 Administration Guide Any customized filter set you create can be associated with the Ether net hub as shown below: Select LAN (EN Hub) IP Filter Set and from the pop-up menu, select the filter set you want to associate with the LAN inter face. Press Return . The filter set you select will be applied to the Ether net hub inter face. CAUTION[...]

Security 13-29 T o remove the filter set fr om the Ethernet hub inter face, select Remove Filter Set and press Return . The filter set will be disconnected from the LAN inter face. Note: Removing the filter set from the LAN does not delete the filter set. It is still available to be r eassociated with the same or another inter face, or modifie[...]

13-30 Administration Guide R R R R A A A A D D D D II I I U U U U S S S S C C C C ll l l ii i i e e e e n n n n t t t t S S S S u u u u p p p p p p p p o o o o r r r r t t t t The Netopia 4753 implements a Remote Authentication Dial-In User Ser vice (RADIUS) client (RFC 2138) and adds the ability to authenticate console configuration access using [...]

Security 13-31 ■ Y ou select your desir ed mode by using the Security Databases pop-up menu. ■ Choosing Local Only , the default, selects the local authentication database. ■ Choosing RADIUS Only causes the router to ignor e the local database and to authenticate users using the configured RADIUS ser ver . ■ Choosing RADIUS then Local caus[...]

13-32 Administration Guide hostname to be resolved using the Domain Name System (DNS) infor mation configured in the r outer or by using an IP address in dotted-quad notation. The RADIUS Ser ver Addr/Name items are limited to 63 characters. ■ In addition to specifying the ser ver’s hostname or IP addr ess, you must also specify a RADIUS Ser ve[...]

Security 13-33 Attempting to delete the last non-URG username/passwor d pair from the local authentication database when the Security Databases pop-up menu is set to either Local then RADIUS or RADIUS then Local causes the router to pr esent the following warning aler t: Note: Any RADIUS ser ver database entr y that will be used to authenticate use[...]

13-34 Administration Guide[...]

Monitoring T ools 14-1 C C C C h h h h a a a a p p p p t t t t e e e e r r r r 1 1 1 1 4 4 4 4 M M M M o o o o n n n n ii i i t t t t o o o o r r r r ii i i n n n n g g g g T T T T o o o o o o o o ll l l s s s s This chapter discusses the Netopia 4753’s device and network monitoring tools. These tools can provide statistical infor mation, repor t[...]

14-2 Administration Guide General status Current Date: The cur rent date; this can be set with the Date and Time utility either automatically via NTP or manually (see “Date and time (Network Time Protocol)” on page 9-17 ). Default IP Gateway: The router’s default gateway , which may be either manually configur ed or learned via DHCP . This i[...]

Monitoring T ools 14-3 Curr ent status The cur rent status section is a table showing the cur rent status of the W AN. For example: Profile Name: Lists the name of the connection pr ofile being used, if any . Rate: Shows the line rate for this connection. %Use: Indicates the average percent utilization of the maximum capacity of the channels in u[...]

14-4 Administration Guide Statistics & Logs When you are tr oubleshooting your Netopia 4753, the Statistics & Logs screens provide insight into the r ecent event activities of the router . From the Main Menu go to Statistics & Logs and select one of the options described in the sections below . Event Histories The Netopia 4753 recor ds [...]

Monitoring T ools 14-5 W AN Event History The W AN Event Histor y screen lists a total of 128 events on the W AN. The most r ecent events appear at the top. Each entr y in the list contains the following infor mation: Date: Date of the event. Time: Time of the event. Event: A brief description of the event. Ch.: The channel involved in the event. D[...]

14-6 Administration Guide Device Event History The Device Event Histor y scr een lists a total of 128 por t and system events, giving the time and date for each event, as well as a brief description. The most recent events appear at the top. In the Statistics & Logs screen, select Device Event Histor y . The Device Event Histor y scr een appear[...]

Monitoring T ools 14-7 V oice Logs V oice Log The V oice Log screen lists a total of 128 voice-r elated events, giving the time and date for each event, as well as a brief description. The most recent events appear at the top. In the Statistics & Logs screen, select V oice Log . The V oice Log screen appears. If the log exceeds the size of the [...]

14-8 Administration Guide V oice Accounting Log The V oice Accounting Log screen lists a total of 128 voice-r elated events, giving the time and date for each event, as well as a brief description. The most recent events appear at the top. In the Statistics & Logs screen, select V oice Accounting Log . The V oice Accounting Log screen appears. [...]

Monitoring T ools 14-9 IP Routing T able In the Statistics & Logs screen, select IP Routing T able and pr ess Return. The IP routing table displays all of the IP r outes curr ently known to the Netopia 4753. The routing table scr een represents a snapshot of the r outing table information at the time the scr een is first invoked. T o take a ne[...]

14-10 Administration Guide Served IP Addresses Y ou can view all of the IP addr esses curr ently being ser ved by the Netopia 4753 G.SHDSL Integrated Access Device from the Ser ved IP Addresses scr een. From the Statistics & Logs menu, select Ser ved IP Addresses . The Ser ved IP Addresses screen appears. T o manage DHCP leases, select Lease Ma[...]

Monitoring T ools 14-11 This screen has thr ee options: ■ Reset All Leases : Resets all cur rent IP addresses leased thr ough DHCP without waiting for the default one–hour lease period to elapse ■ Release BootP Leases : Releases any BootP leases that may be in place and which may no longer be requir ed. ■ Reclaim Declined Addresses : Reclai[...]

14-12 Administration Guide Physical Interface The top left side of the screen lists total packets r eceived and total packets transmitted for the following data por ts: ■ Ethernet Hub ■ SDSL 1 Network Interface The bottom left side of the screen lists total packets r eceived and total packets transmitted for the following protocols: ■ IP (IP [...]

Monitoring T ools 14-13 System Information The System Infor mation screen gives a summar y view of the general system level values in the Netopia 4753 G.SHDSL Integrated Access Device. From the Statistics & Logs menu select System Information . The System Infor mation screen appears. The infor mation display varies by model, firmwar e version,[...]

14-14 Administration Guide The SNMP Setup screen From the Main Menu, select SNMP in the System Configuration screen and pr ess Return. The SNMP Setup screen appears. Follow these steps to configure the first thr ee items in the screen: 1. Select System Name and enter a descriptive name for the Netopia 4753’s SNMP agent. 2. Select System Locati[...]

Monitoring T ools 14-15 By default, the read-only and r ead/write community strings are set to public and private, respectively . Y ou should change both of the default community strings to values known only to you and tr usted system adminis- trators. T o change a community string, select it and enter a new value. Star ting with the version 4.3 ?[...]

14-16 Administration Guide Setting the IP trap receivers 1. Select Add IP Trap Receiver . 2. Select Receiver IP Address or Domain Name . Enter the IP address or domain name of the SNMP manager you want to receive the trap. 3. Select Community String if you enabled one in the SNMP Setup screen, and enter the appropriate password. 4. Select Add Trap [...]

Utilities and Diagnostics 15-1 C C C C h h h h a a a a p p p p t t t t e e e e r r r r 1 1 1 1 5 5 5 5 U U U U t t t t ii i i ll l l ii i i t t t t ii i i e e e e s s s s a a a a n n n n d d d d D D D D ii i i a a a a g g g g n n n n o o o o s s s s t t t t ii i i c c c c s s s s A number of utilities and tests are available for system diagnostic a[...]

15-2 Administration Guide Ping The Netopia 4753 includes a standard Ping test utility . A Ping test generates IP packets destined for a par ticular (Ping-capable) IP host. Each time the tar get host receives a Ping packet, it r eturns a packet to the original sender . Ping allows you to see whether a par ticular IP destination is r eachable from th[...]

Utilities and Diagnostics 15-3 Status: The cur rent status of the Ping test. This item can display the status messages shown in the able below: Packets Out: The number of packets sent by the Ping test. Packets In: The number of retur n packets received from the tar get host. T o be considered on time, r eturn packets are expected back befor e the n[...]

15-4 Administration Guide Packets Lost: The number of packets unaccounted for , shown in total and as a percentage of total packets sent. This statistic may be updated during the Ping test, and may not be accurate until after the test is over . However , if an escalating one-to-one cor respondence is seen between Packets Out and Packets Lost , and [...]

Utilities and Diagnostics 15-5 4. Select Use Reverse DNS to learn the names of the r outers between the Netopia Router and the destination router . The default is Y es. 5. Select ST ART TRACE ROUTE and press Retur n. A scrolling screen will appear that lists the destination, number of hops, IP addresses of each hop, and DNS names, if selected. 6. C[...]

15-6 Administration Guide Disconnect T elnet Console Session If you want to close your T elnet console session, select Disconnect T elnet Console Session and press Return. A dialog box appears asking you to cancel or continue your selection. If you select Continue , you will immediately ter minate your session. Factory Defaults Y ou can r eset the [...]

Utilities and Diagnostics 15-7 T ransferring Configuration and Firmwar e Files with TFTP T rivial File T ransfer Protocol (TFTP) is a method of transfer ring data over an IP network. TFTP is a client-ser ver application, with the router as the client. T o use the Netopia 4753 as a TFTP client, a TFTP ser ver must be available. Netopia, Inc., has a[...]

15-8 Administration Guide ■ Select GET ROUTER FIRMW ARE FROM SERVER and press Retur n. Y ou will see the following dialog box: ■ Select CANCEL to exit without downloading the file, or select CONTINUE to download the file. The system will reset at the end of the file transfer to put the new fir mware into ef fect. While the system r esets, t[...]

Utilities and Diagnostics 15-9 ■ Select GET CONFIG FROM SERVER and press Retur n. Y ou will see the following dialog box: ■ Select CANCEL to exit without downloading the file, or select CONTINUE to download the file. The system will reset at the end of the file transfer to put the new configuration into ef fect. ■ If you choose to downloa[...]

15-10 Administration Guide T ransferring Configuration and Firmwar e Files with XMODEM Y ou can transfer configuration and fir mware files with XMODEM thr ough the Netopia 4753’s console por t. Be sure your ter minal emulation program suppor ts XMODEM file transfers. T o go to the X-Modem File Transfer scr een, select it in the Utilities &am[...]

Utilities and Diagnostics 15-11 3. Select CANCEL to exit without downloading the file, or select CONTINUE to download the file. If you choose CONTINUE, you will have ten seconds to use your ter minal emulation software to initiate an XMODEM transfer of the fir mware file. If you fail to initiate the transfer in that time, the dialog box will di[...]

15-12 Administration Guide If you choose CONTINUE, you will have ten seconds to use your ter minal emulation software to initiate an XMODEM transfer of the configuration file. If you fail to initiate the transfer in that time, the dialog box will disappear and the ter minal emulation software will infor m you of the transfer’s failure. Y ou can[...]

P P P P a a a a r r r r t t t t II I I II I I II I I : : : : A A A A p p p p p p p p e e e e n n n n d d d d ii i i x x x x e e e e s s s s[...]

Administration Guide[...]

T roubleshooting A-1 A A A A p p p p p p p p e e e e n n n n d d d d ii i i x x x x A A A A T T T T r r r r o o o o u u u u b b b b ll l l e e e e s s s s h h h h o o o o o o o o t t t t ii i i n n n n g g g g This appendix is intended to help you troubleshoot pr oblems you may encounter while setting up and using the Netopia 4753. It also includes[...]

A-2 Administration Guide Note: If you are attempting to modify the IP addr ess or subnet mask from a previous, successful configuration attempt, you will need to clear the IP address or r eset your Netopia 4753 to the factor y default before reinitiating the configuration pr ocess. For fur ther infor mation on resetting your Netopia 4753 to facto[...]

T roubleshooting A-3 How to Reset the Netopia 4753 to Factory Defaults Lose your password? This section shows how to r eset the Netopia 4753 so that you can access the console screens once again. Keep in mind that all of your connection pr ofiles and settings will need to be reconfigured. If you don't have a password, the only way to get bac[...]

A-4 Administration Guide Technical Support Netopia, Inc. is committed to providing its customers with r eliable products and documentation, backed by excellent technical suppor t. Before contacting Netopia Look in this guide for a solution to your problem. Y ou may find a solution in this troubleshooting appendix or in other sections. Check the in[...]

T roubleshooting A-5 Online product information Product infor mation can be found in the following: Netopia World Wide W eb ser ver via http://www .netopia.com Internet via anonymous FTP to ftp.netopia.com/pub FAX-Back This ser vice pr ovides technical notes that answer the most commonly asked questions and of fers solutions for many common problem[...]

A-6 Administration Guide[...]

Understanding IP Addressing B-1 A A A A p p p p p p p p e e e e n n n n d d d d ii i i x x x x B B B B U U U U n n n n d d d d e e e e r r r r s s s s t t t t a a a a n n n n d d d d ii i i n n n n g g g g II I I P P P P A A A A d d d d d d d d r r r r e e e e s s s s s s s s ii i i n n n n g g g g This appendix is a brief general introduction to I[...]

B-2 Administration Guide IP addresses ar e maintained and assigned by the InterNIC, a quasi-governmental or ganization now increasingly under the auspices of private industr y . Note: It’s ver y common for an or ganization to obtain an IP address fr om a third par ty , usually an Inter net ser vice pr ovider (ISP). ISPs usually issue an IP addres[...]

Understanding IP Addressing B-3 Subnet masks T o create subnets, the network manager must define a subnet mask, a 32-bit number that indicates which bits in an IP address ar e used for network and subnetwork addresses and which are used for host addresses. One subnet mask should apply to all IP networks that are physically connected together and s[...]

B-4 Administration Guide Network configuration Below is a diagram of a simple network configuration. The ISP is providing a Class C addr ess to the customer site, and both networks A and B want to gain Internet access thr ough this address. Netopia 4753 B connects to Netopia 4753 A and is provided Inter net access through Routers A and B. Router [...]

Understanding IP Addressing B-5 Background The IP addresses and r outing configurations for the devices shown in the diagram are outlined below . In addition, each individual field and its meaning are described. The IP Address and Subnet Mask fields define the IP addr ess and subnet mask of the device's Ethernet connection to the network w[...]

B-6 Administration Guide There ar e two schemes for distributing the remaining IP addresses: ■ Manually give each computer an address ■ Let the Netopia 4753 automatically distribute the addresses These two methods are not mutually exclusive; you can manually issue some of the addr esses while the rest are distributed by the Netopia 4753. Using [...]

Understanding IP Addressing B-7 Configuration This section describes the specific IP address lease, r enew , and release mechanisms for both the Mac and PC, with either DHCP or MacIP address ser ving. DHCP address serving Windows 95 workstation: ■ The Win95 workstation requests and r enews its lease ever y half hour . ■ The Win95 workstation [...]

B-8 Administration Guide ■ The Netopia 4753 releases the DHCP addr ess back to the available DHCP address pool exactly one hour after the last-heard lease r equest. Some other DHCP implementations may hold on to the lease for an additional time after the lease expired to act as a buf fer for variances in clocks between the client and ser ver . Ma[...]

Understanding IP Addressing B-9 In any situation where a device is dialing into a Netopia r outer , the r outer may need to be configured to ser ve IP via the W AN inter face. This is only a requirement if the calling device has not been configur ed locally to know what its address(es) ar e. So when a client, dialing into a Netopia router's [...]

B-10 Administration Guide The figure above shows an example of a block of IP addr esses being distributed corr ectly . The example follows these r ules: ■ An IP address must not be used as a static addr ess if it is also in a range of addresses being distributed by DHCP or MacIP . ■ A single IP address range is used by all the addr ess-ser ved[...]

Understanding IP Addressing B-11 Nested IP Subnets Under cer tain cir cumstances, you may want to create remote subnets fr om the limited number of IP addresses issued by your ISP or other authority . Y ou can do this using connection pr ofiles. These subnets can be nested within the range of IP addresses available to your network. For example, su[...]

B-12 Administration Guide Routers B and C (which could also be Netopia 4753s) ser ve the two r emote networks that are subnets of a.b.c.0. The subnetting is accomplished by configuring the Netopia 4753 with connection profiles for Routers B and C (see the following table). The Netopia 4753’s connection profiles for Routers B and C cr eate entr[...]

Understanding IP Addressing B-13 The following diagram illustrates the IP address space taken up by the two r emote IP subnets. Y ou can see from the diagram why the ter m nested is appropriate for describing these subnets. Br oadcasts As mentioned earlier , binar y IP host or subnet addr esses composed entirely of ones or zeros are r eser ved for [...]

B-14 Administration Guide[...]

Binary Conversion T able C-1 A A A A p p p p p p p p e e e e n n n n d d d d ii i i x x x x C C C C B B B B ii i i n n n n a a a a r r r r y y y y C C C C o o o o n n n n v v v v e e e e r r r r s s s s ii i i o o o o n n n n T T T T a a a a b b b b ll l l e e e e This table is provided to help you choose subnet numbers and host numbers for IP and [...]

C-2 Administration Guide Decimal Binar y Decimal Binary Decimal Binar y Decimal Binary 128 10000000 160 10100000 192 11000000 224 11100000 129 10000001 161 10100001 193 11000001 225 11100001 130 10000010 162 10100010 194 11000010 226 11100010 131 10000011 163 10100011 195 11000011 227 11100011 132 10000100 164 10100100 196 11000100 228 11100100 133[...]

Further Reading D-1 A A A A p p p p p p p p e e e e n n n n d d d d ii i i x x x x D D D D F F F F u u u u r r r r t t t t h h h h e e e e r r r r R R R R e e e e a a a a d d d d ii i i n n n n g g g g Alexander , S. and R. Droms, DHCP Options and BOOTP V endor Extensions , RFC 2131, Silicon Graphics, Inc., Bucknell University , P A, 1997. Black, U[...]

D-2 Administration Guide LaQuey , T racy , The Inter net Companion: A Beginner's Guide to Global Networking , Addison-W esley Publishing Company , Reading, MA, 1994. Leinwand, A., and K. Fang, Network Management: A Practical Perspective , Addison-W esley Publishing Company , Reading, MA, 1993. Levine, John R., and Carol Bar oudi, The Internet [...]

Further Reading D-3 Stallings, W . Local Networks , 3rd ed., Macmillan Publishing Company , New Y ork, NY , 1990. Stevens, W .R., TCP/IP Illustrated , V ol 1, Addison-Wesley Publishing Company , Reading, MA, 1994. Sunshine, C.A. (ed.), Computer Network Architectur es and Protocols , 2nd ed., Plenum Press, New Y ork, NY , 1989. T annenbaum, A.S., Co[...]

D-4 Administration Guide[...]

T echnical Specifications and Safety Information E-1 A A A A p p p p p p p p e e e e n n n n d d d d ii i i x x x x E E E E T T T T e e e e c c c c h h h h n n n n ii i i c c c c a a a a ll l l S S S S p p p p e e e e c c c c ii i i f f f f ii i i c c c c a a a a t t t t ii i i o o o o n n n n s s s s a a a a n n n n d d d d S S S S a a a a f f f [...]

E-2 Administration Guide Agency Approvals North America Safety Approvals: ■ United States – UL Standard for Infor mation T echnology Equipment, UL 60950, Third Edition, Dated December 1, 2000 ■ Canada – CSA: CAN/CSA-C22.2 No. 950-95 EMI: ■ FCC Par t 15 Class B International Safety Approvals: ■ Low V oltage (Eur opean directive) 73/23/EE[...]

T echnical Specifications and Safety Information E-3 Ser vice requirements. In the event of equipment malfunction, all r epairs should be per for med by our Company or an authorized agent. Under FCC r ules, no customer is authorized to repair this equipment. This restriction applies regar dless of whether the equipment is in or our of warranty . I[...]

E-4 Administration Guide Important Safety instructions CAUTIONS CAUTION: Depending on the power supply provided with the pr oduct, either the direct plug-in power supply blades, power supply cord plug or the appliance coupler ser ves as the mains power disconnect. It is impor tant that the direct plug-in power supply , socket-outlet or appliance co[...]

T echnical Specifications and Safety Information E-5 Netopia 4753 Specifications Physical interface W AN interface ■ G.SHDSL por t with suppor t for symmetric connections from 64 Kbps to 2.368 Mbps (uses RJ68 connector ■ Interoperable with G.SHDSL equipment fr om Ericsson and others. LAN interface 10/100BaseT Ethernet por t V oice inter faces[...]

E-6 Administration Guide Protocols ■ A TM Pr otocols: A TM Multipr otocol Encapsulation over A TM Adaption Layer 5 (RFC 1483): Logical Link Control (LLC) encapsulation r outed modes ■ Suppor t for up to 8 A TM PVCs and 16 Frame Relay PVCs ■ PPP Over A TM, PPP over Ether net: P AP , CHAP or no authentication (RFC 2364). Compr ession Control Pr[...]

T echnical Specifications and Safety Information E-7 a syslog ser ver ■ SNMPv1: (RFC 1157) and MIB II (RFC 1213), Ethernet MIB and enterprise MIB for r emote management using console applications Hardware specifications ■ Memor y: 16 MB DRAM memor y ■ Environmental Requir ement: Operating: 0 ∞ to +40 ∞ C. Storage: 0 ∞ to +70 ∞ C (20[...]

E-8 Administration Guide ■ Speed Dialing by dialing a feature code ■ Three W ay Calling ■ Custom Ringing ■ Distinctive Ringing[...]

Glossary 1 G G G G ll l l o o o o s s s s s s s s a a a a r r r r y y y y access line: A telephone line reaching fr om the telephone company central of fice to a point usually on your premises. Beyond this point the wir e is considered inside wiring. analog: In telecommunications, telephone transmission and/or switching that is not digital. An ana[...]

2 Administration Guide community strings: Sequences of characters that ser ve much like passwor ds for devices using SNMP . Dif ferent community strings may be used to allow an SNMP user to gather device infor mation or change device configurations. CRC (Cyclic Redundancy Check): A computational means to ensure the integrity of a block of data. Th[...]

Glossary 3 host computer: A communications device that enables users to r un applications programs to per for m such functions as text editing, program execution, access to data bases, etc. internet: A set of networks connected together by routers. This is a general ter m, not to be confused with the lar ge, multi-or ganizational collection of IP n[...]

4 Administration Guide packet-switching network: A telecommunications network based on packet-switching technology , wher ein a transmission channel is occupied only for the duration of the transmission of the packet. P AP (PPP authentication protocol): A method for ensuring secur e network access. parameter: A numerical code that controls an aspec[...]

Glossary 5 subnet mask: A 32-bit number to specify which par t of an inter net address is the network number , and which par t is the host addr ess. When written in binar y notation, each bit written as 1 cor responds to 1 bit of network address infor mation. One subnet mask applies to all IP devices on an individual IP network. TCP/IP (Transmissio[...]

6 Administration Guide[...]

Index-1 II I I n n n n d d d d e e e e x x x x Numerics 10Base-T , connecting 5-3 A add static route 10-8 advanced configuration features 9-16 application software 5-2 A TMP 12-12 tunnel options 12-19 B back panel 3-4 por ts 3-4 basic firewall 13-17 BootP 10-10 clients 10-16 broadcasts B-13 C capabilities 1-2 change static route 10-9 community st[...]

Index-2 IP setup 7-8 IPX setup 7-8 navigating 6-5 over view 7-1 quick connection path 7-3 encr yption 12-3 , 12-7 , 12-12 Ethernet 5-2 event histor y device 14-6 WA N 14-5 F features 1-2 filter par ts 13-6 par ts of 13-6 filter priority 13-5 filter set adding 13-12 display 13-8 filter sets adding 13-12 defined 13-4 deleting 13-16 disadvantages[...]

Index-3 L LAN-side filtering 13-27 LED status 14-3 LEDs 3-5 , 14-3 M MIBs suppor ted 14-13 MPPE 12-12 MS-CHAPv2 12-12 multiple subnets 10-4 N NA T adding ser ver lists 11-17 defined 10-1 Easy Setup Profile 11-6 IP profile parameters 11-23 IP setup 11-7 map lists 11-8 modifying map lists 11-13 moving maps 11-15 outside ranges 11-8 ser ver lists [...]

Index-4 security options screen 13-2 protecting 13-2 Simple Network Management Protocol, see SNMP SNMP community strings 14-14 MIBs suppor ted 14-13 setup screen 14-14 traps 14-15 src. por t 13-9 static IP addresses B-8 static route r ules of installation 10-9 static routes 10-3 , 10-6 statistics, W AN 14-11 strong encr yption 12-12 subnet masks B-[...]

Index-5 W AN event histor y 14-5 Windows NT Domain Name 12-6 X XMODEM 15-10 XMODEM file transfers downloading configuration files 15-11 updating fir mware 15-10 uploading configuration files 15-12[...]

Index-6[...]

Limited Warranty and Limitation of Remedies 1 L L L L ii i i m m m m ii i i t t t t e e e e d d d d W W W W a a a a r r r r r r r r a a a a n n n n t t t t y y y y a a a a n n n n d d d d L L L L ii i i m m m m ii i i t t t t a a a a t t t t ii i i o o o o n n n n o o o o f f f f R R R R e e e e m m m m e e e e d d d d ii i i e e e e s s s s Netopi[...]

2 Administration Guide[...]