Netopia R2020 manual

Net opia ® R2020 Du al Anal og R outer f f f f o o o o r r r r d d d d a a a a t t t t a a a a c c c c o o o o m m m m m m m m u u u u n n n n ii i i c c c c a a a a t t t t ii i i o o o o n n n n User’s Refer ence Guide[...]

Copyright Copyright 1999, Netopia, Inc. v .799 All rights reser ved. Printed in the U.S.A. This manual and any associated ar twork, software and product designs are copyrighted with all rights reser ved. Under the copyright laws such materials may not be copied, in whole or par t, without the prior written consent of Netopia, Inc. Under the law , c[...]

G B Contents ....................................................................................... i Configuration options for your Netopia R2020 Dual Analog Router.. 1 1. Small Of fice connection to the Internet ........................... 2 2. Small Of fice connection to the Internet ........................... 3 3. Direct Connection to a Co[...]

ii User’ s Reference Guide Sharing the Connection .................................................. 3-9 Configuring TCP/IP on Windows 95, 98, or NT computers ........................................................... 3-9 Configuring TCP/IP on Macintosh computers ........ 3-13 Chapter 4 — Connecting Y our Local Area Network .................[...]

Contents iii G Navigating through the System Configuration scr eens ....... 7-8 System Configuration features ........................................ 7-8 Network Protocols Setup..................................... 7-10 Filter Sets (Firewalls) .......................................... 7-10 IP Address Ser ving ...................................[...]

iv User’ s Reference Guide Encr yption suppor t ........................................................ 9-7 VPN Default Answer Profile ............................................. 9-8 VPN QuickView .............................................................. 9-9 Dial-Up Networking for VPN ........................................... 9-10 Inst[...]

Contents v G Fir mware upgrades and NA T ....................................... 10-28 IP subnets................................................................. 10-29 Static routes ............................................................. 10-31 IP address ser ving ..................................................... 10-35 DHCP NetBIOS Option[...]

vi User’ s Reference Guide Chapter 13 — Monitoring T ools ............................................... 13-1 Quick View status over view .......................................... 13-1 General Status ................................................... 13-2 Cur rent Status ................................................... 13-3 Status lights [...]

Contents vii G IPX packet filters .............................................. 14-22 IPX packet filter sets ........................................ 14-23 IPX SAP filters .................................................. 14-25 IPX SAP filter sets ............................................ 14-27 Firewall tutorial ...........................[...]

viii User’ s Reference Guide Uploading configuration files ............................. 15-12 Restar ting the system ................................................ 15-13 Part III: Appendixes 15 Appendix A — Troubleshooting .................................................. A-1 Configuration problems .......................................[...]

Contents ix G Example: Working with a Class C subnet ................ C-5 Distributing IP addresses ............................................... C-5 T echnical note on subnet masking ......................... C-6 Configuration ....................................................... C-7 Manually distributing IP addresses ........................[...]

x User’ s Reference Guide[...]

Configuration options for your Netopia R2020 Dual Analog Router The Netopia R2020 can be used in dif ferent ways depending on your needs. In general, you will probably want to use it in one or mor e of the following ways: (Click on one of these links) ■ “1. Small Of fice connection to the Inter net” with several computers in your of fice s[...]

1. Small Office connection to the Internet For Small Of fice connections to the Inter net, using a single dynamic IP address with Network Address T ranslation (NA T) enabled, you should use the following configuration option: ■ the Smar tStar t™ Wizar d, included on your Netopia R2020 CD. This is the fastest and simplest way to get you up an[...]

2. Small Office connection to the Internet For Small Of fice connections to the Inter net, using a block of IP addresses (Network Addr ess T ranslation disabled), you should use the following configuration tool: ■ Easy Setup configuration using console-based management. This option allows maximum flexibility for experienced users and adminis[...]

3. Dir ect Connection to a Corporate Office (T elecommuter) For direct connections to a Corporate Of fice, you can use either one of two configuration options: ■ If you will be using Network Address T ranslation, use the Smar tStar t™ Wizar d, included on your Netopia R2020 CD. For instr uctions on this option, see “Setting up your Router [...]

4. Configur ed to accept incoming dial-up connections T o configure the Netopia R2020 to accept incoming dial-up connections, you should use the following configuration method: ■ T o create one or mor e dial-in Connection Profiles for each dial-in user , see “Creating a new Connection Profile” on page 7-2 . Y ou do this using console-bas[...]

5. Configur ed for two onboard and one external modem on the Auxiliar y port T o configure the Netopia R2020 to use the two onboar d modems and a thir d exter nal modem on the Auxiliar y serial por t, you should use the following configuration options. This might be done to allow three separate simultaneous dial-in/dial-out connections or one or[...]

P P P P a a a a r r r r t t t t II I I : : : : G G G G e e e e t t t t t t t t ii i i n n n n g g g g S S S S t t t t a a a a r r r r t t t t e e e e d d d d[...]

User’ s Reference Guide[...]

Introduction 1-1 C C C C h h h h a a a a p p p p t t t t e e e e r r r r 1 1 1 1 II I I n n n n t t t t r r r r o o o o d d d d u u u u c c c c t t t t ii i i o o o o n n n n Overview The Netopia R2020 Dual Analog Router is a full-featured, stand-alone, multipr otocol router for connecting diverse local area networks (LANs) to the Inter net and oth[...]

1-2 User’ s Reference Guide T ranslation (MultiNA T) adds significant flexibility and security for a wide range of applications. ■ 1-to-1 static NA T mapping ■ Multiple Many-to-1 NAPT mappings on a single inter face. NAPT addr esses can be assigned to specific private address subnets ■ Mapped ser vices (expor ts) can use multiple public [...]

Making the Physical Connections 2-1 C C C C h h h h a a a a p p p p t t t t e e e e r r r r 2 2 2 2 M M M M a a a a k k k k ii i i n n n n g g g g t t t t h h h h e e e e P P P P h h h h y y y y s s s s ii i i c c c c a a a a ll l l C C C C o o o o n n n n n n n n e e e e c c c c t t t t ii i i o o o o n n n n s s s s This section tells you how to [...]

2-2 User’ s Reference Guide Windows and Macintosh, ZT er m ter minal emulator softwar e and NCSA T elnet 2.6 for Macintosh Y ou will need: ■ A Windows 95-based PC or a Macintosh with Ethernet connectivity for configuring the Netopia R2020. This may be built-in Ethernet or an add-on car d, with TCP/IP installed and configur ed. See “Before r[...]

Making the Physical Connections 2-3 If you have two phone lines on a single wall outlet, this is the only T elco connection you need to make. The pinout configuration for the lines on the Line 1 por t is shown in the following diagram: Y our first T elco number is car ried on the inner pair and the second number on the outer pair . 3. If you have[...]

2-4 User’ s Reference Guide Netopia R2020 Dual Analog Router Back Panel Ports The figure below displays the back of the Netopia R2020 Dual Analog Router. Netopia R2020 Dual Analog Router back panel 8 Ethernet Normal/Uplink Auxiliary Console Power 4 7 3 6 2 5 1 Line 2 Line 1 1 8 por t Ether net hub Crossover switch Line por ts Auxiliar y por t Co[...]

Making the Physical Connections 2-5 The following table describes all the Netopia R2020 Dual Analog Router back panel por ts. Por t Description Power por t a mini-DIN8 power adapter cable connection. Line 1 por t a red RJ-11 telephone jack labelled “Line 1". Console por t a DE-9 Console por t for a direct serial connection to the console scr[...]

2-6 User’ s Reference Guide Netopia R2020 Dual Analog Router Status Lights The figure below r epresents the Netopia R2020 status light (LED) panel. Netopia R2020 LED front panel The following table summarizes the meaning of the various LED states and colors: When this happens... the LEDs... when the cor responding line is ringing 2 and 8 flash [...]

Setting up your Router with the SmartStart Wizard 3-1 C C C C h h h h a a a a p p p p t t t t e e e e r r r r 3 3 3 3 S S S S e e e e t t t t t t t t ii i i n n n n g g g g u u u u p p p p y y y y o o o o u u u u r r r r R R R R o o o o u u u u t t t t e e e e r r r r w w w w ii i i t t t t h h h h t t t t h h h h e e e e S S S S m m m m a a a a r [...]

3-2 User’ s Reference Guide Notes: • The computer running Smar tStar t must be on the same Ethernet cable segment as the Netopia R2020. Repeaters, such as 10Base-T hubs between your computer and the Netopia R2020, are acceptable, but devices such as switches or other routers ar e not. • Smar tStar t for the PC will set your TCP/IP control pan[...]

Setting up your Router with the SmartStart Wizard 3-3 Setting up your Router with the SmartStart Wizard The Smar tStar t Wizar d is tailored for your platfor m, but it works the same way on either a PC or a Macintosh. Inser t the Netopia CD, and in the desktop navigation screen that appears, launch the Smar tStar t Wizar d application. SmartStart W[...]

3-4 User’ s Reference Guide Easy option When the test succeeds, Smar tStar t indicates success. If the test fails, the wizard displays an er r or screen. If the test fails, check the following: ■ Check your cable connections. Be sure you have connected the r outer and the computer properly , using the cor rect cables. Refer to the Step 1 “Con[...]

Setting up your Router with the SmartStart Wizard 3-5 When the test is successful, you will see the “Manual or Automated Connection Profile scr een,” shown below . If you select ISP Automation , Smar tStar t of fers you the option of choosing one of several Netopia ISP par tners that suppor t the Netopia R2020. Y ou then see the “Inter net S[...]

3-6 User’ s Reference Guide with: ■ Y our dial-up number , sometimes refer r ed to as an ISP POP number ■ Y our Login name and Passwor d. (These are case-sensitive.) Note: Y our ISP may pr ovide you with additional values such as “Remote IP Gateway” or “Subnet Mask.” These entries are not r equired for the Smar tStar t Wizar d to con?[...]

Setting up your Router with the SmartStart Wizard 3-7 In most cases, this Smar tStar t configuration is all that you need to get your router up and r unning and connected to the Internet. However, you may want to take advantage of additional features or special configuration options available through the console-based configuration inter face. F[...]

3-8 User’ s Reference Guide Advanced option Router IP Address scr een. If you selected the Advanced option in the “Easy or Advanced options screen” on page 3-4 , Smar tStar t asks you to choose between entering the router’s cur r ent IP address and assigning an IP address to the r outer . If the router has alr eady been assigned an IP addre[...]

Setting up your Router with the SmartStart Wizard 3-9 Sharing the Connection Configuring TCP/IP on Windows 95, 98, or NT computers Configuring TCP/IP on a Windows computer requir es the following: ■ An Ethernet car d (also known as a network adapter) ■ The TCP/IP protocol must be “bound” to the adapter or car d Dynamic configuration (rec[...]

3-10 User’ s Reference Guide Note: Y ou can also use these instr uctions to configur e other computers on your network to accept IP addresses ser ved by the Netopia R2020. 1. Go to the Star t Menu/Settings/Control Panels and double click the Network icon. From the Network components list, select the Configuration tab. 2. Select TCP/IP-->Y ou[...]

Setting up your Router with the SmartStart Wizard 3-11 Static configuration (optional) If you are manually configuring for a fixed or static IP addr ess, per for m the following: 1. Go to Star t Menu/Settings/Control Panels and double click the Network icon. From the Network components list, select the Configuration tab. 2. Select TCP/IP-->Y[...]

4. Click OK in this window , and the next window . When prompted, r eboot the computer . Note: Y ou can also use these instr uctions to configur e other computers on your network with manual or static IP addresses. Be sur e each computer on your network has its own IP address. Click on the DNS Configuration tab. Click Enable DNS . Enter the follo[...]

Setting up your Router with the SmartStart Wizard 3-13 Configuring TCP/IP on Macintosh computers The following is a quick guide to configuring TCP/IP for MacOS computers. Configuring TCP/IP in a Macintosh computer requir es the following: ■ Y ou must have either Open T ranspor t or Classic Networking (MacTCP) installed. Note: If you want to us[...]

3-14 User’ s Reference Guide Static configuration (optional) 3. In the TCP/IP window or in the MacTCP/More window , select or type information into the fields as shown in the following table. 4. Close the TCP/IP or MacTCP control panel and save the settings. 5. If you are using MacTCP , you must restar t the computer. If you are using Open T ra[...]

Setting up your Router with the SmartStart Wizard 3-15 Dynamic configuration using MacIP (optional) If you want to use MacIP to dynamically assign IP addresses to the Macintosh computers on your network you must install the optional AppleT alk feature set kit. Note: Y ou cannot use MacIP dynamic configuration to configur e your Netopia R2020 Dua[...]

3-16 User’ s Reference Guide Using Classic Networking (MacTCP) 1. Go to the Apple Menu. Select Control Panels and then Network . 2. In the Network window , select EtherT alk . 3. Go back to the Apple menu. Select Control Panels and then MacTCP . 4. Select EtherT alk . From the pull-down menu under EtherT alk, select an available zone; then click [...]

Connecting Y our Local Area Network 4-1 C C C C h h h h a a a a p p p p t t t t e e e e r r r r 4 4 4 4 C C C C o o o o n n n n n n n n e e e e c c c c t t t t ii i i n n n n g g g g Y Y Y Y o o o o u u u u r r r r L L L L o o o o c c c c a a a a ll l l A A A A r r r r e e e e a a a a N N N N e e e e t t t t w w w w o o o o r r r r k k k k This cha[...]

4-2 User’ s Reference Guide Application software: This is the softwar e you use to send e-mail, browse the World Wide W eb, read newsgroups, etc. These applications may r equire some configuration. Examples include the Eudora e-mail client, and the web browsers Micr osoft Internet Explor er and Netscape Navigator . TCP/IP stack: This is the soft[...]

Connecting Y our Local Area Network 4-3 Connecting to an Ethernet network The Netopia R2020 suppor ts Ether net connections through its eight Ether net por ts. The Router automatically detects which Ethernet por t is in use. 10Base-T Y ou can connect a standar d 10Base-T Ether net network to the Netopia R2020 using any of its available Ethernet por[...]

4-4 User’ s Reference Guide If you add devices connected through a hub, connect the hub to Ether net por t number 1 on the Netopia R2020 and set the Nor mal/Uplink switch to Uplink. Adding an external modem Y ou may wish to add a thir d (exter nal) modem to gain additional speed for your Internet connection. Y ou will need to obtain the special e[...]

Connecting Y our Local Area Network 4-5 For pinout infor mation on the HD-15 to DB-25 modem cable, see “Pinouts for Auxiliar y Por t Modem Cable,” in Appendix F , “T echnical Specifications and Safety Infor mation.” Connecting to a LocalT alk network If you have purchased the AppleT alk featur e expansion kit, you can also connect the Rout[...]

4-6 User’ s Reference Guide Wiring guidelines for PhoneNET cabling For detailed configuration instr uctions see “AppleT alk Setup” on page 12-1 . T opology 22 gauge .642 mm 24 gauge .510 mm 26 gauge .403 mm daisy chain n/a n/a 1800 ft. 549 m backbone 4500 ft. 1372 m 3000 ft. 229 m 1800 ft. 549 m 4-branch passive star* 1125 ft. 343 m 750 ft. [...]

Console-based Management 5-1 C C C C h h h h a a a a p p p p t t t t e e e e r r r r 5 5 5 5 C C C C o o o o n n n n s s s s o o o o ll l l e e e e - - - - b b b b a a a a s s s s e e e e d d d d M M M M a a a a n n n n a a a a g g g g e e e e m m m m e e e e n n n n t t t t Console-based management is a menu-driven inter face for the capabilities [...]

5-2 User’ s Reference Guide using the router to connect to mor e than one ser vice provider or r emote site. ■ The System Configuration menus display and per mit changing: ■ Network Protocols Setup. See “Multiple Network Addr ess T ranslation and IP Setup” on page 10-1 . ■ Filter Sets. See “Security” on page 14-1 . ■ IP Address S[...]

Console-based Management 5-3 Configuring T elnet software If you are configuring your r outer using a T elnet session, your computer must be r unning a T elnet softwar e program. ■ If you connect a PC with Microsoft Windows, you can use a Windows T elnet application or simply r un T elnet from the Star t menu. ■ If you connect a Macintosh com[...]

5-4 User’ s Reference Guide Launch your ter minal emulation software and configur e the communications software for the following values. These are the default communication parameters that the Netopia R2020 uses. Navigating thr ough the console screens Use your keyboard to navigate the Netopia R2020’s configuration scr eens, enter and edit i[...]

Easy Setup 6-1 C C C C h h h h a a a a p p p p t t t t e e e e r r r r 6 6 6 6 E E E E a a a a s s s s y y y y S S S S e e e e t t t t u u u u p p p p This chapter describes how to use the Easy Setup console screens on your Netopia R2020 Dual Analog Router. The Easy Setup console screens pr ovide an alternate method for experienced users to set up [...]

6-2 User’ s Reference Guide A screen similar to the following appears: If you do not see the Main Menu, verify that: ■ the computer used to view the console screen has its serial por t connected to the Netopia R2020’s “Console” por t or an Ether net connection to one of its Ethernet por ts. See “Connecting a local terminal console cable[...]

Easy Setup 6-3 Beginning Easy Setup T o begin Easy Setup, select Easy Setup in the Main Menu, then press Retur n. The Easy Setup Profile scr een appears. Easy Setup pr ofile The Easy Setup Profile scr een is where you configur e the parameters that control the Netopia R2020’s connection to a specific remote destination, usually an ISP or a c[...]

6-4 User’ s Reference Guide 4. Select Local W AN IP Address and enter the local WAN address your ISP gave you. The default address is 0.0.0.0, which allows for dynamic addr essing, when your ISP assigns an address each time you connect. However , you may enter another addr ess if you want to use static addressing. ■ When using numbered inter fa[...]

Easy Setup 6-5 1. Select Ethernet IP Address and enter the first IP addr ess from the IP addr ess range your ISP has given you. This will be the Netopia Router’s IP address. If Network Address T ranslation is enabled in the Easy Setup connection profile, the Ether net IP Addr ess defaults to an address within a range r eser ved by the Inter net[...]

6-6 User’ s Reference Guide 7. If IP Address Ser ving is On , select Number of Client IP Addr esses . Then enter the number of available host addresses for the Netopia R2020 Dual Analog Router to allocate to the client computers on your network. This number defaults to the balance of the subnet addresses above the Netopia Router’s address. 8. I[...]

P P P P a a a a r r r r t t t t II I I II I I : : : : A A A A d d d d v v v v a a a a n n n n c c c c e e e e d d d d C C C C o o o o n n n n f f f f ii i i g g g g u u u u r r r r a a a a t t t t ii i i o o o o n n n n[...]

User’ s Reference Guide[...]

W AN and System Configuration 7-1 C C C C h h h h a a a a p p p p t t t t e e e e r r r r 7 7 7 7 W W W W A A A A N N N N a a a a n n n n d d d d S S S S y y y y s s s s t t t t e e e e m m m m C C C C o o o o n n n n f f f f ii i i g g g g u u u u r r r r a a a a t t t t ii i i o o o o n n n n This chapter describes how to use the console-based m[...]

7-2 User’ s Reference Guide Cr eating a new Connection Profile Connection Profiles define the telephone and networking pr otocols necessar y for the router to make a r emote connection. A Connection Profile is like an addr ess book entr y describing how the router is to get to a r emote site, or how to recognize and authenticate a r emote use[...]

W AN and System Configuration 7-3 4. Select Datalink Options and press Retur n. The Datalink Options screen appears. Note: The Datalink Options shown below are for the default Data Link Encapsulation method PPP . (For VPN Data Link Options see “Vir tual Private Networks” on page 9-1 .) Y ou can accept the defaults, or change them if you wish. [...]

7-4 User’ s Reference Guide 6. T oggle or enter any IP Parameters you r equire and r eturn to the Add Connection Pr ofile screen by pr essing Escape. For more infor mation, see “Multiple Network Addr ess T ranslation and IP Setup” on page 10-1 . 7. If you will be connecting with an IPX remote network, toggle IPX Enabled to Y es, and pr ess R[...]

W AN and System Configuration 7-5 9. Select T elco Options and pr ess retur n. the T elco Options scr een appears. NOTE: If you are cr eating a VPN Connection Profile, the T elco Options menu is not used and becomes unavailable. Select Dial and press Retur n. A pop-up menu appears. Y ou can select the dialing options for this Connection Profile [...]

7-6 User’ s Reference Guide Select the connection profile you want to view or edit and pr ess Return. The pr ofile is displayed, and you can change any of the parameters. Changes take ef fect immediately without r ebooting the router . WAN Configuration +-Profile Name---------------------IP Address----IPX Network-+ +----------------------------[...]

W AN and System Configuration 7-7 Deleting connection pr ofiles Y ou can delete a connection pr ofile by retur ning to the WAN Configuration menu and selecting Delete Connection Profile . A scrolling pop-up scr een appears. Select the profile you want to delete and pr ess Return. When pr ompted, select CONTINUE , and the connection profile w[...]

7-8 User’ s Reference Guide The console screen will open to the Main Menu , similar to the screen shown below: Navigating thr ough the System Configuration screens T o help you find your way to par ticular scr eens, some sections in this guide begin with a graphical path guide similar to the following example: This par ticular path guide shows [...]

W AN and System Configuration 7-9 T o help you deter mine whether you need to use the System Configuration options, r eview the following requir ements. If you have one or more of these needs, use the System Configuration options described in the later chapters. ■ Two or more outgoing connection pr ofiles to connect to more than one r emote l[...]

7-10 User’ s Reference Guide T o access the System Configuration scr eens, select System Configuration in the Main Menu, then press Return. The System Configuration Menu screen appears: Network Pr otocols Setup These screens allow you to configur e your network’s use of the standard networking pr otocols: ■ IP: details are given in “Mul[...]

W AN and System Configuration 7-11 IP Addr ess Ser ving These screens allow you to configur e IP Address ser ving on your network by means of DHCP , WANIP , BootP , and with the optional AppleT alk kit, MacIP . ■ Details are given in “IP addr ess ser ving” on page 10-35 . Date and T ime Y ou can set the system’s date and time in the Set D[...]

7-12 User’ s Reference Guide T o go to the Console Configuration scr een, select Console Configuration in the System Configuration screen. Follow these steps to change a parameter’s value: 1. Select the parameter you want to change. 2. Select a new value for the parameter . Retur n to step 1 if you want to configur e another parameter . 3. [...]

W AN and System Configuration 7-13 Logging Y ou can configur e a UNIX-compatible syslog client to repor t a number of subsets of the events enter ed in the router’s WAN Event Histor y . See “WAN Event Histor y” on page 13-6 .The Syslog client (for the PC only) is supplied as a .ZIP file on the Netopia CD. Select Logging from the System Con[...]

7-14 User’ s Reference Guide When using syslog with a switched connection, if the host you are logging into is located on the WAN, the act of tearing down the call generates W AN events. This requir es the torn down line to come back up, ef fectively making a call that will go up and down continuously . This will only occur when the router tears [...]

Managing Data Calls 8-1 C C C C h h h h a a a a p p p p t t t t e e e e r r r r 8 8 8 8 M M M M a a a a n n n n a a a a g g g g ii i i n n n n g g g g D D D D a a a a t t t t a a a a C C C C a a a a ll l l ll l l s s s s Y ou can set a Netopia Router to make scheduled connections using designated connection pr ofiles. This is useful for creating a[...]

8-2 User’ s Reference Guide ■ Y ou can enter a PBX or Centr ex Dialing Prefix such as “9” if you ar e on a PBX or Centrex phone system and requir e a prefix for an outside line. ■ Enter the optional telephone or Director y Numbers for the two onboar d modems to provide the Netopia R2020 with the infor mation needed to establish a two-ch[...]

Managing Data Calls 8-3 the line, but uses a dif fer ent telephone number and ring patter n. Suppor ted options are: ■ Y ou can choose when the Netopia R2020’s modem connection tones ar e audible. Suppor ted options are: ■ Y ou can specify how to use the auxiliar y serial por t on the Netopia R2020’s back panel. By default, this por t is en[...]

8-4 User’ s Reference Guide For external modem applications, the Data Rate pop-up of fers a variety of clock rates from 9600 to 230 Kbps. The default is 57.6 kbps. Y ou can also specify the Modem Init String for your modem and the Director y Number of the telephone line connected to the third por t. Note: If you change the modem init string, you [...]

Managing Data Calls 8-5 1. Select Default Answer Profile in the WAN Configuration screen. Press Retur n. The Default Profile scr een appears. 2. T o enable CNA-authentication, select Calling Number Authentication in the Default Answer Profile scr een and choose one of the following settings: Ignored: Calling Number Authentication (CNA) is not i[...]

8-6 User’ s Reference Guide CNA should be available where CallerID ser vices ar e available. Y ou will need to consult with your telephone ser vice provider to find out if your line is pr ovisioned for CallerID. Also note that if the calling side has instr ucted the phone company to block deliver y of its caller ID, the answering side will not b[...]

Managing Data Calls 8-7 Note: The authentication method you choose deter mines which connection profiles ar e accessible to callers. For example, if you choose P AP , callers using CHAP or no authentication will be dr opped by the answer profile. ■ T o allow calls that only match a connection profile’s r emote IP and/or IPX address: ■ T og[...]

8-8 User’ s Reference Guide Viewing scheduled connections T o display a table of view-only scheduled connections, select Display/Change Scheduled Connection in the Scheduled Connections screen. Each scheduled connection occupies one r ow of the table. The first column in the table shows a one-letter repr esentation of the Days of the week, from [...]

Managing Data Calls 8-9 Follow these steps to configure the new scheduled connection: ■ T o activate the connection, select Scheduled Connection Enable and toggle it to On . Y ou can make the scheduled connection inactive by toggling Scheduled Connection Enable to Of f . ■ Decide how often the connection should take place by selecting How Ofte[...]

8-10 User’ s Reference Guide Often is set to Once Only , the item dir ectly below How Often reads Set Once-Only Schedule . Set Weekly Schedule If you set How Often to W eekly , select Set Weekly Schedule and go to the Set W eekly Schedule screen. ■ Select the days for the scheduled connection to occur and toggle them to Ye s . ■ Select Schedu[...]

Managing Data Calls 8-11 ■ Select Place Call On (Date) and enter a date in the for mat MM/DD/YY or MM/DD/YYYY (month, day , year). Note: Y ou must enter the date in the for mat specified. The slashes ar e mandator y . For example, the entr y 5/7/98 would be accepted as May 7, 1998. The entr y 5/7 would be rejected. ■ Select Scheduled Window St[...]

8-12 User’ s Reference Guide Select a scheduled connection from the table and go to the Change Scheduled Connection scr een. The parameters in this screen ar e the same as the ones in the Add Scheduled Connection screen (except that ADD SCHEDULED CONNECTION and CANCEL do not appear). T o find out how to set them, see “Adding a scheduled connec[...]

Managing Data Calls 8-13 S S S S y y y y s s s s t t t t e e e e m m m m II I I n n n n f f f f o o o o r r r r m m m m a a a a t t t t ii i i o o o o n n n n p p p p a a a a g g g g e e e e This is the initial page you link to when you connect to the Web-based management pages. It displays useful general infor mation about your router: Ethernet Ad[...]

8-14 User’ s Reference Guide of the activity for your Frame relay DLCIs. ■ “Connection Status page” on page 8-15 (for switched inter faces only) : displays the cur rent state of your switched connection. ■ “Connect/Disconnect page” on page 8-16 (for switched inter faces only) : displays a list of your Con- nection Profiles, allowing [...]

Managing Data Calls 8-15 C C C C o o o o n n n n n n n n e e e e c c c c t t t t ii i i o o o o n n n n S S S S t t t t a a a a t t t t u u u u s s s s p p p p a a a a g g g g e e e e For switched inter face connections, the Connection Status page displays infor mation for your active Connection Profile and, if applicable, any POTS calls cur r ent[...]

8-16 User’ s Reference Guide C C C C o o o o n n n n n n n n e e e e c c c c t t t t // / / D D D D ii i i s s s s c c c c o o o o n n n n n n n n e e e e c c c c t t t t p p p p a a a a g g g g e e e e The Connect/Disconnect page displays a list of your configured Connection Pr ofiles and allows you to connect or disconnect any of them. T o in[...]

Managing Data Calls 8-17 R R R R o o o o u u u u t t t t e e e e r r r r B B B B u u u u d d d d g g g g e e e e t t t t C C C C o o o o n n n n f f f f ii i i g g g g u u u u r r r r a a a a t t t t ii i i o o o o n n n n p p p p a a a a g g g g e e e e The Router Budget Configuration page allows you to modify the parameters for your overall conn[...]

8-18 User’ s Reference Guide C C C C o o o o n n n n n n n n e e e e c c c c t t t t ii i i o o o o n n n n B B B B u u u u d d d d g g g g e e e e t t t t s s s s p p p p a a a a g g g g e e e e The Connection Budgets page displays infor mation for three budgets or Connection Pr ofiles for tracking and controlling connection usage on a per-Conn[...]

Managing Data Calls 8-19 C C C C o o o o n n n n n n n n e e e e c c c c t t t t ii i i o o o o n n n n B B B B u u u u d d d d g g g g e e e e t t t t C C C C o o o o n n n n f f f f ii i i g g g g u u u u r r r r a a a a t t t t ii i i o o o o n n n n p p p p a a a a g g g g e e e e Y ou can configur e budgets to be: ■ Enforced , meaning that [...]

8-20 User’ s Reference Guide schedule, you choose the day of the month to star t it. Click the Submit button to enable your entries and be retur ned to the Connection Budgets page or click the Cancel button to discard all your entries. Click the Reset button to reset all counters and ar chives to zer o. B B B B u u u u d d d d g g g g e e e e t t[...]

Managing Data Calls 8-21 E E E E v v v v e e e e n n n n t t t t H H H H ii i i s s s s t t t t o o o o r r r r y y y y p p p p a a a a g g g g e e e e s s s s The Netopia R2020 recor ds cer tain relevant occur rences in event histories. Event histories ar e useful for diagnosing problems because they list what happened befor e, during, and after a[...]

8-22 User’ s Reference Guide D D D D e e e e v v v v ii i i c c c c e e e e E E E E v v v v e e e e n n n n t t t t H H H H ii i i s s s s t t t t o o o o r r r r y y y y p p p p a a a a g g g g e e e e Y ou can r efresh the Device Event Histor y log by clicking the update this page link.[...]

Managing Data Calls 8-23 C C C C o o o o n n n n s s s s o o o o ll l l e e e e - - - - b b b b a a a a s s s s e e e e d d d d m m m m a a a a n n n n a a a a g g g g e e e e m m m m e e e e n n n n t t t t s s s s c c c c r r r r e e e e e e e e n n n n s s s s Y ou access the console-based management scr eens either by r unning your T elnet appl[...]

8-24 User’ s Reference Guide Configuration is similar to the Web-based management configuration screens. ■ Selecting Use Connection Profile displays a pop-up list of all of your Connection Profiles. Choose the Connection Profile you want this budget to apply to and pr ess Return. ■ T oggle Enforced to either On or Of f to enfor ce whethe[...]

Managing Data Calls 8-25 The Budget Statistics screen appears. Y ou can view statistics for all your budgets at once or one at a time. ■ Budget Name shows the names of your budgets. ■ First Minutes displays the number of first minutes of outbound calls placed during the recor ding inter val. ■ Additional Minutes displays the remaining time o[...]

8-26 User’ s Reference Guide D D D D a a a a t t t t e e e e a a a a n n n n d d d d t t t t ii i i m m m m e e e e s s s s e e e e t t t t t t t t ii i i n n n n g g g g Note: If you have Connection Budgets configured, changing the date setting will r eset the Connection Budgets under one of the following conditions: ■ If the new date is grea[...]

Virtual Private Networks 9-1 C C C C h h h h a a a a p p p p t t t t e e e e r r r r 9 9 9 9 V V V V ii i i r r r r t t t t u u u u a a a a ll l l P P P P r r r r ii i i v v v v a a a a t t t t e e e e N N N N e e e e t t t t w w w w o o o o r r r r k k k k s s s s The Netopia R2020 Dual Analog Router of fers both PPTP and A TMP Layer 2 tunneling s[...]

9-2 User’ s Reference Guide Unlike the phone company , private and public computer networks can use more than one pr otocol to car r y your infor mation over the wires. Two such pr otocols are in common use for tunnelling, Point-to-Point T unnelling Protocol (PPTP) and Ascend T unnel Management Protocol (A TMP). The Netopia Router can use either [...]

Virtual Private Networks 9-3 Configuring the Netopia Router for use with either of the two protocols is done thr ough the console-based menu screens. Each type is described in its own section: ■ “About PPTP tunnels” on page 9-4 ■ “About A TMP T unnels” on page 9-16 Y our configuration depends on which pr otocol you (and the router at [...]

9-4 User’ s Reference Guide A A A A b b b b o o o o u u u u t t t t P P P P P P P P T T T T P P P P t t t t u u u u n n n n n n n n e e e e ll l l s s s s T o set up a PPTP tunnel, you cr eate a Connection Profile including the IP addr ess and other relevant infor mation for the remote PPTP par tner . Y ou use the same procedur e to initiate a P[...]

Virtual Private Networks 9-5 Note: Profiles using PPTP do not of fer a T elco Options scr een. ■ Enter the PPTP Par tner IP Address . This specifies the addr ess of the other end of the tunnel. If you do not specify the PPTP Par tner IP Address the gateway cannot initiate tunnels, i.e., act as a PPTP Access Concentrator (P AC) for this pr ofil[...]

9-6 User’ s Reference Guide initiating a tunnel connection. ■ Y ou can specify a Receive Host Name which is used with the Receive Secret for authenticating a r emote PPTP client. ■ Y ou must specify a Receive Secr et , used for authenticating the remote PPTP client. ■ Y ou can specify that this r outer will Initiate Connections (acting as a[...]

Virtual Private Networks 9-7 Ordinarily , Ping is an excellent troubleshooting tool, but it will not be ef fective in this cir cumstance. Instead, use another TCP- or UDP-based network ser vice for troubleshooting. Since the Netopia Router is capable of ser ving T elnet and HTTP , we recommend using these ser vices instead of Ping. E E E E n n n n [...]

9-8 User’ s Reference Guide V V V V P P P P N N N N D D D D e e e e f f f f a a a a u u u u ll l l t t t t A A A A n n n n s s s s w w w w e e e e r r r r P P P P r r r r o o o o f f f f ii i i ll l l e e e e The W AN Configuration menu of fers a VPN Default Answer Pr ofile option. Use this selection when your r outer is acting as the ser ver f[...]

Virtual Private Networks 9-9 default) if you do not. This applies to both A TMP and PPTP connections. ■ For PPTP tunnel connections only , you must define what type of authentication these connections will use. Select Receive Authentication and press Retur n. A pop-up menu of fers the following options: P AP (the default), CHAP , or MS-CHAP . ?[...]

9-10 User’ s Reference Guide D D D D ii i i a a a a ll l l - - - - U U U U p p p p N N N N e e e e t t t t w w w w o o o o r r r r k k k k ii i i n n n n g g g g f f f f o o o o r r r r V V V V P P P P N N N N Microsoft Windows Dial-Up Networking softwar e per mits a remote stand-alone workstation to establish a VPN tunnel to a PPTP ser ver such [...]

Virtual Private Networks 9-11 The Communications window appears. 5. In the Communications window , select Dial-Up Networking and click the OK button. This retur ns you to the Windows Setup screen. Click the OK button. 6. Respond to the prompts to install Dial-Up Networking fr om the system disks or CDROM. 7. When prompted, r eboot your PC. C C C C [...]

9-12 User’ s Reference Guide C C C C o o o o n n n n f f f f ii i i g g g g u u u u r r r r ii i i n n n n g g g g a a a a D D D D ii i i a a a a ll l l - - - - U U U U p p p p N N N N e e e e t t t t w w w w o o o o r r r r k k k k ii i i n n n n g g g g p p p p r r r r o o o o f f f f ii i i ll l l e e e e Once you have created your Dial-Up Net[...]

Virtual Private Networks 9-13 4. Click the TCP/IP Settings button. ■ If your ISP uses dynamic IP addressing (DHCP), select the Ser ver assigned IP addr ess radio button. ■ If your ISP uses static IP addressing, select the Specify an IP addr ess radio button and enter your assigned IP address in the fields pr ovided. Also enter the IP address i[...]

9-14 User’ s Reference Guide II I I n n n n s s s s t t t t a a a a ll l l ll l l ii i i n n n n g g g g t t t t h h h h e e e e V V V V P P P P N N N N C C C C ll l l ii i i e e e e n n n n t t t t Before Installing the VPN Client you must have TCP/IP installed and have an established Inter net connection. W W W W ii i i n n n n d d d d o o o o [...]

Virtual Private Networks 9-15 3. Click the Windows Setup tab. The Windows Setup screen will be displayed within the top center box. 4. Double-click Communications . This displays a list of possible selections for the communications option. Active components will have a check in the checkboxes to their left. 5. Check Dial Up Networking at the top of[...]

9-16 User’ s Reference Guide A A A A b b b b o o o o u u u u t t t t A A A A T T T T M M M M P P P P T T T T u u u u n n n n n n n n e e e e ll l l s s s s T o set up an A TMP tunnel, you create a Connection Profile including the IP addr ess and other relevant infor mation for the remote A TMP par tner . A TMP uses the ter minology of a foreign [...]

Virtual Private Networks 9-17 When you define a Connection Profile as using A TMP by selecting A TMP as the datalink encapsulation method, and then select Data Link Options , the A TMP T unnel Options screen appears. Note: An A TMP tunnel cannot be assigned a dynamic IP address by the r emote ser ver , as in a PPP connection. When you define an [...]

9-18 User’ s Reference Guide invisible. ■ Y ou can specify that this r outer will Initiate Connections , acting as a foreign agent ( Ye s ), or only answer them, acting as a home agent ( No ). ■ T unnels ar e nor mally initiated On Demand ; however , you can disable this featur e. When disabled, the tunnel must be manually established through[...]

Virtual Private Networks 9-19 A A A A ll l l ll l l o o o o w w w w ii i i n n n n g g g g V V V V P P P P N N N N s s s s t t t t h h h h o o o o u u u u g g g g h h h h a a a a f f f f ii i i r r r r e e e e w w w w a a a a ll l l ll l l An administrator interested in securing a network will usually combine the use of VPNs with the use of a fir [...]

9-20 User’ s Reference Guide Select Display/Change Input Filter . Display/Change Input Filter screen For Input Filter 1 set the Destination Por t infor mation as shown below . For Input Filter 2 set the Protocol Type to allow GRE as shown below . +-#----Source IP Addr----Dest IP Addr------Proto-Src.Port-D.Port--On?-Fwd-+ +------------------------[...]

Virtual Private Networks 9-21 In the Display/Change IP Filter Set screen select Display/Change Output Filter . Display/Change Output Filter screen For Output Filter 1 set the Protocol Type and Destination Por t infor mation as shown below . For Output Filter 2 set the Protocol Type to allow GRE as shown below . +-#----Source IP Addr----Dest IP Addr[...]

9-22 User’ s Reference Guide A A A A T T T T M M M M P P P P E E E E x x x x a a a a m m m m p p p p ll l l e e e e T o enable a fir ewall to allow A TMP traf fic, you must provision the fir ewall to allow inbound and outbound UDP packets specifically destined for por t 5150. The source por t may be dynamic, so often it is not useful to apply[...]

Virtual Private Networks 9-23 In the Display/Change IP Filter Set screen select Display/Change Output Filter . Display/Change Output Filter screen For Output Filter 1 set the Protocol Type and Destination Por t infor mation as shown below . For Output Filter 2 set the Protocol Type to allow GRE as shown below . Change Input Filter 2 Enabled: Yes Fo[...]

9-24 User’ s Reference Guide Change Output Filter 2 Enabled: Yes Forward: Yes Source IP Address: 0.0.0.0 Source IP Address Mask: 0.0.0.0 Dest. IP Address: 0.0.0.0 Dest. IP Address Mask: 0.0.0.0 Protocol Type: GRE[...]

Multiple Network Address T ranslation and IP Setup 10-1 C C C C h h h h a a a a p p p p t t t t e e e e r r r r 1 1 1 1 0 0 0 0 M M M M u u u u ll l l t t t t ii i i p p p p ll l l e e e e N N N N e e e e t t t t w w w w o o o o r r r r k k k k A A A A d d d d d d d d r r r r e e e e s s s s s s s s T T T T r r r r a a a a n n n n s s s s ll l l a [...]

10-2 User’ s Reference Guide The ter ms public and external refer to the Inter net side of the Netopia Router's connection. A machine on the public network cannot necessarily access a machine behind a Netopia Router's NA T remapping, unless you specify that it can. Multiple Network Address T ranslation (MultiNA T) intr oduces several ne[...]

Multiple Network Address T ranslation and IP Setup 10-3 In order to suppor t this type of mapping, the private addr esses and public addresses ar e separated and are assigned to ranges. Each range consists of a contiguous set of one or more addr esses. The router allocates the addresses in that range based on the type (static or P A T), and other r[...]

10-4 User’ s Reference Guide NA T configuration Y ou use the NA T featur e sets by defining a series of remapping r ules and then grouping them into a list . There are two kinds of lists -- Map Lists , made up of P A T and Static remapping r ules, and Ser ver Lists , a list of internal ser vices to be presented to the exter nal world. Cr eating[...]

Multiple Network Address T ranslation and IP Setup 10-5 ■ The Local W AN IP Addr ess is used to configure a NA T public addr ess range consisting of the Local WAN IP Address and all its por ts. The public addr ess map list is named Easy-P A T List and the por t map list is named Easy-Ser vers . When you exit this screen the two map lists, Easy-P[...]

10-6 User’ s Reference Guide Select Network Address Translation (NA T) and press Retur n. The Network Address T ranslation screen appears. Public Range: defines an external addr ess range and indicates what type of remapping to apply when using this range. The types of remapping available ar e static and pat . Map Lists: define collections of m[...]

Multiple Network Address T ranslation and IP Setup 10-7 N N N N A A A A T T T T r r r r u u u u ll l l e e e e s s s s The following r ules apply to assigning NA T ranges and ser ver lists: ■ Static public address ranges must not overlap other static, P A T , public addr esses or the public address assigned to the router’s WAN inter face. ■ A[...]

10-8 User’ s Reference Guide ■ Select ADD NA T PUBLIC RANGE and press Retur n. The range will be added to your list and you will be retur ned to the Network Address Translation screen. Once the public ranges have been assigned, the next step is to bind interior addresses to them. Because these bindings occur in order ed lists, called map lists [...]

Multiple Network Address T ranslation and IP Setup 10-9 ■ Select First and Last Private Address and enter the first and last interior IP addresses you want to assign to this mapping. ■ Select Use NA T Public Range and press Retur n. A screen appears displaying the public ranges you have defined. ■ From the list of public ranges you defined[...]

10-10 User’ s Reference Guide ■ Select ADD NA T MAP and press Retur n. Y our mapping is added to your map list. M M M M o o o o d d d d ii i i f f f f y y y y ii i i n n n n g g g g m m m m a a a a p p p p ll l l ii i i s s s s t t t t s s s s Y ou can make changes to an existing map list after you have cr eated it. Since there may be mor e tha[...]

Multiple Network Address T ranslation and IP Setup 10-11 The Show/Change NA T Map List screen appears. ■ Add Map allows you to add a new map to the map list. ■ Show/Change Maps allows you to modify the individual maps within the list. ■ Delete Map allows you to delete a map from the list. ■ Move Map allows you to change the priority order i[...]

10-12 User’ s Reference Guide The Change NA T Map screen appears. Make any modifications you need and then select CHANGE NA T MAP and pr ess Retur n. Y our changes will become ef fective and you will be r etur ned to the Show/Change NA T Map List screen. M M M M o o o o v v v v ii i i n n n n g g g g m m m m a a a a p p p p s s s s The Move Map [...]

Multiple Network Address T ranslation and IP Setup 10-13 All operations are done fr om a single pop-up menu. ■ In the Show/Change Map List screen, select Move Map . A selection mode pop-up menu appears. In this mode you scroll to the map you want to move and pr ess Return to select it for moving. ■ After pressing Retur n you are in Move mode. A[...]

10-14 User’ s Reference Guide ■ Select Ser vice and press Retur n. A pop-up menu appears listing a selection of commonly expor ted ser vices. ■ Choose the ser vice you want to expor t and pr ess Return. Y ou can choose a pr econfigured ser vice fr om the list, or define your own by selecting Other . If you select Other , a scr een is displa[...]

Multiple Network Address T ranslation and IP Setup 10-15 ■ Enter the First and Last Por t Number between por ts 1 and 65535. Select OK and press Retur n. Y ou will be retur ned to the Add NA T Ser ver screen. ■ Enter the Ser ver Private IP Address of the ser ver whose ser vice you are expor ting. Since MultiNA T per mits the mapping of multiple[...]

10-16 User’ s Reference Guide The Show/Change NA T Ser ver List scr een appears. ■ Selecting Show/Change Ser ver or Delete Ser ver displays the same pop-up menu. Network Address Translation +-NAT Server List Name-+ +----------------------+ A| my_servers | S| |.. D| | | | A| | S| | D| | | | A| | S| |. D| | | | | | | | | | | | +------------------[...]

Multiple Network Address T ranslation and IP Setup 10-17 Select any ser ver from the list and pr ess Retur n. The Change NA T Ser ver scr een appears. Y ou can make changes to the ser ver’s ser vice and por t or internal or exter nal addr ess. Select CHANGE NA T SERVER and press Retur n. Y our changes take ef fect and you ar e retur ned to the Sh[...]

10-18 User’ s Reference Guide A pop-up menu lists your configured ser vers. Select the one you want to delete and pr ess Retur n. A dialog box asks you to confir m your choice. Choose CONTINUE and press Retur n. The ser ver is deleted fr om the list. B B B B ii i i n n n n d d d d ii i i n n n n g g g g M M M M a a a a p p p p L L L L ii i i s [...]

Multiple Network Address T ranslation and IP Setup 10-19 ■ Select NA T Map List and press Retur n. A pop-up menu displays a list of your defined map lists. ■ Select the map list you want to bind to this Connection Profile and pr ess Return. The map list you selected will now be bound to this Connection Profile. ■ Select NA T Ser ver List a[...]

10-20 User’ s Reference Guide ■ Select the ser ver list you want to bind to this Connection Profile and pr ess Retur n. The ser ver list you selected will now be bound to this Connection Profile. Note: There is no inter dependency between NA T and IP Addr essing. Also, the Local W AN IP Address and Mask fields’ visibility are dependent onl[...]

Multiple Network Address T ranslation and IP Setup 10-21 The Default Answer Profile scr een appears. If Must Match a Defined Profile is set to Ye s , then the NA T attributes of the Connection Pr ofile take precedence. If you toggle Must Match a Defined Profile to No , IP-r elated menu options become visible. ■ Select IP Parameters and pres[...]

10-22 User’ s Reference Guide N N N N A A A A T T T T A A A A s s s s s s s s o o o o c c c c ii i i a a a a t t t t ii i i o o o o n n n n s s s s Configuration of map and ser ver lists alone is not suf ficient to enable NA T for a W AN connection because map and ser ver lists must be linked to a profile that contr ols the WAN inter face. Thi[...]

Multiple Network Address T ranslation and IP Setup 10-23 ■ Select the list name you want to assign and press Retur n again. Y our selection will then be associated with the cor responding pr ofile or inter face. NAT Associations +NAT Map List Name-+ Profile/Interface Name-------------Nat+------------------+Server List Name Easy Setup Profile On [...]

10-24 User’ s Reference Guide M M M M u u u u ll l l t t t t ii i i N N N N A A A A T T T T C C C C o o o o n n n n f f f f ii i i g g g g u u u u r r r r a a a a t t t t ii i i o o o o n n n n E E E E x x x x a a a a m m m m p p p p ll l l e e e e T o help you understand a typical MultiNA T configuration, this section describes an example of th[...]

Multiple Network Address T ranslation and IP Setup 10-25 Enter your ISP-supplied values as shown below . Select NEXT SCREEN and press Retur n. Y our IP values ar e shown here. Then navigate to the Network Address T ranslation (NA T) scr een. Connection Profile 1: Easy Setup Profile Connection Profile Name: Easy Setup Profile Address Translation Ena[...]

10-26 User’ s Reference Guide Select Show/Change Public Range , then Easy-P A T Range , and pr ess Retur n. Enter the value your ISP assigned for your public address (206.1.1.6, in this example). T oggle Type to pat . Y our public addr ess is then mapped to the remaining private IP addr esses using P A T . (If you wer e not using the Easy-P A T R[...]

Multiple Network Address T ranslation and IP Setup 10-27 Select ADD NA T PUBLIC RANGE and press Retur n. Y ou ar e retur ned to the Network Addr ess Translation screen. Next, select Show/Change Map List and choose Easy-P A T List . Select Add Map . The Add NA T Map scr een appears. (Now the name Easy-P A T List is a misnomer since it has a static m[...]

10-28 User’ s Reference Guide ■ First, navigate to the Show/Change Map List screen, select Easy-P A T List and then Show/Change Maps . Choose the Static Map you created and change the First Private Address fr om 192.168.1.1 to 192.168.1.4. Now the router , Web, and Mail ser vers’ IP addr esses are no longer included in the range of static rem[...]

Multiple Network Address T ranslation and IP Setup 10-29 IP subnets The IP Subnets screen allows you to configur e up to eight Ethernet IP subnets, one “primar y” subnet and up to seven secondar y subnets, by entering IP address/subnet mask pairs: Note: Y ou need not use this scr een if you have only a single Ethernet IP subnet. In that case, [...]

10-30 User’ s Reference Guide For example: ■ T o delete a configur ed subnet, set both the IP address and subnet mask values to 0.0.0.0, either explicitly or by clearing each field and pressing Retur n or Enter to commit the change. When a configured subnet is deleted, the values in subsequent rows adjust up to fill the vacant fields. Note[...]

Multiple Network Address T ranslation and IP Setup 10-31 If you have configured multiple Ether net IP subnets, the IP Setup screen changes slightly: The IP address and Subnet mask items ar e hidden, and the “Define Additional Subnets...” item becomes “Subnet Configuration...”. If you select Subnet Configuration , you will retur n to the[...]

10-32 User’ s Reference Guide Viewing static r outes T o display a view-only table of static r outes, select Display/Change Static Route in the Static Routes screen. The table has the following columns: Dest. Network: The network IP address of the destination network. Subnet Mask: The subnet mask associated with the destination network. Next Gate[...]

Multiple Network Address T ranslation and IP Setup 10-33 Priority: An indication whether the Netopia R2020 will use the static route when it conflicts with infor mation received fr om RIP packets. Enabled: An indication whether the static route should be installed in the IP r outing table. Adding a static route T o add a new static r oute, select [...]

10-34 User’ s Reference Guide With RIP Metric you set the number of routers, fr om 1 to 15, between the sending router and the destination router . The maximum number of routers on a packet’s r oute is 15. Setting RIP Metric to 1 means that a route can involve 15 r outers, while setting it to 15 means a route can only involve one router. ■ Se[...]

Multiple Network Address T ranslation and IP Setup 10-35 IP addr ess ser ving In addition to being a router , the Netopia R2020 is also an IP address ser ver . There ar e four protocols it can use to distribute IP addresses. ■ The first, called Dynamic Host Configuration Protocol (DHCP) , is widely suppor ted on PC networks, as well as Apple Ma[...]

10-36 User’ s Reference Guide T o go to the IP Addr ess Ser ving screen, select IP Addr ess Ser ving in the System Configuration screen and press Retur n. Follow these steps to configure IP Addr ess Ser ving: ■ If you enabled IP Address Ser ving either by using Smar tStar t or in Easy Setup, DHCP , BootP clients, Dynamic W AN clients, and Mac[...]

Multiple Network Address T ranslation and IP Setup 10-37 DHCP NetBIOS Options If your network uses NetBIOS, you can enable the Netopia R2020 to use DHCP to distribute NetBIOS infor mation. NetBIOS stands for Network Basic Input/Output System. It is a layer of software originally developed by IBM and Sytek to link a network operating system with spe[...]

10-38 User’ s Reference Guide ■ T o ser ve DHCP clients with the NetBIOS scope, select Ser ve NetBIOS Scope and toggle it to Ye s . Select NetBIOS Scope and enter the scope. ■ T o ser ve DHCP clients with the IP addr ess of a NetBIOS name ser ver , select Serve NetBIOS Name Ser ver and toggle it to Ye s . Select NetBIOS Name Ser ver IP Addres[...]

Multiple Network Address T ranslation and IP Setup 10-39 The Ser ved IP Addresses scr een appears. T o r elease these addresses, select Lease Management . Select Release BootP Leases and press Retur n. For more lease management infor mation see “Ser ved IP Addr esses” on page 13-10 . Served IP Addresses -IP Address-------Type----Expires--Client[...]

10-40 User’ s Reference Guide DHCP Relay Agent The R2020 of fers DHCP Relay Agent functionality , as defined in RFC1542. A DHCP r elay agent is a computer system or a router that is configur ed to for ward DHCP r equests from clients on the LAN to a r emote DHCP ser ver , and to pass the r eplies back to the requesting client systems. When a DH[...]

Multiple Network Address T ranslation and IP Setup 10-41 Select IP Address Ser ving Mode . The pop-up menu of fers the choices of Disabled, DHCP Ser ver (the default), and DHCP Relay Agent. If you select DHCP Relay Agent and press Retur n, the screen changes as shown below . Now you can enter the IP address(es) of your r emote DHCP ser ver(s), such[...]

10-42 User’ s Reference Guide option is automatically enabled if the AppleT alk kit is installed and IP Address Ser ving is enabled. ■ Select MacIP/KIP Static Options and press Retur n. The MacIP (KIP) For war ding Setup screen tells the Netopia R2020 how many static addresses to allocate for MacIP/KIP clients. The addr esses must fall within t[...]

IPX Setup 11-1 C C C C h h h h a a a a p p p p t t t t e e e e r r r r 1 1 1 1 1 1 1 1 II I I P P P P X X X X S S S S e e e e t t t t u u u u p p p p Internetwork Packet Exchange (IPX) is the network pr otocol used by Novell NetW are networks. This chapter shows you how to configure the Netopia R2020 for r outing data using IPX. Y ou also lear n h[...]

11-2 User’ s Reference Guide IPX addr ess An IPX address consists of a network number , a node number , and a socket number . An IPX network number is composed of eight hexadecimal digits. The network number must be the same for all nodes on a par ticular physical network segment. The node number is composed of twelve hexadecimal digits and is us[...]

IPX Setup 11-3 The following is a list of common SAP ser ver types: NetBIOS NetBIOS is a protocol that per forms tasks r elated to the T ranspor t and Session layers of the OSI model. It can operate over IPX, using a special broadcast packet known as “IPX Packet type 20” to communicate with IPX NetBIOS ser vers. IPX Spoofing The Netopia R2020 [...]

11-4 User’ s Reference Guide T o go to the IPX Setup scr een, from the Main Menu select System Configuration and then select Network Protocols Setup and then select IPX Setup . Note: If you have completed Easy Setup, the infor mation you have already enter ed will appear in the IP Setup options screen. 1. T o enable IPX r outing, select IPX Rout[...]

IPX Setup 11-5 7. Select Default Gateway Address , and enter the network address of the IPX network to which all packets of unknown destination address should be r outed. Note: The Default Gateway Address is usually set up to match the IPX Addr ess in your network Connection Profile. 8. T o configur e filters and filter sets, select Filters and[...]

11-6 User’ s Reference Guide T o configur e IPX routing in the answer pr ofile, select IPX Parameters and go to the IPX Parameters (Default Answer Profile) scr een. The items in this screen ar e similar to the IPX Profile Parameters items of the same name (see page 11-5 ). IPX Parameters (Default Answer Profile) NetBios Packet Forwarding: Off[...]

IPX Setup 11-7 IPX r outing tables IPX routing tables pr ovide infor mation on cur rent IPX r outes and ser vices. T o go to the IPX Routing T able scr een, select IPX Routing T able in the Routing T ables screen. This table shows detailed infor mation about cur rent IPX network r outes. T o go to the IPX SAP Binder y T able scr een, select IPX SAP[...]

11-8 User’ s Reference Guide[...]

AppleT alk Setup 12-1 C C C C h h h h a a a a p p p p t t t t e e e e r r r r 1 1 1 1 2 2 2 2 A A A A p p p p p p p p ll l l e e e e T T T T a a a a ll l l k k k k S S S S e e e e t t t t u u u u p p p p This chapter discusses the concept of AppleT alk routing and how to configur e AppleT alk Setup for a Netopia R2020 with the AppleT alk kit insta[...]

12-2 User’ s Reference Guide If the cabling of your network were a str eet system, then a node address would cor r espond to a building’s street addr ess. Node addresses ar e not per manent. Each AppleT alk device deter mines its node address at star tup. Although a Macintosh that is star ting up will tr y to use its pr evious address, the addr[...]

AppleT alk Setup 12-3 MacIP When Macintosh computers encapsulate TCP/IP packets in AppleT alk, either because they are on LocalT alk or they are on EtherT alk for administrative r easons, they must use the ser vices of a MacIP gateway . This gateway conver ts network traf fic into the cor rect for mat for AppleT alk or IP , depending on the traf ?[...]

12-4 User’ s Reference Guide Y ou should set the Netopia R2020’s seeding action to work best in your par ticular network envir onment. These scenarios may guide you in deciding how to set the router’s seeding: ■ If the Netopia R2020 is the only router on your network, you must set it to either har d seeding or soft seeding. The default is s[...]

AppleT alk Setup 12-5 The Netopia Feature Set Upgrade scr een appears. Follow the instr uctions to enable AppleT alk on your router. Once AppleT alk is enabled, you can configure your network as described in the following sections. Main Menu System Conf iguration Upgrade Feature Set Netopia Feature Set Upgrade You may be able to extend the feature[...]

12-6 User’ s Reference Guide Configuring AppleT alk AppleT alk setup for Netopia R2020s consists of configuring EtherT alk, LocalT alk, and AURP . EtherT alk Setup T o go to the EtherT alk Setup options scr een, select Network Protocols Setup and then select AppleT alk Setup in the System Configuration screen. Select EtherT alk Phase ll Setup [...]

AppleT alk Setup 12-7 EtherT alk Phase II por t is visible to other AppleT alk nodes. The default zone is also where new AppleT alk nodes will appear . If you do not set a default zone, the first zone you cr eate will be the default zone. ■ Y ou can also set the range of EtherT alk Phase II network numbers. Select Net Low and enter the lower lim[...]

12-8 User’ s Reference Guide As an alternative, you can set LocalT alk seeding to soft seeding and let the Netopia R2020 r eceive the zone name and network number from the other r outer . ■ Select LocalT alk Network Number and enter the desir ed network number . ■ Select Seeding. From the pop-up menu, choose the type of seeding for the Netopi[...]

AppleT alk Setup 12-9 Site A has an AURP tunnel to site B. Both sides have multiple zones defined on the EtherT alk por t and a unique zone on their LocalT alk por ts. If side A has indicated one of its EtherT alk zones is the Free Trade Zone and has opted to use the Free T rade Zone option for its tunnel to B, then only this Free T rade Zone will[...]

12-10 User’ s Reference Guide Deleting an AURP partner ■ T o delete an AURP par tner , select Delete Par tner in the AURP Setup screen and pr ess Retur n to display a table of existing par tners. Use the Up and Down Ar row keys to select an AURP par tner, then press Return to delete it. Pr ess the Escape key to exit without deleting a par tner [...]

AppleT alk Setup 12-11 Raising the tickle packet inter val does not ensure that the AURP tunnel is dr opped or not brought up. If any application on the local network generates AppleT alk traf fic destined for the network at the r emote end of the AURP tunnel, the tunnel remains up. For example, if a host on the local network connects to a host on[...]

12-12 User’ s Reference Guide[...]

Monitoring T ools 13-1 C C C C h h h h a a a a p p p p t t t t e e e e r r r r 1 1 1 1 3 3 3 3 M M M M o o o o n n n n ii i i t t t t o o o o r r r r ii i i n n n n g g g g T T T T o o o o o o o o ll l l s s s s This chapter discusses the Netopia R2020’s device and network monitoring tools. These tools can provide statistical infor mation, repor [...]

13-2 User’ s Reference Guide General Status Current Date: The cur r ent date; this can be set with the Date and Time utility (see “Date and Time” on page 7-11 ). Default IP Gateway: The router’s default gateway , which may be either manually configur ed or learned via DHCP . This is the value you assigned in the Default IP Gateway field o[...]

Monitoring T ools 13-3 Curr ent Status The cur rent status section is a table showing the cur r ent status of the WAN. For example: W AN Status Profile Name: Lists the name of the connection pr ofile being used, if any . State: Lists the por ts in use for this connection. %Use: Indicates the average percent utilization of the maximum capacity of [...]

13-4 User’ s Reference Guide Statistics & Logs When you are tr oubleshooting your Netopia R2020, the Statistics screens pr ovide insight into the recent event activities of the Router . From the Main Menu go to Statistics & Logs and select one of the options described in the sections below . General Statistics T o go to the General Statis[...]

Monitoring T ools 13-5 The right side of the table lists the total number of occur rences of each of five types of communication statistics: EN Rx Packets: The number of Ethernet packets r eceived. EN Rx Errors: The number of bad Ether net packets received. EN Collisions: An er ror occur ring when Ether net packets ar e transmitted simultaneously [...]

13-6 User’ s Reference Guide W AN Event History The W AN Event Histor y screen lists a total of 128 events on the WAN. The most recent events appear at the top. T o go to the WAN Event Histor y scr een, select W AN Event Histor y in the Statistics & Logs screen. Each entr y in the list contains the following infor mation: Time: Time of the ev[...]

Monitoring T ools 13-7 Device Event History The Device Event Histor y screen lists a total of 128 por t and system events, giving the time and date for each event, as well as a brief description. The most recent events appear at the top. T o go to the Device Event Histor y scr een, select Device Event Histor y in the Statistics & Logs screen. I[...]

13-8 User’ s Reference Guide IP routing table The IP routing table displays all of the IP r outes cur rently known to the Netopia R2020. T o display the IP Routing T able scr een, select IP Routing T able in the Statistics & Logs scr een and press Return. IPX routing table The IPX routing table displays all of the IPC r outes cur rently known[...]

Monitoring T ools 13-9 T o display the IPX Routing T able scr een, select IPX Routing T able in the Statistics & Logs scr een and press Return. IPX Sap Bindery table The IPX Sap Binder y table displays all of the IPX Sap Binder y r outes cur rently known to the Netopia R2020. T o display the IPX SAP Binder y T able scr een, select IPX Sap Binde[...]

13-10 User’ s Reference Guide (Def) Zone Name: Displays the zone or zones associated with the specified network or network range. The zone name shown is either the only zone or the default zone name for an extended network. T o see the complete list of zones for an extended network with multiple zones, select the entr y in the table and press th[...]

Monitoring T ools 13-11 The IP Address Lease Management scr een appears. By selecting each of these options you can: ■ Reset all cur rent IP addr esses leased through DHCP without waiting for the default one hour lease period to elapse ■ Release BootP leases that may be in place, and which may no longer be requir ed ■ Reclaim ser ved leases t[...]

13-12 User’ s Reference Guide System Information The System Infor mation screen gives a summar y view of the general system level values in the Netopia R2020 Dual Analog Router. From the Statistics & Logs menu select System Information . The System Infor mation screen appears. SNMP The Netopia R2020 includes a Simple Network Management Protoc[...]

Monitoring T ools 13-13 The SNMP Setup scr een T o go to the SNMP Setup scr een from the Main Menu, select SNMP in the System Configuration screen and press Retur n. Follow these steps to configure the first thr ee items in the screen: 1. Select System Name and enter a descriptive name for the Netopia R2020’s SNMP agent. 2. Select System Locat[...]

13-14 User’ s Reference Guide By default, the read-only and r ead/write community strings are set to “public” and “private,” r espectively . Y ou should change both of the default community strings to values known only to you and tr usted system adminis- trators. T o change a community string, select it and enter a new value. Star ting wi[...]

Monitoring T ools 13-15 Setting the IP trap receivers 1. Select Add IP Trap Receiver . 2. Select Receiver IP Address or Domain Name . Enter the IP address or domain name of the SNMP manager you want to receive the trap. 3. Select Community String if you enabled one in the SNMP Setup screen, and enter the appr opriate password. 4. Select Add Trap Re[...]

13-16 User’ s Reference Guide[...]

Security 14-1 C C C C h h h h a a a a p p p p t t t t e e e e r r r r 1 1 1 1 4 4 4 4 S S S S e e e e c c c c u u u u r r r r ii i i t t t t y y y y The Netopia R2020 provides a number of security featur es to help protect its configuration scr eens and your local network from unauthorized access. Although these featur es are optional, it is str o[...]

14-2 User’ s Reference Guide User accounts When you first set up and configure the Netopia R2020, no passwor ds are r equired to access the configuration screens. Anyone could tamper with the r outer’s configuration by simply connecting it to a console. However , by adding user accounts, you can pr otect the most sensitive screens fr om una[...]

Security 14-3 T o display a view-only list of user accounts, select Show Users in the Security Options screen. T o add a new user account, select Add User in the Security Options screen and pr ess Retur n to go to the Add Name With Write Access screen. Follow these steps to configure the new account: 1. Select Enter Name and enter a descriptive na[...]

14-4 User’ s Reference Guide Enable SmartStart/W eb Server Y ou may wish to r estrict access to the web-based screens to pr event inadver tent switching or connecting and disconnecting of Connection Profiles. Since Smar tStar t can be used to r econfigure the r outer , you may wish to block inadver tent damage resulting fr om unauthorized use o[...]

Security 14-5 How filter sets work A filter set acts like a team of customs inspectors. Each filter is an inspector through which incoming and outgoing packages must pass. The inspectors work as a team, but each inspects ever y package individually . Each inspector has a specific task. One inspector’s task may be to examine the destination ad[...]

14-6 User’ s Reference Guide If the package does not match the first inspector’s criteria, it goes to the second inspector , and so on. Y ou can see that the order of the inspectors in the line is ver y impor tant. For example, let’s say the first inspector’s orders ar e to send along all packages that come from Rome, and the second inspe[...]

Security 14-7 How individual filters work As described above, a filter applies criteria to an IP packet and then takes one of three actions: A filter’ s actions ■ Passes the packet to the local or remote network ■ Blocks (discards) the packet ■ Ignores the packet A filter passes or blocks a packet only if it finds a match after applyin[...]

14-8 User’ s Reference Guide Port number comparisons A filter can also use a comparison option to evaluate a packet’s source or destination por t number. The comparison options are: No Compare: No comparison of the por t number specified in the filter with the packet’s por t number. Not Equal T o: For the filter to match, the packet’s p[...]

Security 14-9 Putting the parts together When you display a filter set, its filters are displayed as r ows in a table: The table’s columns cor respond to each filter’s attributes: #: The filter’s priority in the set. Filter number 1, with the highest priority , is first in the table. Source IP Addr: The packet sour ce IP address to match[...]

14-10 User’ s Reference Guide Filtering example #1 Returning to our filtering r ule example from above (see page 14-7 ), look at how a r ule is translated into a filter . Star t with the r ule, then fill in the filter’s attributes: 1. The r ule you want to implement as a filter is: Block all T elnet attempts that originate fr om the remote[...]

Security 14-11 This filter blocks any packets coming from a r emote network with the IP network address 200.233.14.0. The 0 at the end of the address signifies any host on the class C IP network 200.233.14.0. If, for example, the filter is applied to a packet with the source IP addr ess 200.233.14.5, it will block it. In this case, the mask, whi[...]

14-12 User’ s Reference Guide An approach to using filters The ultimate goal of network security is to prevent unauthorized access to the network without compr omising authorized access. Using filter sets is par t of reaching that goal. Each filter set you design will be based on one of the following approaches: ■ That which is not expressly[...]

Security 14-13 3. View , change, or delete individual filters and filter sets. The sections below explain how to execute these steps. Adding a filter set Y ou can cr eate up to eight dif fer ent custom filter sets. Each filter set can contain up to 16 output filters and up to 16 input filters. T o add a new filter set, select Add IP Filter [...]

14-14 User’ s Reference Guide Input and output filters—source and destination There ar e two kinds of filters you can add to a filter set: input and output. Input filters check packets received from the Inter net, destined for your network. Output filters check packets transmitted from your network to the Internet. Packets in the Netopia R[...]

Security 14-15 1. T o make the filter active in the filter set, select Enabled and toggle it to Ye s . If Enabled is toggled to No , the filter can still exist in the filter set, but it will have no ef fect. 2. If you want the filter to for ward packets that match its criteria to the destination IP addr ess, select For ward and toggle it to Ye[...]

14-16 User’ s Reference Guide 10. When you are finished configuring the filter , select ADD THIS FIL TER NOW to save the filter in the filter set. Select CANCEL to discar d the filter . Viewing filters T o display a view-only table of input (output) filters, select Display/Change Input Filters ( Display/Change Output Filters ) in the Add [...]

Security 14-17 Modifying filter sets T o modify a filter set, select Display/Change Filter Set in the Filter Sets screen to display a list of filter sets. Select a filter set from the list and pr ess Return to go to the Change IP Filter Set scr een. The items in this screen ar e the same as the ones in the Add Filter screen (see “Adding filt[...]

14-18 User’ s Reference Guide The five input filters and one output filter that make up Basic Firewall ar e shown in the table below . Basic Firewall’s filters play the following r oles. Input filters 1 and 2: These block W AN-originated OpenWindows and X-Windows sessions. Ser vice origination requests for these pr otocols use por ts 2000 [...]

Security 14-19 Basic Firewall is suitable for a LAN containing only client hosts that wish to access ser vers on the WAN, not for a LAN containing ser vers providing ser vices to clients on the W AN. Basic Firewall’s general strategy is to explicitly pass W AN-originated TCP and UDP traf fic to por ts gr eater than 1023. Por ts lower than 1024 a[...]

14-20 User’ s Reference Guide FTP sessions. T o allow WAN-originated FTP sessions to a LAN-based FTP ser ver with the IP addr ess a.b.c.d (cor responding to a number ed IP address such as 163.176.8.243), inser t the following input filter ahead of the cur rent input filter 1: ■ Enabled: Y es ■ For ward: Y es ■ Source IP Addr ess: 0.0.0.0 [...]

Security 14-21 IPX filters IPX packet filters work ver y similarly to IP packet filters. They filter data traf fic coming from or going to remote IPX networks. IPX filters can be set up to pass or discard IPX packets based on a number of user-defined criteria. Like IP filters, IPX filters must be grouped in sets that ar e applied to the an[...]

14-22 User’ s Reference Guide The items in the IPX Filters and Filter Sets screen ar e grouped into four ar eas: ■ IPX packet filters ■ IPX packet filter sets ■ IPX SAP filters ■ IPX SAP filter sets The following sections explain the items in each of these areas. IPX packet filters For each IPX packet filter , you can configur e a [...]

Security 14-23 1. Select Filter Name and enter a descriptive name for the filter . 2. T o specify a sour ce network for the filter to match on, select Source Network and enter an IPX network address. 3. T o specify a sour ce node for the filter to match on, select Source Node Addr ess and enter an IPX node address. 4. T o specify a sour ce socke[...]

14-24 User’ s Reference Guide Follow these steps to configure the new packet filter set: 1. Select Filter Set Name and enter a descriptive name for the filter set. 2. T o change the for war ding action of filters in the filter set, select Show Filters/Change Action on Match and press Retur n to go to the Show Filters/Change Actions on Match [...]

Security 14-25 3. T o add a filter to the filter set, select Append Filter to display a table of filters. Select a filter from the table and press Retur n to add it to the filter set. The default action of newly added filters is to not for ward packets that match their criteria. T o exit the table without adding the filter , press the Escape[...]

14-26 User’ s Reference Guide Adding a SAP filter T o add a new IPX SAP filter , select Add IPX SAP Filter in the IPX Filters and Filter Sets screen and press Retur n to go to the Add SAP Filter screen. By default, the filter’s socket and type numbers and network and node addresses ar e null (all zeros). This sets the filter to match on any[...]

Security 14-27 Deleting a SAP filter T o delete a SAP filter , select Delete IPX SAP filter in the IPX Filters and Filter Sets screen to display a table of filters. Select a filter from the table and pr ess Return to delete it. Pr ess the Escape key to exit the table without deleting the filter . IPX SAP filter sets Before IPX SAP filters c[...]

14-28 User’ s Reference Guide Select a filter and toggle the entr y for war ding action to Ye s (pass) or No (discard). 3. T o add a filter to the filter set, select Append Filter to display a table of filters. Select a filter from the table and press Retur n to add it to the filter set. The default action of newly added filters is to not [...]

Security 14-29 Host : A workstation on the Network. Packet : Unit of communication on the Internet. Packet Filter : Packet filters allow or deny packets based on source or destination IP addr esses, TCP or UDP por ts, or the TCP ACK bit. Por t : A number that defines a par ticular type of ser vice. Filter Rule : A filter set is comprised of indi[...]

14-30 User’ s Reference Guide Fir ewall design rules There ar e two basic r ules to firewall design: ■ “What is not explicitly allowed is denied...” and ■ “What is not explicitly denied is allowed...” The first r ule is far more secur e, and is the best approach to fir ewall design. It is far easier (and more secur e) to allow in o[...]

Security 14-31 Logical ANDing When a packet is compared (in most cases) a logical AND is per formed. First the IP addr esses and subnet masks are conver ted to binar y and then ANDed together . The r ules for logical ANDing ar e as follows: 0 AND 0 = 0 0 AND 1 = 0 1 AND 0 = 0 1 AND 1 = 1 For example: Filter r ule: Deny IP: 163.176.1.15 BINAR Y : 10[...]

14-32 User’ s Reference Guide Example IP Filter Set Screen This is an example of the Netopia IP filter set screen: Filter Basics In the source or destination IP addr ess fields, the IP address that is enter ed MUST be the NETWORK address of the subnet. A HOST address can be enter ed, but the applied subnet mask must be 32 bits (255.255.255.255)[...]

Security 14-33 Example Network Example Filters Example 1 Incoming packet has the source addr ess of 200.1.1.28 This incoming IP packet has a source IP addr ess that matches the network address in the Sour ce IP Address field (00000000) in the Netopia R2020. This will NOT for ward this packet. Filter Rule: 200.1.1.0 (Source IP Network Addr ess) 255[...]

14-34 User’ s Reference Guide Example 2 Incoming packet has the source addr ess of 200.1.1.184 This incoming IP packet (10000000) has a source IP addr ess that does not match the network address in the Source IP Addr ess field (00000000) in the Netopia R2020. This r ule WILL for war d this packet because the packet does not match. Example 3 Inco[...]

Security 14-35 Example 4 Incoming packet has the source addr ess of 200.1.1.104 Since the Source IP Network Addr ess in the Netopia R2020 is 01100000, and the sour ce IP address after the logical AND is 01100000, this r ule DOES match and this packet will NOT be passed. Example 5 Incoming packet has the source addr ess of 200.1.1.96 Since the Sourc[...]

14-36 User’ s Reference Guide T oken Security Authentication This section discusses how to configure and use security authentication on the Netopia R2020. Note: The security authentication feature only applies to Netopia R2020 models connecting over a dial-up line using the PPP-P AP-TOKEN or PPP-CACHE-TOKEN authentication pr otocol. Securing net[...]

Security 14-37 The Netopia R2020 suppor ts the following user configurations for security authentication: ■ Single user , calling a single destination (single session) ■ Single user , calling multiple destinations (two simultaneous and separate sessions) ■ Multiple users, calling a single destination (single session) ■ Multiple users, call[...]

14-38 User’ s Reference Guide 2. Select Send Authentication and press Retur n. From the pop-up menu, highlight P AP-TOKEN or CACHE-TOKEN . Y our network administrator or the r emote network administrator will tell you which method to select. If you select P AP-TOKEN, select Send User Name and enter a name for your Netopia R2020. Y ou will not nee[...]

Security 14-39 1. Select Secure Authentication Monitor and pr ess Return. The Secur e Authentication Monitor screen appears. 2. W ait for the call to initiate. 3. From the fields that appear , select Enter P ASSCODE and pr ess Retur n. Enter your PIN and the code displayed on your security authentication token card LED. 4. Once the call is establi[...]

14-40 User’ s Reference Guide Note: When using CACHE-TOKEN, your passcode is valid for a time inter val deter mined by the network administrator . When this time inter val expir es, you must provide a new passcode for the call negotiation. When using P AP-TOKEN, your passcode is valid for one call negotiation. For a second call negotiation, you m[...]

Utilities and Diagnostics 15-1 C C C C h h h h a a a a p p p p t t t t e e e e r r r r 1 1 1 1 5 5 5 5 U U U U t t t t ii i i ll l l ii i i t t t t ii i i e e e e s s s s a a a a n n n n d d d d D D D D ii i i a a a a g g g g n n n n o o o o s s s s t t t t ii i i c c c c s s s s A number of utilities and tests are available for system diagnostic a[...]

15-2 User’ s Reference Guide Ping The Netopia R2020 includes a standard Ping test utility . A Ping test generates IP packets destined for a par ticular (Ping-capable) IP host. Each time the tar get host r eceives a Ping packet, it retur ns a packet to the original sender . Ping allows you to see whether a par ticular IP destination is reachable f[...]

Utilities and Diagnostics 15-3 While the Ping test is r unning, and when it is over , a status field and a number of statistical items are active on the screen. These ar e described below . Status: The cur rent status of the Ping test. This item can display the following messages: Packets Out: The number of packets sent by the Ping test. Packets I[...]

15-4 User’ s Reference Guide Packets Lost: The number of packets unaccounted for , shown in total and as a per centage of total packets sent. This statistic may be updated during the Ping test, and may not be accurate until after the test is over . However , if an escalating one-to-one cor r espondence is seen between Packets Out and Packets Lost[...]

Utilities and Diagnostics 15-5 T race Route Y ou can count the number of r outers between your Netopia Router and a given destination with the T race Route utility . Select Trace Route in the Statistics & Diagnostics screen and pr ess Return to go to the Trace Route screen. T o trace a r oute, follow these steps: 1. Select Host Name or IP Addre[...]

15-6 User’ s Reference Guide T elnet client The T elnet client mode r eplaces the nor mal menu mode. T elnet sessions can be cascaded, that is, you can initiate a T elnet client session when using a T elnet console session. T o activate the T elnet client, select T elnet from the Utilities & Diagnostics menu. The T elnet client scr een appear[...]

Utilities and Diagnostics 15-7 Disconnect T elnet Console Session If you want to close your T elnet Console session, select Disconnect T elnet Console Session and pr ess Return. A dialog box appears asking you to cancel or continue your selection. If you select Continue , you will immediately ter minate your session. Factory defaults Y ou can r ese[...]

15-8 User’ s Reference Guide The sections below describe how to update the Router’s fir mware and how to download and upload configuration files. Updating firmwar e Fir mware updates may be available periodically fr om Netopia or from a site maintained by your or ganization’s network administrator . There ar e two types of fir mware in t[...]

Utilities and Diagnostics 15-9 name (for example, bigroot/config/myfile). ■ Select Send Firmwar e to Netopia from TFTP Ser ver and pr ess Return. Y ou will see the following dialog box: ■ Select CANCEL to exit without downloading the file, or select CONTINUE to download the file. The system will reset at the end of the file transfer to put[...]

15-10 User’ s Reference Guide example, bigroot/config/myfile). ■ Select Read Config Now and press Retur n. Y ou will see the following dialog box: ■ Select CANCEL to exit without downloading the file, or select CONTINUE to download the file. The system will reset at the end of the file transfer to put the new configuration into ef fect[...]

Utilities and Diagnostics 15-11 Updating firmwar e Fir mware updates may be available periodically fr om Netopia or from a site maintained by your or ganization’s network administration. The procedur e below applies whether you are using the console or the built-in modems. Follow these steps to update the Netopia R2020’s fir mware: 1. Make su[...]

15-12 User’ s Reference Guide The system will reset at the end of a successful file transfer to put the new fir mwar e into ef fect. While the system resets, the LEDs will blink on and of f. Caution! Do not manually power down or reset the Netopia R2020 while it is automatically r esetting or it could be damaged. Downloading configuration fil[...]

Utilities and Diagnostics 15-13 1. Decide on a name for the file and a path for saving it. 2. Select Receive Config from Netopia and press Retur n. The following dialog box appears: 3. Select CANCEL to exit without uploading the file, or select CONTINUE to upload the file. If you choose CONTINUE , you will have ten seconds to use your ter minal[...]

15-14 User’ s Reference Guide[...]

P P P P a a a a r r r r t t t t II I I II I I II I I : : : : A A A A p p p p p p p p e e e e n n n n d d d d ii i i x x x x e e e e s s s s[...]

User’ s Reference Guide[...]

T roubleshooting A-1 A A A A p p p p p p p p e e e e n n n n d d d d ii i i x x x x A A A A T T T T r r r r o o o o u u u u b b b b ll l l e e e e s s s s h h h h o o o o o o o o t t t t ii i i n n n n g g g g This appendix is intended to help you troubleshoot pr oblems you may encounter while setting up and using the Netopia R2020. It also include[...]

A-2 User’ s Reference Guide SmartStart T roubleshooting The Status field of the Smar tStar t application will display infor mation and indicate pr oblems as they are detected. Console connection pr oblems Can’t see the configuration scr eens (nothing appears) ■ Check the cable connection from the Netopia R2020’s console por t to the compu[...]

T roubleshooting A-3 Power outages If you suspect that power was restor ed after a power outage, and the Netopia R2020 is connected to a remote site, you may need to switch the Netopia R2020 of f and then back on again. After temporar y power outages, a connection that still seems to be up may actually be disconnected. Rebooting the Router should r[...]

A-4 User’ s Reference Guide Phone: 1 800-782-6449 Fax: 1 510-814-5023 Netopia, Inc. Customer Ser vice 2470 Mariner Square Loop Alameda, California 94501 USA Netopia Bulletin Board Ser vice: 1 510-865-1321 Online product information Product infor mation can be found in the following: Netopia World Wide W eb ser ver via http://www .netopia.com Inte[...]

Setting Up Internet Services B-1 A A A A p p p p p p p p e e e e n n n n d d d d ii i i x x x x B B B B S S S S e e e e t t t t t t t t ii i i n n n n g g g g U U U U p p p p II I I n n n n t t t t e e e e r r r r n n n n e e e e t t t t S S S S e e e e r r r r v v v v ii i i c c c c e e e e s s s s This chapter describes how to obtain and set up I[...]

B-2 User’ s Reference Guide Unique r equirements Make sure the ISP can meet any unique r equirements you may have. Potential r equirements include: ■ Dynamic or static IP addressing ■ Class C IP address ■ Custom domain name ■ Multiple email addresses ■ Web site hosting ■ Call back for web site hosting at your site Pricing and support [...]

Setting Up Internet Services B-3 Consider expected growth in your network when deciding on the number of addr esses to obtain. Alternatively , you may use the Network Address T ranslation feature of Smar tIP . SmartIP™ The Netopia R2020 with Dual Analog suppor ts the Smar tIP™ feature which includes Network Addr ess T ranslation. Network Addres[...]

B-4 User’ s Reference Guide in the address block ■ The Ethernet IP addr ess for your Netopia R2020 ■ The Ethernet IP subnet mask addr ess for your Netopia R2020 ■ The Default Gateway IP Address (same as Remote IP Addr ess in most cases) ■ Primar y and Secondar y Domain Name Ser ver IP Addr esses ■ Domain Name (usually the same as the IS[...]

Understanding IP Addressing C-1 A A A A p p p p p p p p e e e e n n n n d d d d ii i i x x x x C C C C U U U U n n n n d d d d e e e e r r r r s s s s t t t t a a a a n n n n d d d d ii i i n n n n g g g g II I I P P P P A A A A d d d d d d d d r r r r e e e e s s s s s s s s ii i i n n n n g g g g This appendix is a brief general introduction to I[...]

C-2 User’ s Reference Guide IP addresses indicate both the identity of the network and the identity of the individual host on the network. The number of bits used for the network number and the number of bits used for the host number can var y , as long as cer tain r ules ar e followed. The local network manager assigns IP host numbers to individ[...]

Understanding IP Addressing C-3 Subnet masks T o cr eate subnets, the network manager must define a subnet mask, a 32-bit number that indicates which bits in an IP address ar e used for network and subnetwork addresses, and which ar e used for host addresses. One subnet mask should apply to all IP networks that are physically connected together an[...]

C-4 User’ s Reference Guide Network configuration Below is a diagram of a simple network configuration. The ISP is providing a Class C addr ess to the customer site, and both networks A and B want to gain Internet access thr ough this address. Netopia R2020 B connects to Netopia R2020 A and is provided Inter net access through Routers A and B. [...]

Understanding IP Addressing C-5 Background The IP Addresses and r outing configurations for the devices shown in the diagram are outlined below . In addition, each individual field and its meaning are described. The “IP Address” and “Subnet Mask” fields define the IP Addr ess and Subnet Mask of the device's Ethernet connection to t[...]

C-6 User’ s Reference Guide There ar e two schemes for distributing the remaining IP addr esses: ■ Manually give each computer an address ■ Let the Netopia R2020 automatically distribute the addresses These two methods are not mutually exclusive; you can manually issue some of the addr esses while the rest are distributed by the Netopia R2020[...]

Understanding IP Addressing C-7 Configuration This section describes the specific IP address lease, r enew , and release mechanisms for both the Mac and PC, with either DHCP or MacIP address ser ving. DHCP Address Serving Windows 95 Workstation: ■ The Win95 workstation requests and r enews its lease ever y half hour . ■ The Win95 workstation [...]

C-8 User’ s Reference Guide one hour after the last heard lease r equest as some other DHCP implementations may hold on to the lease for an additional time after the lease expired, to act as a buf fer for variances in clocks between the client and ser ver . MacIP Serving Macintosh W orkstation (MacTCP or Open T ranspor t): Once the Mac workstatio[...]

Understanding IP Addressing C-9 In any situation where a device is dialing into a Netopia r outer , the router may need to be configured to ser ve IP via the W AN inter face. This is only a r equirement if the calling device has not been configur ed locally to know what its address(es) ar e. So when a client, dialing into a Netopia router's [...]

C-10 User’ s Reference Guide The figure above shows an example of a block of IP addr esses being distributed cor rectly . The example follows these r ules: ■ An IP address must not be used as a static addr ess if it is also in a range of addresses being distributed by DHCP or MacIP . ■ A single IP address range is used by all the addr ess-se[...]

Understanding IP Addressing C-11 Nested IP subnets Under cer tain situations, you may wish to create r emote subnets from the limited number of IP addr esses issued by your ISP or other authority . Y ou can do this using connection pr ofiles. These subnets can be nested within the range of IP addresses available to your network. For example, suppo[...]

C-12 User’ s Reference Guide Routers B and C (which could also be Netopia R2020s) ser ve the two remote networks that ar e subnets of a.b.c.0. The subnetting is accomplished by configuring the Netopia R2020 with connection profiles for Routers B and C (see the following table). The Netopia R2020’s connection profiles for Routers B and C cr e[...]

Understanding IP Addressing C-13 The following diagram illustrates the IP address space taken up by the two r emote IP subnets. Y ou can see fr om the diagram why the ter m nested is appropriate for describing these subnets. Br oadcasts As mentioned earlier , binar y IP host or subnet addr esses composed entirely of ones or zer os are r eser ved fo[...]

C-14 User’ s Reference Guide[...]

Binary Conversion T able D-1 A A A A p p p p p p p p e e e e n n n n d d d d ii i i x x x x D D D D B B B B ii i i n n n n a a a a r r r r y y y y C C C C o o o o n n n n v v v v e e e e r r r r s s s s ii i i o o o o n n n n T T T T a a a a b b b b ll l l e e e e This table is provided to help you choose subnet numbers and host numbers for IP and [...]

D-2 User’ s Reference Guide Decimal Binar y Decimal Binar y Decimal Binar y Decimal Binar y 128 10000000 160 10100000 192 11000000 224 11100000 129 10000001 161 10100001 193 11000001 225 11100001 130 10000010 162 10100010 194 11000010 226 11100010 131 10000011 163 10100011 195 11000011 227 11100011 132 10000100 164 10100100 196 11000100 228 11100[...]

Further Reading E-1 A A A A p p p p p p p p e e e e n n n n d d d d ii i i x x x x E E E E F F F F u u u u r r r r t t t t h h h h e e e e r r r r R R R R e e e e a a a a d d d d ii i i n n n n g g g g Angell, David. ISDN for Dummies , Foster City , CA: IDG Books Worldwide, 1995. Thorough introduction to ISDN for beginners. Apple Computer , Inc. Ap[...]

E-2 User’ s Reference Guide Hares, S. "Components of OSI: Inter-Domain Routing Pr otocol (IDRP)." ConneXions: The Interoperability Repor t, V ol. 6, No. 5: May 1992. Jones, N.E.H. and D. Kosiur . Macworld Networking Handbook . San Mateo, California: IDG Books Worldwide, Inc.; 1992. Joyce, S.T . and J.Q. Walker II. "Advanced Peer-to[...]

Further Reading E-3 Rose, M.T . The Open Book: A Practical Perspective on OSI . Englewood Clif fs, New Jersey: Pr entice Hall; 1990. Rose, M.T . The Simple Book: An Introduction to Management of TCP/IP-based Inter nets . Englewood Clif fs, New Jersey: Prentice Hall; 1991. Ross, F .E. "FDDI--A Tutorial." IEEE Communications Magazine, V ol.[...]

E-4 User’ s Reference Guide[...]

T echnical Specifications and Safety Information F-1 A A A A p p p p p p p p e e e e n n n n d d d d ii i i x x x x F F F F T T T T e e e e c c c c h h h h n n n n ii i i c c c c a a a a ll l l S S S S p p p p e e e e c c c c ii i i f f f f ii i i c c c c a a a a t t t t ii i i o o o o n n n n s s s s a a a a n n n n d d d d S S S S a a a a f f f [...]

F-2 User’ s Reference Guide Description Dimensions: 124.0 cm (w) x 20.0 cm (d) x 5.3 cm (h) 9.4” (w) x 7.9” (d) x 2.1” (h) Communications inter faces: The Netopia R2020 Dual Analog Router has two RJ-45 jacks for modem connections; an 8 por t 10Base-T Ether net hub for your LAN connection; a DE-9 Console por t; and an HD-15 Auxiliar y por t [...]

T echnical Specifications and Safety Information F-3 Softwar e and protocols Software media: Softwar e preloaded on inter nal flash memor y; field upgrades done via download to inter nal flash memor y via XMODEM or TFTP Routing: TCP/IP Internet Pr otocol Suite, RIP , AppleT alk*, LocalT alk-to-Ether net r outing*, AURP tunneling*, MacIP*, IPX *[...]

F-4 User’ s Reference Guide If this device is malfunctioning, it may also be causing har m to the telephone network; this device should be disconnected until the source of the pr oblem can be deter mined and until repair has been made. If this is not done, the telephone company may temporarily disconnect ser vice. The telephone company may make c[...]

T echnical Specifications and Safety Information F-5 Users should ensure for their own pr otection that the electrical ground connections of the power utility , telephone lines and internal metallic water pipe system, if pr esent, are connected together . This precaution may be par ticularly impor tant in r ural ar eas. Caution Users should not at[...]

F-6 User’ s Reference Guide[...]

About 56K Line Access G-1 A A A A p p p p p p p p e e e e n n n n d d d d ii i i x x x x G G G G A A A A b b b b o o o o u u u u t t t t 5 5 5 5 6 6 6 6 K K K K L L L L ii i i n n n n e e e e A A A A c c c c c c c c e e e e s s s s s s s s The Netopia R2020 is capable of 56Kbps per line connections. This means that if you use both onboard modems, y[...]

G-2 User’ s Reference Guide These new techniques treat the phone system as a mostly digital network that just happens to have an analog por tion. There ar e several consequences to the reliance on a half-digital connection. Y our Inter net Ser vice Provider must have digital phone lines to the public switched telephone network (PSTN). That's[...]

Glossary 1 G G G G ll l l o o o o s s s s s s s s a a a a r r r r y y y y Access Line: A telephone line reaching fr om the telephone company central of fice to a point usually on your premises. Beyond this point the wir e is considered inside wiring. See also T r unk Line . analog: In telecommunications, telephone transmission and/or switching tha[...]

2 User’ s Reference Guide byte: A group of bits, nor mally eight, which r epresent one data character . CallerID: See CND. CCITT (Comite Consultatif International T elegraphique et T elephonique): International Consultative Committee for T elegraphy and T elephony , a standards or ganization that devises and proposes r ecommenda- tions for intern[...]

Glossary 3 DNS (Domain Name Ser vice): A TCP/IP protocol for discovering and maintaining network r esource infor mation distributed among dif fer ent ser vers. download: The process of transfer ring a file fr om a ser ver to a client. EIA (Electronic Industr y Association): A Nor th American standar ds association. Ethernet: A networking protocol [...]

4 User’ s Reference Guide internet: A set of networks connected together by routers. This is a general ter m, not to be confused with the lar ge, multi-or ganizational collection of IP networks known as the Inter net. An inter net is sometimes also known as an internetwork. internet address, IP addr ess: Any computing device that uses the Inter n[...]

Glossary 5 NA T (Network Address Translation): A feature that allows communication between the LAN connected to the Netopia ISDN Router and the Internet using a single IP addr ess, instead of having a separate IP address for each computer on the network. NetBIOS: A network communications protocol used on PC LANs. network: A group of computer system[...]

6 User’ s Reference Guide RFC (Request for Comment): A series of documents used to exchange infor mation and standards about the Internet. RIP (Routing Information Protocol): A pr otocol used for the transmission of IP routing infor mation. RJ-11: A telephone-industr y standard connector type, usually containing four pins. RJ-45: A telephone-indu[...]

Glossary 7 TCP/IP (Transmission Control Protocol/Internet Protocol): An open network standar d that defines how devices from dif ferent manufactur ers communicate with each other over one or more inter connected networks. TCP/IP protocols ar e the foundation of the Internet, a worldwide network of networks connecting businesses, governments, r ese[...]

8 User’ s Reference Guide[...]

Index-1 II I I n n n n d d d d e e e e x x x x Numerics 10Base-T 4-3 10Base-T , connecting 4-3 56k, about G-1 A accounting configuration 8-23 add static route 10-33 adding a filter set 14-13 advanced configuration features 7-8 answer profile call acceptance scenarios 8-6 defined 8-4 answering calls 8-4 AppleT alk 1-2 configuring LocalT alk 12[...]

Index-2 configuring profiles for incoming calls. 8-6 configuring ter minal emulation software 5-3 configuring the console 7-11 connecting to an Ethernet network 4-3 connecting to the configuration screens 7-7 connection metering 8-12 connection profiles defined 6-3 scheduling 8-1 , 8-7 console configuring 7-11 screens, connecting to 7-7 con[...]

Index-3 output 14-14 par ts of 14-7 priority 14-5 using 14-12 viewing 14-16 finding an ISP B-1 firewall 14-17 fir mware files updating with TFTP 15-8 updating with XMODEM 15-11 FTP sessions 14-20 fur ther reading E-1 G General Statistics 13-4 Glossar y GL-1 H hard seeding 12-3 hops 13-10 how to reach us A-3 I input filter 3 14-18 input filter[...]

Index-4 outside ranges 10-6 ser ver lists 10-6 navigating configuration screens 7-8 Easy Setup 5-4 NCSA T elnet 5-3 nested IP subnets C-11 NetBIOS 10-37 , 11-3 NetBIOS scope 10-38 Netopia answering calls 8-4 connecting to Ethernet, r ules 4-3 connecting to LocalT alk 4-5 connection profile 6-3 distributing IP addresses 10-35 , C-5 IP setup 6-4 IP[...]

Index-5 Security Options screen 14-2 seeding 12-3 Ser vice Adver tising Pr otocol (SAP) 11-2 setting the IP trap receivers 13-15 show static soutes 10-32 Simple Network Management Protocol, see SNMP Smar tIP 10-1 Smar tPhone configuring 8-1 Smar tStar t before launching 3-1 requir ements Macintosh 3-1 PC 3-1 troubleshooting Macintosh A-2 PC A-1 Wi[...]

Index-6 user accounts 14-2 using filters 14-12 utilities and tests 15-1 V viewing and modifying packet filters 14-23 viewing and modifying SAP filter sets 14-28 viewing IP trap receivers 13-15 viewing scheduled connections 8-8 Vir tual Private Networks (VPN) 9-1 VPN 9-1 allowing through a fir ewall 9-19 A TMP tunnel options 9-16 default answer [...]

Limited Warranty and Limitation of Remedies 1 L L L L ii i i m m m m ii i i t t t t e e e e d d d d W W W W a a a a r r r r r r r r a a a a n n n n t t t t y y y y a a a a n n n n d d d d L L L L ii i i m m m m ii i i t t t t a a a a t t t t ii i i o o o o n n n n o o o o f f f f R R R R e e e e m m m m e e e e d d d d ii i i e e e e s s s s Netopi[...]

2 User’ s Reference Guide[...]