SMC Networks SMC7804WBRA manual

[...]

7 HVOD ,UYLQH&$ 3KRQH  0ESV: L U H OHVVSRUW 5RXWHUZLWKEXLOWLQ $'6/0RGHP )URP60&¶ VOLQHRI  DZDUGZLQQLQJFRQQHFWLYL WVROXWLRQV 'HFHPEHU5)[...]

Infor mation furnis hed is beli eved to be accura te and reliable. However, no responsibi lity is assume d by our company for it s use, nor for any inf ringemen ts of patents or o ther rights of th ird parti es which may result from its us e. No licens e is granted by implicat ion or otherwise unde r any patent or pat ent rights of our company . W [...]

i L IMITED W ARRANTY Limited W ar ranty Statement: SMC Netw orks , Inc. (“SMC”) warrants its products to be free from defects in workmanship and materials , under nor mal use and ser vice, for the applicable warranty ter m. All SMC products car r y a standard 90-day lim ited warranty from the date of purchase from SMC or its Authoriz ed Reselle[...]

L IMITED W AR RANTY ii WARRANTIES EX CLUSIVE: IF AN SMC PRODUCT DOES NOT OPERATE AS W ARRANTED ABO VE, CUSTOMER’S SOLE REMEDY SHALL BE REP AIR OR REPLA CEMENT OF THE PRODUCT IN QUESTION , AT SMC’S OPTION . THE FOREGOING W ARRANTIES AND REMEDI ES ARE EX CLUSIVE AND ARE IN LIEU OF ALL OTHER W ARRANTIES OR CONDITIONS , EXPRESS OR IMPLIED , EITHER [...]

iii C OMPLIANCES F ederal Communication Co mmission Interfer ence Statement This equipment has been tested and found to comply with the limits for a Class B digital device, pursu ant to Part 15 of the FCC R ules. These limits are designed to provide reasonable protection against harmful interfer ence in a residential installati on. This equipment g[...]

C OMPLIANCES iv The REN is used to deter min e the quantity of devices th at may be connected to the telephone line. Ex cessive RENs on the telephone line m ay result in the devices not ringing in response to an incoming call. In most, but not all areas, the sum of the RENs should not exceed fi ve (5.0). T o be certain of the number of devices that[...]

C OMPLIANCES v Australia AS/NZS 3548 (1995) - Class B SMC contact for produc ts in Australia is: SMC-Australia L9, 123 Epping Rd., North Ryde, NSW Australia Phone: 61-2-88757887 Fax: 61-2-88757 777 EC Confor mance Declaration SMC contact for these pr oducts in Europe is: SMC Networks Europe, Edificio Conata II, Calle Fructuós Gelabe rt 6-8, 2o, 4a[...]

C OMPLIANCES vi Safety Compliance Wichtige Sicherheitshinweise (Ger many) 1. Bitte lesen Si e diese Hinweis e sorgfältig du rch. 2. Heben Sie diese Anleitung fü r den sp äteren Gebrauch auf. 3. Vor jedem Reinigen is t das Gerät vom St romnetz zu trennen. Verwenden Sie keine Flüssigoder Aerosol reiniger. Am besten eignet si ch ein angefeuchtete[...]

vii T ABLE OF C ONTENTS 1 Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-1 About the B arricade . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-1 Features and Benefits . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-1 Applicat ions . . . . . . [...]

T ABLE OF C ONTENTS viii 4 Configuring the Barricade . . . . . . . . . . . . . . . . . . . . . . 4-1 Navigating the M anagement Inter face . . . . . . . . . . . . . . . . . . . . . . . . . . 4-2 Making Configuration C hanges . . . . . . . . . . . . . . . . . . . . . . . . . . 4-2 Setup Wizard . . . . . . . . . . . . . . . . . . . . . . . . . . . . [...]

T ABLE OF C ONTENTS ix A Troubleshooting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A-1 B Cables . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . B-1 Ethernet Cable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . B-1 Specifications . . . . . . . . . . . . . . . . . [...]

T ABLE OF C ONTENTS x[...]

1-1 C HAPTER 1 I NTRODUCTION Congratulations on your purchase of the ADSL Bar ricade TM g , hereafter referred to as the "Barricade". We are proud to provide you with a powerful yet simple communication devi ce for connecting your local area network (LAN) to the Internet. For those who want to surf the Internet in the most secu re way, th[...]

I NTR ODUCTION 1-2 • Firewall with Stateful Packet Insp ection, client priv ileges, intrusion detection, and NAT • NAT also enables multi-user Inter net access via a single user account, and virtual server functionality (provi ding protected access to Internet services such as web, FTP, e-mail, and Telnet) • VPN pass-through (IPSec-ESP Tunnel[...]

A PPLICATIONS 1-3 • Shared IP Address The Bar ricade provides In ter net access for up to 253 users via a single shared IP address . Using only one IS P account, multiple users on y our network can bro wse the web at the same time . •V i r t u a l S e r v e r If you ha ve a f ixed IP address , you can set the Barricade to act as a virtual host [...]

I NTR ODUCTION 1-4 • Virtual Private Network (VPN) The Bar ricade suppor ts three of the most commonly used VPN protocols — PPTP , L2TP , and IPSec . These protocols allow remote users to establish a secure connection to their corporate network. If your service provider supports VP Ns, then these protocols can be used to create an authenticated[...]

2-1 C HAPTER 2 I NSTALLATION Before install ing the ADSL Bar ricade TM g, verify that you hav e all the items listed under the P ackage Contents list. If any of the items are missing or damaged, contact your local distributor . Also be sure that you ha ve all the necessar y cabling before installing the Bar ricade. After installing the Bar ricade, [...]

I NSTALLATION 2-2 System Requirements Y ou must meet the following minimum requirements: • ADSL line installed by your Internet Servi ce Provider. • A PC using a fixed IP address or dynamic IP addr ess assigned via DHCP, as well as a gateway server address and DNS server address from your service provider. • A computer equipped with a 10/ 100[...]

H ARDWARE D ESCRIPTION 2-3 The Bar ricade includes an L ED disp lay on the front panel for system pow er and por t indications that simplifies installation an d network troubleshooting . It also provides th e follo wing por ts on the rear panel: Figure 2-1. Rear Panel Item Description LAN Ports Fast Ethernet ports (RJ-45). Connect devi ces on your [...]

I NSTALLATION 2-4 LED Indicators The power and port LED indicators on the front panel are illustrated b y the following figure and table. Figure 2-2. Front Panel LED Status Description PWR On The Barricade is receiv ing power. Normal operation. Off Power off or fai lure. ADSL SYN On ADSL connectio n is functioning correctly . Flashing The Barricade[...]

ISP S ETTINGS 2-5 ISP Settings Please collect the following inform ation from y our ISP before setting up the Barricade: • ISP account user name and password • Protocol, encapsulation and VPI/VCI circuit numbers •D N S s e r v e r a d d r e s s • IP address, subnet mask and defaul t gateway (for fixed IP users only) Connect the System The B[...]

I NSTALLATION 2-6 Phone Line Configuration Installing a Full-Rate Connection If you are usin g a full-rate (G .dmt) c onnection, your service provider will attach the out side ADSL line to a data/voice splitter . In this case you can connect your phones and computer directly to the splitter as sho wn below: Figure 2-3. Installing with a Splitter Pl[...]

C ONNECT THE S YSTEM 2-7 Installing a Splitterless Connection If you a re using a splitt erless (G .lite) connection, then your service provider will attac h the outside ADSL line directly to your p hone system. In this case you can connect your phones and computer directly to the incoming ADSL line, but you will hav e to add low-pass filters to y [...]

I NSTALLATION 2-8 Attach to Your Network Using Ethernet Cabling The four LAN por ts on the Bar ricade auto-neg otiate the connection speed to 10 Mbps Ethernet or 100 Mbps Fast Ethernet, as well as the transmission mode to half duplex or fu ll duplex. Use RJ-45 cables to connect any of the four LAN por ts on the Barricade to an Ethernet adapter on y[...]

3-1 C HAPTER 3 C ONFIGURING C LIENT PC After completing hardware setup b y connecting all your netw ork devices, you need to configure your comput er to connect to the Barricade. See: “Windows 98/Me” on pag e 3-2 “Windows NT 4.0” on page 3-7 “Windows 2000” on page 3-11 “Windows XP” on page 3-14 or “Configuring Y our Macintosh Comp[...]

C ONFIGURING C LIENT PC 3-2 TCP/IP Configuration T o access the Internet through the Barricade, y ou must configur e the network settings of the computers on your LAN to u se the same IP subnet as the Barricade. The default IP settings for the Bar ricade are: IP Address: 192.168.2.1 Subnet Mask: 255.255.255.0 Note: These setti ngs can be changed to[...]

W INDOWS 98/M E 3-3 2. In Control Panel, double-click the Network icon. 3. In the Netw ork window , under the Configuration tab , double-c lick the TCP/IP item listed for your netw ork card. 4. In the TCP/IP window , select the IP Address tab . If “Obtain an IP address automatically” is already selected, your computer is already confi gured for[...]

C ONFIGURING C LIENT PC 3-4 5. Windows may need y our Windows 95/98/Me CD to copy some files . After it finishes copying, it will prompt you to res tar t your system. Click Y es and your computer will restar t. Disable HTTP Proxy Y ou need to verify tha t the “HTTP Pr ox y” feature of your web bro wser is disabled. This is so that your br owser[...]

W INDOWS 98/M E 3-5 3. In the Internet Options window , click the Connections tab . Next, click the LAN Settings ... button. 4. Clear all th e check bo xe s. 5. Click OK, and then clic k OK again to close the Internet Options window .[...]

C ONFIGURING C LIENT PC 3-6 Obtain IP Settings from Your ADSL Router Now that y ou have configured y our computer to connect to your Barricade, it needs to obtain new network settings . By releas ing old DHCP IP settings and renewing them with sett ings from y our Bar ricade, you can also v erify that you have configured y our computer cor rectly .[...]

W INDOWS NT 4.0 3-7 Windows NT 4.0 1. On the Windows desktop , click Start/S ettings/Contro l Pa n e l . 2. Double-click the Network icon.[...]

C ONFIGURING C LIENT PC 3-8 3. In the Netw ork window , Select the Protocols tab . Double-click TCP/IP Protocol. 4. When the Microsoft TCP/IP Properties window open, select the IP Address tab . 5. In the Adapter drop-down list, be sure your Ethernet adapter is sel ected. 6. If “Obtain an IP addres s automatically” is already selected, your comp[...]

W INDOWS NT 4.0 3-9 8. Windows may copy some files , and will then prompt you to restart your system. Click Y es and your computer will shut down and restart. Disable HTTP Proxy Y ou need to verify tha t the “HTTP Pr ox y” feature of your web bro wser is disabled. This is so that your br owser can view the Barricade’ s HTML configuration page[...]

C ONFIGURING C LIENT PC 3-10 2. In the Command Prompt wind ow , type “IPCONFIG /RELEASE” and press the ENTER key . 3. T ype “IPCONFIG /RENEW” and press the ENTER key . V erify that your IP Address is now 192.168.2.xxx , your Subnet Mask is 255.255.255.0 and your Default Ga teway is 192.168.254 . These values confir m that your Bar ricade is[...]

W INDOWS 2000 3-11 Windows 2000 1. On the Windows desktop , click Start/Settings/Networ k and Dial-Up Connections . 2. Click the icon that corresponds to the connection to your Bar ricade. 3. The connection status screen will open. Click Properties. 4. Double-click Internet Protocol (TCP/IP). 5. If “Obtain an IP address automatica lly” and “O[...]

C ONFIGURING C LIENT PC 3-12 Disable HTTP Proxy Y ou need to verify tha t the “HTTP Pr ox y” feature of your web bro wser is disabled. This is so that your br owser can view the Barricade’ s HTML configuration pages. Determine which browser you use and refer to “Internet Explorer” on page 3-4. Obtain IP Settings from Your Barricade Now th[...]

W INDOWS 2000 3-13 3. T ype “IPCONFIG /RENEW” and press the ENTER key . V erify that you r I P A dd re ss i s n ow 192.168.2.xxx , your Subnet Mask is 255.255.255.0 and your D efault Gate wa y is 192.168.2.254 . T hese values confir m that your ADSL R outer is functioning . 4. T ype “EXIT” and pres s the ENTER key to cl ose the Command Prom[...]

C ONFIGURING C LIENT PC 3-14 Windows XP 1. On the Windows desktop , click Star t/Control P anel. 2. In the Control P anel window , click Network and Internet Connections . 3. The Network Connections wind ow will open. Double-click the connection for this device. 4. On the connection status screen, click Proper ties . 5. Double-click Internet Protoc[...]

W INDOWS XP 3-15 2. In the Command Prompt wind ow , type “IPCONFIG/RELEASE” and press the ENTER key . 3. T ype “IPCONFIG /RENEW” and press the ENTER key . V erify that you r I P A dd re ss i s n ow 192.168.2.xxx , your Subnet Mask is 255.255.255.0 and your D efault Gate wa y is 192.168.2.254 . T hese va lues confirm that your AD SL router i[...]

C ONFIGURING C LIENT PC 3-16 Configuring Your Macintosh Computer Y ou may find that the instructions here do not exactly match y our operating system. This is because thes e steps and screenshots were created using Mac OS 10.2. Mac OS 7.x and abov e are similar , but may not be identical to Mac OS 10.2. F ollow these instructions: 1. Pull down the [...]

C ONFIGURING Y OUR M ACINTOSH C OMPUTER 3-17 3. If “Using DHCP Ser ver ” is already s elected in th e Configure field , your computer is alread y configured for DHCP . If not, select this Option. 4. Y our new settings are shown on the TCP/IP tab . V erify that your IP Address is now 192.168.2.xxx , your Subnet Mask is 255.255.255.0 and your Def[...]

C ONFIGURING C LIENT PC 3-18 3. Uncheck all check bo xes and clic k OK.[...]

4-1 C HAPTER 4 C ONFIGURING THE B ARRICADE After you ha ve configured TCP/IP on a client computer , you can configure the Barricade using Internet Explorer 5.0 or above . T o access t he Barricade’ s management inter face, enter the default IP address of the Bar ricade in your web bro wser : http://192.168.2.1. Enter the default passw ord: “smc[...]

C ONFIGURING THE B AR RICADE 4-2 Navigating the Management Interface The Bar ricade’ s manag ement interface consists of a Setup Wizard and an Advanced Setup section. Setup Wizard: Use the Setup Wizard if y ou want to quic kly set up the Bar ricade. Go to “Setup Wizard” on page 4-3. Advanced Setup: Advanced Setup supports mo re advanced funct[...]

S ETUP W IZARD 4-3 Setup Wizard Time Zone Click on “Setup Wizard”. The first item in the Setup Wizard is Time Zone. F or accurate timing of log entries an d system events , you need to set the time zone. Select your time zone fr om the drop-down list. If your area requires it , chec k to enable the cloc k for da ylight saving c hanges, and ente[...]

C ONFIGURING THE B AR RICADE 4-4 Parameter Setting Select your Country and Inter net Ser vic e Provider . T his will automatically configure the Barricade with the co r rect Protocol, Encapsulation and VPI/V CI settings for your ISP . If your Country or Interne t Ser vice Pr ovider is not listed you will need to manually ent er settings . Go to “[...]

S ETUP W IZARD 4-5 Confirm The Confir m pag e shows a summar y of the configuration parameters. Check ADSL operation mode (W AN), Netw ork Layer P arameters (W AN) and ISP para meters are correct. Parameter Description ADSL Operation Mode (WAN) ISP The type of ISP you have selec ted. Protocol Indicates the prot ocol used. VPI/VCI Virtual Path Ident[...]

C ONFIGURING THE B AR RICADE 4-6 If the parameters are cor rect, click “ APPL Y” to sav e these settings . Y our Bar ricade is now set up . Go to “T roubleshooting” on pag e A-1 if you cannot make a connection to the Internet. DHCP Parameters Function Shows the D HCP function i s enabled or disabled. Default Gateway LAN IP address of the Ba[...]

S ETUP W IZARD 4-7 Parameter Setting - Country or ISP Not Listed If your Country or Internet Ser vice Provider is not listed select “Others”. This will allow you to manually configure your ISP settings . F or manual configuration you will need to know the Protocol, DNS Ser ver , Encapsulation and VP I/VCI settings used b y your ISP . If y ou ha[...]

C ONFIGURING THE B AR RICADE 4-8 ISP use RFC1483 Bridging - Parameter Setting Enter the RFC1483 Bridging setti ngs pro vided by your ISP . Note: You have three different brid ging modes to select from: RFC1483 Bridging - Select this option if you wa nt the Barricade to be transparent and pass the pu blic IP address to a single PC, Ser ver or Firewa[...]

S ETUP W IZARD 4-9 Click “NEXT” to continue to the “Con fir m ” settings page. Go to “Confir m” on page 4-5 in the manual for details about the “Confir m” settings page. VPI/VCI Enter the Virtual Path Identifier (VPI) and Virtual Circuit Identifier (VCI) supplied by your ISP . Encapsula tion Select the en capsulation used by ISP fro[...]

C ONFIGURING THE B AR RICADE 4-10 ISP use PPPoE - Parameter Setting Enter the PPP oE (Point-to-P oint Pr otocol ov er Et her net) settings prov id ed by you r I SP . Click “NEXT” to continue to the “Confirm” settings page. Go to “Confirm” on page 4-5 in the manual for de tails abou t the “Confirm” settings page. Parameter Descriptio[...]

S ETUP W IZARD 4-11 ISP use PPPoA - Parameter Setting Enter the PPP oA (P oint-to-P oint Protocol over A TM) settings provided by y our ISP . Click “NEXT” to continue to the “Confirm” settings page. Go to “Confirm” on page 4-5 in the manual for de tails abou t the “Confirm” settings page. Parameter Description DNS Server Enter the I[...]

C ONFIGURING THE B AR RICADE 4-12 ISP use RFC1483 Routing - Parameter Setting Enter the RFC1483 R outing settin gs provided by y our ISP . Click “NEXT” to continue to the “Confirm” settings page. Go to “Confirm” on page 4-5 in the manual for de tails abou t the “Confirm” settings page. Parameter Description IP Address Enter the IP a[...]

A DVANCED S ETUP 4-13 Advanced Setup Click on the Adv anced Setup picture. The left-hand side displays the main menu and the right-hand side shows descripti ve infor mation. The advanced management interface contains 13 main menu items as described in the following table . Menu Description System Sets the local ti me zone, the pa ssword for adminis[...]

C ONFIGURING THE B AR RICADE 4-14 DDNS Dynamic DNS provides users on the Interne t with a method to tie their domain nam e(s) to a Dynamic or Static IP address. UPnP Allows you to enable or disable th e Universal Plug and P lay function. Tools Contains opti ons to backu p & restore the current configurat ion, restore all c onfiguration set ting[...]

A DVANCED S ETUP 4-15 System Time Settings Select your local time zone from th e drop down list. This infor mation is used for log entries and client filtering . F or accurate timing of log entries an d system events , you need to set the time zone. Select your time zone from the drop down list. If you w ant to automatically synchroni ze the ADSL r[...]

C ONFIGURING THE B AR RICADE 4-16 Password Settings Use this page to chang e the passw ord for accessing the manag ement interface of the Barricade. P asswords can contain from 3~12 al phanumeric char acters and are case sensitiv e. Note: If you lost the password, or yo u cannot gain access to the user interface, press the blue reset bu tton on the[...]

A DVANCED S ETUP 4-17 Remote Management By default, ma nag ement access is only available to users on your local network. Ho wev er, y ou can also mana ge the Bar ricade from a remote host by ente ring the IP address of a r emote computer on this screen. Check the Enabled check bo x, and enter the IP address of the Host Address and click “ APPL Y[...]

C ONFIGURING THE B AR RICADE 4-18 DNS Domain Name Ser vers (DNS ) are used to ma p a domain name (e.g ., www .smc .com) wi th the IP a ddress (e.g ., 64.147.25.20). Y our ISP should provide the IP address of one or more Domain Na me Ser vers . Enter those addresses on this page, and click “ APPL Y”.[...]

A DVANCED S ETUP 4-19 WAN Specify the W AN connection paramete rs provided by y our Inter net Ser vice Provider (ISP). The Bar ricade can be connected to your ISP in one of the following ways: PPP oE AT M Clone MA C ISP[...]

C ONFIGURING THE B AR RICADE 4-20 PPPoE Enter the PPP oE (Point-to-P oint ov er Ether net) parameters here. Parameter Description Enable/Disable Enables/disables the PP PoE function. IP Address If your IP address is assigned by th e ISP each time you connect, leave this fie ld all zeros. Otherwise, enter your ISP supplied static IP address here. Su[...]

A DVANCED S ETUP 4-21 ATM Enter A TM (Asynchronous T ransfer Mode) function parameters here . Idle Time (Minute) Enter the maximum idle time for the Internet connection. After this time has bee n exceeded the connecti on will be terminated. ISP Name Choose the ISP to whom this c onnection wil l apply. Parameter Description Protocol • Disable: Dis[...]

C ONFIGURING THE B AR RICADE 4-22 Clone MAC Address Some ISPs require yo u to register your M AC address with them. If this is the case, the MA C address of the Barr icade must be changed to the MA C address that you have registered with your ISP . Encapsulatio n Specifies ho w to handle multiple pro tocols at the ATM transport layer. Go to“Encap[...]

A DVANCED S ETUP 4-23 ISP Enter the Internet Ser vice Provider (ISP) name , user name, and pa ssword for each ISP connection y ou have . Y ou can enter up to four sets of information here.[...]

C ONFIGURING THE B AR RICADE 4-24 LAN Use the LAN menu to configure the LAN IP addr ess and to enable the DHCP ser ver for dynamic c lient address allocation. Note: Remember to configure your client PCs for dynamic address allocation. (S ee page 3-2 for details.) Parameter Description LAN IP IP Address The IP addr ess of the Barricade. IP Subnet Ma[...]

A DVANCED S ETUP 4-25 Wireless The Bar ric ade also operates as a wire less access point, allowing wireless computers to communicate with each ot her . T o configure this function, all you need to do is enable the wirele ss function, define the radio channel, the domain identifier, and the security options . Check Enable and click “ APPL Y”.[...]

C ONFIGURING THE B AR RICADE 4-26 Channel and SSID Y ou must specify a common radio cha nnel and SSID (Service Set ID) to be used by the Barricade W ireless R outer and all of its wireless clients. Be sure you configure all of its clients to the same v alues . Parameter Description ESSID Extended Service Set ID. The ESSID must be the same on the Ba[...]

A DVANCED S ETUP 4-27 Security T o make y our wireless netw ork safe , y ou should turn on the security function. The Bar ricade supports WEP (Wired Equiv alent Privacy) and WP A (Wi-Fi Protected) security mec hanisms .[...]

C ONFIGURING THE B AR RICADE 4-28 WEP If you w ant to use WEP to protect your wireless network, y ou need to set the same parameters for the Bar ricade and all your wireless clients . Y ou may automatically generate enc ry ption keys or man ual ly enter the keys . T o generate the key automatically with passphrase, c heck the P assphrase box, enter[...]

A DVANCED S ETUP 4-29 WPA Wi-Fi Protected Access (WP A) combines temporal key integrity protocol (TKIP) and 802.1X mechanisms . It provides dynamic k ey encr yption and 802.1X authentication ser vice. Parameter Description Cypher suite The security me chanism used in WPA for en cryption. Authentication Choose 802.1X or Pre-shared Key to use as th e[...]

C ONFIGURING THE B AR RICADE 4-30 802.1X If 802.1X is used in your netw ork, th en you should enable this function for the Barricade. Parameter Description 802.1X Authentication Enable or disable th is authenticati on function. Session Idle timeout Defines a maximu m period of time for which the connection is maintained during inactivi ty. Re-Authe[...]

A DVANCED S ETUP 4-31 NAT Network Address T ranslatio n allows m ult iple users to access the Interne t sharing one public IP .[...]

C ONFIGURING THE B AR RICADE 4-32 Address Mapping Allows one or more public IP addresses to be shared b y multiple internal users . This also hides the internal network for increased privacy and security . Enter the Pu blic IP address you wish to share into the Global IP field. Enter a range of inter nal IPs that will share the global IP into the ?[...]

A DVANCED S ETUP 4-33 Virtual Server If you configure the Barricade as a vi r tual ser ver, remote users accessing ser vices such as w eb or FTP at your local site via public IP addresses can be automaticall y redirected to lo cal ser vers configu red with priv ate IP addresses . In other words , de pendin g on the requested ser vice (TCP/UDP port [...]

C ONFIGURING THE B AR RICADE 4-34 Special Application Some applications require multiple c onnections , such as Internet g aming, video-conferenci ng, and Internet te lephony . These applications may not work when Netw ork Address Tr anslation (NAT) is enabled. If you need to r un applications that require mu ltiple connections, use these pages to [...]

A DVANCED S ETUP 4-35 Routing These pag es define routing related para meters , including static routes and RIP (Rou ting Infor mati on Protocol) para meters.[...]

C ONFIGURING THE B AR RICADE 4-36 Static Route Click “ Add” to add a new static route to the list, or chec k the box of an already ente red route and click “Modify” . Clicking “Delete” will remov e an entry from the list. Parameter Description Index Check the box of the ro ute you wish to delete or modify. Network Addr ess Enter th e IP[...]

A DVANCED S ETUP 4-37 RIP Parameter Description General RIP Paramete rs RIP mode Globally enab les or disables RIP. Auto summary If Auto summary is disabled, then RIP packet s will include sub-ne twork informatio n from all sub- networks connec ted to the router. If enable d, this sub-network information will be summarized to one piece o f informat[...]

C ONFIGURING THE B AR RICADE 4-38 RIP sends routing-update messages at regular inter vals and when the network topology changes . W hen a router receiv es a routing update that includes cha nge s to an entry , it updates its r outing table to reflect the new route. RIP routers maintain only the best route to a destination. After updating its routin[...]

A DVANCED S ETUP 4-39 Routing Table Parameter Description Flags Indicates the route status: C = Direct c onnection on t he same sub net. S = Static route. R = RIP ( Routing Informat ion Protocol) assigned rout e. I = ICMP (Intern et Control Messag e Protocol) Re direct route. Network Address Destination IP address. Netmask The subnetwork associ ate[...]

C ONFIGURING THE B AR RICADE 4-40 Firewall The Bar ricad e R outer’ s firewall inspects packets at the application la yer, maintains TCP and UDP session infor mation including time-outs and the number of activ e sessions, and pro vid es the ability to detect and prevent certain types of network attac ks. Network attacks that deny access to a netw[...]

A DVANCED S ETUP 4-41 Access Control Access Control allows us ers to define the outgoing traf fic per mitted or not-per mitted through the W AN interface. The default is to per mit all outg oing traffic . The following items are on the Access Control screen: Parameter Description Enable Filtering Function Click Yes to turn on the filtering functi o[...]

C ONFIGURING THE B AR RICADE 4-42 T o add the PC to the filtering table: 1. Click “ Add PC” on the Access Control screen. 2. Define the appropriate settin gs for client PC ser vices. 3. Clic k “OK” and the n click “ APPLY” to sa ve your settings .[...]

A DVANCED S ETUP 4-43 MAC Filter The Bar ricade can also limit the access of hosts within the local area networ k (LAN). The MAC Fi ltering T abl e allo ws the Barricade to enter up to 32 MA C addresse s that are not allowed access to the W AN port. Click Y es to enable , or No to disable this function. Enter the MA C address in the spac e provided[...]

C ONFIGURING THE B AR RICADE 4-44 URL Blocking The Barricad e allows the user to b lock access to web sites from a particular PC by entering either a full URL addr ess or just a keyw ord. This feature can be used to protect children from accessing violent or pornographic web sites. Y ou can define up to 30 sites here .[...]

A DVANCED S ETUP 4-45 Schedule Rule Y ou may filter Internet ac cess for loca l clients based on r ules . Each access control r ule may be activ ated at a scheduled time . Define the schedule on the Schedule R ule page, and apply the rule on the Access Control pag e. F ollow these steps to add a sc hedule r ule: 1. Click “ Add Schedule R ule”. [...]

C ONFIGURING THE B AR RICADE 4-46 Intrusion Detection • Intrusion Detection Feature Stateful Packet Inspection (SPI) and Anti-DoS firewall protection (Default: Enabled) — The Intrusion Detection Feature of the Barricade Router limits access for incoming tr affic at the WAN port. When the SPI feature is turned on, all incoming pa ckets will be b[...]

A DVANCED S ETUP 4-47 Scroll down to view more inform ation. • Stateful Packet Inspection This is called a “stateful” packet inspecti on because it examines the contents of the packet to determine th e state of the communications; i.e., it ensures that the stated destina tion co mputer has previously requested the current communication. This [...]

C ONFIGURING THE B AR RICADE 4-48 “Enable SPI and Anti-DoS firewall pr otec tion” field and then c heck the inspection type that you need, such as Packet Fragmentation, TCP Connection, UDP Session, FTP Service, H.323 Service, or TFTP Service. • When hackers attempt to enter your network, we can alert you by e-mail Enter your email address. Sp[...]

A DVANCED S ETUP 4-49 • DoS Criteria and Port Scan Criteri a Set up DoS and port scan criteria in the spaces provided (as sho wn below). Note: The firewall does not significantly affect system performance, so we advise enabl ing the preventi on features to protect your network. Parameter Defaults Description Total inc omplete TCP/UDP sessions HIG[...]

C ONFIGURING THE B AR RICADE 4-50 DMZ If you have a client PC that cannot run an Internet application properly from behind the firewall, you can open the client up to unrestricted two- way Internet access. Enter the IP a ddress of a DMZ (Dem ilitarized Zone) host on this screen. Adding a clien t to the DMZ may expose your local network to a variety[...]

A DVANCED S ETUP 4-51 SNMP Use the SNMP configuration screen to displa y and modify param eters for the Simple Network Ma nag e ment Protocol (SNMP). Community A computer atta ched to the netw ork, called a Network Management Station (NMS), can be used to access th is infor mation. Access rights to the agent are controlled by community st rings . T[...]

C ONFIGURING THE B AR RICADE 4-52 Trap Specify the IP a ddress of the NMS to notify when a significant event is detected by the agent. W hen a trap condition occurs , the SNMP agent sends an SNMP trap message to any NMS sp ecified as a trap receiv er . Parameter Description IP Address Traps are sent t o this address when errors or specific eve nts [...]

A DVANCED S ETUP 4-53 ADSL ADSL (Asymmetric Digital Subscriber Line) is designed to deliver more bandwidth do wnstream (from the central office to the customer site) than upstream. T his section is used to configure the ADSL operation type and shows the ADSL status . Parameters Parameter Description Operation Mode • Automatic • T1.413 issue 2 ?[...]

C ONFIGURING THE B AR RICADE 4-54 Status The Status screen displays infor mation on connection line status, data rate , operation data and defect indication, and statistics . Scroll down to view more inform ation.[...]

A DVANCED S ETUP 4-55 The following items are i ncluded on this infor mation pag e: Parameter Description Status Line Status Shows the current status of the ADSL line co nnection. Data Rate Upstream Maximum upst ream data rate. Downstream Maximum down stream data rate. Operation Data/Defec t Indication Noise Margin Maximum upstream and downstream n[...]

C ONFIGURING THE B AR RICADE 4-56 Statistics (Su perframes represent the h ighest level of data p resentation. Each superframe contains re gular ADSL frames, one of which is used to provide supe rframe synchronization, identifying the start of a supe rframe. Some of the remaining frames are als o used for special functi ons.) Received Superframes I[...]

A DVANCED S ETUP 4-57 DDNS Dynamic Domain Name Ser vice (DDNS) provides users on the Inter net with a method to tie their domain name to a computer or ser ver . DDNS allows y our domain name to f ollow your IP address automatically by hav ing yo ur DN S r eco rd s ch an g ed wh en you r I P a dd re ss cha ng es. T h i s D N S f e a t u r e i s p ow[...]

C ONFIGURING THE B AR RICADE 4-58 UPnP Click Enable to turn on the Uni versal Plug and Play function of t he Bar ricade. This function allows the device to a utomatically: • dynamically join a ne twork • obtain an IP address[...]

A DVANCED S ETUP 4-59 Tools Use the T ools menu to bac kup the current configuration, restore a previously sav ed configur ation, restore factor y se ttings , update firmware, and reset the Bar ricade. Configuration Tools Choose a function and click Next. Backup allo ws you to sav e the Bar ricade Router’ s configuration to a file. Re store can b[...]

C ONFIGURING THE B AR RICADE 4-60 Firmware Upgrade Use this screen to update the fir mware or user interface to the latest vers ions . Download the upgrade file fr om the SMC w eb site, and sa ve it to your hard driv e. In the Upgrade Target field, choose Fir mware. Then click “Browse... ” to look for the downloaded file. Clic k “ A PPLY”. [...]

A DVANCED S ETUP 4-61 Reset Click “ APPLY” to reset the Barricad e. The reset will be complete when the pow er LED stops blinking . If you perfor m a reset from this pa g e, the configurations will not be changed back to the factory default settings. Note: If you use the Reset button on th e front panel, the Barricade performs a power reset. If[...]

C ONFIGURING THE B AR RICADE 4-62 Status The Status page displays WAN/LA N connection status, firmware, and hardware version numbers, illegal atte mpts to acc ess your network, as well as in formation on DHCP client s connected to your network. The security log may be saved to a file by clicking “Save” and choosing a location. Scroll down to vi[...]

A DVANCED S ETUP 4-63 The following items are included on the Status page : Item Description INTERNET Displays WAN conne ction type and stat us. Click the Connect but ton to conne ct to your ISP . GATEWAY Displays system IP settings, as well as DHCP Server and Firewall status. INFORMATION Display s the number of attache d clients, the fi rmware ver[...]

C ONFIGURING THE B AR RICADE 4-64 Finding the MAC addre ss of a Network Card Windows 98/ME Click Start/Run. T ype “winipcfg” and press “ENTER”. The MAC address is in the “ Adapter Addres s” section. Windows NT4/2000/XP Click Start/Prog rams/Com mand Prompt. T ype “ipconfig /all” and press “ENTER”. The MA C address is listed as t[...]

A-1 A PPENDI X A T ROUBLESHOOTING This section describes common probl ems you may encounter a nd possible solutions to them. The Barricade can be easily monitored through panel indicators to identify problems . Troubleshooting Chart Symptom Ac tion LED Indicators Power LED is Off • Check connections between the Barricade, the external power suppl[...]

T R OUBLESHOOTING A-2 LED Indicators Link LED is Off • Verify that the Barricade and at tached device are powered on. • Be sure the cable is plugged into both the Barricade and the corresponding de vice. • V erify that the proper cable type is used and that its length does not exceed the specified limits. • Be sure that the network interfac[...]

T RO UB L ES HO O T IN G A-3 Management Pr oblems Cannot connec t using the web browser • Be sure to have configured the Barricade with a valid IP address, subnet mask, and default gateway. • C heck that you have a valid network connection to the Barricad e and that the port y ou are using has not been disabled. • Check the network cabling be[...]

T R OUBLESHOOTING A-4 Wireless Problems A wireless PC cannot associ ate with the Barricade. • Make sure the wireless PC has the same SSID settings as the Barric ade. See “Channel and SSID” on page 4-26. • You need to have the same security settings on the clients and the Barricade. See “Security” on page 4-27. The wireless network is of[...]

B-1 A PPENDIX B C ABLES Ethernet Cable Caution: DO NOT plug a phone jack conne ctor into any RJ-45 port. Use only twisted-pair cables with RJ-45 connectors that conform with FCC standards. Specifications Wiring Conventions For Ethernet connections, a twisted-pa ir cable must have two pairs of wires. Each wire pair is identified by two different col[...]

C ABLES B-2 Each wire pair must be attach ed to the RJ-45 connectors in a specific orientation. The following figure illu strates how the pins on an Ethernet RJ-45 connector are number ed. Be sure to hold the connectors in the same orientation when attaching the wires to the pins. Figure B-1. RJ-45 Ethernet Connector Pin Numbers RJ-45 Port Connecti[...]

E THER NET C ABLE B-3 Pin Assignments With 100B ASE-TX/10BASE-T cable , pins 1 and 2 are used for transmitting data, and pins 3 and 6 for receiving data. Straight-Through Wiring If the por t on the attached device has internal crossover wir ing (MDI-X), then use straight-through cable . RJ-45 Pin Assignments Pin Number Assignment 1 1T x + 2T x - 3R[...]

C ABLES B-4 Crossover Wiring If the por t on the attached device has straight-through wi ring (MDI), use crossov er cable. Crossover Cable Pin Assignments End 1 End 2 1 (Tx+) 3 (Rx+) 2 (Tx-) 6 (Rx-) 3 (Rx+) 1 (Tx+) 6 (Rx-) 2 (Tx-)[...]

ADSL C ABLE B-5 ADSL Cable Use standard telephone cable to connect the RJ-11 tele phone wall outlet to the RJ-45 ADSL port on the ADSL Router . Caution: Do not plug a phone jack connector into an RJ-45 port. Specifications Wiring Conventions F or ADSL connections , a ca ble requires one pair of wires . Each wire is identified b y different colo rs [...]

C ABLES B-6 Figure B-3. RJ-11 Pinouts Pin Signal Name Wire Color 1N o t u s e d 2 Line 2 Tip Black or Whit e/Orange 3 Lin e 1 Ring Red or Blue/White 4 Li ne 1 Tip Green or White/Blue 5 Line 2 Ring Yellow o r Orange/White 6N o t u s e d 123456 Blue/White White/Blue R1 T1 123456 Red Green R1 T1 R2 T2 Black Y ellow 123456 Blue/White White/Blue R1 T1 R[...]

C-1 A PPENDI X C S PECIFICATIONS Physical Characteristics Por t s F our 10/100Mbps RJ45 P or ts One ADSL RJ11 T wo external dipole antennas ADSL F eatures Supports DMT line modulation Supports Annex A Full-Rate ADSL: up to 8 Mbps downstream, up to 1 Mbps upstream (G .992.1 &T1.413, Issue 2) Supports G .Lite ADSL: up to 1.5 Mbps downstream, up t[...]

S PECIFICATIONS C-2 Security F eatur es P assword protected c onfiguration access User authentication (P AP/CHAP ) with PPP Firew all NA T NAPT VPN pass through (IPSec-ESP T unnel mode,L2TP , PPTP) LAN F eatur es IEEE 802.1D (self-learning transparent Bridging) DHCP Ser ver DNS Proxy Static Routing, RIPv1 and RIP Applications Netmeeting, ICQ, R eal[...]

S PECIFICATIONS C-3 13 channels (ETSI) 2 Channels (Spain) 4 Channels (France) 14 channels (J apan) Operating Channels IEEE 802.11g compliant: 13 channels (US , Canada, Europe, J apan) RF Output P ower Modulation Rate-Output Pow er (dBm) 802.11b - 1Mbps 16 802.11b - 2Mbps 16 802.11b - 5.5Mbps 16 802.11b - 11Mbps 16 Modulation Rate-Output Po wer (dBm[...]

S PECIFICATIONS C-4 Modulation Rate-Receiver Sensiti vity T ypical (dBm) 802.11g - 6Mbps -88 802.11g - 9Mbps -87 802.11g - 12Mbps -84 802.11g - 18Mbps -82 802.11g - 24Mbps -79 802.11g - 36Mbps -75 802.11g - 48Mbps -68 802.11g - 54Mbps -68 Environmental SMC7804WBRA complies with the following standards: T emperature: IEC 68-2-14 0 to 50 deg rees C ([...]

S PECIFICATIONS C-5 Standards Confor mance Electr omagnetic Compatibility CE, ETSI, R&TTE, FCC part 15 cl ass B & FCC par t 68, ETS 300 328, ETS 300 826 Safety CSA/NRTL (UL1950, CSA 22.2.950) GS (EN60950), CB (IEC60950) Inter net Standards RFC 826 ARP RFC 791 IP RFC 792 ICMP RFC 768 UDP RFC 793 TCP RFC 783 TFTP RFC 1483 AAL5 Encapsulation R[...]

S PECIFICATIONS C-6[...]

F OR TE CH NI CA L SU PP O RT , CA L L: F ro m U. S. A . a nd C an ad a (2 4 ho u rs a da y , 7 da ys a w ee k) (8 00 ) S M C- 4 -Y O U; P hn : ( 94 9) 67 9 -8 00 0; F a x : ( 94 9) 6 7 9- 1 48 1 F ro m Eu r op e : C o nt a ct d et ai ls c an b e fo un d on ww w .s m c- e ur op e .c om o r w w w .s m c. co m I NT E RN ET E -m a il a dd re ss es : t[...]