Efficient Networks 5500 Series manual

SpeedStream  Router User Guide Series: 5100, 5200, 5400, 5500 Part No. 007-0820-001[...]

 Copyright 2002, Effi cient Network s, Inc. All rights reser ved. Printed in the U.S.A . Product nam es mentioned herein may be tra demarks and/or regi ster ed trademar ks of th eir resp ecti ve companies. E fficient Netw orks , Inc. s hall not be li able for technical or ed itorial errors or om issions in thi s document; no r for inciden tal or[...]

EFFICIENT will not honor, and will consider the warranty voided, if: (1) the se al or serial number on the Product have been ta mpered with ; (2) th e Product’ s case has been opened; or (3) there has be en any attem pted or actual rep air or m odification of t he Product by anyone other than an EFFICI ENT authorize d service provide r. The limit[...]

SpeedStream Router User Guide i Contents List of Illu strations .......................................................................................................... ...........................................iv Introduction ........................................................................................................................[...]

SpeedStream Router User Guide ii User Setup (S ys tem Login) ...................................................................................................... ............................... 22 Time Client.................................................................................................................... .......................[...]

SpeedStream Router User Guide iii Troubleshooting ................................................................................................................ ......................................... 48 Basic Troublesh ooting Steps .................................................................................................... ............[...]

SpeedStream Router User Guide iv List of Illustrations Note Illustrations in this document were taken from the Microsoft® Internet Explorer™ browser. If you are using a different browser, your actual screens may differ somewhat from those shown. Administrative User Setup screen ....................................................................[...]

SpeedStream Router User Guide v Port Forwarding Configuration screen ............................................................................................. 25, 26 RFC2684 screen ......................................................................................................................... ................ 36 RIP Configuration .....[...]

SpeedStream Router User Guide 1 Introduction Congratulations on your purchase of the SpeedStream ® Router with SecureRoute TM . Efficient Networks is proud to provide you with a powerful yet simple communication device for connecting your computer or local area network (LAN) to the Internet. This manual covers the SpeedStream m odel series 5100, 5[...]

SpeedStream Router User Guide 2 About the SpeedStream Router Your SpeedStream router provides high-speed Internet and corporate network access to homes, networked home offices, and small offices. In addition, if you are working from a branch office, the router provides a fast and effective means of comm unicating over a remote LAN with the main off[...]

SpeedStream Router User Guide 3 Firewall Security The firewall in the SpeedStream router is a stateful packet inspection filter that works at the IP level. The firewall consists of an IP packet filtering mechanis m, a Network Address Port Translator (NAPT), and a Network Address Translator (NAT). When the NAPT/NAT feature is enabled, the local (unr[...]

SpeedStream Router User Guide 4 Installing the Router Minimum System Requirements At a minimum, your computer m ust be equipped with the following. Ethernet Port Connectivity (510 0, 5200, 5400, 5500 series) • A network interface card (NIC) that suppor ts Ethernet 10/100Base-T full-/half-duplex. • Operating system that supports TCP/IP. • Micr[...]

SpeedStream Router User Guide 5 Recording System Settings Another important step is to record the current router configuration in the works heets provided in Appendix A, “Configuration Data Sheets.” Although the r outer is already configured for your particular network, it is important to record this configuration in case it must be restored fo[...]

SpeedStream Router User Guide 6 Wall-Mount Filter For a wall-mounted telephone, install a wall mount filter: 1. Remove the telephone. 2. Connect the wall mount filter to the wall plate. 3. Reconnect the telephone. Two-to-One Adapter If your DSL router and another device will share the same telephone jack, install a two-to-one adapter: 1. Plug a two[...]

SpeedStream Router User Guide 7 Ethernet Installation Method To connect the SpeedStream router via the Ethernet interface, your computer must have an Ethernet adapter (network interface card, or “NIC”) installed. If your computer does not have this adapter, you will need to install it before proceeding further. Refer to the Ethernet adapter doc[...]

SpeedStream Router User Guide 8 USB Installation Method 1. Ensure that your computer meets the mi nimum requireme nts for USB installation. 2. Make sure the router is not plugged in to the electrical outlet. 3. Connect the USB cable to the USB port at the rear of the router. 4. Connect the other end of the USB cable to the USB port on your com pute[...]

SpeedStream Router User Guide 9 Configuring Computer Network Settings To access the Internet through the SpeedStream router , the TCP/IP protocol m ust be installed on your computer. If TCP/IP is not already installed on your c omputer, refer to your system documentation or online help for instructions. The default network settings for the SpeedStr[...]

SpeedStream Router User Guide 10 4. In the TCP/IP Properties dialog box, click the IP Address tab. 5. On the IP Address tab, make sure that Obtain IP address automatically and Detect connection to network media are selected. 6. Click the DNS Configuration tab. 7. On the DNS Configuration tab, make sure that Disable DNS is selected. 8. Click OK twic[...]

SpeedStream Router User Guide 11 Windows NT 4.0 1. On the Windows taskbar, click Start , then point to Settings , and then click Control Panel . The Windows Control Panel displays. 2. In Control Panel, double-click Network . The Network dialog box displays. 3. On the Protocols tab, select TCP/IP Protocol , and then click Properties . The Microsoft [...]

SpeedStream Router User Guide 12 5. In the Microsoft TCP/IP Properties dialog box, click the DNS tab. 6. On the DNS tab, delete any IP addresses listed in the DNS Service Search Order box. 7. Click OK twice to save your settings. 8. Reboot your computer if prompted. Windows 2000 1. On the Windows taskbar, click Start , then point to Settings , and [...]

SpeedStream Router User Guide 13 Note Your network adapter may differ from this illustration. 5. In the Internet Protocol (TCP/IP) Properties dialog box, make sure that Obtain IP address automatically and Obtain DNS server address automatically are selected. 6. Click OK twice to save your settings. 7. Reboot your computer if prompted. Windows XP 1.[...]

SpeedStream Router User Guide 14 Getting Started By this point, you should have completed the followi ng: • Connected the router. • Verified that the TCP/IP protocol is installed on a ll computers in your network. (If you need to install TCP/IP, refer to your system documentation or Windows Help.) • Configured the network settings on those co[...]

SpeedStream Router User Guide 15 DMZ View current DMZ status and host IP address, disable or enable Virtual DMZ, specify DMZ host IP address. IP Filter Rules View, add or change custom filter rules. Log View log listing of all firewall activity including record of any denial of access, reason code and description string. ADS Configure the Attack De[...]

SpeedStream Router User Guide 16 • Reset Invokes the standard “reset” functionality of HTML form, resetting the form contents back to the initialized values originally displayed. • Save Settings Initializes the settings you have entered. Logging On to the Web Interface The first time you log on to the Web interface, you will be required to [...]

SpeedStream Router User Guide 17 5. Click OK . Depending on your connection(s), one of the following screens will display: • If you have no PPP connections configured, the System Summary screen displays. • If you have only one PPP connection configured, the PPP Login screen for that connection displays. • If you have multiple PPP connections [...]

SpeedStream Router User Guide 18 2. In the PPP Login screen, enter the user name and password. 3. To save the settings, select Save Settings on Connect. 4. To configure additional PPP options, click Show Options . The input box expands to display the PPP Options section. 5. Enter the desired PPP options: • Access Concentrator: Enter the [optional[...]

SpeedStream Router User Guide 19 Customizing Router Settings This section provides you with the information and pr ocedures to customize various settings on your SpeedStream router. Many of these procedures requi re a mid- to advanced-level understanding of networking principles. If unsure, contact your Service Provider for assistance. Host The Hos[...]

SpeedStream Router User Guide 20 • The range of IP addresses may extend over only one IP subnet. • The ma ximum size of the address pool that may be managed by the DHCP server is 64. Therefore, the range of addresses must not exceed 64. • The range of IP addresses should not include a ny IP address maintained internally by your SpeedStream de[...]

SpeedStream Router User Guide 21 or Use WAN: Specifies that the DNS server address received fro m the WAN-side DHCP server is to be provided to DHCP clients on the LAN. • Domain Name: Specifies the DNS domain name for the DHCP server resident on your SpeedStream device. This value must be entered as an alpha-numer ic string. This parame ter is op[...]

SpeedStream Router User Guide 22 5. Enter the domain name. This inform ation may be provided by your ISP. 6. Enter the lease time, in minutes, to specify the amount of tim e that a DHCP lease should be provided the host (requires that you specify a DNS IP address). - or – Select Infinite time to hold the lease until you go back in and change thes[...]

SpeedStream Router User Guide 23 Time Client An accurate log timestamp is one of the requirements of the ICSA Labs firewall criteria (ver 3.0a). In order to maintain accurate timestamps in each log message, the firewall implements a Simple Network Time Protocol (SNTP) client. This allows the system to automatically synchronize its date and time wit[...]

SpeedStream Router User Guide 24 3. In the Netmask box, enter the IP netmask of the destination server. 4. In the Next Hop box, enter the IP address to which the data packets will be forwarded. 5. From the Interface list, select the interface that will forward the data packets. 6. To create the static route from your settings, click Set Route . NAT[...]

SpeedStream Router User Guide 25 To enable NAPT: 1. In the Specify External (WAN) IP Address box, enter a WAN IP address. 2. To initialize your setting, click Apply . - or - Continue to define NAT and/or NAPT settings. Port Forwarding Port forwarding allows selected servers running on th e LAN side of the router to be accessed from the WAN side. Re[...]

SpeedStream Router User Guide 26 To edit an existing port forwarding configuration: 1. On the main menu, click Advanced Setup , and then click Port Forwarding . The Port Forwarding Configuration screen displays. 2. In the Current Port Forwarding Configuration table, click Edit in the row that you wish to reconfigure. The Add/Edit Entry data refresh[...]

SpeedStream Router User Guide 27 Firewall Your SpeedStream router includes a user-configurable firewall that provides various levels of security against outside attacks. This firewall provides only WAN-side protection. The firewall does not provide any LAN-side protection. The firewall also includes an advanced Attack Detection System (ADS) contain[...]

SpeedStream Router User Guide 28 To select the firewall security level: 1. On the main menu, click Advanced Setup , then click Firewall , and then click Simple Setup . The Firewall – Simple Setup & Control screen displays. 2. Select the level from the Select Firewall Level list. 3. To accept your selection, click Apply . Firewall Snooze Contr[...]

SpeedStream Router User Guide 29 This feature was added to the DMZ configuration to assist with the dynamic nature of DHCP. Typically, the DMZ host is selected by entering th e host’s IP address on the configuration screen. However, if the host does not have a static IP address and uses DHCP, you will not immediately know what the new IP address [...]

SpeedStream Router User Guide 30 To disable DMZ: 1. On the Firewall – DMZ Configuration screen, click Disable DMZ . 2. To accept the settings, click Apply . Custom IP Filter Rules You can configure the SpeedStream Router firewall to perform IP filtering and stateful inspection of packets. The firewall supports a rules database to allow sophistica[...]

SpeedStream Router User Guide 31 Creating Custom IP Filter Rules You can create a new filter rule based on criteria you enter. Note You must have selected the Custom firewall level from the Firewall – Simple Setup screen. The following instructions reference the step numbers on the Firewall – Custom IP Filter Configuration screen. Step 1: Fill [...]

SpeedStream Router User Guide 32 Step 3: Select a protocol to filter: • In the Select by Name list box, select the protocol name. - or - In the Select by Number text box, enter the protocol number. Depending on the protocol you selected in St ep 3, select the applicable rule options: • If you selected TCP/UDP in Step 3, go to Step 4a . • If y[...]

SpeedStream Router User Guide 33 • Packets with spoofed source addresses are commonly sent to smaller hosts, not with the intent of bringing down a particular computer, but rather to take down a large host through a mechanism called Distributed Denial of Service (DDoS). In this situation, when a huge number of com puters are used to request servi[...]

SpeedStream Router User Guide 34 viruses can turn a host into a remote-controlled “zomb ie,” although some attacks can simply use a host’s network stack to do the job if it is too trusti ng. The Sp eedStream ADS monitors this behavior. ADS Configuration Options The SpeedStream Attack Detection System filters (i.e ., discards) and/or logs the [...]

SpeedStream Router User Guide 35 • Fragmented TCP Packet: As discussed in the Invalid IP Packet Fragment description, packets may be fragmented in transit. While it is entirely valid to fragment a TCP packet , this is rarely done because of a process called “MTU discovery” that occurs when two hosts begin communicating. The rarity of TCP pack[...]

SpeedStream Router User Guide 36 A confirmation screen displays. RFC2684 Note This option may not be available on your router configuration. The SpeedStream router supports two basic types of connections, Point-to-Point (PPP) and RFC2684 . Typically, RFC2684 connections rely on a server located on the Wide Area Network ( WAN) to supply the modem a [...]

SpeedStream Router User Guide 37 3. Enter the IP Address . 4. Enter the IP Netmask . 5. Enter the Default Gateway (optional). 6. Enter the DNS Server (optional). UPnP (Universal Plug and Play) UPnP is an industry standard netw orking protocol that enables devices to discover and control each other over a residential network. The SpeedStream router [...]

SpeedStream Router User Guide 38 to as "bridge/routing" mode, the router pr ovides typical routing functionality between the WAN side and the LAN side. However, all LAN-side interfaces are "bridged." In the second mode of operation, the rout er provides only "bridging" functionality. This applie s to WAN- to-LAN connec[...]

SpeedStream Router User Guide 39 • Version 2: Allows RIP version 2 to be transmitted/received on the selected interface. This would be the m ost common choice. • Versions 1 and 2: Simultaneously supports RIP versions 1 and 2 on the selected interface. • Active Mode: If enabled, the router will receive routing updates on the selected interface[...]

SpeedStream Router User Guide 40 System Log Configuration Options • All Events : Logs all events. • Informative Events : Logs general information about non-critical changes in system status. • Minor Events : Logs events that might indicate a condition requiring user intervention, and generates a warning about this change in the system status.[...]

SpeedStream Router User Guide 41 Reset Note This option may not be available on your router configuration. If rebooting the router does not resolve the problem, you can reset it to the factor y default settings or to the last firmware update. Important! • When you reset the router, you will lose any settings you have entered manually. • Do not [...]

SpeedStream Router User Guide 42 6. Click OK to proceed. The file is sent to the router. If a valid update file, the router writes the update to its internal flash memory. The System Reboot screen displays a countdown during the Flash Write process. When the update is completed, the Login screen displays. To cancel the reset: • Continue depressin[...]

SpeedStream Router User Guide 43 Viewing Status Screens The SpeedStream router’s Web management inte rface provides several screens from which you can monitor various system status and statistics: • The System Summary screen displays router and PPP connection(s) information. • The Interface Map displays a graphical depiction of system connect[...]

SpeedStream Router User Guide 44 Interface Map Note This option may not be available on your router configuration. The Interface Map screen provides a graphical representation of the current LAN and WAN configurations of your SpeedStream router. It is particularly useful for Technical Support in verifying that correct protocol encapsulations are as[...]

SpeedStream Router User Guide 45 To display the System Log screen: • From the main menu, click Status and Statistics , and then click System Log . The System Log screen displays. To update the display : • Click Refresh . Status and Statistics Screens These screens display data pertaining to ATM/AAL, DSL, Ethernet and USB traffic, including whet[...]

SpeedStream Router User Guide 46 DSL Status/Statistics • From the main menu, click Status and Statistics , and then click DSL . The DSL Status/Statistics screen displays. Ethernet Status/Statistics • From the main menu, click Status and Statistics , and then click Ethernet . The Ethernet Status/Statistics screen display s.[...]

SpeedStream Router User Guide 47 USB Status/Statistics • From the main menu, click Status and Statistics , and then click USB . The USB Status/Statistics screen displays. Routes The Routes screen displays the current routing table wh ich contains the data pertaining to all currently known static and dynamic IP routes. Note Please refer to the Onl[...]

SpeedStream Router User Guide 48 Troubleshooting Connection problems usually occur when the router’s software configuration cont ains incomplete or incorrect information. The router’s diagnostic tools can help you identify and sol ve many of these problems. Basic Troubleshooting Steps Before contacting Technical Support, you should a ttem pt to[...]

SpeedStream Router User Guide 49 * Note The 5100 and 5400 series SpeedStream routers have one Ethernet LED; the 5200 and 5500 se ries have four Ethernet LEDs, one for each Ethernet port. Resolving Specific Issues pwr LED Not Lit If the pwr (power) LED is not lit, it is not connecting to th e power source. Verify that the power cord is firmly plugge[...]

SpeedStream Router User Guide 50 • If the initial POST diagnostic tests fail, the pwr LED will remain red, indicating a POST failure, and will lock the router. You will need to contact Efficient Networks Technical Support to resolve this issue. Contacting Technical Support If you still cannot resolve the issue after following the recommended trou[...]

SpeedStream Router User Guide 51 Appendix A: Configuration Data Sheets Your router is preconfigured with settings specific to your network . We strongly suggest that you record these settings in case you need to reestablish your original configuration. Administrative User Setup Parameter Default Value Your Value User Name admin Password Attack Dete[...]

SpeedStream Router User Guide 52 Firewall – Custom IP Filter Configuration Parameter Default Value Your Value Rule # Status Access Direction Protocol Source Interface Source Addres s Source Mask Destination Port Operator Enable/Disable Rule # Status Access Direction Protocol Source Interface Source Addres s Source Mask Destination Port Operator E[...]

SpeedStream Router User Guide 53 Parameter Default Value Your Value Source Interface Source Addres s Source Mask Destination Port Operator Enable/Disable Rule # Status Access Direction Protocol Source Interface Source Addres s Source Mask Destination Port Operator Enable/Disable Rule # Status Access Direction Protocol Source Interface Source Addres[...]

SpeedStream Router User Guide 54 Firewall – Level Parameter Default Value Your Value Level Firewall – Snooze Control Parameter Default Value Your Value Snooze Control Disable Enable, Set Time Interval To: Reset Time Interval T o Host Parameter Default Value Your Value IP Address IP Netmask Default Router Host Name LAN IP Parameter Default Value[...]

SpeedStream Router User Guide 55 Parameter Default Value Your Value NAPT Enabled Interface 4 NAT/NAPT Disabled NAT Enabled Internal (LAN) IP Address NAPT Enabled Interface 5 NAT/NAPT Disabled NAT Enabled Internal (LAN) IP Address NAPT Enabled Interface 6 NAT/NAPT Disabled NAT Enabled Internal (LAN) IP Address NAPT Enabled Interface 7 NAT/NAPT Disab[...]

SpeedStream Router User Guide 56 Parameter Default Value Your Value Service Name Auto-Connect On Disconnect Use Idle Time-Out Connection 2 User Name Password Access Connecti on Service Name Auto-Connect On Disconnect Use Idle Time-Out Connection 3 User Name Password Access Connecti on Service Name Auto-Connect On Disconnect Use Idle Time-Out Connec[...]

SpeedStream Router User Guide 57 System Log Parameter Default Value Your Value Log Capture Level Time Client Parameter Default Value Your Value Disabled Primary Server IP Address Secondary Server IP Address UPnP Parameter Default Value Your Value Disabled Discovery and Advertisement Only Full IGD-S upporte d Enable Access Loggi ng Read-Only M ode[...]

SpeedStream Router User Guide 58 Appendix B: Technical Specifications AAL and ATM Support: VCI 0-65535 address range VPI 0-255 address range AAL5 support Bridging: IEEE 802.1.d Transparent Learning Bridge (dynamic learning of up to 255 addresses) Spanning Tree support Certifications: FCC Part 15, Class B CE certification Connectors: DSL interface: [...]

SpeedStream Router User Guide 59 Appendix C: Firewall Security Levels The following table shows the security of each mode of the firewall for specific applications and protocols. Note All applications and protocol s are conditionally allowed IN if the outbound session was initiated locally and allowed OUT. Security High Medium Low NAPT Off ICSA- Co[...]

SpeedStream Router User Guide 60 Security High Medium Low NAPT Off ICSA- Compliant Application/ Protocol In Out In Out In Out In Out In Out ICU II √ √ IGMP √ √ √ IPSec multi-session √ √ √ IPSec single-session √ √ √ IRC √ √ Kali √ √ √ L2TP √ √ √ MechWarrior 4 √ √ √ Mplayer √ √ √ MS Netmeeting √ √[...]

SpeedStream Router User Guide 61 Security High Medium Low NAPT Off ICSA- Compliant Application/ Protocol In Out In Out In Out In Out In Out Tiberian Sun √ √ √ Traceroute √ √ √ √ Ultima Online √ √ √ Unreal Tour nament √ √ √ VNC √ √ Warcraft √ √ √ Windows Media Player √ √ √ √ XDM √ √ Yahoo Messenger √[...]

SpeedStream Router User Guide 62 Appendix D: Acronyms and Technical Concepts Acronyms AAL5 ATM Adaption Layer 5 ADS Attack Detection Sy stem ATM Asynchronous Transfer M ode ATU ADSL Termination Unit ATU-C ADSL Termination Unit - Central Offi ce; refers to location at the CO aggregation point. ATU-R ADSL Termination Unit - Remote; refers to location[...]

SpeedStream Router User Guide 63 LOS Loss of Signal MAC address Media Access Control address; a network device’s unique identifier MTU Maximum Transm ission Unit NAP Network Access Provider NAPT Network Address Port Translation NAT Network Address Translati on NCP Network-lay er Control Protocol NSP Network Service Provider OCD Out-of-cell Deline[...]

SpeedStream Router User Guide 64 SSDP Simple Service Discovery Protocols Tx Cells (ATM) Number of cells transmitted through the ATM layer to the wire. Tx Errors (ATM) Number of SDUs that could not be transmitted due to errors. Tx Packets (DSL, Ethernet, USB) Count of all en coded blocks transmitted on this channel since router reset. Tx PDUs (ATM) [...]

SpeedStream Router User Guide 65 When you clone a set of rules, any existing Custom rules are deleted and a new set of Custom rules (a replica of the cloned level) is created. When you click Clone Rule Set on the Firewall – Custom IP Filter Configuration screen, the Current IP Filter Rules tabl e refreshes with the new rules set. You can edit, ad[...]

SpeedStream Router User Guide 66 Note You have the option to change the router’s Et hernet IP address without rebooting the router. If you have configured a specific set of IP addresses for the DHCP server, then y ou change the Ethernet IP address to something that is on a different subnet than your DHCP server’s addresses, and you do not reboo[...]

SpeedStream Router User Guide 67 PPP (Point-to-Point Protocol) PPP is a single or multi-link interface between two packet switching devices, such as a bridge or router. PPP has built-in negotiation for addresses a nd connection parameters and can route m ultiple protocols over a single link. One benefit of usi ng PPP is it offers interoperability o[...]

SpeedStream Router User Guide 68 Index 5100 / 5200 / 5400 / 5500 back panels.................................... 6 5100 / 5200 / 5400 / 5500 front pa nels ................................... 1 A AAL and ATM support ......................................................... 58 AAL5 .....................................................................[...]

SpeedStream Router User Guide 69 Custom IP f ilter rules ............................................................ 30 Customizing firewall f ilter ing rules data bas e...................30-32 Customizing rout er settings .................................................. 19 D Data Sheets See Configuration Data Sheets DDoS (AD S).................[...]

SpeedStream Router User Guide 70 Securit y Le vels ......................................... 27-28, 54, 59-61 Snooze Contr ol c onfiguration .............................. 28, 43, 54 Status s creens ........................................................ 43, 43-44 Firmware update .............................................................. 41-42[...]

SpeedStream Router User Guide 71 Media interface specifi cat ions .............................................. 58 Medium firewall s ecurity le vel ............................................. 27 Minimum system requirements............................................... 4 Minor events (S ys tem Log) ...............................................[...]

SpeedStream Router User Guide 72 Simple Network Time Protocol See SNT P Smurf a ttack.......................................................................... 34 Snooze control .......................................................... 28, 43, 54 SNTP (Simple Netw ork Time Protocol) ............................... 23 Software......................[...]