SMC Networks SMC Barricade SMC7804WBRA инструкция обслуживания

[...]

7 HVOD ,UYLQH&$ 3KRQH  0ESV: LU HOHVVSRUW 5RXWHUZLWKEXLOWLQ $'6/0RGHP )URP60&¶ VOLQHRI  DZDUGZLQ QLQJFRQQHFWLYLWVROXWLRQ V 'HFHPEHU5)[...]

Infor ma tion fur nishe d is beli eved to be accu rate and rel iable. However , n o respon sibility i s assumed by o ur company f or its use, nor for any infring ements o f patents or o ther righ ts of third par ties w hich may result from it s use . No lice nse is granted b y implic ation o r other wise under an y paten t or paten t rights of our [...]

i L IMITED W ARRANTY Limited W ar ranty Statement: SMC Net works , Inc. (“SMC”) warrants its products to be free from defects in workma nship and materials , under nor mal use and ser vice, for the applicable warranty ter m. All SMC products carr y a standard 90-day limited w ar ranty from the date of purchase from SMC or its A uthoriz ed Resel[...]

L IMITED W AR RANTY ii WARRANTIES EX CLUSIVE: IF AN SMC PRODUCT DOES NOT OPERA TE AS W ARRANTED ABO VE, CUSTOMER’ S SOLE REMED Y SH ALL BE REP AIR OR REPLA CEMENT OF THE PRODUCT IN Q UESTION , A T SMC’S OPTION . THE FOREGOING W ARRANTIES AND REMEDI ES ARE EXCLUSIVE AND ARE IN LIEU OF ALL OTHER W A RRANTIES OR CONDITIONS , EXPRESS OR IMPLIED , E[...]

iii C OMPLIA NCES F ederal Communicatio n Co mmission Interfer ence Statement This equipment has been tested and found to comply with the limits for a Class B digital device, pu rsuant to Pa rt 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interfer ence in a residential instal lati on. This equipmen[...]

C OMPLIANCES iv The REN is used to deter min e the quantity of devices th at ma y be connected to the telephone line. Ex cessive RENs on the t elephone line may result in the devices not ringing in response to an incoming call. In most, but not all areas , the sum of the RENs should not ex ceed fiv e (5.0). T o be certain of the number of devices t[...]

C OMPLIANCES v Australia AS/NZS 3548 (1995) - Class B SMC contact for produc ts in Australia is: SMC-Australia L9, 123 Epping Rd., North Ryde, NSW Australia Phone: 61-2-88757887 Fax: 61-2-8 8757777 EC Confor mance D eclaration SMC contact for these pr oducts in Europe is: SMC Networks Europe, Edificio Conat a II, Calle Fructuós Gelabert 6-8, 2o, 4[...]

C OMPLIANCES vi Safety Compliance Wichtige Sicherheitshinwe ise (Ger many) 1. Bitte lese n Sie diese Hinweise s orgfältig durc h. 2. Heben Sie diese Anleitung fü r de n späteren Gebrau ch auf. 3. Vor jedem Reinigen ist das Gerät vom St romnetz zu trennen. Verwenden Sie keine Flüssigoder Aerosolreini ger. Am besten eig net sich ein angefeuc hte[...]

vii T ABLE OF C ONTENTS 1 Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-1 About the Barric ade . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-1 Feature s and Benefits . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-1 Applica tions . . . . . .[...]

T ABLE OF C ONTENTS viii 4 Configuring the Barricade . . . . . . . . . . . . . . . . . . . . . . 4-1 Navigating the Managem ent Interfac e . . . . . . . . . . . . . . . . . . . . . . . . . . 4-2 Making Configura tion Changes . . . . . . . . . . . . . . . . . . . . . . . . . . 4-2 Setup Wizard . . . . . . . . . . . . . . . . . . . . . . . . . . . . [...]

T ABLE OF C ONTENTS ix A Troubleshooting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A-1 B Cables . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . B-1 Ethernet Cable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . B-1 Specifica tions . . . . . . . . . . . . . . . . .[...]

T ABLE OF C ONTENTS x[...]

1-1 C HAPTER 1 I NTRODUCTION Congratulations on your purchase of the ADSL Barricade T M g, here after referred to as t he "Barrica de". We ar e proud to provide you with a powerful yet simple communication devi ce for connecting your local area network (LAN) to the Inter net. For those who want to surf the Internet in the most secure way [...]

I NTR ODUCTION 1-2 • Firewall wi th Stateful Packet Insp ection, client priv ileges, intrusion detection, and NAT • NAT also enables mult i-user Internet access via a single user a ccount, and virtual server functionality (provi ding protected access to Internet services such as web, FTP, e-mail, and Telnet) • VPN pass-thr ough (IPSec -ESP Tu[...]

A PPLICATIONS 1-3 • Shared IP Address The Bar ricade pro vides In ter net access for up to 253 users via a single shared IP address . Using only one IS P account, m ultiple users on y our netw ork can browse the w eb at the same time . •V i r t u a l S e r v e r If yo u ha v e a fix ed IP addr ess , you can set the Barricade to act as a vir tua[...]

I NTR ODUCTION 1-4 • Virtual Private Network (VPN) The Bar ricade supports three of the most commonly used VPN protocols — PPTP , L2TP , and IPSec . These protocols allow remote users to establish a secure connection to their corporate netw ork. If your ser vice provider supports VP Ns , then these protocols can be used to create an authenticat[...]

2-1 C HAPTER 2 I NSTALLATION Before inst alling the ADS L Bar ricade TM g, v erify that you ha ve all the items listed under the P ackage Contents list. If any of the items are missing or damaged, contact your local distributor . Also be sure that you ha ve all the necessar y cabling before installing the Bar ricade. After installing the Bar ricade[...]

I NSTALLATIO N 2-2 System Requirements Y ou must meet the following minimum requirements: • ADSL line installed by your Internet Se rvice Provider. • A PC usi ng a fixe d IP ad dress or dynamic IP addres s assigned via DHCP, as well as a gateway server address and DNS server a ddress from your service provider. • A computer equipped with a 10[...]

H ARDWARE D ESCRIPTION 2-3 Th e Bar ricade includes an LED disp la y on the front panel fo r system pow e r and port indications that simplifies installation and netw ork troubleshooting . It also provides th e follo wing ports on the rear panel: Figure 2-1. Rear Panel Item Description LAN Ports Fast Ethernet ports (RJ-45). Con nect devices on your[...]

I NSTALLATIO N 2-4 LED Indicators The power and port LED indicators on the front panel are illustrated b y the following figure and table . Figure 2-2. Front Panel LED Status Description PWR On The Barricade is receiv ing power. Normal operation. Off Power off o r failure. ADSL SYN On ADSL connect ion is function ing correctly. Flashing The Barrica[...]

ISP S ETTINGS 2-5 ISP Settings Please collect the following infor mation from y our ISP before setting up the Barricade: • ISP account user name and password • Protocol, encapsulation and VPI/VCI circuit numbers •D N S s e r v e r a d d r e s s • IP address, subnet mask and defaul t gateway (for fixed IP users only) Connect the System The B[...]

I NSTALLATIO N 2-6 Phone Line Configuration Installing a Full-Rat e Connection If yo u are using a full-rate (G .dmt) c onnection, your ser vice provider will attach the outside ADSL line to a data/v oice splitter . In this case you can connect your phones and computer directly to the splitter as shown belo w : Figure 2-3. Installing with a Splitte[...]

C ONNECT THE S YSTEM 2-7 Installing a Splitterless Connection If yo u are us ing a spl itterless (G .lite) conn ection, then your ser vice provider will attac h the outside ADSL line directly to y our phone system. In this case y ou can connect your phones and computer directly to the incoming ADSL line, but you will hav e to add lo w-pass filters [...]

I NSTALLATIO N 2-8 Attach to Your Network Using Ethernet Cabling The four LAN por ts on the Bar ricade auto-neg otiate the connection speed to 10 Mbps Ether net or 100 Mbps F ast Ether net, as well as the transmission mode to half duplex or fu ll duplex. Use RJ-45 cables to connect any of the four LAN por ts on the Bar ricade to an Ethernet adapter[...]

3-1 C HAPTER 3 C ONFIGURI NG C LIENT PC After completing hardware s etup by connecting all your netw ork devices , you need to configure y our comput er to connect to the Bar ricade. See: “Windows 98/Me ” on page 3-2 “Windows NT 4.0 ” on page 3-7 “Windows 2000” on page 3-11 “Windows XP” on page 3-14 or “Configuring Y o ur Macintos[...]

C ONFIGURING C LIENT PC 3-2 TCP/IP Configuration T o access the Internet through the Barricade, you m ust conf igure the netw ork settings of the computers on y our LAN to use the same IP subnet as the B ar ricade. The default IP settings for the Bar ricade are: IP Address: 192.168.2.1 Subnet Mask: 255.255.255.0 Note: These s ettings ca n be change[...]

W INDOWS 98/M E 3-3 2. In Control P anel, double-click the Network icon. 3. In the Netw ork window , under the Configuration tab , double-click the TCP/IP item listed for your netw ork card. 4. In the TCP/IP window , select the IP Address tab . If “Obtain an IP address automatically” is already selected, your computer is already conf igured for[...]

[...]

[...]

[...]

[...]

[...]

[...]

[...]

[...]

[...]

[...]

[...]

[...]

[...]

[...]

[...]

[...]

[...]

S ETUP W IZARD 4-3 Setup Wizard Time Zone Click on “Setup Wizard”. The first item in the Setup Wizard is Time Zone. F or accurate timing of log entries an d system events , you need to set the time zone . Select yo ur time zone fr om the drop-do wn list. If your area requires it, c hec k to enable the cloc k for da ylight sa ving c hanges , an [...]

C ONFIGURING THE B AR RICADE 4-4 Parameter Setting Select your Countr y and Interne t Ser vice Provider . T his will automatically configure the Bar ricade with the co r rect Protocol, Encapsulation and VPI/V C I settings for your ISP . If your Country or Inter net Ser vice Pr ovider is not listed you will need to manually enter settings . Go to ?[...]

S ETUP W IZARD 4-5 Confirm The Confir m page shows a summary of the configuration parameters . Check ADSL opera tion mode (W AN), Netw ork Layer P arameters (W AN) and ISP p arameters ar e correct. Parameter Description ADSL Operation Mode (WAN) ISP The type of ISP you have selected. Protocol Indicates th e protocol use d. VPI/VCI Virtual Path Iden[...]

C ONFIGURING THE B AR RICADE 4-6 If the parameters are cor rect, click “ APPL Y ” to sa v e these settings . Y our Bar ricade is now set up . Go to “T roubleshooting” on pag e A-1 if you cannot make a connection to the Inter net. DHCP Parameters Function Shows the DHCP func tion is en abled or disabled. Default Gateway LAN IP address of the[...]

S ETUP W IZARD 4-7 Parameter Setting - Country or ISP Not Listed If yo ur Countr y or Internet Ser v ice Pro vider is not listed select “Others”. This wi ll allow y ou to manually configure your ISP settings . F or manual configuration you will need to know the Protocol, DNS Ser ver , Encapsulation and VP I/V CI settings used by your ISP . If y[...]

C ONFIGURING THE B AR RICADE 4-8 ISP use RFC1483 Bridging - Parameter Setting Enter the RFC1483 Bridging setti ngs pro vided b y your ISP . Note: You have three different brid ging modes to select from: RFC1483 Bridging - Select this option if you wa nt the Barricade to be transparent and pas s the public IP addr ess to a single P C, Server or Fire[...]

S ETUP W IZARD 4-9 Click “NEXT” to contin ue to the “Confir m” settings pag e. Go to “Confir m” on pag e 4-5 in the man ual for details about t he “Confir m” settings pag e. VPI/VCI Enter the V irtual Path Ident ifier (VPI) and Virtual Circuit Identifier (V CI) supplied by yo ur ISP. Encapsu lation Select th e encaps ulation u sed b[...]

C ONFIGURING THE B AR RICADE 4-10 ISP use PPPoE - Parameter Setting Enter the PPP oE (P oint-to-P oint Pr otocol ov er Et her net) settings pr ovi de d by you r I SP . Click “NEXT” to continue to the “Confirm” settings page. Go to “Confirm” on page 4-5 in the manua l for de tails about the “Confirm” settings page. Parameter Descript[...]

S ETUP W IZARD 4-11 ISP use PPPoA - Parameter Setting Enter the PPP oA (P oint-to-P oint Protocol ov er A TM) settings provided by y our ISP . Click “NEXT” to continue to the “Confirm” settings page. Go to “Confirm” on page 4-5 in the manua l for de tails about the “Confirm” settings page. Parameter Description DNS Server Enter the [...]

C ONFIGURING THE B AR RICADE 4-12 ISP use RFC1483 Routing - Parameter Setting Enter the RFC1483 R outing settin gs provided by y our ISP . Click “NEXT” to continue to the “Confirm” settings page. Go to “Confirm” on page 4-5 in the manua l for de tails about the “Confirm” settings page. Parameter Description IP Address Enter the IP a[...]

A DVANCED S ETUP 4-13 Advanced Setup Click on the Adv anced Setup picture. The left-hand side displays the main menu and the right-hand side sho ws descriptiv e infor mation. The advanced management interface contains 13 main menu items as described in the follo wing table . Menu Description System Sets the loca l time zone, the pa ssword for admin[...]

C ONFIGURING THE B AR RICADE 4-14 DDNS Dynamic DNS prov ides users on the Internet with a met hod to tie their domain name(s) to a Dyna mic or Static IP address . UPnP Allows you to enable or dis able the Unive rsal Plug and Play fu nction. Tools Contains op tions to backup & res tore the c urrent config uration, restore al l config uration s e[...]

A DVANCED S ETUP 4-15 System Time Settings Select your local time zone from th e drop down list. This infor mation is used for log entries and client filtering . F or accurate timing of log entries an d system events , you need to set the time zone . Select yo ur time zone from the drop do wn list. If yo u want to automatically sync hroni ze the AD[...]

C ONFIGURING THE B AR RICADE 4-16 Password Settings Use this pag e to change the passw ord for accessing the management interface of the Barricade. P asswords can contain from 3~12 al phanumeric c haracters and are case sensitiv e. Note: If you lost the password, or yo u cannot gain access to the user interface, press the blue r eset bu tton on the[...]

A DVANCED S ETUP 4-17 Remote Management By defaul t, management access is only av ailable to use rs on your local netw ork. Ho wev er, y ou can also mana ge the Bar ricade from a remote host by e ntering the IP address of a remote comp uter on thi s screen. Chec k the Enabled chec k bo x, and enter the IP address of the Host Address and click “ A[...]

C ONFIGURING THE B AR RICADE 4-18 DNS Domain Name Ser v ers (D NS) are used to map a doma in name (e.g ., www .smc.com) with the IP a ddress (e .g ., 64.147.25.20). Y our ISP should pro vide the IP address of one or more Domain Name Se r vers . Enter those addresses on this page, and clic k “ APPL Y”.[...]

A DVANCED S ETUP 4-19 WAN Specify the W AN connection paramete rs pro vided b y your Internet Ser vic e Provider (ISP). The Bar ricade can be connected to your ISP in one of the follo wing wa ys: PPP oE AT M Clone MA C ISP[...]

C ONFIGURING THE B AR RICADE 4-20 PPPoE Enter the PPP oE (P oint-to-P oint ov er Ether net) parameters here. Parameter Description Enable/Disable Enables/disables the PPPoE function . IP Address If your IP addres s is assigne d by the ISP eac h time y ou connect, leave this field all zeros. Otherwise, enter your ISP supplied static IP address here.[...]

A DVANCED S ETUP 4-21 ATM Enter A TM (Asynchronous T r ansfer Mode) function parameters here . Idle Time (Minute) Enter the ma ximum idle time for the Int ernet connec tion. After this time has been exceeded the co nnection will be terminated. ISP Name Choose th e ISP to whom this connec tion will ap ply. Parameter Description Protocol • Disable:[...]

C ONFIGURING THE B AR RICADE 4-22 Clone MAC Address Some ISPs require y ou to regi ster you r MA C address with them. If this is the case, the MA C address of the Bar ricade must be changed to the MA C address that y ou ha v e registered with y our ISP . Encapsul ation Specifies how to handle mu ltiple protoco ls at the ATM t ransport layer. Go to?[...]

A DVANCED S ETUP 4-23 ISP Enter the Internet Ser vice Pro vider (ISP) name , user name , and passw ord for each ISP connection you ha v e. Y ou can enter up to four sets of inform ation here .[...]

C ONFIGURING THE B AR RICADE 4-24 LAN Use the LAN menu to configure the LAN IP address a nd to en able the DHCP ser ver for dynamic c lient address allocation. Note: Remember to configure your client PCs for dynamic address allocation. (See page 3-2 for deta ils.) Parameter Description LAN IP IP Address The IP addr ess o f the Barri cade. IP Subnet[...]

A DVANCED S ETUP 4-25 Wireless T he Bar ricade als o operates as a wire less access point, allo wing wireless computers to communicate with each ot her . T o configure this function, all you need to do is enable the wireless function, define the radio channel, the domain identifier , and the security options . Check Enable and click “ APPL Y”.[...]

C ONFIGURING THE B AR RICADE 4-26 Channel and SSID Y ou must specify a common radio cha nnel and SSID (Ser vice Set ID) to be used by the Bar ricade Wireless R outer and all of its wireless clients . Be sure you configure all of its clients to the same values . Parameter Description ESSID Extended Service Set ID. The ESSID must be the sa me on the [...]

A DVANCED S ETUP 4-27 Security T o make your wireless netw ork safe , y ou should turn on the security function. The Bar ricade suppor ts WEP (Wired Equiv alent Priv acy) and WP A (Wi-Fi Protected) secur ity mechanisms .[...]

C ONFIGURING THE B AR RICADE 4-28 WEP If yo u wa nt to use WEP to protect y our wireless netw ork, you need to set the same parameters for the Bar ricade and all your wireless clients . Y ou may automatically ge nerate encr yption keys or manually enter the keys . T o generate the key au tomatically with passphrase , chec k the P assphrase box, ent[...]

A DVANCED S ETUP 4-29 WPA Wi-Fi Protected Access (WP A) combines temporal k ey integrity protocol (TKIP) and 802.1X mec hanisms . It provides dynamic k ey encr yption and 802.1X authentication ser vice. Paramete r Description Cypher s uite The secu rity mechan ism used i n WPA for enc ryption. Authentication Choose 802.1X o r Pre-shared K ey to use[...]

C ONFIGURING THE B AR RICADE 4-30 802.1X If 802.1X is used in your netw ork, th en you should enable this function for the Barricade. Parameter Description 802.1X Authentication Enable or disabl e this authentic ation func tion. Session Idle timeout Defines a maximum period of tim e for which the connec tion is maintained during inac tivity. Re-Aut[...]

A DVANCED S ETUP 4-31 NAT Network Address T ranslati on allows mult iple users to access the Inter net sharing one public IP .[...]

C ONFIGURING THE B AR RICADE 4-32 Address Mapping Allows one or more public IP addresses to be shar ed by m ultiple inter nal users . T his also hides the inter nal netw ork for increased priv acy and security . Enter the Public IP addre ss you wish to share into the Global IP field. Enter a range of inter nal IPs that will share the global IP into[...]

A DVANCED S ETUP 4-33 Virtual Server If yo u configure the Bar ricade as a vi r tual ser ver , re mote users accessing ser vices such as w eb or FTP a t y our local site via public IP addresses can be automat ically red irected to local ser vers c onfigured wi th pri v ate IP addresses . In other words , de pendin g on the requested ser vice (TCP/U[...]

C ONFIGURING THE B AR RICADE 4-34 Special Application Some applications require multiple c onnections , such as Inter net g aming, video-conferen cing, a nd Internet te lephony . Th ese applications may not w ork when Netw ork Address T ranslation (NAT ) is enabled. If y ou need to r un applications that require mu ltiple connections , use these pa[...]

A DVANCED S ETUP 4-35 Routing These pag es define routing related para meters , inc luding static routes and RIP (R outing Infor mati on Protocol) paramete rs .[...]

C ONFIGURING THE B AR RICADE 4-36 Static Route Click “ A dd” to add a new static route to the list, or c heck the bo x of an already e ntered route and click “Modify” . Clicking “Delete” will remove an entry from the lis t. Parameter Description Index Check the bo x of the route you wish to delete or modify. Network Address Enter the IP[...]

A DVANCED S ETUP 4-37 RIP Parameter Description General RIP Parameters RIP mode Globally enables or di sables RIP. Auto summary If Auto summary is disabl ed, then RIP packets will include sub-network i nformation fr om all sub- networks conn ected to the router. If en abled, this sub-network information will be summarized to one piece of informatio[...]

C ONFIGURING THE B AR RICADE 4-38 RIP sends routing-update messages at regular inter vals and when the netw ork topolog y changes . W hen a router receiv es a routing update that includes c hanges to an entry , it updates its r outing table to reflect the new route. RIP routers maintain only the best route to a destination. After updating its routi[...]

A DVANCED S ETUP 4-39 Routing Table Parameter Description Flags Indicates t he route status: C = Direct connect ion on the s ame subne t. S = Static route. R = R IP (Routi ng Information P rotocol) as signed rout e. I = ICMP (I nternet Control Message Prot ocol) Redirec t route. Network Address Destination IP address. Netmask The subnet work associ[...]

C ONFIGURING THE B AR RICADE 4-40 Firewall Th e Bar ricade Router’ s firewall inspects pack ets at the application layer , maintains TCP and UDP session i nfor mation including time-outs and the number of activ e sessions, and pro vid es the ability to detect and prevent cer tain types of netw ork attacks . Network attacks that deny access to a n[...]

A DVANCED S ETUP 4-41 Access Control Access Control allo ws users to define the outgoing traf fic per mitted or not-per mitted through the W AN interface. The default is to per m it all outg oing traffic . The following items are on the Access Control screen: Parameter Description Enable Filtering Function Click Yes to turn on the fi lterin g funct[...]

C ONFIGURING THE B AR RICADE 4-42 T o add the PC to the filtering table: 1. Click “ A dd PC” on the Access Control screen . 2. Define the appropriate settin gs for client PC ser vic es . 3. Clic k “OK” and then click “ APPLY” to sa v e your settings .[...]

A DVANCED S ETUP 4-43 MAC Filter The Bar ricade can also limit the access of hosts within the local area netw ork (LAN). The MA C Filtering T abl e allo ws the Barricade to enter up to 32 MA C add resses that are not allow ed access to the W AN por t. Click Y es to enable, or No to disable this function. Enter the MA C address in th e space pro vid[...]

C ONFIGURING THE B AR RICADE 4-44 URL Blocking The Barri cade al lows the user to block access to web sites from a particular PC by entering either a f ull URL addr ess or just a keyw ord. This feature can be used to protect children from accessin g violent or pornographic web sites. Y ou can define up to 30 sites here .[...]

A DVANCED S ETUP 4-45 Schedule Rule Y ou may filter Inter net access for loca l clients based on r ules . Eac h access control r ule may be acti v ated at a sc heduled time . Define the schedule on the Schedule R ule pag e, and apply the r ule on the Access Control page. F ollow these steps to add a sc hedule r ule: 1. Click “ Add Schedule R ule?[...]

C ONFIGURING THE B AR RICADE 4-46 Intrusion Detection • Intrusion Detection Feature Stateful Packet Inspection (SPI) and Anti-DoS firewall protection (Default: Enabled) — The Intrusion Detection Feature of the Barricade Router limits access for incoming tr affic at the WAN port. When the SPI feature is turned on, all incoming pa ckets will be b[...]

A DVANCED S ETUP 4-47 Scroll do wn to view more infor mation. • Stateful Packet Inspection This is called a “stateful” packet inspection because it examines the contents of the packet to determine th e state of the communications; i.e., it ensures that the sta ted destination co mp uter has previously requested the current communication. Th i[...]

C ONFIGURING THE B AR RICADE 4-48 “Enable SPI and Anti-DoS firewall pr ot ection” fi eld and then check the inspection type that you need, such as Packet Fragmentation, TCP Connection, UDP Session, FTP Service, H.323 Service, or TFTP Service. • When hackers attempt to enter your network, we can alert you by e-mail Enter your email address . S[...]

A DVANCED S ETUP 4-49 • DoS Criteria and Port Scan Criteria Set up DoS and port scan criteria in the spaces provided (as sho wn below). Note: The firewall does not significantly affect system performance, so we advise ena bling t he preventi on features to protect your network. Parameter Defaults Description Total i ncomp lete TCP/UDP sessions HI[...]

C ONFIGURING THE B AR RICADE 4-50 DMZ If you have a client PC that cannot run an Internet application properly from behind the firewall, you can open the client up to unrestricted two- way Internet access. Enter the IP a ddress of a DMZ (Demilitarized Zone) host on this screen. Adding a client to the DMZ may expose your local network to a variety o[...]

A DVANCED S ETUP 4-51 SNMP Use the SNMP configuration screen to display and modify parameters for the Simpl e Netw ork Manage ment Protocol (SNMP). Community A computer at tached to the netw ork, called a Network Management Station (NMS), can be used to access th is infor mation. Access rights to the ag ent are controlled by comm unity st rings . T[...]

C ONFIGURING THE B AR RICADE 4-52 Trap Specify the IP address of the NM S to notify whe n a signifi cant ev ent is detected by the agent. W hen a trap condition occurs , the SNMP agent sends an SNMP trap mes sage to any NMS specified as a trap recei v er . Parameter Description IP Address Traps are sent to this addres s when errors or specific eve [...]

A DVANCED S ETUP 4-53 ADSL ADSL (Asymmetric Digital Subscriber Line ) is designed to deliv er more bandwidth do wnstream (from the central offi ce to the customer si te) than upstream. T his section is used to configure the ADSL operation type and shows the A DSL status . Parameters Parameter Description Operation Mode • Automatic • T1.413 issu[...]

C ONFIGURING THE B AR RICADE 4-54 Status The Status screen displays infor m ation on connection line status , data rate, operation data and defect indication, and statistics . Scroll do wn to view more infor mation.[...]

A DVANCED S ETUP 4-55 The following items are included on this infor mation pag e: Parameter Description Status Line Status Shows th e current status of t he ADSL line connect ion. Data Rate Upstream Maximum upst ream data rate. Downstream Maximum down stream data rate. Operation Data/Def ect Indication Noise Margin Ma ximum upstream and downstream[...]

C ONFIGURING THE B AR RICADE 4-56 Statistics (Superframes repres ent the highest l evel of data presentation . Each superframe contains re gular ADSL frames, one of which is used to provide su perframe synchronizatio n, identifying the sta rt of a supe rframe. Some of the remaining frames are also used for sp ecial fu nctions .) Receive d Superfram[...]

A DVANCED S ETUP 4-57 DDNS Dynamic Domain Nam e Ser vice (DDN S) provides users on the Internet with a method to tie their domain name to a computer or ser ver . DDNS allows yo ur domain name to follo w your IP addres s automatically b y hav in g you r DN S r e co rd s cha ng ed w he n yo u r I P a dd r es s cha ng es. T h i s D N S f e a t u r e i[...]

C ONFIGURING THE B AR RICADE 4-58 UPnP Click Enable to turn on the Univ ersal Plug and Pla y function of the Bar ricade. This function allows the device to a utomatically: • dynamically join a network • obtain an IP address[...]

A DVANCED S ETUP 4-59 Tools Use the T ools menu to back up the cur rent configuration, restore a previously sa v ed conf igur ation, restore f actor y se ttings , update fir mwa re, and reset the Bar r icade. Configuration Tools Choose a function and click Next. Backup allo ws y ou to sav e the Bar ricade Router’ s configuration to a file . R est[...]

C ONFIGURING THE B AR RICADE 4-60 Firmware Upgrade Use this screen to update the fir mware or user inte rface to the latest v ersions . Download the upgrade file fr om the SMC w eb site , and sa v e it to your hard dri ve . In the Upg rade T arget field, choose Fir mware. Then click “Browse ... ” to look for the downloaded file . Click “ APPL[...]

A DVANCED S ETUP 4-61 Reset Click “ APPL Y” to reset the Bar ricad e . T he reset will be complete when the pow e r LED stops blinking . If you perfor m a reset from this pa ge, the configurations will not be changed bac k to the factor y default settings . Note: If you use the Reset button on th e front panel, the Barricade performs a power re[...]

C ONFIGURING THE B AR RICADE 4-62 Status The Status page displays WAN/LA N connection status, firmware, and hardware version numbers, illegal atte mpts to access your netw ork, as well as information on DHCP clie nt s connected to your network. The security log may be saved to a file by clicking “Save” and choosing a location. Scroll down to vi[...]

A DVANCED S ETUP 4-63 The following items are included on the Status pag e: Item Description INTERNET Displays WA N connection ty pe and status. Cli ck the Connect button to connect t o your ISP . GATEWAY D isplays system IP settings, as well as DHCP Server and Firewall status. INFORMATION Display s the number of attached client s, the firmware ver[...]

C ONFIGURING THE B AR RICADE 4-64 Finding the MAC addre ss of a Network Card Windows 98/ME Click Start/Run. T ype “winipcfg” and press “ENTE R”. The MA C address is in the “ Ad apter Address” section. Windows NT4/2000/XP Click Start/Prog rams/Com mand Prompt. T ype “ipconfig /all” and press “ENTER”. The MA C address is listed as[...]

A-1 A PPENDI X A T ROUBLESHOOTING This section describes common probl ems y ou ma y encou nter and pos sible solutions to them . The Bar ricade can be easily monitored through panel indicators to identify pr oblems . Troubleshooting Chart Sympto m Action LED Indicators Power LED is Off • Check connections between the Barricade, the external power[...]

T R OUBLESHOOTING A-2 LED Indicators Link LED is Off • Verify that the Barricade and attached device ar e powered on. • Be sure the cable is plugged into both the Barricade and the correspond ing device. • Verify that the proper cable type is used and that its length does not exceed the specified limits. • Be sure that the network interface[...]

T RO U B L ES H OO T I N G A-3 Management Problems Cannot conn ect using the web browser • Be sure to have configured the Barricade with a valid IP address, subnet mask, and default gateway. • Check that you have a valid network connection to the Bar ricade and that the port you are u sing has not been disabled. • Check the network cabling be[...]

T R OUBLESHOOTING A-4 Wireless Problems A wireless PC cannot asso ciate with the Barricade. • Make sure the wireless PC has the same SSID settings as the Barric ade. See “Channel and SSID” on page 4-26. • You need to have the same security settings on the clients and the Barricade. See “Security” on page 4-27. The wireless network i s o[...]

B-1 A PPENDIX B C ABLES Ethernet Cable Caution: DO NOT plug a phone jack conne ctor into any RJ-45 port. Use only twisted-pair cables with RJ-45 connectors that conform with FCC standards. Specifications Wiring Conventions For Ethernet connections, a twisted-pa ir cable must have two pairs of wires. Each wire pair is identified by two different col[...]

C ABLES B-2 Each wire pair must be attac hed to t he RJ-45 connec tors in a speci fic orientation. T he following figure illu strates ho w the pins on an Ether net RJ-45 connector are number ed. Be sure to hold the connectors in the same orientation when attac hing the wires to the pins . Figure B-1. RJ-45 Ethernet Connector Pin Numbers RJ-45 Port [...]

E THER NET C AB LE B-3 Pin Assignments With 100B ASE-TX/10 B ASE-T cable, pins 1 and 2 are used for transm itting data, and pins 3 and 6 for recei ving data. Straight-Through Wiring If the por t on the attached device has inter nal crossov er wiring (MDI-X), then use straight-through cable . RJ-45 Pin Assignments Pin Number Assignmen t 1 1T x + 2T [...]

C ABLES B-4 Crossover Wiring If the por t on the attached device has straight-through wi ring (MDI), use crossov e r cable . Crossover Cable Pin Ass ignments End 1 End 2 1 (Tx+) 3 (Rx+) 2 (Tx-) 6 (Rx-) 3 (Rx+) 1 (Tx+) 6 (Rx-) 2 (Tx- )[...]

ADSL C AB LE B-5 ADSL Cable Use standard telephone cable to connect the RJ-11 tele phone wall outlet to the RJ-45 ADSL port on the ADSL Router . Caution: Do not plug a phone jack connector into an RJ-45 port. Specifications Wiring Conventions F or ADSL connections , a ca ble requires one pair of wires . Each wire is identifi ed by different colors [...]

C ABLES B-6 Figure B-3. RJ-11 Pinouts Pin Signal Name W ire Color 1N o t u s e d 2 Line 2 Tip Black or White/Orange 3 Line 1 Ring Red or Blue/White 4 Line 1 Tip Green or Whit e/Blue 5 Line 2 Ring Yellow or Orange /White 6N o t u s e d 123456 Blue/White White/Blue R1 T1 123456 Red Green R1 T1 R2 T2 Black Y ellow 123456 Blue/White White/Blue R1 T1 R2[...]

C-1 A PPENDI X C S PECIFICATIONS Physical C haracteristics Po r t s F our 10/100Mbps RJ45 P orts One ADSL RJ11 T wo external dipole antennas ADSL F eatur es Suppor ts DMT line modulatio n Suppor ts Annex A Full-Rate ADSL: up to 8 Mbps do wnstream, up to 1 Mbps upstream (G .992.1 &T1.413, Issue 2) Suppor ts G .Lite ADSL: up to 1.5 Mbps downstrea[...]

S PECIFICATIONS C-2 Security F eatures P assword protected c onfiguration access User authentication ( P AP/CHAP) with PPP Firew al l NA T NAPT VPN pass through (IPSec-ESP T unnel mode,L2TP , PPTP) LAN F eatures IEEE 802.1D (self-lear ning transparent Bridging) DHCP Ser ver DNS Proxy Static R outing, RIPv1 and RIP Applications Netmeeting, ICQ, R ea[...]

S PECIFICATIONS C-3 13 chann els (ETSI) 2 Channels (Spain) 4 Channels (France) 14 chann els (J apan) Operating Channels IEEE 802.11g compliant: 13 chann els (US , Canada, Europe, J apan) RF Output P ow er Modulation Rate-Output Po wer (dBm) 802.11b - 1Mbps 16 802.11b - 2Mbps 16 802.11b - 5.5Mbps 16 802.11b - 11Mbps 16 Modulation Rate-Output P ower [...]

S PECIFICATIONS C-4 Modulation Rate-Receiv er Sensiti vity T ypical (dBm) 802.11g - 6Mbps -88 802.11g - 9Mbps -87 802.11g - 12Mbps -84 802.11g - 18Mbps -82 802.11g - 24Mbps -79 802.11g - 36Mbps -75 802.11g - 48Mbps -68 802.11g - 54Mbps -68 Environmental SMC7804WBRA complie s with the following standards: T emperat ure: IEC 68-2-14 0 to 50 deg rees [...]

S PECIFICATIONS C-5 Standards Confor mance Electroma gnetic Compatibility CE, ETSI, R&TTE, FCC part 15 cl ass B & FCC par t 68, ETS 300 328, ETS 300 826 Safety CSA/NRTL (UL1950, CSA 22.2.950) GS (EN60950), CB (IEC60950) Inter net Standards RFC 826 ARP RFC 791 IP RFC 792 ICMP RFC 768 UDP RFC 793 TCP RFC 783 TF TP RFC 1483 AAL5 Encapsulation [...]

S PECIFICATIONS C-6[...]

F O R T E C HN I C A L S U P P OR T , C AL L : F r om U . S. A . a n d C a na da ( 24 h o u rs a d a y , 7 d a y s a w ee k) ( 8 0 0 ) S M C -4 - Y O U ; P hn : ( 9 4 9) 6 7 9 -8 00 0 ; F ax : ( 9 4 9 ) 6 7 9 -1 4 8 1 F r om E ur o pe : C on t a ct de ta i l s ca n b e f o un d o n w w w . s mc - e u r o p e . c o m o r w ww . s m c . co m I N TE R[...]