Home

SMC Networks SMC7804WBRA User's Manual

1. Printers Regional SCSI Adapters Server Services E founds System Tape Devices Telephony UPS 3 7 CONFIGURING CLIENT PC 3 8 In the Network window Select the Protocols tab Double click TCP IP Protocol When the Microsoft TCP IP Properties window open select the IP Address tab In the Adapter drop down list be sure your Ethernet adapter is selected Tf Obtain an TP address automatically is already selected your computer is already configured for DHCP If not select this option and click Apply Click the DNS tab to see the primary and secondary DNS servers Record these values and then click Remove Click Apply and then OK Y7 NetBEUI Protocol Microsoft TCP IP Properties Winbows NT 4 0 8 Windows may copy some files and will then prompt you to restart your system Click Yes and your computer will shut down and restart TCP IP Configuration Setting Default Gateway Primary DNS Server Secondary DNS Server Host Name Disable HTTP Proxy You need to verify that the HTTP Proxy feature of your web browser is disabled This is so that your browser can view the Barricade s HTML configuration pages Determine which browser you use and refer to Internet Explorer on page 3 4 Obtain IP Settings from Your Barricade Now that you have configured your computer to connect to your Barricade it needs to obtain new
2. 3 121682 re 3 Tr Acs 4 m2 rr Sf Fr For example if you set Type Public Port to TCP 80 HTTP or web and the Private IP Port to 192 168 2 2 80 then all HTTP requests from outside users will be transferred to 192 168 2 2 on port 80 Therefore by just entering the IP address provided by the ISP Internet users can access the service they need at the local address to which you redirect them The more common TCP service ports include HTTP 80 FTP 21 Telnet 23 and POP3 110 A list of ports is maintained at the following link http www iana org assignments port numbers Note The WAN interface should have a fixed IP address to best utilize this function See DDNS on page 4 57 for using the same domain name even though your IP address changes each time you log into the ISP 4 33 CONFIGURING THE BARRICADE 4 34 Special Application Some applications require multiple connections such as Internet gaming video conferencing and Internet telephony These applications may not work when Network Address Translation NAT is enabled If you need to run applications that require multiple connections use these pages to Wireless NAT Routing Firewall SNMP ADSL ODNS UPnP Toots Status LA Special Applications Some applicabons regure multg e connectons such as interne gaming ideo Conferencing Internet and offers These applications cannot work when Network Address Transiation NAT is enabl
3. Connecting Cable Type MDI X Straight through MDI Crossover ETHERNET CABLE Pin Assignments With 100BASE TX 10BASE T cable pins 1 and 2 are used for transmitting data and pins 3 and 6 for receiving data RJ 45 Pin Assignments Pin Number Assignment 1 Txt 2 Tx 3 Rx 6 Rx 1 The and signs represent the polarity of the wires that make up each wire pair Straight Through Wiring If the port on the attached device has internal crossover witing MDI X then use straight through cable Straight Through Cable Pin Assignments End 1 End 2 1 Tx 1 Ix 2 Tx 2 Ix 3 Rx 3 Rx 6 Rx 6 Rx B 3 CABLES Crossover Wiring If the port on the attached device has straight through wiring MDI use crossover cable Crossover Cable Pin Assignments End 1 End 2 1 Tx 3 Rx 2 Ix 6 Rx 3 Rx 1 Ix 6 Rx 2 Tx B 4 ADSL CABLE ADSL Cable Use standard telephone cable to connect the RJ 11 telephone wall outlet to the RJ 45 ADSL port on the ADSL Router Caution Do not plug a phone jack connector into an RJ 45 port Specifications Cable Types and Specifications Cable Type Connector ADSL Line Standard Telephone Cable RJ 11 Wiring Conventions For ADSL connections a cable requires one pair of wires Each wire is iden
4. Direct connection on the same subnet S Static route R RIP Routing Information Protocol assigned route I ICMP Internet Control Message Protocol Redirect route Network Destination IP address Address Netmask The subnetwork associated with the destination This is a template that identifies the address bits in the destination address used for routing to specific subnets Each bit that corresponds to a 1 is part of the subnet mask number each bit that corresponds to 0 is part of the host number Gateway The IP address of the router at the next hop to which frames are forwarded Interface The local interface through which the next hop of this route is reached Metric When a router receives a routing update that contains a new or changed destination network entry the router adds 1 to the metric value indicated in the update and enters the network in the routing table 4 39 CONFIGURING THE BARRICADE Firewall 4 40 The Barricade Router s firewall inspects packets at the application layer maintains TCP and UDP session information including time outs and the number of active sessions and provides the ability to detect and prevent certain types of network attacks SMC System WAN Security Settings Firewall LAN Wireless NAT The Barricade provides extensive firewal protection ty restricting ccemecton parameters to brt the Rou isk of hacker atiack and defending against a wide array of common
5. LAN Wireless NAT Securlty Log DHCP Client Log Routing View any attermets that have Deen made do gain access View informados on LAN DHCP clients currertty e PAN to your network 10 De Barrado SNMP 02 57 09 192 168 2 3 1p 192 168 2 100 mac 00 04 23 7E ADSL 01 31 56 192 168 2 3 1p 192 168 2 101 mac 00 0A E9 0 01 02 2002 01 56 39 192 160 2 3 1p 192 160 2 102 mac 00 90 CC 5 DONS 01 02 2002 01 20 17 192 168 2 3 UPnP 01 02 2002 00 56 09 192 168 2 3 Tools 01 01 2002 21 53 30 192 160 2 3 Status 03 01 2002 21 53 19 User trom 192 20 20 44 192 160 2 3 10 20 17 56 192 168 2 3 in 4 62 ADVANCED SETUP The following items ate included on the Status page Item Description INTERNET Displays WAN connection type and status Click the Connect button to connect to your ISP GATEWAY Displays system IP settings as well as DHCP Server and Firewall status INFORMATION Displays the number of attached clients the firmware versions the physical MAC address for each media interface and for the Barricade as well as the hardware version and serial number Security Log Displays illegal attempts to access your network Save Click on this button to save the security log file Clear Click on this button to delete the access log Refresh Click on this button to refresh the screen DHCP Client Log Displays information on DHCP clients on your network 4 63 CONFIGURING THE BARRICADE Finding the MA
6. If your ISP uses Protocols PPPoA or PPPoE you will need to enter the username password and DNS Server address supplied by your ISP If your ISP uses Protocol RFC1483 Routed you will need to enter the IP address Subnet Mask Default Gateway and DNS Server address supplied by your ISP Note By default 192 168 2 1 is set for the DNS Server address this needs to be changed to reflect your ISP s DNS Server address Click NEXT to continue SETUP WIZARD Confirm The Confirm page shows a summary of the configuration parameters Check ADSL operation mode WAN Network Layer Parameters WAN and ISP parameters are correct You have filled in the following Configuration Parameters ADSL operation mode WAN ISP vee PPPOE Netwurk Layer Parameters WAN 0000 ISP Parameters DHCP Parameters Parameter Description ADSL Operation Mode WAN ISP The type of ISP you have selected Protocol Indicates the protocol used VPI VCI Virtual Path Identifier VPI and Virtual Circuit Identifier VCD AALS Encapsulation Shows the packet encapsulation type Go to page 4 20 for a detailed description Network Layer Parameters WAN IP Address WAN IP address only displayed if you have static IP Subnet Mask WAN subnet mask only displayed if you have static IP Default Gateway WAN gateway only displayed if you have static IP DNS Server The IP address of the DNS server ISP Parameters Username The IS
7. Primary Server 132 1634102 North America z Secondary Server 192 541 41 North Amenca z 600 For accurate timing of log entries and system events you need to set the time zone Select your time zone from the drop down list If you want to automatically synchronize the ADSL router with a public time server check the box to Enable Automatic Time Server Maintenance Select the desired servers from the drop down menu 4 15 CONFIGURING THE BARRICADE Password Settings Use this page to change the password for accessing the management interface of the Barricade SMC System Password Settings Set a password to restrict management access to the Barricada Ifyou want to manage the Barricade from a remote location outside of the local network you must also spectty ihe P address ofthe WAN remate PC You can do this in the Firewall Access Control manu LAN Wireless Current Password teeta ot 10 un Odie Time 0 NO Time Oud New Password Re Enter Password for Verticaton Status it oeo Passwords can contain from 3 12 alphanumeric characters and are case sensitive Note If you lost the password or you cannot gain access to the user interface press the blue reset button on the rear panel holding it down for at least five seconds to restore the factory defaults The default password is smcadmin Enter a maximum Idle Time Out in minutes to define a maximum period
8. of time for which the login session is maintained during inactivity If the connection is inactive for longer than the maximum idle time it will perform system logout and you have to log in again to access the management interface Default 10 minutes ADVANCED SETUP Remote Management By default management access is only available to users on your local network However you can also manage the Barricade from a remote host by entering the IP address of a remote computer on this screen Check the Enabled check box and enter the IP address of the Host Address and click APPLY SMC System Remote Management Set ne remote management of the Barricade Ifyou want to manage the Barricade from a remote location outside of the local network you must also specit the IP address of the remote PC fa Host Asoress ENT k ik ib ibh i G Status Note Ifyou check Enable and specify an IP address of 0 0 0 0 any remote host can manage the Barricade For remote management via WAN IP address you need to connect using port 8080 Simply enter WAN IP address followed by 8080 for example 212 120 68 20 8080 4 17 CONFIGURING THE BARRICADE DNS Domain Name Servers DNS are used to map a domain name e g www smc com with the IP address e g 64 147 25 20 Your ISP should provide the IP address of one or more Domain Name Servers Enter those addresses on this page and click APPLY SMC System A Dom
9. 00 50 e4 00 2006 earthen aat Click the lock 10 prevent further changes 4 Your new settings are shown on the TCP IP tab Verify that your IP Address is now 192 168 2 xxx your Subnet Mask is 255 255 255 0 and your Default Gateway is 192 168 2 1 These values confirm that your Barricade is functioning 5 Close the Network window Now your computer is configured to connect to the Barricade Disable HTTP Proxy You need to verify that the HTTP Proxy feature of your web browser is disabled This is so that your browser can view the Barricade s HTML configuration pages The following steps are for Internet Explorer Internet Explorer 1 Open Internet Explorer and click the Stop ETT rite edit vie G A 09 About Internet Explorer button Click Explorer Preferences License Agreement f Da i 2 Inthe Internet Explorer Preferences window Pai mes gt i x il Hide Explorer xH under Network select Proxies Hide Others eH E E Quit Explorer aQ 3 17 CONFIGURING CLIENT PC 3 18 3 Uncheck all check boxes and click OK 0980 Internet Explorer Preferences If you are accessing the Internet from a private network you can set gateways to allow Internet access Contact your network manager Security Security Zones for more information Note These settings are shared with other Ratings applications through Internet Config Advanced Use Proxy Se
10. 14 Disable EVP Proxy icono cid ie 3 14 Obtain IP Settings from Your Barricade ooo oooooo 3 14 Configuring Your Macintosh Computer oooooccccocooooom 3 16 Disable HTTP Proxy jaye A Ed aah 8s 3 17 vil TABLE OF CONTENTS 4 viii Configuring the Barricade oooooooooo m 4 1 Navigating the Management Interface 0 000 eee o 4 2 Making Configuration Changes 0 00 00 0 cece eee eee 4 2 Setup Wizatd sass toy yeas pets mee eis heey dee tee a 4 3 Time Zone saaan aise oer hea ene ave eee ee a eae 4 3 Parameter Setting os yediegae Yee o S 4 4 Con ft oie ak sche tcl ahaa deca wide Sa Rete ob Se aaa es 4 5 Parameter Setting Country or ISP Not Listed 4 7 ISP use RFC1483 Bridging Parameter Setting 4 8 ISP use PPPoE Parameter Setting 00000 4 10 ISP use PPPoA Parameter SettidQ oooo oooooommmm 4 11 ISP use RFC1483 Routing Parameter Setting 4 12 Advanced Setup 3 issues tae noe nae a iia 4 13 SYStEM ests tt eee toe a IA i AR 4 15 WAN 00 o Pehle 4 19 LAN o te ea hoteles 4 24 Witt h 4 25 NAT e dle face hehe EEI EU 4 31 ROUND ea aes 4 35 Erevan a abe de cas 4 40 SNMP oir Ren area s ated ena be Soe eee 4 51 ADSD cites sh teens a da sort oi 4 53 DDNS eie Se ke one A a EPS ES 4 57 DPP rai Variado 4 58 VOS A A AA eat EE 4 59 STATUS A A A lab 4 62 Finding the MAC address of a Network Card oooooommmo o o 4 64 Windows 98 ME ira
11. ao or SS a N T E gt hub or switch Figure 2 4 Installing without a Splitter INSTALLATION Attach to Your Network Using Ethernet Cabling The four LAN ports on the Barricade auto negotiate the connection speed to 10 Mbps Ethernet or 100 Mbps Fast Ethernet as well as the transmission mode to half duplex or full duplex Use RJ 45 cables to connect any of the four LAN ports on the Barricade to an Ethernet adapter on your PC Otherwise cascade any of the LAN ports on the Barricade to an Ethernet hub or switch and then connect your PC or other network equipment to the hub or switch When inserting an RJ 45 connector be sure the tab on the connector clicks into position to ensure that it is properly seated Warning Do not plug a phone jack connector into an RJ 45 port This may damage the Barricade Notes 1 Use 100 ohm shielded or unshielded twisted pair cable with RJ 45 connectors for all Ethernet ports Use Category 3 4 or 5 for connections that operate at 10 Mbps and Category 5 for connections that operate at 100 Mbps 2 Make sure each twisted pair cable length does not exceed 100 meters 328 feet Connect the Power Adapter 2 8 Plug the power adapter into the power socket on the rear of the Barricade and the other end into a power outlet Check the power indicator on the front panel is lit If the power indicator is not lit refer to Troubleshooting on page A 1 In case of a power input
12. connection status screen click Properties 5 Double click Internet Protocol TCP IP 6 If Obtain an IP address automatically and Obtain DNS server address automatically are already selected your computer is already configured for DHCP If not select this option Disable HTTP Proxy You need to verify that the HTTP Proxy feature of your web browser is disabled This is so that your browser can view the Barricade s HTML configuration pages Determine which browser you use and refer to Internet Explorer on page 3 4 Obtain IP Settings from Your Barricade 3 14 Now that you have configured your computer to connect to your Barricade it needs to obtain new network settings By releasing old DHCP IP settings and renewing them with settings from your Barricade you can verify that you have configured your computer correctly 1 On the Windows desktop click Start Programs Accessories Command Prompt Winpows XP 2 In the Command Prompt window type IPCONFIG RELEASE and press the ENTER key 3 Type IPCONFIG RENEW and press the ENTER key Verify that your IP Address is now 192 168 2 xxx your Subnet Mask is 255 255 255 0 and your Default Gateway is 192 168 2 254 These values confirm that your ADSL router is functioning Type EXIT and press the ENTER key to close the Command Prompt window Your computer is now configured to connect to the Barricade 3 15 CONFIGURING C
13. failure the Barricade will automatically restart and begin to operate once the input power is restored CHAPTER 3 CONFIGURING CLIENT PC After completing hardware setup by connecting all your network devices you need to configure your computer to connect to the Barricade See Windows 98 Me on page 3 2 Windows NT 4 0 on page 3 7 Windows 2000 on page 3 11 Windows XP on page 3 14 or Configuring Your Macintosh Computer on page 3 16 depending on your operating system 3 1 CONFIGURING CLIENT PC TCP IP Configuration To access the Internet through the Barricade you must configure the network settings of the computers on your LAN to use the same IP subnet as the Barricade The default IP settings for the Barricade are IP Address 192 168 2 1 Subnet Mask 255 255 255 0 Note These settings can be changed to fit your network requirements but you must first configure at least one computer to access the Barricade s web configuration interface in order to make the required changes See Configuring the Barricade on page 4 1 for instruction on configuring the Barricade Windows 98 Me You may find that the instructions in this section do not exactly match your version of Windows This is because these steps and screen shots were created from Windows 98 Windows Millennium Edition is similar but not identical to Windows 98 1 On the Windows desktop click Sta
14. in agbon to control and data Yansfor among networknd devices in the home Office and Routing evormbaro in between Firewall SNMP ADSL ee Enable Disable DONS UPnP Tools Status ADVANCED SETUP Tools Use the Tools menu to backup the current configuration restore a previously saved configuration restore factory settings update firmware and reset the Barricade Configuration Tools Choose a function and click Next SMC System WAN Configuration Tools LAN Wireless Use me Backup too to save the Baricado s current configuration to a Me named NAT TOO4WBRA_baciup Dirt on your PC You can then use the Restore toot to restore he saved poke configuration to the Barricade Abernatirety you can use the Restore to Factory Detauts tool do force ES ca the Barricade to perform a power reset and restore the original factory settings rewal SNMP Backup Router Cor guraton ADSL C Restore from saved Configuration fie 7804WERA_backup bin DONS Restore Bamicade to Factory Detauts UPnP Tools Newt gt gt Status Backup allows you to save the Barricade Router s configuration to a file Restore can be used to restore the saved backup configuration file Restore to Factory Defaults resets the Barricade to the original settings You will be asked to confirm your decision 4 59 CONFIGURING THE BARRICADE 4 60 Firmware Upgrade Use this screen to update the firmware or user interface to the l
15. provides MAC Filter configurabon When enabled only MAC addresses configured wat Wireless have accoss to your network AS othar chant devices will get denied access This security teatro can NAT Support up to 32 devices and applies to chems Routing Firewall MAC Address Control Yes No MAC Filtering Table up to 32 computers E AAA SNMP A SL jai A ects ae il __tel_jal__jal__io es na me an a RN E Took Sa a e am a am a 2 a a A 7 ML os oo IR SAL 1 ar mr a a a i E Click Yes to enable or No to disable this function Enter the MAC address in the space provided 4 43 CONFIGURING THE BARRICADE 4 44 URL Blocking The Barricade allows the user to block access to web sites from a particular PC by entering either a full URL address or just a keyword This feature can be used to protect children from accessing violent or pornographic web sites SMC System WAN URL Blocking LAN Wireless NAT You can block access to certain Web shes from a particular PC by entering either a ful URL address or Routing Jett a keyword of the Web site Firewall Disallowed Web Sites and Keywords To specify Pe particular PO go back to the Access Control page and check the box for Http wits URL Blocking in the Normal Fiering Table Status You can define up to 30 sites here ADVANCED SETUP Schedule Rule You may filter Internet access for local clients based on rules Each access control rule may
16. to be sure you have received the following components Barricade ADSL Router SMC7804WBRA e Power adapter One CAT 5 Ethernet cable RJ 45 e Telephone patch cable RJ 11 e Quick install guide Documentation CD Immediately inform your dealer in the event of any incorrect missing or damaged parts If possible please retain the carton and original packing materials in case there is a need to return the product 2 1 INSTALLATION System Requirements You must meet the following minimum requirements ADSL line installed by your Internet Service Provider e APC using a fixed IP address or dynamic IP address assigned via DHCP as well as a gateway server address and DNS server address from your service provider A computer equipped with a 10 100 Mbps network adapter a USB to Ethernet converter or an IEEE 802 11g wireless network adapter e TCP IP network protocols installed on each PC that will access the Internet A Java enabled web browser such as Microsoft Internet Explorer 5 0 or above installed on one PC at your site for configuring the Barricade Hardware Description 2 2 The Barricade contains an integrated ADSL modem and connects to the Internet or to a remote site using its RJ 11 WAN port It can be connected directly to your PC or to a local area network using any of the four Fast Ethernet LAN ports Access speed to the Internet depends on your service type Full rate ADSL provides up to 8 Mb
17. 02 11b 2Mbps 16 802 11b 5 5Mbps 16 802 11b 11Mbps 16 Modulation Rate Output Power dBm 802 11g 6Mbps 15 802 11g 9Mbps 15 802 11g 12Mbps 15 802 11g 18Mbps 15 802 11g 24Mbps 15 802 11g 36Mbps 15 802 11g 48Mbps 15 802 11g 54Mbps 15 Sensitivity Modulation Rate Receiver 2 412 2 484 HGz Sensitivity dBm 802 11b 1Mbps 90 802 11b 2Mbps 88 802 11b 5 5Mbps 85 802 11b 11Mbps 84 C 3 SPECIFICATIONS C4 Modulation Rate Receiver Sensitivity Typical dBm 802 11g 6Mbps 88 802 11g 9Mbps 87 802 11g 12Mbps 84 802 11g 18Mbps 82 802 11g 24Mbps 79 802 11g 36Mbps 75 802 11g 48Mbps 68 802 11g 54Mbps 68 Environmental SMC7804WBRA complies with the following standards Temperature IEC 68 2 14 0 to 50 degrees C Standard Operating 40 to 70 degree C Non operation Humidity 10 to 90 Non condensing Vibration IEC 68 2 36 IEC 68 2 6 Shock IEC 68 2 29 Drop IEC 68 2 32 Dimensions 220 x 132 x 30 mm Weight 550 g Input Power 12V1A IEEE Standards IEEE 802 3 802 3u 802 11g 802 1D ITU G dmt ITU G Handshake ITU T 413 issue 2 ADSL full rate SPECIFICATIONS Standards Conformance Electromagnetic Compatibility CE ETSI R amp TTE FCC part 15 class B amp FCC part 68 ETS 300 328 ETS 300 826 Safety CSA NRTL UL1950 CSA 22 2 950 GS EN60950 CB IEC60950 Internet Standards RFC 826 ARP RFC 791 IP RFC 792 ICM
18. 2 Type WINIPCFG and click OK It may take a second or two for the Type the name of a program folder document or Internet g resource and Windows will open it for you IP Configuration window to Open WINIPCFG y appear 3 Inthe IP Configuration window HIRE Bes Ethemet Adapter Information select your network card from the SMC EtherPower II 10 100 Netwiing drop down menu Click Release Adapter Address 00029753595 _ IP Addr 49216982161 and then click Renew Verify that AA Subnet Mask 255 255 255 0 your IP address is now Default Gateway 192168 21 192 168 2 xxx your Subnet Mask ok _ Reese CR is 255 255 255 0 and your Default Release Al Renewal More Info gt gt Gateway is 192 168 2 1 These values confirm that your Barricade is functioning Click OK to close the IP Configuration window Windows NT 4 0 1 On the Windows desktop click Start Settings Control Panel 2 Double click the Network icon Winbows NT 4 0 Ek setinos A Ena D Hep gel Run Ry Shut Down Start Printers A Taskbar amp Start Menu Windows NT Works J Control Panel Of x File Edit View Help bis a S y Add Remove Console Date Time Devices Display Programs 1 Sd lea Fonts Internet Keyboard Modems Mouse sa DS e Multimedia ODBC PC Card Ports PCMCIA 3 Settings Soe amp
19. 87976288 Fax 65 238 6466 Fax 82 2 553 7202 Fax 81 45 224 2331 Fax 61 2 8875 7777 Fax 91 22 8204443 Ifyou are looking for further contact information please visit www smc com or www smc europe com Model Number SMC7804WBRA Irvine CA 90618 Phone 943 679 8000
20. C address of a Network Card Windows 98 ME Click Start Run Type winipcfg and press ENTER The MAC address is in the Adapter Address section Windows N T4 2000 XP Click Start Programs Command Prompt Type ipconfig all and press ENTER The MAC address is listed as the Physical Address Macintosh Click System Preferences Network The MAC address is listed as the Ethernet Address on the TCP IP tab Linux Run the command sbin ifconfig The MAC address is the value after the word HWaddr 4 64 APPENDIX TROUBLESHOOTING This section describes common problems you may encounter and possible solutions to them The Barricade can be easily monitored through panel indicators to identify problems Troubleshooting Chart Symptom Action LED Indicators Power LED is Off Check connections between the Barricade the external power supply and the wall outlet If the power indicator does not turn on when the power cord is plugged in you may have a problem with the power outlet power cord or external power supply However if the unit powers off after running for a while check for loose power connections power losses or surges at the power outlet If you still cannot isolate the problem then the external power supply may be defective In this case contact Technical Support for assistance A 1 TROUBLESHOOTING A 2 Tr
21. D Defines the request identifier of the Network Access Server NAT ADVANCED SETUP Network Address Translation allows multiple users to access the Internet System Wireless NAT Routing Firewall SNMP ADSL ODNS UPnP Tools Status sharing one public IP SMC NAT Settings Network Address Transiabon NAT slows multiple users al your local site to access Pe internet trough a single puble IP address or multiple public IP addresses NAT can also prevent hacker stacks by mapping local addresses to public addresses for key Services such as Pe Web or FTP Enable or Gabi NAT module function Enable Disable 4 31 CONFIGURING THE BARRICADE 4 32 Address Mapping Allows one or more public IP addresses to be shared by multiple internal users This also hides the internal network for increased privacy and security Enter the Public IP address you wish to share into the Global IP field Enter a range of internal IPs that will share the global IP into the from field SMC System Address Mapping WAN LAN Network Address Translation NAT allows IP addresses used in a private local network to be Wirel mapped to one or more addresses used in Pe public global Internet This feature Amts the dida of public IP addresses required from ihe ISP and also maintains the privacy and secunty of the local NAT network We alow one or more than one pubic IP address to be mapped to a pool of local eddretses Routing Fi
22. LIENT PC Configuring Your Macintosh Computer You may find that the instructions here do not exactly match your operating system This is because these steps and screenshots were created using Mac OS 10 2 Mac OS 7 x and above are similar but may not be identical to Mac OS 10 2 Follow these instructions Finder File Edit View About This Mac 1 Pull down the Apple Menu fg Click Get Mac OS X Software id Dock gt Location gt Recent Items gt Force Quit Sleep Restart Shut Down Log Out RQ 2 Double click the Network icon in the Systems Preferences window e9xn System Preferences e Personal Gi 2 B Desktop Dock General International Login Items MyAccount Screen Effects Hardware 4 Q gt e E CDs amp DVDs ColorSync Displays Energy Keyboard Mouse Sound Saver Internet amp Network Internet QuickTime Sharing System D Fy u 0 Sh G y Y Accounts Classic Date amp Time Software Speech Startup Disk Universal Update Access 3 16 CONFIGURING YOUR MACINTOSH COMPUTER 3 If Using DHCP Server is already selected in the Configure field your Suv Cena B JETRI vPE Appietam Proxies 3 Network Location Automatic EZ computer is already Configure Using DHCP a configured for DHCP If DNS Servers_ tena IP Address 10 1 2883 Nei OTIS not select this Option Subnet Mash 255 255 252 0 Sak MLK A DHCP Client 1D O Ethernet Address
23. NS Server Enter the ISP Domain Name Server address VPI VCI Enter the Virtual Path Identifier VPD and Virtual Circuit Identifier VCI supplied by your ISP Encapsulation Select the encapsulation used by ISP from the drop down list Username Enter the ISP assigned user name Password Enter your password Confirm Password Confirm your password Click NEXT to continue to the Confirm settings page Go to Confirm on page 4 5 in the manual for details about the Confirm settings page 4 11 CONFIGURING THE BARRICADE ISP use RFC1483 Routing Parameter Setting Enter the RFC1483 Routing settings provided by your ISP 3 Parameters Setting Please select the network your Intometseniceprovider is uing rs hh 111 pa ema ee Parameter Description IP Address Enter the IP address provided by your ISP Subnet Mask Enter the subnet mask address provided by your ISP Default Gateway Enter the gateway address provided by your ISP DNS Server Enter the Domain Name Server address VPI VCI Enter the Virtual Path Identifier VPI and Virtual Circuit Identifier VCI supplied by your ISP Encapsulation Select the encapsulation used by ISP from the drop down list Click NEXT to continue to the Confirm settings page Go to Confirm on page 4 5 in the manual for details about the Confirm settings page 4 12 ADVANCED SETUP Advanced Setup Cl
24. P RFC 768 UDP RFC 793 TCP RFC 783 TFTP RFC 1483 AAL5 Encapsulation RFC 1661 PPP RFC 1866 HTML RFC 2068 HTTP RFC 2364 PPP over ATM C 5 SPECIFICATIONS C 6 FOR TECHNICAL SUPPORT CALL From U S A and Canada 24 hoursa day 7 daysa week 800 SMC 4 YOU Phn 949 679 8000 Fax 949 679 1481 From Europe Contact details can be found on www smc europe com or www smc com INTERNET E mail addresses techsupport smc com european techsupport smc europe com Driver updates http www smc com index cfm action tech_support_ drivers downloads World Wide Web http www smc com http www smc europe com For Literature or Advertising Response Call U S A and Canada 800 SMC 4 YOU Spain 34 91 352 00 40 UK 44 0 8712 779802 France 33 0 41 38 32 32 Italy EXI EE 10 Benelux 31334557288 Central Europe 49 0 89 92861 0 Nordic 46 0 868 70700 Eastern Europe 34 93 477 4920 Sub Saharan Africa 216 712 36616 North West Africa 3493477 4920 CIs 7 095 7893573 PRC 86 10 6235 4958 Taiwan 886 2 87978006 Asia Pacific 65 238 6556 Korea 82 2 553 0860 Japan 81 45 224 2332 Australia 61 2 8875 7887 India 91 22 8204437 Fax 949 679 1481 Fax 34 93 477 3774 Fax 44 0 118 974 8701 Fax 33 0 41 38 01 58 Fax 39 02 739 14 17 Fax 31 33 455 73 30 Fax 49 0 89 92861 230 Fax 46 0 887 62 62 Fax 3493 477 3774 Fax 216 71751415 Fax 34 93 477 3774 Fax 7 095 789 357 Fax 86 10 6235 4962 Fax 886 2
25. P assigned user name Password The password hidden 45 CONFIGURING THE BARRICADE 4 6 Parameter Description DHCP Parameters Function Default Gateway Subnet Mask Name Server 1 Name Server 2 Start IP Address Number of IP Shows the DHCP function is enabled or disabled LAN IP address of the Barricade The network subnet mask Primary DNS server IP address Alternate DNS server IP address Start IP address of DHCP assigned IP addresses Number of IP addresses available for assignment by the DHCP server If the parameters are correct click APPLY to save these settings Your Barricade is now set up Go to Troubleshooting on page A 1 if you cannot make a connection to the Internet SETUP WIZARD Parameter Setting Country or ISP Not Listed If your Country or Internet Service Provider is not listed select Others This will allow you to manually configure your ISP settings SMC 1 Goring siert 3 Parameters Setting G2 Tine tome CANTARA Premsa select the network your ntemetrenncepromter a ue O 4 Cast Fear Country 2 For manual configuration you will need to know the Protocol DNS Server Encapsulation and VPI VCI settings used by your ISP If you have a Static IP address you will also need to know the IP address Subnet Mask and Gateway address Please contact your ISP for these details if you do not already have them After selecting Others you will be r
26. SMC NEITHER ASSUMES NOR AUTHORIZES ANY OTHER PERSON TO ASSUME FOR IT ANY OTHER LIABILITY IN CONNECTION WITH THE SALE INSTALLATION MAINTENANCE OR USE OF ITS PRODUCTS SMC SHALL NOT BE LIABLE UNDER THIS WARRANTY IF ITS TESTING AND EXAMINATION DISCLOSE THE ALLEGED DEFECT IN THE PRODUCT DOES NOT EXIST OR WAS CAUSED BY CUSTOMER S OR ANY THIRD PERSON S MISUSE NEGLECT IMPROPER INSTALLATION OR TESTING UNAUTHORIZED ATTEMPTS TO REPAIR OR ANY OTHER CAUSE BEYOND THE RANGE OF THE INTENDED USE OR BY ACCIDENT FIRE LIGHTNING OR OTHER HAZARD LIMITATION OF LIABILITY IN NO EVENT WHETHER BASED IN CONTRACT OR TORT INCLUDING NEGLIGENCE SHALL SMC BE LIABLE FOR INCIDENTAL CONSEQUENTIAL INDIRECT SPECIAL OR PUNITIVE DAMAGES OF ANY KIND OR FOR LOSS OF REVENUE LOSS OF BUSINESS OR OTHER FINANCIAL LOSS ARISING OUT OF OR IN CONNECTION WITH THE SALE INSTALLATION MAINTENANCE USE PERFORMANCE FAILURE OR INTERRUPTION OF ITS PRODUCTS EVEN IF SMC OR ITS AUTHORIZED RESELLER HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES SOME STATES DO NOT ALLOW THE EXCLUSION OF IMPLIED WARRANTIES OR THE LIMITATION OF INCIDENTAL OR CONSEQUENTIAL DAMAGES FOR CONSUMER PRODUCTS SO THE ABOVE LIMITATIONS AND EXCLUSIONS MAY NOT APPLY TO YOU THIS WARRANTY GIVES YOU SPECIFIC LEGAL RIGHTS WHICH MAY VARY FROM STATE TO STATE NOTHING IN THIS WARRANTY SHALL BE TAKEN TO AFFECT YOUR STATUTORY RIGHTS SMC will provide warranty service for one year following discontinuance
27. SMG7804WBRA ADSL Barricade g 54Mbps Wireless 4 port Router with built in ADSL Modem From SMC s line of award winning connectivity solutions SMC Networks 38 Tesla Irvine CA 92618 Phone 949 679 8000 December 2003 R 01 F1 0 Information furnished is believed to be accurate and reliable However no responsibility is assumed by our company for its use nor for any infringements of patents or other rights of third parties which may result from its use No license is granted by implication or otherwise under any patent or patent rights of our company We reserve the right to change specifications at any time without notice Copyright O 2003 by SMC Networks Inc 38 Tesla Irvine CA 92618 All rights reserved Trademarks SMC is a registered trademark and Barricade is a trademark of SMC Networks Inc Other product and company names are trademarks or registered trademarks of their respective holders LIMITED WARRANTY Limited Warranty Statement SMC Networks Inc SMC warrants its products to be free from defects in workmanship and materials under normal use and service for the applicable warranty term All SMC products carry a standard 90 day limited warranty from the date of purchase from SMC or its Authorized Reseller SMC may at its own discretion repair or replace any product not operating as warranted with a similar or functionally equivalent product during the applicable warranty term SMC will endeavor
28. Service When hackers attempt to enter your network we can alert you by e mail Enter your email address Specify your SMTP and POP3 servers user name and passwotd Connection Policy Enter the appropriate values for TCP UDP sessions as described in the following table Parameter Defaults Description Fragmentation 10 sec Configures the number of seconds that a packet half open wait state structure remains active When the timeout value expires the router drops the unassembled packet freeing that structure for use by another packet TCP SYN wait 30 sec Defines how long the software will wait for a TCP session to synchronize before dropping the session TCP FIN wait 5 sec Specifies how long a TCP session will be maintained after the firewall detects a FIN packet TCP connection 3600 The length of time for which a TCP session will idle timeout seconds be managed if there is no activity 1 hour UDP session idle 30 sec The length of time for which a UDP session will timeout be managed if there is no activity H 323 data channel 180 sec The length of time for which an H 323 session idle timeout will be managed if there is no activity ADVANCED SETUP e DoS Criteria and Port Scan Criteria Set up DoS and port scan criteria in the spaces provided as shown below Parameter Defaults Description Total incomplete 300 Defines the rate of new unestablished sessions TCP UDP sessions sessions that will caus
29. Superframes Fast Number of fast superframes transmitted ADVANCED SETUP DDNS Dynamic Domain Name Service DDNS provides users on the Internet with a method to tie their domain name to a computer or server DDNS allows your domain name to follow your IP address automatically by having your DNS records changed when your IP address changes This DNS feature is powered by TZO com With a DDNS connection you can host your own web site email server FTP site and more at your own location even if you have a dynamic IP address DDNS Dynamic DNS Settings Wireless DONS allows users to map a static Domain Name to a dynamic IP address However You NAT must gel an account password and your static Domain Name from a DONS senice provider Routing Thes router supports DONS semices from www dyndns org and www tz com Firewall SNMP ADSL DONS UPnP Tools Status C Enable Disable zoco E eN 4 57 CONFIGURING THE BARRICADE UPnP Click Enable to turn on the Universal Plug and Play function of the Barricade This function allows the device to automatically 4 58 dynamically join a network obtain an IP address EST System a UPnP Universal Plug and Play Setting Wireless The Universal Prog and Play architecture offers pervanive peer to peer network conmbctvty of POs of NAT all form factors intelligent apphances and wireless devices UPnP enables seamless proximity network
30. System WAN LAN Wireless NAT Routing Firewall SNMP ADSL DONS UPnP Tools Status You can enter up to four sets of information here 4 23 CONFIGURING THE BARRICADE LAN 4 24 Use the LAN menu to configure the LAN IP address and to enable the DHCP server for dynamic client address allocation SMC System LAN Settings WAN LAN You can enatte DHCP to dynamically allocate IP addresses to your client PCs or configure Merino Wireless tunktions based on specitic cients or peolocets The Barricada mast have an IP address forthe local NAT network Routing LANIP Firewall SNMP ADSL DONS UPnP Tools Status piso fie IU CU 25525525510 Enabled Disabled a IP Address Pool MS P Parameter Description LAN IP IP Address The IP address of the Barricade IP Subnet Mask The subnet mask of the network DHCP Server The Barricade comes with the DHCP function To dynamically assign an IP address to client PCs enable this function Lease Time Set the IP lease time For home networks this may be set to Forever which means there is no time limit on the IP address lease IP Address Pool Start IP Address Specify the start IP address of the DHCP pool Do not include the gateway address of the Barricade in the client address pool If you change the pool range make sure the first three octets match the gateway s IP address i e 192 168 2 xxx End IP Address Specify the end IP add
31. VPN The Barricade supports three of the most commonly used VPN protocols PPTP L2TP and IPSec These protocols allow remote users to establish a secure connection to their corporate network If your service provider supports VPNs then these protocols can be used to create an authenticated and encrypted tunnel for passing secure data over the Internet i e a traditionally shared data network The VPN protocols supported by the Barricade are briefly described below e Point to Point Tunneling Protocol Provides a secure tunnel for remote client access to a PPTP security gateway PPTP includes provisions for call origination and flow control required by ISPs L2TP merges the best features of PPTP and L2F Like PPTP L2TP requires that the ISP s routers support the protocol IP Security Provides IP network layer encryption IPSec can support large encryption networks such as the Internet by using digital certificates for device authentication CHAPTER 2 INSTALLATION Before installing the ADSL Barricade TM g verify that you have all the items listed under the Package Contents list If any of the items are missing or damaged contact your local distributor Also be sure that you have all the necessary cabling before installing the Barricade After installing the Barricade refer to Configuring the Barricade on page 4 1 Package Contents After unpacking the Barricade check the contents of the box
32. ain Name Server DNS is an index of adcresses and Web addresses fyou type a Wed address Into your Browser BUCH 35 www SME COM a ONS server wil find Mat name in its mdex and find Pe matching IP address 202 42 118 222 Most ISPs provide a ONS server tor speed and LAN convenience Since your Senate Provider may connect to the internet with dmarmic IP setings itis Wireless Miel at the DNS server IP s are also provided dynamically However if ere is a ONS server that NAT YOU would rather use YOU need 10 specify Me IP address here o i n A BORO WAN SNMP ADSL DONS UPnP Tools Status NA ADVANCED SETUP WAN Specify the WAN connection parameters provided by your Internet Service Provider ISP The Barricade can be connected to your ISP in one of the following ways PPPoE ATM Clone MAC ISP System WAN WAN Settings The Barricade can be connected to your service provider in any of the following wars tai To configure PPPoE parametors Wireless NAT Routing Firewall SNMP ADSL DONS UPnP Tools Status 12 4 19 CONFIGURING THE BARRICADE PPPoE Enter the PPPoE Point to Point over Ethernet parameters here PPPOE Interface Parameter PPPOE interface Enable pooo poo IN EIN uc g F ra Parameter Description Enable Disable Enables disables the PPPoE function IP Address If your IP address is assigned by the ISP each time you connect leave this fiel
33. ane parameters are used for the mobile stations to connect to tis access point pr ENABLE DISABLE ma ENABLE DISABLE i Parameter Description ESSID Extended Service Set ID The ESSID must be the same on the Barricade and all of its wireless clients ESSID Broadcast Enable or disable the broadcasting of the SSID Wireless Mode This device supports both 11g and 11b wireless networks Make your selection depending on the type of wireless network that you have Transmission Rate The default is Fully Automatic The transmission rate is automatically adjusted based on the receiving data error rate Usually the connection quality will vary depending on the distance between the wireless router and wireless adapter You can also select a lower transmission data rate to maximize the radio communication range Channel The radio channel used by the wireless router and its clients to communicate with each other This channel must be the same on the Barricade and all of its wireless clients The Barricade will automatically assign itself a radio channel or you may select one manually g Nitro This is the turbo function for the 11g wireless network Make sure your clients also support this function before you enable it ADVANCED SETUP Security To make your wireless network safe you should turn on the security function The Barricade supports WEP Wired Equivalent Privacy and WPA Wi Fi Protected security m
34. are configuration information or memory data of Customer contained in stored on or integrated with any products returned to SMC pursuant to any warranty Products returned to SMC should have any customer installed accessory or add on components such as expansion modules removed prior to returning the product for replacement SMC is not responsible for these items if they are returned with the product Customers must contact SMC for a Return Material Authorization number prior to returning any product to SMC Proof of purchase may be required Any product returned to SMC without a valid Return Material Authorization RMA number clearly marked on the outside of the package will be returned to customer at customer s expense For warranty claims within North America please call our toll free customer support number at 800 762 4968 Customers ate responsible for all shipping charges from their facility to SMC SMC is responsible for return shipping charges from SMC to customer LIMITED WARRANTY WARRANTIES EXCLUSIVE IF AN SMC PRODUCT DOES NOT OPERATE AS WARRANTED ABOVE CUSTOMERS SOLE REMEDY SHALL BE REPAIR OR REPLACEMENT OF THE PRODUCT IN QUESTION AT SMC S OPTION THE FOREGOING WARRANTIES AND REMEDIES ARE EXCLUSIVE AND ARE IN LIEU OF ALL OTHER WARRANTIES OR CONDITIONS EXPRESS OR IMPLIED EITHER IN FACT OR BY OPERATION OF LAW STATUTORY OR OTHERWISE INCLUDING WARRANTIES OR CONDITIONS OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
35. art Settings Network and Dial Up Connections 2 CHES edece ihat Local Area Connection 1 status TE corresponds to the Genera connection to your Been Barricade Status Connected Duration 00 15 12 A Speed 10 0 Mbps 3 The connection status i f Activity im screen will open Click a a ee roperties P operties Packets 43 0 Disable 4 Double click Internet internet Protocol TCP IP Properties a Protocol TCP IP General You can get IP settings assigned automatically if your network supports a this capability Otherwise you need to ask your network administrator for 5 If Obtain an IP address pop cone os automatically and e z mC Use the following IP address gt Obtain DNS server aie aa address automatically are Subnet mesh Default gateway already selected your geet computer is already Obtain DNS server address automatically C Use the following DNS server addresses 7 configured for DHCP If Prefered DNS server SS not select this option 3 11 CONFIGURING CLIENT PC Disable HTTP Proxy You need to verify that the HTTP Proxy feature of your web browser is disabled This is so that your browser can view the Barricade HTML configuration pages Determine which browser you use and refer to Internet Explorer on page 3 4 Obtain IP Settings from Your Barricade 3 12 Now that you have configured your computer to connect to your Barricade it n
36. atest versions Download the upgrade file from the SMC web site and save it to your hard drive In the Upgrade Target field choose Firmware Then click Browse to look for the downloaded file Click APPLY Check the Status page Information section to confirm that the upgrade process was successful SMC System This toot allows you to upgrade the Barricade frrmware using a tle provided by SMC Networks You can Diao sme com Wireless the latest firmware NAT Routing Enter the path and name ce browse to the location of the upgrade fle ten click the APPLY bunion You Firewall wil be prompted to confirm the upgrade complete the process SNMP wa sem DONS UPnP Tools Status ADVANCED SETUP Reset Click APPLY to reset the Barricade The reset will be complete when the power LED stops blinking SMC System WAN Reset LAN Wireless In the event mat the systom stops responding correcty or in some way stops funciona you NAT can perm a reset Your settings will not be changed To perform the reset cick on the APPLY Rout buton below You will be asked to confirm your decision The reset will be complete when me a own light stops banking Firewall SNMP ADSL DDNS UPnP Tools Status If you perform a reset from this page the configurations will not be changed back to the factory default settings Note If you use the Reset button on the front panel the Barricade performs a
37. ation Setting Primary DNS Server Secondary DNS Server Default Gateway Host Name Disable HTTP Proxy You need to verify that the HTTP Proxy feature of your web browser is disabled This is so that your browser can view the Barricade s HTML configuration pages The following steps are for Internet Explorer 3 4 Internet Explorer 1 Open Internet Explorer 2 Click the Stop J button then click Tools Internet Options File Edit View Favorites Tools Help Mail and News A A 9 Back Forward Synctronie Sean Windows Update Address ee gt gga MSN Messenger Service Links Bestofthe Web 42 Show Related Links s E 3 In the Internet Options window click the Connections tab Next click the LAN Settings button Clear all the check boxes Click OK and then click OK again to close the Internet Options window Winbows 98 ME Internet Options Local Area Network LAN Settings Fort pro evento focal CONFIGURING CLIENT PC Obtain IP Settings from Your ADSL Router 3 6 Now that you have configured your computer to connect to your Barricade it needs to obtain new network settings By releasing old DHCP IP settings and renewing them with settings from your Barricade l you can also verify that you have configured your 5 computer correctly PE z om in p EE 1 On the Windows desktop click Start Run
38. attacks However for ting applicators that requee unrestricted access 10 the Internal you can configure a specific changsever Firewall as a Cemibtanzed zone DMZ Enable or sable Firewall features f Enable C Disabie SNMP ADSL DDNS UPnP Tools Status Network attacks that deny access to a network device are called Denial of Service DoS attacks DoS attacks are aimed at devices and networks with a connection to the Internet Their goal is not to steal information but to disable a device or network so users no longer have access to network resources The Barricade protects against the following DoS attacks IP Spoofing Land Attack Ping of Death IP with zero length Smurf Attack UDP port loopback Snork Attack TCP null scan and TCP SYN flooding See page 4 46 for details The firewall does not significantly affect system performance so we advise leaving it enabled to protect your network Select Enable and click the APPLY button to open the Firewall submenus ADVANCED SETUP Access Control Access Control allows users to define the outgoing traffic permitted or not permitted through the WAN interface The default is to permit all outgoing traffic SMC2804WBRP G amp Access Control Accous Control allows users to define the taffi type permed or net permed to WAN pert service This pago includes IP address fnenng and MAC address finerng insbe feing Function C Yes No Normal Filt
39. ause endless retransmission of data traffic 4 37 CONFIGURING THE BARRICADE 4 38 Parameter Authentication Required Authentication Code Description None No authentication Password A password authentication key is included in the packet If this does not match what is expected the packet will be discarded This method provides very little security as it is possible to learn the authentication key by watching RIP packets MD5 An algorithm that is used to verify data integrity through the creation of a 128 bit message digest from data input which may be a message of any length that is claimed to be as unique to that specific data as a fingerprint is to a specific individual Password or MD5 Authentication key RIP sends routing update messages at regular intervals and when the network topology changes When a router receives a routing update that includes changes to an entry it updates its routing table to reflect the new route RIP routers maintain only the best route to a destination After updating its routing table the router immediately begins transmitting routing updates to inform other network routers of the change ADVANCED SETUP Routing Table Routing Table 19216620 2552552550 directy LAN 1270 01 255255255255 directy Loopback Flags C directy connected S static R RIP ICNP Redirect Status Parameter Description Flags Indicates the route status C
40. ave a valid network connection to the Barricade and that the port you are using has not been disabled e Check the network cabling between the management station and the Barricade Forgot or lost Press the Reset button on the rear panel holding the password it down for at least five seconds to restore the factory defaults A 3 TROUBLESHOOTING A 4 Troubleshooting Chart Symptom Action Wireless Problems A wireless PC cannot associate with the Barricade Make sure the wireless PC has the same SSID settings as the Barricade See Channel and SSID on page 4 26 You need to have the same security settings on the clients and the Barricade See Security on page 4 27 The wireless network is often interrupted e Move your wireless PC closer to the Barricade to find a better signal If the signal is still weak change the angle of the antenna There may be interference possibly caused by a microwave ovens or wireless phones Change the location of the interference sources or of the Barricade e Change the wireless channel on the Barricade See Channel and SSID on page 4 26 e Check that the antenna connectors and cabling are firmly connected The Barricade cannot be detected by a wireless client The distance between the Barricade and wireless PC is too great Make sure the wireless PC has the same SSID and security settings as t
41. be activated at a scheduled time Define the schedule on the Schedule Rule page and apply the rule on the Access Control page SMC2804WBRP G amp Schedule Rule This page defines schedule rule names and activates the schodiste for ute in the Access Contro choclo Pdo Yate dup to 10 ridos Follow these steps to add a schedule rule 1 Click Add Schedule Rule Edit Schedule Rule Name Jim 2 Define the appropriate comment emp settings for a schedule rule Activate Time Period End Time as shown in this example hhemnn Every Day uu 3 Click OK and then click ste O ALE to save your lus settings Wednesday os Thursday jos Friday pos T BEER ERS 143333171 Saturday E 4 45 CONFIGURING THE BARRICADE 4 46 Intrusion Detection Intrusion Detection Feature Stateful Packet Inspection SPI and Anti DoS firewall protection Default Enabled The Intrusion Detection Feature of the Barricade Router limits access for incoming traffic at the WAN port When the SPI feature is turned on all incoming packets will be blocked except for those types marked in the Stateful Packet Inspection section RIP Defect Default Enabled If an RIP request packet is not acknowledged to by the router it will stay in the input queue and not be released Accumulated packets could cause the input queue to fill causing severe problems for all protocols Enabling this feature preven
42. beim Anschlu an das Stromnetz die Anschlu werte Verlegen Sie die NetzanschluBleitung so daB niemand dar ber fallen kann Es sollte auch nichts auf der Leitung abgestellt werden Alle Hinweise und Warnungen die sich am Ger t befinden sind zu beachten Wird das Ger t tiber einen langeren Zeitraum nicht benutzt sollten Sie es vom Stromnetz trennen Somit wird im Falle einer Uberspannung eine Beschadigung vermieden Durch die L ftungs ffnungen d rfen niemals Gegenst nde oder Fl ssigkeiten in das Gerat gelangen Dies k nnte einen Brand bzw elektrischen Schlag ausl sen ffnen sie niemals das Ger t Das Ger t darf aus Gr nden der elektrischen Sicherheit nur von authorisiertem Servicepersonal ge ffnet werden Wenn folgende Situationen auftreten ist das Ger t vom Stromnetz zu trennen und von einer qualifizierten Servicestelle zu berpr fen Netzkabel oder Netzstecker sind besch digt Fl ssigkeit ist in das Ger t eingedrungen Das Ger t war Feuchtigkeit ausgesetzt anor Wenn das Ger t nicht der Bedienungsanleitung entsprechend funktioniert oder Sie mit Hilfe dieser Anleitung keine Verbesserung erzielen e Das Ger t ist gefallen und oder das Geh use ist besch digt f Wenn das Ger t deutliche Anzeichen eines Defektes aufweist Zum Netzanschlu dieses Ger tes ist eine gepr fte Leitung zu verwenden F r einen Nennstrom bis 6 A und einem Ger tegewicht gr er 3 kg ist eine Leitung nicht leich
43. bles when connecting to computer or peripheral devices any changes or modifications not expressly approved by the party responsible for compliance could void the user s authority to operate this equipment This device complies with Part 15 of the FCC Rules Operation is subject to the following two conditions 1 This device may not cause harmful interference and 2 this device must accept any interference received including interference that may cause undesired operation IMPORTANT STATEMENT FCC Radiation Exposure Statement This equipment complies with FCC radiation exposure limits set forth for an uncontrolled environment This equipment should be installed and operated with a minimum distance of 20 cm 8 in between the radiator and your body This transmitter must not be co located or operating in conjunction with any other antenna or transmitter FCC Part 68 This equipment complies with Part 68 of the FCC rules This equipment comes with a label attached to it that contains among other information the FCC registration number and ringer equivalence number REN for this equipment If requested this information must be provided to the telephone company This equipment uses the following USOC jacks RJ 11C 111 COMPLIANCES The REN is used to determine the quantity of devices that may be connected to the telephone line Excessive RENs on the telephone line may result in the devices not ringing in response to an incoming
44. call In most but not all areas the sum of the RENs should not exceed five 5 0 To be certain of the number of devices that may be connected to the line as determined by the total RENs contact the telephone company to determine the maximum REN for the calling area If this equipment causes harm to the telephone network the telephone company will notify you in advance that temporary discontinuance of service may be required If advance notice is not practical the telephone company will notify the customer as soon as possible Also you will be advised of your right to file a complaint with the FCC if you believe it is necessary The telephone company may make changes in its facilities equipment operations or y may 8 gt gt gt procedures that will provide advance notice in order for you to make the necessary modifications in order to maintain uninterrupted service If trouble is experienced with this equipment please contact our company at the numbers shown on back of this manual for repair and warranty information If the trouble is causing harm to the telephone network the telephone company may request you to remove the equipment from the network until the problem is resolved No repairs may be done by the customer This equipment cannot be used on telephone company provided coin service Connection to Party Line Service is subject to state tariffs When programming and or making test calls to emergency numbers e Remain on t
45. community for each desired combinason of authentication access control sa prawy charactoriabes Each community is given a urdque wit this agend community name and management stators within Mat community aro provided with and must ompioy the peer Firewall fname in all get operations The agent may establish a number of comenunites with overlapping ae management staton membership DET oo ADSL 1 pae aa e ODNS UPnP 2 private w e Tools Status 3 feos r e OQ FAA E 5 Reed z F 1 ess Parameter Description Community A community name authorized for management access Access Management access is restricted to Read Only Read or Read Write Write Valid Enables disables the entry Note Up to five community names may be entered 4 51 CONFIGURING THE BARRICADE 4 52 Trap Specify the IP address of the NMS to notify when a significant event is detected by the agent When a trap condition occurs the SNMP agent sends an SNMP trap message to any NMS specified as a trap receiver SNMP Trap In the Context of SNMP an unsolicited message can be see by an agent to management sta on The purpose ls 10 NORy Pe management sta on of some unusual event Es ea ci ay OO oar oons el E Tool E ooo Parameter Description IP Address Traps are sent to this address when errors or specific events occur on the network Community A community string password specified for trap management Enter a word some
46. d all zeros Otherwise enter your ISP supplied static IP address here Subnet Mask If your subnet mask is assigned by the ISP each time you connect leave this field all zeros Otherwise enter your subnet mask here VPI VCI Virtual Path Identifier VPI and Virtual Circuit Identifier VCD Encapsulation Specifies how to handle multiple protocols at the ATM transport layer VC MUX Point to Point Protocol over ATM Virtual Circuit Multiplexer null encapsulation allows only one protocol running per virtual circuit with less overhead e LLC Point to Point Protocol over ATM Logical Link Control LLC allows multiple protocols running over one virtual circuit using slightly more overhead Dial on demand Check this box to automatically connect to your ISP 4 20 ADVANCED SETUP Parameter Description Idle Time Minute Enter the maximum idle time for the Internet connection After this time has been exceeded the connection will be terminated ISP Name Choose the ISP to whom this connection will apply ATM Enter ATM Asynchronous Transfer Mode function parameters here A 1483 Braging ferent ETET D E m g r Status Parameter Description Protocol e Disable Disables the ATM mode 1483 Bridging Bridging is a standardized layer 2 technology It is typically used in corporate networks to extend the physical reach of a single LAN segment and increase the number of stati
47. e following figure and table Figure 2 2 Front Panel LED Status Description PWR On The Barricade is receiving power Normal operation Off Power off or failure ADSL On ADSL connection is functioning correctly an Flashing The Barricade is establishing an ADSL link Off ADSL connection is not established ADSL Flashing The indicated ADSL port is sending or receiving DATA data Off No data is being transferred WLAN Flashing he WLAN port is sending or receiving data LAN On thernet connection is established 4 LEDs T E Flashing The indicated LAN port is sending or receiving data Off T here is no LAN connection on the port 2 4 ISP SETTINGS ISP Settings Please collect the following information from your ISP before setting up the Barricade ISP account user name and password e Protocol encapsulation and VPI VCI circuit numbers DNS server address IP address subnet mask and default gateway for fixed IP users only Connect the System The Barricade can be positioned at any convenient location in your office or home No special wiring or cooling requirements ate needed You should however comply with the following guidelines Keep the Barricade away from any heating devices Do not place the Barricade in a dusty or wet environment You should also remember to turn off the power remove the power cord from the outlet and kee
48. e the software to szart deleting HIGH half open sessions Total incomplete 250 Defines the rate of new unestablished sessions TCP UDP sessions Sessions that will cause the software to stop deleting half LOW open sessions Incomplete 250 Maximum number of allowed incomplete TCP UDP sessions sessions TCP UDP sessions per minute per min HIGH Incomplete 200 Minimum number of allowed incomplete TCP UDP sessions sessions TCP UDP sessions per minute per min LOW Maximumincomplete 10 Maximum number of incomplete TCP UDP TCP UDP sessions sessions from the same host number ftom same host Incomplete 300 Length of time before an incomplete TCP UDP sessions msec TCP UDP session is detected as incomplete detect sensitive time period Maximum half open 30 Maximum number of half open fragmentation fragmentation packet packets from the same host number from same host Half open 10000 Length of time before a half open fragmentation detect msec fragmentation session is detected as half open sensitive time period Flooding cracker 300 Length of time from detecting a flood attack to block time second blocking the attack Note The firewall does not significantly affect system performance so we advise enabling the prevention features to protect your network 4 49 CONFIGURING THE BARRICADE 4 50 DMZ If you have a client PC that cannot run an Internet application properly from behind the firewall you can open the client
49. echanisms SMC System WAN Security LAN Wireless The Barricade y can kansmit your Gate securely over the wireless network Matching security mechanisms must be setup on your Barricade g and wireless client devices You can choose the owed securty mechanisms in this page and configure hem in the sub pages Allowed Cunt Type No Securay z NAT Firewall 4 27 CONFIGURING THE BARRICADE 4 28 WEP If you want to use WEP to protect your wireless network you need to set the same parameters for the Barricade and all your wireless clients SMC LAN Wireless WEP is Pe basic mechanism to transenf your data securely ovar tha wireless network Matching encrypiic must be setup on your Barricade g and witless cient devices to use WEP Ego Cion G sue C Dmamic Static WEP Key Setting Fa B 1 32 charact o 10 26 hex digas for 64 WEP 128 WEP J F Fa Parameter Description WEP Mode Select 64 bit or 128 bit key to use for enctyption Key Provisioning Select Static if there is only one fixed key for encryption If you want to select Dynamic you would need to enable 802 1X function first You may automatically generate encryption keys or manually enter the keys To generate the key automatically with passphrase check the Passphrase box enter a string of characters Select the default key from the drop down menu Click APPLY Note The passphrase can c
50. ed you need to run applications that require muBple conmectons Specify Pe port Mornay associated with an application in the Trigger Port Nela select the protocol type as TOP or UOP nen enter the public ports associated we the tigger poet to open them for inbound ratie Noto The range of re Trigger Ports is fom 1 to 65535 atoe C ere p Cuo upp eTo E Gep r Cuo C uop Groe D Gte r Cue Cuo Gto AR err p Cuo Cop MO ADVANCED SETUP Routing These pages define routing related parameters including static routes and RIP Routing Information Protocol parameters SMC System WAN Routing Settings LAN Wireless NAT This page detnes the routng related parameters including state routes and RIP parameters Routing Firewall SNMP ADSL DONS UPnP Tools Status 4 35 CONFIGURING THE BARRICADE Static Route Static Route Parameter Please Enter the Following Configuration Parameters Wireless NAT Table of current static route entries Routing Glick the add button to ade a new entry or cick the delete or modify bution Fr 19216841 255 255 255 0 102168114 Firewall C2 192168251 255 2552550 19216811 BA Keel DS Parameter Description Index Check the box of the toute you wish to delete or modify Network Address Enter the IP address of the remote computer for which to set a static route Subnet Mask Enter the subnet mask of the remote network for which to set a static route Gate
51. eduction in the strength of the upstream and downstream signal There are two latency paths that may be used fast and interleaved For either path a forward error correction FEC scheme is employed to ensure higher data integrity For maximum noise immunity an interleaver may be used to supplement FEC An interleaver is basically a buffer used to introduce a delay allowing for additional error correction techniques to handle noise Interleaving slows the data flow and may not be optimal for real time signals such as video transmission The number of Fast Path Cyclic Redundancy Check errors The number of Interleaved Path Cyclic Redundancy Check errors Momentary signal discontinuities Failures due to loss of frames Failures due to loss of power Fast Path Header Error Concealment errors Interleaved Path Header Error Concealment errors 4 55 CONFIGURING THE BARRICADE 4 56 Parameter Description Statistics Superframes represent the highest level of data presentation Each superframe contains regular ADSL frames one of which is used to provide superframe synchronization identifying the start of a superframe Some of the remaining frames are also used for special functions Received Number of interleaved superframes received Superframes Interleaved Transmitted Number of interleaved superframes transmitted Superframes Interleaved Received Number of fast superframes received Superframes Fast Transmitted
52. eeds to obtain new network settings By releasing old DHCP IP settings and renewing them with settings from your Barricade you can verify that you have configured your computer correctly 1 On the Windows desktop click Start Programs Accessories Command Prompt 2 In the Command Prompt window type IPCONFIG RELEASE and press the ENTER key Winpows 2000 3 Type IPCONFIG RENEW and press the ENTER key Verify that your IP Address is now 192 168 2 xxx your Subnet Mask is 255 255 255 0 and your Default Gateway is 192 168 2 254 These values confirm that your ADSL Router is functioning ommand Prompt ft Windows 2000 Ve C gt Copyright 1985 1999 Micr gt IPCONFIG RELEASE Windows 28988 IP Configuration IP address successfully released for adapter Local Area Connection 1 MIPCONFIG RENEW lindows 2898 IP Configuration thernet adapter Local Area Connection 1 Connection specific DNS Suffix IP Addre 192 168 2 125 Subnet Mask 255 255 255 0 Default Gateway 192 168 2 254 4 Type EXIT and press the ENTER key to close the Command Prompt window Your computer is now configured to connect to the Barricade 3 13 CONFIGURING CLIENT PC Windows XP 1 On the Windows desktop click Start Control Panel 2 In the Control Panel window click Network and Internet Connections 3 The Network Connections window will open Double click the connection for this device 4 On the
53. equired to select what Protocol your ISP uses from the Internet Service Provider drop down list 3 Parameters Setting Please select tha network your intemetserviceprovider is using CONFIGURING THE BARRICADE ISP use RFC1483 Bridging Parameter Setting Enter the RFC1483 Bridging settings provided by your ISP Note You have three different bridging modes to select from RFC1483 Bridging Select this option if you want the Barricade to be transparent and pass the public IP address to a single PC Server ot Firewall RFC1483 Bridging DHCP Select this option if you want to share the connection for multiple PC s most common setting RFC1483 Bridging FixIP Select this option if your ISP has given you a static IP address SMC 2 Time Zone EN Please select the network your intemetsericeprovider is using 4 Confirm Po 3 Parameters Setting oes Sd 1483 Bndging Fix IP 0 0 0 poo pooo ps i me a Parameter Description IP Address Enter IP address provided by your ISP only displayed with FixIP Subnet Mask Enter the subnet mask address provided by your ISP only displayed with FixIP Default Gateway Enter the gateway address provided by your ISP only displayed with FixIP DNS Server Enter the Domain Name Server address SETUP WIZARD Parameter Description VPI VCI Enter the Virtual Path Identifier VPI and Virtual Circuit Identifier VCI supplied by your ISP Encapsulat
54. ering Table up to 10 compntors f 102168210 Emai Senang Emsi Recomng MSN Awars loar na NORMAL 60 ios Blocking ES Oaie AMEC Hej save sermos TE Fencer The following items are on the Access Control screen Parameter Description Enable Filtering Click Yes to turn on the filtering function Function Normal Filtering Table Displays the IP address or an IP address range filtering table 4 41 CONFIGURING THE BARRICADE To add the PC to the filtering table 1 Click Add PC on the Access Control screen 2 Define the appropriate settings for client PC services 3 Click OK and then click APPLY to save your settings SMC2804WBRP G Access Control Add PC E TEM Tolo paige shows usare ba geane serice Aentasone of cent PCa Ichigo e acceso vendo ros and WAN Scheduling rule entera For tne URL btoching uneton you need to configure the URL adevess frst on LAN re URL Blocking Site page For te echeduting funcson you also need to Configure he schedule rte frst on the Schedule Rule page WIRELESS NAT Chand PC Description PORMAL FIREWALL Chore PCP across 1021082 10 50 4 42 ADVANCED SETUP MAC Filter The Barricade can also limit the access of hosts within the local area network LAN The MAC Filtering Table allows the Barricade to enter up to 32 MAC addresses that are not allowed access to the WAN port System WAN MAC Filtering Table LAS This section helos
55. from the active SMC price list Under the limited lifetime warranty internal and external power supplies fans and cables are covered by a standard one year warranty from date of purchase SMC Networks Inc 38 Tesla Irvine CA 92618 COMPLIANCES Federal Communication Commission Interference Statement This equipment has been tested and found to comply with the limits for a Class B digital device pursuant to Part 15 of the FCC Rules These limits ate designed to provide reasonable protection against harmful interference in a residential installation This equipment generates uses and can radiate radio frequency energy and if not installed and used in accordance with instructions may cause harmful interference to radio communications However there is no guarantee that the interference will not occur in a particular installation If this equipment does cause harmful interference to radio or television reception which can be determined by turning the equipment off and on the user is encouraged to try to correct the interference by one or more of the following measures Reorient or relocate the receiving antenna e Increase the separation between the equipment and receiver Connect the equipment into an outlet on a circuit different from that to which the receiver is connected Consult the dealer or an experienced radio TV technician for help FCC Caution To assure continued compliance example use only shielded interface ca
56. he Barricade See Barricade See Channel and SSID on page 4 26 and Security on page 4 27 APPENDIX B CABLES Ethernet Cable Caution DO NOT plug a phone jack connector into any RJ 45 port Use only twisted pair cables with RJ 45 connectors that conform with FCC standards Specifications Cable Types and Specifications Cable Type Max Length Connector 10BASE T Cat 3 4 5 100 ohm UTP 100 m 328 ft RJ 45 100BASE TX Cat 5 100 ohm UTP 100 m 328 ft RJ 45 Wiring Conventions For Ethernet connections a twisted pair cable must have two pairs of wires Each wire pair is identified by two different colors For example one wire might be red and the other red with white stripes Also an RJ 45 connector must be attached to both ends of the cable B 1 CABLES Each wire pair must be attached to the RJ 45 connectors in a specific orientation The following figure illustrates how the pins on an Ethernet RJ 45 connector are numbered Be sure to hold the connectors in the same orientation when attaching the wires to the pins J A Figure B 1 RJ 45 Ethernet Connector Pin Numbers RJ 45 Port Connection B 2 Use the straight through CAT 5 Ethernet cable provided in the package to connect the Barricade to your PC When connecting to other network devices such as an Ethernet switch use the cable type shown in the following table Attached Device Port Type
57. he line and briefly explain to the dispatcher the reason for the call e Perform such activities in off peak hours such as early morning or late evenings The Telephone Consumer Protection Act of 1991 makes it unlawful for any person to use a computer or other electronic device to send any message via a telephone facsimile machine unless such message clearly contains in a margin at the top or bottom of each transmitted page or on the first page of the transmission the date and time it is sent and an identification of the business other entity or individual sending the message and the telephone number of the sending machine or such business other entity or individual In order to program this information into your facsimile refer to your communications software user manual Industry Canada Class B This digital apparatus does not exceed the Class B limits for radio noise emissions from digital apparatus as set out in the interference causing equipment standard entitled Digital Apparatus ICES 003 of Industry Canada Cet appareil num rique respecte les limites de bruits radio lectriques applicables aux appareils num riques de Classe B prescrites dans la norme sur le mat rial brouilleur Appareils Num riques NMB 003 dict e par PIndustrie COMPLIANCES Australia AS NZS 3548 1995 Class B ACN 096 592 442 SMC contact for products in Australia is SMC Australia L9 123 Epping Rd North Ryde NSW Australia Pho
58. ick on the Advanced Setup picture The left hand side displays the main menu and the right hand side shows descriptive information Advanced Setup The Barricade supports advanced functons lhe Statetyl Packet Inspection hacker attack detection content Siening access control virtual DMZ hosts virtual servers and client Sitering SMC recommends that you keep the default setings The advanced management interface contains 13 main menu items as described in the following table Menu Description System Sets the local time zone the password for administrator access and the IP address of a PC that will be allowed to manage the Barricade remotely WAN Specifies the Internet connection settings LAN Sets the TCP IP configuration for the Barricade LAN interface and DHCP clients Wireless Configures the radio frequency SSID and security for wireless communications NAT Configures Address Mapping virtual server and special applications Routing Sets the routing parameters and displays the current routing table Firewall Configures a variety of security and specialized functions including Access Control URL blocking Internet access control scheduling intruder detection and DMZ SNMP Community string and trap server settings ADSL Sets the ADSL operation type and shows the ADSL status 4 13 CONFIGURING THE BARRICADE Menu Description DDNS Dynamic DNS provides users on the Internet with a method to tie
59. ing of log entries and system events you need to set the time zone Select your time zone from the drop down list If your area requires it check to enable the clock for daylight saving changes and enter the Daylight Savings Time start and end dates for your location If you want to automatically synchronize the ADSL router with a public time server check the box to enable Enable Automatic Time Server Maintenance Select the desired servers from the drop down menu Click NEXT to continue Note Units sold in the United States are configured by default to use only radio channels 1 11 as defined by FCC regulations Units sold in other countries are configured by default without a country code 1 e 99 Setting the country code restricts operation of the device to the radio channels permitted for the wireless networks in the specified countty CONFIGURING THE BARRICADE Parameter Setting Select your Country and Internet Service Provider This will automatically configure the Barricade with the correct Protocol Encapsulation and VPI VCI settings for your ISP If your Country or Internet Service Provider is not listed you will need to manually enter settings Go to Parameter Setting Country or ISP Not Listed on page 4 7 in the manual SMC t Coning Siert G2 Tima fone d Paramotor Saning Please select the ratwark your Intemetrercepromder is unng O 4 Cost Selec Country 2 Fama sP 3 132 16821
60. ion Select the encapsulation used by ISP from the drop down list Click NEXT to continue to the Confirm settings page Go to Confirm on page 4 5 in the manual for details about the Confirm settings page 4 9 CONFIGURING THE BARRICADE ISP use PPPoE Parameter Setting Enter the PPPoE Point to Point Protocol over Ethernet settings provided by your ISP 3 Parameters Setting Please select the network your Intorneteersicoproviger is ving Oners xj ISP use PPPoE al PPPOE a om 309 aeee ee Parameter Description DNS Server Enter the ISP Domain Name Server address VPI VCI Enter the Virtual Path Identifier VPT and Virtual Circuit Identifier VCI supplied by your ISP Encapsulation Select the encapsulation used by ISP from the drop down list Username Enter the ISP assigned user name Password Enter your password Confirm Password Confirm your password Click NEXT to continue to the Confirm settings page Go to Confirm on page 4 5 in the manual for details about the Confirm settings page 4 10 SETUP WIZARD ISP use PPPoA Parameter Setting Enter the PPPoA Point to Point Protocol over ATM settings provided by your ISP 3 Parameters Setting Please select tha network your Intormetsereicaprovicer is ving Obers xj ISP use PPPoA 7 PPPoA a om VE MUX 2 A ee Parameter Description D
61. ne 61 2 88757887 Fax 61 2 88757777 EC Conformance Declaration C E SMC contact for these products in Europe is SMC Networks Europe Edificio Conata II Calle Fructu s Gelabert 6 8 20 4a 08970 Sant Joan Desp Barcelona Spain Marking by the above symbol indicates compliance with the Essential Requirements of the R amp TTE Directive of the European Union 1999 5 EC This equipment meets the following conformance standards EN 300 328 1 December 2001 V1 3 1 EN 300 328 2 December 2001 V1 2 1 EN 301 489 1 September 2001 V1 4 1 EN 301 489 17 September 2000 V1 2 1 EN 60950 January 2000 COMPLIANCES Safety Compliance Wichtige Sicherheitshinweise Germany I 2 SE 10 T 1 12 a 14 3 on Bitte lesen Sie diese Hinweise sorgf ltig durch Heben Sie diese Anleitung f r den sp teren Gebrauch auf Vor jedem Reinigen ist das Ger t vom Stromnetz zu trennen Verwenden Sie keine Fl ssigoder Aerosolreiniger Am besten eignet sich ein angefeuchtetes Tuch zur Reinigung Die Netzanschlu Bsteckdose soll nahe dem Ger t angebracht und leicht zug nglich sein Das Ger t ist vor Feuchtigkeit zu sch tzen Bei der Aufstellung des Ger tes ist auf sicheren Stand zu achten Ein Kippen oder Fallen k nnte Besch digungen hervorrufen Die Bel ftungs ffnungen dienen der Luftzirkulation die das Ger t vor berhitzung sch tzt Sorgen Sie daf r da diese ffnungen nicht abgedeckt werden Beachten Sie
62. network settings By releasing old DHCP IP settings and renewing them with settings from your Barricade you will verify that you have configured your computer correctly 1 On the Windows desktop click Start Programs Command Prompt LS Startup Command Prompt a Windows NT Explorer Le Administrative Tools Common La Barricade Utility 15 Startup Le WLAN Bridge Utility yr v vy 3 9 CONFIGURING CLIENT PC 2 In the Command Prompt window type IPCONFIG RELEASE and press the ENTER key 3 Type IPCONFIG RENEW and press the ENTER key Verify that your IP Address is now 192 168 2 xxx your Subnet Mask is 255 255 255 0 and your Default Gateway is 192 168 254 These values confirm that your Barricade is functioning Command Prompt J cr ft Windows 2000 Ver n 5 00 2195 C gt Copyright 1985 1999 Microsoft Corp gt IPCONFIG RELEASE Windows 2000 IP Configuration IP address successfully released for adapter Local Area Connection 1 gt IPCONFIG RENEW Windows 26888 IP Configuration Ethernet adapter Local Area Connection 1 Connection specific DNS Suffix IP Addres 5 192 168 2 125 Subnet Mask 255 255 255 0 Default Gateway 192 168 2 254 4 Type EXIT and press the ENTER key to close the Command Prompt window Your computer is now configured to connect to the Barricade 3 10 Winbows 2000 Windows 2000 1 On the Windows desktop click St
63. odem via an RJ 11 ADSL port Local network connection via four 10 100 Mbps Ethernet ports On board IEEE 802 11g wireless network adapter DHCP for dynamic IP configuration and DNS for domain name mapping 1 1 INTRODUCTION Firewall with Stateful Packet Inspection client privileges intrusion detection and NAT NAT also enables multi user Internet access v a a single user account and virtual server functionality providing protected access to Internet services such as web FTP e mail and Telnet VPN pass through IPSec ESP Tunnel mode L2TP PP TP User definable application sensing tunnel supports applications requiring multiple connections Easy setup through a web browser on any operating system that supports TCP IP Compatible with all popular Internet applications Applications 1 2 Many advanced networking features are provided by the Barricade Wireless and Wired LAN The Barricade provides connectivity to 10 100 Mbps devices and wireless IEEE 802 112 compatible devices making it easy to create a network in small offices or homes Internet Access This device supports Internet access through an ADSL connection Since many DSL providers use PPPoE or PPPoA to establish communications with end users the Barricade includes built in clients for these protocols eliminating the need to install these services on your computer APPLICATIONS Shared IP Address The Barricade provides Internet access fo
64. ons on a LAN without compromising performance Bridged data is encapsulated using the RFC1483 protocol to enable data transport IP Addtess IP address of the ATM interface Subnet Mask Subnet mask of the ATM interface Default Gateway Default gateway of the ATM interface VPI VCI Each connection must have a unique pair of VPI VCI settings 4 21 CONFIGURING THE BARRICADE Parameter Description Encapsulation Specifies how to handle multiple protocols at the ATM transport layer Go to Encapsulation on page 4 20 for a detailed description DHCP Client Check this box if your ISP assigns an IP to clients using DHCP Clone MAC Address Some ISPs require you to register your MAC address with them If this is the case the MAC address of the Barricade must be changed to the MAC address that you have registered with your ISP Clone MAC Address Some ISPs require you to register your MAC address with hem Bre ee oo pe mn sa de Gf the Gateway must be changed lo the MAC adaress that you supped to LAN m WAN interface MAC Address Wireless NAT Routing Use this PC S MAC address O IRBS CHEMI Use the Galways detautt MAC address O004 2 9C 00 68 Firewall SNMP Enter anew MAC address mante ADSL Po fo fos fos fea os DONS UPnP Tools Status 19 4 22 ADVANCED SETUP ISP Enter the Internet Service Provider ISP name user name and password for each ISP connection you have SMC
65. onsist of up to 32 alphanumeric characters To manually configure the encryption key enter five hexadecimal pairs of digits for each 64 bit key or enter 13 pairs for the single 128 bit key A hexadecimal digit is a number or letter in the range 0 9 or A F Note that WEP protects data transmitted between wireless nodes but does not protect any transmissions over your wired network or over the Internet ADVANCED SETUP WPA Wi Fi Protected Access WPA combines temporal key integrity protocol TKIP and 802 1X mechanisms It provides dynamic key encryption and 802 1X authentication service SMC System WAN WPA LAN Wireless VIPA is a security enhancement tat strongly Increases the lovel of data protection and access contro for esting wireless LAN Matching authentication and encemben methods must be setup on your Barricade and wireless chant devices lo use WPA 802 1 C Pre shared Key Passphrase 0 03 characters C Hex 64 digits C pee 3600 Seconds c per 1000 K Packets Disable Na Parameter Description Cypher suite rhe security mechanism used in WPA for encryption Authentication Choose 802 1X or Pre shared Key to use as the authentication method 802 1X for the enterprise network with a RADIUS server Pre shared key for the SOHO network environment without an authentication server Pre shared key type Select the key type to be used in the Pre shared Key Pre shared Key Type in
66. oubleshooting Chart Symptom Action LED Indicators Link LED is Off Verify that the Barricade and attached device are powered on Be sure the cable is plugged into both the Barricade and the corresponding device Verify that the proper cable type is used and that its length does not exceed the specified limits Be sure that the network interface on the attached device is configured for the proper communication speed and duplex mode Check the adapter on the attached device and cable connections for possible defects Replace any defective adapter or cable if necessary Network Connection Problems Cannot ping the Barricade from the attached LAN Verify that the IP addresses ate properly configured For most applications you should use the Barricade s DHCP function to dynamically assign IP addresses to hosts on the attached LAN However if you manually configure IP addresses on the LAN verify that the same network address network component of the IP address and subnet mask are used for both the Barricade and any attached LAN devices Be sure the device you want to ping or from which you ate pinging has been configured for TCP IP TROUBLESHOOTING Troubleshooting Chart Symptom Action Management Problems Cannot connect e Be sure to have configured the Barricade with a using the web valid IP address subnet mask and default browser gateway e Check that you h
67. p your hands dry when you install the Barricade Connect the ADSL Line Connect the supplied RJ 11 cable from the ADSL Microfilter Splitter to the ADSL port on your Barricade When inserting an ADSL RJ 11 plug be sure the tab on the plug clicks into position to ensure that it is properly seated 2 5 INSTALLATION Phone Line Configuration Installing a Full Rate Connection If you are using a full rate G dmt connection your service provider will attach the outside ADSL line to a data voice splitter In this case you can connect your phones and computer directly to the splitter as shown below Plain Old Telephone System POTS A Voice GQ Pr f Residential Fiter Connection Point Network Interface Device NID Voice 8 Data Voice 8 DataY ADSL Router or E E gt ACE E e hub or switch Figure 2 3 Installing with a Splitter CONNECT THE SYSTEM Installing a Splitterless Connection If you are using a splitterless G lite connection then your service provider will attach the outside ADSL line directly to your phone system In this case you can connect your phones and computer directly to the incoming ADSL line but you will have to add low pass filters to your phones as shown below Plain Old Telephone System POTS Residential Connection Point Network Interface Voice Filter 8 Data Device NID Voice amp Data ADSL Router Data Sii gt YU
68. power reset If the button is depressed for over five seconds all the LEDs will illuminate and the factory settings will be restored 4 61 CONFIGURING THE BARRICADE Status The Status page displays WAN LAN connection status firmware and hardware version numbers illegal attempts to access your network as well as information on DHCP clients connected to your network The security log may be saved to a file by clicking Save and choosing a location SMC System WAN Status LAN Wireless You Con use the Stass screen to see the connection status for the Bamcado s WANLAN interfaces NAT firenware and hardware version numbers any Megat a empts 10 access your network a6 well as information on all DHCP cliert PCS currenty connected lo your network Routing Firewall Current Time 01022002 03 07 26 am SNMP ADSL INTERNET GATEWAY INFORMATION DONS ADSL DISCONNECTED IP Address 19216621 Numbers of DHCP Clients 3 Subnet Mask 2562552850 Runtime Code Version UPnP Come DHCP Server Enabled 0 67 lov 13 2003 17 43 25 Tools Firwat Enabled Boot Code Version V1 3C Status UPnP Disabled ADSL Modern Code Version Wireless Enabled 13 0214 LAN MAC Address 00 04 E2 90 60 84 Wireless MAC Address 00 04 E2 04 32 60 WAN MAC Address 00 04 2 9C 60 68 Hardware Version O1A Serial Num A341052414 Fr Scroll down to view more information on the Status page System Serial Num AD41052414 sj WAN
69. ps downstream and 640 kbps upstream G lite or splitterless ADSL provides up to 1 5 Mbps downstream and 512 kbps upstream However you should note that the actual rate provided by specific service providers may vary dramatically from these upper limits Data passing between devices connected to your local area network can run at up to 100 Mbps over the Fast Ethernet ports and 54 Mbps over the built in wireless network adapter HARDWARE DESCRIPTION The Barricade includes an LED display on the front panel for system power and port indications that simplifies installation and network troubleshooting It also provides the following ports on the rear panel Ml a A AA Ma l LL LAN Ports Reset Button WAN Port Power Inlet Figure 2 1 Rear Panel Item Description LAN Ports Fast Ethernet ports RJ 45 Connect devices on your local area network to these ports i e a PC hub or switch Reset Button Use this button to reset the power and restore the default factory settings To reset without losing configuration settings see Reset on page 4 61 Power Inlet Connect the included power adapter to this inlet Warning Using the wrong type of power adapter may damage the Barricade ADSL Port WAN port RJ 11 Connect your ADSL line to this port 2 3 INSTALLATION LED Indicators The power and port LED indicators on the front panel are illustrated by th
70. r up to 253 users via a single shared IP address Using only one ISP account multiple users on your network can browse the web at the same time Virtual Server If you have a fixed IP address you can set the Barricade to act as a virtual host for network address translation Remote users access various services at your site using a constant IP address Then depending on the requested service or port number the Barricade can route the request to the appropriate server at another internal IP address This secures your network from direct attack by hackers and provides more flexible management by allowing you to change internal IP addresses without affecting outside access to your network DMZ Host Support Allows a networked computer to be fully exposed to the Internet This function is used when NAT and firewall security prevent an Internet application from functioning correctly Security The Barricade supports security features that deny Internet access to specified users or filter all requests for specific services that the administrator does not want to serve The Barricade s firewall also blocks common hacker attacks including IP Spoofing Land Attack Ping of Death IP with zero length Smurf Attack UDP port loopback Snork Attack TCP null scan and TCP SYN flooding WEP Wired Equivalent Privacy SSID and MAC filtering provide security over the witeless network 1 3 INTRODUCTION 1 4 Virtual Private Network
71. ress of the DHCP pool Domain Name If your network uses a domain name enter it here Otherwise leave this field blank Note Remember to configure your client PCs for dynamic address allocation See page 3 2 for details ADVANCED SETUP Wireless The Barricade also operates as a wireless access point allowing wireless computers to communicate with each other To configure this function all you need to do is enable the wireless function define the radio channel the domain identifier and the security options Check Enable and click APPLY System WAN Wireless Settings LAN Wireless The gateway can be aci configured as an wireless access point for roaming charts by seting he serice set identeler SSID and channel number algo supports data encrepbon and chent fering Enatle of Saatis Wireless modde funcion Enable Disable NAT Firewall SNMP z DDNS UPnP Tools Status 12 4 25 CONFIGURING THE BARRICADE 4 26 Channel and SSID You must specify a common radio channel and SSID Service Set ID to be used by the Barricade Wireless Router and all of its wireless clients Be sure you configure all of its clients to the same values SMC System WAN Channel and SSID LAN Wirel This page allows you to define SSID Transmission Rate Basic Rabe and Channel IO for wireless Ness connection ln the wireless erntronment the Barricade g can also act as an wiralass access point Th
72. rewall sowa P OO is wanstormed as mutigi viral i ftom 192 1602 0 w192 160 2 0 pon 201000119 D OJO is eanstormed as multe vital Ps ri from 192 168 2 0 tore2r60 2 0 sowa P O O ts wanstormed as mutigte vituat Ps from 192 160 2 0 wrazie 0 sowie P 0 0 is vanstormed as mutige viral from 192 168 2 0 worg2s60 2 0 4 ADVANCED SETUP Virtual Server If you configure the Barricade as a virtual server remote users accessing services such as web or FTP at your local site via public IP addresses can be automatically redirected to local servers configured with private IP addresses In other words depending on the requested service TCP UDP port number the Barricade redirects the external service request to the appropriate server located at another internal IP address Virtual Server You can configure Pe Barricade as a virtual Server 60 Nat reenote Users accessing seres such as the Web or FTP at your local site via public IP addresses can be automaticaly toditected do local servers configured with private IP addresses in other words depending on the requested service TCP UDP port number the Barricade redirects the external service request to Ihe appropriate Server located at another internat IP address This tool can suppor bob por ranges multiple ports and commanations of me wo Routing Firewall For aramot SNMP PortRanges ex 100 140 Muttiple Ports ox 25 110 980 Combinabon ex 25 100 60 1 2 we re sf Tr
73. ridging and encapsulated routing PPP over ATM LLC amp VC multiplexing RFC2364 Classical IP RFC1577 Traffic shaping UBR CBR OAM F4 F5 support PPP over Ethernet Client Management Features Firmware upgrade via WEB Based Management WEB Based Management configuration Power Indicators Event and History logging Network Ping C 1 SPECIFICATIONS C 2 Security Features Passwotd protected configuration access User authentication PAP CHAP with PPP Firewall NAT NAPT VPN pass through IPSec ESP Tunnel mode L2TP PPTP LAN Features IEEE 802 1D self learning transparent Bridging DHCP Server DNS Proxy Static Routing RIPv1 and RIP Applications Netmeeting ICQ Real Player QuickTime DialPad PC Anywhere Telnet SNTP NNTP Radio Features Wireless RF module Frequency Band 802 11g Radio 2 4GHz 802 11b Radio 2 4GHz USA FCC 2412 2462MHz Ch1 Ch11 Canada IC 2412 2462MHz Ch1 Ch11 Europe ETSI 2412 2472MHz Ch1 Ch13 Spain 2457 2462MHz Ch10 Ch11 France 2457 2472MHz Ch10 Ch13 Japan STD T66 STD 33 2412 2484MHz Ch1 Ch14 Modulation Type OFDM CCK Operating Channels IEEE 802 11b compliant 11 channels US Canada SPECIFICATIONS 13 channels ETSI 2 Channels Spain 4 Channels France 14 channels Japan Operating Channels IEEE 802 11g compliant 13 channels US Canada Europe Japan RF Output Power Modulation Rate Output Power dBm 802 11b 1Mbps 16 8
74. rt Settings Control Panel be Windows Update Programs Favorites S Documents ES Control Panel Printers A Era A Taskbar amp Start Menu A Folder Options 2 Help A Active Desktop W Windows Update 2 In Control Panel double click the Network icon In the Network window under the Configuration tab double click the TCP IP item listed for your network card In the TCP IP window select the IP Address tab If Obtain an IP address automatically is already selected your computer is already configured for DHCP If not select this option Winbows 98 ME Control Panel dd s m F Y a New palmene L ptions ware jograms Control Panel A aB Find Fast Fonts Game Use the settings in Controllers Control Panel to personalize your Q computer Select an item to view its LiveUpdate Modems description ODBC Data Passwords Technical Support s 32010 Client for Microsoft Networks E Microsoft Family Logon Dial Up Adapter SMC EZ Card 10 100 SMC1211TX TCP IP gt idl Adoi CONFIGURING CLIENT PC 5 Windows may need your Windows 95 98 Me CD to copy some files After it finishes copying it will prompt you to restart System Settings Change 2 You must restart your computer before the new settings will take effect Do you want to restart your computer now your system Click Yes and your computer will restart TCP IP Configur
75. rvers y Forms AutoFill web Proxy Settings O Forms AutoComplete C Use Web Proxy for all O AutoFill Profile 7 Bypass Web Proxy for FTP y Receiving Files C Secure Proxy Settings gt E o O Mail Proxy Settings Cookies Gopher Proxy Settings Y Network List the sites you want to connect to directly bypassing the proxies set above Put a space or comma between each site Protocol Helpers Site Passwords y E mail General C ED CHAPTER 4 CONFIGURING THE BARRICADE After you have configured TCP TP on a client computer you can configure the Barricade using Internet Explorer 5 0 or above To access the Barricade s management interface enter the default IP address of the Barricade in your web browser http 192 168 2 1 Enter the default password smcadmin and click LOGIN SMC7804WBRA Password LOGIN CANCEL Please enter correct password for Administrator Access Thank you We suggest that yor of 800x600 resolution Copyright 2003 SMC Networks ened CONFIGURING THE BARRICADE Navigating the Management Interface The Barricade s management interface consists of a Setup Wizard and an Advanced Setup section Setup Wizard Advanced Setup tf i Overview Setup Wizard Use the Setup Wizard if you want to quickly set up the Barricade Go to Setup Wizard on page 4 3 Advanced Setup Advanced Setup support
76. s more advanced functions like hacker attack detection IP and MAC address filtering virtual server setup virtual DMZ host as well as other functions Go to Advanced Setup on page 4 13 Making Configuration Changes 4 2 Configurable parameters have a dialog box or a drop down list Once a configuration change has been made on a page click the APPLY or NEXT button at the bottom of the page to enable the new setting Note To ensure proper screen refresh after a command entry be sure that Internet Explorer 5 0 is configured as follows Under the menu Tools Internet Options General Temporaty Internet Files Settings the setting for Check for newer versions of stored pages should be Evety visit to the page SETUP WIZARD Setup Wizard Time Zone Click on Setup Wizard The first item in the Setup Wizard is Time Zone 2 Time Settings Set the bene zona dor the ADSL Modem Use thes setting to unsure the Ime based chert ftenng feature and system log entries are based on the corect localized tme Set Time Lowe GMT 06 OTP acse Tene US amp Canada Tyyana 3 F Emable Daytight Savings Stan Daylight Savings Timo Jarus 2 1 End Daylight Swings Time sorry 2 1 z Configura Tise Server OTP You can automatic sty martan the system teme on your SMC Blamcade by synchronizing wath a Pubic bine Loree over the internat F Enable Atomatic Time Server Mantenance For accurate tim
77. s nta y Neale brs a Da 4 64 Windows NT4 2000 XP cc ccc cee teens 4 64 Macintosh i 32a sth OM aaliyah heel See ahs 4 64 o OR 4 64 TABLE OF CONTENTS Troubleshooting cd A 1 Cables da a ada eae B 1 Ethernet Gable ei pai ii a tie B 1 Specifications ia a i B 1 Wiring Conventions 6 2 5 0 eke morra eevee B 1 RJ 45 Port Gonnection mii esas E eee B 2 Pin Assignments aysi erenn ny ni E ey etd ne dda es B 3 ADSL Gable setane e bie thi ite ee tid 4c ee ees eS B 5 Specifications ivde ee pitied va adi ead dedi eeu ot B 5 Wiring Conventions ssns sa e ra EA eee cence eee B 5 Sp cifications is onda weld a eee ee ee C 1 ix TABLE OF CONTENTS CHAPTER 1 INTRODUCTION Congratulations on your purchase of the ADSL Barricade TM g hereafter referred to as the Barricade We are proud to provide you with a powerful yet simple communication device for connecting your local area network LAN to the Internet For those who want to surf the Internet in the most secure way this router provides a convenient and powerful solution About the Barricade The Barricade provides Internet access to multiple users by sharing a single user account Support is provided for both wired and wireless devices New technology provides wireless security via Wired Equivalent Privacy WEP encryption and MAC address filtering It is simple to configure and can be up and running in minutes Features and Benefits Internet connection to an ADSL m
78. ta Rato information Firewall DefectFailure indication SNMP Statietes ADSL ADSL Status Information DDNS Staus se en Line Status Actwabng Status ne Data Rate Up Stream 00mp 00mps Down Lio 0 Gites 0 008 G0 Top System 0 lion Data Detect Indication WAN LAN Norse Margin 0 509 0598 Wireless Outen Power 05 68m 05 08m NAT Ateruabor 0548 0508 Routing Firewall SNMP Fast Pa FEC Correction 65535 65535 A rad 65535 65535 Fast Path CRC Eror 65535 65535 DDNS Interleaved Path CRC Eror 65535 65535 UPnP Loss of Signal Defect Tools Loss of Frame Defect gt Status Loss of Power Defect m Fast Path HEC Eror 65535 65535 irterlenved Path HEC Error 65535 65535 00700 Statisties i o o 3 4 54 ADVANCED SETUP The following items are included on this information page Parameter Description Status Line Status Shows the current status of the ADSL line connection Data Rate Upstream Maximum upstream data rate Downstream Maximum downstream data rate Operation Data Defect Indication Noise Margin Output Power Attenuation Fast Path FEC Correction Interleaved Path FEC Correction Fast Path CRC Error Interleaved Path CRC Error Loss of Signal Defect Loss of Frame Defect Loss of Power Defect Fast Path HEC Error Interleaved Path HEC Error Maximum upstream and downstream noise margin Maximum fluctuation in the output power Maximum r
79. te TCPIUOP sessions HOH 300 session zl e Stateful Packet Inspection This is called a stateful packet inspection because it examines the contents of the packet to determine the state of the communications i e it ensures that the stated destination computer has previously requested the current communication This is a way of ensuring that all communications are initiated by the recipient computer and are taking place only with sources that are known and trusted from previous interactions In addition to being more rigorous in their inspection of packets stateful inspection firewalls also close off ports until connection to the specific port is requested When particular types of traffic are checked only the particular type of traffic initiated from the internal LAN will be allowed For example if the user only checks FTP Service in the Stateful Packet Inspection section all incoming traffic will be blocked except for FTP connections initiated from the local LAN Stateful Packet Inspection allows you to select different application types that are using dynamic port numbers If you wish to use the Stateful Packet Inspection SPI to block packets click on the Yes radio button in the 4 47 CONFIGURING THE BARRICADE 4 48 Enable SPI and Anti DoS firewall protection field and then check the inspection type that you need such as Packet Fragmentation TCP Connection UDP Session FTP Service H 323 Service or TFTP
80. ter als HO5VV F 3G 0 75 mm einzusetzen Der arbeitsplatzbezogene Schalldruckpegel nach DIN 45 635 Teil 1000 betr gt 70 dB A oder weniger vi TABLE OF CONTENTS E AA Whedon se A a 1 1 Aboutthe Barricade jaw ius Elo aes as sae die hie WS Pease BAY 1 1 Features and Benefits icanon randia Hea ae ede se saws 1 1 JApplications 344 Sine to A add A eh Ss 1 2 Installation oooooooocononnnnnnnnanannn 2 1 Package Contents cara ia id Gee ocean da 2 1 System Requirements 1 0255 fue de a Dania da aa 2 2 Hardware Description 0 cece eee eens 2 2 LED Indicators Sc sage cde aa Marie atte Bit i 2 4 ISB sSettn ses ace cynics sstes acy dha ace 2 5 Connect The System o aa heaters Sachs Bie cate vas hoa R LN 2 5 Connect the ADSL Line 0 0 eee eee eee 2 5 Phone Line Configuration 0 eee 2 6 Connect the Power Adapter 0 cece eee eee 2 8 Configuring Client PC siii ee ee ce ete ence 3 1 TCP IP Configuration ts Led 3 2 Windows 98 Mec esanean hn CREA 8 heated atte 2 3 2 Disables HTTP Proxy IA da dnd 3 4 Obtain IP Settings from Your ADSL Router o oooo 3 6 Windows VIA Un ta a s aida Bead 3 7 Disable HTTP Proxy evi a tr 3 9 Obtain IP Settings from Your Barricade o ooo oooooo 3 9 Windows 2000 4 anns enian aa dans aan we dee os aw Abe ch 3 11 Disable HTTP Proxy totor ie Seed ga ias Shs 3 12 Obtain IP Settings from Your Barricade oooooooooo 3 12 Windows PS a RS ALAS 3
81. the key here Group Key Re The period of renewing broadcast multicast key Keying 4 29 CONFIGURING THE BARRICADE 4 30 802 1X If 802 1X is used in your network then you should enable this function for the Barricade System 802 1X WAN LAN This page slows you to set Pe 802 1X a method for performing autventcaton to wireless connecton TI Wireless parameters are used for this access point to connect to the Authentication Server Envie Dissbie 300 Seconds 0 for no timeout checking 500 Seconds 0 fr no re authansicason E0 Seconds atar auimersicaton tailed mv RADIUS Server Parameters fise fee fr fr Wr m e Parameter Description 802 1X Enable or disable this authentication function Authentication Session Idle Defines a maximum period of time for which the connection is timeout maintained during inactivity Re Authentication Defines a maximum period of time for which the Period authentication server will dynamically re assign a session key to a connected client Quiet Petiod Defines a maximum period of time for which the Barricade will wait between failed authentications Server Type Select TINY or RADIUS as the authentication server RADIUS Server Parameters Server IP The IP address of your authentication server Server Port The port used for the authentication service Secret Key The secret key shared between the authentication server and its clients NAS I
82. their domain name s to a Dynamic or Static IP address UPnP Allows you to enable or disable the Universal Plug and Play function Tools Contains options to backup amp restore the current configuration restore all configuration settings to the factory defaults update system firmware or reset the system Status Provides WAN connection type and status firmware and hardware version numbers system IP settings as well as DHCP NAT and firewall information Displays the number of attached clients the firmware versions the physical MAC address for each media interface and the hardware version and serial number Shows the security and DHCP client log ADVANCED SETUP System Time Settings Select your local time zone from the drop down list This information is o SMC System Time Settings Sot Time Zone WAN Uso Pes setting to insure Pe Dne based chant fitoring foature ang system log entres are based on the correct localized Sme LAN Wireless GMT Gream ch Moon Time Dublin Edeiburgh Lisbon London NAT Routing Configure Time Server PY Firewall You can automatically maintain the system bee on your SMC Bamcade ty sincroniza wan a public Bme server over the Intemnet SNMP ADSL DONS F Enable Automabe Time Server Maintenance UPnP Tools Vian you enable this option you will need to configure two diferent ime servers use the optons Status below to set the primary and secondary NTP servers in your area
83. thing other than public or private to prevent unauthorized individuals from accessing information on your system Version Sets the trap status to disabled or enabled with V1 or V2c The v2c protocol was proposed in late 1995 and includes enhancements to v1 that are universally accepted These include a get bulk command to reduce network management traffic when retrieving a sequence of MIB variables and a more elaborate set of error codes for improved reporting to a Network Management Station ADSL ADVANCED SETUP ADSL Asymmetric Digital Subscriber Line is designed to deliver more bandwidth downstream from the central office to the customer site than upstream This section is used to configure the ADSL operation type and shows the ADSL status Parameters SMC System WAN LAN Wireless NAT Routing Firewall SNMP ADSL ODNS UPnP Tools Status ADSL Parameter Operation Mode Foma Address C3 fo Address Ca 00 Address cs 0 Address ca F Address 9 oo Address CA fo Parameter Description Operation Mode Address C3 etc Automatic e 71 413 issue 2 e G 992 1 e G 992 2 Reserved 4 53 CONFIGURING THE BARRICADE Status The Status screen displays information on connection line status data rate operation data and defect indication and statistics SMC System WAN LAN Monitoring Index Wireless ADSL Status Information NAT Status Routing Da
84. tified by different colors For example one wire might be red and the other red with white stripes Also an RJ 11 connector must be attached to both ends of the cable Each wire pair must be attached to the RJ 11 connectors in a specific orientation The following figure illustrates how the pins on the RJ 11 connector are numbered Be sure to hold the connectors in the same orientation when attaching the wires to the pins Figure B 2 RJ 11 Connector Pin Numbers B 5 CABLES 0 oO E cae 28 ses S S S gt x cs 925 S938 n m 0 m s R1 T1 T2R1T1R2 T2R1T1R2 123456 123456 123456 6x2 Jack 6x4 Jack 6x4 Jack T Tip R Ring Pin Signal Name Wire Color 1 Not used 2 Line 2 Tip Black or White Orange 3 Line 1 Ring Red or Blue White 4 Line 1 Tip Green or White Blue 5 Line 2 Ring Yellow or Orange White 6 Not used Figure B 3 RJ 11 Pinouts B 6 APPENDIX C SPECIFICATIONS Physical Characteristics Ports Four 10 100Mbps RJ45 Ports One ADSL RJ11 Two external dipole antennas ADSL Features Supports DMT line modulation Supports Annex A Full Rate ADSL up to 8 Mbps downstream up to 1 Mbps upstream G 992 1 amp T1 413 Issue 2 Supports G Lite ADSL up to 1 5 Mbps downstream up to 512 Kbps upstream Dying GASP support ATM Features RFC1483 Encapsulation IP B
85. to repair or replace any product returned under warranty within 30 days of receipt of the product The standard limited warranty can be upgraded to a Limited Lifetime warranty by registering new products within 30 days of purchase from SMC or its Authorized Reseller Registration can be accomplished via the enclosed product registration card or online via the SMC web site Failure to register will not affect the standard limited warranty The Limited Lifetime warranty covers a product during the Life of that Product which is defined as the period of time during which the product is an Active SMC product A product is considered to be Active while it is listed on the current SMC price list As new technologies emerge older technologies become obsolete and SMC will at its discretion replace an older product in its product line with one that incorporates these newer technologies At that point the obsolete product is discontinued and is no longer an Active SMC product A list of discontinued products with their respective dates of discontinuance can be found at http www smc com index cfm action customer_service_warranty All products that are replaced become the property of SMC Replacement products may be either new or reconditioned Any replaced or repaired product carries either a 30 day limited warranty or the remainder of the initial warranty whichever is longer SMC is not responsible for any custom software or firmw
86. ts the packets from accumulating Discard Ping to WAN Default Disabled Prevent a ping on the Barricade s WAN port from being routed to the network SMC System WAN Intrusion Detection LAN Wireless Whon the SPI Stasetul Packet Inspection ferwall feature is enabled all packets can be blocknd Stateful Packet inspechon SPO sows full support of diferent app caton types that are using NAT mamic port numbers For the applications checked in thelist Batow the Barricade wi8 support Sal Routing operation as ttiated born the local LAN Firewall The Barricade frewa can block comenon hachar attacks including IP Spoofing Land Alach Ping of Death IP wits zero engh Smurf Attack UDP par loopback Snork Attack TCP null scan and TCP SYN flooding Intrusion Detection Feature os ie Dons Pr I ce Tools Bees A Status Stateful Packet Inspection E a CE P ADVANCED SETUP Scroll down to view more information SMC ee Whon hackers attempt to enter your network we can alert you try mad LAN AAA Wireless Your E mail Address NAT SMTP Server Address Routing POPS Server Address Firewall Username Pase SSS Connection Poboy Fragmentation natt open wait 10 secs TCP SYN wan 190 sec TCE FIN wait 5 sec TCP commection ide timeout 3600 soc UDP session idle Smeout 30 sec Ban H22 data channel iste nmeout 180 tec DoS Detect Criteria Total incomple
87. up to unrestricted two way Internet access Enter the IP address of a DMZ Demilitarized Zone host on this screen Adding a client to the DMZ may expose yout local network to a variety of security risks so only use this option as a last resort SMC2804WBRP G _ you have a local client PC tat cannet nan an internet applic ation property fom beteng Pe MAT firewall hen rou Can open the cient up to unesi Ieg Ywo war Inaeenet access by defining a Virtual OMZ Host intem Cyes Eno Mumipie PCa can be expoted to Me internat for two way communi abona e g intenet gaming video FIREWALL conferencing or VPN connectons To use De OMZ you must set a state IP address for that PC Public P Address Chom PC P Address 0000 192 160 240 pff maai e wma P pP 1216820 P p 121692 P pP s22 fp 192 1602 0 P p CATI 2 po uno ADVANCED SETUP SNMP Use the SNMP configuration screen to display and modify parameters for the Simple Network Management Protocol SNMP Community A computer attached to the network called a Network Management Station NMS can be used to access this information Access rights to the agent are controlled by community strings To communicate with the Barricade the NMS must first submit a valid community string for authentication SNMP Community In the contest of SNMP rl stot ted leia Secunty characteristes The community concept is a local one defined at the agent The apar estabighes one
88. way Enter the WAN IP address of the gateway to the remote network Click Add to add a new static route to the list or check the box of an already entered route and click Modify Clicking Delete will remove an entry from the list 4 36 ADVANCED SETUP RIP SMC M ae RIP Parameter LAN Wireless NAT Genoral FUP paramotor Routing RIP mode Disable C Enable Auto summary Digable Enable Please Enter the following Configuration Par seneter s Firewall Table of current interface RI paramotor SNMP ne CAZA DONS pO ant sable Tx Enable 2 none Tools Phone Drobo 13 Oro 2 None Parameter Description General RIP Parameters RIP mode Globally enables or disables RIP Auto summary If Auto summary is disabled then RIP packets will include sub network information from all sub networks connected to the router If enabled this sub network information will be summarized to one piece of information covering all sub networks Table of current Interface RIP parameter Interface The WAN interface to be configured Operation Mode Disable RIP disabled on this interface Enable RIP enabled on this interface Silent Listens for route broadcasts and updates its route table It does not participate in sending route broadcasts Version Sets the RIP Routing Information Protocol version to use on this interface Poison Revetse A method for preventing loops that would c

SMC Networks SMC7804WBRA User's Manual

Contents

Download Pdf Manuals

Related Search

Related Contents