SMC Networks AR4505GW manual

OZEND A 11g W ir eless ADSL Fir ewall Router Model: AR4505GW[...]

OZEND A 11g W ir eless ADSL Fir ewall Router[...]

i T ABLE OF C ONTENTS Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-1 About the A DSL Router . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-1 Features and Benefits . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-1 Applicat ions . . . . . . . . . . . . [...]

T ABLE OF C ONTENTS ii Configuring the ADSL Router . . . . . . . . . . . . . . . . . . . 4-1 Navigating the M anagement Interface . . . . . . . . . . . . . . . . . . . . . . . . . . 4-2 Making Configuration C hanges . . . . . . . . . . . . . . . . . . . . . . . . . . 4-2 SETUP WIZARD . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .[...]

T ABLE OF C ONTENTS iii Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C-1[...]

T ABLE OF C ONTENTS iv[...]

1-1 C HAPTER 1 I NTRODUCTION Congratulations on your purchase of the IEEE 802.11g ADSL Router, hereafter referred t o as the “A DSL Ro uter”. We are proud to provide you with a powerful yet simple commun ication device fo r connecting your local area network (LAN) to the Inter n et. For those who want to surf the Internet in t he most secure wa[...]

I NTR ODUCTION 1-2 • Firewall with Stateful Packet Insp ection, client priv ileges, intrusion detection, and NAT • NAT also enables multi-user Inter net access via a single user account, and virtual server functionality (provi ding protected access to Internet services such as web, FTP, email, and Telnet) • VPN pass-through (IPSec-ESP Tunne l[...]

A PPLICATIONS 1-3 • Shared IP Address The ADSL Router provides Internet access for up to 253 users via a single shared IP address . Using onl y one ISP account, multiple users on your netw ork can browse the web at the same time. • Virtual Server If you ha ve a fix ed IP address, you can set the ADSL R outer to act as a virtual host for network[...]

I NTR ODUCTION 1-4[...]

2-1 C HAPTER 2 I NSTALLATION Before installing the ADSL Router, verify that you ha ve all the items listed under the P ackage Contents list. If any of the items are missing or damaged, contact your local distributor . Also be sure that you ha ve all the necessar y cabling before installing the ADSL Router. After installing the ADSL Ro uter, refer t[...]

I NSTALLATION 2-2 System Requirements Y ou must meet the following minimum requirements: • ADSL line installed by your Internet Servi ce Provider. • A PC using a fixed IP a ddress or dynamic IP ad dress assigne d via DHCP, as well as a gateway server address and DNS server address from your service provider. • A computer equipped with a 10/ 1[...]

H ARDWARE D ESCRIPTION 2-3 Figure 2-1. Rear Panel Item Description LAN Ports Fast Ethernet ports (RJ-45). Connect devi ces on your local area network to the se ports (i.e., a PC , hub, or switch). Power button Press this button to turn on/turn off the ADSL Ro uter. Reset Button Use this button to reset the power and restore the default factory sett[...]

I NSTALLATION 2-4 LED Indicators The power and port LED indicators on the front panel are illustrated b y the following figure and table. Figure 2-2. Front Panel LED Status Description PWR On The ADSL Router is receiving power. Normal operation. Off Power off or fai lure. ADSL On ADSL connectio n is functioning correct ly. Flashing The ADSL Router [...]

ISP S ETTINGS 2-5 ISP Settings Please collect the following inform ation from your ISP bef ore setting up the ADSL Router : • ISP account user name and password • Protocol, encapsulation and VPI/VCI circuit numbers •D N S s e r v e r a d d r e s s • IP address, subnet mask and defaul t gateway (for fixed IP users only) Connect the System Th[...]

I NSTALLATION 2-6 Phone Line Configuration Installing a Full-Rate Connection If you are usin g a full-rate (G .dmt) c onnection, your service provider will attach the out s ide ADSL line to a data/v oice splitter. In this case you can connect your phones and computer directly to the splitter as sho wn below: Figure 2-3. Installing with a Splitter V[...]

C ONNECT THE S YSTEM 2-7 Installing a Splitterless Connection If you a re using a splitterless (G .lite) connection, then your ser vice provider will attac h the outside ADSL line directly to your phone system. In this case you can connect your phones and computer directly to the incoming ADSL line, but you will hav e to add low-pass filters to y o[...]

I NSTALLATION 2-8 Attach to Your Network Using Ethernet Cabling The four LAN por ts on the ADSL R out er auto-neg otiate the connection speed to 10 Mbps Ethernet or 100 M bps Fast Ethernet, as well as the transmission mode to half duplex or fu ll duplex. Use RJ-45 cables to connect any of the four LAN ports on the ADSL Router to an Ethernet adapter[...]

3-1 C HAPTER 3 C ONFIGURING C LIENT PC After completing hardware setup b y connecting all your network devices , you need to configure your computer to connect to the ADSL Router. See: “Windows 98/Me” on pag e 3-3 “Windows NT 4.0” on page 3-8 “Windows 2000” on page 3-12 “Windows XP” on page 3-15 or “Configuring Y our Macintosh Com[...]

C ONFIGURING C LIENT PC 3-2 TCP/IP Configuration T o access the Internet through the ADSL R outer, you mu st configure the network settings of the computers on yo ur LAN to use the sa me IP subnet as the ADSL Router. The default IP se ttings for the ADSL R oute r are: Note: These sett ings can be changed to fit your network requirements, but you mu[...]

W INDOWS 98/M E 3-3 Windows 98/Me Y ou may find that the instr uctions in this section do not exactly match your v ersion of Windows . This is because these steps and screen shots were created from Windows 98. Windows Millennium Edition is similar , but not identical, to Windows 98. 1. On the Windows desktop , click Start/Settings/Control P anel. 2[...]

C ONFIGURING C LIENT PC 3-4 3. In the Netw ork window , under the Configuration tab , double-click the TCP/IP item listed for your netw ork card. 4. In the TCP/IP window , select the IP Address tab . If “Obtain an IP address automatically” is already selected, your computer is already confi gured for DHCP . If not, select this option.[...]

W INDOWS 98/M E 3-5 5. Windows may need y our Windows 98/Me CD to copy some files . After it finishes copying, it will prompt you to res t art your system. Click Y es and your computer will restar t. Disable HTTP Proxy Y ou need to verify that the “ H TTP Pr o xy” feature of your web browser is disabled. This is so that y our browser ca n view [...]

C ONFIGURING C LIENT PC 3-6 3. In the Internet Options window , click the Connections tab . Next, click the LAN Settings ... button. 4. Clear all th e chec k box es . 5. Click OK, and then clic k OK again to close the Internet Options window .[...]

W INDOWS 98/M E 3-7 Obtain IP Settings from Your ADSL Router Now that y ou hav e configured your computer to connect to your ADSL R out er, it needs to obtain new network settings . By releas ing old DHCP IP settings and renewing them with se ttings from y our ADSL Router, y ou can also verify that you ha ve configured your computer correctly . 1. [...]

C ONFIGURING C LIENT PC 3-8 Windows NT 4.0 1. On the Windows desktop , click Start/S ettings/Cont rol Pa n e l . 2. Double-click the Network icon.[...]

W INDOWS NT 4.0 3-9 3. In the Netw ork window , Select the Protocols tab . Double-click TCP/IP Protocol. 4. When the Microsoft TCP/IP Properties window open, select the IP Address tab . 5. In the Adapter drop-down list, be sure your Ethernet adapter is sel ected. 6. If “Obtain an IP addres s automatically” is already selected, your computer is [...]

C ONFIGURING C LIENT PC 3-10 8. Windows may copy some files , and will then prompt you to restart your system. Click Y es and your computer will shut down and restart. Disable HTTP Proxy Y ou need to verify that the “ H TTP Pr o xy” feature of your web browser is disabled. This is so that y our browser ca n view the ADSL Rout er’ s HTML confi[...]

W INDOWS NT 4.0 3-11 2. In the Command Prompt wind ow , type “IPCONFIG /RELEASE” and press the ENTER key . 3. T ype “IPCONFIG /RENEW” and press the ENTER key . V erify that you r I P A dd re ss is now 192.168.2.xxx , your Subnet Mask is 255.255.255.0 and your Def ault Gateway is 192.168.2.1 . These values confir m that your ADSL R outer is [...]

C ONFIGURING C LIENT PC 3-12 Windows 2000 1. On the Windows desktop , click Start/Settings/Network and Dial-Up Connections . 2. Click the icon that corresponds to the connection to your ADSL Rou t e r . 3. The connection status screen will open. Click Properties. 4. Double-click Internet Protocol (TCP/IP). 5. If “Obtain an IP address automatica l[...]

W INDOWS 2000 3-13 Disable HTTP Proxy Y ou need to verify that the “ H TTP Pr o xy” feature of your web browser is disabled. This is so that y our browser ca n view the ADSL Rout er’ s HTML configuration pag es (refer to “I nter net Explorer” on page 3-5). Obtain IP Settings from Your ADSL Router Now that y ou hav e configured your comput[...]

C ONFIGURING C LIENT PC 3-14 3. T ype “IPCONFIG /RENEW” and press the EN TER key . V erify that your IP Address is now 192.168.2.xxx , your Subnet Mask is 255.255.255.0 and your Def ault Gateway is 192.168.2.1 . These values confir m that your ADSL R outer is functioning . 4. T ype “EXIT” and press the EN TER key to c lose the Command Promp[...]

W INDOWS XP 3-15 Windows XP 1. On the Windows desktop , click Start/Control Panel. 2. In the Control P anel window , click Network and Internet Connections . 3. The Network Connections wind ow will open. Double-click the connection for this device. 4. On the connection status screen, click Proper ties . 5. Double-click Internet Protocol (TCP/IP). 6[...]

C ONFIGURING C LIENT PC 3-16 Disable HTTP Proxy Y ou need to verify that the “ H TTP Pr o xy” feature of your web browser is disabled. This is so that y our browser ca n view the ADSL Rout er’ s HTML configuration pag es (refer to “I nter net Explorer” on page 3-5). Obtain IP Settings from Your ADSL Router Now that y ou hav e configured y[...]

C ONFIGURING Y OUR M ACINTOSH C OMPUTER 3-17 Configuring Your Macintosh Computer Y ou may find that the instr uctions here do not exactly matc h your operating system. This is because thes e steps and screen shots were created using Mac OS 10.2. Mac OS 7.x and abov e are similar, but may not be identical to Mac OS 10.2. F ollow these instr uctions:[...]

C ONFIGURING C LIENT PC 3-18 3. If “Using DHCP Ser ver ” is already s elected in the Configure fiel d, your computer is alread y configured for DHCP . If not, select this Option. 4. Y our new settings are shown on the TCP/IP tab. V erify that your IP Address is now 192.168.2.xxx , your Subnet Mask is 255.255.255.0 and your Def ault Gateway is 1[...]

C ONFIGURING Y OUR M ACINTOSH C OMPUTER 3-19 3. Uncheck all check box es and click OK.[...]

C ONFIGURING C LIENT PC 3-20[...]

4-1 C HAPTER 4 C ONFIGURING THE ADSL R OUTER After you ha ve configured TCP/IP on a client computer , you can configure the ADSL Router using Internet Explorer 5.5 or abov e. T o access the ADSL R outer’ s manag ement interfac e, enter the defa ult IP address of the ADSL Router in your web browser: http://192.168.2.1. By default there is no passw[...]

C ONFIGURING THE ADSL R OUTER 4-2 Navigating the Management Interface The ADSL Router’ s manage ment interface consists of 12 main items . Setup Wizar d : Use the Setup Wizard if you w a nt to quickly set up the ADSL Router. Go to “SETUP WIZARD” on page 4-3. Advanced Setup: Advanced Setup supports mo re advanced functions like hacker attack d[...]

SETUP WIZARD 4-3 SETUP WIZARD Channel and SSID Click on “SETUP WIZARD” and “NEXT”, then you will see the Channel and SSID page. Click “NEXT” to contin ue. Parameter Description ESSID Extended Service Set ID. The ESSID must be the sa me on the ADSL Router and all of its wireless clients. ESSID Broadcast Enable or disable the broadcast in[...]

C ONFIGURING THE ADSL R OUTER 4-4 Parameter Setting Select your Country and Inter net Ser vice Provider . This will automatically configure the ADSL Router with the cor rect Protocol, Encapsulation and VPI/V C I settings for your ISP . If your Country or Interne t Ser vice Pr ovider is not listed you will need to manually ent e r settings . Go to ?[...]

SETUP WIZARD 4-5 Confirm The Confir m pag e shows a summary of the configuration parameters . Check ADSL operation mode (W AN), Netw ork Layer P arameters (W AN) and DHCP parame ters are correct. Parameter Description ADSL Operation Mode (WAN) ISP The type of ISP you have selec ted. Protocol Indicates the prot ocol used. VPI/VCI Virtual Path Identi[...]

C ONFIGURING THE ADSL R OUTER 4-6 If the parameters are cor rect, click “NEXT” to sav e the se settings . DHCP Parameters Function Shows the D HCP function is enable d or disabl ed. Default Gateway LAN IP address of the A DSL Router. Subnet Mask The netw ork subnet mask. Name Server 1 Primary DNS server IP address. Name Server 2 Altern ate DNS [...]

SETUP WIZARD 4-7 Parameter Setting - Country or ISP Not Listed If your Country or Inter net Ser vic e Provider is not listed on the drop down menu, select “Others”. This will allow y ou to manually configure your ISP settings . F or manual configuration you will need to know the Protocol, DNS Ser ver , Encapsulation and VP I/VCI settings used b[...]

C ONFIGURING THE ADSL R OUTER 4-8 ISP use Bridging - Parameter Setting Enter the Bridging settings pr ovided b y your ISP . Click “NEXT” to continue to the “Con fir m” settings page. Go to “Confir m” on page 4-5 in the manual for deta ils about the “Confir m” settings pag e. Parameter Description Management IP A ddress Enter the IP [...]

SETUP WIZARD 4-9 ISP use 1483 Bridging - Parameter Setting Enter the RFC1483 Bridging settings pro vided by your ISP . Click “NEXT” to continue to the “Con fir m” settings page. Go to “Confir m” on page 4-5 in the manual for deta ils about the “Confir m” settings pag e. Parameter Description DNS Server Enter the Domain Name Server a[...]

C ONFIGURING THE ADSL R OUTER 4-10 ISP use PPPoE - Parameter Setting Enter the PPP oE (P oint-to-Point Pr otocol over Et hernet) settings provided b y your ISP . Click “NEXT” to continue to the “Confirm” settings page. Go to “Confirm” on page 4-5 in the manual for de tails about the “Confirm” settings page. Parameter Description DNS[...]

SETUP WIZARD 4-11 ISP use PPPoA - Parameter Setting Enter the PPP oA (Point-to-P oint Protocol ov er ATM) settings provided by y our ISP . Click “NEXT” to continue to the “Confirm” settings page. Go to “Confirm” on page 4-5 in the manual for de tails about the “Confirm” settings page. Parameter Description DNS Server Enter the ISP D[...]

C ONFIGURING THE ADSL R OUTER 4-12 ISP use 1483 Routing - Parameter Setting Enter the 1483 R outing settings provided by your ISP . Click “NEXT” to continue to the “Confirm” settings page. Go to “Confirm” on page 4-5 in the manual for de tails about the “Confirm” settings page. Parameter Description IP Address Enter the IP addr ess [...]

A DV ANCE D S ETUP 4-13 Advanced Setup Click on Home which is loc ated on the upper right-hand corner. The left-hand side displays the main me n u and the right-hand side shows descriptiv e infor mation. The advanced management interface contains 11 main menu items as described in the following table . Menu Description SYSTEM Sets the local time zo[...]

C ONFIGURING THE ADSL R OUTER 4-14 ADSL Sets the ADSL operation type and shows the ADSL status. TOOLS Contains option s to backup & re store the curre nt configuration, restore all configuration settings to the factory defaults, update system firmware, or reset the system. STATUS Provides WAN conn ection type and status, firmware and hardwar e [...]

A DV ANCE D S ETUP 4-15 SYSTEM Time Settings Select your local time zone from th e drop down list. This infor mation is used for log entries and client filtering . F or accurate timing of log entries an d system events , you need to set the time zone. Select your time zone from the drop do wn list. If you w ant to automatically synchroni ze the ADS[...]

C ONFIGURING THE ADSL R OUTER 4-16 Password Settings Use this page to chang e the passw ord for accessing the management interface of the ADSL Router . P asswords can contain from 3~12 al phanumeric characters and a re case sensitiv e. Note: If you lost the password, or yo u cannot gain access to the user interface, press the blue reset bu tton on [...]

A DV ANCE D S ETUP 4-17 Remote Management By default, ma nagement access is only a vailable to users on your local network. Ho wever , you can also mana ge the ADSL Router from a rem ote host by entering the IP address of a remote computer on this sc reen. Check the Enabled c he ck bo x, and enter the IP address of the Host Address and click “ SA[...]

C ONFIGURING THE ADSL R OUTER 4-18 DNS Domain Name Ser ve rs (DNS) are used to map a domai n name (e.g ., www .smc.com) with the IP a ddress (e.g ., 64.14 7.25.20). Y o ur ISP should provide the IP address of one or more Domai n Name Ser vers . Enter those addresses on this page, and click “ SA VE SETTINGS ”.[...]

A DV ANCE D S ETUP 4-19 WAN Specify the W AN connection paramete rs pro vided by your Internet Ser vice Provider (ISP). The ADSL Router can be connected to your ISP in one of the following ways : •A T M P V C • Clone MAC[...]

C ONFIGURING THE ADSL R OUTER 4-20 ATM PVC Enter the ATM (Async hronous T ran sfer Mode) vir tual connection parameters here . Parameter Description Description Click on the VC to set the values for the connection. VPI/VCI Virtual Path Identifier (V PI) and Virtual Circuit Identifier (VCI). Encapsulat ion Specifies how to hand le multiple pro tocol[...]

A DV ANCE D S ETUP 4-21 Clone MAC Address Some ISPs require yo u to register y our MA C address with them. If this is the case, the MA C address of the ADSL Router must b e changed to the MA C address that you have registered with your ISP .[...]

C ONFIGURING THE ADSL R OUTER 4-22 LAN Use the LAN menu to configure the LAN IP addr ess and to enable the DHCP ser ver for dynamic client address allocation. Note: Remember to configure your cli ent PCs for dynamic address allocation. (S ee page 3-2 for details.) Parameter Description IP Address The IP address of the ADSL Router. IP Subnet Mask Th[...]

A DV ANCE D S ETUP 4-23 Wireless The ADSL Router also operates as a wireless ac cess point, allowing wireless computers to communicate with each other . T o configure this function, you need to ena ble the wireless func tion, define the radio channel, the domain identifier, and the security options . Check Enable and click “ SA VE SETTINGS ”.[...]

C ONFIGURING THE ADSL R OUTER 4-24 Channel and SSID Y ou must specify a com mon radio cha nnel and SSID (Ser vice Set ID) to be used b y the ADSL Router and all of its wireless clients . Be sure you configure all of its clients to the same values . Parameter Description ESSID Extended Service Set ID. The ESSID must be the same on the ADSL Router an[...]

A DV ANCE D S ETUP 4-25 Security T o make your wireless netw ork safe , you should turn on the security function. The ADSL Router supports WEP (Wired Equivalent Priv acy), WP A (Wi-Fi Protected), and 802. 1x security mechanisms .[...]

C ONFIGURING THE ADSL R OUTER 4-26 WEP If you use WEP to protect your wirele ss netw ork, you need to set the same parameters for the ADSL R outer and all y our wireless cl ients . Y ou may automatically g enerate encr yption keys or manually enter the keys . T o generate the k ey automatically with passphrase , check the P assphrase box, enter a s[...]

A DV ANCE D S ETUP 4-27 T o manually configure the encr yption ke y , enter fiv e hexadecimal pairs of digits for each 64-bit k ey , or enter 13 pairs for the single 128-bit k ey . (A hexadecimal digit is a number or letter in the range 0-9 or A- F .) Note that WEP protects data transmitted between wireles s nodes, but does n ot protect any transmi[...]

C ONFIGURING THE ADSL R OUTER 4-28 802.1X If 802.1x is used in your netw ork, th en you should enable this function for the ADSL Router. These paramete rs are used for the AD SL Router to connect to the authentication ser ver . Parameter Description 802.1X Authentication Enable or disable th is authenticati on function. Session Idle timeout Defines[...]

A DV ANCE D S ETUP 4-29 Secret Ke y The secret key shared be tween the authen tication serv er and its clients. NAS-ID Defines the requ est identifier of the Network Access Server. Parameter Description[...]

C ONFIGURING THE ADSL R OUTER 4-30 NAT Network Address T ranslation allows mult iple users to access the Inte rnet sharing one public IP . Address Mapping Allows one or more public IP addresses to be shared b y multiple internal users . T his also hides the inter nal netw ork for increased privacy and security . Ente r the Public IP addre ss you wi[...]

A DV ANCE D S ETUP 4-31 Virtual Server If you configure the ADSL R outer as a vir tua l ser ver, remote users accessing ser vices such as w eb or FT P at your local site via public IP addresses can be automatically redirect ed to local ser vers configured with priv ate IP addresses. In other word s , depending on the requested ser vice (TCP/UDP por[...]

C ONFIGURING THE ADSL R OUTER 4-32 Special Applications Some applications require multiple connections , such as Inter net gaming, video-conferenci ng, and Internet telephony . These applications may not work when Network Address T ranslation (NA T) is enabled. If you need to r un applications that requir e multiple connections , use these pag es t[...]

A DV ANCE D S ETUP 4-33 NAT Mapping Table This pag e displays the cur rent NAPT (Netw ork Address P or t T ranslation) address mappings .[...]

C ONFIGURING THE ADSL R OUTER 4-34 Route These pag es define routing related para meters , including static routes and RIP (Rou ting Infor mati on Protocol) parameters . Static Route Click “ Add” to add a new static route to the list. Click “Sav e Settings” to save the configuration. Parameter Description Network Addr ess Enter the IP addre[...]

A DV ANCE D S ETUP 4-35 RIP Parameter Description General RIP Paramete rs RIP mode Globally enab les or disables RIP. Auto summary If Auto summary is disabl ed, then RIP packets will include sub-ne twork informatio n from all s ub- networks connec ted to the router. If enable d, this sub-network information will be summarized to one piece o f infor[...]

C ONFIGURING THE ADSL R OUTER 4-36 RIP sends routing-update messages at regular inter vals and when the network topology changes . When a router receiv es a routing update that includes cha ng es to an entry , it updates its routing table to r ef lect the new route. RIP routers maintain only the best route to a destination. After updating its routi[...]

A DV ANCE D S ETUP 4-37 Routing Table Parameter Description Flags Indicates t he route status: C = Direct c onnection on the same sub net. S = Static route. R = RIP ( Routing Info rmation Protoco l) assigned rou te. I = ICMP (Intern et Control Messag e Protocol) Redirect route. Network Address Destination IP address. Netmask The subnetwork associ a[...]

C ONFIGURING THE ADSL R OUTER 4-38 Firewall The ADSL Router ’ s firewall inspects packets at the application layer, maintains TCP and UDP session infor mation including time-outs and the number of activ e sessions, and provid es the ability to detect and prevent certain types of network attac ks . Network attac ks that deny access to a network de[...]

A DV ANCE D S ETUP 4-39 Access Control Access Control allows us ers to define the outg oing traf fic permitted or not-per mitted through the W AN interfac e. The default is to per mit all outg oing traffic . The following items are on the Access Control screen: Parameter Description Enable Filtering Function Click Yes to turn on the filtering funct[...]

C ONFIGURING THE ADSL R OUTER 4-40 T o add the PC to the filtering table: 1. Click “ Add PC” on the Access Control screen. 2. Define the appropriate settin gs for client PC ser v ices . 3. Click “OK” and then click “ SA VE SETTINGS ” to sav e your settings .[...]

A DV ANCE D S ETUP 4-41 MAC Filter The ADSL Router can also limit th e netw ork access based on the MA C address . The MAC Filtering T a ble allows the ADSL R outer to enter u p to 32 MA C addresses that are not allowed access to the W AN por t. Click Y es to enable, or No to disable this function. Enter the MA C address i n the space provid ed.[...]

C ONFIGURING THE ADSL R OUTER 4-42 URL Blocking The ADSL Router allo ws the user to block access to web sites by entering either a full URL address or just a ke yw ord. T his feature can be used to protect children from access ing vi olent or pornog raphic web sites . Y ou can define up to 30 sites here.[...]

A DV ANCE D S ETUP 4-43 Schedule Rule Y ou may filter Inter net access for loca l clients based on r ules. Eac h access control r ule may be activ ated at a sche duled time. Define the time schedule on this page, and apply the r ule on the Access Control page.[...]

C ONFIGURING THE ADSL R OUTER 4-44 F ollow these steps to add a schedule r ule: 1. Click “ Add Schedule R ule”. 2. Define the appropriate settings for a schedule rule (as shown in this example). 3. Click “OK” and then click “ SA VE SETTINGS ” to sav e your settings .[...]

A DV ANCE D S ETUP 4-45 Intrusion D etection • Intrusion Detection Feature Stateful Packet Inspection (SPI) and Anti-DoS firewall protection (Default: Enabled) — The Intrus ion Detection Feature of the ADSL R outer limits access for incoming traffic at the WAN port. When the SPI feature is turned on, all incoming pack ets wi ll be blocked excep[...]

C ONFIGURING THE ADSL R OUTER 4-46[...]

A DV ANCE D S ETUP 4-47 • Stateful Pack et Inspecti on This is called a “stateful” packet inspecti on because it examines the contents of the packet to determine th e state of the communications; i.e., it ensures that the stated destina t ion co mputer has previously requ ested the current communication. This is a way of ensuring that all com[...]

C ONFIGURING THE ADSL R OUTER 4-48 • Connection Policy Enter the appropriate va lues for TC P/UDP sessions as described in the following table . Parameter Defaults Description Fragmentation half-open wai t 10 sec Configures the number of seconds that a packe t state structure remai ns active. When the timeo ut value expires, the router drops the [...]

A DV ANCE D S ETUP 4-49 • DoS Criteria and Port Scan Criteria Set up DoS and port scan criteria in the spaces provided (as sho wn below). Note: The firewall does not significantly affect system performance, so we advise enabl ing the preventi on features to protect your network. Parameter Defaults Description Total inc omplete TCP/UDP sessions HI[...]

C ONFIGURING THE ADSL R OUTER 4-50 DMZ If you ha ve a client PC that cannot run an Inter net a pplication properly from behind the firewall, y ou can ope n the client up to unrestricted two-w ay Inter net access. Enter the IP address of a DMZ (Demilitarized Zone) host on this screen. Adding a c lient to the DMZ may expose your local network to a va[...]

A DV ANCE D S ETUP 4-51 SNMP Use the SNMP configuration screen to displa y and modify parameters for the Simple Netw ork Manage ment Protocol (SNMP). Community A computer atta ched to the netw ork, called a Network Management Station (NMS), can be used to access th is infor mation. Access rights to the agent are controlled by community st rings . T[...]

C ONFIGURING THE ADSL R OUTER 4-52 Trap Specify the IP a ddress of the NMS to notify whe n a significant ev ent is detected by the agent. W hen a trap condition occurs , the SNMP ag ent sends an SNMP trap message to any NMS sp ecified as a trap r eceiv e r . Parameter Description IP Address Traps are sent to t his address when errors or specific ev[...]

A DV ANCE D S ETUP 4-53 ADSL ADSL (Asymmetric Digital Subscriber Line) is designed to deliver more bandwidth do wnstream (from the central office to the custom er site) than upstream. T his section is used to configure the ADSL operation type and shows the ADSL status . Parameters This pag e is designed for the engineer to test the ADSL loop condit[...]

C ONFIGURING THE ADSL R OUTER 4-54 Status The Status screen displays infor mation on connection line status, data rate , operation data and defect indication, and statistics .[...]

A DV ANCE D S ETUP 4-55 The following items are included on the ADSL status page : Parameter Description Status Line Status Shows the current status of the ADSL line co nnection. Link Type Two types of li nk: Fast path and Inte rleaved path. Data Rate Upstream Maximum upst ream data rate. Downstream Maximum down stream data rate. Operation Data/Def[...]

C ONFIGURING THE ADSL R OUTER 4-56 Statistics (Supe rframes represent the h ighest level of data pre sentation. Each superframe contains re gular ADSL frames, one of which is used to provide supe rframe synchronization, identifying the start of a supe rframe. Some of the remaining frames are als o used for specia l functions.) Received cell s Numbe[...]

A DV ANCE D S ETUP 4-57 Tools Use the T ools menu to bac kup the current configuration, restore a previously sav ed configur ation, restore f actor y se ttings , update firm ware , and reset the ADSL Router . Configuration Tools Choose a function and click Next. Ba cku p all ow s yo u to save th e AD SL Router ’ s configuration to a file. Re stor[...]

C ONFIGURING THE ADSL R OUTER 4-58 Firmware Upgrade Use the Fir mware Upgrade screen to update the firmware or user inter face to the latest versions . Download the upg rade file, and sav e it to your hard driv e. Then cl ick “Browse ...” to look for the downloaded file . Cl ick “BEGIN UPGRADE”. Check the Status pag e Infor mation section t[...]

A DV ANCE D S ETUP 4-59 Status The Status pag e displays W AN/LAN connection status, fir mware, and hardware version n u mbers , illega l attempts to access your netw ork , as well as infor mation on DHCP clients connect ed to your netw ork. T he security log may be sa ved to a file by clicki ng “Sa ve” and choosing a location. The following it[...]

C ONFIGURING THE ADSL R OUTER 4-60 Finding the MAC address of a Network Card Windows 98/ME Click Start/Run. T ype “winipcfg” and press “ENTER”. The MAC add ress is in the “ Adapter Address” section. Windows NT4/2000/XP Click Start/Prog rams/Com mand Prompt. T ype “ipconfig /all” and press “ENTER”. The MA C address is list ed as [...]

A-1 A PPENDI X A T ROUBLESHOOTING This section describes common probl ems you may encou nter and possible solutions to them. The ADSL Router can be easily monitored through panel indicators to identify problems . Troubleshooting Chart Symptom Action LED Indicators Power LED is Off • Check connections between the ADSL R outer, the external power s[...]

T R OUBLESHOOTING A-2 LED Indicators Link LED is Off • Verify that the AD SL Router and attached device are powered on. • Be sure the cabl e is plug ged into both the ADSL Router and the correspondi ng device. • Verify tha t the proper cable typ e is used and that its length does not exceed the sp ecified limits. • Be sure that the network [...]

T R OUBLESHOOTING A-3 Management Pr oblems Cannot connec t using the web browser • Be sure to have con figured the ADSL Ro uter with a valid IP address, subnet mask, and default gateway. • Check that you have a valid network co nnection to the ADSL Router and that th e port you are using has n ot been disabled. • Check the ne twork cabling be[...]

T R OUBLESHOOTING A-4 Wireless Problems A wireless PC cannot associ ate with the ADSL Router. • Make sure the wire less PC has the same SSID settings as the ADSL Router . See “Channel and SSID” on page 4- 24. • You need to have the sa me security settings on the clients and the ADSL Rou ter. See “Security” on page 4- 25. The wireless ne[...]

B-1 A PPENDIX B C ABLES Ethernet Cable Caution: DO NOT plug a phone jack conne ctor into any RJ-45 port. Use only twisted-pair cables with RJ-45 connectors that conform with FCC standards. Specifications Wiring Conventions For Ethernet connections, a twisted-pa ir cable must have two pairs of wires. Each wire pair is identified by two different col[...]

C ABLES B-2 Each wire pair must be attach ed to the RJ-45 conn ectors in a specifi c orientation. The following figure illu strates how the pins on an Ethernet RJ-45 connector are number ed. Be sure to hold the connectors in the same orientation when attaching the wires to the pins. Figure B-1. RJ-45 Ethernet Connector Pin Numbers RJ-45 Port Connec[...]

E THER NET C ABLE B-3 Pin Assignments With 100B ASE-TX/10 B ASE-T cable, pins 1 and 2 are used for transmitting data, and pins 3 and 6 for receiving data. Straight-Through Wiring If the por t on the attached device has internal crossover wiri ng (MDI-X), then use straight-through cable . RJ-45 Pin Assignments Pin Number Assignment 1 1T x + 2T x - 3[...]

C ABLES B-4 Crossover Wiring If the por t on the attached device has straight-through wi ring (MDI), use crossov e r cable. Crossover Cable Pin Assignments End 1 End 2 1 (Tx+) 3 (Rx+) 2 (Tx-) 6 (Rx-) 3 (Rx+) 1 (Tx+ ) 6 (Rx-) 2 (Tx-)[...]

ADSL C ABLE B-5 ADSL Cable Use standard telephone cable to connect the RJ-11 tele phone wall outlet to the RJ-11 ADSL port on the ADSL Router . Caution: Do not plug a phone jack connector into an RJ-45 port. Specifications Wiring Conventions F or ADSL connections, a ca ble requires one pair of wires . Each wire is identified b y different colors . [...]

C ABLES B-6 Figure B-3. RJ-11 Pinouts Pin Signal Name Wire Color 1N o t u s e d 2 Line 2 Tip Black or Whit e/Orange 3 Lin e 1 Ring Red or Blue/White 4 Li ne 1 Tip Green or White/Blue 5 Line 2 Ring Yellow o r Orange/White 6N o t u s e d 123456 Blue/White White/Blue R1 T1 123456 Red Green R1 T1 R2 T2 Black Y ellow 123456 Blue/White White/Blue R1 T1 R[...]

C-1 A PPENDI X C S PECIFICATIONS Physical Characteristics Ports F our 10/100Mbps RJ-45 Ports One ADSL RJ-11 ADSL Features Supports DMT line modulation Supports Annex A Full-Rate ADSL: up to 8 Mbps downstream, up to 1 Mbps upstream (G .992.1 &T1.413, Issue 2) Supports G .Lite ADSL: up to 1.5 Mbps downstream, up to 512 Kbps upstream Dying GASP su[...]

S PECIFICATIONS C-2 Security Featur es P assword protected c onfiguration access User authentication (P AP/CHAP) with PPP Firew all NA T NAPT VPN pass through (IPSec-ESP T unnel mode,L2TP , PPTP) LAN Features IEEE 802.1d (self-lear ning transparent Bridging ) DHCP Ser ver DNS Proxy Static Routing, RIPv1 and RIP Applications Netmeeting, ICQ, R eal P[...]

S PECIFICATIONS C-3 RF Output Power Modulatio n Rate-Output Power (dBm) 802.11b - 1Mbps (16 dBm) 802.11b - 2Mbps (16 dBm) 802.11b - 5.5Mbps (16 dBm) 802.11b - 11Mbps (16 dBm) Modulation Rate-Output Power (dBm) 802.11g - 6Mbps (15 dBm) 802.11g - 9Mbps (15 dBm) 802.11g - 12Mbps (15 dBm) 802.11g - 18Mbps (15 dBm) 802.11g- 24Mbps (15 dBm) 802.11g - 36M[...]

S PECIFICATIONS C-4 Modulation Rate-Receiver Sensitivity T ypical (dBm) 802.11g - 6Mbps - (88 dBm) 802.11g - 9Mbps - (87 dBm) 802.11g - 12Mbps - (84 dBm) 802.11g - 18Mbps - (82 dBm) 802.11g - 24Mbps - (79 dBm) 802.11g - 36Mbps - (75 dBm) 802.11g - 48Mbps - (68 dBm) 802.11g - 54Mbps - (68 dBm) Environmental Complies with the following standards: T e[...]

S PECIFICATIONS C-5 IEEE Standards IEEE 802.3, 802.3u, 802.11g, 802.1d ITU G .dmt ITU G .Handshake ITU T .413 issue 2 - ADSL full rate Standards Conformance Electr omagnetic Compatibility CE, ETSI, R&TTE, ET S 300 328, ETS 300 826 Safety EN60950 Inter net Standar ds RFC 826 ARP RFC 791 IP RFC 792 ICMP RFC 768 UDP RFC 793 TCP RFC 783 TFTP RFC 14[...]

S PECIFICATIONS C-6[...]

[...]

June 2004 Revision: R01 F0.25[...]