SMC Networks SMC Barricade SMC7804WBRA manual

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124

Go to page of

A good user manual

The rules should oblige the seller to give the purchaser an operating instrucion of SMC Networks SMC Barricade SMC7804WBRA, along with an item. The lack of an instruction or false information given to customer shall constitute grounds to apply for a complaint because of nonconformity of goods with the contract. In accordance with the law, a customer can receive an instruction in non-paper form; lately graphic and electronic forms of the manuals, as well as instructional videos have been majorly used. A necessary precondition for this is the unmistakable, legible character of an instruction.

What is an instruction?

The term originates from the Latin word „instructio”, which means organizing. Therefore, in an instruction of SMC Networks SMC Barricade SMC7804WBRA one could find a process description. An instruction's purpose is to teach, to ease the start-up and an item's use or performance of certain activities. An instruction is a compilation of information about an item/a service, it is a clue.

Unfortunately, only a few customers devote their time to read an instruction of SMC Networks SMC Barricade SMC7804WBRA. A good user manual introduces us to a number of additional functionalities of the purchased item, and also helps us to avoid the formation of most of the defects.

What should a perfect user manual contain?

First and foremost, an user manual of SMC Networks SMC Barricade SMC7804WBRA should contain:
- informations concerning technical data of SMC Networks SMC Barricade SMC7804WBRA
- name of the manufacturer and a year of construction of the SMC Networks SMC Barricade SMC7804WBRA item
- rules of operation, control and maintenance of the SMC Networks SMC Barricade SMC7804WBRA item
- safety signs and mark certificates which confirm compatibility with appropriate standards

Why don't we read the manuals?

Usually it results from the lack of time and certainty about functionalities of purchased items. Unfortunately, networking and start-up of SMC Networks SMC Barricade SMC7804WBRA alone are not enough. An instruction contains a number of clues concerning respective functionalities, safety rules, maintenance methods (what means should be used), eventual defects of SMC Networks SMC Barricade SMC7804WBRA, and methods of problem resolution. Eventually, when one still can't find the answer to his problems, he will be directed to the SMC Networks service. Lately animated manuals and instructional videos are quite popular among customers. These kinds of user manuals are effective; they assure that a customer will familiarize himself with the whole material, and won't skip complicated, technical information of SMC Networks SMC Barricade SMC7804WBRA.

Why one should read the manuals?

It is mostly in the manuals where we will find the details concerning construction and possibility of the SMC Networks SMC Barricade SMC7804WBRA item, and its use of respective accessory, as well as information concerning all the functions and facilities.

After a successful purchase of an item one should find a moment and get to know with every part of an instruction. Currently the manuals are carefully prearranged and translated, so they could be fully understood by its users. The manuals will serve as an informational aid.

Table of contents for the manual

  • Page 1

    [...]

  • Page 2

    7 HVOD ,UYLQH&$ 3KRQH  0ESV: LU HOHVVSRUW 5RXWHUZLWKEXLOWLQ $'6/0RGHP )URP60&¶ VOLQHRI  DZDUGZLQ QLQJFRQQHFWLYLWVROXWLRQ V 'HFHPEHU5)[...]

  • Page 3

    Infor ma tion fur nishe d is beli eved to be accu rate and rel iable. However , n o respon sibility i s assumed by o ur company f or its use, nor for any infring ements o f patents or o ther righ ts of third par ties w hich may result from it s use . No lice nse is granted b y implic ation o r other wise under an y paten t or paten t rights of our [...]

  • Page 4

    i L IMITED W ARRANTY Limited W ar ranty Statement: SMC Net works , Inc. (“SMC”) warrants its products to be free from defects in workma nship and materials , under nor mal use and ser vice, for the applicable warranty ter m. All SMC products carr y a standard 90-day limited w ar ranty from the date of purchase from SMC or its A uthoriz ed Resel[...]

  • Page 5

    L IMITED W AR RANTY ii WARRANTIES EX CLUSIVE: IF AN SMC PRODUCT DOES NOT OPERA TE AS W ARRANTED ABO VE, CUSTOMER’ S SOLE REMED Y SH ALL BE REP AIR OR REPLA CEMENT OF THE PRODUCT IN Q UESTION , A T SMC’S OPTION . THE FOREGOING W ARRANTIES AND REMEDI ES ARE EXCLUSIVE AND ARE IN LIEU OF ALL OTHER W A RRANTIES OR CONDITIONS , EXPRESS OR IMPLIED , E[...]

  • Page 6

    iii C OMPLIA NCES F ederal Communicatio n Co mmission Interfer ence Statement This equipment has been tested and found to comply with the limits for a Class B digital device, pu rsuant to Pa rt 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interfer ence in a residential instal lati on. This equipmen[...]

  • Page 7

    C OMPLIANCES iv The REN is used to deter min e the quantity of devices th at ma y be connected to the telephone line. Ex cessive RENs on the t elephone line may result in the devices not ringing in response to an incoming call. In most, but not all areas , the sum of the RENs should not ex ceed fiv e (5.0). T o be certain of the number of devices t[...]

  • Page 8

    C OMPLIANCES v Australia AS/NZS 3548 (1995) - Class B SMC contact for produc ts in Australia is: SMC-Australia L9, 123 Epping Rd., North Ryde, NSW Australia Phone: 61-2-88757887 Fax: 61-2-8 8757777 EC Confor mance D eclaration SMC contact for these pr oducts in Europe is: SMC Networks Europe, Edificio Conat a II, Calle Fructuós Gelabert 6-8, 2o, 4[...]

  • Page 9

    C OMPLIANCES vi Safety Compliance Wichtige Sicherheitshinwe ise (Ger many) 1. Bitte lese n Sie diese Hinweise s orgfältig durc h. 2. Heben Sie diese Anleitung fü r de n späteren Gebrau ch auf. 3. Vor jedem Reinigen ist das Gerät vom St romnetz zu trennen. Verwenden Sie keine Flüssigoder Aerosolreini ger. Am besten eig net sich ein angefeuc hte[...]

  • Page 10

    vii T ABLE OF C ONTENTS 1 Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-1 About the Barric ade . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-1 Feature s and Benefits . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-1 Applica tions . . . . . .[...]

  • Page 11

    T ABLE OF C ONTENTS viii 4 Configuring the Barricade . . . . . . . . . . . . . . . . . . . . . . 4-1 Navigating the Managem ent Interfac e . . . . . . . . . . . . . . . . . . . . . . . . . . 4-2 Making Configura tion Changes . . . . . . . . . . . . . . . . . . . . . . . . . . 4-2 Setup Wizard . . . . . . . . . . . . . . . . . . . . . . . . . . . . [...]

  • Page 12

    T ABLE OF C ONTENTS ix A Troubleshooting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A-1 B Cables . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . B-1 Ethernet Cable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . B-1 Specifica tions . . . . . . . . . . . . . . . . .[...]

  • Page 13

    T ABLE OF C ONTENTS x[...]

  • Page 14

    1-1 C HAPTER 1 I NTRODUCTION Congratulations on your purchase of the ADSL Barricade T M g, here after referred to as t he "Barrica de". We ar e proud to provide you with a powerful yet simple communication devi ce for connecting your local area network (LAN) to the Inter net. For those who want to surf the Internet in the most secure way [...]

  • Page 15

    I NTR ODUCTION 1-2 • Firewall wi th Stateful Packet Insp ection, client priv ileges, intrusion detection, and NAT • NAT also enables mult i-user Internet access via a single user a ccount, and virtual server functionality (provi ding protected access to Internet services such as web, FTP, e-mail, and Telnet) • VPN pass-thr ough (IPSec -ESP Tu[...]

  • Page 16

    A PPLICATIONS 1-3 • Shared IP Address The Bar ricade pro vides In ter net access for up to 253 users via a single shared IP address . Using only one IS P account, m ultiple users on y our netw ork can browse the w eb at the same time . •V i r t u a l S e r v e r If yo u ha v e a fix ed IP addr ess , you can set the Barricade to act as a vir tua[...]

  • Page 17

    I NTR ODUCTION 1-4 • Virtual Private Network (VPN) The Bar ricade supports three of the most commonly used VPN protocols — PPTP , L2TP , and IPSec . These protocols allow remote users to establish a secure connection to their corporate netw ork. If your ser vice provider supports VP Ns , then these protocols can be used to create an authenticat[...]

  • Page 18

    2-1 C HAPTER 2 I NSTALLATION Before inst alling the ADS L Bar ricade TM g, v erify that you ha ve all the items listed under the P ackage Contents list. If any of the items are missing or damaged, contact your local distributor . Also be sure that you ha ve all the necessar y cabling before installing the Bar ricade. After installing the Bar ricade[...]

  • Page 19

    I NSTALLATIO N 2-2 System Requirements Y ou must meet the following minimum requirements: • ADSL line installed by your Internet Se rvice Provider. • A PC usi ng a fixe d IP ad dress or dynamic IP addres s assigned via DHCP, as well as a gateway server address and DNS server a ddress from your service provider. • A computer equipped with a 10[...]

  • Page 20

    H ARDWARE D ESCRIPTION 2-3 Th e Bar ricade includes an LED disp la y on the front panel fo r system pow e r and port indications that simplifies installation and netw ork troubleshooting . It also provides th e follo wing ports on the rear panel: Figure 2-1. Rear Panel Item Description LAN Ports Fast Ethernet ports (RJ-45). Con nect devices on your[...]

  • Page 21

    I NSTALLATIO N 2-4 LED Indicators The power and port LED indicators on the front panel are illustrated b y the following figure and table . Figure 2-2. Front Panel LED Status Description PWR On The Barricade is receiv ing power. Normal operation. Off Power off o r failure. ADSL SYN On ADSL connect ion is function ing correctly. Flashing The Barrica[...]

  • Page 22

    ISP S ETTINGS 2-5 ISP Settings Please collect the following infor mation from y our ISP before setting up the Barricade: • ISP account user name and password • Protocol, encapsulation and VPI/VCI circuit numbers •D N S s e r v e r a d d r e s s • IP address, subnet mask and defaul t gateway (for fixed IP users only) Connect the System The B[...]

  • Page 23

    I NSTALLATIO N 2-6 Phone Line Configuration Installing a Full-Rat e Connection If yo u are using a full-rate (G .dmt) c onnection, your ser vice provider will attach the outside ADSL line to a data/v oice splitter . In this case you can connect your phones and computer directly to the splitter as shown belo w : Figure 2-3. Installing with a Splitte[...]

  • Page 24

    C ONNECT THE S YSTEM 2-7 Installing a Splitterless Connection If yo u are us ing a spl itterless (G .lite) conn ection, then your ser vice provider will attac h the outside ADSL line directly to y our phone system. In this case y ou can connect your phones and computer directly to the incoming ADSL line, but you will hav e to add lo w-pass filters [...]

  • Page 25

    I NSTALLATIO N 2-8 Attach to Your Network Using Ethernet Cabling The four LAN por ts on the Bar ricade auto-neg otiate the connection speed to 10 Mbps Ether net or 100 Mbps F ast Ether net, as well as the transmission mode to half duplex or fu ll duplex. Use RJ-45 cables to connect any of the four LAN por ts on the Bar ricade to an Ethernet adapter[...]

  • Page 26

    3-1 C HAPTER 3 C ONFIGURI NG C LIENT PC After completing hardware s etup by connecting all your netw ork devices , you need to configure y our comput er to connect to the Bar ricade. See: “Windows 98/Me ” on page 3-2 “Windows NT 4.0 ” on page 3-7 “Windows 2000” on page 3-11 “Windows XP” on page 3-14 or “Configuring Y o ur Macintos[...]

  • Page 27

    C ONFIGURING C LIENT PC 3-2 TCP/IP Configuration T o access the Internet through the Barricade, you m ust conf igure the netw ork settings of the computers on y our LAN to use the same IP subnet as the B ar ricade. The default IP settings for the Bar ricade are: IP Address: 192.168.2.1 Subnet Mask: 255.255.255.0 Note: These s ettings ca n be change[...]

  • Page 28

    W INDOWS 98/M E 3-3 2. In Control P anel, double-click the Network icon. 3. In the Netw ork window , under the Configuration tab , double-click the TCP/IP item listed for your netw ork card. 4. In the TCP/IP window , select the IP Address tab . If “Obtain an IP address automatically” is already selected, your computer is already conf igured for[...]

  • Page 29

    [...]

  • Page 30

    [...]

  • Page 31

    [...]

  • Page 32

    [...]

  • Page 33

    [...]

  • Page 34

    [...]

  • Page 35

    [...]

  • Page 36

    [...]

  • Page 37

    [...]

  • Page 38

    [...]

  • Page 39

    [...]

  • Page 40

    [...]

  • Page 41

    [...]

  • Page 42

    [...]

  • Page 43

    [...]

  • Page 44

    [...]

  • Page 45

    [...]

  • Page 46

    S ETUP W IZARD 4-3 Setup Wizard Time Zone Click on “Setup Wizard”. The first item in the Setup Wizard is Time Zone. F or accurate timing of log entries an d system events , you need to set the time zone . Select yo ur time zone fr om the drop-do wn list. If your area requires it, c hec k to enable the cloc k for da ylight sa ving c hanges , an [...]

  • Page 47

    C ONFIGURING THE B AR RICADE 4-4 Parameter Setting Select your Countr y and Interne t Ser vice Provider . T his will automatically configure the Bar ricade with the co r rect Protocol, Encapsulation and VPI/V C I settings for your ISP . If your Country or Inter net Ser vice Pr ovider is not listed you will need to manually enter settings . Go to ?[...]

  • Page 48

    S ETUP W IZARD 4-5 Confirm The Confir m page shows a summary of the configuration parameters . Check ADSL opera tion mode (W AN), Netw ork Layer P arameters (W AN) and ISP p arameters ar e correct. Parameter Description ADSL Operation Mode (WAN) ISP The type of ISP you have selected. Protocol Indicates th e protocol use d. VPI/VCI Virtual Path Iden[...]

  • Page 49

    C ONFIGURING THE B AR RICADE 4-6 If the parameters are cor rect, click “ APPL Y ” to sa v e these settings . Y our Bar ricade is now set up . Go to “T roubleshooting” on pag e A-1 if you cannot make a connection to the Inter net. DHCP Parameters Function Shows the DHCP func tion is en abled or disabled. Default Gateway LAN IP address of the[...]

  • Page 50

    S ETUP W IZARD 4-7 Parameter Setting - Country or ISP Not Listed If yo ur Countr y or Internet Ser v ice Pro vider is not listed select “Others”. This wi ll allow y ou to manually configure your ISP settings . F or manual configuration you will need to know the Protocol, DNS Ser ver , Encapsulation and VP I/V CI settings used by your ISP . If y[...]

  • Page 51

    C ONFIGURING THE B AR RICADE 4-8 ISP use RFC1483 Bridging - Parameter Setting Enter the RFC1483 Bridging setti ngs pro vided b y your ISP . Note: You have three different brid ging modes to select from: RFC1483 Bridging - Select this option if you wa nt the Barricade to be transparent and pas s the public IP addr ess to a single P C, Server or Fire[...]

  • Page 52

    S ETUP W IZARD 4-9 Click “NEXT” to contin ue to the “Confir m” settings pag e. Go to “Confir m” on pag e 4-5 in the man ual for details about t he “Confir m” settings pag e. VPI/VCI Enter the V irtual Path Ident ifier (VPI) and Virtual Circuit Identifier (V CI) supplied by yo ur ISP. Encapsu lation Select th e encaps ulation u sed b[...]

  • Page 53

    C ONFIGURING THE B AR RICADE 4-10 ISP use PPPoE - Parameter Setting Enter the PPP oE (P oint-to-P oint Pr otocol ov er Et her net) settings pr ovi de d by you r I SP . Click “NEXT” to continue to the “Confirm” settings page. Go to “Confirm” on page 4-5 in the manua l for de tails about the “Confirm” settings page. Parameter Descript[...]

  • Page 54

    S ETUP W IZARD 4-11 ISP use PPPoA - Parameter Setting Enter the PPP oA (P oint-to-P oint Protocol ov er A TM) settings provided by y our ISP . Click “NEXT” to continue to the “Confirm” settings page. Go to “Confirm” on page 4-5 in the manua l for de tails about the “Confirm” settings page. Parameter Description DNS Server Enter the [...]

  • Page 55

    C ONFIGURING THE B AR RICADE 4-12 ISP use RFC1483 Routing - Parameter Setting Enter the RFC1483 R outing settin gs provided by y our ISP . Click “NEXT” to continue to the “Confirm” settings page. Go to “Confirm” on page 4-5 in the manua l for de tails about the “Confirm” settings page. Parameter Description IP Address Enter the IP a[...]

  • Page 56

    A DVANCED S ETUP 4-13 Advanced Setup Click on the Adv anced Setup picture. The left-hand side displays the main menu and the right-hand side sho ws descriptiv e infor mation. The advanced management interface contains 13 main menu items as described in the follo wing table . Menu Description System Sets the loca l time zone, the pa ssword for admin[...]

  • Page 57

    C ONFIGURING THE B AR RICADE 4-14 DDNS Dynamic DNS prov ides users on the Internet with a met hod to tie their domain name(s) to a Dyna mic or Static IP address . UPnP Allows you to enable or dis able the Unive rsal Plug and Play fu nction. Tools Contains op tions to backup & res tore the c urrent config uration, restore al l config uration s e[...]

  • Page 58

    A DVANCED S ETUP 4-15 System Time Settings Select your local time zone from th e drop down list. This infor mation is used for log entries and client filtering . F or accurate timing of log entries an d system events , you need to set the time zone . Select yo ur time zone from the drop do wn list. If yo u want to automatically sync hroni ze the AD[...]

  • Page 59

    C ONFIGURING THE B AR RICADE 4-16 Password Settings Use this pag e to change the passw ord for accessing the management interface of the Barricade. P asswords can contain from 3~12 al phanumeric c haracters and are case sensitiv e. Note: If you lost the password, or yo u cannot gain access to the user interface, press the blue r eset bu tton on the[...]

  • Page 60

    A DVANCED S ETUP 4-17 Remote Management By defaul t, management access is only av ailable to use rs on your local netw ork. Ho wev er, y ou can also mana ge the Bar ricade from a remote host by e ntering the IP address of a remote comp uter on thi s screen. Chec k the Enabled chec k bo x, and enter the IP address of the Host Address and click “ A[...]

  • Page 61

    C ONFIGURING THE B AR RICADE 4-18 DNS Domain Name Ser v ers (D NS) are used to map a doma in name (e.g ., www .smc.com) with the IP a ddress (e .g ., 64.147.25.20). Y our ISP should pro vide the IP address of one or more Domain Name Se r vers . Enter those addresses on this page, and clic k “ APPL Y”.[...]

  • Page 62

    A DVANCED S ETUP 4-19 WAN Specify the W AN connection paramete rs pro vided b y your Internet Ser vic e Provider (ISP). The Bar ricade can be connected to your ISP in one of the follo wing wa ys: PPP oE AT M Clone MA C ISP[...]

  • Page 63

    C ONFIGURING THE B AR RICADE 4-20 PPPoE Enter the PPP oE (P oint-to-P oint ov er Ether net) parameters here. Parameter Description Enable/Disable Enables/disables the PPPoE function . IP Address If your IP addres s is assigne d by the ISP eac h time y ou connect, leave this field all zeros. Otherwise, enter your ISP supplied static IP address here.[...]

  • Page 64

    A DVANCED S ETUP 4-21 ATM Enter A TM (Asynchronous T r ansfer Mode) function parameters here . Idle Time (Minute) Enter the ma ximum idle time for the Int ernet connec tion. After this time has been exceeded the co nnection will be terminated. ISP Name Choose th e ISP to whom this connec tion will ap ply. Parameter Description Protocol • Disable:[...]

  • Page 65

    C ONFIGURING THE B AR RICADE 4-22 Clone MAC Address Some ISPs require y ou to regi ster you r MA C address with them. If this is the case, the MA C address of the Bar ricade must be changed to the MA C address that y ou ha v e registered with y our ISP . Encapsul ation Specifies how to handle mu ltiple protoco ls at the ATM t ransport layer. Go to?[...]

  • Page 66

    A DVANCED S ETUP 4-23 ISP Enter the Internet Ser vice Pro vider (ISP) name , user name , and passw ord for each ISP connection you ha v e. Y ou can enter up to four sets of inform ation here .[...]

  • Page 67

    C ONFIGURING THE B AR RICADE 4-24 LAN Use the LAN menu to configure the LAN IP address a nd to en able the DHCP ser ver for dynamic c lient address allocation. Note: Remember to configure your client PCs for dynamic address allocation. (See page 3-2 for deta ils.) Parameter Description LAN IP IP Address The IP addr ess o f the Barri cade. IP Subnet[...]

  • Page 68

    A DVANCED S ETUP 4-25 Wireless T he Bar ricade als o operates as a wire less access point, allo wing wireless computers to communicate with each ot her . T o configure this function, all you need to do is enable the wireless function, define the radio channel, the domain identifier , and the security options . Check Enable and click “ APPL Y”.[...]

  • Page 69

    C ONFIGURING THE B AR RICADE 4-26 Channel and SSID Y ou must specify a common radio cha nnel and SSID (Ser vice Set ID) to be used by the Bar ricade Wireless R outer and all of its wireless clients . Be sure you configure all of its clients to the same values . Parameter Description ESSID Extended Service Set ID. The ESSID must be the sa me on the [...]

  • Page 70

    A DVANCED S ETUP 4-27 Security T o make your wireless netw ork safe , y ou should turn on the security function. The Bar ricade suppor ts WEP (Wired Equiv alent Priv acy) and WP A (Wi-Fi Protected) secur ity mechanisms .[...]

  • Page 71

    C ONFIGURING THE B AR RICADE 4-28 WEP If yo u wa nt to use WEP to protect y our wireless netw ork, you need to set the same parameters for the Bar ricade and all your wireless clients . Y ou may automatically ge nerate encr yption keys or manually enter the keys . T o generate the key au tomatically with passphrase , chec k the P assphrase box, ent[...]

  • Page 72

    A DVANCED S ETUP 4-29 WPA Wi-Fi Protected Access (WP A) combines temporal k ey integrity protocol (TKIP) and 802.1X mec hanisms . It provides dynamic k ey encr yption and 802.1X authentication ser vice. Paramete r Description Cypher s uite The secu rity mechan ism used i n WPA for enc ryption. Authentication Choose 802.1X o r Pre-shared K ey to use[...]

  • Page 73

    C ONFIGURING THE B AR RICADE 4-30 802.1X If 802.1X is used in your netw ork, th en you should enable this function for the Barricade. Parameter Description 802.1X Authentication Enable or disabl e this authentic ation func tion. Session Idle timeout Defines a maximum period of tim e for which the connec tion is maintained during inac tivity. Re-Aut[...]

  • Page 74

    A DVANCED S ETUP 4-31 NAT Network Address T ranslati on allows mult iple users to access the Inter net sharing one public IP .[...]

  • Page 75

    C ONFIGURING THE B AR RICADE 4-32 Address Mapping Allows one or more public IP addresses to be shar ed by m ultiple inter nal users . T his also hides the inter nal netw ork for increased priv acy and security . Enter the Public IP addre ss you wish to share into the Global IP field. Enter a range of inter nal IPs that will share the global IP into[...]

  • Page 76

    A DVANCED S ETUP 4-33 Virtual Server If yo u configure the Bar ricade as a vi r tual ser ver , re mote users accessing ser vices such as w eb or FTP a t y our local site via public IP addresses can be automat ically red irected to local ser vers c onfigured wi th pri v ate IP addresses . In other words , de pendin g on the requested ser vice (TCP/U[...]

  • Page 77

    C ONFIGURING THE B AR RICADE 4-34 Special Application Some applications require multiple c onnections , such as Inter net g aming, video-conferen cing, a nd Internet te lephony . Th ese applications may not w ork when Netw ork Address T ranslation (NAT ) is enabled. If y ou need to r un applications that require mu ltiple connections , use these pa[...]

  • Page 78

    A DVANCED S ETUP 4-35 Routing These pag es define routing related para meters , inc luding static routes and RIP (R outing Infor mati on Protocol) paramete rs .[...]

  • Page 79

    C ONFIGURING THE B AR RICADE 4-36 Static Route Click “ A dd” to add a new static route to the list, or c heck the bo x of an already e ntered route and click “Modify” . Clicking “Delete” will remove an entry from the lis t. Parameter Description Index Check the bo x of the route you wish to delete or modify. Network Address Enter the IP[...]

  • Page 80

    A DVANCED S ETUP 4-37 RIP Parameter Description General RIP Parameters RIP mode Globally enables or di sables RIP. Auto summary If Auto summary is disabl ed, then RIP packets will include sub-network i nformation fr om all sub- networks conn ected to the router. If en abled, this sub-network information will be summarized to one piece of informatio[...]

  • Page 81

    C ONFIGURING THE B AR RICADE 4-38 RIP sends routing-update messages at regular inter vals and when the netw ork topolog y changes . W hen a router receiv es a routing update that includes c hanges to an entry , it updates its r outing table to reflect the new route. RIP routers maintain only the best route to a destination. After updating its routi[...]

  • Page 82

    A DVANCED S ETUP 4-39 Routing Table Parameter Description Flags Indicates t he route status: C = Direct connect ion on the s ame subne t. S = Static route. R = R IP (Routi ng Information P rotocol) as signed rout e. I = ICMP (I nternet Control Message Prot ocol) Redirec t route. Network Address Destination IP address. Netmask The subnet work associ[...]

  • Page 83

    C ONFIGURING THE B AR RICADE 4-40 Firewall Th e Bar ricade Router’ s firewall inspects pack ets at the application layer , maintains TCP and UDP session i nfor mation including time-outs and the number of activ e sessions, and pro vid es the ability to detect and prevent cer tain types of netw ork attacks . Network attacks that deny access to a n[...]

  • Page 84

    A DVANCED S ETUP 4-41 Access Control Access Control allo ws users to define the outgoing traf fic per mitted or not-per mitted through the W AN interface. The default is to per m it all outg oing traffic . The following items are on the Access Control screen: Parameter Description Enable Filtering Function Click Yes to turn on the fi lterin g funct[...]

  • Page 85

    C ONFIGURING THE B AR RICADE 4-42 T o add the PC to the filtering table: 1. Click “ A dd PC” on the Access Control screen . 2. Define the appropriate settin gs for client PC ser vic es . 3. Clic k “OK” and then click “ APPLY” to sa v e your settings .[...]

  • Page 86

    A DVANCED S ETUP 4-43 MAC Filter The Bar ricade can also limit the access of hosts within the local area netw ork (LAN). The MA C Filtering T abl e allo ws the Barricade to enter up to 32 MA C add resses that are not allow ed access to the W AN por t. Click Y es to enable, or No to disable this function. Enter the MA C address in th e space pro vid[...]

  • Page 87

    C ONFIGURING THE B AR RICADE 4-44 URL Blocking The Barri cade al lows the user to block access to web sites from a particular PC by entering either a f ull URL addr ess or just a keyw ord. This feature can be used to protect children from accessin g violent or pornographic web sites. Y ou can define up to 30 sites here .[...]

  • Page 88

    A DVANCED S ETUP 4-45 Schedule Rule Y ou may filter Inter net access for loca l clients based on r ules . Eac h access control r ule may be acti v ated at a sc heduled time . Define the schedule on the Schedule R ule pag e, and apply the r ule on the Access Control page. F ollow these steps to add a sc hedule r ule: 1. Click “ Add Schedule R ule?[...]

  • Page 89

    C ONFIGURING THE B AR RICADE 4-46 Intrusion Detection • Intrusion Detection Feature Stateful Packet Inspection (SPI) and Anti-DoS firewall protection (Default: Enabled) — The Intrusion Detection Feature of the Barricade Router limits access for incoming tr affic at the WAN port. When the SPI feature is turned on, all incoming pa ckets will be b[...]

  • Page 90

    A DVANCED S ETUP 4-47 Scroll do wn to view more infor mation. • Stateful Packet Inspection This is called a “stateful” packet inspection because it examines the contents of the packet to determine th e state of the communications; i.e., it ensures that the sta ted destination co mp uter has previously requested the current communication. Th i[...]

  • Page 91

    C ONFIGURING THE B AR RICADE 4-48 “Enable SPI and Anti-DoS firewall pr ot ection” fi eld and then check the inspection type that you need, such as Packet Fragmentation, TCP Connection, UDP Session, FTP Service, H.323 Service, or TFTP Service. • When hackers attempt to enter your network, we can alert you by e-mail Enter your email address . S[...]

  • Page 92

    A DVANCED S ETUP 4-49 • DoS Criteria and Port Scan Criteria Set up DoS and port scan criteria in the spaces provided (as sho wn below). Note: The firewall does not significantly affect system performance, so we advise ena bling t he preventi on features to protect your network. Parameter Defaults Description Total i ncomp lete TCP/UDP sessions HI[...]

  • Page 93

    C ONFIGURING THE B AR RICADE 4-50 DMZ If you have a client PC that cannot run an Internet application properly from behind the firewall, you can open the client up to unrestricted two- way Internet access. Enter the IP a ddress of a DMZ (Demilitarized Zone) host on this screen. Adding a client to the DMZ may expose your local network to a variety o[...]

  • Page 94

    A DVANCED S ETUP 4-51 SNMP Use the SNMP configuration screen to display and modify parameters for the Simpl e Netw ork Manage ment Protocol (SNMP). Community A computer at tached to the netw ork, called a Network Management Station (NMS), can be used to access th is infor mation. Access rights to the ag ent are controlled by comm unity st rings . T[...]

  • Page 95

    C ONFIGURING THE B AR RICADE 4-52 Trap Specify the IP address of the NM S to notify whe n a signifi cant ev ent is detected by the agent. W hen a trap condition occurs , the SNMP agent sends an SNMP trap mes sage to any NMS specified as a trap recei v er . Parameter Description IP Address Traps are sent to this addres s when errors or specific eve [...]

  • Page 96

    A DVANCED S ETUP 4-53 ADSL ADSL (Asymmetric Digital Subscriber Line ) is designed to deliv er more bandwidth do wnstream (from the central offi ce to the customer si te) than upstream. T his section is used to configure the ADSL operation type and shows the A DSL status . Parameters Parameter Description Operation Mode • Automatic • T1.413 issu[...]

  • Page 97

    C ONFIGURING THE B AR RICADE 4-54 Status The Status screen displays infor m ation on connection line status , data rate, operation data and defect indication, and statistics . Scroll do wn to view more infor mation.[...]

  • Page 98

    A DVANCED S ETUP 4-55 The following items are included on this infor mation pag e: Parameter Description Status Line Status Shows th e current status of t he ADSL line connect ion. Data Rate Upstream Maximum upst ream data rate. Downstream Maximum down stream data rate. Operation Data/Def ect Indication Noise Margin Ma ximum upstream and downstream[...]

  • Page 99

    C ONFIGURING THE B AR RICADE 4-56 Statistics (Superframes repres ent the highest l evel of data presentation . Each superframe contains re gular ADSL frames, one of which is used to provide su perframe synchronizatio n, identifying the sta rt of a supe rframe. Some of the remaining frames are also used for sp ecial fu nctions .) Receive d Superfram[...]

  • Page 100

    A DVANCED S ETUP 4-57 DDNS Dynamic Domain Nam e Ser vice (DDN S) provides users on the Internet with a method to tie their domain name to a computer or ser ver . DDNS allows yo ur domain name to follo w your IP addres s automatically b y hav in g you r DN S r e co rd s cha ng ed w he n yo u r I P a dd r es s cha ng es. T h i s D N S f e a t u r e i[...]

  • Page 101

    C ONFIGURING THE B AR RICADE 4-58 UPnP Click Enable to turn on the Univ ersal Plug and Pla y function of the Bar ricade. This function allows the device to a utomatically: • dynamically join a network • obtain an IP address[...]

  • Page 102

    A DVANCED S ETUP 4-59 Tools Use the T ools menu to back up the cur rent configuration, restore a previously sa v ed conf igur ation, restore f actor y se ttings , update fir mwa re, and reset the Bar r icade. Configuration Tools Choose a function and click Next. Backup allo ws y ou to sav e the Bar ricade Router’ s configuration to a file . R est[...]

  • Page 103

    C ONFIGURING THE B AR RICADE 4-60 Firmware Upgrade Use this screen to update the fir mware or user inte rface to the latest v ersions . Download the upgrade file fr om the SMC w eb site , and sa v e it to your hard dri ve . In the Upg rade T arget field, choose Fir mware. Then click “Browse ... ” to look for the downloaded file . Click “ APPL[...]

  • Page 104

    A DVANCED S ETUP 4-61 Reset Click “ APPL Y” to reset the Bar ricad e . T he reset will be complete when the pow e r LED stops blinking . If you perfor m a reset from this pa ge, the configurations will not be changed bac k to the factor y default settings . Note: If you use the Reset button on th e front panel, the Barricade performs a power re[...]

  • Page 105

    C ONFIGURING THE B AR RICADE 4-62 Status The Status page displays WAN/LA N connection status, firmware, and hardware version numbers, illegal atte mpts to access your netw ork, as well as information on DHCP clie nt s connected to your network. The security log may be saved to a file by clicking “Save” and choosing a location. Scroll down to vi[...]

  • Page 106

    A DVANCED S ETUP 4-63 The following items are included on the Status pag e: Item Description INTERNET Displays WA N connection ty pe and status. Cli ck the Connect button to connect t o your ISP . GATEWAY D isplays system IP settings, as well as DHCP Server and Firewall status. INFORMATION Display s the number of attached client s, the firmware ver[...]

  • Page 107

    C ONFIGURING THE B AR RICADE 4-64 Finding the MAC addre ss of a Network Card Windows 98/ME Click Start/Run. T ype “winipcfg” and press “ENTE R”. The MA C address is in the “ Ad apter Address” section. Windows NT4/2000/XP Click Start/Prog rams/Com mand Prompt. T ype “ipconfig /all” and press “ENTER”. The MA C address is listed as[...]

  • Page 108

    A-1 A PPENDI X A T ROUBLESHOOTING This section describes common probl ems y ou ma y encou nter and pos sible solutions to them . The Bar ricade can be easily monitored through panel indicators to identify pr oblems . Troubleshooting Chart Sympto m Action LED Indicators Power LED is Off • Check connections between the Barricade, the external power[...]

  • Page 109

    T R OUBLESHOOTING A-2 LED Indicators Link LED is Off • Verify that the Barricade and attached device ar e powered on. • Be sure the cable is plugged into both the Barricade and the correspond ing device. • Verify that the proper cable type is used and that its length does not exceed the specified limits. • Be sure that the network interface[...]

  • Page 110

    T RO U B L ES H OO T I N G A-3 Management Problems Cannot conn ect using the web browser • Be sure to have configured the Barricade with a valid IP address, subnet mask, and default gateway. • Check that you have a valid network connection to the Bar ricade and that the port you are u sing has not been disabled. • Check the network cabling be[...]

  • Page 111

    T R OUBLESHOOTING A-4 Wireless Problems A wireless PC cannot asso ciate with the Barricade. • Make sure the wireless PC has the same SSID settings as the Barric ade. See “Channel and SSID” on page 4-26. • You need to have the same security settings on the clients and the Barricade. See “Security” on page 4-27. The wireless network i s o[...]

  • Page 112

    B-1 A PPENDIX B C ABLES Ethernet Cable Caution: DO NOT plug a phone jack conne ctor into any RJ-45 port. Use only twisted-pair cables with RJ-45 connectors that conform with FCC standards. Specifications Wiring Conventions For Ethernet connections, a twisted-pa ir cable must have two pairs of wires. Each wire pair is identified by two different col[...]

  • Page 113

    C ABLES B-2 Each wire pair must be attac hed to t he RJ-45 connec tors in a speci fic orientation. T he following figure illu strates ho w the pins on an Ether net RJ-45 connector are number ed. Be sure to hold the connectors in the same orientation when attac hing the wires to the pins . Figure B-1. RJ-45 Ethernet Connector Pin Numbers RJ-45 Port [...]

  • Page 114

    E THER NET C AB LE B-3 Pin Assignments With 100B ASE-TX/10 B ASE-T cable, pins 1 and 2 are used for transm itting data, and pins 3 and 6 for recei ving data. Straight-Through Wiring If the por t on the attached device has inter nal crossov er wiring (MDI-X), then use straight-through cable . RJ-45 Pin Assignments Pin Number Assignmen t 1 1T x + 2T [...]

  • Page 115

    C ABLES B-4 Crossover Wiring If the por t on the attached device has straight-through wi ring (MDI), use crossov e r cable . Crossover Cable Pin Ass ignments End 1 End 2 1 (Tx+) 3 (Rx+) 2 (Tx-) 6 (Rx-) 3 (Rx+) 1 (Tx+) 6 (Rx-) 2 (Tx- )[...]

  • Page 116

    ADSL C AB LE B-5 ADSL Cable Use standard telephone cable to connect the RJ-11 tele phone wall outlet to the RJ-45 ADSL port on the ADSL Router . Caution: Do not plug a phone jack connector into an RJ-45 port. Specifications Wiring Conventions F or ADSL connections , a ca ble requires one pair of wires . Each wire is identifi ed by different colors [...]

  • Page 117

    C ABLES B-6 Figure B-3. RJ-11 Pinouts Pin Signal Name W ire Color 1N o t u s e d 2 Line 2 Tip Black or White/Orange 3 Line 1 Ring Red or Blue/White 4 Line 1 Tip Green or Whit e/Blue 5 Line 2 Ring Yellow or Orange /White 6N o t u s e d 123456 Blue/White White/Blue R1 T1 123456 Red Green R1 T1 R2 T2 Black Y ellow 123456 Blue/White White/Blue R1 T1 R2[...]

  • Page 118

    C-1 A PPENDI X C S PECIFICATIONS Physical C haracteristics Po r t s F our 10/100Mbps RJ45 P orts One ADSL RJ11 T wo external dipole antennas ADSL F eatur es Suppor ts DMT line modulatio n Suppor ts Annex A Full-Rate ADSL: up to 8 Mbps do wnstream, up to 1 Mbps upstream (G .992.1 &T1.413, Issue 2) Suppor ts G .Lite ADSL: up to 1.5 Mbps downstrea[...]

  • Page 119

    S PECIFICATIONS C-2 Security F eatures P assword protected c onfiguration access User authentication ( P AP/CHAP) with PPP Firew al l NA T NAPT VPN pass through (IPSec-ESP T unnel mode,L2TP , PPTP) LAN F eatures IEEE 802.1D (self-lear ning transparent Bridging) DHCP Ser ver DNS Proxy Static R outing, RIPv1 and RIP Applications Netmeeting, ICQ, R ea[...]

  • Page 120

    S PECIFICATIONS C-3 13 chann els (ETSI) 2 Channels (Spain) 4 Channels (France) 14 chann els (J apan) Operating Channels IEEE 802.11g compliant: 13 chann els (US , Canada, Europe, J apan) RF Output P ow er Modulation Rate-Output Po wer (dBm) 802.11b - 1Mbps 16 802.11b - 2Mbps 16 802.11b - 5.5Mbps 16 802.11b - 11Mbps 16 Modulation Rate-Output P ower [...]

  • Page 121

    S PECIFICATIONS C-4 Modulation Rate-Receiv er Sensiti vity T ypical (dBm) 802.11g - 6Mbps -88 802.11g - 9Mbps -87 802.11g - 12Mbps -84 802.11g - 18Mbps -82 802.11g - 24Mbps -79 802.11g - 36Mbps -75 802.11g - 48Mbps -68 802.11g - 54Mbps -68 Environmental SMC7804WBRA complie s with the following standards: T emperat ure: IEC 68-2-14 0 to 50 deg rees [...]

  • Page 122

    S PECIFICATIONS C-5 Standards Confor mance Electroma gnetic Compatibility CE, ETSI, R&TTE, FCC part 15 cl ass B & FCC par t 68, ETS 300 328, ETS 300 826 Safety CSA/NRTL (UL1950, CSA 22.2.950) GS (EN60950), CB (IEC60950) Inter net Standards RFC 826 ARP RFC 791 IP RFC 792 ICMP RFC 768 UDP RFC 793 TCP RFC 783 TF TP RFC 1483 AAL5 Encapsulation [...]

  • Page 123

    S PECIFICATIONS C-6[...]

  • Page 124

    F O R T E C HN I C A L S U P P OR T , C AL L : F r om U . S. A . a n d C a na da ( 24 h o u rs a d a y , 7 d a y s a w ee k) ( 8 0 0 ) S M C -4 - Y O U ; P hn : ( 9 4 9) 6 7 9 -8 00 0 ; F ax : ( 9 4 9 ) 6 7 9 -1 4 8 1 F r om E ur o pe : C on t a ct de ta i l s ca n b e f o un d o n w w w . s mc - e u r o p e . c o m o r w ww . s m c . co m I N TE R[...]