Netopia D7171 SDSL manual

Net opia ™ D-Series DSL DS Us D3100-I IDSL D3232 IDSL D7100 SDSL D7171 SDSL User’s Refer ence Guide[...]

C o p yright ©2000, Netopia, Inc., v .0300 All rights reser ved. Printed in the U.S.A. This manual and any associated ar twork, software, and product designs are copyrighted with all rights reser ved. Under the copyright laws such materials may not be copied, in whole or par t, without the prior written consent of Netopia, Inc. Under the law , cop[...]

G B Part I: Getting Started Chapter 1 — Introduction .......................................................... 1-9 Over view ....................................................................... 1-9 Features and capabilities ............................................. 1-10 In DSU mode ..................................................... 1-1[...]

iv User’ s Reference Guide Chapter 4 — Configuring TCP/IP ............................................. 4-25 Configuring TCP/IP on Windows 95, 98, or NT computers 4-26 Configuring TCP/IP on Macintosh computers .................. 4-28 Part II: Advanced Configuration Chapter 5 — Console-Based Management ............................... 5-33 C[...]

Contents v G Statistics & Logs ......................................................... 7-51 General Statistics .............................................. 7-51 Event histories ............................................................ 7-52 System Infor mation...................................................... 7-55 SNMP ...............[...]

vi User’ s Reference Guide Chapter 9 — Utilities and Diagnostics ..................................... 9-89 Ping ............................................................................ 9-90 T race Route ................................................................. 9-92 T elnet client.....................................................[...]

Contents vii G Description................................................................ D-120 Power requir ements ......................................... D-120 Environment .................................................... D-120 Software and pr otocols ..................................... D-120 Agency approvals .............................[...]

viii User’ s Reference Guide[...]

P P P P a a a a r r r r t t t t II I I : : : : G G G G e e e e t t t t t t t t ii i i n n n n g g g g S S S S t t t t a a a a r r r r t t t t e e e e d d d d[...]

User’ s Reference Guide[...]

Introduction 1-11 C C C C h h h h a a a a p p p p t t t t e e e e r r r r 1 1 1 1 II I I n n n n t t t t r r r r o o o o d d d d u u u u c c c c t t t t ii i i o o o o n n n n O O O O v v v v e e e e r r r r v v v v ii i i e e e e w w w w The Netopia D-Series DSL DSUs are Digital Ser vice Units or intelligent Ether net filtering bridges for SDSL o[...]

1-12 User’ s Reference Guide F F F F e e e e a a a a t t t t u u u u r r r r e e e e s s s s a a a a n n n n d d d d c c c c a a a a p p p p a a a a b b b b ii i i ll l l ii i i t t t t ii i i e e e e s s s s The Netopia D-Series DSL DSUs all provide the following featur es: ■ Status lights (LEDs) for easy monitoring and troubleshooting. ■ Su[...]

Introduction 1-13 H H H H o o o o w w w w t t t t o o o o u u u u s s s s e e e e t t t t h h h h ii i i s s s s g g g g u u u u ii i i d d d d e e e e This guide is designed to be your single source for infor mation about your Netopia D-Series DSL DSU. It is intended to be viewed on-line, using the power ful featur es of the Adobe Acrobat Reader .[...]

1-14 User’ s Reference Guide[...]

Making the Physical Connections 2-15 C C C C h h h h a a a a p p p p t t t t e e e e r r r r 2 2 2 2 M M M M a a a a k k k k ii i i n n n n g g g g t t t t h h h h e e e e P P P P h h h h y y y y s s s s ii i i c c c c a a a a ll l l C C C C o o o o n n n n n n n n e e e e c c c c t t t t ii i i o o o o n n n n s s s s This section tells you how to[...]

2-16 User’ s Reference Guide Y ou will need: ■ A Windows 95-, 98-, 2000-, or NT–based PC or a Macintosh computer with Ethernet connectivity for configuring the Netopia D-Series. This may be built-in Ethernet or an add-on car d, with TCP/IP installed and configured. See Chapter 4, “Configuring TCP/IP .” ■ An SDSL or IDSL wall outlet w[...]

Making the Physical Connections 2-17 2. Connect one end one of the RJ-45 cables to the Line 1 por t, and the other end to your SDSL or IDSL wall outlet. 3. Connect one end of one of the RJ-45 Ethernet cables to any of the Ether net por ts on the Netopia D-Series and the other end to your computer or to your network. (If you are connecting the Netop[...]

2-18 User’ s Reference Guide N N N N e e e e t t t t o o o o p p p p ii i i a a a a D D D D - - - - S S S S e e e e r r r r ii i i e e e e s s s s D D D D S S S S L L L L D D D D S S S S U U U U s s s s t t t t a a a a t t t t u u u u s s s s ll l l ii i i g g g g h h h h t t t t s s s s The figure below r epresents the Netopia D-Series status l[...]

Making the Physical Connections 2-19 Data is transmitted or received on the WAN on Channel 2 5 or 11 flashes yellow . (D3232 only) Console cable is attached and has car rier 6 and 7 are green . Data is transmitted or received 6 and 7 flash yellow . Data is transmitted or received by the ether net controller 12 flashes yellow . The Ethernet inter[...]

2-20 User’ s Reference Guide[...]

Connecting to Y our Local Ar ea Network 3-21 C C C C h h h h a a a a p p p p t t t t e e e e r r r r 3 3 3 3 C C C C o o o o n n n n n n n n e e e e c c c c t t t t ii i i n n n n g g g g t t t t o o o o Y Y Y Y o o o o u u u u r r r r L L L L o o o o c c c c a a a a ll l l A A A A r r r r e e e e a a a a N N N N e e e e t t t t w w w w o o o o r r[...]

3-22 User’ s Reference Guide In bridge mode the Netopia D-Series per for ms a simple algorithm. When the Netopia D-Series receives a packet on the Ethernet hub, the packet is examined for its destination Media Access Contr ol (MAC) address. The MAC address is the physical addr ess of a device connected to a network, expressed as a 48-bit hexadeci[...]

Connecting to Y our Local Ar ea Network 3-23 R R R R e e e e a a a a d d d d y y y y ii i i n n n n g g g g c c c c o o o o m m m m p p p p u u u u t t t t e e e e r r r r s s s s o o o o n n n n y y y y o o o o u u u u r r r r ll l l o o o o c c c c a a a a ll l l n n n n e e e e t t t t w w w w o o o o r r r r k k k k PC and Macintosh computers m[...]

3-24 User’ s Reference Guide C C C C o o o o n n n n n n n n e e e e c c c c t t t t ii i i n n n n g g g g t t t t o o o o a a a a n n n n E E E E t t t t h h h h e e e e r r r r n n n n e e e e t t t t n n n n e e e e t t t t w w w w o o o o r r r r k k k k The Netopia D-Series suppor ts Ether net connections through its eight Ethernet por ts. [...]

Connecting to Y our Local Ar ea Network 3-25 If you add devices connected through a hub, connect the hub to Ether net por t number 1 on the Netopia D-Series and set the Nor mal/Uplink switch to Uplink. Macintosh PC PC 10Base-T Hub Ethernet Nor- 8 1[...]

3-26 User’ s Reference Guide[...]

Configuring TCP/IP 4-27 C C C C h h h h a a a a p p p p t t t t e e e e r r r r 4 4 4 4 C C C C o o o o n n n n f f f f ii i i g g g g u u u u r r r r ii i i n n n n g g g g T T T T C C C C P P P P // / / II I I P P P P Computers on your network must have TCP/IP installed and configured. This chapter tells you how to configur e TCP/IP on the des[...]

4-28 User’ s Reference Guide C C C C o o o o n n n n f f f f ii i i g g g g u u u u r r r r ii i i n n n n g g g g T T T T C C C C P P P P // / / II I I P P P P o o o o n n n n W W W W ii i i n n n n d d d d o o o o w w w w s s s s 9 9 9 9 5 5 5 5 o o o o r r r r 9 9 9 9 8 8 8 8 c c c c o o o o m m m m p p p p u u u u t t t t e e e e r r r r s s [...]

Configuring TCP/IP 4-29 4. Click OK in this window , and the next window . When pr ompted, reboot the computer . Note: Y ou can also use these instr uctions to configure other computers on your network with manual or static IP addresses. Be sur e each computer on your network has its own IP address. Click on the DNS Configuration tab. Click Enab[...]

4-30 User’ s Reference Guide C C C C o o o o n n n n f f f f ii i i g g g g u u u u r r r r ii i i n n n n g g g g T T T T C C C C P P P P // / / II I I P P P P o o o o n n n n M M M M a a a a c c c c ii i i n n n n t t t t o o o o s s s s h h h h c c c c o o o o m m m m p p p p u u u u t t t t e e e e r r r r s s s s The following is a quick gui[...]

Configuring TCP/IP 4-31 4. Close the TCP/IP or MacTCP control panel and save the settings. 5. If you are using MacTCP , you must restar t the computer . If you are using Open T ranspor t, you do not need to restar t. These ar e the only fields you need to modify in this screen. Note: Y ou can also use these instr uctions to configure other compu[...]

4-32 User’ s Reference Guide[...]

P P P P a a a a r r r r t t t t II I I II I I : : : : A A A A d d d d v v v v a a a a n n n n c c c c e e e e d d d d C C C C o o o o n n n n f f f f ii i i g g g g u u u u r r r r a a a a t t t t ii i i o o o o n n n n[...]

User’ s Reference Guide[...]

Console-Based Management 5-35 C C C C h h h h a a a a p p p p t t t t e e e e r r r r 5 5 5 5 C C C C o o o o n n n n s s s s o o o o ll l l e e e e - - - - B B B B a a a a s s s s e e e e d d d d M M M M a a a a n n n n a a a a g g g g e e e e m m m m e e e e n n n n t t t t Console-based management is a menu-driven inter face for the capabilities[...]

5-36 User’ s Reference Guide ■ Filter Sets (Firewalls). See “Security” on page 8-61 . ■ Date and time. See “Date and time” on page 6-43 . ■ Console configuration. See “Connecting a console cable to your Netopia D-Series” on page 5-36 . ■ SNMP (Simple Network Management Protocol). See “SNMP” on page 7-57 . ■ Security . S[...]

Console-Based Management 5-37 T o connect the Netopia D-Series to your computer for serial console communication, use the supplied dual console cable connector end appropriate to your platfor m: ■ One DB-9 connector end attaches to a PC. ■ The mini-DIN8 connector end attaches to a Macintosh computer . ■ The DB-9 end of the Console cable attac[...]

5-38 User’ s Reference Guide Alternatively , you can have a direct serial console cable connection using the provided console cable for your platfor m (PC or Macintosh) and the Console por t on the back of the Netopia D-Series. For more infor mation on attaching the console cable, see “Connecting a console cable to your Netopia D-Series” on p[...]

W AN and System Configuration 6-39 C C C C h h h h a a a a p p p p t t t t e e e e r r r r 6 6 6 6 W W W W A A A A N N N N a a a a n n n n d d d d S S S S y y y y s s s s t t t t e e e e m m m m C C C C o o o o n n n n f f f f ii i i g g g g u u u u r r r r a a a a t t t t ii i i o o o o n n n n This chapter describes how to use the console-based [...]

6-40 User’ s Reference Guide S S S S y y y y s s s s t t t t e e e e m m m m C C C C o o o o n n n n f f f f ii i i g g g g u u u u r r r r a a a a t t t t ii i i o o o o n n n n s s s s c c c c r r r r e e e e e e e e n n n n s s s s Y ou can connect to the Netopia D-Series’s system configuration scr eens in either of two ways: ■ By using T[...]

W AN and System Configuration 6-41 N N N N a a a a v v v v ii i i g g g g a a a a t t t t ii i i n n n n g g g g t t t t h h h h r r r r o o o o u u u u g g g g h h h h t t t t h h h h e e e e s s s s y y y y s s s s t t t t e e e e m m m m c c c c o o o o n n n n f f f f ii i i g g g g u u u u r r r r a a a a t t t t ii i i o o o o n n n n s s s [...]

6-42 User’ s Reference Guide M M M M a a a a n n n n a a a a g g g g e e e e m m m m e e e e n n n n t t t t II I I P P P P s s s s e e e e t t t t u u u u p p p p Consult your network administrator or Internet ser vice provider to obtain the IP setup infor mation such as the Ethernet IP addr ess, Ethernet subnet mask, default IP gateway . Y ou w[...]

W AN and System Configuration 6-43 F F F F ii i i ll l l t t t t e e e e r r r r s s s s e e e e t t t t s s s s When using the Netopia D-Series in bridge mode only , these screens allow you to configur e security on your network by means of filter sets. Details are given in “About filters and filter sets” on page 8-64 . D D D D a a a a t [...]

6-44 User’ s Reference Guide Y ou can change the default ter minal communications parameters to suit your requir ements. T o go to the Console Configuration screen, select Console Configuration in the System Configuration screen. Follow these steps to change a parameter’s value: 1. Select the parameter you want to change. 2. Select a new val[...]

W AN and System Configuration 6-45 Y ou can configur e a UNIX-style syslog client for the PC to repor t a number of subsets of the events entered in the Netopia D-Series’s W AN Event Histor y . See “WAN Event Histor y” on page 7-55 .The Syslog client daemon program (for the PC only) is supplied as a .ZIP file on the CustomerCar e CD. Selec[...]

6-46 User’ s Reference Guide The following screen shows a sample syslog dump of WAN events: D D D D S S S S L L L L B B B B o o o o n n n n d d d d ii i i n n n n g g g g ( ( ( ( ii i i M M M M u u u u x x x x ) ) ) ) DSL Bonding, also called inverse multiplexing or IMUX, technology combines the bandwidth of multiple DSL (Digital Subscriber Line)[...]

W AN and System Configuration 6-47 same order in which they wer e transmitted, and the reconstr ucted packet is sent on to the recipient’s networking equipment. From the point of view of the r outers or other devices connected to the inverse multiplexers, they are communicating via a single high-speed W AN channel at some multiple of the SDSL or[...]

6-48 User’ s Reference Guide The screen below shows the ISDN/IDSL option for the WAN to be configured on the D3100-I or D3232. The screen below shows the D7171’s SDSL option. These screens show the dual WAN inter faces as a single bonded inter face, and you configure them together by selecting (W an Module 1 and 2) Setup... and pressing Retur[...]

W AN and System Configuration 6-49 The Line Configuration screen appears, IDSL Line Configuration for the D3100-I or D3232, or SDSL Line Configuration for the D7100. or SDSL Line Configuration for the D7171. IDSL Line Configuration +----------+ +----------+ Clock Source... | Network | | Internal | +----------+ Bridge Mode Filter Set... Filter [...]

6-50 User’ s Reference Guide ■ The Clock Source may be either Network or Inter nal. If you select Network (the default), the Netopia D-Series IDSL inter face functions in customer pr emise equipment (CPE) mode. This mode is the normal mode for communicating with an ISP . If you select Inter nal, the Netopia D-Series functions in central of fic[...]

Monitoring T ools 7-51 C C C C h h h h a a a a p p p p t t t t e e e e r r r r 7 7 7 7 M M M M o o o o n n n n ii i i t t t t o o o o r r r r ii i i n n n n g g g g T T T T o o o o o o o o ll l l s s s s This chapter discusses the Netopia D-Series’s device and network monitoring tools. These tools can provide statistical infor mation, repor t on [...]

7-52 User’ s Reference Guide G G G G e e e e n n n n e e e e r r r r a a a a ll l l s s s s t t t t a a a a t t t t u u u u s s s s Current Date: The cur rent date; this can be set with the Date and Time utility (see “Date and time” on page 6-43 ). Default IP Gateway: The Netopia D-Series’s default gateway , which must be manually configur[...]

Monitoring T ools 7-53 R: The letter “R” means the LED is red. G: The letter “G” means the LED is green. Y: The letter “Y” means the LED is yellow . The section “Netopia D-Series DSL DSU status lights” on page 2-18 describes the meanings of the colors for each LED. S S S S t t t t a a a a t t t t ii i i s s s s t t t t ii i i c c c [...]

7-54 User’ s Reference Guide P P P P h h h h y y y y s s s s ii i i c c c c a a a a ll l l II I I n n n n t t t t e e e e r r r r f f f f a a a a c c c c e e e e The top left side of the screen lists total packets r eceived and total packets transmitted for the following data por ts: ■ Ethernet Hub ■ Aux Sync ■ IDSL 1 or SDSL 1 N N N N e e [...]

Monitoring T ools 7-55 W W W W A A A A N N N N E E E E v v v v e e e e n n n n t t t t H H H H ii i i s s s s t t t t o o o o r r r r y y y y The W AN Event Histor y screen lists a total of 128 events on the WAN. The most recent events appear at the top. Each entr y in the list contains the following infor mation: Time: Time of the event. Date: Dat[...]

7-56 User’ s Reference Guide D D D D e e e e v v v v ii i i c c c c e e e e E E E E v v v v e e e e n n n n t t t t H H H H ii i i s s s s t t t t o o o o r r r r y y y y The Device Event Histor y screen lists a total of 128 por t and system events, giving the time and date for each event, as well as a brief description. The most recent events ap[...]

Monitoring T ools 7-57 S S S S y y y y s s s s t t t t e e e e m m m m II I I n n n n f f f f o o o o r r r r m m m m a a a a t t t t ii i i o o o o n n n n The System Infor mation screen gives a summar y view of the general system level values in the Netopia D-Series DSL DSU. From the Statistics & Logs menu select System Information . The Syst[...]

7-58 User’ s Reference Guide T T T T h h h h e e e e S S S S N N N N M M M M P P P P S S S S e e e e t t t t u u u u p p p p s s s s c c c c r r r r e e e e e e e e n n n n From the Main Menu, select SNMP in the System Configuration screen and pr ess Return. The SNMP Setup screen appears. Follow these steps to configure the first thr ee items [...]

Monitoring T ools 7-59 By default, the read-only and r ead/write community strings are set to “public” and “private,” respectively . Y ou should change both of the default community strings to values known only to you and tr usted system adminis- trators. T o change a community string, select it and enter a new value. Setting the Read-Only [...]

7-60 User’ s Reference Guide S S S S e e e e t t t t t t t t ii i i n n n n g g g g t t t t h h h h e e e e II I I P P P P t t t t r r r r a a a a p p p p r r r r e e e e c c c c e e e e ii i i v v v v e e e e r r r r s s s s 1. Select Add IP Trap Receiver . 2. Select Receiver IP Address or Domain Name . Enter the IP address or domain name of the[...]

Security 8-61 C C C C h h h h a a a a p p p p t t t t e e e e r r r r 8 8 8 8 S S S S e e e e c c c c u u u u r r r r ii i i t t t t y y y y The Netopia D-Series provides a number of security featur es to help protect its configuration screens and your local network from unauthorized access. Although these featur es are optional, it is strongly r [...]

8-62 User’ s Reference Guide T o set up user accounts, in the System Configuration screen select Security and press Retur n. The Security Options screen appears. P P P P r r r r o o o o t t t t e e e e c c c c t t t t ii i i n n n n g g g g t t t t h h h h e e e e S S S S e e e e c c c c u u u u r r r r ii i i t t t t y y y y O O O O p p p p t t[...]

Security 8-63 T o add a new user account, select Add User in the Security Options screen and press Retur n. The Add Name With Write Access screen appears. Follow these steps to configure the new account: 1. Select Enter Name and enter a descriptive name (for example, the user’s first name). 2. Select Enter Password and enter a passwor d. 3. T o[...]

8-64 User’ s Reference Guide T o restrict T elnet access to all of the configuration scr eens, select Enable T elnet Console Access and toggle it to No . A A A A b b b b o o o o u u u u t t t t f f f f ii i i ll l l t t t t e e e e r r r r s s s s a a a a n n n n d d d d f f f f ii i i ll l l t t t t e e e e r r r r s s s s e e e e t t t t s s s[...]

Security 8-65 F F F F ii i i ll l l t t t t e e e e r r r r p p p p r r r r ii i i o o o o r r r r ii i i t t t t y y y y Continuing the customs inspectors analogy , imagine the inspectors lined up to examine a package. If the package matches the first inspector’s criteria, the package is either rejected or passed on to its destination, dependin[...]

8-66 User’ s Reference Guide H H H H o o o o w w w w ii i i n n n n d d d d ii i i v v v v ii i i d d d d u u u u a a a a ll l l f f f f ii i i ll l l t t t t e e e e r r r r s s s s w w w w o o o o r r r r k k k k As described above, a filter applies criteria to an IP packet and then takes one of three actions: A A A A f f f f ii i i ll l l t t[...]

Security 8-67 By matching on a por t number , an IP filter can be applied to selected ser vices, such as T elnet, FTP , and World Wide Web. The tables below show a few common ser vices and their associated por t numbers. P P P P o o o o r r r r t t t t n n n n u u u u m m m m b b b b e e e e r r r r c c c c o o o o m m m m p p p p a a a a r r r r [...]

8-68 User’ s Reference Guide O O O O t t t t h h h h e e e e r r r r f f f f ii i i ll l l t t t t e e e e r r r r a a a a t t t t t t t t r r r r ii i i b b b b u u u u t t t t e e e e s s s s There ar e three other attributes to each filter: ■ The filter’s order (i.e., priority) in the filter set ■ Whether the filter is cur rently act[...]

Security 8-69 Src. Por t: The source por t to match. This is the por t on the sending host that originated the packet. D. Por t: The destination por t to match. This is the por t on the r eceiving host for which the packet is intended. On?: Displays Ye s when the filter is in ef fect or No when it is not. Fwd: Shows whether the filter for wards ([...]

8-70 User’ s Reference Guide F F F F ii i i ll l l t t t t e e e e r r r r ii i i n n n n g g g g e e e e x x x x a a a a m m m m p p p p ll l l e e e e # # # # 2 2 2 2 Suppose a filter is configured to block all incoming IP packets with the sour ce IP address of 200.233.14.0, regar dless of the type of connection or its destination. The filte[...]

Security 8-71 your network may be vulnerable. A A A A n n n n a a a a p p p p p p p p r r r r o o o o a a a a c c c c h h h h t t t t o o o o u u u u s s s s ii i i n n n n g g g g f f f f ii i i ll l l t t t t e e e e r r r r s s s s The ultimate goal of network security is to prevent unauthorized access to the network without compr omising author[...]

8-72 User’ s Reference Guide This header infor mation is what the packet filter uses to make filtering decisions. It is impor tant to note that an IP packet filter does not look into the IP data stream (the User Data fr om above) to make filtering decisions. Generic filters can look into the data. B B B B a a a a s s s s ii i i c c c c p p p[...]

Security 8-73 0 AND 0 = 0 0 AND 1 = 0 1 AND 0 = 0 1 AND 1 = 1 For example: Filter r ule: Deny IP: 163.176.1.15BINARY: 10100011.10110000.00000001.00001111 Mask: 255.255.255.255BINARY:11111111.11111111.11111111.11111111 Incoming Packet: IP 163.176.1.15BINARY: 10100011.10110000.00000001.00001111 If you put the incoming packet and subnet mask together [...]

8-74 User’ s Reference Guide E E E E x x x x a a a a m m m m p p p p ll l l e e e e II I I P P P P F F F F ii i i ll l l t t t t e e e e r r r r s s s s e e e e t t t t s s s s c c c c r r r r e e e e e e e e n n n n This is an example of the Netopia Filter set screen: F F F F ii i i ll l l t t t t e e e e r r r r b b b b a a a a s s s s ii i i c[...]

Security 8-75 E E E E x x x x a a a a m m m m p p p p ll l l e e e e II I I P P P P f f f f ii i i ll l l t t t t e e e e r r r r s s s s E E E E x x x x a a a a m m m m p p p p ll l l e e e e 1 1 1 1 Write a filter rule that blocks the class C subnet r epresented by 200.1.1.0/25 from accessing the net. Incoming packet has the source addr ess of 2[...]

8-76 User’ s Reference Guide This incoming IP packet (10000000) has a source IP addr ess that does not match the network address in the Source IP Addr ess field (00000000) in the Netopia D-Series. This r ule will for ward this packet because the packet does not match. E E E E x x x x a a a a m m m m p p p p ll l l e e e e 3 3 3 3 Incoming packet[...]

Security 8-77 Since the Source IP Network Addr ess in the Netopia D-Series’s filter r ule is 01100000 (=96 decimal), and the source IP addr ess after the logical AND is 01100000, this r ule does match and this packet will not be passed. E E E E x x x x a a a a m m m m p p p p ll l l e e e e 5 5 5 5 Incoming packet has the source addr ess of 200.[...]

8-78 User’ s Reference Guide The procedur e for creating and maintaining filter sets is as follows: 1. Add a new filter set. 2. Create the filters for the new filter set. 3. View , change, or delete individual filters and filter sets. The following sections explain how to execute these steps. A A A A d d d d d d d d ii i i n n n n g g g g a[...]

Security 8-79 N N N N a a a a m m m m ii i i n n n n g g g g a a a a n n n n e e e e w w w w f f f f ii i i ll l l t t t t e e e e r r r r s s s s e e e e t t t t All new filter sets have a default name. The first filter set you add will be called Filter Set 1, the next filter will be Filter Set 2, and so on. T o give a new filter set a dif fe[...]

8-80 User’ s Reference Guide II I I n n n n p p p p u u u u t t t t a a a a n n n n d d d d o o o o u u u u t t t t p p p p u u u u t t t t f f f f ii i i ll l l t t t t e e e e r r r r s s s s — — — — s s s s o o o o u u u u r r r r c c c c e e e e a a a a n n n n d d d d d d d d e e e e s s s s t t t t ii i i n n n n a a a a t t t t ii [...]

Security 8-81 The Display/Change Filter Set screen appears. T o add an input filter , select Add Input Filter to Filter Set . The Add Filter screen appears. (T o add an output filter , select Add Output Filter .) 1. T o make the filter active in the filter set, select Enabled and toggle it to Ye s . If Enabled is toggled to No , the filter can[...]

8-82 User’ s Reference Guide 3. Select T ype . A popup menu of fers the option of either IP or Generic. If you choose IP , continue with the next step. If you choose Generic filtering, skip to the section “Generic filters” on page 8-86 . W arning: Changing the filter Type clears the filter values if any were previously enter ed. 4. Select[...]

Security 8-83 M M M M o o o o v v v v ii i i n n n n g g g g f f f f ii i i ll l l t t t t e e e e r r r r s s s s The Move Input/Output Filter per mits reordering of r ules in a filter set. All operations are done fr om a single popup. ■ In the Display/Change Filter Set screen, select Move Input Filter (or Move Output Filter ). A selection mode[...]

8-84 User’ s Reference Guide D D D D e e e e ll l l e e e e t t t t ii i i n n n n g g g g f f f f ii i i ll l l t t t t e e e e r r r r s s s s T o delete a filter , select Delete Input Filter or Delete Output Filter in the Add Filter Set screen to display a table of filters. Select the filter from the table and pr ess Return to delete it. Pr[...]

Security 8-85 M M M M o o o o d d d d ii i i f f f f y y y y ii i i n n n n g g g g f f f f ii i i ll l l t t t t e e e e r r r r s s s s e e e e t t t t s s s s T o modify a filter set, select Display/Change Filter Set in the Filter Sets screen to display a list of filter sets. Select a filter set from the list and pr ess Return. The Change Fil[...]

8-86 User’ s Reference Guide G G G G e e e e n n n n e e e e r r r r ii i i c c c c f f f f ii i i ll l l t t t t e e e e r r r r s s s s If you chose Generic filtering in step 3. on page 8-82 , the Add Filter screen changes as shown: Note: Generic filters are mor e complicated to use than IP filters. If you plan to filter only IP traf fic, [...]

Security 8-87 A A A A b b b b o o o o u u u u t t t t g g g g e e e e n n n n e e e e r r r r ii i i c c c c f f f f ii i i ll l l t t t t e e e e r r r r s s s s One of the more dif ficult aspects of writing Generic filter sets is deter mining how many bytes into the packet (the Of fset) the value you want to test is. In order to find the Of fs[...]

8-88 User’ s Reference Guide Note the Of fset is set to look at a value six bytes into the packet, the V alue is 0000C8E395000000 and the Mask is set to match only the hexidecimal digits we're inter ested in -- the ones that represent the MAC address. ■ The next item that's commonly evaluated in a Generic filter is the frame type. Th[...]

Security 8-89 The following example fur ther illustrates filter r ule chaining, dif ferent sized masks and the full 8 bytes of the V alue field. Create a filter set designed to block telnet access fr om a given external node (the example below uses 176.163.52.18) to a given internal node (176.163.107.254). The filter r ule summar y (input) shou[...]

8-90 User’ s Reference Guide[...]

Utilities and Diagnostics 9-91 C C C C h h h h a a a a p p p p t t t t e e e e r r r r 9 9 9 9 U U U U t t t t ii i i ll l l ii i i t t t t ii i i e e e e s s s s a a a a n n n n d d d d D D D D ii i i a a a a g g g g n n n n o o o o s s s s t t t t ii i i c c c c s s s s A number of utilities and tests are available for system diagnostic and contr[...]

9-92 User’ s Reference Guide P P P P ii i i n n n n g g g g The Netopia D-Series includes a standard Ping test utility . A Ping test generates IP packets destined for a par ticular (Ping-capable) IP host. Each time the tar get host receives a Ping packet, it r eturns a packet to the original sender . Ping allows you to see whether a par ticular I[...]

Utilities and Diagnostics 9-93 Status: The cur rent status of the Ping test. This item can display the status messages shown in the table below: Packets Out: The number of packets sent by the Ping test. Packets In: The number of retur n packets received from the tar get host. T o be consider ed “on time,” retur n packets are expected back befor[...]

9-94 User’ s Reference Guide Packets Lost: The number of packets unaccounted for , shown in total and as a percentage of total packets sent. This statistic may be updated during the Ping test, and may not be accurate until after the test is over . However , if an escalating one-to-one corr espondence is seen between Packets Out and Packets Lost ,[...]

Utilities and Diagnostics 9-95 4. Select Use Reverse DNS to learn the names of the r outers between the Netopia D-Series and the destination router . The default is Y es. 5. Select ST ART TRACE ROUTE and press Retur n. A scrolling screen will appear that lists the destination, number of hops, IP addresses of each hop, and DNS names, if selected. 6.[...]

9-96 User’ s Reference Guide D D D D ii i i s s s s c c c c o o o o n n n n n n n n e e e e c c c c t t t t T T T T e e e e ll l l n n n n e e e e t t t t c c c c o o o o n n n n s s s s o o o o ll l l e e e e s s s s e e e e s s s s s s s s ii i i o o o o n n n n If you want to close your T elnet Console session, select Disconnect T elnet Consol[...]

Utilities and Diagnostics 9-97 The sections below describe how to update the Netopia D-Series’s fir mware and how to download and upload configuration files. U U U U p p p p d d d d a a a a t t t t ii i i n n n n g g g g f f f f ii i i r r r r m m m m w w w w a a a a r r r r e e e e Fir mware updates may be available periodically from Netopia [...]

9-98 User’ s Reference Guide press Retur n. Y ou will see the following dialog box: ■ Select CANCEL to exit without downloading the file, or select CONTINUE to download the file. The system will reset at the end of the file transfer to put the new fir mware into ef fect. While the system resets, the LEDs will blink on and of f. Caution! ■[...]

Utilities and Diagnostics 9-99 ■ Select GET CONFIG FROM SERVER and press Retur n. Y ou will see the following dialog box: ■ Select CANCEL to exit without downloading the file, or select CONTINUE to download the file. The system will reset at the end of the file transfer to put the new configuration into ef fect. ■ If you choose to downloa[...]

9-100 User’ s Reference Guide U U U U p p p p d d d d a a a a t t t t ii i i n n n n g g g g f f f f ii i i r r r r m m m m w w w w a a a a r r r r e e e e Fir mware updates may be available periodically from Netopia or fr om a site maintained by your or ganization’s network administration. The procedur e below applies whether you are using the[...]

Utilities and Diagnostics 9-101 The system will reset at the end of a successful file transfer to put the new fir mware into ef fect. While the system resets, the LEDs will blink on and of f. Caution! Do not manually power down or reset the Netopia D-Series while it is automatically r esetting or it could be damaged. D D D D o o o o w w w w n n n[...]

9-102 User’ s Reference Guide 2. Select Receive Config from Netopia and press Retur n. The following dialog box appears: 3. Select CANCEL to exit without uploading the file, or select CONTINUE to upload the file. If you choose CONTINUE, you will have ten seconds to use your ter minal emulation software to initiate an XMODEM transfer of the con[...]

P P P P a a a a r r r r t t t t II I I II I I II I I : : : : A A A A p p p p p p p p e e e e n n n n d d d d ii i i x x x x e e e e s s s s[...]

User’ s Reference Guide[...]

T roubleshooting A-105 A A A A p p p p p p p p e e e e n n n n d d d d ii i i x x x x A A A A T T T T r r r r o o o o u u u u b b b b ll l l e e e e s s s s h h h h o o o o o o o o t t t t ii i i n n n n g g g g This appendix is intended to help you troubleshoot pr oblems you may encounter while setting up and using the Netopia D-Series. It also in[...]

A-106 User’ s Reference Guide C C C C o o o o n n n n s s s s o o o o ll l l e e e e c c c c o o o o n n n n n n n n e e e e c c c c t t t t ii i i o o o o n n n n p p p p r r r r o o o o b b b b ll l l e e e e m m m m s s s s C C C C a a a a n n n n ’’ ’ ’ t t t t s s s s e e e e e e e e t t t t h h h h e e e e c c c c o o o o n n n n f [...]

T roubleshooting A-107 H H H H o o o o w w w w t t t t o o o o r r r r e e e e s s s s e e e e t t t t t t t t h h h h e e e e N N N N e e e e t t t t o o o o p p p p ii i i a a a a D D D D - - - - S S S S e e e e r r r r ii i i e e e e s s s s t t t t o o o o f f f f a a a a c c c c t t t t o o o o r r r r y y y y d d d d e e e e f f f f a a a a u[...]

A-108 User’ s Reference Guide T T T T e e e e c c c c h h h h n n n n ii i i c c c c a a a a ll l l s s s s u u u u p p p p p p p p o o o o r r r r t t t t Netopia, Inc. is committed to providing its customers with r eliable products and documentation, backed by excellent technical suppor t. B B B B e e e e f f f f o o o o r r r r e e e e c c c c[...]

T roubleshooting A-109 Netopia Bulletin Board Ser vice: 1 510-865-1321 O O O O n n n n ll l l ii i i n n n n e e e e p p p p r r r r o o o o d d d d u u u u c c c c t t t t ii i i n n n n f f f f o o o o r r r r m m m m a a a a t t t t ii i i o o o o n n n n Product infor mation can be found in the following: Netopia World Wide W eb ser ver via htt[...]

A-110 User’ s Reference Guide[...]

Binary Conversion T able B-111 A A A A p p p p p p p p e e e e n n n n d d d d ii i i x x x x B B B B B B B B ii i i n n n n a a a a r r r r y y y y C C C C o o o o n n n n v v v v e e e e r r r r s s s s ii i i o o o o n n n n T T T T a a a a b b b b ll l l e e e e This table is provided to help you choose subnet numbers and host numbers for IP an[...]

B-112 User’ s Reference Guide 23 10111 55 110111 87 1010111 119 1110111 24 11000 56 111000 88 1011000 120 1111000 25 11001 57 111001 89 1011001 121 1111001 26 11010 58 111010 90 1011010 122 1111010 27 11011 59 111011 91 1011011 123 1111011 28 11100 60 111100 92 1011100 124 1111100 29 11101 61 111101 93 1011101 125 1111101 30 11110 62 111110 94 10[...]

Binary Conversion T able B-113 146 10010010 178 10110010 210 11010010 242 11110010 147 10010011 179 10110011 211 11010011 243 11110011 148 10010100 180 10110100 212 11010100 244 11110100 149 10010101 181 10110101 213 11010101 245 11110101 150 10010110 182 10110110 214 11010110 246 11110110 151 10010111 183 10110111 215 11010111 247 11110111 152 100[...]

B-114 User’ s Reference Guide[...]

Further Reading C-115 A A A A p p p p p p p p e e e e n n n n d d d d ii i i x x x x C C C C F F F F u u u u r r r r t t t t h h h h e e e e r r r r R R R R e e e e a a a a d d d d ii i i n n n n g g g g Alexander , S. & R. Droms, DHCP Options and BOOTP V endor Extensions , RFC 2131, Silicon Graphics, Inc., Bucknell University , Mar ch 1997. An[...]

C-116 User’ s Reference Guide Garcia-Luna-Aceves, J.J. "Loop-Fr ee Routing Using Dif fusing Computations." Publication pending in IEEE/ACM T ransactions on Networking, V ol. 1, No. 1, 1993. Gar finkel, Simson. PGP: Pretty Good Privacy Sebastopol, CA: O’Reilly & Associates, 1991. A guide to the fr ee data encr yption program PGP a[...]

Further Reading C-117 Sidhu, G.S., R.F . Andrews, and A.B. Oppenheimer . Inside AppleT alk, 2nd ed. Reading, MA: Addison-Wesley Publishing Company , 1990. Siyan, Karanjit. Internet Fir ewall and Network Security Indianapolis, IN: New Riders Publishing, 1995. Similar to the Chapman and Zwicky book. Smith, Philip. Frame Relay Principles and Applicati[...]

C-118 User’ s Reference Guide[...]

T echnical Specifications and Safety Information D-119 A A A A p p p p p p p p e e e e n n n n d d d d ii i i x x x x D D D D T T T T e e e e c c c c h h h h n n n n ii i i c c c c a a a a ll l l S S S S p p p p e e e e c c c c ii i i f f f f ii i i c c c c a a a a t t t t ii i i o o o o n n n n s s s s a a a a n n n n d d d d S S S S a a a a f f [...]

D-120 User’ s Reference Guide HD-15 V .35 Pin 1 Pin A (not used) Pin 2 Pin B Signal Ground Pin 3 Pin C Request to Send Pin 4 Pin D Clear to Send Pin 5 Pin E Data Set Ready Pin 6 Pin F Data Car rier Detect Pin 7 Pin H Data T er minal Ready Pin 8 Pin J (not used) Pin 9 Pin K (not used) Pin 10 Pin L (not used) Pin 11 Pin M (not used) Pin 12 Pin N (n[...]

T echnical Specifications and Safety Information D-121 P P P P ii i i n n n n o o o o u u u u t t t t s s s s f f f f o o o o r r r r D D D D 3 3 3 3 2 2 2 2 3 3 3 3 2 2 2 2 S S S S p p p p ll l l ii i i t t t t t t t t e e e e r r r r 1 2 3 4 5 6 7 8 B8 B7 B6 B5 B4 B3 B2 B1 A8 A7 A6 A5 A4 A3 A2 A1 TCP2 TCN2 TCP1 RCP1 (TIP1) RCN1 (RING1) RCP2 (TIP[...]

D-122 User’ s Reference Guide D D D D e e e e s s s s c c c c r r r r ii i i p p p p t t t t ii i i o o o o n n n n Dimensions: 124.0 cm (w) x 20.0 cm (d) x 5.3 cm (h) 9.4” (w) x 7.9” (d) x 2.1” (h) Communications inter faces: The Netopia D-Series DSL DSU has an RJ-45 jack for IDSL or SDSL connections; an 8–por t 10Base-T Ether net hub fo[...]

T echnical Specifications and Safety Information D-123 R R R R e e e e g g g g u u u u ll l l a a a a t t t t o o o o r r r r y y y y n n n n o o o o t t t t ii i i c c c c e e e e s s s s Warning This is a Class A product. In a domestic envir onment this product may cause radio inter fer ence, in which case the user may be requir ed to take adequ[...]

D-124 User’ s Reference Guide Users should ensure for their own pr otection that the electrical ground connections of the power utility , telephone lines, and internal metallic water pipe system, if pr esent, are connected together . This precaution may be par ticularly impor tant in r ural areas. Caution Users should not attempt to make such con[...]

Glossary-125 G G G G ll l l o o o o s s s s s s s s a a a a r r r r y y y y access line: A telephone line r eaching from the telephone company central of fice to a point usually on your premises. Beyond this point the wir e is considered inside wiring. analog: In telecommunications, telephone transmission and/or switching that is not digital. An a[...]

126 User’ s Reference Guide byte: A group of bits, nor mally eight, which repr esent one data character . CallerID: See CND. CCITT (Comite Consultatif International T elegraphique et T elephonique): Inter national Consultative Committee for T elegraphy and T elephony , a standards or ganization that devises and pr oposes recommenda- tions for int[...]

Glossary-127 DTE (Data T erminal Equipment): T er m defined by standar ds committees, that applies to communications equipment, typically personal computers or data ter minals, as distinct from other devices that attach to the network, typically modems or printers (DCE). The distinction generally refers to which pins in an RS-232-C connection tran[...]

128 User’ s Reference Guide internet: A set of networks connected together by r outers. This is a general term, not to be confused with the lar ge, multi-or ganizational collection of IP networks known as the Internet. An inter net is sometimes also known as an internetwork. internet address, IP addr ess: Any computing device that uses the Inter [...]

Glossary-129 network administrator: A person who coor dinates the design, installation, and management of a network. A network administrator is also responsible for tr oubleshooting and for adding new users to the network. network log: A r ecord of the names of devices, location of wire pairs, wall-jack numbers, and other infor mation about the net[...]

130 User’ s Reference Guide RJ-45: A telephone-industr y standar d connector type usually containing eight pins. router: A device that suppor ts network communications. A router can connect identical network types, such as LocalT alk-to-LocalT alk, or dissimilar network types, such as LocalT alk-to-Ethernet. However—unless a gateway is availabl[...]

Glossary-131 TFTP (Trivial File T ransfer Protocol): A pr otocol used to transfer files between IP nodes. TFTP is often used to transfer fir mware and configuration infor mation from a UNIX computer acting as a TFTP ser ver to an IP networking device, such as the Netopia ISDN Router . thicknet: Industr y jar gon for 10Base5 coaxial cable, the or[...]

132 User’ s Reference Guide[...]

Index-133 II I I n n n n d d d d e e e e x x x x Numerics 10Base-T 24 10Base-T , connecting 24 A advanced configuration features 41 application software 23 B back panel 16 por ts 17 C capabilities 12 community strings 58 configuration troubleshooting PC 105 configuration files downloading with TFTP 98 downloading with XMODEM 101 uploading with [...]

Index-134 defined 64 deleting 84 disadvantages of 70 Generic 86 input 80 IP 66 modifying 83 output 80 using 71 , 77 viewing 83 fir mware files updating with TFTP 97 updating with XMODEM 100 fur ther reading 115 G general statistics 53 Generic filters 86 Glossar y 125 H how to reach us 108 I IMUX 12 , 46 Inverse multiplexing 46 IP filters 66 IP[...]

Index-135 Simple Network Management Protocol, see SNMP SNMP community strings 58 MIBs suppor ted 57 setup screen 58 traps 59 src. por t 69 statistics, W AN 53 suppor t technical 108 T TCP/IP stack 23 technical suppor t 108 telnet 37 access 40 , 63 ter minal emulation software configuring 38 default settings 37 TFTP defined 96 downloading configu[...]

Index-136[...]

Limited Warranty and Limitation of Remedies-137 L L L L ii i i m m m m ii i i t t t t e e e e d d d d W W W W a a a a r r r r r r r r a a a a n n n n t t t t y y y y a a a a n n n n d d d d L L L L ii i i m m m m ii i i t t t t a a a a t t t t ii i i o o o o n n n n o o o o f f f f R R R R e e e e m m m m e e e e d d d d ii i i e e e e s s s s Neto[...]

138 User’ s Reference Guide[...]