SMC Networks SMC7404BRA EU manual

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130

Go to page of

A good user manual

The rules should oblige the seller to give the purchaser an operating instrucion of SMC Networks SMC7404BRA EU, along with an item. The lack of an instruction or false information given to customer shall constitute grounds to apply for a complaint because of nonconformity of goods with the contract. In accordance with the law, a customer can receive an instruction in non-paper form; lately graphic and electronic forms of the manuals, as well as instructional videos have been majorly used. A necessary precondition for this is the unmistakable, legible character of an instruction.

What is an instruction?

The term originates from the Latin word „instructio”, which means organizing. Therefore, in an instruction of SMC Networks SMC7404BRA EU one could find a process description. An instruction's purpose is to teach, to ease the start-up and an item's use or performance of certain activities. An instruction is a compilation of information about an item/a service, it is a clue.

Unfortunately, only a few customers devote their time to read an instruction of SMC Networks SMC7404BRA EU. A good user manual introduces us to a number of additional functionalities of the purchased item, and also helps us to avoid the formation of most of the defects.

What should a perfect user manual contain?

First and foremost, an user manual of SMC Networks SMC7404BRA EU should contain:
- informations concerning technical data of SMC Networks SMC7404BRA EU
- name of the manufacturer and a year of construction of the SMC Networks SMC7404BRA EU item
- rules of operation, control and maintenance of the SMC Networks SMC7404BRA EU item
- safety signs and mark certificates which confirm compatibility with appropriate standards

Why don't we read the manuals?

Usually it results from the lack of time and certainty about functionalities of purchased items. Unfortunately, networking and start-up of SMC Networks SMC7404BRA EU alone are not enough. An instruction contains a number of clues concerning respective functionalities, safety rules, maintenance methods (what means should be used), eventual defects of SMC Networks SMC7404BRA EU, and methods of problem resolution. Eventually, when one still can't find the answer to his problems, he will be directed to the SMC Networks service. Lately animated manuals and instructional videos are quite popular among customers. These kinds of user manuals are effective; they assure that a customer will familiarize himself with the whole material, and won't skip complicated, technical information of SMC Networks SMC7404BRA EU.

Why one should read the manuals?

It is mostly in the manuals where we will find the details concerning construction and possibility of the SMC Networks SMC7404BRA EU item, and its use of respective accessory, as well as information concerning all the functions and facilities.

After a successful purchase of an item one should find a moment and get to know with every part of an instruction. Currently the manuals are carefully prearranged and translated, so they could be fully understood by its users. The manuals will serve as an informational aid.

Table of contents for the manual

  • Page 1

    Br oadband Router with b uilt-in ADSL Modem ◆ Compatible with all leading DSLAMs ◆ Fire wall (hack er attack logging, DoS, and client f iltering) ◆ Supports DMT line modulation ◆ Four auto-ne gotiating 10/100 Ethernet ports ◆ Built-in print server ◆ PPTP , L2TP , and IPSec pass through ◆ Multiple user Internet access with a single use[...]

  • Page 2

    [...]

  • Page 3

    Br oadband Router with b uilt-in ADSL Modem From SMC’ s line of award-winning connectivity solutions Dece m ber 2 002 Part No: 750.9701, UK 750.9 735 Pub No: 150000035400A[...]

  • Page 4

    iii C OMPLIANCES FCC - Class B This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to P art 15 of the FCC Rules . These limits are designed to provide reasonable protection against har mf ul interference in a residential installation. T his equipment generates, uses and can radiate radio frequen[...]

  • Page 5

    C OMPLIANCES iv modifications in order to maintain uninterr upted ser vice. If trouble is experienced with this equipment, please contact our company at the numbers shown on back of this manual for repair and warranty infor mation. If the trouble is causing har m to the telephone network, the telephone company ma y request you to remove the equipme[...]

  • Page 6

    C OMPLIANCES v EC Confor mance Declaration - Class B This infor mation technolog y equipment complies with the requirements of the Council Directiv e 89/336/EEC on the Approximation of the laws of the Member States relating to Electromagnetic Compatibility and 73/23/EEC for electrical equipment used within certain voltage limits and the Amendment D[...]

  • Page 7

    C OMPLIANCES vi[...]

  • Page 8

    i T ABLE OF C ONTENTS 1 Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-1 About the B arricade . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-1 Features and Benefits . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-1 Applicat ions . . . . . . . [...]

  • Page 9

    T ABLE OF C ONTENTS ii Password Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-17 Remote Mana gement . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4- 18 DNS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-19 WAN . . . . . . . . . . . . . . . . . . [...]

  • Page 10

    T ABLE OF C ONTENTS iii Obtain IP Settings from Your ADSL Router . . . . . . . . . . . . . . . 5-5 Windows NT 4.0 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-6 Disable HTTP Proxy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-9 Obtain IP Settings from Your Barricade . . . . . . . . [...]

  • Page 11

    T ABLE OF C ONTENTS iv[...]

  • Page 12

    1-1 C HAPTER 1 I NTRODUCTION Congratulations on your purchase of the Bar ricade Broadband R outer with built-in ADSL Modem (SMC7404BRA EU .) W e are proud to provide you with a powerful yet simple comm unication device for connecting your local area network (LAN) to the Internet. For those who want to surf the Inter net in the most secure wa y , th[...]

  • Page 13

    I NTR ODUCTION 1-2 • NAT also enables mult i-user Internet access via a single user account, and virtual server functionality (providing protected access to Internet services such as Web, FTP, e-mail, and Telnet.) • VPN pass-through (IPSec-ESP Tunnel mode, L2TP, PPTP.) • User-definable application sensing tunnel supports applications requirin[...]

  • Page 14

    A PPLICATIONS 1-3 Applications Many advanced netw orking features are provided by the Barricade: •W i r e d L A N The Bar ricade provides connectivity to wired 10/100 Mbps devices, making it easy to create a netw ork in small offices or homes . • Internet Access This device suppor ts Internet access through a DSL connection. Since many DSL prov[...]

  • Page 15

    I NTR ODUCTION 1-4 • DMZ Host Suppor t Allows a netw orked computer to be fully exposed to the Inter net. This function is used when NAT and firewa ll security prevent an Internet application from functioning cor rectly . • Security The Bar ricade suppor ts security features that deny Internet access to specified users, or filter all requests f[...]

  • Page 16

    2-1 C HAPTER 2 I NSTALLATION Before installing the Barricade Broadband Router with built-in ADSL M o d e m , ve r i f y t h a t yo u h a ve a l l t h e i t e m s l i s t e d u n d e r “ Pa c k a g e C o n t e n t s.” If any of the items are missing or damag ed, contact your local distributor . Also be sure that you ha ve all the necessary cabli[...]

  • Page 17

    I NSTALLATION 2-2 System Requirements Y ou must meet the following minimum requirements: • Inter net access from your Internet Se rvice Provider (ISP) usi ng a DSL modem. • A PC using a fixed IP a ddress or dynamic IP address assigne d via DHCP, as well as a gateway server address a nd DNS server address from your service provider. • A comput[...]

  • Page 18

    H ARDWARE D ESCRIPTION 2-3 Hardware Description The Bar ricade contains an integ rated DSL modem and connects to the Internet or to a remote site using its RJ-11 W AN por t. It can be connected directly to your PC or to a local area netw ork using any of the four RJ-45 F ast Ether net LAN ports . Access speed to the Internet depends on your ser vic[...]

  • Page 19

    I NSTALLATION 2-4 LEDs Verify Status Check t he power and port LED indicators . LED Condition Status Power On The Barricade is receiving power. Normal operation. Off Power off or failure. Ethernet (4 LEDs) On Ethernet Link. Flashing Send/Receive data. Off No Link. ADSL Syn On ADSL connectio n is functioning corre ctly. Flashing Startup. Off ADSL co[...]

  • Page 20

    C ONNECT THE S YSTEM 2-5 Connect the System The Bar ricade can be positioned at any con venient location in y our office or home. No special wiring or cooling requirements are needed. Y ou should, howev er, comply with the follo wing guidelines: • Keep the Ba r ricade away from any heating devices. • Do not place the Barricade in a dusty or wet[...]

  • Page 21

    I NSTALLATION 2-6 Connect the ADSL Line Ru n standard telephone cable from the wall jack pro viding ADSL ser vice to the W AN port on your Barricade. When inser ting an ADSL RJ-11 plug, be sure the tab on the plug clicks into position to ensure that it is properly seated. If you are using splitterless ADSL ser vice, be sure you add low-pass filters[...]

  • Page 22

    C ONNECT THE S YSTEM 2-7 Installing a Splitterless Connection If you a re using a splitt erless (G .lite) connection, the n your service provider will attac h the outside ADSL line directly to y our phone system. In this case you can connect your phones and computer directly to the incoming ADSL line, but you will hav e to add low-pass filters to y[...]

  • Page 23

    I NSTALLATION 2-8 inserting an RJ-45 connector, be sure the tab on the connector clicks into position to ensure that it is properly seated. Warning: Do not plug a phone jack connector into an RJ-45 port. This may damage the Barricade. Notes: 1. Use 100-ohm shielded or unshielded twisted-pair cable with RJ-45 connectors for all Ethernet ports. Use C[...]

  • Page 24

    3-1 C HAPTER 3 C ONFIGURING C LIENT PC S TCP/IP Configuration T o access the Inte r net through t he Barricade, you m ust configure the network settings of the computers on your LAN to use the same IP subnet as the Barricade. The default network set tings for the Barricade are: IP Address: 192.168.2.1 Subnet Mask: 255.255.255.0 Note: These settings[...]

  • Page 25

    C ONFIGURING C LIENT PC S 3-2[...]

  • Page 26

    4-1 C HAPTER 4 C ONFIGURING THE B ARRICADE After you ha ve configured TCP/IP on a client computer , use a W eb browser to configure the Barricade. T he Bar ricade can be configured by any J ava-supported browser including Internet Explorer 4.0 or abov e, or Netscape Navigator 4.0 or abov e. Using the W eb manag ement interface, you ma y configure t[...]

  • Page 27

    C ONFIGURING THE B AR RICADE 4-2 Navigating the Web Browser Interface The Bar ricade’ s manag ement interface consists of a Setup Wizard and an Advanced Setup section. Setup Wizard: Use the Setup Wizard if y ou want to quic kly setup the Bar ricade. Go to “Setup Wizard” on page 4-3. Adv anced Setup: Advanced Setup supports more adv anced func[...]

  • Page 28

    S ETUP W IZARD 4-3 Setup Wizard Time Zone Click on “Setup Wizard. ” T he first item in the Setup Wizard is Time Z one setup . F or accurate timing of lo g entries and system events , you need to set the time zone. Select your time zone from the dropdown list. If your area requires it, check to enable the clock for daylight saving changes , and [...]

  • Page 29

    C ONFIGURING THE B AR RICADE 4-4 Internet Sharing Select the operation mode . Go to “PPP oE & PPP oA ” on pag e 4-7 if you will use either of these modes , and g o to “Multiple Protocol over A TM Mode” on page 4-10 if you will use m ultiple protocol routing mode .[...]

  • Page 30

    S ETUP W IZARD 4-5 Parameter Setting Parameter Description VPI/VCI Data flows are broken up into fixed length cells, each of which contains a Virtual Path Identifie r (VPI) that identifies the path between two nodes, and a Virtual Circuit Id entifier (VCI) that identifies the data channel wit hin that virtual path . Each virtual circui t maintains [...]

  • Page 31

    C ONFIGURING THE B AR RICADE 4-6 Finish Y our Bar ricade is now setup . Go to “T roubleshooting” on page A-1 if you cannot make a connection to the Internet. Parameter Description Protocol Indicates the pr otocol used. VPI/VCI Virtual Path Identifier (VPI) and Virtual Circuit Identifier (VCI.) AAL5 Encapsulati on Shows the packet encapsulation [...]

  • Page 32

    S ETUP W IZARD 4-7 PPPoE & PPPoA Parameter Description Username Enter the ISP assign ed username. Password Enter your password. Retype Password Confirm the password. DNS Enter a domain name server IP address. VPI/VCI Virtual Pa th Identifier (VPI) and Virtual Circuit Identifier (VCI.) Data flows are broken up into fixed le ngth cells, each of w[...]

  • Page 33

    C ONFIGURING THE B AR RICADE 4-8 Finish Parameter Description ADSL Operation Mode (WAN) Protocol Indicates the pr otocol used VPI/VCI Virtual Path Identifier (VPI) and Virtual Circuit Identifier (VCI.) AAL5 Encapsulati on Shows the packet encapsulation type. ISP Parameters Username The ISP assigned username. Password The password (hidden.)[...]

  • Page 34

    S ETUP W IZARD 4-9 Y our Bar ricade is now setup . Go to “T roubleshooting” on page A-1 if you cannot make a connection to the Internet. DHCP Parameters Default Gateway The default gateway IP address. If the Barricade cannot find the destination address within its local network, it wil l forward the packets to the De fault Gateway (usually your[...]

  • Page 35

    C ONFIGURING THE B AR RICADE 4-10 Multiple Protocol over ATM Mode Parameter Description DNS Enter a domain name server IP address. WAN IP Enter an IP Address for the Barricade WA N interface. Subnet Mask Enter a subnet mask. VPI/VCI Virtual Path Identifier (VPI) and V irtual Circuit Identifier (VCI.) Data flows are broken up int o fixed length cell[...]

  • Page 36

    S ETUP W IZARD 4-11 Finish Parameter Description ADSL Operation Mode (WAN) Protocol Indicates the pr otocol used VPI/VCI Virtual Pa th Identifier (VPI) and Virtual Circuit Identifier (VCI.) AAL5 Encapsulati on Shows the packet encapsulation type. Network Layer Parameters (WAN) IP Address Shows the WAN IP address. Subnet Mask Shows the WAN Su bnet M[...]

  • Page 37

    C ONFIGURING THE B AR RICADE 4-12 Y our Bar ricade is now setup . Go to “T roubleshooting” on page A-1 if you cannot make a connection to the Internet. DHCP Parameters Default Gateway The default gateway IP address. If the Barricade cannot fin d the destination address within its loc al network, it will forward the packets to the Default Gatewa[...]

  • Page 38

    A DV ANC ED S ETUP 4-13 Advanced Setup Clicking “ Adv anced Setup” displays the main menu on the left-hand side of the screen and descriptiv e infor mation on the right-hand side. The Main Menu links are used to na vig ate to other men us that display configuration parameters and statistics . Navigating the Web Browser Interface The Bar ricade?[...]

  • Page 39

    C ONFIGURING THE B AR RICADE 4-14 The following table brief ly descri bes the “ Advanced Setup” menu items . Menu Descript ion System Sets the local time zon e, the password for administrator access, the IP address of a PC that will be allowed to manage the Barricade remotely, and the IP address of a domain name server. WAN Specifies the Intern[...]

  • Page 40

    M AKING C ONFIGURATION C HANGES 4-15 Making Configuration Changes Configurable parameters hav e a dialog bo x or a drop-down list. Once a configuration change has been made on a page, be sure to click the “ APPL Y” or “NEXT” button at the bottom of the page to make the new settings a ctive . Note: To ensure proper screen refresh after a com[...]

  • Page 41

    C ONFIGURING THE B AR RICADE 4-16 System Settings Time Zone Set your local time zone . This infor mation is used for log entries and client filtering .[...]

  • Page 42

    S YSTEM S ETTINGS 4-17 Password Settings Use this page to restrict access based on a password. By default, there is no password. F or security you should assign one before exposing the Bar ricade to the Inte rnet. P asswords can contain from 3–12 alphanumeric characters and are not case sensitiv e. Note: If your password is lost, or you cannot ga[...]

  • Page 43

    C ONFIGURING THE B AR RICADE 4-18 Remote Mana gement By default, management access is only a vailable to users on y our local network. Ho wev er, y ou can also manage the Bar ricade from a remote host by entering the IP address of a remote computer on this screen. Check the “Enabled” box to enable this function. Note: If you check “Enable” [...]

  • Page 44

    S YSTEM S ETTINGS 4-19 DNS Domain Name Servers are used to map a domai n name (e.g ., www .smc.com) to the equivalent numerical IP ad dress (e.g ., 64.147.25.20.) Y our ISP should provide the IP address of one or more domain name ser vers . Enter those addresses on this page.[...]

  • Page 45

    C ONFIGURING THE B AR RICADE 4-20 WAN PPPoE (PPP over Ethernet) Parameter Description Enable/Disable Enables/Disables th e PPPoE Interface. IP Address If your IP address is assigned by the ISP each time you connect, l eave this field all zeros . Otherwise, enter your ISP supplied static IP address here. Subnet Mask If your subnet mas k is assigned [...]

  • Page 46

    WA N 4-21 VPI/VCI Virtual Pa th Identifier (VPI) and Virtual Circuit Identifier (VCI.) Data flows are broken up into fixed le ngth cells, each of which contains a Virtual Path Identifie r (VPI) that identifies the p ath between two nodes, and a Virtual Circuit Identifier (VCI) that identifies the data channel within th at virtual path. Each virtual[...]

  • Page 47

    C ONFIGURING THE B AR RICADE 4-22 ATM Parameter Description Protocol • Disable: Disables the c onnection. • 1483 Bridging: Bridging is a standardized layer 2 technology. It is typically used in corporate networks to extend the physical reach of a single LAN segment and increase the number of stations on a L AN without compro mising performance.[...]

  • Page 48

    WA N 4-23 ISP Enter the Internet Ser vice Provider name, username, and passw ord for each ISP connection y ou have . VPI/VCI Virtual Path Indicator: Each connectio n must have a unique pair of VPI/VCI settings. Virtual Channe l Indicator: Each connecti on must have a unique pair of VPI/VCI settings. Encapsulatio n Specifies how to handle multiple p[...]

  • Page 49

    C ONFIGURING THE B AR RICADE 4-24 LAN Parameter Description LAN IP IP Address The IP address of the Barricade. IP Subnet Mask Virtual Path Identifier (VPI) and Virtual Circuit Identifier (VCI.) DHCP Server To dynamically assign an IP address to client PCs, enable the DHCP (Dynamic Host Co nfiguration Protocol) Server. Lease Time Set the DHCP lease [...]

  • Page 50

    LAN 4-25 Re member to configure your client PCs for dynamic address allocation (See “Configuring Client PCs” on page 3-1 for details .) IP Address Pool Start IP Address Specify th e start IP address of the DHCP pool. Do not include the gateway addre ss of the Barricade in the client addres s pool. If you c hange the pool range, make sure the fi[...]

  • Page 51

    C ONFIGURING THE B AR RICADE 4-26 NAT Some applications require multiple connections , such as Inter net gaming, videoconferencing, Internet tele phony , and others . T hese applications may not work when Network Address T ranslation (NAT) is enabled. If y ou need to r un applications that require multiple connections , use these pages to specify t[...]

  • Page 52

    NA T 4-27 Address Mapping Use “ Address Mapping” to allo w a limited number of public IP addres ses to be translated into multiple pri vate IP addresses for use on the internal LAN network. T his also hides the internal network for increased pri vacy and securit y .[...]

  • Page 53

    C ONFIGURING THE B AR RICADE 4-28 Virtual Server If you configure the Barricade as a vir tual ser ver, remote users accessing ser vices such as W eb or FTP at your local site via public IP addresses can be automaticall y redirected to l ocal ser vers c onfigured with pri vate IP[...]

  • Page 54

    NA T 4-29 addresses . In other words , depending on the requested ser vice (TCP/UDP port number), the Bar ricade red irects the external service request to the appropriate ser ver (located at anoth er inter nal IP address .) F or example, if y ou set T ype/Public Port to TCP/80 (HTTP or W eb) and the Priv ate IP/P or t to 192.168.2.2/80, then all H[...]

  • Page 55

    C ONFIGURING THE B AR RICADE 4-30 Routing System These pag es define routing rel ated parameters , including static routes and RIP (Routing Information Protocol) parameters. Static Route Click “ Add” to add a new static route to the list, or c heck the box of an already entered route and c lick “Modify . ” Clicking “Delete” will remove [...]

  • Page 56

    R OUTING S YSTEM 4-31 RIP Parameter Description Interface The WAN interface to be configured. Operation Mode Disable: RIP disable d on this interface. Enable: RIP enabled on this i nterface. Silent: Listens for route broadcasts and updates its route table. It does not p articipate in sending route broadcast s. Version Sets the RI P (Routing Info rm[...]

  • Page 57

    C ONFIGURING THE B AR RICADE 4-32 RIP sends routing-update messages at regular inter vals and when the network topology changes . When a router receives a routing update that includes cha nges to an entr y , it updates its routing table to reflect the new route. RIP routers maintain only th e best route to a destination. After updating its routing [...]

  • Page 58

    R OUTING S YSTEM 4-33 Routing Table Note: Most modern routers support RIP-2 so there is usually no need for a static rout e table. Parameter Description Flags Indi cates the route status: C = Direct connection on th e same subnet. S = Static ro ute. R = RIP (Routing Informatio n Protocol) ass igned route. I = ICMP (Internet Control Mess age Protoco[...]

  • Page 59

    C ONFIGURING THE B AR RICADE 4-34 Firewall The Bar ricade’ s firew all enables access control of client PCs , blocks common hack er attacks , including IP Spoofing, Land Attack, Ping of Death, IP with zero length, Smurf Attack, UDP port loopback, Snork Attack, TCP null scan, and TCP SYN f looding . The firewall does not significantly affect syste[...]

  • Page 60

    F IR EWALL 4-35 Access Control Access Control allows us ers to define the outgoing traffic per mitted or[...]

  • Page 61

    C ONFIGURING THE B AR RICADE 4-36 not-per mitted through the W AN interfac e. T he default is to per mit all outg oing traffic . (See the following page for details.) The Bar ricade can also limit the access of hosts within the local area network (LAN .) T he MA C Filtering T able allows the Bar ricade to enter up to 32 MA C addresse s that are not[...]

  • Page 62

    F IR EWALL 4-37 Access Control: Add PC[...]

  • Page 63

    C ONFIGURING THE B AR RICADE 4-38 URL Blocking The Bar ricade allows the user to block access to W eb sites from a particular PC by entering ei ther a full URL address or just a keyw ord. T his feature can be used to protect children from accessing violent or pornog raphic web sites .[...]

  • Page 64

    F IR EWALL 4-39 Schedule Rule Y ou may filter Intern et access for local clients based on r ules. Each access control rule may be activ ated at a scheduled time . Define the schedule on the “Sc hedule Rule” page, and apply the rule on the “ Access Control” page. 1. Click “ Add Schedule R ule. ” 2. Define the appropriate settings for a s[...]

  • Page 65

    C ONFIGURING THE B AR RICADE 4-40 3. Click “OK” and then click “ APPLY” to sa ve your settings .)[...]

  • Page 66

    F IR EWALL 4-41 Intrusion Detection[...]

  • Page 67

    C ONFIGURING THE B AR RICADE 4-42 The Bar ricade’ s firewall inspects pack ets at the application l ayer , maintains TCP and UDP session infor mation including timeouts and number of activ e sessions, and pro vides the ability to detect and prevent certain type s of network attac ks such as DoS attacks . Network attacks that deny access to a netw[...]

  • Page 68

    F IR EWALL 4-43 Stateful Packet Inspection This option allows yo u to select different application types that are using dynamic port numbers. If you wish to use Stateful Packet Inspection (SP I) for blocking pac kets, click on the “Yes” radio button in the “Enable SPI and Anti-DoS firewall protection ” field and then check the inspection ty[...]

  • Page 69

    C ONFIGURING THE B AR RICADE 4-44 RIP Defect Enabled If an IPX RIP request packet is not replied to by the router, it will stay in the input queue and not be released. Accumulated packets could cause the input qu eue to fill, causing severe problems for all protoc ols. Enabling this feature prevents the packets acc umulating. When hackers attempt t[...]

  • Page 70

    F IR EWALL 4-45 H.323 data channel i dle timeout 180 sec The length o f time for whi ch an H.323 se ssion will be managed if the re is no activity. DoS Detec t Criteria Total incomplete TCP/UDP sessions HIG H 300 session s Defi nes the rat e of new une stablished sessions that will cause th e software to start deleting half-open sessions . Total in[...]

  • Page 71

    C ONFIGURING THE B AR RICADE 4-46 DMZ If you ha ve a client PC that cannot run an Internet application properly from behind the firewall, y ou can open the client up to unrestricted two-w ay Internet acce ss . Enter the IP address of a DMZ (Demilitarized Zone) host on this screen. Adding a client to the DMZ may expose your local network to a variet[...]

  • Page 72

    SNMP 4-47 SNMP Community Use the SNMP configuration screen to displa y and modify parameters for the Simple Network Management Protocol (SNMP .) A computer attached to the netw ork, called a Network Management Station (NMS), can be used to access thi s infor mation. Access ri ghts to the agent are control led by community strings . T o communicate [...]

  • Page 73

    C ONFIGURING THE B AR RICADE 4-48 Trap Parameter Description IP Address Traps are sent to this address when errors or specific events occur on the network . Community A community st ring (password) specified for trap management. Enter a word, somethi ng other than public or privat e, to prevent unaut horized individuals fro m reading information on[...]

  • Page 74

    ADSL 4-49 ADSL Parameters Parameter Description Operation Mode • Automatic • ETSI DTS/TM-06006 standard. •G . 9 9 2 . 1 s t a n d a r d Address 3C etc. Reserved.[...]

  • Page 75

    C ONFIGURING THE B AR RICADE 4-50 Status[...]

  • Page 76

    ADSL 4-51 Parameter Description Status Line Status Shows th e current stat us of the ADSL line. Data Rate Upstream Actual and maximum upstream data rate. Downstream Actual and maximum downstream data rate. Operation Data/ Defect Indication Noise Margin Upstream: Minimum nois e margin upstream. Downstream: Minimum no ise margin downstream. Output Po[...]

  • Page 77

    C ONFIGURING THE B AR RICADE 4-52 Loss of Signal Defect Momentary signal discontinuities. Loss of Frame Defect Failures du e to loss of frames. Loss of Power Defect Failures du e to loss of power. Fast Path HEC Error Fast Path Header Error Concealment errors . Interleaved Path HEC Error Interleaved Path Header Error Concealment errors. Statistics S[...]

  • Page 78

    T OOLS 4-53 Tools Use the “T ools” menu to backup the current settings, to restore previously sav ed settings , or restore the factor y default settings . Configuration Tools Check “Bac kup” and click “More Configuration” to sa ve y our Bar ricade’ s configuration to a file named config .bin on your PC. Y ou can then check the “Res [...]

  • Page 79

    C ONFIGURING THE B AR RICADE 4-54 Firmware Upgrade Use this screen to update the fir mware or user interface to the lat est vers ions . In the “Upgrade T arg et” field, choose “Firmware” or “User Interface” depending on which y ou want to update. T hen click “Bro wse” to browse for the previously downloaded file . Note: For latest f[...]

  • Page 80

    T OOLS 4-55 Reset P erfor m a reset from this page. The configurations will not be c hang ed back to the factory default settings . Note: If you use the reset button on the rear panel, the Barricade performs a power reset and restores the factory settings.[...]

  • Page 81

    C ONFIGURING THE B AR RICADE 4-56 Status The Status scre en displays W AN/LAN connection status , fir mware and hardware v ersion numbers, as w ell as infor mation on DHCP clients connected to your network. The security log may be sav ed to a file by clicking “Sa ve” and choosing a location.[...]

  • Page 82

    S TATUS 4-57 The following items are i ncluded on this screen: Parameter Description INTERNET Displays WAN con nection type and st atus. GATEWAY Displays system IP se ttings, as well as DHCP Server and Firewall status. INFORMATION Displays the nu mber of attached clients, the firmware versions, the physical MAC address for each media interface, and[...]

  • Page 83

    C ONFIGURING THE B AR RICADE 4-58[...]

  • Page 84

    5-1 C HAPTER 5 C ONFIGURING C LIENT TCP/IP After completing hardware setup b y connecting all your network devices , y ou need to configure your computer to connect to the Bar ricade. First deter mine how your ISP issues y our IP address. Many ISPs issue these numbers automatically using Dynamic Host Configuration Protocol (DHCP . ) Other ISPs prov[...]

  • Page 85

    C ONFIGURING C LIENT TCP/IP 5-2 2. In “Control P anel” double-click the “Network” icon. 3. In the “Netw ork” window , under the “Configuration” tab , double-click the “TCP/ IP” item listed for your network card. 4. Select the “IP Address” tab . 5. If “Obtain an IP address automatically” is already selected, your computer[...]

  • Page 86

    W INDOWS 95/98/M E 5-3 6. Click the “Gatewa y” tab and record the n umbers listed under “Installed g ateways . ” 7. Click the “DNS Configuration” tab . Locate the DNS ser vers listed under “DNS Ser ver Searc h Order .” R ecord any listed addresses . 8. After writing down your settings , ch eck to make su re you hav e recorded them c[...]

  • Page 87

    C ONFIGURING C LIENT TCP/IP 5-4 Disable HTTP Proxy Y ou need to verify that the “HTTP Proxy” feature of y our W eb browser is disabled. This is so that your bro wser can view the Barricade’ s HTML configuration pages. The following steps are for Internet Explorer and Netscape. Determine which browser you use and follow the appropriate steps. [...]

  • Page 88

    W INDOWS 95/98/M E 5-5 Netscape 1. Open Netscape and click the stop button. Clic k “Edit, ” then click “Preferences ... ” 2. In the “Prefere nces” window , under “Categ or y” double-click “ Adv anced, ” then click “Proxies . ” Select “Direct connection to the Internet. ” Click “OK.” 3. R epeat these steps for each Wi[...]

  • Page 89

    C ONFIGURING C LIENT TCP/IP 5-6 2. T ype “WINIPCFG” and click “OK. ” It may take a second or tw o for the “IP Configuration” window to appear . 3. From the drop-down men u, select your netw ork card. Click “R elease” and then “R enew .” V erify that your IP address is now 192.168.2.xxx , your Subnet Mask is 255.255.255.0 and you[...]

  • Page 90

    W INDOWS NT 4.0 5-7 F ollow these instructions: 1. From the Windows desktop click “Start/ Settings/Control Pa n e l .” 2. Double-click the “Network” icon. 3. Select the “Protocols” t ab . 4. Double-click “TCP/IP Prot ocol. ” 5. Select the “IP Addre ss” tab . 6. In the “ Adapter” drop-down list, be sure your Etherne t adapter[...]

  • Page 91

    C ONFIGURING C LIENT TCP/IP 5-8 under the IP address tab , locate y our IP address , subnet mask, and default g ateway . Record these v alues in the spaces provided below . 9. Click the “DNS” ta b to see the primar y and secondary DNS ser vers . Record these v alues in the spaces provided below . 10. After writing do wn your IP settings , click[...]

  • Page 92

    W INDOWS NT 4.0 5-9 Disable HTTP Proxy Y ou need to verify that the “HTTP Proxy” feature of y our W eb browser is disabled. This is so that your bro wser can view the Barricade’ s HTML configuration pages. Determine which browser you use and refer to “Internet Explorer” on page 5-4 or “Netscape” on page 5-5. Obtain IP Settings from Yo[...]

  • Page 93

    C ONFIGURING C LIENT TCP/IP 5-10 3. T ype “IPCONFIG /RENEW ” and press the <ENTER> key . V e rify that your IP Address is now 19 2.168.2. xxx , your Subnet Mask is 255.255.255.0 and your Default Ga teway is 192.168.2.1 . These values confir m that your Bar ricade is functioning . 4. T ype “EXIT” and press <ENTER> to close the ?[...]

  • Page 94

    W INDOWS 2000 5-11 Windows 2000 1. On the Windows desktop , click “Start/Settings/ Network and Dial-Up Connections . ” 2. Click the icon that corresponds to the connection to your Bar ricade. 3. The connection status screen will open. Click “Properties. ”[...]

  • Page 95

    C ONFIGURING C LIENT TCP/IP 5-12 4. Double-click “Internet Protocol (TCP/IP .)” 5. If there is IP Address infor mation on the “Internet Protocol (TCP/ IP) Properties” dialog box, it should be recorded. Use the spaces belo w to record the curr ent settings . 6. If “Obtain an IP address automatica lly” and “Obtain DNS ser ver address au[...]

  • Page 96

    W INDOWS 2000 5-13 Disable HTTP Proxy Y ou need to verify that the “HTTP Proxy” feature of y our W eb browser is disabled. This is so that your bro wser can view the Barricade’ s HTML configuration pages. Determine which browser you use and refer to “Internet Explorer” on page 5-4 or “Netscape” on page 5-5. Obtain IP Settings from You[...]

  • Page 97

    C ONFIGURING C LIENT TCP/IP 5-14 that your IP Address is now 19 2.168.2. xxx , your Subnet Mask is 255.255.255.0 and your Default Ga teway is 192.168.2.1 . These values confir m that your ADSL Router is functioning . 4. T ype “EXIT” and press <ENTER> to close the “Command Prompt” window . Y our computer is now configured to connect to[...]

  • Page 98

    W INDOWS XP 5-15 Windows XP 1. Click “start/Control Pa nel.” 2. In “Control P anel” click “Network and Internet Connections . ” 3. The “N etwork Connections” screen will open. Double-click the connection for this device. 4. On the connection status screen, click “Properties .”[...]

  • Page 99

    C ONFIGURING C LIENT TCP/IP 5-16 5. Double-click “Internet Protocol (TCP/IP .)” 6. If there is IP Address infor mation on the “Inter net Protocol (TCP/IP) Properties” dialog box, it should be recorded. Use the spaces below to record the cur rent settings . 7. If “Obtain an IP address automatica lly” and “Obtain DNS ser ver address aut[...]

  • Page 100

    W INDOWS XP 5-17 Disable HTTP Proxy Y ou need to verify that the “HTTP Proxy” feature of y our W eb browser is disabled. This is so that your bro wser can view the Barricade’ s HTML configuration pages. Determine which browser you use and refer to “Internet Explorer” on page 5-4 or “Netscape” on page 5-5. Obtain IP Settings from Your [...]

  • Page 101

    C ONFIGURING C LIENT TCP/IP 5-18 3. T ype “IPCONFIG /RENEW ” and press the <ENTER> key . V e rify that your IP Address is now 19 2.168.2. xxx , your Subnet Mask is 255.255.255.0 and your Default Ga teway is 192.168.2.1 . These values confir m that your ADSL Router is functioning . T ype “EXIT” and press <ENTER> to close the “C[...]

  • Page 102

    C ONFIGURING Y OUR M ACINTOSH C OMPUTER 5-19 Configuring Your Macintosh Computer Y ou may find that the instr uctions here do not exactly matc h your operating system. This is because these ste ps and screenshots were created using Mac OS 8.5. Mac OS 7.x and abov e are similar, but ma y not be identical to M ac OS 8.5. F ollow these instructions: 1[...]

  • Page 103

    C ONFIGURING C LIENT TCP/IP 5-20 3. If “Using DHCP Ser ver” is al ready selected in the “Configure” field, your computer is already config ured for DHCP . Close the TCP/IP dialog box, and skip to “Disable HTTP Proxy” on page 5-21.” 4. If there is IP Address infor mation on the “TCP/IP” screen, it should be recorded. Use the spaces[...]

  • Page 104

    C ONFIGURING Y OUR M ACINTOSH C OMPUTER 5-21 Disable HTTP Proxy Y ou need to verify that the “HTTP Proxy” feature of y our W eb browser is disabled. This is so that your bro wser can view the Barricade’ s HTML configuration pages. The following steps are for Internet Explorer and Netscape. Determine which browser you use and follow the approp[...]

  • Page 105

    C ONFIGURING C LIENT TCP/IP 5-22 Netscape 1. Open Netscape and click the stop button. Click “Edit” and select “Preferences . ” 2. In the “Preferences” dialog bo x, in the left-hand column labeled Categ or y ,” select “ Advanced. ” Under the “ Advanced” categ or y , select “Proxies . ” 3. Select “Direct Connection to the [...]

  • Page 106

    C ONFIGURING Y OUR M ACINTOSH C OMPUTER 5-23 Obtain IP Settings from Your Barricade Now that y ou have configured y our computer to connect to your Bar ricade, it needs to obtain new netw ork settings . By releasing old DHCP IP settings and renewing them with settings from y our Bar ricade, you can verify that y ou hav e configured your computer co[...]

  • Page 107

    C ONFIGURING C LIENT TCP/IP 5-24[...]

  • Page 108

    6-1 C HAPTER 6 C ONFIGURING P RINTER S ERVICES T o use the print ser ver built into the Bar ricade, you must first install the P ort Monitor program as described in the following section for Windows 95/98/Me/NT/2000/XP . T o configure the Bar ricade Print Ser ver for Windo ws 95/98/Me/NT/ 2000/XP or Unix, see “Configure the Print Server” on pag[...]

  • Page 109

    I NSTALL THE P RINTER P ORT M ONITOR 6-2 2. The next screen indicate s that the print client uses the TCP/IP network protocol to monitor print requests . Click “Next. ” 3. Select the destination folder and click on the “Next” button. The setup prog ram will then begin to install the prog rams into the destination folder .[...]

  • Page 110

    C ONFIGURING P RINTER S ER VICES 6-3 4. Select the Program Folder that will contain the prog ram icon for uninstalling the port monitor, and then click “Next. ” 5. Enter the printer port name that will be used to identify the port monitor in your system, and clic k “Next.” 6. When the setup prog ram finishes installing the por t monitor , c[...]

  • Page 111

    C ONFIGURE THE P RINT S ER VER 6-4 Configure the Print Server The Bar ricade’ s print ser ver supports Microsoft Windows 95/98/Me/ NT/2000/XP and Unix. If you are using Windows 95/98/Me/NT/2000/ XP , first install the port monitor as describe d in the previous section before adding the Bar ricade’ s print ser ver to your operating system. Confi[...]

  • Page 112

    C ONFIGURING P RINTER S ER VICES 6-5 4. Select the monitored port. T he default port name is “SMC100.” Clic k the “Configure P ort” button. 5. Enter the IP address of the Barricade and click “OK. ” T hen click “Next” in the Add Printer Wizard dialog box. 6. Continue following the prompts to complete the installation of the Bar ricad[...]

  • Page 113

    C ONFIGURE THE P RINT S ER VER 6-6 Configure the Network Printer in Windows NT 1. On a Windows NT platform, open the Printers window in the My Computer menu, and double-clic k the “ Add Printer” icon. 2. F ollow the prompts to add a local printer to y our system.[...]

  • Page 114

    C ONFIGURING P RINTER S ER VICES 6-7 3. Select the monitored port. The default por t name is “SMC100.” Then click the “Configure P ort” button. 4. Enter the IP address of the Barricade and click “OK. ” Click “ Next” in the Add Printer W izard dialog box. 5. Specify the printer type attac hed to the Bar ricade. 6. Continue following [...]

  • Page 115

    C ONFIGURE THE P RINT S ER VER 6-8[...]

  • Page 116

    A-1 A PPENDI X A T ROUBLESHOOTING This section describes common problems you ma y encounter and possible solutions to them. The Bar ricade can be easily monitored through panel indicators to identify problems . Troubleshooting Chart Symptom Ac tion LED Indicators Power LED is Off • Check connections between the Barricade, the external power suppl[...]

  • Page 117

    T R OUBLESHOOTING A-2 LED Indicators Link LED is Off • Verify that the Barricade and attached device are powered on. • Be sure the cable is plugged into both the Barricade and the corresponding de vice. • Verify that the proper cable type is used and that its length does not exceed the specified limits. • Be sure that the network interface [...]

  • Page 118

    A-3 Management Pr oblems Cannot connec t using the Web browser • Be sure to have configured the Barricade with a valid IP address, subnet mask, and default gateway. • Check that you have a valid network connection to the Barricad e and that the port y ou are using has not been disabled. • Check the network cabling between the management stati[...]

  • Page 119

    T R OUBLESHOOTING A-4[...]

  • Page 120

    B-1 A PPENDIX B C ABLES Ethernet Cable Caution: Do not plug a phone jack connector into an RJ-45 port. For Ethernet connections, use only twisted-pair cables with RJ-45 connectors that conform to FCC standards. Specifications Wiring Conventions F or Ethernet connections , a twisted-pair cable m ust hav e two pairs of wires . Each wire pair is ident[...]

  • Page 121

    C ABLES B-2 RJ-45 Port Ethernet Connection Use the straight-through CA T -5 Ethernet cable provided in the package to connect the Barricade to your PC. When connecting to other netw ork devices such as an Ethernet switch, use the cable type shown in the following table . Pin Assignments With 10B ASE-T/100BASE-TX cable , pins 1 and 2 are used for tr[...]

  • Page 122

    RJ-45 P ORT E THER N ET C ONNECTION B-3 Straight-Through Wiring If the por t on the attached device has internal crossover wiring (MDI-X), then use straight-through cable . Crossover Wiring If the port on the attached device has straight-through wiring (MDI), use crossov er cable. Straight-Thr ough Cable Pin Assign ments End 1 End 2 1 (Tx+) 1 (Tx+)[...]

  • Page 123

    C ABLES B-4 ADSL Cable Connection Use standard telephone cable to connect the RJ-11 tele phone wall outlet to the RJ-11 ADSL port on the ADSL Router . Caution: Do not plug a phone jack connector into an RJ-45 port. Specifications Wiring Conventions F or ADSL connections , a cable requir es one pair of wires . Eac h wire is identified by different c[...]

  • Page 124

    ADSL C ABLE C ONNECTION B-5 Figure B-3. RJ-11 Pinouts Pin Signal Name Wire Color 1 Not used 2 Line 2 Tip Bla ck or White/ Orange 3 Line 1 Ring Red or Blue/ White 4 Line 1 Tip Green or White/B lue 5 Line 2 Ring Yellow or Orange/ White 6 Not used 123456 Blue/White White/Blue R1 T1 123456 Red Green R1 T1 R2 T2 Black Y ellow 123456 Blue/White White/Blu[...]

  • Page 125

    C ABLES B-6[...]

  • Page 126

    C-1 A PPENDI X C S PECIFICATIONS Standards Compliance CE Mark Emissions FCC Class B V CCI Class B Industr y Canada Class B EN55022 (CISPR 22) Class B C-Tick - AS/NZS 3548 (1995) Class B Immunity EN 61000-3-2/3 EN 61000-4-2/3/4/5/6/8/11 Safety UL 1950 EN60950 (TÜV) CSA 22.2 No . 950 IEEE 802.3 10 B ASE-T Ether net IEEE 802.3u 100 BASE-TX F ast Ethe[...]

  • Page 127

    S PECIFICATIONS C-2 WAN Int er fa ce 1 ADSL RJ-11 port Indicator P anel P ow er, Ethernet, ADSL Syn, ADSL Data Dimensions 220 x 132.8 x 3 0 .5 mm We i g h t 0.6 kg Input Pow er 12 V 1 A Po wer Consumption 12 W atts max. Management W e b mana g e ment Adv anced Features Dynamic IP Address Configuration – DHCP , DNS Firewall – Client privileges, [...]

  • Page 128

    SMC's Limited Warranty Statement Limited W arranty Statement: SMC N etworks Europe ("SMC") warrants its products to be free from defects in workmanship and materials, under normal use and service, for the applicable warranty term. All SMC products carry a standard 2 year limited warranty from the date of purchase from SMC or its A ut[...]

  • Page 129

    WARRANTIES EXCLUSIVE: IF A SMC PR ODUCT DOES NO T OPERA TE AS W ARRANTED ABOVE, CUST OMER'S SOLE REMEDY SHALL BE REP AIR OR REPLACEMENT OF THE PR ODUCT IN QUESTION, A T SMC’S OPTION. THE FOREGOING W ARRANTIES AND REMEDIES ARE EXCL USIVE AND ARE IN LIEU OF ALL O THER W ARRANTIES OR CONDITIONS, EXPRESSED OR IMPLIED, EITHER IN F ACT OR BY OPERA[...]

  • Page 130

    Full I nstallation Manual Full installation manuals ar e provided on the Installation CD-R om. Manuals in other languages than those included on the CD-Rom are pr ovided on www .smc-europe.com (section support). Fir mware and Driv ers F or latest driver , technical information and bug-fixes please visit www .smc-europe.com (section support). Contac[...]