Home

Updated NBG800 User Manual

1. SOHOware Secure Cable DSL Router 79 Index A Access Control Access Monitor Address Range Advanced Setup AppleTalk B Broadband Connection Page C Cable Setup Cables Change Password Compatibility Configuration BroadGuard Network Connect on Demand D Default Password Default User Name Denial of Service DHCP Settings Disable Port Forwarding DMZ Domain Name DoS Downloads DSL Setup F FAQs G Glossary Green Cable H Hardware Installation 80 SOHOware Secure Cable DSL Router 32 44 35 54 Host Name 25 Finding 12 14 26 I ICQ 54 Installation 5 IP Address Range 35 IP Address Public 38 IP Group Dynamic 35 Static 35 IP Start Address 35 IPX 54 E LED Indicators 3 Linux 54 M MAC Address 7 MAC Address Clone 25 Mac OS 19 Macintosh 55 Maximum Idle Time Before Disconnecting 29 mIRC 56 N Napster 54 P Packing List 111 Password 21 Port Forwarding 37 Ports Well known 37 Power Adapter 6 PPPoE Check 40 PPPoE DSL Service 29 PPTP 55 R Rear Panel 4 6 Registration Remote Access Remote Management Renew IP Address Reset Button RIP I amp RIP II S Security Settings Setup Advanced Setup Basic Setup Home Page SPI Stateful Packet Inspection Status Support T TCP IP Settings Technical Specifications Tools 81 SOHOware Secure Cable DSL Router iii 57 44 38 56 23 39 Troubleshooting U Upgrades Use PPPoE DSL Service User Name V
2. ees sesse ee see ee ee Ge ee GR Re ee GR RA ee GR Re ee ee 21 ENTERING THE BROADGUARD SETUP HOME Dap 21 SETUP HOMEPAGE EE OR EE HE E 22 BASIE RR AE lo PR ME AE Ve AR ME EP N 24 Broadband Connection 24 SC CUTILY E 30 Change Password tica ER EE nde ete EE EE 31 ADVANCED EO EE OE EE EE EN 32 iv SOHOware Secure Cable DSL Router DM RE HE AE AE 34 DACP Setting ut 35 id RE RE ER EE EE EEN 37 Change NBGSOO IP Address vu oi a nore 38 STATUS vi AA EE EE EE OR EE 38 TOOLS id 39 PPPoE Check DSL Users Only esse ee se es see ee ee ee ee GR ee ed Re ee 40 HackerAlert Test tiki as RE EE Ee ee eae aan 43 View Current Access Control Aentings iis sesse se ee ee ee Ge ee ee se ee 43 ACCESS MONTO ad 44 Remote Management 44 Ae E EE 45 CHAPTER 4 TROUBLESHOOTING sesse ese ese esse sees sees sees se es se ee ee es Ge se 47 CHAPTERS FAOS EE 54 APPENDIX A VPN REMOTE ACCESS sesse ese esse sees sees sees sees sees se es ee se es ee es 57 BROADGUARD VPN SERVER CONPIOGURATION ees sees sees se ee se esse ese ee ee ee ke ee ke ee 57 VPN CLIENT CONFIGURATION E G MICROSOFT DPI 57 Windows 98 98SE Me VPN Client Senn 57 Windows 2000 VPN Server Sep iese sesse esse Se Ge Ge Ge ee se ee ee ee ee ee 63 APPENDIX B GLOSSARV eee sees seesse esse esse ese ee ee Ge Ge EG EG Bee Bee ee ee Ge EE Ge 72 KIM SUN LSM RL KE 75 TECHNICAL SUPPORT sssses sesse sesde ss se sesse gegee eN oos dog eg eN ee ge de eg Es Ses 76 SOHOWARE LIMITED WARRA
3. 192 168 1 1 you will need to configure TCP IP settings see page 9 and related network settings Advanced Access Control soHoware Basic 9 900 du IV DIO BroadGuard NBGS0D Access Control Te wee Accent Cortrel you matt tet siatie Ei ad re es for that PC and wat that PC te wee the selected IP bede jp to 19 selected local users can be denied access te particular rebotes o dy wrbete add res mt rer Prise words yen Meaty Gebak DisaBorwed Website N ey wrd List Veu car con internal access up 19 10 PCs or you hoere see at werk 1 Choose the atatic IP address fo the PC bom the dopdowr be gt Check the bores for he applications you with to restrict te fur ne 3 Chek Zeg Chone an 19 Goose an IF Adcress E AO ey F mad F File Downipading FTP Tras roum F buletin board Service F web browsing Medi Gebely Disallowed List above eer Figure 39 Access Control This feature prevents users or children from running disallowed Internet applications or accessing unsuitable websites maximum 10 websites In order to 32 SOHOware Secure Cable DSL Router achieve this functionality a static IP must be assigned to users who will be restricted Up to 10 local users can be denied access to particular websites or to website addresses containing particular words Click View Modify Globally Disallowed Website Keyword List to open the limited websites list Figure 40 Globally Disallowed Websites Key
4. DNS IP 168 96 1980 BSP Ocrnair Nome NBG800 Verstees YET SI IP Address 192082 Submet Mask MS 24 AT MAC APA Address 00 80 CE 0661 33 d Firewall Acure Figure 46 Status Internet Internet IP address assigned by your BSP Subnet Mask 255 255 255 0 is the default setting Gateway IP The IP address of the BSP s Internet Network Gateway DNS IP The IP address of the BSP s Domain Name Server BSP Domain Name The BSP s Domain Name Server this field may be blank depending on your BSP NBG800 IP Address The IP address of the NGB800 Subnet Mask 255 255 255 0 is the default setting MAC Address The MAC address of the NGB800 Firewall The NGB800 firewall status Tools Six useful tools are provided PPPoE Check Hacker Alert Test View Current Access Control Settings Access Monitor Remote Management and Downloads SOHOware Secure Cable DSL Router 39 PPPoE Check DSL Users Only If you are a DSL user this page will help you to check whether your settings for PPPoE work or not After making the PPPoE settings on the broadband connection save and restart your BroadGuard Then open the PPPoE Check page and click Check Now You may click Disconnect to terminate your DSL connection SOHO i A re BroadGuard N amp G80 2 avin PPPOE Check FPPIE Check mates a PPPOE connection or checks e curerdlr meng itna 1 voed that Phe PPPOE gretecol o usrctosieg vi ees nC Cikh Discoseec
5. 11 The first three values must be the same as that of the BroadGuard IP address The default BroadGuard IP is 792 168 1 1 If the PC is to be used as a DMZ Port Forwarding PC assign an address outside the 2 range i e 192 168 1 12 253 Enter the BroadGuard s subnet mask into the Subnet Mask field The default value is 255 255 255 0 Enter the BroadGuard s IP address into the Default Gateway field the default value is 192 168 1 1 Click OK On the DNS page enter your PC name into the Host name field see Finding your PC Host Name page 26 and your BSP s domain name into the Domain field Enter your BSP s domain name server s IP address into the DNS Service Search Order field and click Add If you don t know your BSP s domain name and domain name server IP address contact your BSP to get this information 14 SOHOware Secure Cable DSL Router LG SG IER ale UE Figure 17 Microsoft TCP IP Properties 2 step8 The system will ask you to restart the computer Click Yes to complete the installation Windows 2000 step1 Click Start Settings Control Panel E Control Panel Accessibility Add Remove Add Remove Administrative Date Time Options Hardware Programs Tools Folder Options Fonts Game be W i Keyboard Controllers Regional Scanners anc Options Cameras Figure 18 Control Panel SOHOware Secure Cable DSL Router 15 step2 Double click the Network and Dial up Connections i
6. 211 55 79 155 is the user s Internet IP address As for numbers 840 546 and 544 they are the ports numbers that are being attacked Forward this e mail to your BSP for analysis Note The e mail alert is sent at approximately the same time your computer is attacked Enter the e mail address that the warnings should be sent to It is highly recommended that you use the default e mail server provided by SOHOware as many e mail servers refuse to relay e mail Click Save to store the settings Click Restart to initialize the BroadGuard with the new settings Change Password SOHOWare Inc Foe securty mavoes you should change Tu dee H sieugetier pacewced 1234 te a paetwerd of your choice To charge the Prag Erce PEU exiting pt pere and ther ester the r m PS rd taw d Curler Perse Wee Password Re type Password for verbe aon Figure 38 Change Password SOHOware Secure Cable DSL Router 31 For security reasons you should change the default administrator password 1234 to a password of your choice step1 Enter the current password the new password and then retype it for verification Click Save Click Restart to initialize the BroadGuard with the new password step2 step3 The Enter Network Password dialog box will open Enter the username admin and key in the new password Click OK and you will enter the BroadGuard Setup page again Note If you use an IP address other than the default
7. Osconrecting Re Benndb aed Seovice Provider ha eet guns you an P alisema Check Obtain an IP Addrows Aumermetically E yos have been given a qpridic P aire check Spady ap IP F Athe Figure 35 DSL Broadband Connection 1 Check Yes to enable PPPoE service Several parameters are required to establish a DSL connection via PPPoE User Name Login Password some broadband service providers also require a Service Name Enter all information provided by your BSP into all required fields Connect on Demand This setting allows the BroadGuard to automatically make a connection to your BSP whenever you launch an Internet application The default setting is Yes Maximum Idle Time Before Disconnecting If there is no activity on the connection within the time set here the connection will be dropped If your Broadband service provider assigns you a static IP address you must set Use PPPoE DSL Service to NO Next check Specify an IP Address and enter all IP address information into all fields If not you can skip this step SOHOware Secure Cable DSL Router 29 asie Has yeer Broadhead Service Provide given you a DNS addeem H yen ostor the information in the fichds batew Prevary ONS IP fee fs fix F Secondary ONG IP fire fe fi I D ses Figure 36 DSL Broadband Connection 2 If you do not wish to accept the NBG800 default IP address 192 168 1 1 go to the Change NBG800 IP Address page to change it N
8. Secure Cable DSL Router 37 e Enter the IP address of the PC you wish to map to the port number in the PC s IP Address field Note IP addresses from 2 to 11 are reserved for Access Control Do not assign an IP address from this range to Port Forwarding PCs e If you want to disable port forwarding enter 0 zero in both the ZP Address field and the Port Number field Change NBG800 IP Address DIAS E CES KEE Ze SOHOWare BroadGuard L dese Change NBG800 IP Address D peas already hare a network tetap change the NEE ET demik IP address aed ste mask to maich pour current recvcrk setas uece00 aasess fx Fe Fe fi NOGEJO Sbret Nast ET Fe Per J Bes Figure 45 Change NBG800 IP Address If you do not wish to accept the NBG800 default IP address 192 168 1 1 and subnet mask 255 255 255 0 change them to a setting of your choice Click Save and Restart to restart your BroadGuard Close your browser Release and renew your PC s IP address in order to get the new BroadGuard IP address For Windows 95 98 Me go to page 48 for Windows NT 4 0 go to page 49 and for Windows 2000 go to page 50 Status The Status section contains Internet information the Public IP Address assignment and the BroadGuard LAN IP address assignments Figure 46 This information is useful in resolving a connection problem 38 SOHOware Secure Cable DSL Router 3 Internet A Subnet Mask 266 206 206 2 Gateway IP 5281 8
9. a Macintosh environment Yes but the BroadGuard s setup pages are accessible only through Internet Explorer v4 0 or Netscape Navigator v4 0 or higher for Macintosh With which type of firewall is the BroadGuard equipped The BroadGuard uses NAT anti DoS Denial of Service and SPD Stateful Packet Inspection What is DoS Denial of Service The goal of a Denial of Service DoS attack is not to steal information but to disable a device or network so users no longer have access to network resources For example TearDrop a DoS tool which is widely available on the Internet allows users to remotely crash any unprotected Windows computer on the Internet Most types of Internet attacks try to exploit the weaknesses in the TCP stacks of the operating systems of host machines BroadGuard protects against the following types of attacks SYN Flooding Ping of Death LAND attacks Smurf attacks IP Spoofing TearDrop WinNuke What is Stateful Packet Inspection SPI Stateful Packet Inspection is a technology similar to that used in enterprise level firewall products It is generally regarded as a state of the art firewall SOHOware Secure Cable DSL Router 55 technology With SPI the BroadGuard makes security decisions based on the origination of Internet sessions The BroadGuard will allow incoming data from the Internet only if it is part of a session that was initiated by one of the users on the secure Local Area
10. a Windows Mac or Linux computer Windows Users Download the firmware from the SOHOware web site and save the file on your local hard drive Double click the file and follow the on screen instructions to run the firmware upgrade After the upgrade process is complete you must press the Reset button on the rear of the BroadGuard to make your new firmware effective SOHOware Secure Cable DSL Router 45 Mac amp Linux Users For Mac and Linux users we currently offer the firmware binary file only Linux has a built in TFTP program Mac users need a third party TFTP program After the upgrade process is complete you must press the Reset button on the rear of the BroadGuard to make your new firmware effective 46 SOHOware Secure Cable DSL Router Chapter 4 Troubleshooting If you cannot find your problem listed below see Chapter 5 FAQs page 54 or see the BroadGuard FAQ at the SOHOware website 1 I can t connect to the BroadGuard The BroadGuard is properly installed LAN connections are OK and it is powered ON Ensure that your PC and the BroadGuard are on the same network segment If you are not sure restart the BroadGuard let the PC get the IP address automatically Ensure that your PC is using a static IP Address within the default range of 192 168 1 2 to 192 168 1 254 and is thus compatible with the BroadGuard default IP Address of 792 168 1 1 The Subnet Mask should be set to 255 255 255 0 to match the
11. blank Click Save and restart the BroadGuard Go to the Status page to check whether your BroadGuard has received all necessary IP address information from your BSP Restart the PC used to configure your BroadGuard If your broadband service provider assigns you a static IP address you must check Specify an IP Address and then enter all IP address information into all fields Figure 34 If not you can skip this step SOHOLWATe cre hoe Wys Pensar d Corrs Provider han pet Pers yew on z nn cheek Ohtain en H Ire Pas eks vy 3 pee ders bree prve s weu P pihen ek ger an IP Adora Ove nba Service Peewee queno es UNS zent 3 ren ma Da ln thee Gelde beken Figure 34 Cable Broadband Connection If you do not wish to accept the NBG800 default IP address 192 168 1 1 go to the Change NBG800 IP Address page to change it Note If you use an IP address other than the default 192 168 1 1 you will need to configure TCP IP settings see page 9 and related network settings Click Save and Restart to start sharing your broadband connection 28 SOHOware Secure Cable DSL Router DSL Setup SOHOWdadre BroadGuard NSG300 DSL Broadband Connection Saree D vo Bong aed Sender Provider requires the use of PPPol chock Yes end ien Za lalo tos below Usa PPPet UM Service vas No er Narre Logn Password m Serves Namo Conros On Demand AN ves C yo Marion dle Tine Refore as a 49 Mente H
12. connects the computer to the network cable MAC Address Short for Media Access Control Address a hardware address that uniquely identifies each node on a network NAT Network Address Translation A routing protocol that allows global IP addresses to be translated into multiple private IP addresses for use on internal LAN networks The explosion in the use of the Internet has created a critical problem for the Internet Assigned Numbers Authority IANA which is charged with assigning IP addresses to Internet users ISPs etc NAT is a technology that has been introduced to help maximize the utilization of assigned IANA or global IP addresses SOHOware Secure Cable DSL Router 73 TCP IP TCP IP protocols are used for Internet communications and consist of TCP Transmission Control Protocol which uses a set of rules to exchange messages with other Internet points IP Internet Protocol which uses a set of rules to identify Internet addresses on the Internet Every computer on the Internet has a unique IP address The IP protocol helps Internet users to identify each sender or receiver of information that is sent across the Internet VPN Virtual Private Network The use of encryption in the lower protocol layers to provide a secure connection through an otherwise insecure network typically the Internet BBS Bulletin Board Service A computer and associated software that provides an electronic message database where peo
13. considered valid after its expiration date If this product does not function as warranted your sole remedy shall be repair or replacement as provided for above In no case shall SOHOware be liable for any incidental consequential special or indirect damages resulting from loss of data loss of profits or loss of use even if SOHOware or an authorized SOHOware distributor dealer has been advised of the possibility of such damages or for any claim by any other party 78 SOHOware Secure Cable DSL Router EC DECLARATION OF CONFORMITY For the following equipment Product Name BroadGuard Secure Cable DSL Router Model Number NBG800 Produced by Manufacturer s NATIONAL DATACOMM CORPORATION Name Manufacturer s 4F NO 24 2 INDUSTRY EAST 4TH ROAD Address SCIENCE PARK HSIN CHU TAIWAN R O C is hereby confirmed to comply with the requirements set out in the Council Directive on the Approximation of the Laws of the Member States relating to Electromagnetic Compatibility 89 336 EEC The product meets or exceeds the following EMC standards EMI EN50081 1 1992 ENS5022 B EMS EN50082 1 1997 The manufacturer importer is responsible for this declaration Company Name NDC Europe Company Address 1 Earlsfort Centre Hatch Street Dublin 2 Ireland Person authorized to make this declaration Name Changhua Chiang Position Title President 8 CEO n e Un OE March 15 2001 Date Legal Signature
14. ee ee ee Se Se Ge ee GR Re r ee 61 Make New ConnecHON 3 ese se se se ee ee ee Se Se GR Ge Re Re ee ee 61 Dial Up Networking AAA 62 Connect Os siti iS 62 Connection Established iese coto SEER sees EE ROSE ERGE ES EE eg NEEN EEN 63 Routing and Remote Access 63 Common Configurations ees se see see ee ee ee Ge Se ee RR Re ee 64 Remote Client Drotocols iese ese ee ee ee ee ee Se Ge GR AR ee ee ee 64 Internet ConneCHOR ue eege GESE ES EES EG Ge ERGE EER nie 65 IP Address ASSignment siese esse nia 65 Address Range Assignment ee ee see se ee ee Ge Se ee GR AR Re ee ee 66 New Address Range 66 Address Range Aeatgnment ee ee se ee ee ee ee Se ee Re GR RA ee ee ee 67 Managing Multiple Remote Access Berverg iese ss se ee ee se ee 67 Routing and Remote Access 67 Routing and Remote Access 7 68 Local Area connection Droperttes cc ee se se ee Se Ge ee ee ee 69 viii SOHOware Secure Cable DSL Router Figure 89 Administrative Tools 70 Figure 90 Computer Management 70 Figure 91 User Properties ee se se se ee RA Ge Gee Ge ee ee ee ee Se ee Re ee ee 71 Figure 92 Network and Dial Up Connections ie iese see ee ee Ge Se Se GR RA 71 SOHOware Secure Cable DSL Router ix Chapter 1 Introduction The SOHOware BroadGuard Secure Cable DSL Router provides convenient Internet access to office family users by sharing a single Broadband Service Provider BSP account The BroadGuard functions with cable DSL modems and allows up
15. fields step2 The PC that you plan to make a VPN server must be assigned as the DMZ or Port Forwarding machine VPN Client Configuration e g Microsoft PPTP VPN is natively supported in Windows 98 98SE and Me On a Windows 95 machine you need to upgrade to Dial Up Networking Version 1 3 Windows 98 98SE Me VPN Client Setup step1 Click Start Settings Control Panel File Edit View Go Favorites Help EE EE AE E X X Back Forward Up Cut Copy Paste Une Address 52 Control Panel E Multimedia Network Passwords 25 object s Figure 65 Control Panel SOHOware Secure Cable DSL Router 57 step2 In Control Panel double click the Network icon The Network dialog box will open Figure 66 Figure 66 Network step3 Click Add The Select Network Component Type dialog box will open Figure 67 romni ppa Figure 67 Select Network Component Type step4 Double click Adapter The Select Network adapters dialog box will open Figure 68 Diabla b sp er bar PPP pam iT dani a p Figure 68 Select Network Adapters 58 SOHOware Secure Cable DSL Router step5 step6 step7 steps In the left window choose Microsoft In the right select Microsoft Virtual Private Networking Adapter After the Microsoft Virtual Private Networking Adapter component is completely installed click OK You will be returned to the Network dialog box Figure 69 The Microsoft Virtual Priva
16. out to 80 seconds An Internet user can then send a file to a user behind the BroadGuard How do get Napster to work with the BroadGuard Napster is fully compatible with the BroadGuard and requires no special settings Can multiple gamers on the LAN get on one game server and play simultaneously with just one public IP address It depends on which network game or what kind of game server you are using For example Unreal Tournament supports multi login with one public IP How can I avoid receiving corrupted FTP downloads If you are experiencing corrupted files when you download a file with your FTP client try using another FTP program How will I be notified of new BroadGuard firmware upgrades All firmware upgrades are posted on the SOHOware website at SOHOware Secure Cable DSL Router www sohoware com where they can be downloaded for free Does the BroadGuard pass PPTP packets Yes What is the recommended maximum number of VPN sessions I can run on the BroadGuard If you setup a VPN server inside the BroadGuard and users from the Internet want to access the VPN server we recommend the number of sessions is five or less to prevent influencing the throughput of the BroadGuard If multiple PCs inside the BroadGuard want to simultaneously access the same VPN server located on the Internet you must have multiple public IP addresses and enable DMZ Otherwise only one session can be created Will the BroadGuard function in
17. to 253 computers to share secure broadband Internet access simultaneously a d internet N a a Computers Cables DSL Modam A ge Broaadiiuard Figure 1 BroadGuard Connections Embedded Network Address Translation NAT enables you to use a private set of IP addresses that the BroadGuard translates into a single public IP address The BroadGuard can also act as a DHCP server by automatically allocating a dynamic IP address to each computer on the network An enhanced firewall and the Access Control feature monitor incoming and outgoing data packets and filter requests from local computers Together they allow parents employers to see how the network connection is being used and protect all PCs behind the BroadGuard Features and Benefits e Share Your Internet Connection Built in NAT DHCP and 10 100 Ethernet Switch allow multiple users to share a single cable DSL account simultaneously e Easy to use No driver or software required Easily configured and managed through a web browser Netscape Communicator 4 0 Microsoft Internet Explorer 3 0 or above from LAN connected PCs e Consumer oriented Firewall Security via NAT Network Address Translation protects your network from intruders Built in anti attack algorithm Denial of Service amp Stateful Packet Inspection protect your PCs from hacker attacks SOHOware Secure Cable DSL Router 1 e Multi DMZ This feature places multiple PCs on y
18. 034 1035 Network Interfaces LAN Four 10 100 Switched Ethernet RJ 45 connectors Autosensing Switch LAN ports Four RJ 45 10Base T 100Base TX Ethernet ports for PCs peripherals or a wireless LAN bridge WAN One 10Base T Ethernet RJ 45 connector for a cable DSL modem User Interface Browser based Management Maximum Number of PCs 253 Firewall Security SPI Prevention of DoS attacks VPN Support Client and server pass through Microsoft PPTP Protocols WAN TCP IP DHCP Client IP Multicast RTSP PPTP and PPPoE LAN TCP IP DHCP server NAT RIP I amp II Power Status LED Indicators Cable DSL Internet activity WAN Ethernet port activity LAN Operating Environment Operating Temperature 0 50 deg C 32 122 deg F Humidity 0 to 90 non condensing Dimensions 258 x 168 x 45mm 10 2 x 6 6 x 1 8 in Weight 770 g 27 2 02 Power Consumption AC 5V 1A Warranty BroadGuard Unit Three year Limited Power Adapter One year SOHOware Secure Cable DSL Router 75 Technical Support Support from Your Network Supplier If additional assistance is required call your supplier for help Have the following information ready before you make the call 1 LED status 2 A list of the product hardware including revision levels and if possible a brief description of the network structure 3 Details of recent configuration changes if applicab
19. 66 SOHOware Secure Cable DSL Router P ral sus sad Fire e har ri Berry Bars Ris Figure 84 Address Range Assignment step9 Click Next The Managing Multiple Remote Access Servers dialog box will open Figure 85 Miss Hule Pees deren ees Voy eya mr dr rer gece emt rege sbb Figure 85 Managing Multiple Remote Access Servers step10 Check No I don t want then click Next step11 Click Finish A Routing and Remote Access warning screen will open Figure 86 Figure 86 Routing and Remote Access 1 SOHOware Secure Cable DSL Router 67 step12 Click OK to return to the Routing and Remote Access main screen Figure 87 Pe IE bm Je lo AR Tor PDA Wel OS LT Di Ser ga Figure 87 Routing and Remote Access 2 step13 In the left pane double click the server and double click IP Routing In the right double click the Local Area Connection with the IP address in the 192 168 1 2 192 168 1 254 range The Local Area connection Properties box will open Figure 88 68 SOHOware Secure Cable DSL Router LET ad Ae MEE Preparing Bara Congantor Heat As riwer Wees Bestes t3 IF riia ure Biy pand id skree ora dre Legd od BERE ET EE EE OT RT Um mn Lime Ken g s H T irapa Pregrado erch eg Wat Figure 88 Local Area connection Properties step14 On the General card check Enable IP Router Manager Click Input Filters Remove all filters from the list then click OK Click O
20. BroadGuard On the client PC you can check these settings by using Control Panel Network to check the properties for the TCP IP protocols 2 The Status LED stays lit when it should not The Status LED lights when the device is powered up and checks for proper operation After finishing the checking procedure the LED should turn off to show the system is working fine If the LED remains lit after this time the BroadGuard is not working properly Contact your dealer 3 I can t browse through the BroadGuard Check that both ends of the network cable and power adapter are properly connected Check that all LEDs on the front panel are functioning properly Use Status Figure 57 to check that your BroadGuard is still connected to your BSP If there is no public IP address shown on the screen the problem lies with the BSP SOHOware Secure Cable DSL Router 47 BroadGuard NS563800 s Internet JE 5126117 96 Subnet Mask 265 256 256 2 Gateway IP 517611750 DNS IP 168 96 192 NBG800 Persiens 3 37 ch IP Address 112 wa s2 Steet Mask MS MAT MAC Pa a Address 00 80 OE OE ET Firewall DIE Figure 57 Status Check that the PC got an IP address assigned to it automatically for Windows 95 98 Me see the following section For Windows NT 4 0 see page 49 For Windows 2000 see page 50 Make sure that TCP IP is setup on the client PCs and that the IP addresses are in the range 192 168 1 x x is from 2
21. CP Server step4 Leave the DHCP Client ID field blank Manual Assignment of IP addresses step1 Click the Apple icon in the upper left corner of the screen and select Control Panel TCP IP The TCP IP Setup Ethernet dialog box will appear as shown in Figure 25 SOHOware Secure Cable DSL Router 19 step2 step3 step4 step5 step6 step7 steps F mean mima bane 1355530 Bator siran idh ii EE EE Cep rb de ria hara rer v i j SI Figure 25 Manual Configuration of IP Addresses From the Connect Via list box choose Ethernet From the Configure list box choose Manually In the ZP Address field type an IP address If the PC will be running with Access Control enabled assign an IP to the PC from the range 2 11 i e 192 168 1 2 11 The first three values must be the same as that of the BroadGuard IP address The default BroadGuard IP is 192 168 1 1 If the PC is to be used as a DMZ Port Forwarding PC assign an address outside the 2 11 range i e 192 168 1 12 253 In the Subnet mask field enter the BroadGuard s subnet mask The default value is 255 255 255 0 In the Router address field type the BroadGuard IP the default value is 192 168 1 1 In the Name server addr field type the name server address es provided by your broadband service provider Close the screen and save the configuration 20 SOHOware Secure Cable DSL Router Chapter 3 Network Configuration BroadGuard Configurat
22. Ge ee 17 Internet Protocol TCP IP Dropertes 2 18 Using the DHCP Server 19 Manual Configuration of IP Addresses 0 0 00 ee se se ee se ee ee ee ee 20 Entering the Setup Wizard ese see see se ee ee ee Se Se GR Ge RA Re ee ee 21 Enter Network Password AAA 21 SEtUp Start SO N N dt 22 vi SOHOware Secure Cable DSL Router Figure 29 Figure 30 Figure 31 Figure 32 Figure 33 Figure 34 Figure 35 Figure 36 Figure 37 Figure 38 Figure 39 Figure 40 Figure 41 Figure 42 Figure 43 Figure 44 Figure 45 Figure 46 Figure 47 Figure 48 Figure 49 Figure 50 Figure 51 Figure 52 Figure 53 Figure 54 Figure 55 Figure 56 Figure 57 Figure 58 Broadband Connection aprenen nrn 24 Cable Broadband Connecton esse ee se ee ee ee ee ee ee RA ee ee 25 RS EE EE RR N OR OE 26 ER id EE EE EE estonia ENEE ENEE 27 ED RR EO oia 27 Cable Broadband ConnecHON esse ee se ee ee ee ee Re RA ee Ge ee 28 DSL Broadband Connection 1 esse see ese ee ee GR ee GR Ge ee be 29 DSL Broadband Commecton 7 30 A EE OE ER 30 Chane Password marcianos notte 31 ACCESS Control ui 32 Globally Disallowed Websites Keywords esse se se se ee ee ee ee 33 DMZ EE EE EE OE AE EE 34 DHCP Setting insano RE EE T 35 DHCP IP Address Assignment ocococcconcnononnnonnnnononanonn conan Gee Ge ee Re ee 36 Port Forwarding OE se to EE N EN 37 Change NBG800 IP Address 38 SEER AE Ed OE RR IE OR OE EA 39 PPPOE CHECK SEE N OR N OD EE 40 PP
23. ML documents to specify the target of a hyperlink which is often another HTML document possibly stored on another computer DNS Domain Name Server A server used to translate a Domain Name to a numerical form IP address 72 SOHOware Secure Cable DSL Router PPPOE PPPOE supports reliable and straightforward end user authentication with no security risk and can provide a range of operational benefits to both the subscriber as well as the service provider Among these are network management and diagnostic capabilities that can identify operational problems and automatically offer solutions Firewall A security system used to enforce an access control policy between a LAN and the Internet Gateway A device that links two different networks Internet A global network that connects millions of computers for information exchange IP Address The Internet Protocol IP is a set of basic rules for network communication Each computer on the Internet has a unigue IP address e g 192 168 1 2 and its IP functions as an I D number identifier address BSP Broadband Service Provider A BSP is a company that provides individuals or companies broadband access to the Internet and other related Internet services via cable or DSL Local Area Network LAN A LAN is a network of interconnected workstations sharing the resources of a single server or each other within a relatively small geographic area LAN Adapter A device that
24. NTV sesse esse ese esse esse esse es ee es ee ee Ge se ee bee bee See 71 INDEX EE EE EE EE ET EE 80 SOHOware Secure Cable DSL Router v List of Figures Figure 1 Figure 2 Figure 3 Figure 4 Figure 5 Figure 6 Figure 7 Figure 8 Figure 9 Figure 10 Figure 11 Figure 12 Figure 13 Figure 14 Figure 15 Figure 16 Figure 17 Figure 18 Figure 19 Figure 20 Figure 21 Figure 22 Figure 23 Figure 24 Figure 25 Figure 26 Figure 27 Figure 28 BroadGuard Connections iese se ee ee ee ee Re ee ee Ge ee 1 Front Pana 2 Rear Panel SE ER ES Raman ain Stl ae ea EE De Ee 4 Connecting the BroadGuard AA 6 Wired LAN Extension 7 Wireless LAN Extension 8 Control Panel is 9 N twork KAR AE EE ER EE ee Eege 9 Select Network Component Type ies ses see see se ee ee ee Ge ee Ge Re 10 Select Network Drotocol sesse esse se ee ee RA ee RA Ge ee a 10 Network eege IE ES OR EE EE IE ES 11 TCP IP Properties I iss EE sien EE EG SR nema ape esas 11 TCP IP PLoperties 2 Ee eege GREG EERS EES Ee Ge ENEE 12 Control Panel sp EERS Gee gg 13 Network EE EE ME OE OE EE EN 13 Microsoft TCP IP Properpes 1 14 Microsoft TCP IP Dropertes 2 15 Control Panel ss sas sich EER dia 15 Network and Dial up Connections eee eceeeeeeceseceecenecnseeneeeneeees 16 Local Area Connection Status 16 Local Area Connection Dropertes cee se see se ee ee ee ee ee ee 17 Internet Protocol TCP IP Properties 1 esse esse es se ee ee ee ee
25. Network LAN but will block all communications that are initiated from the Internet SPI has the added benefit of being easy to manage making it ideal for those who don t have MIS people for networking maintenance Does the BroadGuard support routing protocols Yes it support both RIP I amp RIP II I am not able to get the web configuration screen for the BroadGuard What can I do You may have to remove the proxy settings on your Internet browser e g Netscape Navigator or Internet Explorer Or remove the dial up settings on your browser Will the BroadGuard allow me to use my own public IP and Domain The BroadGuard allows for customization of your public IP and Domain If you use a cable connection see Figure 34 page 28 For DSL users see Figure 36 page 30 Is there an internal cable or DSL modem in the BroadGuard No the BroadGuard only operates in conjunction with an external cable or DSL modem Which modems are compatible with the BroadGuard The BroadGuard is compatible with virtually any cable or DSL modem that supports Ethernet How can I check whether I have static DHCP IP Addresses Consult your BSP to confirm the information How do I get Half Life Team Fortress to work with the BroadGuard If you want to host a game you must expose your PC to the Internet using DMZ see DMZ page 34 or Port Forwarding see Port Forwarding page 37 If you only want to join a game hosted by somebody else then there is no
26. POE Service Running 00 0 0 cece sees isie i GR ee Gee Ge ee ee 40 PPPoE Check Successful iese ees beer Bede Se ee Ee oe ee se rr Gee eg De oe ee DER ee 41 PPPoE Check Unsuccessful ineine 41 Authentication Failed vivia 42 Hacker Alert Tetu 43 View Current Access Control Senge 43 ACCESS vlei EE AE ER OR N 44 Remote Management 44 DO Wil EE 45 EE 48 RUD sets ae EE ea hl A aes E 48 SOHOware Secure Cable DSL Router vii Figure 59 Figure 60 Figure 61 Figure 62 Figure 63 Figure 64 Figure 65 Figure 66 Figure 67 Figure 68 Figure 69 Figure 70 Figure 71 Figure 72 Figure 73 Figure 74 Figure 75 Figure 76 Figure 77 Figure 78 Figure 79 Figure 80 Figure 81 Figure 82 Figure 83 Figure 84 Figure 85 Figure 86 Figure 87 Figure 88 AA an aa a a e ARa a T SREE 49 Command Prompt 1 49 Command Drompt 2 50 Command Prompt 3 sssini ia coro cion E RE Eg EDE E DERE re ERGE Fase see 50 Command Prompt 4 sissies es eg ee bee EN SES SR te Ul Gee ee eg ESE see 51 SAUS co RE EN AE EE EES 52 Control Panel 57 Networks iia 58 Select Network Component Type ies ses se see se ee ee ee Ge Se Ge Re 58 Select Network AdapterS ese se eop einge Ge ee ee ee ee ee Se Re ee 58 NetWork EE RE EE OE OE OG 59 Welcome to Dial Up Networking esse esse se se se ee GR GR Ge ee ee ee 60 Make New Connection 1 iese see se se ee ee ee Se Se Ge Re Ge RA Re ee ee 60 Make New ConnecHON 2 ese see se se
27. There is no need to enter any information in Broadband Connection unless your BSP has assigned you specific Internet connection information Host Name Domain Name MAC address authentication PPPoE or a static IP address To do a manual setup type 192 168 1 1 into the web address location on a web browser on any connected PC Enter the factory default user name admin and password 1234 After clicking OK you will enter the setup home page Click the Broadband Connection link to begin setup of the broadband connection 2 Ifyou have an AT amp T cable service formerly MediaOne or any service that requires a Media Access Control MAC address for authentication when you are setting up the BroadGuard for first use only the PC with the registered Ethernet card s MAC address should be connected to the BroadGuard 3 If you have a DSL service with PPPoE obtain the following information from your BSP e The user login name e The login password Service name some BSPs may not require you to use this SOHOware Secure Cable DSL Router 5 4 If you have a fixed public IP address obtain the following information from your BSP e The assigned Gateway IP address Domain Name Server s IP address Subnet Mask Hardware Installation All the connection ports are on the rear panel of the BroadGuard Two cables are supplied Most Cable and DSL modems use straight through Ethernet cable so first use the WHITE cable unless you know y
28. View Current Access Control Settings VPN VPN Client Configuration VPN Remote Access VPN Server Configuration W Warranty White Cable Wired LAN Extension Wireless LAN Extension 47 54 21 Y onan
29. WAN sdo C adya deny I r Figure 55 Remote Management 44 SOHOware Secure Cable DSL Router Remote Management allows you to remotely configure your BroadGuard For the security of your network the default setting is Deny We recommend that you enable the NBG800 s Remote Management function only when necessary Be sure to change the default admin password 1234 before using this feature If you set Enable SPI amp Anti DoS to protect your network to No see Security Settings page 30 then remote management will always be available no matter whether you check Allow or Deny Notel If you have forwarded incoming packets to a web server located on your local network the local web server should be set to listen on port 8080 Note2 You cannot remotely upgrade the BroadGuard even when remote control is enabled Downloads DIR AU SY IBIS SOHOWAare BroadGuard i 3 m s Downloads Farmer ore SOHOmame mar ag gin nee bamegg lor your NED to more furcbonalty and perorare Cih bore tp Ate ond brau rere Di DIA ware webote Once you hive dowrlcaded the Bars Me Firme he esirecines in the user s narun to update y our NOOOOO Current Fireware Verson 13 0046s Manual Chek here to download DDF mand for de latest Erwe Figure 56 Downloads This tool permits easy downloading of the latest BroadGuard firmware and manual The SOHOware website provides two different files depending on whether you are using
30. ables Registration card or go to www sohoware com for on line registration Register to receive free Warranty protection 3 years on the BroadGuard device 1 year on the power adapter Information on upcoming product releases and special product offers Free technical support and firmware upgrades SOHOware Secure Cable DSL Router iii Table of Contents CHAPTER 1 INTRODUCTION eeseeseeseseeseesesee sesse se sae see Be ee Ge Be Ge Ge Be Gee Ge Se ee ee 1 FEATURES AND BENEFIT Sinera ee ee be ee se ee ee be es se ee ee be es seed oe ee se dd oe ee se i ee ee ia 1 GETTING TO KNOW YOUR BpOADUDUARD esse ee ee ee se ee ee ee ee GR ee ee GR Re ee 2 Front Panel ses tasa a E EE 2 LED RTE 3 Rear SEE ON EE EE RE NE ON OE GN 4 CHAPTER 2 INSTALLATION csssssssssssssessescsessesecsesseseenessesecsesseseeesseses 5 WHAT YOU NEED eege vice sot dE AE EE 5 Broadband Internet Account 5 HARDWARE INSTALLATION sees esse esse ee ese ee se ee ee ee se ee ee ee se de ee ee ee ee de ee ee ee 6 NETWORK EXTENSIONS eeneg sets ge ben We ee SR EK EE Ne a 7 Wired EAN Extension npe EE OR EE E IE n 7 Wireless LAN ExtensiOR ebe eebe Ae oa he 8 TCP IP SETTINGS ii Vee Sos cise ER Ee GE Dee Ed NEE ees 9 E 9 Windows NTA RR RE EE N eames 13 Windows ZOO ss eg See ERWE SE gee Eesen Eege ek Ee ee bee 15 Mac OS e Ee o EE 19 CHAPTER 3 NETWORK CONFIGURATION esse sesse se see see se see see se see ee se sees 21 BROADGUARD CONFIGURATION
31. cations However there is no guarantee that interference will not occur in a particular installation If this equipment does cause harmful interference to radio or television reception which can be determined by turning the equipment on and off the user is encouraged to try to correct the interference by one or more of the following measures e Reorient or relocate the receiving antenna e Relocate the equipment with respect to the receiver e Plug the equipment into an outlet on a circuit different from that to which the receiver is connected e Consult your dealer or an experienced radio TV technician for help You are cautioned that changes or modifications not expressly approved by the party responsible for compliance could void your authority to operate the equipment This device complies with part 15 of the FCC Rules Operation is subject to the following two conditions 1 This device may not cause harmful interference and 2 This device must accept any interference received including interference that may cause undesired operation ii SOHOware Secure Cable DSL Router Packing List Check the contents of your package to ensure that they match the packing list below If anything is missing or damaged contact the store where you purchased the product The BroadGuard pack comes with the following One BroadGuard Device One Power Adapter One Quick Guide One CD ROM with manual in PDF format Two Color coded RJ 45 UTP c
32. cifies an IP address to make an Internet connection Security Settings An anti attack algorithm is built into the BroadGuard to protect your network from conventional hacker attacks If you enable e mail alerts whenever the BroadGuard detects an attack it will send a warning e mail to the address entered here If you disable firewall protection Hacker Attack E mail Alerts are also disabled Change Password Changes the security password 22 SOHOware Secure Cable DSL Router Setup Advanced Status Tools Access Control The Access Control section allows you to control Internet use in your home office DMZ Use this function to expose multiple PCs to the Internet for playing interactive Internet games video conferencing as VPN servers clients through the BroadGuard To use the DMZ you must set a static IP address for a DMZ PC and set that PC to use the selected IP address DHCP Setting Enable Disable the BroadGuard s DHCP server Use to set the dynamic IP address range Port Forward packets sent to the BroadGuard from Forwarding the external network to specified ports on the internal computers Change Change the BroadGuard s default IP address NBG800 IP 192 168 1 1 and subnet mask 255 255 255 0 Address View WAN connection status and Internet Network settings View LAN Network Settings View Firewall Status PPPoE Check Checks PPPoE
33. click Protocol The Select Network Protocol dialog box will open Figure 10 ick the Aigo Protowco lihai yo ward o eng Hen dick DE Vas hear an in bed oon rak for thre ds ca cle Here Di karuss Metenek Froncie Daman Pao sd kie ten Digia Equipreas DEC Karena 124 GLC du Pico LC HeBELI Figure 10 Select Network Protocol step5 In the left window choose Microsoft In the right select TCP IP After the TCP IP component is completely installed click OK You will be returned to the Network menu Figure 11 The TCP IP item in the Network box indicates that TCP IP has been installed 10 SOHOware Secure Cable DSL Router PO Fast Ethan at DE Ccp 21140 Base d Adaptar Hab Figure 11 Network step6 On the Configuration card Figure 11 select TCP IP and click Properties The TCP IP Properties dialog box will open Figure 12 Figure 12 TCP IP Properties 1 step7 On the IP Address page Figure 12 check Obtain an IP address automatically Click OK and go to step 12 If you want to assign a static IP to a PC go to step 8 Note The BroadGuard operates as a DHCP server it automatically assigns an IP address to connecting computers and must be the only DHCP server on the network SOHOware Secure Cable DSL Router 11 step8 On the IP Address page Figure 12 select Specify an IP address and assign an IP to your PC in the ZP Address field If the PC will be running with Access Control enabled assign an IP to t
34. con Figure 18 The Network and Dial up Connections window will open Figure 19 Network and Dial up Connections GIE Figure 19 Network and Dial up Connections step3 Double click Local Area Connection The Local Area Connection Status dialog box will open Figure 20 Local Area Connection Status Figure 20 Local Area Connection Status step4 Click Properties 16 SOHOware Secure Cable DSL Router Local Area Connection Properties Figure 21 Local Area Connection Properties step5 Select Internet Protocol TCP IP and click Properties Figure 21 The Internet Protocol TCP IP Properties window will open Figure 22 Internet Protocol TCP IP Properties Figure 22 Internet Protocol TCP IP Properties 1 SOHOware Secure Cable DSL Router 17 step6 Select Obtain an IP address automatically and Obtain DNS server address automatically Click OK and go to step 10 If you want to assign a static IP to a PC go to step 7 Note The BroadGuard operates as a DHCP server it automatically assigns an step7 steps step9 IP address to connecting computers and must be the only DHCP server on the network Check Use the following IP address Figure 23 and enter an IP address for your PC in the JP Address field If the PC will be running with Access Control enabled assign an IP to the PC from the range 2 11 ie 192 166 1 2 11 The first three values must be t
35. dGuard The other IP addresses are divided into two IP groups One is the dynamic IP group the other is the static IP group The dynamic IP start address may be specified by the user e g 192 168 1 100 default value Once this start IP address has been assigned all IP addresses running from 192 168 1 100 to 192 168 1 254 will be part of the dynamic IP address pool IP addresses from 192 168 1 2 to 192 168 1 99 will be available as static IP addresses You can see the client PC s information on the DHCP IP Address Assignments screen SOHOware Secure Cable DSL Router 35 SOHOWare Jas Figure 43 DHCP IP Address Assignments Note IP information of statically assigned IP PCs is not shown here When your PC asks the BroadGuard for an IP address it issues an IP address with a validity period of three days If you turn off the BroadGuard and turn it on within that three day period your PC will not attempt to renew the IP address As the previous IP assignment table will be cleared when the BroadGuard was turned off your IP address will not be shown in the table To renew the IP address for Windows 95 98 Me go to page 48 for Windows NT 4 0 go to page 49 and for Windows 2000 go to page 50 36 SOHOware Secure Cable DSL Router Port Forwarding DAD EE BCE KREE SC Aer SOHCH UO re BroadGuard eg sna Port Forwarding Port Forwarding forwarce packets rent to the MAGREO for the extemal netecrt to spectied port
36. dapter TUND32 LA Figure 60 Command Prompt 1 step2 Type ipconfig release Figure 60 and press Enter step3 Type ipconfig renew and press Enter to retrieve new information IP address subnet mask and default gateway address from the BroadGuard Figure 61 SOHOware Secure Cable DSL Router 49 mine HIER he Picea Gore gsh ig ere irae dond RI 1 igurat dar IF siese i 2 saeeessFallg released Far alapter TADO Ethernet adapter DUH Figure 61 Command Prompt 2 step4 Type Exit step6 Go to DHCP IP Address Assignments see Figure 43 page 36 Click Refresh Windows 2000 step1 Click Start Programs Accessories Command Prompt dipconfig velease Mindows 2000 IP Configuration IP address successfully released for adapter Local rea Connection CA Figure 62 Command Prompt 3 step2 Type ipconfig release Figure 62 and press Enter step3 Type ipconfig renew and press Enter to retrieve new information IP address subnet mask and default gateway address from the BroadGuard Figure 63 50 SOHOware Secure Cable DSL Router e Command Prompt E C ipconfig release Windows 2808 IP Configuration IP addy successfully released for adapter Local Area Connection Windows 2808 IP Configuration frea Connection Onnection specific DNS Suffix hc ethome net IP Addy 192 168 1 3 255 255 255 0 192 168 1 1 Figure 63 Command Prompt 4 step4 T
37. e 48 for Windows NT 4 0 go to page 49 and for Windows 2000 go to page 50 6 I can connect to the BroadGuard but can t get outside connections Ensure that all of your cabling is properly connected and that all of the BroadGuard s cable DSL and LAN LEDs are correctly illuminated Power down your cable DSL modem and BroadGuard for a few seconds Then turn the cable DSL modem on After the modem goes through its self test turn the BroadGuard on After the BroadGuard goes through its self test check whether you can get an outside connection Ensure that your cable or DSL modem is DHCP capable Make sure all broadband connection setup is correct The problem may be caused by your BSP Broadband Service Provider issuing a different IP address from time to time The BroadGuard gets its public IP from the BSP s DHCP server automatically The BroadGuard must renew the public IP if the BSP cancels the originally assigned IP address 52 SOHOware Secure Cable DSL Router 7 My computer was originally connected to the Internet via PPPOE without any problem When I install a BroadGuard into the network all LEDs light correctly but I cannot get a connection When I switch back to my original network setup without a BroadGuard the network connection operates normally What should I do Completely remove the PPPoE software from all your PCs The PPPoE software supplied by Broadband Service Providers causes many conflicts incl
38. eless Hub Any LAN Port af the HEGET EroadGuard r Siandard RAS d Eend Lage Figure 6 Wireless LAN Extension 8 SOHOware Secure Cable DSL Router TCP IP Settings If your local network will access the Internet through a single IP you need to configure the TCP IP settings For Windows 95 98 Me see the following section for Windows NT 4 0 go to page 13 and for Windows 2000 go to page 15 For Mac OS users turn to page 19 Windows 95 98 Me step1 Click Start Settings Control Panel Figure 7 0 ol Pane O px Eile Edit View Go Favorites Help EE EE ajg Back Forward Up Cut Copy Paste Une Address a Control Panel Multimedia Network Passwords 25 object s 5 My Computer A Figure 7 Control Panel step2 In Control Panel double click the Network icon The Network dialog box will open Figure 8 Ch s kr hierde Hines PO Pet Eheee DE Cep 21140 Based Adapiee He Fio end ponte sharnir for Microso Mabworos we e Figure 8 Network SOHOware Secure Cable DSL Router 9 step3 If TCP IP is already shown in the list go to Step 6 If not click Add The Select Network Component Type dialog box will open Figure 9 Select Moteork Component Typo HEI Chick Ba bpa of notek com paar sos wel io insist Protocol is a Targusgs a computer uses Competers same protocol In communicar Figure 9 Select Network Component Type step4 Double
39. erencing VPN Virtual Private Networks or as an e mail server etc computers must be exposed to the Internet The DMZ function assigns up to eight client computers to be exposed Note One public IP address is mapped to one DMZ PC IP addresses from 2 to JI are reserved for Access Control Do not assign an address in this range to DMZ PC s BroadGuard Setting You must set a static IP address for a DMZ PC to be exposed to the Internet and set that PC to use the selected IP address Then click Save to make the setting effective Click Restart to initialize the BroadGuard with the updated settings 34 SOHOware Secure Cable DSL Router DMZ opens all ports on a computer to requests for service from the Internet and exposes the computer to risk from hackers Open only the ports you need is the most important rule for your broadband Internet security Therefore it is highly recommended that unless you don t know the ports used by the application the Port Forwarding feature be used to support your Internet applications see Port Forwarding page 37 DHCP Settings FEE AI Ys SOHOLWaTe Wies DEL E Mim Aipoma Figure 42 DHCP Settings Under normal operation all client PCs IP addresses are automatically assigned by the BroadGuard s DHCP server The IP address range runs from 192 168 1 1 to 192 168 1 254 Up to 253 IP addresses may be assigned to client PCs The IP address 192 168 1 1 is reserved for the Broa
40. est Click the Alert Test button to automatically generate an email sent to the address specified in Security Settings page 30 The subject line will read NBG800 Hacker Alert Test View Current Access Control Settings ms AA AU SOHOWAre Current Access Control Settings vyl beker rg been ded scone 7 the verre es var ree Are Ag pie ad born De gel 2100527 Fo Dewniowiing r Figure 53 View Current Access Control Settings On this page you can view access control settings of PCs restricted by you You will see each PC s manually assigned IP address and a list of the denied Internet applications for each restricted PC SOHOware Secure Cable DSL Router 43 Access Monitor TED Mad nn Dt HOER BARE GEED D Aa sm a OE ET F EF TE SO Wir Bai REM Tari oe TE TO ERR Al s it Ear bier en SU s in For tegen ni ais EENE is ed ae I EF TE ei eier Figure 54 Access Monitor Access Monitor shows the current Internet activities of monitored users The table shows the PC s IP address and its Internet activities Easily monitor Internet activity flow through the BroadGuard to see whether there is any improper Internet activity on your home office network Click Refresh to display the latest Internet activities Click any website s hypertext address to go to that website Remote Management e DIAS SOHOIVUTe Remote Management Fenty Corre ty M t raise very Peg vor
41. he PC from the range 2 1 i e 192 168 1 2 11 The first three values must be the same as that of the BroadGuard IP address The default BroadGuard IP is 192 168 1 1 If the PC is to be used as a DMZ Port Forwarding PC assign an address outside the 2 range i e 192 168 1 12 253 step9 Enter the BroadGuard s subnet mask into the Subnet Mask field The default value is 255 255 255 0 step10 Click the Gateway tab and enter the BroadGuard s IP address into the New Gateway field the default value is 192 168 1 1 Click Add to add this value to the Installed Gateway list Click OK Eet Aueren 1 Set DAS Coafiguntor Dakar WINS Configunation page C rable De r EA Hot Jk De DHE Garey Seach Dii c CEN Figure 13 TCP IP Properties 2 step11 On the DNS Configuration page Figure 13 check Enable DNS Enter your PC name into the Host field see Finding your PC Host Name page 26 and your BSP s domain name into the Domain field Enter your BSP s domain name server s IP address into the DNS Server Search Order field and click Add If you don t know your BSP s domain name and domain name server IP address contact your BSP to get this information step12 Click OK The system will ask you to restart the computer Click Yes to complete the installation 12 SOHOware Secure Cable DSL Router Windows NT 4 0 step1 Click Start Settings Control Panel EX Control Panel Figure 14 Con
42. he same as that of the BroadGuard IP address The default BroadGuard IP is 192 168 1 1 If the PC is to be used as a DMZ Port Forwarding PC assign an address outside the 2 range i e 192 168 1 12 253 Enter the BroadGuard s subnet mask into the Subnet Mask field The default value is 255 255 255 0 Enter the BroadGuard s IP address into the Default Gateway field the default value is 192 168 1 1 Click OK Check Use the following DNS server addresses Figure 23 and enter a DNS IP address for your BSP in the Preferred DNS server field If you don t know your BSP s domain name server IP address contact your BSP to get this information DEET AI Deag Tea om gel P mr seed pts gud pour eee eet bee kie gee all nk eher ee Ha epee F peli Daan mn IP his ears die NS IF aes ER EEN D Ug ee ad Ekel DEE arvar Te sert Figure 23 Internet Protocol TCP IP Properties 2 step10 Click OK to complete the installation 18 SOHOware Secure Cable DSL Router Mac OS Using the DHCP server to assign an IP address step1 Click the Apple icon in the upper left corner of the screen and select Control Panel TCP IP The TCP IP Setup Ethernet dialog box will appear as shown in Figure 24 Lef bt duped bp pret H Ve di be pobed ke Heer k lal Beye be ey lef ke peed kp Geste Figure 24 Using the DHCP Server step2 From the Connect Via list box choose Ethernet step3 From the Configure list box choose Using DH
43. ion Configuration is simple and easy via a standard web browser Netscape Communicator 4 0 Microsoft Internet Explorer 3 0 or above Entering the BroadGuard Setup Home Page step1 Start the web browser and type 192 168 1 1 in the address field Figure 26 Press Enter F abnut blank Microsoft internet Explorer Figure 26 Entering the Setup Wizard step2 The Enter Network Password window will open Figure 27 Figure 27 Enter Network Password step3 Enter the factory default user name admin step4 Enter the factory default password 1234 step5 Click OK Note Refer to Change Password on page 31 if you wish to change the password SOHOware Secure Cable DSL Router 21 Setup Home Page DIG RU SWIDIDIYIG SOHOWAare Bes Seto Stotus Tools BroadGuard NS568090 Set up e Brosdband Coereston Locurty Settings Access Corte MZ DHCP Pert Forwarding cr change the cormet HS IP adtress teg mark and 21ttwegrd settings Check the tt connect on sed the states of the EC PPPoE Coeck Hacker Aiat Test View Current Access Carnol Settings Access Moritar Rerncte Maragersert ar download the latest NBCSOD ferrware and manual Figure 28 Setup Start Page There are three sections on the home page Setup Basic Broadband Connection Use when your BSP Broadband Service Provider requests you to enter specific settings e g MAC address authentication PPPoE host name domain name or spe
44. is functioning correctly Hacker Alert Sends a test Hacker Alert E mail Test View Current Access Control Settings The PCs in the list have been denied access to the services shown Access Monitor Shows the current Internet activities of monitored users SOHOware Secure Cable DSL Router 23 Remote Offers the capability to ping and configure your Management BroadGuard from a remote host Downloads Download the latest BroadGuard firmware and manual Click the Broadband Connection link to begin setup of your broadband connection Basic Broadband Connection DIR E VOTE ROME ee Je SOHOWAdre Sande Broadband Connection BroadGuard N5G800 Select you trosdbex ree sen mad od br deug en one of the cpocro below Cable OSL Figure 29 Broadband Connection Select the type of Broadband service that you are subscribed to Click either Cable Modem or DSL to set up the network properties There is no need to enter any information in Broadband Connection Figure 29 unless your BSP has assigned you specific Internet connection information Host Name Domain Name MAC address authentication PPPoE or a static IP Address 24 SOHOware Secure Cable DSL Router Cable Setup SOHOWAare BroadGuard N3G500 Cable Broadband Connection Vaste Fu comrearicetion betwean the NOGDOO sed Or oa diba md Service Provider the ME GR sorda to hare the came MAC add
45. le Support from SOHOware If you have any problems that you cannot resolve with the information in troubleshooting please note the following information and contact our technical support team e What you were doing when the error occurred e What error messages you saw e Whether the problem can be reproduced e The serial number of your SOHOware product USA Telephone 408 565 9888 Toll Free Technical gt 800 632 1118 ext 2828 Support Technical Support 24hrs 888 785 8222 FAX 408 565 9889 E mail support sohoware com Europe and Asia Pacific Telephone 886 3 578 3966 FAX 886 3 577 7989 E mail techsupt ndc com tw For more information on networking please visit us at www sohoware com 76 SOHOware Secure Cable DSL Router SOHOware Limited Warranty Hardware SOHOware Inc warrants its products to be free of defects in workmanship and materials under normal use and service from the date of purchase from SOHOware or its Authorized Reseller and for the period of time specified in the documentation supplied with each product Should a product fail to be in good working order during the applicable warranty period SOHOware will at its option and expense repair or replace it or deliver to the purchaser an equivalent product or part at no additional charge except as set forth below Repair parts and replacement products are furnished on an exchange basis and will be either reconditioned or new All replaced pr
46. need to set your machine as a DMZ Host How do I get mIRC to work with the BroadGuard You must expose your PC to the Internet using DMZ see DMZ page 34 or Port Forwarding see Port Forwarding page 37 How can I learn more about Internet safety issues As parents protecting children from accessing websites that contain improper content is critical Many sites discuss this issue on the Internet You can use a search engine e g www yahoo com to get those sites addresses by entering the keywords child safety The www getnetwise org website is suggested for parents to obtain more information SOHOware Secure Cable DSL Router Appendix A VPN REMOTE ACCESS Thanks to advanced technology you can use the BroadGuard to remotely access your office VPN Virtual Private Network server from your home office or build a VPN server for mobile sales people to access BroadGuard supports all PPTP packet based VPN software BroadGuard VPN Server Configuration To run a VPN server you will find using a static IP will greatly simplify your system management as the IP address never changes The PC must be exposed to the Internet using DMZ see DMZ page 34 or Port Forwarding see Port Forwarding page 37 Only one PC can be used as a VPN server as only one PC may be set as a DMZ Host or Port Forwarding machine step1 See Broadband Connection page 24 and check Specify an IP Address and then enter all IP address information into all
47. net infrastructure and determines the most efficient data transfer route e FCC Class B Certified Safe for use in residential environments Getting to Know Your BroadGuard Front Panel Users can monitor the status of the BroadGuard via the LEDs on the front panel Figure 2 soHoware en Ho bm hh 0 On n Paria Exa Cable SL 1 a 4 lt gt _ e ee ee Figure 2 Front Panel 2 SOHOware Secure Cable DSL Router LED Indicators LED Color Function Power Green Lit Power ON Unlit Power OFF Status Red Blinking On power up the BroadGuard checks for proper operation The checking procedure takes only a few seconds Lit If this LED is always lit the device is not working properly Go to Chapter 4 Troubleshooting page 47 Cable DSL Orange Lit Indicates a good connection to a cable DSL modem Blinking Data is being transmitted received to from a cable DSL modem LAN Ports 1 4 Green Orange Lit Blinking Indicates the link status and activity of 100Mbps Ethernet data Lit Blinking Indicates the link status and activity of 10Mbps Ethernet data SOHOware Secure Cable DSL Router 3 Rear Panel Ports on the Rear Panel Figure 3 a ala a LAN We Reset Power LAN Ports Cable DSL Port Reset Power 5V Figure 3 Rear Panel There are four 10 100Base T Switch port
48. oadGuard with the computer originally setup by the Cox Home technician or the computer that you registered with CoxO Home this computer will already contain your Cox Home Host Name If you have not been given a specific name leave this field blank SOHOware Secure Cable DSL Router 25 Finding your PC Host Name Windows 95 98 98SE Me step1 Right click Network Neighborhood Click Properties The Network dialog box will open Figure 31 Network 1 step2 Click on the Identification tab and write down the information contained in the Computer Name field this is your Host Name Windows NT 4 0 step1 Right click Network Neighborhood Click Properties The Network dialog box will open 26 SOHOware Secure Cable DSL Router Figure 32 Network 2 step2 Write down the information contained in the Computer Name field this is your Host Name Windows 2000 step1 Right click My Computer Click Properties The System Properties dialog box will open Figure 33 System Properties SOHOware Secure Cable DSL Router 27 step2 Click on the Identification tab and write down the information contained in the Computer Name field this is your Host Name Domain Name Some BSPs e g Cox Home may ask that this field be filled in order to make a connection to their broadband service The BroadGuard will automatically get this information from the Cox Home server If you have not been given a specific name leave this field
49. oducts and parts will become the property of SOHOware Any replaced or repaired product or part has a ninety 90 day warranty or the remainder of the initial warranty period whichever is longer SOHOware shall not be liable under this warranty if its testing and examination disclose that the alleged defect in the product does not exist or was caused by the purchaser s or any third party s misuse neglect improper installation or testing unauthorized attempt to repair or modify or any other cause beyond the range of the intended use or by accident fire lightning or other hazard Software Software and documentation materials are supplied as is without warranty as to their performance merchantability or fitness for any particular purpose However the diskette media containing the software are covered by a 90 day warranty that protects the purchaser against failure within that period Limited Warranty Service Procedures Any product 1 received in error 2 in a defective or non functioning condition or 3 exhibiting a defect under normal working conditions can be returned to SOHOware by following these steps You must prepare e dated proof of purchase e product model number amp quantity e product serial number e precise reason for return e your name address e mail address telephone fax SOHOware Secure Cable DSL Router 77 1 Inform the distributor or retailer 2 Ship the product back to the distributo
50. ons 3s pr Eta met care Ai Ethernet Card MAC Gier 00 50 05 PRICE 30 Curen NBGHOO MAC Address 00 80 06 05 01 13 M your Boa and Seetce Provider requires a Host Marne Dow ate Hamme mater therm below center Ge hedis iech Host Name A E Gem mne H Figure 30 Cable Broadband Connection MAC Address Clone Some BSPs use an Ethernet adapter s MAC address as an identifier to provide Internet service In these cases you need to clone the Ethernet adapter s MAC address to the BroadGuard At the BroadGuard disconnect the Ethernet cables from the other PCs on the network leaving only the PC with the Ethernet adapter that you wish to register connected Note If you previously used a registered MAC address to connect to your broadband service you need to use the same Ethernet adapter and clone its MAC address to the BroadGuard There are two MAC addresses shown on the screen One is the PC s Ethernet card s this PC is connected to the BroadGuard via Ethernet the other is the BroadGuard s Click Clone MAC to change the IP address of the BroadGuard to that of the Ethernet card Click Restore MAC to restore the original MAC address of the BroadGuard Note After saving the settings and restarting the BroadGuard you MUST turn your cable DSL modem off and on Host Name Some BSPs e g Cox Home may ask their subscribers to enter information into this field in order to make a connection to their broadband service Begin setting up the Br
51. ote Ifyou use an IP address other than the default 192 168 1 1 you will need to configure TCP IP settings see page 9 and related network settings Click Save and Restart to start sharing your broadband connection Security Settings Security Settings Grade BI ond AA ta protect pad D st Figure 37 Security Settings Two anti attack algorithm anti DoS Denial of Service and SPI Stateful Packet Inspection are built in to the BroadGuard so that it can protect client PCs from common hacker attacks see page 55 for an explanation of these terms With 30 SOHOware Secure Cable DSL Router BroadGuard you have a professional firewall but without the need for specialized setup configuration BroadGuard gives your network protection from many kinds of hacker attacks You can disable firewall protection by checking No In most situations we recommend you enable firewall protection If you turn on the e mail alert function whenever BroadGuard detects an Internet attack it will automatically send an e mail with an attached log file to you The info in the log file will look something like the following udp 203 69 97 139 211 55 79 155 840 port scan attack forward udp 203 69 97 139 211 55 79 155 546 port scan attack forward udp 203 69 97 139 211 55 79 155 544 port scan attack forward In the example above the first IP address 203 69 97 139 on each line indicates the address the hacker is using The second
52. ote user the icon will show activity Figure 92 Note Connections to the VPN server may take several attempts before a connection is established SOHOware Secure Cable DSL Router 71 Appendix B Glossary Ethernet One of the most common Local Area Network LAN protocols Ethernet uses a bus topology that supports a data transfer rate of 10Mbps Fast Ethernet Much the same as Ethernet but ten times faster requires upgraded network cards and hubs Protocol A protocol is a set of rules for communicating between computers 10Base T A variant of Ethernet that allows computers to be networked at 10Mbps via twisted pair cable 100Base TX A variant of Ethernet that allows computers to be networked at 100Mbps via twisted pair cable Browser A software application used to locate and display Web pages such as Netscape Navigator and Microsoft Internet Explorer DHCP Dynamic Host Configuration Protocol DHCP is a protocol that assigns temporary IP addresses to PCs Without DHCP the IP address must be entered manually at each computer Domain Name The Domain Name identifies one or more IP addresses For example the domain name of sohoware com represents about a dozen IP addresses URL Uniform Resource Locator A Uniform Resource Locator is a standard for specifying the location of an object on the Internet such as a file or a newsgroup URLs are used extensively on the World Wide Web They are used in HT
53. ou need a crossover cable the Green cable Follow the steps below to complete the hardware installation step1 step2 step3 step4 step5 Connect one end of the cable to the port marked Cable DSL on the BroadGuard Connect the other end of the cable to the Ethernet or Output port of your cable or DSL Modem Turn ON both the modem and BroadGuard Observe the Link indicator on the modem and the indicator marked Cable DSL on the front of the BroadGuard If the indicators are lit you have a good connection If the indicators are not lit then your modem requires a crossover cable this is the GREEN cable provided with the BroadGuard Disconnect the white cable and replace it with the green cable Use standard RJ 45 Ethernet cables not provided to connect your computers to the BroadGuard LAN ports Plug the power adapter into an AC power outlet Plug the other end into the BroadGuard The Power LED should light immediately Note Use only the power adapter supplied with the BroadGuard Brome MBS ee Cabla OIL Modem zl Figure 4 Connecting the BroadGuard 6 SOHOware Secure Cable DSL Router Note Only one PC should be connected to the BroadGuard during setting up Some BSPs use an Ethernet adapter s MAC address as an identifier to provide Internet service In these cases you need to clone the Ethernet adapters MAC address to the BroadGuard At the BroadGuard disconnect the Ethernet cables from
54. our network outside the protection of the firewall and allows them to respond to requests from the Internet e g for multiple simultaneous connections to a PPTP server e Port Forwarding Provides enhanced security The firewall accepts IP packets addressed to a specific port number Port Forwarding then re writes the header information on the packets and forwards them to the internal server providing the actual service The reply packets from the internal server are re written to make it appear that they came from the firewall e Access Control Provides management control of Internet application use The feature allows parents employers to monitor what their children are doing or to see how the network connection is being used e Flexible and Expandable Connects directly to computers to an Ethernet hub for network expansion or to a SOHOware NetBlaster for wireless network access e Virtual Private Network VPN Allows Internet security protocol packets such as PPTP to pass through the BroadGuard so that a remote PC can securely access a server located on your network or allows a PC behind the BroadGuard to remotely access a VPN server e Multimedia Streaming Protocol Multimedia data is streamed at a constant rate for best enjoyment of Real Player QuickTime IP TV Video on Demand and Video Phone e Intelligent Routing Built in RIP I amp II routing protocols The BroadGuard automatically learns the outside Inter
55. ple can login and leave messages Apart from public message areas a BBS may provide archives of files personal electronic mail and any other services or activities of interest to the bulletin board s system operator the sysop News Forum An electronic meeting place where people can exchange news or discuss common interests Hacker A person who enjoys exploring the details of programmable systems and how to stretch their capabilities as opposed to most users who prefer to learn only the minimum necessary Recently misused to describe a Cracker See the next item Cracker An individual who attempts to gain unauthorized access to a computer system These individuals are often malicious Contrary to widespread myth cracking does not usually involve some mysterious leap of hackerly brilliance but rather persistence and the dogged repetition of a handful of fairly well known tricks that exploit common weaknesses in the security of target systems Firmware Software stored in read only memory ROM or programmable ROM PROM Easier to change than hardware but harder than software stored on disk Firmware is often responsible for the behavior of a system when it is first switched on 74 SOHOware Secure Cable DSL Router Specifications Standards Compliance IEEE 802 3 10Base T amp 100Base TX Certifications FCC Class B VCCI CE Standards Compliance Compression TCP IP RFC 1144 DHCP 1533 1541 DNS 1
56. r retailer with prepaid freight The purchaser must pay the shipping freight from the distributor retailer to SOHOware Any package sent C O D Cash On Delivery will be refused 3 Charges Usually RMA Returned Material Authorization items will be returned to the purchaser via Airmail prepaid by SOHOware If returned by another carrier the purchaser will pay the difference A return freight and handling fee will be charged to the purchaser if SOHOware determines that there was No Problem Found or that the damage was caused by the user Warning SOHOware is not responsible for the integrity of any data on storage equipment hard drives tape drives floppy diskettes etc We strongly recommend that our customers backup their data before sending such equipment in for diagnosis or repair Services after Warranty Period After the warranty period expires all products can be repaired for a reasonable service charge The shipping charges to and from the SOHOware facility will be borne by the purchaser Return for Credit In the case of a DOA Dead on Arrival or a shipping error a return for credit will automatically be applied to the purchaser s account unless otherwise requested Limitation of Liability All expressed and implied warranties of a product s merchantability or of its fitness for a particular purpose are limited in duration to the applicable period as set forth in this limited warranty and no warranty will be
57. re 80 64 SOHOware Secure Cable DSL Router vest ewes ken S eg Bessen team en mgr pen buik me Pre aer ch Figure 80 Internet Connection step5 Highlight the Local Area Connection with the IP address in the 192 168 1 2 192 168 1 254 range Click Next The IP Address Assignment box will open Figure 81 Figure 81 IP Address Assignment step6 Check From a specified range of addresses Click Next The Address Range Assignment box will open Figure 82 SOHOware Secure Cable DSL Router 65 end Fig mier des ra Reap et re 1 Mia mp EET agua ars Eed dt ailes price ag der pprap OT greg poker E mr reer D F Ire al e alert rr id spore sega Fa ES EN EN Figure 82 Address Range Assignment step7 Click Next The New Address Range box will open Figure 83 her Address na Tesa edge akhbar gel stha e ening iP addrece or the marba ci adit in des erge Siet iP seekat 1 10 1 3 EralEskhect i 16 1 a Ever of pasee 5 L el ee Figure 83 New Address Range step8 In the Start IP address field enter a start IP address in the range 192 168 1 2 192 168 1 254 Enter an end IP address in the same range In the example in Figure 83 we allow five remote users to access the VPN server We recommend the number of addresses is five or less to prevent influencing the throughput of the BroadGuard Click OK to save the settings You will be returned to the Address Range Assignment box Figure 84
58. reated icon The Connect To dialog box will open Figure 75 Figure 75 Connect To step16 Enter your User name Password and the Internet IP address of the VPN server Click Connect Note Connecting to the VPN server may take several attempts before a connection is established step17 The Connection Established dialog box will open Figure 76 62 SOHOware Secure Cable DSL Router Conrecien rabirrhed Figure 76 Connection Established Windows 2000 VPN Server Setup Note You must have two Network Interface Cards installed in your Windows 2000 server step1 Click Start Programs Administrative Tools Routing and Remote Access Figure 77 Routing and Remote Access step2 In the Routing and Remote Access box Figure 77 right click the server name and choose Configure and Enable Routing and Remote Access The Routing and Remote Access Server Setup Wizard welcome screen will open Click Next and the Common Configurations dialog box will open Figure 78 SOHOware Secure Cable DSL Router 63 tad awl onde fe E Serri Beleg Winer Figure 78 Common Configurations step3 Check Virtual private network VPN server and click Next The Remote Client Protocols dialog box will open Figure 79 Figure 79 Remote Client Protocols step4 Make sure TCP IP is in the Protocols list then check Yes all of the available protocols are on this list Click Next and the Internet Connection dialog box will open Figu
59. s for linking computers or other Ethernet devices e g a hub switch When linking to other networking devices we need a cross over cable or an uplink port on that device An Ethernet 10Base T port is used for linking to the Ethernet port of a cable DSL modem Re start the BroadGuard by pressing the Reset button for longer than 5 seconds If you forget the password for the Setup Wizard restore the default settings by pressing the reset button for longer than 13 seconds Enter the default users name admin and password 1234 to regain access to the BroadGuard Used to connect the external power adapter supplied with the BroadGuard Note that only the supplied adapter should be used 4 SOHOware Secure Cable DSL Router Chapter 2 Installation What You Need Before installing the SOHO ware BroadGuard you need the following Any Network Operating System with e TCP IP installed e Internet browser installed e 10Mbps 100Mbps or 10 100Mbps Ethernet network adapters installed Broadband Internet Account You should be subscribed to a broadband Internet service and have a cable DSL modem with a 10Base T interface Know whether your Public IP address is fixed or is dynamically assigned ask your Broadband Service Provider 1 If your IP address is dynamically assigned most common the BroadGuard will automatically get a public IP address from your BSP through the modem You will not need to do any IP address configuration
60. s on the intema Comp ers Protocol Pen Nader PCs P Adaess fe 3 192 168 92 fea or el steck Fe mie sa Ter si E fo 2 3 p iro sj F 1210 52h es E awe sp Ter f peia sb rra p 192 16 ef rra E 192 16 hesi E miss Fa E manb m Ce 4 Figure 44 Port Forwarding An increasing number of web applications games java applets etc need access to some service on your local computer in order to function properly Since this access may pose a security problem the machine providing the service should not be directly connected to the Internet Port Forwarding provides an almost ideal solution to this access problem On the firewall IP packets that come in to a specific port number are re written and forwarded to the internal server providing the actual service The reply packets from the internal server are re written to make it appear that they came from the firewall e Port forwarding routes all packets intended for one forwarding port on the gateway from the external networks to a specified port on one of the internal machines after a little re writing of headers e In the Protocol column choose either TCP or UDP from the drop down list e Enter the port number you wish to open in the Port Number field Well known ports include 7 Echo 21 FTP 23 TELNET 25 SMTP 53 DNS 79 Finger 80 8080 HTTP 110 POP3 113 Authentication Service 119 NNTP 161 SNMP 162 SNMP Trap 1723 PPTP SOHOware
61. soHoware BroadGuard Secure Cable DSL Router User s Guide Model No NBG800 Rev A2 May 2001 SOHOware Inc Tel 1 408 565 9888 Fax 1 408 565 9889 SOHOware Europe Tel 44 1489 611 788 Fax 44 1489 611 787 SOHOware Website www sohoware com Technical Support E mail support sohoware com Toll Free Technical Support US only 800 632 1118 ext 2828 Technical Support Call Center 24hrs 1 888 785 8222 Fax 1 408 565 9889 TRADEMARKS SOHO ware is a trademark of SOHOware Inc All other names mentioned in this document are trademarks registered trademarks of their respective owners SOHO ware provides this document as is without warranty of any kind neither expressed nor implied including but not limited to the particular purpose We may make improvements and or changes in this manual or in the product s and or the program s described in this manual at any time This document could include technical inaccuracies or typographical errors FCC WARNING This eguipment has been tested and found to comply with the limits for a Class B digital device pursuant to part 15 of the FCC Rules These limits are designed to provide reasonable protection against harmful interference in a residential installation This equipment generates uses and can radiate radio frequency energy and if not installed and used in accordance with the instructions may cause harmful interference to radio communi
62. t d you mad Lo beerinate the conte on Chock Now Discornoct_ Figure 47 PPPoE Check Either of the following screens Figure 48 or Figure 49 indicate that PPPoE is operating correctly DIR Oe EMERY Je SOHOWare BroadGuard L Ene Figure 48 PPPoE Service Running 40 SOHOware Secure Cable DSL Router Be p pm frenn Te E d 9 A d k A drr Zb A Mm e Ei d o Figure 49 PPPOE Check Successful If you see a screen similar to the following Figure 50 it means that your BSP s server may not be operating or something could be wrong with your DSL modem e g a loose cable either on the DSL modem or the BroadGuard port Wie Figure 50 PPPoE Check Unsuccessful A screen such as that shown in Figure 51 indicates that you entered a wrong username login password or service name Go to the DSL broadband connection setup page to check them again SOHOware Secure Cable DSL Router 41 a El PS DE w s EE TEN HE wi id d 2 e min Emer Ar AA FT LOF Fiat eae mas Fit tei Gear vrind EE bi KAR rz Ham FiF Tests BLA tas Figure 51 Authentication Failed 42 SOHOware Secure Cable DSL Router Hacker Alert Test 339 EC SY DY SOHO l are BreadGuard NSGSOO TN Hacker Alert Test Fress the Alert Tea bution te sutereatkcelly geruste an emal D cont te the sedeer specdud in the Hacker Attach E nad Alate ut Aur Tes Figure 52 Hacker Alert T
63. te Networking Adapter item in the Network box indicates that it has been successfully installed DSen TEPAP 2 Stone 10100 PO Hediste Adastal Pl Figure 69 Network Windows may ask for the Windows CD ROM Insert the Windows CD and click OK The system will ask you to restart your computer Remove the CD and click Yes to complete the installation After restarting click My Computer Dial Up Networking The Welcome to Dial Up Networking dialog box will open Figure 70 SOHOware Secure Cable DSL Router 59 Figure 70 Welcome to Dial Up Networking step9 Click Next The Make New Connection dialog box will open Figure 71 Figure 71 Make New Connection 1 step10 Type a descriptive name for the connection Choose Microsoft VPN Adapter from the Select a device dropdown list Click Next 60 SOHOware Secure Cable DSL Router Figure 72 Make New Connection 2 step11 Enter the Internet IP Address of the VPN server you want to connect to and click Next Figure 73 Make New Connection 3 step12 Click Finish to complete the settings The system may ask you to install Microsoft Dial Up adapter Click OK to continue step13 Windows may ask for the Windows CD ROM Insert your Windows CD and click OK step14 In the Dial Up Networking folder Figure 74 you should have a new VPN connection SOHOware Secure Cable DSL Router 61 TIEN 1139 113 717 Figure 74 Dial Up Networking step15 Double click the newly c
64. the other PCs on the network leaving only the PC with the Ethernet adapter that you wish to register connected Note If you previously used a registered MAC address to connect to your broadband service you need to clone this Ethernet adapter s MAC address to the BroadGuard see MAC Address Clone page 25 Network Extension If you want to connect more users to your network or use a wireless connection through the BroadGuard refer to the following section Wired LAN Extension This section describes how to extend your BroadGuard LAN using one of our SOHOware products e g a 10Mbps or 10 100Mbps Ethernet Hub Switch Easy two step installation procedure step1 Set the Uplink port of the external hub switch to the Uplink position step2 Use standard RJ 45 Ethernet cable to connect any BroadGuard LAN port to the Uplink port of the hub switch If the device does not feature an Uplink switch use a cross over cable Set to Uplink 10Mbps or 10 100Mbps Ethernet Hub Switch BroadGuard Standard RJ 45 y Ethernet Cable Figure 5 Wired LAN Extension SOHOware Secure Cable DSL Router 7 Wireless LAN Extension This section describes how to extend your BroadGuard LAN to a CableFREE NetBlaster II Wireless hub Just connect any normal port of the BroadGuard to the CableFREE NetBlaster II with standard RJ 45 Ethernet cable for more SOHOware NetBlaster II information visit www sohoware com CableFPREE hNatfaaier 11 Wir
65. to 254 Check the IP Address via the View DHCP IP Address Assignments page If the IP address assignments are not within the stated range follow the steps below to rebuild the setup Windows 95 98 Me step1 Click Start Run type winipcfg and click OK Figure 58 Run zix i Type the name of a program folder document or Internet 3 resource and Windows will open it for you Cancel Browse Figure 58 Run Open in ocfg step2 The IP Configuration dialog box will open Figure 59 48 SOHOware Secure Cable DSL Router Ki IP Configuration x Ethernet Adapter Information REALTEK RTL8129 Fast Etherne Adapter Address 00 80 C6 F9 05 18 IP Address 203 70 128 34 Subnet Mask 255 255 255 0 Default Gateway 203 70 128 250 OK Renew Release All Renew All More Info gt gt Figure 59 IP Configuration step3 Select the network adapter you use to connect to the BroadGuard Click Release step4 Click Renew to retrieve new information IP address subnet mask and default gateway address from the BroadGuard Click OK to save the changes and exit the program step5 Goto DHCP IP Address Assignments see Figure 43 page 36 Click Refresh Windows NT 4 0 step1 Click Start Programs Command Prompt Command Prompt Microsoft R Windows NICIM CC Copyright 1985 1996 Microsoft Corp C Wipconfig release Windows NT IP Configuration IP address 192 168 1 10 successfully released for a
66. trol Panel step2 Double click the Network icon Figure 14 The Network dialog box will open Figure 15 Y NWLink IPX SPX Compatible Transport Y NwLink NetBIOS Figure 15 Network step3 On the Protocols card select TCP IP Protocol and click Properties Figure 15 SOHOware Secure Cable DSL Router 13 step4 Microsoft TCP IP Properties KAES IP Address DNS WINS Address DHCP Relay Routing An IP address can be automatically assigned to this network card by a DHCP server If your network does not have a DHCP server ask your network administrator for an address and then type it in the space below Adapter ln NDC 10 100 Fast Ethemet PCI Adapter MX A Mx98713 gt IP Aadress Buber ERK Defaulbiaatevvay Advanced coca as Figure 16 Microsoft TCP IP Properties 1 On the P Address page Figure 16 check Obtain an IP address from a DHCP server Click OK and go to step 8 If you want to assign a static IP to a PC go to step 5 Note The BroadGuard operates as a DHCP server it automatically assigns an IP address to connecting computers and must be the only DHCP server on the network step5 step6 step7 On the P Address page Figure 16 select Specify an IP address and assign an IP address to your PC in the ZP Address field If the PC will be running with Access Control enabled assign an IP to the PC from the range 2 1 1 i e 192 168 1 2
67. uding one with the BroadGuard s PPPoE program SOHOware Secure Cable DSL Router 53 Chapter 5 FAQs 54 How many PCs simultaneously accessing the Internet can be supported by the BroadGuard 253 PCs may simultaneously access the Internet via the BroadGuard Where should we install the BroadGuard on our network In a typical environment the BroadGuard is installed between a cable DSL modem and LAN Connect the BroadGuard to the cable DSL modem with Cat 5 RJ 45 cable Plug one end of the cable into the WAN port of the BroadGuard and the other end into the Ethernet port of the cable DSL modem Does the BroadGuard support IPX or AppleTalk No TCP IP is the protocol standard for the Internet and has become the global standard for communications IPX a NetWare communications protocol used only to route messages from one node to another and AppleTalk a communications protocol used on Apple and Macintosh networks can be used for LAN to LAN connections but those protocols cannot connect from WAN to LAN I m using Linux Does the BroadGuard support this operating system Yes The BroadGuard is compatible with any operating system Does the BroadGuard support 100Mbps Fast Ethernet Yes Both 10 and 100Mbps Fast Ethernet are supported Does the BroadGuard support ICQ send file Yes with the following setting ICQ menu gt Preferences gt Connections tab gt check I am behind a firewall or proxy and set the firewall time
68. utput Filters Once again remove all filters from the list then click OK Click OK to close the window and return to the Routing and Remote Access window Click OK to save and close the Routing and Remote Access window These changes make it possible to run any Internet application through this server That completes the VPN server setup The next stage is to set user access permissions Set User Permissions step1 Click Start Settings Control Panel In Control Panel double click the Administrative Tools icon The Administrative Tools window will open Figure 89 SOHOware Secure Cable DSL Router 69 TEEN im Aaa Figure 89 Administrative Tools step2 Double click Computer Management Expand System Tools Local Users and Groups Click Users to show all users lists in Computer Management Figure 90 A ER SI EEN f Figure 90 Computer Management step3 Double click the name of the user you want to set permissions for The Properties box will open Figure 91 70 SOHOware Secure Cable DSL Router den Pares Figure 91 User Properties step4 On the Dial in card check either Allow access or Control access through Remote Access Policy Which one you use depends on your security policy Click OK to save and complete the setting An icon will appear in the Network and Dial Up Connections folder Figure 92 Figure 92 Network and Dial Up Connections step5 When there is a live connection from a rem
69. words Erter the full domain name of the website or just enter a keyword Site 1 Site 2 Site 3 Site 4 Site Site 6 Site 7 Site 8 Site 9 Site 10 Figure 40 Globally Disallowed Websites Keywords This list will be applied to all restricted users Enter the full domain name of the website or just enter a keyword Click Save to save the new list Access Control may be used to restrict use of the following Internet applications E mail File Downloading Checking File downloading stops use of the FTP protocol and prevents users from downloading files from an FTP site but they will still be able to download files from a website News Forum Bulletin Board Service Web Surfing You may control Internet access of up to 10 PCs on your home office network 1 Choose the static IP address for the PC from the dropdown list 2 Check the boxes for the applications you wish to deny to this IP address 3 Click Save SOHOware Secure Cable DSL Router 33 DMZ SOHOUNMITE pan a EF hitmi har a DMI PE st wrd iha P a et Van bi bid E adn da FCD Fed D Adres kian White De asi rk D vie TERE pp Sri kru roe E E k aa ls IE IE Gi La i f ee E EFF e e j E E GC FEE EE EE paa B n Fee Figure 41 DMZ Usually all PCs connected to the BroadGuard are protected from Internet intruders by a built in firewall For some kinds of Internet applications for example Internet interactive games video conf
70. ype Exit step5 Go to DHCP IP Address Assignments see Figure 43 page 36 Click Refresh 4 Entering a URL or IP address results in a timeout error Follow the steps below to solve this problem step1 Check if other PCs can connect to the network without problems If they can ensure the problem PC s IP settings are correct IP address subnet mask default gateway and DNS step2 Check the BroadGuard Internet settings IP address subnet mask default gateway and DNS in Status Figure 64 If there is no information shown on the screen it means that your BSP has a problem SOHOware Secure Cable DSL Router 51 3 Internet It Subnet Mask 255 266 255 256 Gateway IP 5127611750 DNS IP 168 96 190 BSP Doral Nome NBG800 Versies 1 11 404 IP Address 1920 82 Submet Mask MS 5 XA MAC TA praag Address E ee O 6133 Firewall Ae ee Figure 64 Status 5 I can t view a PC s name or its IP address in the DHCP IP Address Assignments page though it can still access the Internet When your PC asks the BroadGuard for an IP address it issues an IP address with a validity period of three days If you turn off the BroadGuard and turn it on within that three day period your PC will not attempt to renew the IP address As the previous IP assignment table will be cleared when the BroadGuard was turned off your IP address will not be shown in the table To renew the IP address for Windows 95 98 Me go to pag

Updated NBG800 User Manual

Contents

Download Pdf Manuals

Related Search

Related Contents