Farallon Communications R9100 manual

Net opia ™ R9100 Ethernet R outer f or DSL and Cable Modems User’s Refer ence Guide[...]

C o p yright ©1997–98, Netopia, Inc., v .0300 All rights reser ved. Printed in the U.S.A. This manual and any associated ar twork, software, and pr oduct designs are copyrighted with all rights reser ved. Under the copyright laws such materials may not be copied, in whole or par t, without the prior written consent of Netopia, Inc. Under the law[...]

G B Part I: Getting Started Chapter 1 — Introduction .......................................................... 1-1 Over view ....................................................................... 1-1 Features and capabilities ............................................... 1-1 How to use this guide ..............................................[...]

ii User’ s Reference Guide Connecting to an Ethernet network .................................. 4-5 10Base-T ............................................................. 4-5 Adding an external modem ............................................. 4-7 Connecting to a LocalT alk network ................................. 4-8 Wiring guidelines for Pho[...]

Contents iii G Part II: Advanced Configuration Chapter 8 — W AN and System Configuration ............................. 8-1 W AN configuration .......................................................... 8-1 Creating a new Connection Pr ofile ................................... 8-3 Default Answer Profile for Dial-in Connections .................[...]

iv User’ s Reference Guide Chapter 10 — IPX Setup ......................................................... 10-1 IPX features ................................................................ 10-1 IPX definitions ............................................................. 10-1 Internetwork Packet Exchange (IPX) ..................... 10-1 IPX [...]

Contents v G System Infor mation .................................................... 12-12 SNMP ....................................................................... 12-12 The SNMP Setup screen ................................... 12-13 SNMP traps ..................................................... 12-14 Smar tView .............................[...]

vi User’ s Reference Guide Firewall tutorial .......................................................... 13-29 General firewall ter ms ...................................... 13-29 Basic IP packet components ............................. 13-29 Basic protocol types ......................................... 13-29 Firewall design r ules .............[...]

Contents vii G How to reach us ................................................... A-4 Appendix B — Understanding IP Addressing ..............................B-1 What is IP?.................................................................... B-1 About IP addressing ....................................................... B-1 Subnets and subnet mas[...]

viii User’ s Reference Guide Agency approvals ........................................................... F-3 Regulator y notices ............................................... F-3 Impor tant safety instructions ................................ F-4 Glossar y .................................................................................. GL-1 [...]

P P P P a a a a r r r r t t t t II I I : : : : G G G G e e e e t t t t t t t t ii i i n n n n g g g g S S S S t t t t a a a a r r r r t t t t e e e e d d d d[...]

User’ s Reference Guide[...]

Introduction 1-1 C C C C h h h h a a a a p p p p t t t t e e e e r r r r 1 1 1 1 II I I n n n n t t t t r r r r o o o o d d d d u u u u c c c c t t t t ii i i o o o o n n n n Overview The Netopia R9100 Ethernet Router is a full-featur ed, stand-alone, multiprotocol br oadband router for connecting diverse local area networks (LANs) to the Inter net[...]

1-2 User’ s Reference Guide ■ Analog dial-in using an external modem connected to the Auxiliar y por t. (A vailable as a separate add-on kit; order TER/AD1.) ■ AppleT alk suppor t (available as a separate add-on AppleT alk kit (order TER/A T1), including a fir mware feature set enhancement and custom HD-15 dual RJ-11 PhoneNET® connector) al[...]

Setting Up Internet Services 2-1 C C C C h h h h a a a a p p p p t t t t e e e e r r r r 2 2 2 2 S S S S e e e e t t t t t t t t ii i i n n n n g g g g U U U U p p p p II I I n n n n t t t t e e e e r r r r n n n n e e e e t t t t S S S S e e e e r r r r v v v v ii i i c c c c e e e e s s s s This chapter describes how to obtain and set up Internet[...]

2-2 User’ s Reference Guide Endorsements Consider recommendations fr om colleagues and reviews in publications. Deciding on an ISP account Y our ISP may of fer various Internet access account plans. Typically , these plans var y by usage charges and the number of host IP addresses supplied. Evaluate your networking needs and discuss them with you[...]

Setting Up Internet Services 2-3 Local LAN IP address information to obtain Y our ISP will need to pr ovide you with the following infor mation: ■ The default gateway IP address ■ Remote IP address ■ Local W AN IP address and subnet mask ■ Primar y and secondar y domain name ser ver (DNS) IP addresses ■ Domain name (usually the same as th[...]

2-4 User’ s Reference Guide[...]

Making the Physical Connections 3-1 C C C C h h h h a a a a p p p p t t t t e e e e r r r r 3 3 3 3 M M M M a a a a k k k k ii i i n n n n g g g g t t t t h h h h e e e e P P P P h h h h y y y y s s s s ii i i c c c c a a a a ll l l C C C C o o o o n n n n n n n n e e e e c c c c t t t t ii i i o o o o n n n n s s s s This section tells you how to [...]

3-2 User’ s Reference Guide What you need Locate all items that you need for the installation. Included in your router package ar e: ■ The Netopia R9100 Ethernet Router ■ A power adapter and cord with a mini-DIN8 connector ■ Two RJ-45 cables (one for the Ethernet por t on your PC; one for the Line por t on the router) ■ A dual DB-9 and mi[...]

Making the Physical Connections 3-3 3. Connect one end of one of the RJ-45 cables to any of the Ethernet hub por ts on the router , and the other end to the Ethernet por t of your PC. (If you are connecting the r outer to an existing Ethernet hub, use Ether net por t #1 on the router and set the crossover switch to the Uplink position.) Y ou should[...]

3-4 User’ s Reference Guide Netopia R9100 Ethernet Router status lights The figure below r epresents the Netopia R9100 status light (LED) panel. Netopia R9100 LED front panel The following table summarizes the meaning of the various LED states and colors: When this happens... the LEDs... The Ethernet WAN inter face is operational 3 is green . Th[...]

Connecting to Y our Local Area Network 4-1 C C C C h h h h a a a a p p p p t t t t e e e e r r r r 4 4 4 4 C C C C o o o o n n n n n n n n e e e e c c c c t t t t ii i i n n n n g g g g t t t t o o o o Y Y Y Y o o o o u u u u r r r r L L L L o o o o c c c c a a a a ll l l A A A A r r r r e e e e a a a a N N N N e e e e t t t t w w w w o o o o r r r[...]

4-2 User’ s Reference Guide Network Model The following diagrams illustrate network models for typical deployments of the Netopia R9100 Ethernet Router as an Internet access device. Before With a DSL or cable modem, you can connect a single computer to the Internet. using a DSL modem using a cable modem[...]

Connecting to Y our Local Area Network 4-3 After Using the Netopia R9100 Ethernet Router, you can connect multiple computers to the Inter net with a single user account. using a DSL modem with a Netopia R9100 using a cable modem with a Netopia R9100 While this network model is typical, other network models are possible. For example, you may choose [...]

4-4 User’ s Reference Guide Readying computers on your local network PC and Macintosh computers must have cer tain components installed before they can communicate through the Netopia R9100. The following illustration shows the minimal requir ements for a typical PC or Macintosh computer . Application software: This is the softwar e you use to se[...]

Connecting to Y our Local Area Network 4-5 Connecting to an Ethernet network The Netopia R9100 suppor ts Ethernet connections through its eight Ether net por ts. The router automatically detects which Ethernet por t is in use. Y ou can connect either 10Base-T or EtherW ave Ether net networks to the Netopia R9100. The following table displays some i[...]

4-6 User’ s Reference Guide The Netopia R9100 in a 10Base-T network T o connect your 10Base-T network to the Netopia R9100 thr ough an Ethernet por t, use a 10Base-T cable with RJ-45 connectors. If you have more than eight devices to connect, you can attach additional devices using either a 10Base-T hub or an EtherW ave daisy chain, or some combi[...]

Connecting to Y our Local Area Network 4-7 Adding an external modem Y ou may want to add an exter nal modem to your Auxiliar y por t. Remote modem ter minal emulator setups can dial in to the modem line and establish a remote console session. This allows Netopia Inc.'s “Up and Running, Guaranteed!” depar tment or other administrator with t[...]

4-8 User’ s Reference Guide Connecting to a LocalT alk network If you have purchased the AppleT alk featur e expansion kit, you can also connect the router to an AppleT alk network that uses either Ethernet or LocalT alk. Refer to the sheet of optional featur e set add-ons in your Netopia R9100 documentation folio. The AppleT alk feature expansio[...]

Connecting to Y our Local Area Network 4-9 Wiring guidelines for PhoneNET cabling For detailed configuration instr uctions see “AppleT alk Setup” on page 11-1 . T opology 22 gauge .642 mm 24 gauge .510 mm 26 gauge .403 mm Daisy chain n/a n/a 1800 ft. 549 m Backbone 4500 ft. 1372 m 3000 ft. 229 m 1800 ft. 549 m 4-branch passive star* 1125 ft. 3[...]

4-10 User’ s Reference Guide[...]

Setting up your Router with the SmartStart Wizard 5-1 C C C C h h h h a a a a p p p p t t t t e e e e r r r r 5 5 5 5 S S S S e e e e t t t t t t t t ii i i n n n n g g g g u u u u p p p p y y y y o o o o u u u u r r r r R R R R o o o o u u u u t t t t e e e e r r r r w w w w ii i i t t t t h h h h t t t t h h h h e e e e S S S S m m m m a a a a r [...]

5-2 User’ s Reference Guide Before running SmartStart Be sure you have connected the cables and power sour ce as described in Step 1 “Connect the Router” guide contained in your Netopia folio. Before you launch the Smar tStar t application, make sure your computer meets the following requirements: PC Macintosh System software Windows 95, 98, [...]

Setting up your Router with the SmartStart Wizard 5-3 Setting up your Router with the SmartStart Wizard The Smar tStar t Wizar d is tailored for your platfor m, but it works the same way on either a PC or a Macintosh. Inser t the Netopia CD, and in the desktop navigation screen that appears, launch the Smar tStar t Wizar d application. SmartStart W[...]

5-4 User’ s Reference Guide Easy option When the test succeeds, Smar tStar t indicates success. If the test fails, the wizard displays an er r or screen. If the test fails, check the following: ■ Check your cable connections. Be sure you have connected the r outer and the computer properly , using the cor rect cables. Refer to the Step 1 “Con[...]

Setting up your Router with the SmartStart Wizard 5-5 When the test is successful, Smar tStar t pr esents you with the “Additional Configuration screen,” shown below . Advanced option Additional Configuration screen. If you have a r outer that has a per manent unswitched connection to your ISP , such as an Ethernet WAN inter face router attac[...]

5-6 User’ s Reference Guide Sharing the Connection Configuring TCP/IP on Windows 95, 98, or NT computers Configuring TCP/IP on a Windows computer requir es the following: ■ An Ethernet car d (also known as a network adapter) ■ The TCP/IP protocol must be “bound” to the adapter or car d Known IP Address scr een. Smar tStar t displays a r[...]

Setting up your Router with the SmartStart Wizard 5-7 Dynamic configuration (recommended) If you configure your Netopia R9100 using Smar tStar t, you can accept the dynamic IP address assigned by your router . The Dynamic Host Configuration Pr otocol (DHCP) ser ver , which enables dynamic addressing, is enabled by default in the router . If your[...]

5-8 User’ s Reference Guide Static configuration (optional) If you are manually configuring for a fixed or static IP addr ess, per form the following: 1. Go to Star t Menu/Settings/Control Panels and double click the Network icon. From the Network components list, select the Configuration tab. 2. Select TCP/IP-->Y our Network Car d. Then s[...]

Setting up your Router with the SmartStart Wizard 5-9 4. Click OK in this window , and the next window . When pr ompted, reboot the computer . Note: Y ou can also use these instr uctions to configur e other computers on your network with manual or static IP addresses. Be sur e each computer on your network has its own IP address. Click on the DNS [...]

5-10 User’ s Reference Guide Configuring TCP/IP on Macintosh computers The following is a quick guide to configuring TCP/IP for MacOS computers. Configuring TCP/IP in a Macintosh computer requir es the following: ■ Y ou must have either Open T ranspor t or Classic Networking (MacTCP) installed. Note: If you want to use the Dynamic Host Con?[...]

Setting up your Router with the SmartStart Wizard 5-11 Static configuration (optional) 3. In the TCP/IP window or in the MacTCP/More window , select or type information into the fields as shown in the following table. 4. Close the TCP/IP or MacTCP control panel and save the settings. 5. If you are using MacTCP , you must restar t the computer . I[...]

5-12 User’ s Reference Guide Dynamic configuration using MacIP (optional) If you want to use MacIP to dynamically assign IP addresses to the Macintosh computers on your network you must install the optional AppleT alk feature set kit. Note: Y ou cannot use MacIP dynamic configuration to configur e your Netopia R9100 Ethernet Router because you[...]

Setting up your Router with the SmartStart Wizard 5-13 Using Classic Networking (MacTCP) 1. Go to the Apple Menu. Select Control Panels and then Network . 2. In the Network window , select EtherT alk . 3. Go back to the Apple menu. Select Control Panels and then MacTCP . 4. Select EtherT alk . From the pull-down menu under EtherT alk, select an ava[...]

5-14 User’ s Reference Guide[...]

Console-Based Management 6-1 C C C C h h h h a a a a p p p p t t t t e e e e r r r r 6 6 6 6 C C C C o o o o n n n n s s s s o o o o ll l l e e e e - - - - B B B B a a a a s s s s e e e e d d d d M M M M a a a a n n n n a a a a g g g g e e e e m m m m e e e e n n n n t t t t Console-based management is a menu-driven inter face for the capabilities [...]

6-2 User’ s Reference Guide more than one ser vice provider or r emote site. ■ The System Configuration menus display and per mit changing: ■ Network protocols setup. See “IP Setup and Network Addr ess T ranslation” on page 9-1 , “IPX Setup” on page 10-1 , and “AppleT alk Setup” on page 11-1 . ■ Filter sets (firewalls). See ?[...]

Console-Based Management 6-3 Configuring T elnet software If you are configuring your r outer using a T elnet session, your computer must be r unning a T elnet software program. ■ If you connect a PC with Microsoft Windows, you can use a Windows T elnet application or simply r un T elnet from the Star t menu. ■ If you connect a Macintosh comp[...]

6-4 User’ s Reference Guide Launch your ter minal emulation software and configur e the communications software for the values shown in the table below . These ar e the default communication parameters that the Netopia R9100 uses. Navigating thr ough the console screens Use your keyboard to navigate the Netopia R9100’s configuration scr eens,[...]

Easy Setup 7-1 C C C C h h h h a a a a p p p p t t t t e e e e r r r r 7 7 7 7 E E E E a a a a s s s s y y y y S S S S e e e e t t t t u u u u p p p p This chapter describes how to use the Easy Setup console screens on your Netopia R9100 Ether net Router. After completing the Easy Setup console screens, your r outer will be ready to connect to the [...]

7-2 User’ s Reference Guide A screen similar to the following Main Menu appears: If you do not see the Main Menu, verify that: ■ The computer used to view the console screen has its serial por t connected to the Netopia R9100’s Console por t or an Ethernet connection to one of its Ether net por ts. See “Connecting a console cable to your ro[...]

Easy Setup 7-3 Quick Easy Setup connection path This section may be all you need to do to configure your Netopia R9100 Ether net Router to connect to the Internet. If your ISP supports DHCP Y our Netopia R9100 Ether net Router comes preconfigur ed with the ability to accept an IP address dynamically assigned by your ISP . T o do this, it acts as [...]

7-4 User’ s Reference Guide The Main Menu appears. 2. Select the first item on the Main Menu list, Easy Setup . Press Retur n to bring up the Easy Setup menu screen. 3. Press the Down ar r ow key until the editable field labelled Local W AN IP Addr ess is highlighted. 4. Type the IP Address your ISP gave you. Pr ess Return. The next field Loca[...]

Easy Setup 7-5 Mor e Easy Setup options Y ou always begin Easy Setup by selecting Easy Setup in the Main Menu, then pressing Retur n. The W AN Ethernet Configuration scr een appears. W AN Ethernet Configuration The W AN Ethernet Configuration scr een is where you configur e the parameters that control the Netopia R9100’s connection to a speci[...]

7-6 User’ s Reference Guide IP Easy Setup The IP Easy Setup screen is wher e you enter infor mation about your Netopia Router’s: ■ Ethernet IP addr ess ■ Ethernet Subnet mask ■ Domain Name ■ Domain Name Ser ver IP address ■ Default gateway IP address ■ Whether to ser ve IP addresses or not Consult with your network administrator to [...]

Easy Setup 7-7 Note: If the Netopia R9100’s W AN inter face is acting as a DHCP client, do not change the default settings for Steps 3, 4, and 5. 4. Select Primar y Domain Name Ser ver and enter the IP address your ISP has given you. An alter nate or Secondar y Domain Name Ser ver field will appear , where you can enter a secondar y DNS IP addre[...]

7-8 User’ s Reference Guide 2. Select CONTINUE to restar t the Netopia Router and have your selections take ef fect. Note: Y ou can also r estar t the system at any time by using the Restar t System utility (see “Restar ting the system” on page 14-12 ) or by turning the Netopia Router of f and on with the power switch. Easy Setup is now compl[...]

P P P P a a a a r r r r t t t t II I I II I I : : : : A A A A d d d d v v v v a a a a n n n n c c c c e e e e d d d d C C C C o o o o n n n n f f f f ii i i g g g g u u u u r r r r a a a a t t t t ii i i o o o o n n n n[...]

User’ s Reference Guide[...]

W AN and System Configuration 8-1 C C C C h h h h a a a a p p p p t t t t e e e e r r r r 8 8 8 8 W W W W A A A A N N N N a a a a n n n n d d d d S S S S y y y y s s s s t t t t e e e e m m m m C C C C o o o o n n n n f f f f ii i i g g g g u u u u r r r r a a a a t t t t ii i i o o o o n n n n Console-based management is a menu-driven inter face [...]

8-2 User’ s Reference Guide ■ Address Translation Enabled allows you to specify whether or not the router per for ms Network Address T ranslation (NA T) on the Ether net WAN por t. NA T is enabled by default. ■ Local W AN IP Address allows you to manually configure an IP addr ess for use on the Ether net W AN por t. The value 0.0.0.0 indicat[...]

W AN and System Configuration 8-3 If you want the Netopia R9100 to adver tise its routing table to other routers via RIP , select T ransmit RIP and select v1 , v2 (broadcast) , or v2 (multicast) from the popup menu. With T ransmit RIP v1 selected, the Netopia R9100 will generate RIP packets only to other RIP v1 routers. With T ransmit RIP v2 (broa[...]

8-4 User’ s Reference Guide The Add Connection Profile screen appears. On a Netopia R9100 Ethernet Router you can add up to 15 mor e connection profiles, for a total of 16, but you can only use one at a time. 1. Select Profile Name and enter a name for this connection pr ofile. It can be any name you wish. For example: the name of your ISP . [...]

W AN and System Configuration 8-5 4. T oggle or enter any IP Parameters you r equire and r eturn to the Add Connection Pr ofile screen by pr essing Escape. For more infor mation, see “IP Setup and Network Addr ess T ranslation” on page 9-1 . 5. If you will be connecting with an IPX remote network, toggle IPX Enabled to Y es, and pr ess Return[...]

8-6 User’ s Reference Guide 7. Select Datalink Options and press Retur n. The Datalink Options screen appears. Y ou can accept the defaults, or change them if you wish. Y ou can also specify user name and password for both outgoing and incoming calls. the Send User Name/Password parameters ar e used to specify your identity when dialing out to a [...]

W AN and System Configuration 8-7 Y ou can set the Idle timeout duration to be gr eater or less than the default 300 seconds (five minutes). When you are finished with these entries, pr ess Escape to retur n to the Add Connection Profile screen. 9. Select ADD PROFILE NOW and press Retur n. Y our new Connection Pr ofile will be added. If you wa[...]

8-8 User’ s Reference Guide If an incoming call is not requir ed to match a connection profile, and fails to do so, it is accepted as a standar d IP connection. Accepted, unmatched calls adopt the call parameter values set in the Default Answer Profile. T o deter mine the call parameter values that unmatched calls will adopt, customize the Defa[...]

W AN and System Configuration 8-9 Class A addresses ar e assumed to have a mask of 255.0.0.0 Class B addresses ar e assumed to have a mask of 255.255.0.0 Class C addresses ar e assumed to have a mask of 255.255.255.0. Class C address ranges ar e generally the most common subnet allocated. If a remote network has a non-standar d mask (that is, it u[...]

8-10 User’ s Reference Guide The console screen will open to the Main Menu , similar to the screen shown below: Navigating thr ough the system configuration screens T o help you find your way to par ticular screens, some sections in this guide begin with a graphical path guide similar to the following example: This par ticular path guide shows [...]

W AN and System Configuration 8-11 System configuration featur es The Netopia R9100 Ethernet Router’s default settings may be all you need to configur e your Netopia R9100. Some users, however , require advanced settings or pr efer manual control over the default selections. For these users, the Netopia R9100 provides system configuration opt[...]

8-12 User’ s Reference Guide Filter sets (firewalls) These screens allow you to configur e security on your network by means of filter sets and a basic firewall. ■ Details are given in “Security” on page 13-1 . IP addr ess serving These screens allow you to configur e IP address ser ving on your network by means of DHCP , WANIP , BootP[...]

W AN and System Configuration 8-13 T o go to the Console Configuration scr een, select Console Configuration in the System Configuration screen. Follow these steps to change a parameter’s value: 1. Select the parameter you want to change. 2. Select a new value for the parameter . Retur n to step 1 if you want to configure another parameter .[...]

8-14 User’ s Reference Guide Logging Y ou can configur e a UNIX-compatible syslog client to repor t a number of subsets of the events entered in the router’s WAN Event Histor y . See “W AN Event Histor y” on page 12-6 .The Syslog client (for the PC only) is supplied as a .ZIP file on the Netopia CD. Select Logging from the System Configu[...]

W AN and System Configuration 8-15 The following screen shows a sample syslog dump of WAN events: Nov 5 10:14:06 tsnext.netopia.com Link 1 down: PPP PAP failure Nov 5 10:14:06 tsnext.netopia.com >>Issued Speech Setup Request from our DN: 5108645534 Nov 5 10:14:06 tsnext.netopia.com Requested Disc. from DN: 917143652500 Nov 5 10:14:06 tsnext.[...]

8-16 User’ s Reference Guide[...]

IP Setup and Network Address T ranslation 9-1 C C C C h h h h a a a a p p p p t t t t e e e e r r r r 9 9 9 9 II I I P P P P S S S S e e e e t t t t u u u u p p p p a a a a n n n n d d d d N N N N e e e e t t t t w w w w o o o o r r r r k k k k A A A A d d d d d d d d r r r r e e e e s s s s s s s s T T T T r r r r a a a a n n n n s s s s ll l l a [...]

9-2 User’ s Reference Guide Network Address T ranslation works by remapping the sour ce IP addr ess of traf fic from the LAN to a single static or dynamically assigned IP address shown to the r emote side of the router . When NA T is enabled, the Netopia R9100 can use either a statically assigned IP address or one dynamically assigned each time [...]

IP Setup and Network Address T ranslation 9-3 Using Network Addr ess T ranslation The following procedur e describes how to use Network Address T ranslation. 1. Pick a network number for your local network (refer r ed to as the inter nal network). This can be any IP address range you want. The Netopia R9100 Ether net Router has a default IP address[...]

9-4 User’ s Reference Guide Or , fr om the Main Menu, select Easy Setup . The Easy Setup W AN Ether net Configuration screen appears. T oggle Addr ess Translation Enabled to Ye s or No (Y es to enable NA T) and press Retur n. For more infor mation see Appendix B, “Understanding IP Addr essing” and Appendix C, “Understanding Netopia NA T Be[...]

IP Setup and Network Address T ranslation 9-5 Associating port numbers with nodes When an IP client such as a Netscape Navigator or Microsoft Inter net Explorer, wants to establish a session with an IP ser ver such as a W eb ser ver , the client machine must know the IP addr ess to use and the TCP ser vice por t wher e the traf fic is to be dir ec[...]

9-6 User’ s Reference Guide IP setup The IP Setup options screen is wher e you configure the Ether net side of the Netopia R9100. The infor mation you enter here contr ols how the router r outes IP traf fic. Consult your network administrator or Internet ser vice provider to obtain the IP setup infor mation (such as the Ethernet IP addr ess, Et[...]

IP Setup and Network Address T ranslation 9-7 The Netopia R9100 Ethernet Router suppor ts multiple IP subnets on the Ether net inter face. Y ou may want to configure multiple IP subnets to ser vice more hosts that ar e possible with your primar y subnet. It is not always possible to obtain a lar ger subnet from your ISP . For example, if you alrea[...]

9-8 User’ s Reference Guide Expor ts, Add Expor t, and Delete Expor t. ■ Select Add Expor t . The Add Expor ted Ser vice screen appears. Exported Services (Local Port to IP Address Remapping) Show/Change Exports... Add Export... Delete Export... Return/Enter to configure UDP/TCP Port-to-IP Address redirection. Add Exported Service Service... Lo[...]

IP Setup and Network Address T ranslation 9-9 ■ Select Ser vice . A pop-up menu of ser vices and por ts appears. 5. Select any of the ser vices/por ts and pr ess Return to associate it with the addr ess of a ser ver on your local area network. For example, if we select www-http 80 , press Retur n, and type 10.0.0.2 , the Netopia R9100 redir ects [...]

9-10 User’ s Reference Guide Press Escape when you ar e finished configuring expor ted ser vices. Y ou are r eturned to the IP Setup screen. ■ If you select Filter Sets you will be taken directly to the screen for configuring IP packet filters. For infor mation see “About filters and filter sets,” beginning on page 13-4 . IP subnets T[...]

IP Setup and Network Address T ranslation 9-11 Note: Y ou need not use this scr een if you have only a single Ethernet IP subnet. In that case, you can continue to enter or edit the IP address and subnet mask for the single subnet on the IP Setup scr een. This screen displays up to eight r ows of two editable columns, preceded by a r ow number betw[...]

9-12 User’ s Reference Guide If you have configured multiple Ether net IP subnets, the IP Setup screen changes slightly: The IP address and Subnet mask items ar e hidden, and the “Define Additional Subnets...” item becomes “Subnet Configuration...”. If you select Subnet Configuration , you will retur n to the IP Subnets screen that al[...]

IP Setup and Network Address T ranslation 9-13 The Static Routes screen will appear . Viewing static r outes T o display a view-only table of static r outes, select Display/Change Static Route . The table shown below will appear . The table has the following columns: Dest. Network: The network IP address of the destination network. Static Routes Di[...]

9-14 User’ s Reference Guide Subnet Mask: The subnet mask associated with the destination network. Next Gateway: The IP address of the r outer that will be used to reach the destination network. Priority: An indication of whether the Netopia R9100 will use the static route when it conflicts with infor mation received fr om RIP packets. Enabled: [...]

IP Setup and Network Address T ranslation 9-15 Route Via RIP and toggle it to Ye s . When Adver tise Route Via RIP is toggled to Y es, a new item called RIP Metric appears below Adver tise Route Via RIP . With RIP Metric you set the number of routers, fr om 1 to 15, between the sending router and the destination router . The maximum number of r out[...]

9-16 User’ s Reference Guide IP addr ess serving In addition to being a router , the Netopia R9100 is also an IP address ser ver . There ar e four protocols it can use to distribute IP addresses. ■ The first, called Dynamic Host Configuration Protocol (DHCP) , is widely suppor ted on PC networks, as well as Apple Macintosh computers using Ope[...]

IP Setup and Network Address T ranslation 9-17 Go to the System Configuration screen. Select IP Address Ser ving and press Retur n. The IP Address Ser ving screen will appear . Follow these steps to configure IP Addr ess Ser ving: ■ If you enabled IP Address Ser ving, DHCP , BootP clients, Dynamic WAN clients, and MacIP/KIP clients (if you have[...]

9-18 User’ s Reference Guide If you have configured multiple Ether net IP subnets, the appearance of the IP Address Ser ving screen is alter ed slightly: The first three menu items ar e hidden, and Configure Addr ess Pools appears instead. If you select Configure Address Pools you will be taken to the IP Addr ess Pools screen that allows you [...]

IP Setup and Network Address T ranslation 9-19 IP Addr ess Pools The IP Address Pools scr een allows you to configure a separate IP addr ess ser ving pool for each of up to eight configured Ether net IP subnets: This screen consists of between two and eight r ows of four columns each. There ar e exactly as many rows as there ar e Ethernet IP subn[...]

9-20 User’ s Reference Guide Numerous factors influence the choice of ser ved address. It is dif ficult to specify the address that will be ser ved to a par ticular client in all cir cumstances. However , when the addr ess ser ver has been configured, and the clients involved have no prior address ser ving interactions, the Netopia R9100 will [...]

IP Setup and Network Address T ranslation 9-21 DHCP NetBIOS Options If your network uses NetBIOS, you can enable the Netopia R9100 to use DHCP to distribute NetBIOS infor mation. NetBIOS stands for Network Basic Input/Output System. It is a layer of software originally developed by IBM and Sytek to link a network operating system with specific har[...]

9-22 User’ s Reference Guide ■ From the NetBios Type pop-up menu, select the type of NetBIOS used on your network. ■ T o ser ve DHCP clients with the NetBIOS scope, select Serve NetBios Scope and toggle it to Ye s . Select NetBios Scope and enter the scope. ■ T o ser ve DHCP clients with the IP address of a NetBIOS name ser ver , select Ser[...]

IP Setup and Network Address T ranslation 9-23 Select Release BootP Leases and press Retur n. MacIP (KIP forwarding) setup When hosts using AppleT alk (typically those using LocalT alk) ar e not directly connected to an IP network (usually an Ethernet), they must use a MacIP (AppleT alk–IP) gateway . The optional Netopia AppleT alk feature enhanc[...]

9-24 User’ s Reference Guide The MacIP (KIP) For warding Setup screen tells the Netopia R9100 how many static addr esses to allocate for MacIP/KIP clients. The addresses must fall within the addr ess pool from the pr evious screen. ■ Enter the number of static MacIP addresses to r eser ve. Note that the address pool IP range is listed for your [...]

IPX Setup 10-1 C C C C h h h h a a a a p p p p t t t t e e e e r r r r 1 1 1 1 0 0 0 0 II I I P P P P X X X X S S S S e e e e t t t t u u u u p p p p Internetwork Packet Exchange (IPX) is the network pr otocol used by Novell NetW are networks. This chapter shows you how to configure the Netopia R9100 for r outing data using IPX. Y ou also lear n h[...]

10-2 User’ s Reference Guide IPX addr ess An IPX address consists of a network number , a node number , and a socket number . An IPX network number is composed of eight hexadecimal digits. The network number must be the same for all nodes on a par ticular physical network segment. The node number is composed of twelve hexadecimal digits and is us[...]

IPX Setup 10-3 The following is a list of common SAP ser ver types: NetBIOS NetBIOS is a protocol that per for ms tasks related to the Transpor t and Session layers of the OSI model. It can operate over IPX using a special broadcast packet known as “IPX Packet type 20” to communicate with IPX NetBIOS ser vers. IPX spoofing The Netopia R9100 ha[...]

10-4 User’ s Reference Guide T o go to the IPX Setup scr een, from the Main Menu select System Configuration and then select Network Protocols Setup and then select IPX Setup . Note: If you have completed Easy Setup, the infor mation you have already enter ed will appear in the IP Setup options screen. 1. T o enable IPX r outing, select IPX Rout[...]

IPX Setup 10-5 7. Select Default Gateway Address and enter the network address of the IPX network to which all packets of unknown destination address should be r outed. Note: The default gateway address is usually set up to match the IPX Addr ess in your network connection profile. 8. T o configur e filters and filter sets, select Filters and F[...]

10-6 User’ s Reference Guide[...]

AppleT alk Setup 11-1 C C C C h h h h a a a a p p p p t t t t e e e e r r r r 1 1 1 1 1 1 1 1 A A A A p p p p p p p p ll l l e e e e T T T T a a a a ll l l k k k k S S S S e e e e t t t t u u u u p p p p This chapter discusses the concept of AppleT alk routing and how to configur e AppleT alk setup for a Netopia R9100 with the AppleT alk kit insta[...]

11-2 User’ s Reference Guide If the cabling of your network were a str eet system, then a node address would cor r espond to a building’s street addr ess. Node addresses ar e not per manent. Each AppleT alk device deter mines its node address at star tup. Although a Macintosh that is star ting up will tr y to use its previous addr ess, the addr[...]

AppleT alk Setup 11-3 MacIP When Macintosh computers encapsulate TCP/IP packets in AppleT alk, either because they are on LocalT alk or EtherT alk for administrative reasons, they must use the ser vices of a MacIP gateway . This gateway conver ts network traf fic into the cor r ect for mat for AppleT alk or IP , depending on the traf fic’s dest[...]

11-4 User’ s Reference Guide It is impor tant to set the Netopia R9100’s seeding action to work best in your par ticular network envir onment. These scenarios may guide you in deciding how to set the router’s seeding: ■ If the Netopia R9100 is the only router on your network, you must set it to either har d seeding or soft seeding. The defa[...]

AppleT alk Setup 11-5 The Netopia Feature Set Upgrade scr een appears. Follow the instr uctions to enable AppleT alk on your router . Once AppleT alk is enabled, you can configure your network as described in the following sections. Main Menu System Conf iguration Upgrade Feature Set Netopia Feature Set Upgrade You may be able to extend the featur[...]

11-6 User’ s Reference Guide Configuring AppleT alk AppleT alk setup for Netopia R9100s consists of configuring EtherT alk, LocalT alk, and AURP . EtherT alk setup In the System Configuration screen, select Network Protocols Setup and then select AppleT alk Setup . Select EtherT alk Phase ll Setup and pr ess Return. ■ If you are using EtherT[...]

AppleT alk Setup 11-7 EtherT alk Phase II por t is visible to other AppleT alk nodes. The default zone is also where new AppleT alk nodes will appear . If you do not set a default zone, the first zone you create will be the default zone. ■ Y ou can also set the range of EtherT alk Phase II network numbers. Select Net Low and enter the lower limi[...]

11-8 User’ s Reference Guide As an alternative, you can set LocalT alk seeding to soft seeding and let the Netopia R9100 r eceive the zone name and network number from the other r outer . ■ Select LocalT alk Net Number and enter the desir ed network number . ■ Select Seeding. From the pop-up menu, choose the type of seeding for the Netopia R9[...]

AppleT alk Setup 11-9 Example: Site A has an AURP tunnel to site B. Both sides have multiple zones defined on the EtherT alk por t and a unique zone on their LocalT alk por ts. If side A has indicated that one of its EtherT alk zones is the Free Trade Zone and has opted to use the Free T rade Zone option for its tunnel to B, then only this Free T [...]

11-10 User’ s Reference Guide The Change AURP Par tner screen has all the values you entered when you added that par tner . All of these values may be modified in this screen. Deleting an AURP partner ■ T o delete an AURP par tner , in the AURP Setup screen select Delete Par tner and press Retur n. A table of existing par tners appears. Use th[...]

AppleT alk Setup 11-11 ■ Select Tickle Inter val (HH:MM:SS) and set the timer to indicate how often a tickle or “Are you still ther e” packet will be sent to the remote AppleT alk network. The AURP tickle timer is a parameter that you can set anywhere between 0 and 100 hours. This parameter tells the AURP par tners when to send out an AURP ti[...]

11-12 User’ s Reference Guide When network number remapping is enabled, you must choose a safe range of network numbers as a destination for the remapping. A safe range of network numbers does not intersect your local AppleT alk network’s range of network numbers. ■ T o choose a destination range for the r emapping, select From under Remap in[...]

Monitoring T ools 12-1 C C C C h h h h a a a a p p p p t t t t e e e e r r r r 1 1 1 1 2 2 2 2 M M M M o o o o n n n n ii i i t t t t o o o o r r r r ii i i n n n n g g g g T T T T o o o o o o o o ll l l s s s s This chapter discusses the Netopia R9100’s device and network monitoring tools. These tools can provide statistical infor mation, repor [...]

12-2 User’ s Reference Guide General status Current Date: The cur r ent date; this can be set with the Date and Time utility (see “Date and time” on page 8-12 ). Default IP Gateway: Actual IP address of the default gateway , if entered. 0.0.0.0 indicates automatic addressing. Domain Name Ser ver: IP address of your DNS ser ver . Domain Name: [...]

Monitoring T ools 12-3 Each LED repr esentation can repor t one of four states: –: A dash means the LED is of f. R: The letter “R” means the LED is red. G: The letter “G” means the LED is green. Y: The letter “Y” means the LED is yellow . The section “Netopia R9100 Ethernet Router status lights” on page 3-4 describes the meanings [...]

12-4 User’ s Reference Guide General Statistics T o go to the General Statistics scr een, select General Statistics and press Return. The General Statistics screen appears. The General Statistics screen displays infor mation about data traf fic on the Netopia R9100’s data por ts. This infor mation is useful for monitoring and troubleshooting y[...]

Monitoring T ools 12-5 ■ L T (LocalT alk on the PhoneNET) if the optional AppleT alk feature set is installed The right side of the table lists the total number of occur rences of each of six types of communication statistics: Rx Bytes. The number of bytes received Tx Bytes. The number of bytes transmitted Rx Packets: The number of packets receiv[...]

12-6 User’ s Reference Guide W AN Event History The W AN Event Histor y screen lists a total of 128 events on the W AN. The most r ecent events appear at the top. Each entr y in the list contains the following information: Time: Time of the event. Date: Date of the event. Event: A brief description of the event. Ch.: The channel involved in the e[...]

Monitoring T ools 12-7 Device Event History The Device Event Histor y screen lists a total of 128 por t and system events, giving the time and date for each event, as well as a brief description. The most recent events appear at the top. In the Statistics & Logs screen, select Device Event Histor y . The Device Event Histor y screen appears. If[...]

12-8 User’ s Reference Guide IP routing table In the Statistics & Logs screen, select IP Routing T able and press Retur n. The IP routing table displays all of the IP r outes cur rently known to the Netopia R9100. IPX routing table In the Statistics & Logs screen, select IPX Routing T able and press Retur n. The IPX routing table displays[...]

Monitoring T ools 12-9 IPX Sap Bindery table In the Statistics & Logs screen, select IPX Sap Binder y T able and press Retur n. The IPX Sap Binder y table displays all of the IPX Sap Binder y r outes cur rently known to the Netopia R9100. AppleT alk routing table In the Statistics & Logs screen, select AppleT alk Routing T able and pr ess R[...]

12-10 User’ s Reference Guide State: Displays the state of the specified route, based on the fr equency of Routing T able Maintenance Pr otocol (RTMP) packets received for the r oute. The state can be Good, Suspect, or Bad. AppleT alk routers r egularly exchange RTMP packets to update AppleT alk routing infor mation. Next Rtr Addr .: Displays th[...]

Monitoring T ools 12-11 The IP Address Lease Management scr een appears. This screen has thr ee options: ■ Reset All Leases : Resets all cur rent IP addr esses leased through DHCP without waiting for the default one–hour lease period to elapse ■ Release BootP Leases : Releases any BootP leases that may be in place, and which may no longer be [...]

12-12 User’ s Reference Guide System Information The System Infor mation screen gives a summar y view of the general system level values in the Netopia R9100 Ethernet Router. From the Statistics & Logs menu select System Information . The System Infor mation scr een appears. The infor mation display varies by model, fir mware version, featur[...]

Monitoring T ools 12-13 The SNMP Setup screen From the Main Menu, select SNMP in the System Configuration screen and pr ess Retur n. The SNMP Setup screen appears. Follow these steps to configure the first thr ee items in the screen: 1. Select System Name and enter a descriptive name for the Netopia R9100’s SNMP agent. 2. Select System Locatio[...]

12-14 User’ s Reference Guide By default, the read-only and r ead/write community strings are set to “public” and “private,” r espectively . Y ou should change both of the default community strings to values known only to you and tr usted system adminis- trators. Star ting with the version 4.3 firmwar e, setting the Read-Only and Read-Wr[...]

Monitoring T ools 12-15 Setting the IP trap receivers 1. Select Add IP Trap Receiver . 2. Select Receiver IP Address or Domain Name . Enter the IP address or domain name of the SNMP manager you want to receive the trap. 3. Select Community String . Enter whatever community string is appropriate for the traps to be sent to the management station who[...]

12-16 User’ s Reference Guide SmartV iew This section discusses Smar tView , the Netopia R9100’s device and network web-based monitoring tool. This tool can provide statistical infor mation, r epor t on curr ent network status, recor d events, and help in diagnosing and locating problems. SmartV iew overview Smar tView is a Java-based applet th[...]

Monitoring T ools 12-17 General Machine information page Smar tView uses tabbed pages to categorize information and r educe the amount of infor mation displayed at once. Click on the tabs to display the dif fer ent infor mational categories. In addition to the static machine infor mation about your router , such as model and fir mwar e version, Sm[...]

12-18 User’ s Reference Guide The router’s event histories ar e str uctured to display the most r ecent events first, and to make it easy to distinguish er ror messages fr om infor mational messages. Er r or messages are pr efixed with an asterisk. Both the W AN Event Histor y and Device Event Histor y pages r etain recor ds of up to 128 of t[...]

Monitoring T ools 12-19 Standard HTML web-based monitoring pages Y ou can also view connection pr ofile infor mation and event histories in the Web-based monitoring pages. These pages are pr ovided for users without Java-enabled browsers. Unlike the Smar tView pages, they are not dynamically updated. Y ou access the Web-based monitoring pages by l[...]

12-20 User’ s Reference Guide[...]

Security 13-1 C C C C h h h h a a a a p p p p t t t t e e e e r r r r 1 1 1 1 3 3 3 3 S S S S e e e e c c c c u u u u r r r r ii i i t t t t y y y y The Netopia R9100 provides a number of security featur es to help protect its configuration scr eens and your local network from unauthorized access. Although these featur es are optional, it is str o[...]

13-2 User’ s Reference Guide Caution! Y ou ar e strongly encouraged to add pr otection to the configuration screens. Unpr otected screens could allow an unauthorized user to compromise the operation of your entir e network. Once user accounts are cr eated, users who attempt to access protected scr eens will be challenged. Users who enter an inco[...]

Security 13-3 T o add a new user account, select Add User in the Security Options screen and pr ess Retur n. The Add Name With Write Access screen appears. Follow these steps to configure the new account: 1. Select Enter Name and enter a descriptive name (for example, the user’s first name). 2. Select Enter Password and enter a passwor d. 3. T [...]

13-4 User’ s Reference Guide Enable SmartStart/SmartV iew/W eb server Y ou may want to r estrict access to the Web-based screens to prevent inadver tent switching or connecting and disconnecting of connection profiles. Since Smar tStar t can be used to reconfigure the router, you may want to block inadver tent damage resulting from unauthorized[...]

Security 13-5 How filter sets work A filter set acts like a team of customs inspectors. Each filter is an inspector through which incoming and outgoing packages must pass. The inspectors work as a team, but each inspects ever y package individually . Each inspector has a specific task. One inspector’s task may be to examine the destination ad[...]

13-6 User’ s Reference Guide If the package does not match the first inspector’s criteria, it goes to the second inspector , and so on. Y ou can see that the order of the inspectors in the line is ver y impor tant. For example, let’s say the first inspector’s orders ar e to send along all packages that come from Rome, and the second inspe[...]

Security 13-7 How individual filters work As described above, a filter applies criteria to an IP packet and then takes one of three actions: A filter’ s actions ■ Passes the packet to the local or remote network ■ Blocks (discards) the packet ■ Ignores the packet A filter passes or blocks a packet only if it finds a match after applyin[...]

13-8 User’ s Reference Guide By matching on a por t number , a filter can be applied to selected TCP or UDP ser vices, such as T elnet, FTP , and World Wide W eb. The tables below show a few common ser vices and their associated por t numbers. Port number comparisons A filter can also use a comparison option to evaluate a packet’s source or d[...]

Security 13-9 Other filter attributes There ar e three other attributes to each filter: ■ The filter’s order (i.e., priority) in the filter set ■ Whether the filter is cur rently active ■ Whether the filter is set to pass (for ward) packets or to block (discard) packets Putting the parts together When you display a filter set, its ?[...]

13-10 User’ s Reference Guide Src. Por t: The sour ce por t to match. This is the por t on the sending host that originated the packet. D. Por t: The destination por t to match. This is the por t on the receiving host for which the packet is intended. On?: Displays Ye s when the filter is in ef fect or No when it is not. Fwd: Shows whether the ?[...]

Security 13-11 Filtering example #2 Suppose a filter is configured to block all incoming IP packets with the sour ce IP address of 200.233.14.0, regar dless of the type of connection or its destination. The filter would look like this: This filter blocks any packets coming from a r emote network with the IP network address 200.233.14.0. The 0 a[...]

13-12 User’ s Reference Guide option in the answer profile, P AP or CHAP in connection profiles, callback, and general awar eness of how your network may be vulnerable. An approach to using filters The ultimate goal of network security is to prevent unauthorized access to the network without compr omising authorized access. Using filter sets [...]

Security 13-13 1. Add a new filter set. 2. Create the filters for the new filter set. 3. View , change, or delete individual filters and filter sets. The sections below explain how to execute these steps. Adding a filter set Y ou can cr eate up to eight dif fer ent custom filter sets. Each filter set can contain up to 16 output filters and[...]

13-14 User’ s Reference Guide Input and output filters—source and destination There ar e two kinds of filters you can add to a filter set: input and output. Input filters check packets received from the Inter net, destined for your network. Output filters check packets transmitted from your network to the Internet. Packets in the Netopia R[...]

Security 13-15 1. T o make the filter active in the filter set, select Enabled and toggle it to Ye s . If Enabled is toggled to No , the filter can still exist in the filter set, but it will have no ef fect. 2. If you want the filter to for ward packets that match its criteria to the destination IP address, select For war d and toggle it to Ye[...]

13-16 User’ s Reference Guide 10. When you are finished configuring the filter , select ADD THIS FIL TER NOW to save the filter in the filter set. Select CANCEL to discard the filter and r eturn to the Add IP Filter Set scr een. Viewing filters T o display a view-only table of input (output) filters, select Display/Change Input Filter or [...]

Security 13-17 Modifying filter sets T o modify a filter set, select Display/Change IP Filter Set in the IP Filter Sets screen to display a list of filter sets. Select a filter set from the list and pr ess Return. The Change IP Filter Set scr een appears. The items in this screen ar e the same as the ones in the Add Filter screen (see “Adding[...]

13-18 User’ s Reference Guide The five input filters and one output filter that make up Basic Firewall ar e shown in the table below . Basic Firewall’s filters play the following r oles. Input filters 1 and 2: These block W AN-originated OpenWindows and X-Windows sessions. Ser vice origination requests for these pr otocols use por ts 2000 [...]

Security 13-19 Basic Firewall is suitable for a LAN containing only client hosts that want to access ser vers on the W AN, but not for a LAN containing ser vers providing ser vices to clients on the W AN. Basic Fir ewall’s general strategy is to explicitly pass W AN-originated TCP and UDP traf fic to por ts greater than 1023. Por ts lower than 1[...]

13-20 User’ s Reference Guide FTP sessions. T o allow WAN-originated FTP sessions to a LAN-based FTP ser ver with the IP address a.b.c.d (cor responding to a number ed IP address such as 163.176.8.243), inser t the following input filter ahead of the cur rent input filter 1: ■ Enabled: Y es ■ For ward: Y es ■ Source IP Addr ess: 0.0.0.0 ?[...]

Security 13-21 IPX filters IPX packet filters work ver y similarly to IP packet filters. They filter data traf fic coming from or going to r emote IPX networks. IPX filters can be set up to pass or discard IPX packets based on a number of user-defined criteria. Like IP filters, IPX filters must be grouped in sets that ar e applied to the a[...]

13-22 User’ s Reference Guide The items in the IPX Filters and Filter Sets screen ar e grouped into four ar eas: ■ IPX packet filters ■ IPX packet filter sets ■ IPX SAP filters ■ IPX SAP filter sets The following sections explain the items in each of these areas. IPX packet filters For each IPX packet filter , you can configure a s[...]

Security 13-23 1. Select Filter Name and enter a descriptive name for the filter . 2. T o specify a sour ce network for the filter to match on, select Source Network and enter an IPX network address. 3. T o specify a sour ce node for the filter to match on, select Source Node Addr ess and enter an IPX node address. 4. T o specify a sour ce socke[...]

13-24 User’ s Reference Guide Follow these steps to configure the new packet filter set: 1. Select Filter Set Name and enter a descriptive name for the filter set. 2. T o change the for warding action of filters in the filter set, select Show Filters/Change Action on Match and press Retur n. The Show Filters/Change Actions on Match screen ap[...]

Security 13-25 3. T o add a filter to the filter set, select Append Filter to display a table of filters. Select a filter from the table and press Retur n to add it to the filter set. The default action of newly added filters is to not for war d packets that match their criteria. T o exit the table without adding the filter , pr ess Escape. [...]

13-26 User’ s Reference Guide Adding a SAP filter T o add a new IPX SAP filter , select Add IPX SAP Filter in the IPX Filters and Filter Sets screen and press Retur n. The Add SAP Filter screen appears. By default, the filter’s socket and type numbers and network and node addresses ar e null (all zeros). This sets the filter to match on any[...]

Security 13-27 IPX SAP filter sets Before IPX SAP filters can be used, they must be gr ouped into sets. A SAP filter can be par t of more than one filter set. Viewing and modifying SAP filter sets T o display a table of IPX SAP filter sets, select Display/Change IPX SAP Filter Sets in the IPX Filters and Filter Sets screen to display a list o[...]

13-28 User’ s Reference Guide Select a filter and toggle the entr y for war ding action to Ye s (pass) or No (discard). 3. T o add a filter to the filter set, select Append Filter in the Add SAP Filter Set screen to display a table of filters. Select a filter from the table and pr ess Return to add it to the filter set. The default action o[...]

Security 13-29 Fir ewall tutorial General firewall terms Filter rule : A filter set is comprised of individual filter r ules. Filter set : A grouping of individual filter r ules. Firewall : A component or set of components that r estrict access between a protected network and the Inter net, or between two networks. Host : A workstation on the n[...]

13-30 User’ s Reference Guide Example TCP/UDP Ports Fir ewall design rules There ar e two basic r ules to firewall design: ■ “What is not explicitly allowed is denied.” and ■ “What is not explicitly denied is allowed.” The first r ule is far more secur e, and is the best approach to fir ewall design. It is far easier (and more secu[...]

Security 13-31 and a packet goes through these r ules destined for FTP , the packet would pass thr ough the first filter r ule (WWW), match the second r ule (FTP), and the packet is allowed through. Even though the next r ule is to deny all FTP traf fic, the FTP packet will never make it to this r ule. Binary representation It is easiest when do[...]

13-32 User’ s Reference Guide Established connections The TCP header contains one bit called the ACK bit (or TCP Ack bit). This ACK bit appears only with TCP , not UDP . The ACK bit is par t of the TCP mechanism that guaranteed the deliver y of data. The ACK bit is set whenever one side of a connection has received data fr om the other side. Only[...]

Security 13-33 Example network Example filters Example 1 Incoming packet has the source addr ess of 200.1.1.28 Less Than or Equal Any por t less than or equal to the por t defined Equal Matches only the por t defined Greater Than or Equal Matches the por t or any por t greater Greater Than Matches anything greater than the por t defined Filter [...]

13-34 User’ s Reference Guide This incoming IP packet has a source IP addr ess that matches the network address in the Sour ce IP Address field (00000000) in the Netopia R9100. This will not for war d this packet. Example 2 Incoming packet has the source addr ess of 200.1.1.184. This incoming IP packet (10000000) has a source IP addr ess that do[...]

Security 13-35 Since the Source IP Network Addr ess in the Netopia R9100 is 01100000, and the sour ce IP address after the logical AND is 1011000, this r ule does not match and this packet will be passed. Example 4 Incoming packet has the source addr ess of 200.1.1.104. Since the Source IP Network Addr ess in the Netopia R9100 is 01100000, and the [...]

13-36 User’ s Reference Guide Since the Source IP Network Addr ess in the Netopia R9100 is 01100000, and the sour ce IP address after the logical AND is 01100000, this r ule does match and this packet will NOT be passed. This r ule masks of f a single IP address.[...]

Utilities and Diagnostics 14-1 C C C C h h h h a a a a p p p p t t t t e e e e r r r r 1 1 1 1 4 4 4 4 U U U U t t t t ii i i ll l l ii i i t t t t ii i i e e e e s s s s a a a a n n n n d d d d D D D D ii i i a a a a g g g g n n n n o o o o s s s s t t t t ii i i c c c c s s s s A number of utilities and tests are available for system diagnostic a[...]

14-2 User’ s Reference Guide Ping The Netopia R9100 includes a standard Ping test utility . A Ping test generates IP packets destined for a par ticular (Ping-capable) IP host. Each time the target host r eceives a Ping packet, it retur ns a packet to the original sender . Ping allows you to see whether a par ticular IP destination is reachable fr[...]

Utilities and Diagnostics 14-3 Status: The cur rent status of the Ping test. This item can display the status messages shown in the able below: Packets Out: The number of packets sent by the Ping test. Packets In: The number of retur n packets received fr om the tar get host. T o be considered “on time,” retur n packets are expected back befor [...]

14-4 User’ s Reference Guide Packets Lost: The number of packets unaccounted for , shown in total and as a per centage of total packets sent. This statistic may be updated during the Ping test, and may not be accurate until after the test is over . However , if an escalating one-to-one cor r espondence is seen between Packets Out and Packets Lost[...]

Utilities and Diagnostics 14-5 4. Select Use Reverse DNS to lear n the names of the routers between the Netopia Router and the destination router . The default is Y es. 5. Select ST ART TRACE ROUTE and press Retur n. A scr olling screen will appear that lists the destination, number of hops, IP addresses of each hop, and DNS names, if selected. 6. [...]

14-6 User’ s Reference Guide Disconnect T elnet console session If you want to close your T elnet Console session, select Disconnect T elnet Console Session and press Retur n. A dialog box appears asking you to cancel or continue your selection. If you select Continue , you will immediately ter minate your session. Factory defaults Y ou can r ese[...]

Utilities and Diagnostics 14-7 The sections below describe how to update the Netopia R9100’s fir mware and how to download and upload configuration files. Updating firmwar e Fir mware updates may be available periodically fr om Netopia or from a site maintained by your or ganization’s network administrator . There ar e two types of fir mwa[...]

14-8 User’ s Reference Guide press Retur n. Y ou will see the following dialog box: ■ Select CANCEL to exit without downloading the file, or select CONTINUE to download the file. The system will reset at the end of the file transfer to put the new fir mwar e into ef fect. While the system r esets, the LEDs will blink on and of f. Caution! ?[...]

Utilities and Diagnostics 14-9 ■ Select GET CONFIG FROM SERVER and press Retur n. Y ou will see the following dialog box: ■ Select CANCEL to exit without downloading the file, or select CONTINUE to download the file. The system will reset at the end of the file transfer to put the new configuration into ef fect. ■ If you choose to downloa[...]

14-10 User’ s Reference Guide Updating firmwar e Fir mware updates may be available periodically fr om Netopia or from a site maintained by your or ganization’s network administration. The procedur e below applies whether you are using the console or the WAN inter face module. Follow these steps to update the Netopia R9100’s fir mware: 1. M[...]

Utilities and Diagnostics 14-11 The system will reset at the end of a successful file transfer to put the new fir mwar e into ef fect. While the system resets, the LEDs will blink on and of f. Caution! Do not manually power down or reset the Netopia R9100 while it is automatically r esetting or it could be damaged. Downloading configuration fil[...]

14-12 User’ s Reference Guide The procedur e below applies whether you are using the console or the WAN inter face. T o upload a configuration file: 1. Decide on a name for the file and a path for saving it. 2. Select Receive Config from Netopia and press Retur n. The following dialog box appears: 3. Select CANCEL to exit without uploading th[...]

P P P P a a a a r r r r t t t t II I I II I I II I I : : : : A A A A p p p p p p p p e e e e n n n n d d d d ii i i x x x x e e e e s s s s[...]

User’ s Reference Guide[...]

T roubleshooting A-1 A A A A p p p p p p p p e e e e n n n n d d d d ii i i x x x x A A A A T T T T r r r r o o o o u u u u b b b b ll l l e e e e s s s s h h h h o o o o o o o o t t t t ii i i n n n n g g g g This appendix is intended to help you troubleshoot pr oblems you may encounter while setting up and using the Netopia R9100. It also include[...]

A-2 User’ s Reference Guide Note: If you are attempting to modify the IP addr ess or subnet mask from a pr evious, successful configuration attempt, you will need to clear the IP address or r eset your Netopia R9100 to the factor y default before reinitiating the configuration pr ocess. For fur ther information on r esetting your Netopia R9100 [...]

T roubleshooting A-3 How to r eset the router to factory defaults Lose your password? This section shows how to r eset the router so that you can access the console scr eens once again. Keep in mind that all of your connection profiles and settings will need to be r econfigured. If you don't have a password, the only way to get back into the[...]

A-4 User’ s Reference Guide Technical support Netopia, Inc. is committed to providing its customers with r eliable products and documentation, backed by excellent technical suppor t. Before contacting Netopia Look in this guide for a solution to your problem. Y ou may find a solution in this troubleshooting appendix or in other sections. Check t[...]

T roubleshooting A-5 Netopia Bulletin Board Ser vice: 1 510-865-1321 Online product information Product infor mation can be found in the following: Netopia World Wide W eb ser ver via http://www .netopia.com Internet via anonymous FTP to ftp.netopia.com/pub FAX-Back This ser vice provides technical notes that answer the most commonly asked question[...]

A-6 User’ s Reference Guide[...]

Understanding IP Addressing B-1 A A A A p p p p p p p p e e e e n n n n d d d d ii i i x x x x B B B B U U U U n n n n d d d d e e e e r r r r s s s s t t t t a a a a n n n n d d d d ii i i n n n n g g g g II I I P P P P A A A A d d d d d d d d r r r r e e e e s s s s s s s s ii i i n n n n g g g g This appendix is a brief general introduction to I[...]

B-2 User’ s Reference Guide IP addresses indicate both the identity of the network and the identity of the individual host on the network. The number of bits used for the network number and the number of bits used for the host number can var y , as long as cer tain rules ar e followed. The local network manager assigns IP host numbers to individu[...]

Understanding IP Addressing B-3 Subnet masks T o cr eate subnets, the network manager must define a subnet mask, a 32-bit number that indicates which bits in an IP address ar e used for network and subnetwork addresses and which ar e used for host addresses. One subnet mask should apply to all IP networks that are physically connected together and[...]

B-4 User’ s Reference Guide Network configuration Below is a diagram of a simple network configuration. The ISP is providing a Class C addr ess to the customer site, and both networks A and B want to gain Internet access thr ough this address. Netopia R9100 B connects to Netopia R9100 A and is provided Inter net access through Routers A and B. [...]

Understanding IP Addressing B-5 Background The IP addresses and r outing configurations for the devices shown in the diagram are outlined below . In addition, each individual field and its meaning are described. The IP Address and Subnet Mask fields define the IP addr ess and subnet mask of the device's Ethernet connection to the network w[...]

B-6 User’ s Reference Guide There ar e two schemes for distributing the remaining IP addr esses: ■ Manually give each computer an address ■ Let the Netopia R9100 automatically distribute the addresses These two methods are not mutually exclusive; you can manually issue some of the addr esses while the rest are distributed by the Netopia R9100[...]

Understanding IP Addressing B-7 Configuration This section describes the specific IP address lease, r enew , and r elease mechanisms for both the Mac and PC, with either DHCP or MacIP address ser ving. DHCP address serving Windows 95 workstation: ■ The Win95 workstation requests and r enews its lease ever y half hour . ■ The Win95 workstation[...]

B-8 User’ s Reference Guide ■ The Netopia R9100 does release the DHCP addr ess back to the available DHCP address pool pr ecisely one hour after the last-heard lease r equest as some other DHCP implementations may hold on to the lease for an additional time after the lease expired, to act as a buf fer for variances in clocks between the client [...]

Understanding IP Addressing B-9 In any situation where a device is dialing into a Netopia r outer , the router may need to be configured to ser ve IP via the W AN inter face. This is only a requirement if the calling device has not been configur ed locally to know what its address(es) ar e. So when a client, dialing into a Netopia router's W[...]

B-10 User’ s Reference Guide The figure above shows an example of a block of IP addr esses being distributed cor rectly . The example follows these r ules: ■ An IP address must not be used as a static addr ess if it is also in a range of addresses being distributed by DHCP or MacIP . ■ A single IP address range is used by all the addr ess-se[...]

Understanding IP Addressing B-11 Nested IP subnets Under cer tain circumstances, you may want to create r emote subnets from the limited number of IP addr esses issued by your ISP or other authority . Y ou can do this using connection profiles. These subnets can be nested within the range of IP addresses available to your network. For example, sup[...]

B-12 User’ s Reference Guide Routers B and C (which could also be Netopia R9100s) ser ve the two remote networks that are subnets of a.b.c.0. The subnetting is accomplished by configuring the Netopia R9100 with connection profiles for Routers B and C (see the following table). The Netopia R9100’s connection profiles for Routers B and C cr ea[...]

Understanding IP Addressing B-13 The following diagram illustrates the IP address space taken up by the two r emote IP subnets. Y ou can see fr om the diagram why the ter m nested is appropriate for describing these subnets. Br oadcasts As mentioned earlier , binar y IP host or subnet addresses composed entirely of ones or zer os are r eser ved for[...]

B-14 User’ s Reference Guide[...]

Understanding Netopia NA T Behavior C-1 A A A A p p p p p p p p e e e e n n n n d d d d ii i i x x x x C C C C U U U U n n n n d d d d e e e e r r r r s s s s t t t t a a a a n n n n d d d d ii i i n n n n g g g g N N N N e e e e t t t t o o o o p p p p ii i i a a a a N N N N A A A A T T T T B B B B e e e e h h h h a a a a v v v v ii i i o o o o r [...]

C-2 User’ s Reference Guide When the Netopia R9100 establishes a connection over its W AN inter face with another router it uses the Point-to-Point Protocol (PPP). Within PPP ther e is a Network Control Pr otocol (NCP) called Internet Pr otocol Control Pr otocol (IPCP), which handles the negotiation of IP addresses between the two r outers, in th[...]

Understanding Netopia NA T Behavior C-3 When the Netopia R9100 receives this IP packet, it cannot simply for ward it to the WAN inter face and the Internet since the IP addr esses on the LAN inter face are not valid or globally unique for the Inter net. Instead, the Netopia R9100 has to change the IP packet to reflect the IP addr ess that was acqu[...]

C-4 User’ s Reference Guide The reasons for the IP addr ess changes are obvious fr om the preceding diagram, but what is not so obvious is why the TCP or UDP source por ts need to be changed as well. These are changed and maintained in an inter nal table so the Netopia R9100 can deter mine which host on the local LAN inter face sent the IP packet[...]

Understanding Netopia NA T Behavior C-5 Now both IP packets have the exact same source IP addr ess (200.1.1.40) and sour ce por ts (400). The Netopia R9100 is then able to distinguish between the two IP packets by changing the source TCP or UDP por ts and keeping this infor mation in an inter nal table. As seen above, the source por t for Workstati[...]

C-6 User’ s Reference Guide If the WWW ser ver on the Internet then tries to open a connection to the IP address of 200.1.1.40 with the appropriate Expor ted Ser vice defined, the Netopia R9100 will look at the destination por t and will find that it is destined for por t 21 (FTP). The Netopia R9100 then looks at the internal user-defined expo[...]

Understanding Netopia NA T Behavior C-7 Configuration Network Address T ranslation is enabled by default with the Smar tStar t configuration utility . Y ou can toggle Address Translation Enabled to No or Y es in the W AN Ether net Configuration screen in WAN Configuration under the Main Menu. An example of enabling NA T is as follows: T oggling[...]

C-8 User’ s Reference Guide Expor ted ser vices ar e configured under IP Setup in System Configuration. This is wher e a par ticular type of TCP or UDP ser vice originating from the Internet is r edirected to a host on the Netopia R9100’s LAN inter face. An example of this screen follows: Within expor ted ser vices is a pop-up list of well-kn[...]

Binary Conversion T able D-1 A A A A p p p p p p p p e e e e n n n n d d d d ii i i x x x x D D D D B B B B ii i i n n n n a a a a r r r r y y y y C C C C o o o o n n n n v v v v e e e e r r r r s s s s ii i i o o o o n n n n T T T T a a a a b b b b ll l l e e e e This table is provided to help you choose subnet numbers and host numbers for IP and [...]

D-2 User’ s Reference Guide Decimal Binar y Decimal Binar y Decimal Binar y Decimal Binar y 128 10000000 160 10100000 192 11000000 224 11100000 129 10000001 161 10100001 193 11000001 225 11100001 130 10000010 162 10100010 194 11000010 226 11100010 131 10000011 163 10100011 195 11000011 227 11100011 132 10000100 164 10100100 196 11000100 228 11100[...]

Further Reading E-1 A A A A p p p p p p p p e e e e n n n n d d d d ii i i x x x x E E E E F F F F u u u u r r r r t t t t h h h h e e e e r r r r R R R R e e e e a a a a d d d d ii i i n n n n g g g g Alexander , S. & R. Dr oms, DHCP Options and BOOTP V endor Extensions , RFC 2131, Silicon Graphics, Inc., Bucknell University , Mar ch 1997. Ang[...]

E-2 User’ s Reference Guide Garcia-Luna-Aceves, J.J. "Loop-Fr ee Routing Using Dif fusing Computations." Publication pending in IEEE/ACM T ransactions on Networking, V ol. 1, No. 1, 1993. Gar finkel, Simson. PGP: Pretty Good Privacy Sebastopol, CA: O’Reilly & Associates, 1991. A guide to the free data encr yption program PGP and [...]

Further Reading E-3 Sidhu, G.S., R.F . Andr ews, and A.B. Oppenheimer . Inside AppleT alk, 2nd ed. Reading, MA: Addison-W esley Publishing Company , 1990. Siyan, Karanjit. Internet Fir ewall and Network Security Indianapolis, IN: New Riders Publishing, 1995. Similar to the Chapman and Zwicky book. Smith, Philip. Frame Relay Principles and Applicati[...]

E-4 User’ s Reference Guide[...]

T echnical Specifications and Safety Information F-1 A A A A p p p p p p p p e e e e n n n n d d d d ii i i x x x x F F F F T T T T e e e e c c c c h h h h n n n n ii i i c c c c a a a a ll l l S S S S p p p p e e e e c c c c ii i i f f f f ii i i c c c c a a a a t t t t ii i i o o o o n n n n s s s s a a a a n n n n d d d d S S S S a a a a f f f [...]

F-2 User’ s Reference Guide Description Dimensions: 124.0 cm (w) x 20.0 cm (d) x 5.3 cm (h) 9.4” (w) x 7.9” (d) x 2.1” (h) Communications inter faces: The Netopia R9100 Ether net Router has an RJ-45 jack for Ether net line connections; an 8–por t 10Base-T Ethernet hub for your LAN connection; a DB-9 Console por t; and an HD-15 Auxiliar y [...]

T echnical Specifications and Safety Information F-3 Softwar e and protocols Software media: Softwar e preloaded on inter nal flash memor y; field upgrades done via download to internal flash memor y via XMODEM or TFTP Routing: TCP/IP Internet Pr otocol Suite, RIP , AppleT alk*, LocalT alk-to-Ether net r outing*, AURP tunneling*, MacIP*, IPX * [...]

F-4 User’ s Reference Guide Important This product was tested for FCC compliance under conditions that included the use of shielded cables and connectors between system components. Changes or modifications to this product not authorized by the manufacturer could void your authority to operate the equipment. Canada. This digital apparatus does no[...]

T echnical Specifications and Safety Information F-5 ■ Never install telephone jacks in wet locations unless the jack is specifically designed for wet locations. ■ Never touch uninsulated telephone wires or ter minals unless the telephone line has been disconnected at the network inter face. ■ Use caution when installing or modifying teleph[...]

F-6 User’ s Reference Guide[...]

Glossary 1 G G G G ll l l o o o o s s s s s s s s a a a a r r r r y y y y access line: A telephone line r eaching from the telephone company central of fice to a point usually on your premises. Beyond this point the wir e is considered inside wiring. analog: In telecommunications, telephone transmission and/or switching that is not digital. An ana[...]

2 User’ s Reference Guide byte: A group of bits, nor mally eight, which r epresent one data character . CallerID: See CND. CCITT (Comite Consultatif International T elegraphique et T elephonique): International Consultative Committee for T elegraphy and T elephony , a standar ds or ganization that devises and pr oposes recommenda- tions for inter[...]

Glossary 3 DTE (Data T erminal Equipment): T er m defined by standar ds committees, that applies to communications equipment, typically personal computers or data ter minals, as distinct from other devices that attach to the network, typically modems or printers (DCE). The distinction generally refers to which pins in an RS-232-C connection transm[...]

4 User’ s Reference Guide internet: A set of networks connected together by r outers. This is a general ter m, not to be confused with the lar ge, multi-or ganizational collection of IP networks known as the Inter net. An inter net is sometimes also known as an internetwork. internet address, IP addr ess: Any computing device that uses the Inter [...]

Glossary 5 network log: A r ecord of the names of devices, location of wir e pairs, wall-jack numbers, and other infor mation about the network. network number: A unique number for each network in an inter net. AppleT alk network numbers are assigned by seed routers, to which the network is dir ectly connected. An isolated AppleT alk network does n[...]

6 User’ s Reference Guide router: A device that suppor ts network communications. A router can connect identical network types, such as LocalT alk-to-LocalT alk, or dissimilar network types, such as LocalT alk-to-Ethernet. However—unless a gateway is available—a common protocol, such as TCP/IP , must be used over both networks. Routers may be[...]

Glossary 7 TFTP (Trivial File T ransfer Pr otocol): A pr otocol used to transfer files between IP nodes. TFTP is often used to transfer fir mware and configuration infor mation fr om a UNIX computer acting as a TFTP ser ver to an IP networking device, such as the Netopia ISDN Router . thicknet: Industr y jargon for 10Base5 coaxial cable, the ori[...]

8 User’ s Reference Guide[...]

Index-1 II I I n n n n d d d d e e e e x x x x Numerics 10Base-T 4-5 10Base-T , connecting 4-5 A add static route 9-14 advanced configuration features 8-11 answer profile call acceptance scenarios 8-9 defined 8-7 answering calls 8-7 AppleT alk 1-2 configuring LocalT alk 11-7 routing table 12-9 setup 11-1 tunneling (AURP) 11-3 , 11-8 zones 11-6 [...]

Index-2 Configuring profiles for incoming calls. 8-8 configuring ter minal emulation software 6-3 configuring the console 8-12 connecting to an Ethernet network 4-5 connecting to the configuration screens 8-9 connection profiles defined 7-5 console configuring 8-12 connection problems A-2 screens, connecting to 8-9 console configuration 8-[...]

Index-3 using 13-12 viewing 13-16 firewall 13-17 fir mware files updating with TFTP 14-7 updating with XMODEM 14-10 FTP sessions 13-20 fur ther reading E-1 G general statistics 12-4 Glossar y GL-1 H hard seeding 11-3 hops 12-9 how to reach us A-4 I input filter 3 13-18 input filters 1 and 2 13-18 input filters 4 and 5 13-18 Internet addr esse[...]

Index-4 connecting to Ethernet, r ules 4-5 connecting to LocalT alk 4-8 connection profile 7-5 distributing IP addresses 9-16 , B-5 IP setup 7-6 IPX setup 7-6 LocalT alk configuration 11-7 monitoring 12-1 security 13-1 system utilities and diagnostics 14-1 Network Address T ranslation see NA T 9-1 network problems A-2 network status over view 12-[...]

Index-5 MIBs suppor ted 12-12 setup screen 12-13 traps 12-14 socket 10-2 soft seeding 11-3 src. por t 13-10 state 12-10 static IP addresses B-8 static route r ules of installation 9-15 static routes 9-7 , 9-12 statistics, W AN 12-4 subnet masks B-3 subnets B-2 – B-5 multiple 9-10 nested B-11 subnets and subnet masks B-2 suppor t technical A-4 T T[...]

Index-6[...]

Limited Warranty and Limitation of Remedies 1 L L L L ii i i m m m m ii i i t t t t e e e e d d d d W W W W a a a a r r r r r r r r a a a a n n n n t t t t y y y y a a a a n n n n d d d d L L L L ii i i m m m m ii i i t t t t a a a a t t t t ii i i o o o o n n n n o o o o f f f f R R R R e e e e m m m m e e e e d d d d ii i i e e e e s s s s Netopi[...]

2 User’ s Reference Guide[...]