Netopia R310 Bedienungsanleitung

Net opia ™ R310 ISDN Router User’s Refer ence Guide[...]

C o p yright Copyright 2000, Netopia, Inc. v .0300 All rights reser ved. Printed in the U.S.A. This manual and any associated ar twork, software and pr oduct designs are copyrighted with all rights reser ved. Under the copyright laws such materials may not be copied, in whole or par t, without the prior written consent of Netopia, Inc. Under the la[...]

G B Configuration options for your Netopia R310 ISDN Router .............. 1 1. Small Of fice connection to the Inter net ........................... 2 2. Small Of fice connection to the Inter net ........................... 3 3. Direct Connection to a Corporate Of fice (T elecommuter) .. 4 4. Configured to accept incoming dial-up connections [...]

iv User’ s Reference Guide Configuring TCP/IP on Macintosh computers ........ 3-12 DNS Proxy and Caching Behavior ......................... 3-14 Chapter 4 — Connecting Y our Local Ar ea Network ..................... 4-1 Readying computers on your local network ....................... 4-1 Connecting to an Ethernet network ......................[...]

Contents v G Filter Sets (Firewalls) .......................................... 7-13 IP Address Ser ving ............................................. 7-13 Date and Time ................................................... 7-13 Console Configuration......................................... 7-14 SNMP (Simple Network Management Protocol) ..... 7-15 S[...]

vi User’ s Reference Guide Binding Map Lists and Ser ver Lists ..................... 9-20 NA T Associations ............................................... 9-22 MultiNA T Configuration Example .................................... 9-24 Notes on the example ........................................ 9-27 IP subnets ..................................[...]

Contents vii G Status lights ...................................................... 11-3 Statistics & Logs ......................................................... 11-4 General Statistics .............................................. 11-4 Event histories ............................................................ 11-5 Routing tables ........[...]

viii User’ s Reference Guide Filter Basics..................................................... 12-26 Example Filters ................................................ 12-27 T oken Security Authentication ..................................... 12-30 Securing network environments ......................... 12-30 Using the SecurID token card .........[...]

Contents ix G Network problems ................................................ A-2 Power outages ............................................................... A-3 T echnical suppor t .......................................................... A-3 How to get suppor t .............................................. A-3 Appendix B — Setting Up T el[...]

x User’ s Reference Guide Manually distributing IP addresses ........................ D-8 Using address ser ving .......................................... D-8 Tips and r ules for distributing IP addresses ............ D-8 Nested IP subnets ....................................................... D-10 Broadcasts ...................................[...]

Configuration options for your Netopia R310 ISDN Router The Netopia R310 ISDN Router can be used in dif ferent ways depending on your needs. In general, you will probably want to use it in one or mor e of the following ways: (Click on one of these links) ■ “1. Small Of fice connection to the Inter net” with several computers in your of fic[...]

1. Small Office connection to the Internet For Small Of fice connections to the Inter net, using a single dynamic IP address with Network Address T ranslation (NA T) enabled, you should use the following configuration option: ■ the Smar tStar t™ Wizar d, included on your Netopia R310 CD. This is the fastest and simplest way to get you up and[...]

2. Small Office connection to the Internet For Small Of fice connections to the Inter net, using a block of IP addresses (Network Addr ess T ranslation disabled), you use both of the following configuration tools: ■ the Smar tStar t™ Wizar d, included on your Netopia R310 CD. This is the fastest and simplest way to get you up and r unning wi[...]

3. Dir ect Connection to a Corporate Office (T elecommuter) For direct connections to a Corporate Of fice, you can use either one of two configuration options: ■ the Smar tStar t™ Wizar d, included on your Netopia R310 CD. For instr uctions on this option, see “Setting up your Router with the Smar tStar t Wizard” on page 3-3 . ■ manual[...]

4. Configured to accept incoming dial-up connections T o configure the Netopia R310 to accept incoming dial-up connections, you should use the following configuration option: ■ use the Smar tStar t™ Wizar d, to configure your outbound connection to an ISP . For instr uctions on this option, see “Setting up your Router with the Smar tStar [...]

[...]

P P P P a a a a r r r r t t t t II I I : : : : G G G G e e e e t t t t t t t t ii i i n n n n g g g g S S S S t t t t a a a a r r r r t t t t e e e e d d d d[...]

User’ s Reference Guide[...]

Introduction 1-1 C C C C h h h h a a a a p p p p t t t t e e e e r r r r 1 1 1 1 II I I n n n n t t t t r r r r o o o o d d d d u u u u c c c c t t t t ii i i o o o o n n n n Overview The Netopia R310 ISDN Router is a full-featured, stand-alone, multipr otocol router for connecting diverse local area networks (LANs) to the Inter net and other remot[...]

1-2 User’ s Reference Guide How to use this guide In addition to the simple documentation contained in the accompanying Getting Star ted Guide , this guide is designed to be your single source for infor mation about your Netopia R310 ISDN Router. It is intended to be viewed on-line, using the power ful features of the Adobe Acr obat Reader . The [...]

Making the Physical Connections 2-1 C C C C h h h h a a a a p p p p t t t t e e e e r r r r 2 2 2 2 M M M M a a a a k k k k ii i i n n n n g g g g t t t t h h h h e e e e P P P P h h h h y y y y s s s s ii i i c c c c a a a a ll l l C C C C o o o o n n n n n n n n e e e e c c c c t t t t ii i i o o o o n n n n s s s s This section tells you how to [...]

2-2 User’ s Reference Guide Y ou will need: ■ A Windows 95, 98, or NT-based PC or a Macintosh with Ethernet connectivity for configuring the Netopia R310. This may be built-in Ethernet or an add-on car d, with TCP/IP installed. ■ An ISDN telephone line. Identify the connectors and attach the cables Identify the connectors and switches on the[...]

Making the Physical Connections 2-3 Netopia R310 ISDN Router Back Panel Ports The figure below displays the back of the Netopia R310 ISDN Router. Netopia R310 ISDN Router back panel The following table describes all the Netopia R310 ISDN Router back panel por ts. * Note: Users in the United Kingdom may need to obtain a special US-to-UK style modul[...]

2-4 User’ s Reference Guide Netopia R310 ISDN Router Status Lights The figure below r epresents the Netopia R310 status light (LED) panel. Netopia R310 LED front panel The following table summarizes the meaning of the various LED states and colors: When this happens... the LEDs... Power is on 1 is green . Data is transmitted or received over the[...]

Setting up your Router with the SmartStart Wizard 3-1 C C C C h h h h a a a a p p p p t t t t e e e e r r r r 3 3 3 3 S S S S e e e e t t t t t t t t ii i i n n n n g g g g u u u u p p p p y y y y o o o o u u u u r r r r R R R R o o o o u u u u t t t t e e e e r r r r w w w w ii i i t t t t h h h h t t t t h h h h e e e e S S S S m m m m a a a a r [...]

3-2 User’ s Reference Guide Before running SmartStart Be sure you have connected the cables and power sour ce as described in “Identify the connectors and attach the cables” on page 2-2 . Before you launch the Smar tStar t application, make sur e your computer meets the following requir ements: PC Macintosh System software Windows 95, 98, or [...]

Setting up your Router with the SmartStart Wizard 3-3 Setting up your Router with the SmartStart Wizard The Smar tStar t Wizard is tailor ed for your platfor m, but it works the same way on either a PC or a Macintosh. Inser t the Netopia CD, and in the desktop navigation screen that appears, launch the Smar tStar t Wizar d application. SmartStart W[...]

3-4 User’ s Reference Guide Easy option When the test succeeds, Smar tStar t indicates success and presents one of the scr eens on the next page. If the test fails, the wizard displays an er r or screen. If the test fails, check the following: ■ Check your cable connections. Be sure you have connected the r outer and the computer properly , usi[...]

Setting up your Router with the SmartStart Wizard 3-5 When the test is successful, Smar tStar t presents you with a dif ferent scr een, depending on the type of router you are configuring. ■ Y ou may see the “ISDN Switch Type scr een,” shown below , displaying the possible switch types available for your region. However , this scr een may no[...]

3-6 User’ s Reference Guide ■ Optionally , an alternate DNS if your ISP pr ovided one If you select Manual Entr y , the “Connection Profile screen,” shown below appears. ■ Most ISPs will provide you with infor mation for you to enter in the “Connection Pr ofile screen” on page 3-6 (shown below) over the phone using the toll-free pho[...]

Setting up your Router with the SmartStart Wizard 3-7 In most cases, this Smar tStar t configuration is all that you need to get your router up and r unning and connected to the Internet. However, you may want to take advantage of additional features or special configuration options available through the console-based configuration inter face. F[...]

3-8 User’ s Reference Guide Advanced option Router IP Address scr een. If you selected the Advanced option in the “Easy or Advanced options screen” on page 3-4 , Smar tStar t asks you to choose between entering the router’s cur r ent IP address and assigning an IP address to the r outer . If the router has alr eady been assigned an IP addre[...]

Setting up your Router with the SmartStart Wizard 3-9 Sharing the Connection Configuring TCP/IP on Windows 95, 98, or NT computers Configuring TCP/IP on a Windows computer requir es the following: ■ An Ethernet car d (also known as a network adapter) ■ The TCP/IP protocol must be “bound” to the adapter or car d Dynamic configuration (rec[...]

3-10 User’ s Reference Guide Note: Y ou can also use these instr uctions to configur e other computers on your network to accept IP addresses ser ved by the Netopia R310. 1. Go to the Star t Menu/Settings/Control Panels and double click the Network icon. From the Network components list, select the Configuration tab. 2. Select TCP/IP-->Y our[...]

Setting up your Router with the SmartStart Wizard 3-11 Static configuration (optional) If you are manually configuring for a fixed or static IP addr ess, per for m the following: 1. Go to Star t Menu/Settings/Control Panels and double click the Network icon. From the Network components list, select the Configuration tab. 2. Select TCP/IP-->Y[...]

3-12 User’ s Reference Guide 4. Click OK in this window , and the next window . When pr ompted, reboot the computer . Note: Y ou can also use these instr uctions to configur e other computers on your network with manual or static IP addresses. Be sur e each computer on your network has its own IP address. Configuring TCP/IP on Macintosh compute[...]

Setting up your Router with the SmartStart Wizard 3-13 Note: Y ou can also use these instr uctions to configur e other computers on your network to accept IP addresses ser ved by the Netopia R310. Static configuration (optional) 1. Go to the Apple menu. Select Control Panels and then TCP/IP . 2. With the TCP/IP window open, go to the Edit menu an[...]

3-14 User’ s Reference Guide 3. In the TCP/IP window or in the MacTCP/More window , select or type information into the fields as shown in the following table. 4. Close the TCP/IP or MacTCP control panel and save the settings. 5. If you are using MacTCP , you must restar t the computer . If you are using Open T ranspor t, you do not need to rest[...]

Connecting Y our Local Area Network 4-1 C C C C h h h h a a a a p p p p t t t t e e e e r r r r 4 4 4 4 C C C C o o o o n n n n n n n n e e e e c c c c t t t t ii i i n n n n g g g g Y Y Y Y o o o o u u u u r r r r L L L L o o o o c c c c a a a a ll l l A A A A r r r r e e e e a a a a N N N N e e e e t t t t w w w w o o o o r r r r k k k k This cha[...]

4-2 User’ s Reference Guide Once the Netopia R310 is properly configur ed and connected to your LAN, PC and Macintosh computers that have their requir ed components in place will be able to connect to the Internet or other r emote IP networks. Connecting to an Ethernet network Y ou can connect the Netopia R310 to an IP network that uses Ether ne[...]

Console-based Management 5-1 C C C C h h h h a a a a p p p p t t t t e e e e r r r r 5 5 5 5 C C C C o o o o n n n n s s s s o o o o ll l l e e e e - - - - b b b b a a a a s s s s e e e e d d d d M M M M a a a a n n n n a a a a g g g g e e e e m m m m e e e e n n n n t t t t This chapter describes how to use the Console-based management screens on [...]

5-2 User’ s Reference Guide Note about screen dif ferences. Netopia R310 models of fering dif fer ent feature sets will have variations in the fields on cer tain screens. For example, ther e are switched (dial-up ISDN) and leased (Synchr onous/Asynchro- nous and T1) line models, as well as models that of fer featur e subsets such as Smar tIP (Ne[...]

Console-based Management 5-3 Note: Alternatively , you can have a direct serial console cable connection using the provided console cable for your platfor m (PC or Macintosh) and the “Console” por t on the back of the router . For more infor mation on attaching the console cable, see “Connecting a local ter minal console cable to your router [...]

5-4 User’ s Reference Guide with the operating system. ■ If you connect a Macintosh computer , you can use the ZT er m ter minal emulation program on the supplied Netopia R310 CD. Launch your ter minal emulation software and configur e the communications software for the following values. These are the default communication parameters that the[...]

Console-based Management 5-5 Navigating thr ough the console scr eens Use your keyboard to navigate the Netopia R310’s configuration scr eens, enter and edit infor mation, and make choices. The following table lists the keys to use to navigate through the console scr eens. T o help you find your way to par ticular scr eens, some sections in thi[...]

5-6 User’ s Reference Guide[...]

Easy Setup 6-1 C C C C h h h h a a a a p p p p t t t t e e e e r r r r 6 6 6 6 E E E E a a a a s s s s y y y y S S S S e e e e t t t t u u u u p p p p This chapter describes how to use the Easy Setup console screens on your Netopia R310 ISDN Router. The Easy Setup console screens pr ovide an alternate method for experienced users to set up their r [...]

6-2 User’ s Reference Guide A screen similar to the following appears: If you do not see the Main Menu, verify that: ■ the computer used to view the console screen has its serial por t connected to the Netopia R310’s “Console” por t or an Ethernet connection to one of its Ether net por ts. See “Connecting a local ter minal console cable[...]

Easy Setup 6-3 Beginning Easy Setup T o begin Easy Setup, select Easy Setup in the Main Menu, then press Retur n. The Easy Setup screen appears. EuroISDN/ETSI ISDN Easy Setup The Easy Setup Profile scr een is where you configur e the parameters that control the Netopia R310’s connection to a specific remote destination, usually an ISP or a cor[...]

6-4 User’ s Reference Guide 2. Select Switch T ype and press Return. Fr om the pop-up menu, select the switch pr otocol your ISDN ser vice provider uses. For European countries other than the United Kingdom, use the EuroISDN/ETSI setting. United Kingdom users select United Kingdom - EuroISDN . 3. Select Director y Number 1. The router attempted t[...]

Easy Setup 6-5 Easy Setup Profile The Easy Setup Connection Profile scr een is where you configur e the parameters that control the ISDN Netopia Router’s connection to a specific remote destination, usually another network. 1. Select Number to Dial and enter the ISDN telephone number you received fr om your ISP . This is the number the Netopi[...]

6-6 User’ s Reference Guide When using unnumbered inter faces, the Netopia Router will use either its local Ether net IP addr ess or its NA T address (if so configur ed) and subnet mask to send packets to the remote r outer . Neither router has a W AN IP addr ess or subnet mask associated with this connection. Note: If your ISP has not given you[...]

Easy Setup 6-7 IP Easy Setup The IP Easy Setup screen is wher e you enter infor mation about your Netopia Router’s: ■ IP address ■ Subnet mask ■ Default gateway IP address ■ Domain name ser ver IP address ■ IP address ser ving infor mation, such as the number of client IP addr esses and the 1st client address; and Y ou should consult wi[...]

6-8 User’ s Reference Guide 5. The Default IP Gateway defaults to the remote IP address you enter ed in the Easy Setup connection profile. If the Netopia Router does not r ecognize the destination of any IP traf fic, it for war ds that traf fic to this gateway – set to 127.0.0.2 if your ISP does not other wise specify . Do not confuse the re[...]

Easy Setup 6-9 The final step in configuring the Easy Setup console screens is to r estar t the Netopia R310, so the configuration settings take ef fect. 1. Select REST ART DEVICE . A prompt asks you to confir m your choice. 2. Select CONTINUE to restar t the Netopia Router and have your selections take ef fect. Note: Y ou can also r estar t th[...]

6-10 User’ s Reference Guide[...]

P P P P a a a a r r r r t t t t II I I II I I : : : : A A A A d d d d v v v v a a a a n n n n c c c c e e e e d d d d C C C C o o o o n n n n f f f f ii i i g g g g u u u u r r r r a a a a t t t t ii i i o o o o n n n n[...]

User’ s Reference Guide[...]

W AN and System Configuration 7-1 C C C C h h h h a a a a p p p p t t t t e e e e r r r r 7 7 7 7 W W W W A A A A N N N N a a a a n n n n d d d d S S S S y y y y s s s s t t t t e e e e m m m m C C C C o o o o n n n n f f f f ii i i g g g g u u u u r r r r a a a a t t t t ii i i o o o o n n n n This chapter describes how to use the console-based m[...]

7-2 User’ s Reference Guide The Add Connection Profile screen appears. On a Netopia R310 ISDN Router you can add up to 15 more connection pr ofiles, for a total of 16. 1. Select Profile Name and enter a name for this connection pr ofile. It can be any name you wish. For example: the name of your ISP . 2. T oggle the Pr ofile Enabled value to[...]

W AN and System Configuration 7-3 4. T oggle or enter any IP Parameters you r equire and r eturn to the Add Connection Pr ofile screen by pr essing Escape. For more infor mation, see “IP Setup and Network Addr ess T ranslation” on page 9-1 . 5. Select Datalink Options and press Retur n. The Datalink Options screen appears. Y ou can accept the[...]

7-4 User’ s Reference Guide 6. Select T elco Options and pr ess retur n. the T elco Options scr een appears. Select Dial and press Retur n. A pop-up menu appears. Y ou can select the dialing options for this Connection Profile as Dial In Only , Dial Out Only , or Dial In/Out. Y ou can: ■ select a type of data ser vice to initiate, 64 kb/sec (t[...]

W AN and System Configuration 7-5 If you want to view the Connection Profiles in your r outer , retur n to the WAN Configuration screen, and select Display/Change Connection Profile . The list of Connection Pr ofiles is displayed in a scrolling pop-up screen. It is possible to configure the r outer for any available circuit type: ISDN, Switch[...]

7-6 User’ s Reference Guide Customizing the Default Pr ofile The Default Profile scr een controls whether or not an ISDN link will come up without an explicitly configur ed connection profile. See “Cr eating a new Connection Profile” on page 7-1 for mor e infor mation. Y ou access the Default Profile scr een from the Main Menu by select[...]

W AN and System Configuration 7-7 IP parameters (default profile) scr een The IP Parameters (Default Profile) scr een allows you to configure various IP parameters for ISDN connections established without an explicitly configured connection pr ofile: The Netopia R310 ISDN Router always acts as a DHCP client on the ISDN link when using a Defau[...]

7-8 User’ s Reference Guide If you choose to transmit RIP , the TX RIP Policy pop up menu appears. Y ou can select Poison Reverse (the default), Split Horizon , or No Split Horizon . ■ Poison Reverse speeds conver gence but adds to network over head. When topology changes, mentioning routes that should not go thr ough the router as well as thos[...]

W AN and System Configuration 7-9 When you toggle Configuration Changes Reset W AN Connection using the T ab key and press Return , a pop-up window asks you to confir m your choice. T oggling fr om Ye s to No makes the router r eady to be configured. If you toggle fr om No to Ye s , and confir m the reboot, your changes ar e committed and the [...]

7-10 User’ s Reference Guide System Configuration screens Y ou can connect to the Netopia R310’s System Configuration scr eens: ■ Using T elnet with the Router’s Ether net por t IP address ■ Through the console por t, using a local ter minal (see “Connecting a local ter minal console cable to your router” on page 5-3 ) Y ou can also[...]

W AN and System Configuration 7-11 The console screen will open to the Main Menu , similar to the screen shown below: System Configuration featur es Smar tStar t may be all you need to configure your Netopia R310. Some users, however , r equire advanced settings or prefer manual contr ol over the default selections that Smar tStar t automaticall[...]

7-12 User’ s Reference Guide T o access the System Configuration scr eens, select System Configuration in the Main Menu, then press Return. The System Configuration screen appears: Layer Categor y Parameter Type Options Default settings Protocol Layer IP Parameters Filter Sets: Basic Firewall RIP Receive/T ransmit options: Of f Datalink Layer [...]

W AN and System Configuration 7-13 Network Pr otocols Setup These screens allow you to configur e your network’s use of IP . ■ Details are given in “IP Setup and Network Addr ess T ranslation” on page 9-1 . Filter Sets (Fir ewalls) These screens allow you to configur e security on your network by means of filter sets and a basic firewa[...]

7-14 User’ s Reference Guide 3. Select AM or PM and choose AM or PM . Console Configuration Y ou can change the default ter minal communications parameters to suit your r equirements. T o go to the Console Configuration scr een, select Console Configuration in the System Configuration screen. Follow these steps to change a parameter’s value[...]

W AN and System Configuration 7-15 SNMP (Simple Network Management Pr otocol) These screens allow you to monitor and configur e your network by means of a standard Simple Network Management Protocol (SNMP) agent. ■ Details are given in “SNMP” on page 11-10 . Security These screens allow you to add users and define passwor ds on your networ[...]

7-16 User’ s Reference Guide By default, all events are logged in the event histor y . ■ By toggling each event descriptor either Ye s or No , you can deter mine which ones are logged and which ar e ignored. ■ Y ou can enable or disable the syslog client dynamically . When enabled, it will repor t any appr opriate and previously unr epor ted [...]

Call Accounting and Default Answer Profile 8-1 C C C C h h h h a a a a p p p p t t t t e e e e r r r r 8 8 8 8 C C C C a a a a ll l l ll l l A A A A c c c c c c c c o o o o u u u u n n n n t t t t ii i i n n n n g g g g a a a a n n n n d d d d D D D D e e e e f f f f a a a a u u u u ll l l t t t t A A A A n n n n s s s s w w w w e e e e r r r r P [...]

8-2 User’ s Reference Guide T o enable call accounting, follow these steps: 1. Select Enable Call Accounting and toggle it to On . 2. Select Day for auto-reset of timers and enter the day of the month for the Router to reset the Call Account- ing Statistics. 3. Select Maximum Aggregate connect time (HH:MM) and enter the total amount of time to al[...]

Call Accounting and Default Answer Profile 8-3 The Call Accounting Statistics screen appears. If you select Aggregate Statistics , the following scr een appears. ■ T otal First Minutes displays the total number of first minutes of outbound calls placed during the recor ding inter val. ■ T otal Additional Minutes (HH:MM) displays the total rem[...]

8-4 User’ s Reference Guide ■ Y ou can r eset the counters by selecting RESET AGGREGA TE MINUTE COUNTERS . A dialog box will ask you to confir m the reset. Select CONTINUE to r eset the counters or CANCEL to leave them as is. If you select Profile Statistics , the following screen appears. Y ou can view the individual usage statistics for eac[...]

Call Accounting and Default Answer Profile 8-5 V iewing scheduled connections T o display a table of view-only scheduled connections, select Display/Change Scheduled Connection in the Scheduled Connections screen. Each scheduled connection occupies one r ow of the table. The first column in the table shows a one-letter repr esentation of the Days[...]

8-6 User’ s Reference Guide The other columns show: ■ The time of day that the connection will Begin At ■ The duration of the connection ( HH:MM ) ■ Whether it’s a recur ring Weekly connection or used Once Only ■ Which connection profile ( Conn. Pr of. ) is used to connect ■ Whether the scheduled connection is cur rently Enabled The [...]

Call Accounting and Default Answer Profile 8-7 ■ Demand-Allowed , meaning that this schedule will per mit a demand call on the line. ■ Demand-Blocked , meaning that this schedule will prevent a demand call on the line. ■ Periodic , meaning that the connection is retried several times during the scheduled time. ■ If How Often is set to Week[...]

8-8 User’ s Reference Guide Set Once-Only Schedule If you set How Often to Once Only , select Set Once-Only Schedule and go to the Set Once-Only Schedule screen. ■ Select Place Call On (Date) and enter a date in the for mat MM/DD/YY or MM/DD/YYYY (month, day , year). Note: Y ou must enter the date in the for mat specified. The slashes ar e man[...]

Call Accounting and Default Answer Profile 8-9 Modifying a scheduled connection T o modify a scheduled connection, select Change Scheduled Connection in the Scheduled Connections screen to display a table of scheduled connections. Select a scheduled connection from the table and go to the Change Scheduled Connection scr een. The parameters in this[...]

8-10 User’ s Reference Guide Customizing the default profile Y ou can customize the Netopia Router’s default pr ofile in the Default Answer Profile scr een under the W AN Configuration menu. 1. Select Default Answer Profile in the WAN Configuration screen. Press Retur n. The Default Profile scr een appears. 2. T o enable CNA-authenticati[...]

Call Accounting and Default Answer Profile 8-11 CNA works by checking the calling number that the Netopia Router receives during the initial setup phase of an incoming call against a set of stored numbers. Each number in the stor ed set is defined in a specific connection profile. When a match occurs, the incoming call is handled by the connect[...]

8-12 User’ s Reference Guide If a remote network has a non-standar d mask (that is, it uses subnetting), the only way for it to successfully connect to the Netopia Router is by matching a connection profile. In other wor ds, you will have to set up a connection profile for that network.If Must Match a Defined Profile is set to No , you can al[...]

IP Setup and Network Address T ranslation 9-1 C C C C h h h h a a a a p p p p t t t t e e e e r r r r 9 9 9 9 II I I P P P P S S S S e e e e t t t t u u u u p p p p a a a a n n n n d d d d N N N N e e e e t t t t w w w w o o o o r r r r k k k k A A A A d d d d d d d d r r r r e e e e s s s s s s s s T T T T r r r r a a a a n n n n s s s s ll l l a [...]

9-2 User’ s Reference Guide Featur es MultiNA T features can be divided into several categories that can be used simultaneously in dif fer ent combinations on a per-Connection Profile basis. The following is a general description of these features: Port Address T ranslation The simplest for m of classic Network Address Translation is PA T (Por t[...]

IP Setup and Network Address T ranslation 9-3 Dynamic mapping Dynamic mapping , often refer r ed to as Many-to-Few , of fers an extension to the advantages provided by Static mapping. Instead of requiring a one to one association of public addr esses and private addresses, as is requir ed in Static mapping, Dynamic mapping uses a group of public IP[...]

9-4 User’ s Reference Guide Exterior addresses ar e allocated to internal hosts on a demand, or as-needed, basis and then made available when traf fic fr om that host ceases. Once an internal host has been allocated an addr ess, it will use that address for all traf fic. Five minutes after all traf fic ceases – no pings, all tcp connections [...]

IP Setup and Network Address T ranslation 9-5 In order to suppor t this type of mapping, you define two addr ess ranges. First, you define a public range which contains the first and last public address to be used and the way in which these addr esses should be used (P A T , static, or dynamic). Y ou then configur e an address map which define[...]

9-6 User’ s Reference Guide Supported traffic MultiNat suppor ts the following IP protocols: ■ P A T : TCP/UDP traf fic which does not car r y sour ce or destination IP addr esses or por ts in the data stream (i.e., HTTP , telnet, ‘r’ commands, tftp, NFS, NTP , SMTP , NNTP , etc.). ■ Static NA T : All IP pr otocol traf fic which does n[...]

IP Setup and Network Address T ranslation 9-7 When you exit this screen the two map lists, Easy-P A T List and Easy-Ser vers, ar e created by default and NA T configuration becomes ef fective.This will map all your private addr esses (0.0.0.0 through 255.255.255.255) to your public address. These map lists ar e bound to the Easy Setup Profile. Se[...]

9-8 User’ s Reference Guide Select Network Address Translation (NA T) and press Retur n. The Network Address T ranslation scr een appears. Public Range. defines an external addr ess range and indicates what type of mapping to apply when using this range. The types of mapping available are dynamic , static and pat . Map Lists. define collections[...]

IP Setup and Network Address T ranslation 9-9 NA T rules The following r ules apply to assigning NA T ranges and ser ver lists: ■ Static public address ranges must not overlap other static, P A T , public addr esses or the public address assigned to the router’s WAN inter face. ■ A P A T public addr ess must not overlap any static address ran[...]

9-10 User’ s Reference Guide ■ If you choose static as the range type, a new menu item, First Public Address , becomes visible. Select First Public Address and enter the first exterior IP addr ess in the range you want to assign. Select Last Public Address and enter an IP addr ess at the end of the range. ■ Select ADD NA T PUBLIC RANGE and p[...]

IP Setup and Network Address T ranslation 9-11 ■ Select First and Last Private Address and enter the first and last interior IP addresses you want to assign to this mapping. ■ Select Use NA T Public Range and press Retur n. A screen appears displaying the public ranges you have defined. ■ From the list of public ranges you defined, select [...]

9-12 User’ s Reference Guide ■ Select ADD NA T MAP and press Retur n. Y our mapping is added to your map list. Modifying map lists Y ou can make changes to an existing map list after you have cr eated it. Since there may be mor e than one map list you must select which one you are modifying. From the Network Addr ess T ranslation screen select [...]

IP Setup and Network Address T ranslation 9-13 ■ Add Map allows you to add a new map to the map list. ■ Show/Change Maps allows you to modify the individual maps within the list. ■ Delete Map allows you to delete a map from the list. ■ Move Map allows you to change the priority order in which the map is evaluated within the list. See “Mov[...]

9-14 User’ s Reference Guide Make any modifications you need and then select CHANGE NA T MAP and pr ess Retur n. Y our changes will become ef fective and you will be r eturned to the Show/Change NA T Map List scr een. Moving maps The Move Maps screen per mits r eordering the priority of maps in a map list. Since the maps ar e read fr om top to b[...]

IP Setup and Network Address T ranslation 9-15 ■ Y ou can pr ess Escape at any time in the pop-up menu to abor t the move and r estore the map list to its original ordering. Adding Server Lists Ser ver lists, also known as Expor ts, are handled similarly to map lists. If you want to make a par ticular ser ver’s por t accessible (and it isn’t [...]

9-16 User’ s Reference Guide ■ Select Ser ver List Name and type in a descriptive name. A new menu item, Add Server , appears. ■ Select Add Ser ver and press Retur n. The Add NA T Ser ver scr een appears. ■ Select Ser vice and press Retur n. A pop-up menu appears listing a selection of commonly expor ted ser vices. ■ Choose the ser vice y[...]

IP Setup and Network Address T ranslation 9-17 ■ Enter the First and Last Por t Number between por ts 1 and 65535. Select OK and pr ess Return. Y ou will be retur ned to the Add NA T Ser ver scr een. ■ Enter the Ser ver Private IP Address of the ser ver whose ser vice you are expor ting. Since MultiNA T per mits the mapping of multiple private [...]

9-18 User’ s Reference Guide ■ Select the Ser ver List Name you want to modify from the pop-up menu and pr ess Retur n. The Show/Change NA T Ser ver List screen appears. ■ Selecting Show/Change Ser ver or Delete Ser ver displays the same pop-up menu. Network Address Translation +-NAT Server List Name-+ +----------------------+ A| my_servers |[...]

IP Setup and Network Address T ranslation 9-19 Select any ser ver from the list and pr ess Return . The Change NA T Ser ver scr een appears. Y ou can make changes to the ser ver’s ser vice and por t or internal or exter nal addr ess. Select CHANGE NA T SERVER and press Retur n. Y our changes take ef fect and you are r etur ned to the Show/Change [...]

9-20 User’ s Reference Guide A pop-up menu lists your configured ser vers. Select the one you want to delete and pr ess Retur n. A dialog box asks you to confir m your choice. Choose CONTINUE and press Retur n. The ser ver is deleted fr om the list. Binding Map Lists and Server Lists Once you have created your map lists and ser ver lists, you m[...]

IP Setup and Network Address T ranslation 9-21 ■ Select NA T Map List and press Retur n. A pop-up menu displays a list of your defined map lists. ■ Select the map list you want to bind to this Connection Profile and pr ess Return. The map list you selected will now be bound to this Connection Profile. ■ Select NA T Ser ver List and press R[...]

9-22 User’ s Reference Guide ■ Select the ser ver list you want to bind to this Connection Profile and pr ess Retur n. The ser ver list you selected will now be bound to this Connection Profile. Note: There is no inter dependency between NA T and IP Addressing. Also, the Local WAN IP Address and Mask fields’ visibility are dependent only o[...]

IP Setup and Network Address T ranslation 9-23 ■ Y ou can toggle NA T? On or Of f for each Profile/Inter face name. Y ou do this by navigating to the NA T? field associated with each profile using the ar r ow keys. T oggle NA T on or of f by using the T ab key . ■ Y ou can r eassign any of your map lists or ser ver lists to any of the Profi[...]

9-24 User’ s Reference Guide MultiNA T Configuration Example T o help you understand a typical MultiNA T configuration, this section describes an example of the type of configuration you may want to implement on your site. The values shown are for example purposes only . Make your own appropriate substitutions. A typical SDSL ser vice from an [...]

IP Setup and Network Address T ranslation 9-25 Select NEXT SCREEN and press Retur n. Y our IP values ar e shown here. Then navigate to the Network Address T ranslation (NA T) scr een. Connection Profile 1: Easy Setup Profile Connection Profile Name: Easy Setup Profile Address Translation Enabled: Yes IP Addressing... Numbered Local WAN IP Address: [...]

9-26 User’ s Reference Guide Select Show/Change Public Range , then Easy-P A T Range , and press Retur n. Enter the value your ISP assigned for your public address (206.1.1.6, in this example). T oggle T ype to pat . Y our public address is then mapped to the remaining private IP addr esses using P A T . (If you were not using the Easy-P A T Rang[...]

IP Setup and Network Address T ranslation 9-27 Select ADD NA T PUBLIC RANGE and press Retur n. Y ou ar e retur ned to the Network Addr ess Translation screen. Next, select Show/Change Map List and choose Easy-P A T List . Select Add Map . The Add NA T Map scr een appears. (Now the name Easy-P A T List is a misnomer since it has a static map include[...]

9-28 User’ s Reference Guide ■ First, navigate to the Show/Change Map List screen, select Easy-P A T List and then Show/Change Maps . Choose the Static Map you created and change the First Private Address fr om 192.168.1.1 to 192.168.1.4. Now the router , Web, and Mail ser vers’ IP addresses ar e no longer included in the range of static mapp[...]

IP Setup and Network Address T ranslation 9-29 Note: Y ou need not use this scr een if you have only a single Ethernet IP subnet. In that case, you can continue to enter or edit the IP address and subnet mask for the single subnet on the IP Setup scr een. This screen displays up to eight r ows of two editable columns, preceded by a r ow number betw[...]

9-30 User’ s Reference Guide If you have configured multiple Ether net IP subnets, the IP Setup screen changes slightly: The IP address and Subnet mask items ar e hidden, and the “Define Additional Subnets...” item becomes “Subnet Configuration...”. If you select Subnet Configuration , you will retur n to the IP Subnets screen that al[...]

IP Setup and Network Address T ranslation 9-31 Viewing static r outes T o display a view-only table of static r outes, select Display/Change Static Route in the Static Routes screen. The table has the following columns: Dest. Network: The network IP address of the destination network. Subnet Mask: The subnet mask associated with the destination net[...]

9-32 User’ s Reference Guide Priority: An indication whether the Netopia R310 will use the static route when it conflicts with infor mation received fr om RIP packets. Enabled: An indication whether the static route should be installed in the IP r outing table. Adding a static route T o add a new static r oute, select Add Static Route in the Sta[...]

IP Setup and Network Address T ranslation 9-33 With RIP Metric you set the number of routers, fr om 1 to 15, between the sending router and the destination router . The maximum number of r outers on a packet’s route is 15. Setting RIP Metric to 1 means that a route can involve 15 r outers, while setting it to 15 means a route can only involve one[...]

9-34 User’ s Reference Guide IP addr ess serving In addition to being a router , the Netopia R310 is also an IP addr ess ser ver . Ther e are thr ee protocols it can use to distribute IP addresses. ■ The first, called Dynamic Host Configuration Protocol (DHCP) , is widely suppor ted on PC networks, as well as Apple Macintosh computers using O[...]

IP Setup and Network Address T ranslation 9-35 Follow these steps to configure IP Addr ess Ser ving: ■ If you enabled IP Address Ser ving either by using Smar tStar t or in Easy Setup, DHCP , BootP clients, and Dynamic W AN clients ar e automatically enabled. ■ Select Number of Client IP Addresses and enter the total number of contiguous IP ad[...]

9-36 User’ s Reference Guide ■ T o ser ve DHCP clients with the type of NetBIOS used on your network, select Ser ve NetBIOS Type and toggle it to Ye s . ■ From the NetBIOS Type pop-up menu, select the type of NetBIOS used on your network. ■ T o ser ve DHCP clients with the NetBIOS scope, select Ser ve NetBIOS Scope and toggle it to Ye s . S[...]

IP Setup and Network Address T ranslation 9-37 Select NetBIOS Name Ser ver IP Address and enter the IP addr ess for the NetBIOS name ser ver . Y ou ar e now finished setting up DHCP NetBIOS Options. T o r eturn to the IP Addr ess Ser ving scr een press the Escape key once. ■ T o enable BootP’s addr ess ser ving capability , select Serve BOOTP [...]

9-38 User’ s Reference Guide[...]

Virtual Private Networks (VPN) 10-1 C C C C h h h h a a a a p p p p t t t t e e e e r r r r 1 1 1 1 0 0 0 0 V V V V ii i i r r r r t t t t u u u u a a a a ll l l P P P P r r r r ii i i v v v v a a a a t t t t e e e e N N N N e e e e t t t t w w w w o o o o r r r r k k k k s s s s ( ( ( ( V V V V P P P P N N N N ) ) ) ) The Netopia R310 Router of fe[...]

10-2 Firmware V ersion 4.6 Addendum T unneling is a process of cr eating a private path between a remote user or private network and another private network over some inter mediate network, such as the IP-based Inter net. A VPN allows remote of fices or employees access to your internal business LAN thr ough means of encr yption allowing the use o[...]

Virtual Private Networks (VPN) 10-3 In either case, the Netopia R310 wraps, or encapsulates, infor mation that one end of the tunnel exchanges with the other , in a wrapper called General Routing Encapsulation (GRE), at one end of the tunnel, and unwraps, or decapsulates, it at the other end. Configuring the Netopia R310 for use with either of the[...]

10-4 Firmware V ersion 4.6 Addendum A A A A b b b b o o o o u u u u t t t t P P P P P P P P T T T T P P P P T T T T u u u u n n n n n n n n e e e e ll l l s s s s T o set up a PPTP tunnel, you cr eate a Connection Profile including the IP addr ess and other relevant infor mation for the remote PPTP par tner . Y ou use the same procedure to initiat[...]

Virtual Private Networks (VPN) 10-5 When you define a Connection Profile as using PPTP by selecting PPTP as the datalink encapsulation method, and then select Data Link Options , the PPTP T unnel Options screen appears. Note: Profiles using PPTP do not of fer a T elco Options scr een. ■ Enter the PPTP Par tner IP Address . This specifies the [...]

10-6 Firmware V ersion 4.6 Addendum ■ Y ou can specify a Send Host Name which is used with Send Secret for authenticating with a r emote PNS when the profile is used for initiating a tunnel connection. ■ Y ou must specify a Send Secr et (the CHAP ter m for password), used for authenticating the tunnel when initiating a tunnel connection. ■ Y[...]

Virtual Private Networks (VPN) 10-7 Ordinarily , Ping is an excellent troubleshooting tool, but it will not be ef fective in this cir cumstance. Instead, use another TCP- or UDP-based network ser vice for troubleshooting. Since the Netopia R310 is capable of ser ving T elnet and HTTP , we recommend using these ser vices instead of Ping. E E E E n n[...]

10-8 Firmware V ersion 4.6 Addendum V V V V P P P P N N N N D D D D e e e e f f f f a a a a u u u u ll l l t t t t A A A A n n n n s s s s w w w w e e e e r r r r P P P P r r r r o o o o f f f f ii i i ll l l e e e e The W AN Configuration menu of fers a VPN Default Answer Pr ofile option. Use this selection when your r outer is acting as the ser[...]

Virtual Private Networks (VPN) 10-9 ■ For PPTP tunnel connections only , you must define what type of authentication these connections will use. Select Receive Authentication and press Retur n. A pop-up menu of fers the following options: P AP (the default), CHAP , or MS-CHAP . ■ If you chose P AP or CHAP authentication, fr om the Data Compres[...]

10-10 Firmware V ersion 4.6 Addendum D D D D ii i i a a a a ll l l - - - - U U U U p p p p N N N N e e e e t t t t w w w w o o o o r r r r k k k k ii i i n n n n g g g g f f f f o o o o r r r r V V V V P P P P N N N N Microsoft Windows Dial-Up Networking softwar e per mits a remote standalone workstation to establish a VPN tunnel to a PPTP ser ver [...]

Virtual Private Networks (VPN) 10-11 The Communications window appears. 5. In the Communications window , select Dial-Up Networking and click the OK button. This retur ns you to the Windows Setup screen. Click the OK button. 6. Respond to the prompts to install Dial-Up Networking fr om the system disks or CDROM. 7. When prompted, r eboot your PC. C[...]

10-12 Firmware V ersion 4.6 Addendum C C C C o o o o n n n n f f f f ii i i g g g g u u u u r r r r ii i i n n n n g g g g a a a a D D D D ii i i a a a a ll l l - - - - U U U U p p p p N N N N e e e e t t t t w w w w o o o o r r r r k k k k ii i i n n n n g g g g p p p p r r r r o o o o f f f f ii i i ll l l e e e e Once you have created your Dial-[...]

Virtual Private Networks (VPN) 10-13 4. Click the TCP/IP Settings button. ■ If your ISP uses dynamic IP addressing (DHCP), select the Ser ver assigned IP addr ess radio button. ■ If your ISP uses static IP addressing, select the Specify an IP addr ess radio button and enter your assigned IP address in the fields pr ovided. Also enter the IP ad[...]

10-14 Firmware V ersion 4.6 Addendum II I I n n n n s s s s t t t t a a a a ll l l ll l l ii i i n n n n g g g g t t t t h h h h e e e e V V V V P P P P N N N N C C C C ll l l ii i i e e e e n n n n t t t t Before Installing the VPN Client you must have TCP/IP installed and have an established Inter net connection. W W W W ii i i n n n n d d d d o [...]

Virtual Private Networks (VPN) 10-15 3. Click the Windows Setup tab. The Windows Setup screen will be displayed within the top center box. 4. Double-click Communications . This displays a list of possible selections for the communications option. Active components will have a check in the checkboxes to their left. 5. Check Dial Up Networking at the[...]

10-16 Firmware V ersion 4.6 Addendum A A A A b b b b o o o o u u u u t t t t A A A A T T T T M M M M P P P P T T T T u u u u n n n n n n n n e e e e ll l l s s s s T o set up an A TMP tunnel, you cr eate a Connection Profile including the IP addr ess and other relevant infor mation for the remote A TMP par tner . A TMP uses the ter minology of a f[...]

Virtual Private Networks (VPN) 10-17 When you define a Connection Profile as using A TMP by selecting A TMP as the datalink encapsulation method, and then select Data Link Options , the A TMP T unnel Options screen appears. Note: An A TMP tunnel cannot be assigned a dynamic IP address by the remote ser ver , as in a PPP connection. When you defi[...]

10-18 Firmware V ersion 4.6 Addendum ■ When you specify the A TMP Par tner IP Address, and the addr ess is in the same subnet as the Remote IP Address you specified in the IP Pr ofile Parameters, you can specify the route ( Tunnel Via Gateway ) by which the gateway par tner is reached. If you do not specify the A TMP Par tner IP Addr ess, the r[...]

Virtual Private Networks (VPN) 10-19 ■ Enter the Remote IP Address and Remote IP Mask for the host to which you want to tunnel. Note: A peculiarity associated with VPNs is that when a foreign agent has NA T applied to a Connection Pr ofile set for A TMP data link encapsulation, the home agent and devices behind it, cannot Ping the foreign agent&[...]

10-20 Firmware V ersion 4.6 Addendum A A A A ll l l ll l l o o o o w w w w ii i i n n n n g g g g V V V V P P P P N N N N s s s s t t t t h h h h r r r r o o o o u u u u g g g g h h h h a a a a F F F F ii i i r r r r e e e e w w w w a a a a ll l l ll l l An administrator interested in securing a network will usually combine the use of VPNs with the[...]

Virtual Private Networks (VPN) 10-21 P P P P P P P P T T T T P P P P e e e e x x x x a a a a m m m m p p p p ll l l e e e e T o enable a fir ewall to allow PPTP traf fic, you must pr ovision the firewall to allow inbound and outbound TCP packets specifically destined for por t 1723. The source por t may be dynamic, so often it is not useful to [...]

10-22 Firmware V ersion 4.6 Addendum For Input Filter 2 set the Protocol Type to allow GRE as shown below . In the Display/Change IP Filter Set screen select Display/Change Output Filter . Display/Change Output Filter screen For Output Filter 1 set the Protocol Type and Destination Por t infor mation as shown below . Change Input Filter 2 Enabled: [...]

Virtual Private Networks (VPN) 10-23 For Output Filter 2 set the Protocol Type to allow GRE as shown below . Change Output Filter 2 Enabled: Yes Forward: Yes Source IP Address: 0.0.0.0 Source IP Address Mask: 0.0.0.0 Dest. IP Address: 0.0.0.0 Dest. IP Address Mask: 0.0.0.0 Protocol Type: GRE[...]

10-24 Firmware V ersion 4.6 Addendum A A A A T T T T M M M M P P P P e e e e x x x x a a a a m m m m p p p p ll l l e e e e T o enable a fir ewall to allow A TMP traf fic, you must pr ovision the firewall to allow inbound and outbound UDP packets specifically destined for por t 5150. The source por t may be dynamic, so often it is not useful to[...]

Virtual Private Networks (VPN) 10-25 For Input Filter 2 set the Protocol Type to allow GRE as shown below . In the Display/Change IP Filter Set screen select Display/Change Output Filter . Display/Change Output Filter screen For Output Filter 1 set the Protocol Type and Destination Por t infor mation as shown below . Change Input Filter 2 Enabled: [...]

10-26 Firmware V ersion 4.6 Addendum For Output Filter 2 set the Protocol Type to allow GRE as shown below . Change Output Filter 2 Enabled: Yes Forward: Yes Source IP Address: 0.0.0.0 Source IP Address Mask: 0.0.0.0 Dest. IP Address: 0.0.0.0 Dest. IP Address Mask: 0.0.0.0 Protocol Type: GRE[...]

Monitoring T ools 11-1 C C C C h h h h a a a a p p p p t t t t e e e e r r r r 1 1 1 1 1 1 1 1 M M M M o o o o n n n n ii i i t t t t o o o o r r r r ii i i n n n n g g g g T T T T o o o o o o o o ll l l s s s s This chapter discusses the Netopia R310’s device and network monitoring tools. These tools can provide statistical infor mation, repor t[...]

11-2 User’ s Reference Guide General status Current Date: The cur r ent date; this can be set with the Date and Time utility (see “Date and Time” on page 7-13 ). Default IP Gateway: The router’s default gateway , which may be either manually configured or lear ned via DHCP . This is the value you assigned in the Default IP Gateway field o[...]

Monitoring T ools 11-3 Curr ent status The cur rent status section is a table showing the cur r ent status of the WAN. For example: Profile Name: Lists the name of the connection pr ofile being used, if any . State: Lists the por ts in use for this connection. %Use: Indicates the average percent utilization of the maximum capacity of the channels[...]

11-4 User’ s Reference Guide Statistics & Logs When you are tr oubleshooting your Netopia R310, the Statistics & Logs screens pr ovide insight into the recent event activities of the router . From the Main Menu go to Statistics & Logs and select one of the options described in the sections below . General Statistics T o go to the Gene[...]

Monitoring T ools 11-5 Physical Interface The top left side of the screen lists total packets r eceived and total packets transmitted for the following data por ts: ■ Ethernet Hub ■ ISDN B1 Channel ■ ISDN B2 Channel ■ ISDN D Channel Network Interface The bottom left side of the screen lists total packets r eceived and total packets transmit[...]

11-6 User’ s Reference Guide W AN Event Histor y The W AN Event Histor y scr een lists a total of 128 events on the WAN. The most recent events appear at the top. Each entr y in the list contains the following infor mation: Time: Time of the event. Date: Date of the event. Event: A brief description of the event. Ch.: The channel involved in the [...]

Monitoring T ools 11-7 Device Event History The Device Event Histor y screen lists a total of 128 por t and system events, giving the time and date for each event, as well as a brief description. The most recent events appear at the top. In the Statistics & Logs screen, select Device Event Histor y . The Device Event Histor y scr een appears. I[...]

11-8 User’ s Reference Guide The IP routing table displays all of the IP r outes cur rently known to the Netopia R310. The routing table r epresents a “snapshot” of the r outing table infor mation at the time the screen is first invoked. T o take a new snapshot, select Update at the bottom of the screen and pr ess Retur n. Served IP Addresse[...]

Monitoring T ools 11-9 From the Statistics & Logs menu, select Ser ved IP Addr esses . The Ser ved IP Addresses scr een appears. T o manage DHCP leases, select Lease Management in this screen. The IP Address Lease Management scr een appears. This screen has thr ee options: ■ Reset All Leases : Resets all cur rent IP addr esses leased through [...]

11-10 User’ s Reference Guide ■ Reclaim Declined Addresses : Reclaims ser ved leases that have been declined; for example by devices that may no longer be on the network. System Information The System Infor mation screen gives a summar y view of the general system level values in the Netopia R310 ISDN Router. From the Statistics & Logs menu[...]

Monitoring T ools 11-11 The SNMP Setup screen From the Main Menu, select SNMP in the System Configuration screen and pr ess Retur n. The SNMP Setup screen appears. Follow these steps to configure the first thr ee items in the screen: 1. Select System Name and enter a descriptive name for the Netopia R310’s SNMP agent. 2. Select System Location[...]

11-12 User’ s Reference Guide By default, the read-only and r ead/write community strings are set to “public” and “empty ,” respectively . Y ou should change the default community strings to values known only to you and tr usted system administrators. T o change a community string, select it and enter a new value. Caution! Even if you dec[...]

Monitoring T ools 11-13 Setting the IP trap receivers 1. Select Add IP Trap Receiver . 2. Select Receiver IP Address or Domain Name . Enter the IP address or domain name of the SNMP manager you want to receive the trap. 3. Select Community String . Enter whatever community string is appropriate for the traps to be sent to the management station who[...]

11-14 User’ s Reference Guide[...]

Security 12-1 C C C C h h h h a a a a p p p p t t t t e e e e r r r r 1 1 1 1 2 2 2 2 S S S S e e e e c c c c u u u u r r r r ii i i t t t t y y y y The Netopia R310 provides a number of security featur es to help protect its configuration scr eens and your local network from unauthorized access. Although these featur es are optional, it is str on[...]

12-2 User’ s Reference Guide However , by adding user accounts, you can protect the most sensitive scr eens from unauthorized access. User accounts are composed of name/passwor d combinations that can be given to authorized users. Caution! Y ou ar e strongly encouraged to add pr otection to the configuration screens. Unpr otected screens could a[...]

Security 12-3 When you enter your password, you ar e prompted to confir m it by r e-entering it in a pop-up window . Re-type your password to confir m your entr y . When you pr ess Return , the password becomes ef fective. Protecting the configuration scr eens Y ou can pr otect the configuration screens with user accounts. Y ou can administer t[...]

12-4 User’ s Reference Guide Follow these steps to configure the new account: 1. Select Enter Name and enter a descriptive name (for example, the user’s first name). 2. Select Enter Password and enter a passwor d. 3. T o accept the new name/passwor d combination, select ADD NAME/P ASSWORD NOW . T o exit the Add Name With Write Access screen w[...]

Security 12-5 T elnet access T elnet is a TCP/IP ser vice that allows r emote ter minals to access hosts on an IP network. The Netopia R310 suppor ts T elnet access to its configuration scr eens. Caution! Y ou should consider passwor d-protecting or r estricting T elnet access to the Netopia R310 if you suspect ther e is a chance of tampering. T o[...]

12-6 User’ s Reference Guide Each inspector has a specific task. One inspector’s task may be to examine the destination address of all outgoing packages. That inspector looks for a cer tain destination—which could be as specific as a street address or as br oad as an entire countr y—and checks each package’s destination addr ess to see [...]

Security 12-7 If the package does not match the first inspector’s criteria, it goes to the second inspector , and so on. Y ou can see that the order of the inspectors in the line is ver y impor tant. For example, let’s say the first inspector’s orders ar e to send along all packages that come from Rome, and the second inspector’s orders a[...]

12-8 User’ s Reference Guide Parts of a filter A filter consists of criteria based on packet attributes. A typical filter can match a packet on any one of the following attributes: ■ The source IP addr ess (where the packet was sent fr om) ■ The destination IP address (wher e the packet is going) ■ The type of higher-layer Internet pr ot[...]

Security 12-9 Equal: For the filter to match, the packet’s por t number must equal the por t number specified in the filter . Greater Than: For the filter to match, the packet’s por t number must be gr eater than the por t number specified in the filter . Greater Than or Equal: For the filter to match, the packet’s por t number must be[...]

12-10 User’ s Reference Guide Proto: The pr otocol to match. This can be entered as a number (see the table below) or as TCP or UDP if using those protocols. Src. Por t: The sour ce por t to match. This is the por t on the sending host that originated the packet. D. Por t: The destination por t to match. This is the por t on the receiving host fo[...]

Security 12-11 4. The filter should be enabled and instr ucted to block the T elnet packets containing the sour ce addr ess shown in step 2: ■ On? = Y es ■ Fwd = No This four-step process is how we pr oduced the following filter from the original r ule: Filtering example #2 Suppose a filter is configured to block all incoming IP packets wit[...]

12-12 User’ s Reference Guide ■ discarded if all the filters ar e configured to pass (for war d). ■ discarded if the set contains a combination of pass and discar d filters. Disadvantages of filters Although using filter sets can greatly enhance network security , there ar e disadvantages: ■ Filters are complex. Combining them in filt[...]

Security 12-13 The procedur e for creating and maintaining filter sets is as follows: 1. Add a new filter set. 2. Create the filters for the new filter set. 3. View , change, or delete individual filters and filter sets. The sections below explain how to execute these steps. Adding a filter set Y ou can cr eate up to eight dif fer ent custom[...]

12-14 User’ s Reference Guide Naming a new filter set All new filter sets have a default name. The first filter set you add will be called Filter Set 1, the next filter will be Filter Set 2, and so on. T o give a new filter set a dif ferent name, select Filter Set Name and enter a new name for the filter set. T o save the filter set, sele[...]

Security 12-15 Packets in the Netopia R310 pass through an input filter if they originate in the W AN and through an output filter if they’re bei ng sent out to the W AN. The process for adding input and output filters is exactly the same. The main dif ference between the two involves their refer ence to source and destination . From the persp[...]

12-16 User’ s Reference Guide 1. T o make the filter active in the filter set, select Enabled and toggle it to Ye s . If Enabled is toggled to No , the filter can still exist in the filter set, but it will have no ef fect. 2. If you want the filter to for ward packets that match its criteria to the destination IP addr ess, select For ward an[...]

Security 12-17 10. Select ICMP Code Compare and choose one of the following options from the pop-up menu: No Compar e, Not Equal T o, Less Than, Less Than or Equal, Equal, Gr eater Than or Equal, or Greater Than. 11. In addition to the Type, an 8-bit field, Code , gives more infor mation about the Type. Select ICMP Codes and select more infor mati[...]

12-18 User’ s Reference Guide Modifying filters T o modify a filter , select Display/Change Input Filter ( Display/ Change Output Filter ) in the Add IP Filter Set screen to display a table of filters. Select a filter from the table and pr ess Return to go to the Change Filter scr een. The parameters in this screen are the same as the ones in[...]

Security 12-19 Deleting a filter set Note: If you delete a filter set, all of the filters it contains are deleted as well. T o reuse any of these filters in another set, you’ll have to note their configuration before deleting the cur r ent filter set and then recr eate them. T o delete a filter set, select Delete Filter Set in the IP Filte[...]

12-20 User’ s Reference Guide The five input filters and one output filter that make up Basic Firewall ar e shown in the table below . Basic Firewall’s filters play the following r oles. Input filters 1 and 2: These block W AN-originated OpenWindows and X-Windows sessions. Ser vice origination requests for these pr otocols use por ts 2000 [...]

Security 12-21 Basic Firewall is suitable for a LAN containing only client hosts that wish to access ser vers on the WAN, not for a LAN containing ser vers providing ser vices to clients on the WAN. Basic Firewall’s general strategy is to explicitly pass W AN-originated TCP and UDP traf fic to por ts greater than 1023. Por ts lower than 1024 ar [...]

12-22 User’ s Reference Guide FTP sessions. T o allow WAN-originated FTP sessions to a LAN-based FTP ser ver with the IP addr ess a.b.c.d (cor responding to a number ed IP address such as 163.176.8.243), inser t the following input filter ahead of the cur rent input filter 1: ■ Enabled: Y es ■ For ward: Y es ■ Source IP Addr ess: 0.0.0.0 [...]

Security 12-23 This header infor mation is what the packet filter uses to make filtering decisions. It is impor tant to note that a packet filter does not look into the IP datastream (the User Data fr om above) to make filtering decisions. Basic Pr otocol T ypes TCP : T ransmission Control Pr otocol. TCP pr ovides reliable packet deliver y and [...]

12-24 User’ s Reference Guide Firewall Logic Firewall design is a test of logic, and filter r ule or dering is critical. If a packet is passed thr ough a series of filter r ules and then the packet matches a r ule, the appr opriate action is taken. The packet will not pass through the remainder of the filter r ules. For example, if you had the[...]

Security 12-25 Incoming Packet: IP 163.176.1.15 BINARY: 10100011.10110000.00000001.00001111 AND the incoming packet and subnet mask together , the result is: 10100011.10110000.00000001.00001111 which matches the IP address in the filter r ule and the packet is denied. Implied Rules With a given set of filter r ules, there is an Implied r ule whic[...]

12-26 User’ s Reference Guide Example IP Filter Set Screen This is an example of the Netopia IP filter set screen: Filter Basics In the source or destination IP addr ess fields, the IP address that is enter ed MUST be the NETWORK address of the subnet. A HOST address can be enter ed, but the applied subnet mask must be 32 bits (255.255.255.255)[...]

Security 12-27 Example Network Example Filters Example 1 Incoming packet has the source addr ess of 200.1.1.28 This incoming IP packet has a source IP addr ess that matches the network address in the Sour ce IP Address field (00000000) in the Netopia R310. This will NOT for ward this packet. Filter Rule: 200.1.1.0 (Source IP Network Addr ess) 255.[...]

12-28 User’ s Reference Guide Example 2 Incoming packet has the source addr ess of 200.1.1.184 This incoming IP packet (10000000) has a source IP addr ess that does not match the network address in the Source IP Addr ess field (00000000) in the Netopia R310. This r ule WILL for war d this packet because the packet does not match. Example 3 Incom[...]

Security 12-29 Example 4 Incoming packet has the source addr ess of 200.1.1.104 Since the Source IP Network Addr ess in the Netopia R310 is 01100000, and the sour ce IP address after the logical AND is 01100000, this r ule DOES match and this packet will NOT be passed. Example 5 Incoming packet has the source addr ess of 200.1.1.96 Since the Source[...]

12-30 User’ s Reference Guide T oken Security Authentication This section discusses how to configure and use security authentication on the Netopia R310. Note: The security authentication feature only applies to Netopia R310 models connecting over a dial-up line using the PPP-P AP-TOKEN or PPP-CACHE-TOKEN authentication pr otocol. Securing netwo[...]

Security 12-31 The Netopia R310 suppor ts the following user configurations for security authentication: ■ Single user , calling a single destination (single session) ■ Single user , calling multiple destinations (two simultaneous and separate sessions) ■ Multiple users, calling a single destination (single session) ■ Multiple users, calli[...]

12-32 User’ s Reference Guide 2. Select Send Authentication and press Retur n. From the pop-up menu, highlight P AP-TOKEN or CACHE-TOKEN . Y our network administrator or the r emote network administrator will tell you which method to select. If you select P AP-TOKEN, select Send User Name and enter a name for your Netopia R310. Y ou will not need[...]

Security 12-33 1. Select Secure Authentication Monitor and pr ess Return. The Secur e Authentication Monitor screen appears. 2. W ait for the call to initiate. 3. From the fields that appear , select Enter P ASSCODE and press Retur n. Enter your PIN and the code displayed on your security authentication token card LED. 4. Once the call is establis[...]

12-34 User’ s Reference Guide Note: When using CACHE-TOKEN, your passcode is valid for a time inter val deter mined by the network administrator . When this time inter val expires, you must pr ovide a new passcode for the call negotiation. When using P AP-TOKEN, your passcode is valid for one call negotiation. For a second call negotiation, you m[...]

Utilities and Diagnostics 13-1 C C C C h h h h a a a a p p p p t t t t e e e e r r r r 1 1 1 1 3 3 3 3 U U U U t t t t ii i i ll l l ii i i t t t t ii i i e e e e s s s s a a a a n n n n d d d d D D D D ii i i a a a a g g g g n n n n o o o o s s s s t t t t ii i i c c c c s s s s A number of utilities and tests are available for system diagnostic a[...]

13-2 User’ s Reference Guide Ping The Netopia R310 includes a standard Ping test utility . A Ping test generates IP packets destined for a par ticular (Ping-capable) IP host. Each time the tar get host receives a Ping packet, it r etur ns a packet to the original sender . Ping allows you to see whether a par ticular IP destination is reachable fr[...]

Utilities and Diagnostics 13-3 While the Ping test is r unning, and when it is over , a status field and a number of statistical items are active on the screen. These ar e described below . Status: The cur rent status of the Ping test. This item can display the following messages: Packets Out: The number of packets sent by the Ping test. Packets I[...]

13-4 User’ s Reference Guide Packets Lost: The number of packets unaccounted for , shown in total and as a percentage of total packets sent. This statistic may be updated during the Ping test, and may not be accurate until after the test is over . However , if an escalating one-to-one cor respondence is seen between Packets Out and Packets Lost ,[...]

Utilities and Diagnostics 13-5 The T elnet client scr een appears. ■ Enter the host name or the IP address in dotted decimal for mat of the machine you want to telnet into and press Retur n. ■ Either accept the default control character "Q" used to suspend the T elnet session, or type a dif ferent one. ■ ST ART A TELNET SESSION beco[...]

13-6 User’ s Reference Guide T o trace a r oute, follow these steps: 1. Select Host Name or IP Address and enter the name or addr ess of the destination you want to trace. 2. Select Maximum hops (1..64) to set the maximum number of r outers to count between the Netopia Router and the destination router , up to the maximum of 64. The default is 30[...]

Utilities and Diagnostics 13-7 Disconnect T elnet Console Session If you want to close your T elnet Console session, select Disconnect T elnet Console Session and pr ess Return. A dialog box appears asking you to cancel or continue your selection. If you select Continue , you will immediately ter minate your session. Factory defaults Y ou can r ese[...]

13-8 User’ s Reference Guide The sections below describe how to update the Router’s fir mware and how to download and upload configuration files. Updating firmwar e Fir mware updates may be available periodically fr om Netopia or from a site maintained by your or ganization’s network administrator . The router fir mwar e gover ns how the[...]

Utilities and Diagnostics 13-9 Caution! ■ Be sure the fir mwar e update you load onto your router is the cor r ect version for your par ticular model. Some models do not suppor t all fir mware versions. Loading an incor r ect fir mwar e version can per manently damage the unit. ■ Do not manually power down or reset the Netopia R310 while it [...]

13-10 User’ s Reference Guide T o upload a configuration file, follow these steps: 1. Select TFTP Ser ver Name and enter the ser ver name or IP address of the TFTP ser ver you will use. The ser ver name or IP address is available fr om the site where the ser ver is located. 2. Select Config File Name and enter a name for the file you will upl[...]

Utilities and Diagnostics 13-11 3. Select CANCEL to exit without downloading the file, or select CONTINUE to download the file. If you choose CONTINUE , you will have ten seconds to use your ter minal emulation software to initiate an XMODEM transfer of the fir mware file. If you fail to initiate the transfer in that time, the dialog box will d[...]

13-12 User’ s Reference Guide If you choose CONTINUE , you will have ten seconds to use your ter minal emulation software to initiate an XMODEM transfer of the configuration file. If you fail to initiate the transfer in that time, the dialog box will disappear and the ter minal emulation software will infor m you of the transfer’s failur e. Y[...]

Utilities and Diagnostics 13-13 ISDN Switch Loopback T est The ISDN loopback test is designed to confir m the existence of a working ISDN line and the proper configuration of cer tain Netopia R310 ISDN Router parameters. This test is available only on switched ISDN lines. Using the first B-channel, the test calls the Netopia R310 on the second B[...]

13-14 User’ s Reference Guide If the loopback test fails Follow these suggestions to track down the reason behind the loopback test’s failur e: ■ Check that the W AN Ready LED is solid gr een. ■ Check the ISDN event log and get more infor mation about events that seem r elevant to the failure. ■ Check the B-channel usage in the Quick View[...]

P P P P a a a a r r r r t t t t II I I II I I II I I : : : : A A A A p p p p p p p p e e e e n n n n d d d d ii i i x x x x e e e e s s s s[...]

User’ s Reference Guide[...]

T r oubleshooting A-1 A A A A p p p p p p p p e e e e n n n n d d d d ii i i x x x x A A A A T T T T r r r r o o o o u u u u b b b b ll l l e e e e s s s s h h h h o o o o o o o o t t t t ii i i n n n n g g g g This appendix is intended to help you troubleshoot pr oblems you may encounter while setting up and using the Netopia R310. It also include[...]

A-2 User’ s Reference Guide SmartStart T roubleshooting The Status field of the Smar tStar t application will display infor mation and indicate problems as they ar e detected. Console connection pr oblems Can’t see the configuration scr eens (nothing appears) ■ Check the cable connection from the Netopia R310’s console por t to the comput[...]

T r oubleshooting A-3 Power outages If you suspect that power was restor ed after a power outage, and the Netopia R310 is connected to a remote site, you may need to switch the Netopia R310 of f and then back on again. After temporar y power outages, a connection that still seems to be up may actually be disconnected. Rebooting the router should r [...]

A-4 User’ s Reference Guide Phone: 1 800-782-6449 Fax: 1 510-814-5023 Netopia, Inc. Customer Ser vice 2470 Mariner Square Loop Alameda, California 94501 USA Netopia Bulletin Board Ser vice: 1 510-865-1321 Online product information Product infor mation can be found in the following: Netopia World Wide W eb ser ver via http://www .netopia.com Inte[...]

Setting Up T elco Ser vices B-1 A A A A p p p p p p p p e e e e n n n n d d d d ii i i x x x x B B B B S S S S e e e e t t t t t t t t ii i i n n n n g g g g U U U U p p p p T T T T e e e e ll l l c c c c o o o o S S S S e e e e r r r r v v v v ii i i c c c c e e e e s s s s This chapter describes how to obtain telco ser vices from your telephone s[...]

B-2 User’ s Reference Guide Setup tips Y our ISDN ser vice pr ovider may have the Netopia Router on a list of suppor ted products that have been tested with a par ticular ISDN line configuration. Y our ISDN ser vice pr ovider will know how to set up your line if the Netopia Router is on that list. Switch protocol type To configure the Netopia R[...]

Setting Up T elco Ser vices B-3 ISDN T elco W orksheet 1. ISDN Ser vice Provider (T elephone Company) contact information Name and Address: ____________________________________________________________________________ ____________________________________________________________________________ T elephone/Fax numbers: ________________________________[...]

B-4 User’ s Reference Guide[...]

Setting Up Internet Services C-1 A A A A p p p p p p p p e e e e n n n n d d d d ii i i x x x x C C C C S S S S e e e e t t t t t t t t ii i i n n n n g g g g U U U U p p p p II I I n n n n t t t t e e e e r r r r n n n n e e e e t t t t S S S S e e e e r r r r v v v v ii i i c c c c e e e e s s s s This chapter describes how to obtain and set up I[...]

C-2 User’ s Reference Guide Pricing and support Compare pricing, ser vice, and technical suppor t ser vice among various ISPs. ISP’ s Point of presence Check with your ISP for the location of their nearest point of pr esence (POP) in refer ence to your site. In some instances, the ISP that you choose may not of fer a POP in your local ar ea. If[...]

Setting Up Internet Services C-3 Obtaining information from the ISP After your account is set up, the ISP should send you the IP parameter infor mation that will help you to configure the Netopia R310. Local LAN IP address information to obtain With Network Addr ess T ranslation If you are using Smar tIP (NA T), you should obtain the following: ?[...]

C-4 User’ s Reference Guide Remote W AN IP address information to obtain ■ The telephone number of the ISP’s local or nearby dial-up POP (point-of-presence). ■ Remote IP address of r outer at ISP or other remote site ■ Remote IP subnet mask address of r outer at ISP or other remote site ■ PPP authentication type for router at the ISP , [...]

Understanding IP Addressing D-1 A A A A p p p p p p p p e e e e n n n n d d d d ii i i x x x x D D D D U U U U n n n n d d d d e e e e r r r r s s s s t t t t a a a a n n n n d d d d ii i i n n n n g g g g II I I P P P P A A A A d d d d d d d d r r r r e e e e s s s s s s s s ii i i n n n n g g g g This appendix is a brief general introduction to I[...]

D-2 User’ s Reference Guide IP addresses indicate both the identity of the network and the identity of the individual host on the network. The number of bits used for the network number and the number of bits used for the host number can var y , as long as cer tain r ules ar e followed. The local network manager assigns IP host numbers to individ[...]

Understanding IP Addressing D-3 Subnet masks T o cr eate subnets, the network manager must define a subnet mask, a 32-bit number that indicates which bits in an IP address ar e used for network and subnetwork addresses, and which ar e used for host addresses. One subnet mask should apply to all IP networks that are physically connected together an[...]

D-4 User’ s Reference Guide Network configuration Below is a diagram of a simple network configuration. The ISP is providing a Class C addr ess to the customer site, and both networks A and B want to gain Internet access thr ough this address. Netopia R310 B connects to Netopia R310 A and is provided Inter net access through Routers A and B. Ro[...]

Understanding IP Addressing D-5 Background The IP Addresses and r outing configurations for the devices shown in the diagram are outlined below . In addition, each individual field and its meaning are described. The “IP Address” and “Subnet Mask” fields define the IP Addr ess and Subnet Mask of the device's Ethernet connection to t[...]

D-6 User’ s Reference Guide There ar e two schemes for distributing the remaining IP addr esses: ■ Manually give each computer an address ■ Let the Netopia R310 automatically distribute the addresses These two methods are not mutually exclusive; you can manually issue some of the addr esses while the rest are distributed by the Netopia R310. [...]

Understanding IP Addressing D-7 Configuration This section describes the specific IP address lease, r enew , and release mechanisms for both the Mac and PC, with either DHCP or MacIP address ser ving. DHCP Address Serving Windows 95 Workstation: ■ The Win95 workstation requests and r enews its lease ever y half hour . ■ The Win95 workstation [...]

D-8 User’ s Reference Guide MacIP Serving Macintosh W orkstation (MacTCP or Open T ranspor t): Once the Mac workstation requests and r eceives a valid address, the Netopia R310 will actively check for the workstation’s existence once ever y minute. ■ For a DYNAMIC address, the Netopia R310 will r elease the address back to the addr ess pool a[...]

Understanding IP Addressing D-9 The figure above shows an example of a block of IP addr esses being distributed cor rectly . The example follows these r ules: ■ An IP address must not be used as a static addr ess if it is also in a range of addresses being distributed by DHCP or MacIP . ■ A single IP address range is used by all the addr ess-s[...]

D-10 User’ s Reference Guide Nested IP subnets Under cer tain situations, you may wish to create r emote subnets from the limited number of IP addr esses issued by your ISP or other authority . Y ou can do this using connection pr ofiles. These subnets can be nested within the range of IP addresses available to your network. For example, suppose[...]

Understanding IP Addressing D-11 Routers B and C (which could also be Netopia R310s) ser ve the two remote networks that ar e subnets of a.b.c.0. The subnetting is accomplished by configuring the Netopia R310 with connection profiles for Routers B and C (see the following table). The Netopia R310’s connection profiles for Routers B and C cr ea[...]

D-12 User’ s Reference Guide The following diagram illustrates the IP address space taken up by the two r emote IP subnets. Y ou can see fr om the diagram why the ter m nested is appropriate for describing these subnets. Br oadcasts As mentioned earlier , binar y IP host or subnet addresses composed entir ely of ones or zeros ar e reser ved for b[...]

Understanding Netopia NA T Behavior E-1 A A A A p p p p p p p p e e e e n n n n d d d d ii i i x x x x E E E E U U U U n n n n d d d d e e e e r r r r s s s s t t t t a a a a n n n n d d d d ii i i n n n n g g g g N N N N e e e e t t t t o o o o p p p p ii i i a a a a N N N N A A A A T T T T B B B B e e e e h h h h a a a a v v v v ii i i o o o o r [...]

E-2 User’ s Reference Guide When the Netopia R310 establishes a connection over its W AN inter face with another r outer it uses the Point to Point Protocol (PPP). Within PPP ther e is a Network Control Pr otocol (NCP) called Internet Pr otocol Contr ol Protocol (IPCP) which handles the negotiation of IP addr esses between the two routers, in thi[...]

Understanding Netopia NA T Behavior E-3 When the Netopia R310 receives this IP packet, it can not simply for war d it to the WAN inter face and the Internet since the IP addr esses on the LAN inter face ar e not valid or globally unique for the Inter net. Instead the Netopia R310 has to change the IP packet to reflect the IP addr ess that was acqu[...]

E-4 User’ s Reference Guide Now look at how two hosts on the LAN inter face accessing the same WWW Ser ver on the Inter net will work: As you can see, when Workstation A and W orkstation B transmit an IP packet to the WWW Ser ver on the Internet, they have unique sour ce IP addr esses on the LAN inter face but potentially the same sour ce por ts,[...]

Understanding Netopia NA T Behavior E-5 If you were to look at the inter nal por t mapping table that is maintained by the Netopia R310, it would look similar to the following: With this infor mation the Netopia R310 can deter mine the appropriate r outing for an IP response fr om the Internet. In this case when the WWW Ser ver responds with a dest[...]

E-6 User’ s Reference Guide Once the appropriate Expor ted Ser vices ar e defined, there can be seamless communication between a host on the Internet and a host on the Netopia R310’s local LAN inter face. Important notes Even with the advantages of NA T , ther e are several things you should note car efully: ■ There is no for mally agr eed u[...]

Understanding Netopia NA T Behavior E-7 T oggling Addr ess T ranslation Enabled to Y es enables the Netopia R310 to send out an all-zer os IPCP address that requests an IP to be assigned to the Netopia R310’s WAN inter face. Note that the r emote IP address is 127.0.0.2, which should also be the Default Gateway under IP Setup in System Configura[...]

E-8 User’ s Reference Guide Within Expor ted Ser vices is a pop-up containing a list of well known TCP and UDP ser vices that can be redir ected to a single host on the Netopia R310’s LAN inter face. There is also an “Other ...” option which allows for manual configuration of additional TCP or UDP por ts. There can be a total of 32 Expor t[...]

Event Histories F-1 A A A A p p p p p p p p e e e e n n n n d d d d ii i i x x x x F F F F E E E E v v v v e e e e n n n n t t t t H H H H ii i i s s s s t t t t o o o o r r r r ii i i e e e e s s s s This appendix is a list of some of the events that can appear in the Netopia R310’s Event Histories. The text that appears in a histor y is shown i[...]

F-2 User’ s Reference Guide Received Clear Ind. from DN: Received clear indication from switch. Associated parameter: called dir ector y number . Secondar y associated parameter: cause code. Connection Confirmed to our DN: Received connect confir mation for Connect Request sent to the switch. Associated parameter: called director y number . Rec[...]

Event Histories F-3 Cause No. 16: normal call clearing. This cause indicates that the call is being cleared because one of the users involved in the call has requested that the call be clear ed. Under nor mal situations, the source of this cause is not the network. Cause No. 17: user busy . This cause is used when the called user has indicated the [...]

F-4 User’ s Reference Guide Cause No. 42: switching equipment congestion. This cause indicates that the switching equipment generating this cause is experiencing a period of high traf fic. Cause No. 43: access information discar ded. This cause indicates that the network could not deliver access infor mation to the remote user as r equested: i.e[...]

Event Histories F-5 Cause No. 83: a suspended call exists, but this call identify does not. This cause indicates that a call resume has been attempted with a call identity which dif fers from that in use for any pr esently suspended call(s). Cause No. 84: call identity in use. This cause indicates that the network has received a call suspend reques[...]

F-6 User’ s Reference Guide Cause No. 111: protocol err or , unspecified. This cause is used to r epor t a protocol er r or event only when no other cause in the protocol er r or class applies. Cause No. 127: inter working, unspecified. This cause indicates there has been inter working with a network that does not provide causes for actions it [...]

ISDN Configuration Guide G-1 A A A A p p p p p p p p e e e e n n n n d d d d ii i i x x x x G G G G II I I S S S S D D D D N N N N C C C C o o o o n n n n f f f f ii i i g g g g u u u u r r r r a a a a t t t t ii i i o o o o n n n n G G G G u u u u ii i i d d d d e e e e This appendix contains supplemental ISDN configuration infor mation. This se[...]

G-2 User’ s Reference Guide[...]

Binary Conversion T able H-1 A A A A p p p p p p p p e e e e n n n n d d d d ii i i x x x x H H H H B B B B ii i i n n n n a a a a r r r r y y y y C C C C o o o o n n n n v v v v e e e e r r r r s s s s ii i i o o o o n n n n T T T T a a a a b b b b ll l l e e e e This table is provided to help you choose subnet numbers and host numbers for IP and [...]

H-2 User’ s Reference Guide Decimal Binar y Decimal Binar y Decimal Binar y Decimal Binar y 128 10000000 160 10100000 192 11000000 224 11100000 129 10000001 161 10100001 193 11000001 225 11100001 130 10000010 162 10100010 194 11000010 226 11100010 131 10000011 163 10100011 195 11000011 227 11100011 132 10000100 164 10100100 196 11000100 228 11100[...]

T echnical Specifications and Safety Information I-1 A A A A p p p p p p p p e e e e n n n n d d d d ii i i x x x x II I I T T T T e e e e c c c c h h h h n n n n ii i i c c c c a a a a ll l l S S S S p p p p e e e e c c c c ii i i f f f f ii i i c c c c a a a a t t t t ii i i o o o o n n n n s s s s a a a a n n n n d d d d S S S S a a a a f f f f[...]

I-2 User’ s Reference Guide Agency appr ovals North America Safety Approvals: ■ United States – UL: 1950 Third Edition ■ Canada – CSA: CAN/CSA-C22.2 No. 950-95 EMI: ■ FCC Class A International Safety Approvals: ■ Low V oltage (European directive) 72/23 ■ EN60950 (Europe) ■ ETSI 300 047 (Europe) ■ AS/NRZ 3260 (Australia) ■ TS00[...]

T echnical Specifications and Safety Information I-3 United States. This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to Par t 15 of the FCC Rules. These limits are designed to pr ovide reasonable pr otection against har mful inter fer ence when the equipment is operated in a commercial envir[...]

I-4 User’ s Reference Guide Declaration for Canadian users The Canadian Industr y Canada label identifies cer tified equipment. This cer tification means that the equipment meets cer tain telecommunications network protective, operation and safety r equirements. The Depar tment does not guarantee the equipment will operate to the user’s sati[...]

T echnical Specifications and Safety Information I-5 T elecommunication installation cautions ■ Never install telephone wiring during a lightning stor m. ■ Never install telephone jacks in wet locations unless the jack is specifically designed for wet locations. ■ Never touch uninsulated telephone wires or ter minals unless the telephone li[...]

I-6 User’ s Reference Guide[...]

Glossary 1 G G G G ll l l o o o o s s s s s s s s a a a a r r r r y y y y Access Line: A telephone line r eaching from the telephone company central of fice to a point usually on your premises. Beyond this point the wir e is considered inside wiring. See also T r unk Line . analog: In telecommunications, telephone transmission and/or switching tha[...]

2 User’ s Reference Guide Class A, B, and C networks: The values assigned to the first few bits in an IP network addr ess deter mine which class designation the network has. In decimal notation, Class A network addresses range fr om 1.X.X.X to 126.X.X.X, Class B network addresses range fr om 128.1.X.X to 191.254.X.X, and Class C addresses range [...]

Glossary 3 Ethernet address: Sometimes refer r ed to as a hardwar e address. A 48-bits long number assigned to ever y Ethernet har dwar e device. Ethernet addr esses are usually expr essed as 12-character hexadecimal numbers, where each hexadecimal character (0 thr ough F) repr esents four binar y bits. Do not confuse the Ether net address of a dev[...]

4 User’ s Reference Guide ISP (Internet ser vice provider): A company that provides Inter net-related ser vices. Most impor tantly , an ISP provides Inter net access ser vices and pr oducts to other companies and consumers. ITU (International T elecommunication Union): United Nations specialized agency for telecommunications. Successor to CCITT .[...]

Glossary 5 Parameter: A numerical code that contr ols an aspect of ter minal and/or network operation. Parameters control such aspects as page size, data transmission speed, and timing options. por t: A location for passing data in and out of a device, and, in some cases, for attaching other devices or cables. por t number: A number that identifie[...]

6 User’ s Reference Guide soft seeding: A r outer setting. In soft seeding, if a router that has just been r eset detects a network number or zone name conflict between its configured infor mation for a par ticular por t and the infor mation pr ovided by another router connected to that por t, it updates its configuration using the infor matio[...]

Index-7 II I I n n n n d d d d e e e e x x x x Numerics 10Base-T connecting 4-2 A add static route 9- 32 adding a filter set 12-13 advanced configuration features 7- 11 answer profile call acceptance scenarios 8-12 defined 8- 9 answering calls 8- 9 application software 4-1 A TMP 10-7 tunnel options 10-16 authentication and answer profile 8- 11[...]

Index-8 default ter minal emulation software settings 5- 4 delayed configuration 7-8 delete static route 9- 33 deleting filters 12-18 designing a new filter set 12- 11 DHCP defined D- 8 DHCP NetBIOS options 9- 35 dial-in configuration 7-4 director y number , defined G-1 disadvantages of filters 12-12 display a filter set 12- 9 distributing [...]

Index-9 IP addresses, distributing D-5 IP addressing D- 1 IP setup 9-28 IP trap receivers deleting 11-13 modifying 11- 13 setting 11- 13 viewing 11-13 ISDN configuration guide G- 1 event cause codes F-2 events F-1 loopback test 13-13 obtaining a line B-1 ordering a line B-1 setting up a line B- 2 worksheet B- 3 ISP account types C-2 finding C-1 L[...]

Index-10 ping test, configuring and initiating 13-2 por t number comparisons 12-8 por t numbers 12- 8 PPTP 10- 7 tunnel options 10-4 protecting the configuration scr eens 12-3 protecting the security options scr een 12- 2 Q Quick View 11- 1 R resetting the system 13-12 restricting telnet access 12-5 RIP 7-7 router to ser ve IP addr esses to hosts[...]

Index-11 event histories 11- 5 loopback test 13- 13 Smar tStar t Macintosh A-2 PC A-1 WA N statistics 11- 4 tr usted host 12-21 tr usted subnet 12-21 tunnel options A TMP 10-16 PPTP 10- 4 tunneling 10-2 U updating fir mware with TFTP 13-8 with XMODEM 13-10 updating router fir mwar e 13- 8 uploading a configuration file 13-9 uploading configura[...]

Index-12[...]

Limited Warranty and Limitation of Remedies 1 L L L L ii i i m m m m ii i i t t t t e e e e d d d d W W W W a a a a r r r r r r r r a a a a n n n n t t t t y y y y a a a a n n n n d d d d L L L L ii i i m m m m ii i i t t t t a a a a t t t t ii i i o o o o n n n n o o o o f f f f R R R R e e e e m m m m e e e e d d d d ii i i e e e e s s s s Netopi[...]

2 User’ s Reference Guide[...]