Home

SMC Networks SMC7004WFW User's Manual

1. Contact SMC Contact details for your relevant countries are available on www smc europe com and www smc com Statement of Conditions In line with our continued efforts to improve internal design operational function and or reliability SMC reserves the right to make changes to the product s described in this document without notice SMC does not assume any liability that may occur due to the use or application of the product s described herein In order to obtain the most accurate knowledge of installation bug fixes and other product related information we advise to visit the relevant product support page at www smc europe com before you start installing the equipment All information is subject to change without notice Limitation of Liability In no event whether based in contract or tort including negligence shall SMC be liable for incidental consequential indirect special or punitive damages of any kind or for loss of revenue loss of business or other financial loss arising out of or in connection with the sale installation maintenance use performance failure or interruption of its products even if SMC or its authorized reseller has been adviced of the possiblity of such damages Copyright Information furnished by SMC Networks Inc SMC is believed to be accurate and reliable However no responsibility is assumed by SMC for its use nor for any infringements of patents or other rights of third parties which may
2. System gt WAN IPsec ol IPsec allows users to define three secure IPsec tunnels with remote end points This page includes the setting for both ends of each Wireless secure tunnel and the inbound outbound Security Association SA NAT Firewall Enable IPsec G Yes CNo VPN Tunnel Tunnen SNMP Tools Tunnel Enable C Yes No Status Inbound SA same as Outbound SA sp 256 Local IP Address 182 i68 6 Subnet Mask 5 ss fo Remote IP Address fig2 fies B fo Subnet Mask 255 265 255 fo Security Gateway fis2 fies fi froo Hash Algorithm None MD5 2 character SHA1 40 character Key 123456789abcde 02468ace013579bc Encrypt Algorithm None 3DES_CBC 48 character DES_CBC 16 character amp amp amp Key 0123456789abcdet02468ace13579bc T E internet CONFIGURING THE WIRELESS BARRICADE PLUS PPTP Point to Point Tunneling Protocol PPTP allows the secure remote access over the Internet by simply dialing in a local point provided by an ISP The following screen display the account information of the authorized remote users and the IP address range to assign to those users soft Internet Explorer gt System WAN LAN Wireless The Barricade Plus allows PCs from the Internet to remotely log into the LAN using the PPTP tunneling protocol This page NAT includes the user name and password for the remote users who are authorized to log into the local LAN
3. gt IPCONFIG RELEASE Windows 2000 IP Configuration IP address successfully released for adapter Local Area Connection 1 5 35 SETTING TCP IP To Work WITH THE WIRELESS BARRICADE PLUS 3 Type IPCONFIG RENEW and press the lt ENTER gt key Verify that your IP address is now 192 168 2 xxx your Subnet Mask is 255 255 255 0 and your Default Gateway is 192 168 2 1 These values confirm that your Wireless Barricade Plus is functioning io soft Windows 2000 Version 5 00 2195 Kc Copyright 1985 1999 Microsoft Corp gt IPCONFIG RELEASE lindows 2866 IP Configuration IP address successfully released for adapter Local Area Connection 1 gt IPCONFIG RENEU lindows 28688 IP Configuration Ethernet adapter Local Area Connection 1 Connection specific DNS Suffix IP Addre Subnet Mask Default Gateway 4 Type EXIT and press lt ENTER gt to close the Command Prompt window Configuring Your Macintosh Computer You may find that the instructions here do not exactly match your screen This is because these steps and screenshots were created using Mac OS 8 5 Mac OS 7 x and above are all very similar but may not be identical to Mac OS 8 5 Step 1 Configure TCP IP Settings After you have completed the hardware setup you need to configure your computer to connect to your Wireless Barricade Plus You need to determine how your ISP issues your IP address Many ISPs issue these numbers automatically us
4. 4 Select the TCP IP line that has been assigned to your network card in the Local Area Connection Properties window 5 Click the Properties button to set the TCP IP protocol for the Wireless Barricade Plus Local Area Connection 2 Properties PR General Authentication Advanced Connect using E9 PRISM25 IEEE 802 11 PC Card This connection uses the following items 4 E Client for Microsoft Networks 8 File and Printer Sharing for Microsoft Networks Sao Packet Scheduler Internet Protocol TCP IP Description Transmission Control Protocol Intemet Protocol The default wide area network protocol that provides communication across diverse interconnected networks C Show icon in notification area when connected 6 You can dynamically assign TCP IP address settings to a client or you can manually configure a client with address settings to meet your specific network requirements Note that the default IP address of the Wireless Barricade Plus is 192 168 2 1 5 7 SETTING TCP IP To Work WITH THE WIRELESS BARRICADE PLUS Configuring Your Computer with Windows 95 98 ME 5 8 You may find that the instructions here do not exactly match your version of Windows This is because these steps and screenshots were created from Windows 98 Windows 95 and Windows Millennium Edition are very similar but not identical to Windows 98 Step 1 Configure TCP IP Settings After you
5. iv EC Conformance Declaration Class B SMC contact for these products in Europe is SMC Networks Europe Edificio Conata II Calle Fructu s Gelabert 6 8 2 4 08970 Sant Joan Despi Barcelona Spain This information technology equipment complies with the requirements of the Council Directive 89 336 EEC on the Approximation of the laws of the Member States relating to Electromagnetic Compatibility and 73 23 EEC for electrical equipment used within certain voltage limits and the Amendment Directive 93 68 EEC For the evaluation of the compliance with these Directives the following standards were applied RFI Limit class B according to EN 55022 1998 Emission x Limit class A for harmonic current emission according to EN 61000 3 2 1995 Limitation of voltage fluctuation and flicker in low voltage supply system according to EN 61000 3 3 1995 Immunity Product family standard according to EN 55024 1998 Electrostatic Discharge according to EN 61000 4 2 1995 Contact Discharge 4 kV Air Discharge 8 kV Radio frequency electromagnetic field according to EN 61000 4 3 1996 80 1000MHz with 1kHz AM 80 Modulation 3V m Electrical fast transient burst according to EN 61000 4 4 1995 AC DC power supply 1kV Data Signal lines 0 5kV Surge immunity test according to EN 61000 4 5 1995 AC DC Line to Line 1kV AC DC Line to Earth 2kV Immunity to conducted disturbances Induced by radio frequency fi
6. 1 Specify one of the first three options to configure a WAN connection through the RJ 45 port i e a connection to an xDSL modem or cable modem 4 14 CONFIGURING THE WIRELESS BARRICADE PLUS Dynamic IP Address DHCP 1 setupa stm Microsoft Internet Explorer System WAN Dynamic IP The Host Name is optional but may be required by some Service Provider s The default MAC address is set to the WAN s physical interface on the Barricade Plus If required by your Service Provider you use the Clone MAC Address button to copy the MAC address of the LAN Network Interface Card installed in your PC and replace the WAN MAC address with this MAC Wireless address if necessary you can use the Release and Renew buttons to release and renew E NAT the WAN IP address Firewall gt VPN SNMP Host Name Tools Status MAC Address oo fo as foo foo oz The Host Name is optional but may be required by some ISPs The default MAC address is set to the WAN s physical interface on the Wireless Barricade Plus Use this address when registering for Internet service and do not change it unless required by your ISP 4 15 NETWORKING AND CLIENT SER VICES 4 16 PPP over Ethernet PPPoE A http 192 168 2 1 setupa stm Microsoft Internet Explorer File Edt View Favorites Tools Help Back gt O A A search GFavortes Hristory S mi A address J http
7. 2 Double click the Network icon J Control Panel Ss Add Remove Console Date Time Devices Programs w 6 Fonts Internet 3 Select the Protocols tab 4 Double click TCP IP Protocol 5 30 5 Select the IP Address tab 6 Inthe Adapter drop down list be sure your Ethernet adapter is selected If Obtain an IP address automatically is already selected your computer is already configured for DHCP Click Cancel to close each window and skip to Step 2 Disable HTTP Proxy 7 Inthe TCP IP Properties dialog box click the IP address tab to locate your IP address Subnet Mask and Default Gateway Record these values in the space provided below 8 Click the DNS tab to see the primary and secondary DNS servers Record these values in the appropriate spaces below CONFIGURING CLIENT TCP IP Microsoft TCP IP Properties 21x IP Address DNS WINS Address Routing An IP address can be automatically assigned to this network card by a DHCP server If your network does not have a DHCP server ask your network administrator for an address and then type it in the space below Adapter Obtain an IP address from a DHCP server Specify an IP address IP Address 192 168 123 4 Subnet Mask 25 255 255 0 Default Gateway F g Advanced Microsoft TCP IP Properties 2 x IPAddress DNS WINS Address Routing Domain Na
8. 5 40 Netscape 1 Open Netscape and click the stop button Click Edit and select Preferences 2 Inthe File E73 View Go Favor Select All Find Find Again G Preferences 38 Preferences Preferences ae Applications Smart Browsing lt Mail amp Newsgroups Identity Mail Servers dialog box In the left hand Ne Se column labeled a n C Messages ategor Window Setti Sry Copies amp Folders s el ect Formatting Return Receipts Disk Space 9 Composer Publish sz Roaming Access Server Info File Selection gt Offline Download Advanced Under the Advanced category select Proxies SmartUpdate 3 Select Direct Proxies Configure proxies to access the Internet A network proxy is used to provide additional security between your computer and the Internet usually along with a firewall and or to increase per formance between networks by reducing redundant traffic via caching Your system adminstrator can provide you with proper proxy settings Direct connection to the Internet Q Manual proxy configuration Q Automatic proxy configuration Configuration stn un DL Connection to the Internet and click OK CONFIGURING CLIENT TCP IP Step 3 Obtain IP Settings From Your Wireless Barricade Plus Now that you have configured your computer to connect to your Wireless Barr
9. A 2 TROUBLESHOOTING Troubleshooting Chart Symptom Action Management Problems Cannot connect using the Web browser Be sure to have configured the Wireless Barricade Plus with a valid IP address subnet mask and default gateway e Check that you have a valid network connection to the Wireless Barricade Plus and that the port you are using has not been disabled e Check the network cabling between the management station and the Wireless Barricade Plus Forgot or lost the password e Press the Reset button on the front panel holding it down for at least five seconds to restore the factory defaults A 3 TROUBLESHOOTING A 4 APPENDIX B CABLES Ethernet Cable Specifications Cable Types and Specifications Cable Type Max Length Connector 10BASE T Cat 3 4 5 100 ohm UTP 100 m 328 ft RJ 45 100BASE TX Cat 5 100 ohm UTP 100 m 328 ft RJ 45 Twisted pair Cable Caution DO NOT plug a phone jack connector into any RJ 45 port Use only twisted pair cables with RJ 45 connectors that conform with FCC standards For 10BASE T 100BASE TX connections a twisted pair cable must have two pairs of wires Each wire pair is identified by two different colors For example one wire might be red and the other red with white stripes Also an RJ 45 connector must be attached to both ends of the cable All RJ 45 ports on the SMC7004FW except for
10. Heak gt O A A Reach Favorites Bristory B bl Address hetp 192 168 2 1 setupa stm ee SMC System WAN Access Control Add PC LAN Wireless NAT Firewall Dale el Client PC Description TR This page allows users to define service limitation of client PC including IP address service type and scheduling rule criteria For URL blocking function you need to configure URL address first in URL Blocking page For scheduling function you also need to configure schedule rule first in Schedule Rule page Client PC IP Address 192 1 Client PC Ble Detail Description Blocking HTTP TCP Port 80 3128 8000 8080 8081 Oo WWW with URL Blocking HTTP Ref URL Blocking Site Page oO E mail Sending SMTP TCP Port 25 mi News Forums NNTP TCP Port 119 mi E mail Receiving POP3 TCP Port 110 m Secure HTTP HTTPS TCP Port 443 mi File Transfer FTP TCP Port 21 m MSN Messenger TCP Port 1863 mi Telnet Service TCP Port 23 mi AIM AOL Instant Messenger TCP Port 5190 Oo NetMeeting H 323 TCP Port 1720 oC DNS UDP Port 53 ml SNMP UDP Port 161 162 ml r VPN PPTP TCP Port 1723 mj VPN L2TP UDP Port 1701 Oo TCP All TCP Port Oo UDP All UDP Port mj Protocol C TCP C UDP PotRangef ff b bh b fb p p fo Scheduling Rule Ref Schedule Rule Page Always Blocking vo Cancel 4 31 NETWORKING AND CLIENT SERVICES 4 32 URL Blocking Zi htt
11. lt NAT Firewall VPN SNMP Domain Name Server DNS Address 0 fo fo fo Tools Status Secondary DNS Address optional 0 fo pP fo Has your Internet service provider given you a DNS address Domain Name Servers are used to map an IP address to the equivalent domain name e g www smc com Your ISP should provide the IP address for one or more domain name servers Enter those addresses on this screen 4 18 CONFIGURING THE WIRELESS BARRICADE PLUS LAN Gateway and DHCP une http 192 168 2 1 setupa stm Microsoft Internet Explorer Fle Edt vew Favortes Tools Help ak gt A A Qsearch Girevortes History Sh a S Address 47 http 192 168 2 1 setupa stm SMC System LAN Settings NAT LAN IP Firewall VPN SNMP Tools Status a USER 255 255 255 0 DHCP Server Enabled Disabled IP Address Pool Sa o2 fies fe fico a 192 ies e fies WAN LAN You can enable DHCP to dynamically allocate IP addresses to your client PCs or configure filtering functions based on specific FEN clients or protocols The Barricade Plus must have an IP address for the local network s reless gt Mn gt IT 19 Internet Configure the gateway address of the Wireless Barricade Plus To dynamically assign the IP address for client PCs enable the DHCP Server set the lease time and then specify the address range Also remember to configure all of your c
12. 1 eeo E Done I 1 Internet E Use this menu to restrict management access based on a specific password Anyone can access the Setup Wizard Advanced Setup and Help EN N menus but you must enter a password to access the configuration options provided by the Setup Wizard and Advanced Setup menus By default there is no password Please assign a password to the Wireless Barricade Plus as soon as possible and store it in a safe place Passwords can contain from 3 12 alphanumeric characters and are case sensitive 4 12 CONFIGURING THE WIRELESS BARRICADE PLUS Note If your password is lost or you cannot gain access to the management interface press the Reset button on the front panel holding it down for at least five seconds to restore the factory defaults Remote Management licrosoft Internet Explorer System Remote Management Set the remote management of the Barricade Plus WAN LAN Wireless gt NAT Firewall VPN SNMP Tools Status memet 4 By default management access is only available to users on your local network However you can also manage the Wireless Barricade Plus from a remote host by adding the IP address of an administrator to this screen Note If you specify an IP address of 0 0 0 0 any host can manage the Wireless Barricade Plus You can also manage the Wireless Barricade Plus from a remote host by t
13. 192 168 2 1 setupa stm SMC System WAN LAN Wireless NAT Firewall VPN SNMP Tools Status PPPoE Enter the PPPoE user name and password assigned by your Service Provider The Service Name is normally optional but may be required by some service providers Enter a Maximum Idle Time in minutes to define a maximum period of time for which the Internet connection is maintained during inactivity ifthe connection is inactive for longer than the Maximum Idle Time then it will be dropped You can enable the Auto reconnect option to automatically re establish the connection as soon as you attempt to access the Internet again If your Internet Service Provider requires the use of PPPoE enter the information below Use PPPoE Authentication User Name Password N Please retype your password SeniceName SSS MTU 1454 1440 lt MTU Value lt 1492 Maximum Idle Time in Auto reconnect AAM 9 Internet Enter the PPP oE user name and password assigned by your ISP The Service Name is nor mally optional but may be required by some providers Specify the value of MTU Maximum Transmission Unit for pro per Internet access such as browsing web sites and using E mail Default 1492 Enter the maximum idle time for the Wireless Barricade Plus in seconds Note If you are not using a flaterate please be aware that the setting Maximum Idle Time at 0 and
14. Cord Set with HO5VV F cord having three conductors with minimum diameter of 0 75 mm IEC 320 receptacle Male plug rated 10A 250V The unit automatically matches the connected input voltage Therefore no additional adjustments are necessary when connecting it to any input voltage within the range marked on the rear panel Wichtige Sicherheitshinweise Germany 1 Bitte lesen Sie diese Hinweise sorgf ltig durch 2 Heben Sie diese Anleitung f r den sp teren Gebrauch auf 3 Vor jedem Reinigen ist das Ger t vom Stromnetz zu trennen Verwenden Sie keine Fl ssi goder Aerosolreiniger Am besten eignet sich ein angefeuchtetes Tuch zur Reinigung 4 Die Netzanschlu Bsteckdose soll nahe dem Ger t angebracht und leicht zug nglich sein 5 Das Ger t ist vor Feuchtigkeit zu sch tzen 6 Bei der Aufstellung des Ger tes ist auf sicheren Stand zu achten Ein Kippen oder Fallen k nnte Besch digungen hervorrufen 7 Die Bel ftungs ffnungen dienen der Luftzirkulation die das Ger t vor berhitzung sch tzt Sorgen Sie daf r da diese ffnungen nicht abgedeckt werden 8 Beachten Sie beim Anschlu an das Stromnetz die Anschlu werte 9 Verlegen Sie die Netzanschlu leitung so da niemand dar ber fallen kann Es sollte auch nichts auf der Leitung abgestellt werden 10 Alle Hinweise und Warnungen die sich am Ger t befinden sind zu beachten 11 Wird das Ger t ber einen l ngeren Zeitraum nic
15. In the Internet Options window click the Connections tab Next click the LAN Settings button Clear all the checkboxes Click OK and then click OK again to close the Internet Options window Internet Options General Security Privacy Content Connections Programs Advanced To set up an Internet connection click Setup Dial up and Virtual Private Network settings amp ras Add Settings Never dial a connection Dial whenever a network connection is not present O Always dial my default connection Choose Settings if you need to configure a proxy server for a connection reni None Set Default Local Area Network LAN settings LAN Settings do not apply to dial up connections Choose Settings above for dial up settings Local Area Network LAN Settings Automatic configuration Automatic configuration may override manual settings To ensure the use of manual settings disable automatic configuration C Automatically detect settings use automatic configuration script Address Proxy server o Use a proxy server for your LAN These settings will not apply to dial up or YPN connections rver For loc CONFIGURING CLIENT TCP IP Step 3 Obtain IP Settings From Your Wireless Barricade Plus Now that you have configured your computer to connect to your Wireless Barricade Plus it needs to obtain new network settings B
16. Virtual Private Networks VPN Tunnel 1192 168 2 1 setupa stm System WAN VPN Settings LAN Wireless NAT Virtual Private Networks provide a secure link between remote users and the corporate network gt Firewall by establishing an authenticated and encrypted tunnel for passing secure data over the T VPN Internet SNMP Tools Status VPN provides a flexible and secure network to the authenticate users through IPsec IP Security and PPTP Point to Point Tunneling Protocol sessions 4 39 NETWORKING AND CLIENT SERVICES 4 40 IPsec IPsec is a set of protocols that offers more secure security services in the extranet VPNs On the IPsec screen select Yes in the Enable IPsec field for using the IPsec service and choose the appropriate tunnel Tunnel 1 3 as required Then you have to define the authentication algorithms of the Security Association SA by entering appropriate values in the Inbound SA and Outbound SA fields for using IPsec security control Notes 1 Besure the two sides of the VPN tunnel have the same security information 2 Provide the Remote IP Address to remotely log on the network Zi http 192 168 2 1 setupa stm Microsoft Internet Explorer la xj Fie Edt View Favortes Tools Help HBk gt OA A Asearch Girsvortes Bristory See Address http 192 168 2 1 setupa stm SMC SI
17. Wireless Configures the radio frequency SSID and encryption for wireless communications NAT Menu Configures system IP settings including e Address Mapping e Virtual Server Menu CONFIGURING THE WIRELESS BARRICADE PLUS Description Firewall Menu Configures a variety of packet filtering and specialized functions including e Access Control e URL Blocking e Schedule Rule e Intusion Detection e DMZ Demilitarized Zone VPN Menu IPsec PPTP Provides Virtual Private Network tunneling capability for secure Internet communication Configures inbound Security Association SA e Authorizes remote users using the PPTP tunneling protocol e Authenticates a PPTP tunnel to the destination host and authorizes the IP address range to assign to the client users SNMP Menu Community Trap Displays and modifies parameters for the Simple Network Management Protocol SNMP Configures the community strings authorized for management access Up to 5 community names may be entered Specify management stations that will receive authentication failure messages or other unsolicited message from the SNMP agent Up to 5 trap managers may be entered Tools Menu Configuration Tools Firmware Upgrade Reset Contains options to reset the system restore configuration settings or update system firmware Allows you to backup the system configurations restore the saved backup configuratio
18. 4 You must have an ISP that meets the following minimum requirements Internet access from your Internet Service Provider ISP using an xDSL modem or cable modem e APC using a fixed IP address or dynamic IP address assignment via DHCP as well as a gateway server address and DNS server address from your service provider e For wired LAN connection you need a computer equipped with a 10 Mbps 100 Mbps or 10 100 Mbps Fast Ethernet card or a USB to Ethernet converter For wireless LAN connections each computer must have an 11 Mbps wireless adapter INSTALLATION TCP IP network protocol installed on each PC that needs to access the Internet A Java enabled Web browser such as Microsoft Internet Explorer 5 0 or above or Netscape Communicator 4 0 or above installed on one PC at your site for configuring the Wireless Barricade Plus Connect the System The Wireless Barricade Plus can be positioned at any convenient location in your office or home No special wiring or cooling requirements are needed You should however comply with the following guidelines Keep the Wireless Barricade Plus away from any heating devices e Do not place the Wireless Barricade Plus in a dusty or wet environment You should also remember to turn off the power remove the power cord from the outlet and keep your hands dry when you install the Wireless Barricade Plus 2 5 INSTALLATION Basic Installation Procedu
19. File Edt View Favorites Tools Help Heak gt O A A Bsearch Giravortes Gesten IE Address p 192 168 2 1 setupw stm SMC OREM 2 IP Address Info 2 IP Address Info gE PPPoE Use PPPoE Authentication User Name Password SSCS Please retype yourpassword SSS SemiceName MTU 1454 1440 lt MTU Value lt 1492 Maximum Idle Time fin 1 Auto reconnect Enter the User Name and Password required by your ISP in the appropriate fields If your ISP has provided you with a Service Name enter it in the Service Name field otherwise leave it blank eee Internet Z iavascript history go 1 Enter the PPPoE user name and password assigned by your Service Provider The Service Name is normally optional but may be required by some ser vice providers Leave the Maximum Transmission Unit MTU onthe default value 1492 unless you have a particular reason to change it Enter a Maximum Idle Time in minutes to define a maximum period of time for which the Internet connection is maintained duringinactivity If the connection is inactive for longer than the Maximum Idle Time it will be dropped Enable the Auto reconnect option to automatically re establish the connection as soon as you attempt to access the Internet again Attention Please be aware that the setting Maximum Idle Time to 0 and or Auto Reconnect enabled can cause an increase of your telephone
20. History Eby S mi A Address http 192 168 2 1 setuna stm System lt WAN E ncryption LAN Wireless Encryption transmits your data securely over the wireless network Matching encryption keys must be setup on your Home Wireless Gateway and wireless client devices to use encryption Do you want to use encryption NAT Firewall Disabled 7 VPN SNMP Tools Status 12 javascript document forms 0 submit ep Internet If you are transmitting sensitive data across wireless channels you should sabled 6 WEP enable Wired Equivalent Privacy WEP encryption Encryption requires you to use the same set of encryption decryption keys for the Wireless Barricade Plus and all of your wireless clients You can choose between standard 64 bit or the more robust 128 bit encryption keys 4 22 CONFIGURING THE WIRELESS BARRICADE PLUS You can automatically generate encryption keys or you can manually enter the keys For automatic 64 bit security you enter a passphrase that is used to create four keys as shown below The automatic 128 bit security generates a single key by entering a passphrase http 192 168 2 1 setupa stm SM gt System lt WAN Encryption LAN Wireless Encryption transmits your data securely over the wireless network Matching encryption keys must be setup on your Home Wireless Gateway and wireless client devices to
21. ISPs will specify your IP address and associated numbers which you must enter manually This is also known as a static IP address How your ISP assigns your IP address determines how you will configure your computer Here is what to do 1 From the Windows desktop click the Start button Choose Settings then click ce Windows Update F Programs gt Documents J Control Panel Control Panel Network and Dial up Connections Printers MR Taskbar amp Start Menu 5 15 SETTING TCP IP To Work WITH THE WIRELESS BARRICADE PLUS 2 Double click the Network amp Dial Up Connections icon Accessibility Add Remove Add Remove Administrative Control Panel Options Hardware Programs Tools 1 Use the settings in Control Panel to 3 or personalize your computer Date Time Display Folder Options Select an item to view its description Windows Update amp Windows 2000 Support Internet Keyboard all Options Network and Phone and Power Options Printers Dial up Modem onnections BD 3 Double click the icon that corresponds tle Ede Mew Favorkes Tools Advanced Hep to the connection to sack gt gt Qsearch urolders BHstory ME x Address i Network and Dial up Connections your Wireless Barricade Plus Make New Network and Dial Connection up Connections This folder contains network connections for this comput
22. System WAN Edit Schedule Rule LAN Wireless Name NAT Firewall Comment Activate Time Period VPN SNMP Tools Status 4 34 CONFIGURING THE WIRELESS BARRICADE PLUS Intrusion Detection Zi http 192 168 2 1 setupa stm Microsoft Internet Explorer gt System WAN Intrusion Detection LAN Wireless When the SPI Stateful Packet Inspection firewall feature is enabled all packets can be blocked Stateful Packet Inspection NAT SPI allows full support of different application types that are using dynamic port numbers For the applications checked in the list below the Barricade Plus will support full operation as initiated from the local LAN Firewall The Barricade Plus firewall can block common hacker attacks including IP Spoofing Land Attack Ping of Death IP with zero length Smurf Attack UDP port loopback Snork Attack TCP null scan and TCP SYN flooding Intrusion Detection Feature VPN SNMP Tools Status When hackers attempt to enter your network we can alert you by e mail Your E mail Address SMTP Server Address POPS Server Address User name J Password Connection Policy Fragmentation half open wait 10 Ieee TCP SYN wait 30 sec TCP FIN wait 5 sec TCP connection idle timeout 3600 see UDP session idle timeout 30 sec H 323 data channel idle timeout 180 sec DoS Detect Criteria
23. Wireless This page allows you to define SSID Transmission Rate Basic Rate and Channel ID for wireless connection In the wireless environment this gateway can also act as an wireless NAT access point These parameters are used for the mobile stations to connect to this access Firewall default Fully Automatic gt 1 2Mbps z You must specify a common radio channel and SSID Service Set ID to be used by the Wireless Barricade Plus and all of your wireless clients Be sure you configure all of your clients to the same values ESSID The Service Set ID This should be set to the same value as other wireless devices in your network Note The SSID is case sensitive and can consist of up to 32 alphanumeric characters Transmission Rate Set the data rate transmitted from the Faya E Wireless Barricade Plus The lower the data rate the longer _ aiIMAMIEINEIIE the transmission distance Default Fully Automatic Basic Rate Select All 1 2 5 5 11 Mbps from the drop down list to optimize the data transfer speed for your network Default 1 2Mbps 4 21 NETWORKING AND CLIENT SERVICES Channel The radio channel through which the Wireless Barricade 2 Plus communicates to PCs in its BSS Default Auto Note The available channel settings are limited to local regulations which determine the number of channels that ate available Encryption Heak gt OA A search Favores
24. agent may establish a number of communities with overlapping management station membership a eomm acess vai 1 public E Read Br 2 me se 3 P r z a af Reads 5 fread eos A community name authorized for management access Management access is restricted to Read only or Read Write Sets administrative status of entry to enabled or disabled Note Up to 5 community names may be entered CONFIGURING THE WIRELESS BARRICADE PLUS Trap SMC System WAN N SNMP Trap Wireless In the context of SNMP an unsolicited message can be sent by an agent to management station The purpose is NAT to notify the management station of some unusual event Firewall um Bl nn en a SUNE 1 fb ff i Disabled Son 2 Me R Disabled Status 3 Pf if fe Disabled gt 4h pP p Disabled 5 pP le 1 lE Disabled IP Address IP address of the trap manager Community A community specified for trap management Version Sets trap status of entry to disabled or enabled with V1 or V2c 4 45 NETWORKING AND CLIENT SERVICES Tools You can use the Tools menu to restore factory settings update firmware or reboot the Wireless Barricade Plus SMC System WAN Tools Settings LAN Wireless NAT This page includes the basic configuration tools such as save or restore configuration settings or upgrade system firmware Firewall VPN SNMP Tools St
25. check the inspection type that you need such as Packet Fragmentation TCP Connection UDP Session FTP Service H 323 Service and TFTP Service Hacker Prevention Feature The Wireless Barricade Plus firewall inspects packets at the application layer and maintains TCP and UDP session information including timeouts and number of active sessions provides the ability to detect and prevent certain types of network attacks such as DoS attacks Network attacks that deny access to a network device are called denial of service DoS attacks Denials of Service DoS attacks are aimed at devices and networks with a connection to the Internet Their goal is not to steal information but to disable a device or network so users no longer have access to network resoutce CONFIGURING THE WIRELESS BARRICADE PLUS By using the above inspected information and timeout threshold critieria the Wireless Barricade Plus provides the following DoS attack preventions Ping of Death Ping flood attack SYN flood attack IP fragment attack Teardrop Attack Brute force attack Land Attack IP Spoofing attack IP with zero length TCP null scan Port Scan Attack UDP port loopback Snork Attack etc Note The firewall does not significantly affect system performance so we advise enabling the prevention features to protect your network users When hackers attempt to enter your network we can alert you by e mail Enter your E mail address for alert
26. have completed the hardware setup by connecting your devices you need to configure your computer to connect to your Wireless Barricade Plus You need to determine how your ISP issues your IP address Many ISPs issue these numbers automatically using a networking technology known as Dynamic Host Configuration Protocol or DHCP Other ISPs will specify your IP address and associated numbers which you must enter manually This is also known as a static IP address How your ISP assigns your IP address determines how you will configure your computer 1 From the Windows desktop click the Start button Choose Settings then click Control Panel D Windows Update Programs 2 Favorites 2 Control Panel P AM Taskbar amp Start Menu 2 Help amp Folder Options E LA Active Desktop Windows Update CONFIGURING CLIENT TCP IP 2 From Control Panel double click the Network icon Display Accessibility AddNew Add Remove Date Time Options Hardware Programs Find Fast Fonts Game Internet Keyboard Controllers Options 3 093 A LiveUpdate Mail Modems Mouse Multimedia a a Power Printers Management its ODBC Data Passwords Sources 32bit 3 Inthe Network window under the Configuration tab double click the TCP IP is li i Dial Up Adapter entry that a listed with SMC EZ Card 10 100 SMC1211TX your network card TCP IP gt DialUp Adapter CPA C EZ Card 1
27. on your network The Wireless Barricade Plus examines the incoming data and compares it to a database of trusted information As traffic leaves the network it is defined by certain characteristics Incoming information is then compared to these sets of characteristics If the incoming data matches the predefined set of characteristics INTRODUCTION the incoming traffic is allowed If no match is found the incoming traffic is discarded Virtual Private Network VPN The Wireless Barricade Plus supports two of the most commonly used VPN protocols PPTP and IPSec These protocols allow remote users to establish a secure connection to their corporate network If your service provider supports VPNs then any of these protocols can be used to create an authenticated and encrypted tunnel for passing secure data over the Internet ie a traditionally shared data network The VPN protocols supported by the Wireless Barricade Plus are briefly described below e Point to Point Tunneling Protocol PPTP Provides a secure tunnel for remote client access to a PPTP security gateway PPTP includes provisions for call origination and flow control required by ISPs IP Security IPSec Provides IP network layer encryption IPSec can support large encryption networks such as the Internet by using digital certificates for device authentication 1 5 APPLICATIONS 1 6 CHAPTER 2 INSTALLATION Before installing the Barricad
28. or Auto Reconnect enabled can cause an increase of your telephone bill For detailled information please contact your local SMC support team CONFIGURING THE WIRELESS BARRICADE PLUS Static IP Address Fixed IP Static IP If your Service Provider has assigned a fixed IP address enter the assigned IP address subnet mask and the gateway address provided LAN Has your Service Provider given you an IP address and Gateway address Wireless NAT Firewall VPN BEN Tools Status If your Internet Service Provider has assigned a fixed address enter the assigned address and subnet mask for the Wireless Barricade Plus then enter the gateway address of your ISP Note You may need a fixed address if you want to provide Internet services such as a Web server or FTP server 447 NETWORKING AND CLIENT SERVICES System T WAN DNS A Domain Name System DNS server is like an index of IP addresses and Web addresses If you type a Web address into your browser such as www smc com a DNS server will find that name in its index and find the matching IP address 202 42 118 226 Most ISPs provide a DNS server for speed and convenience Since your Service Provider may connect to the Internet with dynamic IP LAN settings it is likely that the DNS server IPs are also provided dynamically However if there is a Wireless DNS server that you would rather use you need to specify the IP address here
29. result from its use No license is granted by implication or otherwise under any patent or patent rights of SMC SMC reserves the right to change specifications at any time without notice Trademarks SMC is a registered trademark and EZ Connect is a trademark of SMC Networks Inc Other product and company names are trademarks or registered trademarks of their respective holders
30. the checkboxes 4 Click OK and then click OK again to close the Internet Options Open Netscape and click the stop button Click Edit then click window Netscape 1 Preferences 2 Inthe Preferences 5 34 window under Category double click Advanced then click Proxies Select Direct connection to the Internet Click OK Local Area Network LAN Settings Preferences CONFIGURING CLIENT TCP IP Step 3 Obtain IP Settings From Your Wireless Barricade Plus Now that you have configured your computer to connect to your Wireless Barricade Plus it needs to obtain new network settings By releasing any old IP settings and renewing them with settings from your Wireless Barricade Plus you will also verify that you have configured your computer correctly 1 From the Windows desktop click the Start button then Accessories 2 Startup Command Prompt QJ Windows NT Explorer Programs gt Documents gt Programs and then Settings gt Find gt 3 Administrative Tools Common gt S Barricade Utility 3 Startup 3 WLAN Bridge Utility select Command Prompt Help IS HE DEU Bun 2 Inthe Command Prompt window type Shut Down IPCONFIG RELEASE and press the lt ENTER gt key ft Windo 808 Ve n 5 00 2195 KC Copyright 1985 1999 Microsoft Corp amp t Windows NT Workstation
31. these items if they are returned with the product Customers must contact SMC for a Return Material Authorization number prior to returning any product to SMC Proof of purchase may be required Any product returned to SMC without a valid Return Material Authorization RMA number clearly marked on the outside of the package will be returned to customer at customer s expense Customers are responsible for all shipping charges from their facility to SMC SMC is responsible for return shipping charges from SMC to customer LIMITED WARRANTY il WARRANTIES EXCLUSIVE IF A SMC PRODUCT DOES NOT OPERATE AS WARRANTED ABOVE CUSTOMER S SOLE REMEDY SHALL BE REPAIR OR REPLACEMENT OF THE PRODUCT IN QUESTION AT SMC S OPTION THE FOREGOING WARRANTIES AND REMEDIES ARE EXCLUSIVE AND ARE IN LIEU OF ALL OTHER WARRANTIES OR CONDITIONS EXPRESSED OR IMPLIED EITHER IN FACT OR BY OPERATION OF LAW STATUTORY OR OTHERWISE INCLUDING WARRANTIES OR CONDITIONS OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE SMC NEITHER ASSUMES NOR AUTHORIZES ANY OTHER PERSON TO ASSUME FOR IT ANY OTHER LIABILITY IN CONNECTION WITH THE SALE INSTALLATION MAINTENANCE OR USE OF ITS PRODUCTS SMC SHALL NOT BE LIABLE UNDER THIS WARRANTY IF ITS TESTING AND EXAMINATION DISCLOSE THE ALLEGED DEFECT IN THE PRODUCT DOES NOT EXIST OR WAS CAUSED BY CUSTOMER S OR ANY THIRD PERSON S MISUSE NEGLECT IMPROPER INSTALLATION OR TESTING UNAUTHORIZED ATTEMPTS TO REPAIR OR ANY OTHER CAUSE B
32. use encryption Do you want to use encryption Firewall VPN lt SNMP Enter a passphrase and click the Generate button or manually enter a key into the table Tools Status Passphrase DOSS y O Key 1 FEEF Deut ky 3 Key2 FFFFF z Key3 EFEFEF a Key 4 Encryption Encryption transmits your data securely over the wireless network Matching encryption keys must be setup on your Home Wireless Gateway and wireless client devices to use encryption Do you want to use encryption Wireless NAT Firewall VPN lt SNMP Tools Status Passphrase Key NETWORKING AND CLIENT SERVICES 4 24 If you use encryption configure the same keys used for the Wireless Barricade Plus on each of your wireless clients Note that the Wired Equivalent Privacy WEP protects data transmitted between wireless nodes but does not protect any transmissions over your wired network or over the Internet CONFIGURING THE WIRELESS BARRICADE PLUS Configuring Client Services The Wireless Barricade Plus includes a broad range of client services including firewall protection VPN tunneling capability network address translation virtual server address mapping DMZ and restricted Internet access for specified clients You can configure these functions by selecting specific items from the menu on the left of the screen NAT Network Address Translation A http 192 168 2 1 setupa stm Micros
33. y Performance and Maintenance ras Disconnected Lucent Win Modem e LAN or High Speed Internet Local Area Connection 2 Enabled 4 Local Area Connection 2 Status General Support Connection Status Duration 00 47 38 Speed 11 0 Mbps Activity 5 23 SETTING TCP IP To Work WITH THE WIRELESS BARRICADE PLUS 5 24 5 Double click Internet Protocol TCP IP 6 All the information that you need to record is on the Internet Protocol TCP IP Properties dialog box Use the spaces below to record the information If Obtain an IP address automatically and Obtain DNS server address automatically are already selected your computer is already configured for DHCP Click Cancel to close each window and skip to Step 2 Disable HTTP Proxy Local Area Connection 2 Properties PR General Authentication Advanced Connect using E9 PRISM25 IEEE 802 11 PC Card This connection uses the following items E Client for Microsoft Networks M File and Printer Sharing for Microsoft Networks 8 QoS Packet Scheduler Internet Protocol TCP IP Description Transmission Control Protocol Intemet Protocol The default wide area network protocol that provides communication across diverse interconnected networks C Show icon in notification area when connected Internet Protocol TCP IP Properties General Altemate Configuration You can get I
34. 0 Client for Microsoft Networks SETTING TCP IP To Work WITH THE WIRELESS BARRICADE PLUS 4 Select the IP Address tab TCP IP Properties If Obtain an IP address automatically is already selected your computer is already configured for DHCP Click Cancel to close each window and skip to Step 2 Disable HTTP Proxy a Subret Mes EEE 5 Locate your IP address and Subnet Mask Record them in the spaces provided TCP IP Properties below 6 Click the Gateway tab and record the numbers listed under Installed gateways 5 10 CONFIGURING CLIENT TCP IP Click the DNS cia Configuration tab Locate Sa ee the DNS servers listed under DNS Configuration Gateway WINS Configuration IP Adcess a 7 Disable DNS DNS Server Search Order Enable DNS Record the listed addresses eer DNS Seve Bear After writing down your CLL settings check to make sure you have recorded them Domain Suffix Search Order correctly Click the IP ae s Address tab and then click Obtain an IP address automatically Click OK Windows may need 7 System Settings Change your Windows 95 98 You must restart your computer before the new settings will take effect ME CD to copy some Do you want to restart your computer now files After it finishes Ta copying it will then prompt you to restart your system Click Yes and your computer will shut
35. 88 after the management IP address For example http 192 168 2 1 88 41 NAVIGATING THE WEB BROWSER INTERFACE The home page displays the Setup Wizard and Advanced Setup options File Edit View Favorites Tools Help Heak gt A A Qsearch Favorites Bristory SET Address ht index stm Setup Wizard Overview for purch k fr a IT Internet Navigating the Web Browser Interface The Wireless Barricade Plus management interface features a Setup Wizard and an Advanced Setup section Use the Setup Wizard if you want to quickly setup the Wireless Barricade Plus for use with a cable modem or DSL modem Advanced setup supports more advanced functions like hacker attack detection IP and MAC address filtering intrusion detection virtual server setup virtual DMZ hosts as well as other advanced functions CONFIGURING THE WIRELESS BARRICADE PLUS Making Configuration Changes Configurable parameters have a dialog box Once a configuration change has been made on a page be sure to click the Apply or Next button at the bottom of the page to enable the new setting To ensure proper screen refresh after a command entry be sure that Internet Explorer 5 0 is configured as follows Under the menu Tools Internet Options General Temporary Internet Files Settings the setting for Check for newer versions of stored pages should be Every visit to the
36. Barricade Plus Wireless Cable DSL Broadband Router with VPN Wireless Cable DSL Broadband Router with VPN 0 o EZ 3 Click Installation Wizard IEEE 802 11b Compliant Wireless Operation at 11 5 5 2 or 1 Mbps Internet Access via e 10 100 Mbps WAN port connection to xDSL Cable modem Home Networking via e Three 10 100 Mbps Ethernet switch ports with MDI MDI X auto negotiation Configuarable Parental Control by limiting access to web sites with URL and keyword blocking Stateful Packet Inspection SPI Advanced Firewall Protection Client Privileges Intrusion Detection NAT Built in VPN Tunneling Capability SMC genre Networks Barricade Plus Wireless Cable DSL Broadband Router User Guide From SMC s Barricade line of Broadband Routers M Sept 2002 Networks Revision Number R01 COMPLIANCES FCC Class B This equipment has been tested and found to comply with the limits for a Class B digital device pursuant to Part 15 of the FCC Rules These limits are designed to provide reasonable protection against harmful interference in a residential installation This equipment generates uses and can radiate radio frequency energy and if not installed and used in accordance with instructions may cause harmful interference to radio communications However there is no guarantee that the interference will not occut in a particular installation If this equipment does cause harmful int
37. Cs on the LAN according to the procedures described above Verifying Your TCP IP Connection After installing the TCP IP communication protocol and configuring an IP address in the same network with the Wireless Barricade Plus you can use the Ping command to check if your computer is successfully connected to the Wireless Barricade Plus The following example shows how the Ping procedure can be executed in an MS DOS window First execute the Ping command ping 192 168 2 1 If the following messages appear Pinging 192 168 2 1 with 32 bytes of data Reply from 192 168 2 1 bytes 32 time 2ms TTL 64 a communication link between your computer and the Wireless Barricade Plus has been successfully established Otherwise if you get the following messages Pinging 192 168 2 1 with 32 bytes of data Request timed out there may be something wrong in your installation procedure Check the following items in sequence 1 Is the Ethernet cable correctly connected between the Wireless Barricade Plus and your computer The LAN LED on the Wireless Barricade Plus and the Link LED of the network card on your computer must be on 5 45 SETTING TCP IP To Work WITH THE WIRELESS BARRICADE PLUS 2 Is TCP IP properly configured on your computer If the IP address of the Wireless Barricade Plus is 192 168 2 1 the IP address of your PC must be from 192 168 2 2 192 168 2 254 and the Default Gateway must be 192 168 2 1 I
38. EYOND THE RANGE OF THE INTENDED USE OR BY ACCIDENT FIRE LIGHTNING OR OTHER HAZARD LIMITATION OF LIABILITY IN NO EVENT WHETHER BASED IN CONTRACT OR TORT INCLUDING NEGLIGENCE SHALL SMC BE LIABLE FOR INCIDENTAL CONSEQUENTIAL INDIRECT SPECIAL OR PUNITIVE DAMAGES OF ANY KIND OR FOR LOSS OF REVENUE LOSS OF BUSINESS OR OTHER FINANCIAL LOSS ARISING OUT OF OR IN CONNECTION WITH THE SALE INSTALLATION MAINTENANCE USE PERFORMANCE FAILURE OR INTERRUPTION OF ITS PRODUCTS EVEN IF SMC OR ITS AUTHORIZED RESELLER HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES SOME COUNTRIES DO NOT ALLOW THE EXCLUSION OF IMPLIED WARRANTIES OR THE LIMITATION OF INCIDENTAL OR CONSEQUENTIAL DAMAGES FOR CONSUMER PRODUCTS SO THE ABOVE LIMITATIONS AND EXCLUSIONS MAY NOT APPLY TO YOU THIS WARRANTY GIVES YOU SPECIFIC LEGAL RIGHTS WHICH MAY VARY FROM COUNTRY TO COUNTRY NOTHING IN THIS WARRANTY SHALL BE TAKEN TO AFFECT YOUR STATUTORY RIGHTS Under the limited lifetime warranty internal and external power supplies fans and cables are covered by a standard one year warranty from date of purchase LIMITED WARRANTY ill Full Installation Manual Full installation manuals are provided on the Installation CD Rom Manuals in other languages than those included on the CD Rom are provided on www smc europe com section support Firmware and Drivers For latest driver technical information and bug fixes please visit www smc europe com section support
39. FC 1321 BOOTP Extension RFC 1497 PPP LCP Extension RFC 1570 PPPoE RFC 2516 NAT RFC 1631 HTML RFC 1866 HTTP RFC 1945 DHCP RFC 2131 PPTP RFC 2637 Temperature Operating 0 to 40 C Storage 40 to 70 C Humidity 5 to 95 noncondensing C 2 SPECIFICATIONS Compliances CE Mark Emissions FCC Class B VCCI Class B Industry Canada Class B EN55022 CISPR 22 Class B C Tick AS NZS 3548 1995 Class B Immunity EN 61000 3 2 3 EN 61000 4 2 3 4 5 6 8 11 Safety UL 1950 EN60950 T V CSA 22 2 No 950 Warranty Limited Lifetime C 3 SPECIFICATIONS C 4 APPENDIX D ORDERING INFORMATION Barricade Plus Broadband Firewall Router Products SMC7004FW 4 port Cable DSL Broadband Router WAN LAN SMC7004WEW 4 port Wireless Cable DSL Broadband Router WAN LAN WLAN ORDERING INFORMATION D 2 LIMITED WARRANTY SMC s Limited Warranty Statement Limited Warranty Statement SMC Networks Europe SMC warrants its products to be free from defects in workmanship and materials under normal use and service for the applicable warranty term All SMC products carry a standard 2 year limited warranty from the date of purchase from SMC or its Authorized Reseller SMC may at its own discretion repair or replace any product not operating as warranted with a similar or functionally equivalent product during the applicable warranty term SMC will endeavour to repair or replace any product r
40. P settings assigned automatically if your network supports this capability Otherwise you need to ask your network administrator for the appropriate IP settings Obtain an IP address automatically Use the following IP address lt Obtain DNS server address automatically Use the following DNS server addresses N r CONFIGURING CLIENT TCP IP 7 Select Obtain an IP address automatically and then select Obtain DNS server address automatically Then click OK Click OK or Close to close each window Step 2 Disable HTTP Proxy TCP IP Configuration Setting IP Address Subnet Mask Primary DNS Server Secondary DNS Server Default Gateway You will need to verify that the HTTP Proxy feature of your Web browser is disabled This is so that your Web browser will be able to view the configuration pages inside your Wireless Barricade Plus The following steps are for Internet Explorer and for Netscape Determine which browser you use and follow the appropriate steps Internet Explorer 1 Open Internet Explorer and click the stop button Click Tools then Internet Options A Windows Family Home Page Microsoft Internet Explorer File Edit View Favorites CASE Help Mail and News gt BZ 17 x Synchronize ig Favorites Windows Update Show Related Links Pendurte 5 25 SETTING TCP IP To Work WITH THE WIRELESS BARRICADE PLUS 5 26
41. TCP IP Protocol in Your PC on page 5 1 All PCs connected to the Wireless Barricade Plus must be set to the same IP subnet as the Wireless Barricade Plus The default subnet address of the Wireless Barricade Plus is 192 168 2 X where X means 2 254 and the subnet mask is 255 255 255 0 You can set the IP addtess for client PCs either by automatically obtaining an IP address from the Wireless Barricade Plus DHCP service or by manual configuration See Setting TCP IP to Work with the Wireless Barricade Plus on page 5 5 3 1 TCP IP CoNFIGURATION CHAPTER 4 CONFIGURING THE WIRELESS BARRICADE PLUS After you have configured TCP IP on a client computer you can use a Web browser to configure the Barricade Plus Wireless Cable DSL Broadband Router The Wireless Barricade Plus can be configured by any Java supported browser including Internet Explorer 4 0 or above or Netscape Navigator 4 0 or above Using the Web management interface you can configure the Wireless Barricade Plus and view statistics to monitor network activity To access the Wireless Barricade Plus LOGIN USER PASSWORD management interface enter the IP address of the Wireless Barricade Plus in your Web browser http 192 168 2 1 Then login the Wireless Barricade Plus Password system with no password by default LOGIN CANCEL there is no password Please type password Thank you Note For some browsers it may be necessary to include
42. TENTS LAN Gateway and DHC Settings 0 08 4 19 Wireless Configuration 0 0 cece cece ee eee 4 20 Configuring Client Services 2 0 0 0 cece cee 4 25 5 Configuring Client TCP IP 5 1 Installing TCP IP Protocol in Your PC 00 0 eee 5 1 Windows 95 98 ME 2 cc cent ee tenes 5 1 Windows 2000 2 0 cece eet teen eens 5 3 Setting TCP IP to Work with the Wireless Barricade Plus 5 5 Windows 95 98 ME 0 ccc cece ete eee eens 5 5 Windows 2000 2 0 0 cece cent tenn eee 5 6 Windows XP rieskaa een a 5 7 Configuring Your Computer with Windows 95 98 ME 5 8 Configuring Your Computer with Windows 2000 5 15 Configuring Your Computer with Windows XP 5 22 Configuring Your Computer with Windows NT 4 0 5 29 Configuring Your Macintosh Computer 5 36 Dynamic IP Allocation via a DHCP Server 5 43 Manual IP Configuration 222222 sense eee eee eee 5 44 Verifying Your TCP IP Connection 0 05 00 00000 5 45 Troubleshooting u ee secede A 1 B Cables TEURER te es Re rr rare gt 2 Ethernet Cable essen aaa aa B 1 Specifications anne har nee B 1 Twisted pair Cable 222 222ceeeeee seen nennen B 1 RJ 45 Port Pin Assignments 0 00 sense nennen B 3 C Specifications 4 senses itens DEU C 1 Ordering Information 6 eres D 1 NOTE For in
43. Total incomplete TCP UDP sessions HIGH 300 session Total incomplete TCP UDP sessions LOW 250 session Incomplete TCP UDP sessions per min HIGH 250 session Incomplete TCP UDP sessions per min LOW 200 session Maximum incomplete TCP UDP sessions number from same host 10 Incomplete TCP UDP sessions detect sensitive time period 300 msec Maximum half open fragmentation packet number from same host 30 Half open fragmentation detect sensitive time period 10000 msec Flooding cracker block time 300 sec 4 35 NETWORKING AND CLIENT SERVICES 4 36 The Intrusion Detection feature of the Wireless Barricade Plus limits the access of the incoming traffic from the WAN port When the SPI feature is turned on all the incoming packets will be blocked unless certain types of traffic types are checked by the users When the user checkes certain types of traffic only the particular type of traffic initiated from the Internal LAN will be allowed For example if the user only checks FTP service from the Stateful Packet Inspection heading all the incoming traffic will be blocked except the FTP connection initiated from the local LAN Stateful Packet Inspection This option allows you to select different application types that are using dynamic port numbers If you need to use the Stateful Packet Inspection SPI for blocking packets check the radio button in the Enable SPI and Anti DoS firewall protection field and then
44. and the IP address range Firewall to assign to those users VPN NMP Index Description Accept to connect Tools user Jason dinl Status 1 pptp client auto NS reconnect 2 Edit Clear 1 3 4 0 Bu co 6 io 7 o 8 rio 9 io 10 fa 1 fal 12 Edt clear 7 13 Edit Clear 0 j f E 1 21 u 15 Edit Clear 7 16 Edit Clear 7 1 Edit Clear 7 18 0 19 lo H 20 jo IP Address Pool SEESI 192 fiee 4 foo ELESE 192 fico a 10 4 41 NETWORKING AND CLIENT SER VICES 4 42 Click Edit on the screen to setup a PPTP session PPTP Tunnel Setting This page contains the detail PPTP tunnel settings You may specifiy the Idle Time Out which defines the idle time out period when PPP session will be terminated after the period of time without traffic going through You may also configure the tunnel to behave as either client or server No more than one PPTP client is allowed to be enabled at any time For a client tunnel both host made and router mode LAN to LAN are supported The tunnel can also be configured to automatically reconnect to the server when there is Internet traffic generated Be fe Min Brenn ot Mask Rss ss fees fo gise fie of W pptp client F host I auto reconnect _K _Cancel Using the above screen allows client PCs to establish a normal PPTP session and provides hassle free configuration of the PPTP client on each client PC For detailled information contact your local SMC support tea
45. atus 4 46 CONFIGURING THE WIRELESS BARRICADE PLUS Configuration Tools SMC System WAN LAN Configuration Tools Wireless Use the Backup tool to save the Barricade Plus current configuration to a file named config bin on your PC You lt NAT can then use the Restore tool to restore the saved configuration to the Barricade Plus Alternatively you can use Firewall the Restore to Factory Defaults tool to force the Barricade Plus to perform a power reset and restore the original T VPN factory settings rer Backup Restore Restore to Factory Defaults Status __More Configuration The Backup option allows you to save your Wireless Barricade Plus configuration to a file named config bin on your PC You can then click on the Restore radio button to restore the saved backup configuration file Selecting the Restore to Factory Defaults can restore the factory settings 4 47 NETWORKING AND CLIENT SERVICES 4 48 Firmware Upgrade SMC System WAN Firmware Upgrade LAN ei m 5 Wireless This tool allows you to upgrade the Barricade Plus system firmware using a file provided by SMC NAT Enter the path and name of the upgrade file then click the APPLY button below You will be prompted to confirm the Firewall upgrade Upgrade Target Firmware z Status Use this screen to update the latest firmware using a file provided by SMC Note For lat
46. bill if you not operate on a flat rate For detailled information contact www smc europe com or your local SMC support team CONFIGURING THE WIRELESS BARRICADE PLUS Advanced Setup Menu Selecting the Advanced Setup displays the main menu on the left hand side of the screen and descriptive information on the right hand side The Main Menu links are used to navigate to other menus that display configuration parameters and statistics F http 192 168 2 1 setupa stm Microsoft Internet Explorer lolx Fie View Favorites Tools Help Bak gt A A Asearch fagravorites Bristory Address http 192 168 2 1 setupa stm x eso SMC System WAN LAN Wireless The Barricade Plus supports advanced functions like Stateful Packet Inspection hacker attack detection content filtering access control YPN tunnels virtual DMZ hosts virtual servers and client filtering Advanced Setup SMC recommends that you keep the default settings http 192 168 2 1 system stm eg Internet 4 Navigating the Web Browser Interface The Wireless Barricade Plus advanced management interface includes ten key menus System WAN LAN Wireless NAT Firewall VPN SNMP Tools and Status The System menu provides general information on the current settings and how to configure the Wireless Barricade Plus The WAN LAN Wireless NAT Firewall VPN and SNMP menus are used to confi
47. cess to a central database or for connection between mobile workers as shown in the following figure Wired to Wireless Network Extension Internet Internet q Access Sse MM Device Notebook with Wireless B PC Card Adapter D i g ce SMC7004WFW ae z Wireless Cable DSL Broadband Router N y w Ex x Wired LAN PC with Wireless a PCI Adapter FEUERT ae Figure 2 4 Making WLAN Connections 2 9 INSTALLATION 2 10 Attach the Wireless Barricade Plus to the Internet If Internet services are provided through an xDSL or cable modem use unshielded or shielded twisted pair Ethernet cable Category 3 or greater with RJ 45 plugs to connect the broadband modem directly to the WAN port on the Wireless Barricade Plus Use either straight through or crossover cabling depending on the port type provided by the modem see Appendix B gt FTT IILI I Peer 2 Lit ie DSL Cable Modem R NA ISP Primary Figure 2 5 Making WAN Connection Note When connecting to the WAN port use 100 ohm Category 3 4 or 5 shielded or unshielded twisted pair cable with RJ 45 connectors at both ends for all connections Connecting the Power Adapter Plug the power adapter into the power socket on the Wireless Barricade Plus and the other end into a power outlet Check the indicator marked Power on the front panel to be sure it is on If the Po
48. ciientio that your IP IP Address Configure Using DHCP Server lt will be supplied by server gt address is now Subnet mask lt will be supplied by server gt 1 92 1 68 2 xxx Router address lt will be supplied by server gt your Subnet Mask Name server addr is 255 255 255 0 and your Default Search domains lt will be supplied by server gt Gateway is 192 168 2 1 These values confirm that your Wireless Barricade Plus is functioning 3 Close the TCP IP window 5 42 CONFIGURING CLIENT TCP IP Dynamic IP Allocation via a DHCP Server Select Obtain an IP address automatically in the IP Address tab Do not input any values under the Gateway tab and choose Disable DNS in the DNS Configuration tab These settings will be automatically configured by the DHCP server Click OK and reboot your system to implement the changes TCP IP Properties TCP IP Properties BEE Ba Kemnay Adal HEMGYE fi 5 43 SETTING TCP IP To Work WITH THE WIRELESS BARRICADE PLUS Manual IP Configuration 1 Select Specify an IP address in the IP Address tab Select an IP address based on the default network 192 168 2 X where X is between 1 and 254 and use 255 255 255 0 for the Subnet Mask 2 In the Gateway tab add the IP address of the Wireless Barricade Plus default 192 168 2 1 in the New gateway field and clic
49. ck on this button to disconnect from the Internet Renew Click on this button to reconnect to the Internet via cable DSL modem Security Log Displays any illegal attempts to access your network DHCP Client Log Displays information on all DHCP clients on your network 4 51 NETWORKING AND CLIENT SERVICES 4 52 CHAPTER 5 CONFIGURING CLIENT TCP IP If you have not previously installed the TCP IP protocol on your client PCs refer to the following section If you need information on how to configure a TCP IP address on a PC refer to Setting TCP IP to Work with the Wireless Barricade Plus on page 5 5 Installing TCP IP Protocol in Your PC Windows 95 98 ME 1 Click the Start button and choose Settings then click Control Panel 2 Double click the Network icon and select the Configuration tab in the Network window 3 Click the Add button to add the network component to your PC 4 Double click Protocol to add the TCP IP protocol Select Network Component Type 21x Click the type of network component you want to install Add Cancel Protocol is a language a computer uses Computers must use the same protocol to communicate 5 1 INSTALLING TCP IP ProTocoL IN Your PC 5 Select the Microsoft item in the manufacturers list And choose TCP IP in the Network Protocols Click the OK button to return to the Networ
50. down and restart TCP IP Configuration Setting IP Address Subnet Mask Primary DNS Server Secondary DNS Server Default Gateway Step 2 Disable HTTP Proxy You will need to verify that the HTTP Proxy feature of your Web browser is disabled This is so that your Web browser will be able to view the configuration pages inside your Wireless Barricade Plus The following steps are for Internet Explorer and for Netscape Determine which browser you use and follow the appropriate steps 5 11 SETTING TCP IP To Work WITH THE WIRELESS BARRICADE PLUS 5 12 Internet Explorer 1 Open Internet Explorer and click the stop button Click Tools then Internet Options J Microsoft Internet Explorer In the Internet N Internet Options Options window click the Connections tab Next click the LAN Settings button Clear all the checkboxes Click OK and then click OK again to close the Internet Options Local Area Network LAN Settings window For Ji psewenrolocaleddiesses Netscape 1 CONFIGURING CLIENT TCP IP Netscape Open Netscape and click the stop button Click Edit then click Preferences In the Preferences Preferences window under Category double click Advanced then click Proxies Select Direct connection to the Internet Click OK Repeat these steps for each Windows 95 98 Me computer connected to you
51. e Plus Wireless Cable DSL Broadband Router verify that you have all the items listed under Package Contents If any of the items are missing or damaged contact your local SMC distributor Also be sure that you have all the necessary cabling before installing the Wireless Barricade Plus After installing the Wireless Barricade Plus refer to the Web based configuration program in Chapter 4 for information on configuring the router Package Contents After unpacking The Wireless Barricade Plus Wireless Cable DSL Broadband Router check the contents of the box to be sure you have received the following components e Barricade Plus Wireless Cable DSL Broadband Router e Power adapter 9V 1A e One CAT 5 Ethernet cable e Four rubber feet e Installation CD with EZ 3 Click Installation Wizard FAQ Troubleshooting Tips and complete User Guide Quick Installation Guide e SMC Warranty Registration Card Immediately inform your dealer in the event of any incorrect missing or damaged parts If possible please retain the carton and original packing materials in case there is a need to return the product 2 1 INSTALLATION Please fill out and return the Warranty Registration Card to SMC or register on SMC s Web site at www smc europe com The Wireless Barricade Plus Wireless Cable DSL Broadband Router is covered by a limited lifetime warranty Description of Hardware 2 2 The Wireless Barricade Plus can be connected to
52. e ISP account multiple users on your network can browse the Web at the same time 1 3 APPLICATIONS 1 4 Virtual Server If you have a fixed IP address you can set up the Wireless Barricade Plus to act as a virtual host using network address translation NAT Remote users access various services at your site using a constant IP address Then depending on the requested service or port number the Wireless Barricade Plus can route the request to the appropriate server at another internal IP address This secures your network from direct attack by hackers and provides more flexible management by allowing you to change internal IP addresses without affecting outside access to your network DMZ Host Support Allows a networked computer to be fully exposed to the Internet Security The Wireless Barricade Plus supports security features that can deny Internet access to specified users or filter all requests for specific services the administrator does not want to serve The Wireless Barricade Plus firewall can also block common hacker attacks including IP Spoofing Land Attack Ping of Death IP with zero length Smurf Attack UDP port loopback Snork Attack TCP null scan and TCP SYN flooding Stateful Packet Inspection SPI Stateful Packet Inspection is one of the firewall features provided by the Wireless Barricade Plus The SPI ensures that the data coming into your network was requested by an end node computer
53. e ports include HTTP 80 FTP 21 Telnet 23 and POP3 110 CONFIGURING THE WIRELESS BARRICADE PLUS Firewall Protection F http 192 168 2 1 setupa stm Microsoft Internet Explorer File Edt View Favorites Tools Help Heak gt gt A A Qsearch Giravortes Bristory Eh J m A Address E http 192 168 2 1 setupa stm SMC System WAN E AN Security Settings Firewall Wireless lt NAT The Barricade Plus provides extensive firewall protection by restricting connection parameters Firewall to limit the risk of hacker attack and defending against a wide array of common attacks WPN However for applications that require unrestricted access to the Internet you can configure a TERN specific client server as a demilitarized zone DMZ Tools Status Enable or disable Firewall module function Enable Disable if The Wireless Barricade Plus firewall can provide the access control of connected client PCs block common hacker attacks including IP Spoofing Land Attack Ping of Death IP with zero length Smurf Attack UDP port loopback Snork Attack TCP null scan and TCP SYN flooding The firewall does not significantly affect system performance so we advise setting it enabled to protect your network users by selecting Enable on the screen Note When you select the Enable radio button of the Enable or disable Firewall module function field be sure to pr
54. e values confirm that your Wireless Barricade Plus is functioning ic gt ipconfig re lease Windows IP Configuration Ethernet adapter Local Area Connection Connection specific DNS Suffix IP Addre Subnet M Default Gateway G gt ipconfig renew Mindows IP Configuration Ethernet adapter Local Area Connection Connection specific DNS Suffix IP Addre 192 168 2 108 Subnet M 255 255 255 8 Default Gateway 192 168 2 1 Type EXIT and press lt ENTER gt to close the Command Prompt window 5 28 CONFIGURING CLIENT TCP IP Configuring Your Computer with Windows NT 4 0 Step 1 Configure TCP IP Settings After you have completed the hardware setup you need to configure your computer to connect to your Wireless Barricade Plus You need to determine how your ISP issues your IP address Many ISPs issue these numbers automatically using a networking technology known as Dynamic Host Configuration Protocol or DHCP Other ISPs will specify your IP address and associated numbers which you must enter manually This is also known as a static IP address How your ISP assigns your IP address determines how you will configure your computer Here is what to do Programs R A Documents Ei Settings A End IH elp 1 From the Windows desktop click Start then Settings and click Control Panel Bun Windows NT Workstation 5 29 SETTING TCP IP To Work WITH THE WIRELESS BARRICADE PLUS
55. eb Sharing vww TCP IP Conneot via Ethernet z Setup Configure Using DHCP Server z IP Address lt will be supplied by server gt Subnetmask lt will be supplied by server gt Router address Name server addr lt will be supplied by server gt lt will be supplied by server gt Search domains E 5 37 SETTING TCP IP To Work WITH THE WIRELESS BARRICADE PLUS If Using DHCP Server is already selected in the Configure field your computer is already configured for DHCP Close the TCP IP dialog box and skip to Step 2 Disable HTTP Proxy 3 All the information that you need to record is on the TCP IP dialog box Use the space below to record the information 4 After writing down your IP settings select Using DHCP Server in the Configure field and close the window 5 Another box will appear asking whether N Save changes to the current configuration you want to save your Saving the changes may interrupt any TCP IP services currently established TCP IP settings Click Save Don t Save J Cancel J TCP IP Configuration Setting IP Address Subnet Mask Router Name Server Step 2 Disable HTTP Proxy You will need to verify that the HTTP Proxy feature of your Web browser is disabled This is so that your Web browser will be able to view the configuration pages inside your Wireless Barricade Plus T
56. eceive Data RD Transmit Data ID 6 Receive Data RD Transmit Data RD Pins 4 5 7 and 8 are not connected The and signs represent the polarity of the wires that make up each wire pair B 3 CABLES B 4 APPENDIX C SPECIFICATIONS LAN Interface 10BASE T 100BASE TX 3 RJ 45 ports WAN Interface 10BASE T 100BASE TX 1 RJ 45 port WLAN Interface Standard IEEE 802 11b Direct Sequence Spread Spectrum DSSS Transmission Rate 11 Mbps automatic fallback to 5 5 2 or 1 Mbps Maximum Channels US Canada 11 Europe ETSI 13 Range Up to 304 8m 1000 ft Frequency US Canada Eutope 2 400 2 4835 GHz Japan 2 471 2 497 GHz Sensitivity 1 2 5 5 Mbps 80 dBm 11 Mbps 76 dBm typical Modulation CCK BPSK QPSK Encryption 64 bit 128 bit WEP Maximum Clients 128 Indicator Panel WAN WLAN LAN Link Activity Power Dimensions 19 5 x 11 25 x 2 55 cm Weight 0 61 kg Input Power 9V 1 A C 1 SPECIFICATIONS Maximum Current 0 04A RMS max 110V 240V Power Consumption 5 Watts max 100 240 VAC Management Web management Advanced Features Dynamic IP Address Configuration DHCP DNS Firewall Client privileges hacker prevention and logging Virtual Private Network PPTP IPSec VPN tunneling Stateful Packet Inspection Internet Standards ARP RFC 826 IP RFC 791 ICMP RFC 792 UDP RFC 768 TCP RFC 793 Telnet RFC 854 859 MD5 R
57. ed the hardware setup you need to configure your computer to connect to your Wireless Barricade Plus You also need to determine how your ISP issues your IP address Many ISPs issue these numbers automatically using a networking technology known as Dynamic Host Configuration Protocol or DHCP Other ISPs will specify your IP address and associated numbers which you must enter manually This is also known as a static IP address How your ISP assigns your IP address determines how you will configure your computer Here is what to do 1 From he Windows S desktop click the start ae BD Mr documents Internet Explorer tton Choose Control bu a E mail IM Recent Documents gt Panel gl Outlook Express D My Pictures xI MSN Explorer B My Music Windows Media Player ws My Computer Q Windows Movie Maker g Control Panel ea Connect To gt Tour Windows XP amp Printers and Faxes Files and Settings Transfer Wizard Help and Support e Snagit 5 0 gt Search All Programs gt 77 Run Select the Network and Internet Connections icon then click the Network Connections icon Double click on the LAN or High Speed Internet Click Properties CONFIGURING CLIENT TCP IP j JO search gt Folders Ea Pick a category i Appearance and Themes n Z oe Network and Internet Connections i 6 Add or Remove Programs f 3 Sounds Speech and Audio Devices
58. eerie aas Dr NR nn 1 1 About the Wireless Barricade Plus 00 0 1 1 Heatutes and Benefits s 222 22 wake Sas esha Cas 1 2 Applications 33 02 2 re Biya nn 1 3 Installation yasni 2 1 D ckase G ntents 1 Hy a a a a ie 2 1 Description of Hardware siaaa anA eee seen 2 2 System Requirements 0 3 0 fasts Haake tote sha kop eae Se Aare Cos 2 4 Gonne ctsthe System Pea tayo boat Pte da eis oe 2 5 Basic Installation Procedure 0 eee eee eee 2 6 Verity Port Status Zur An a in es te 2 11 Configuring Client PCs 2 cece eee eee 3 1 TEPAIP Configuration nn Lg 3 1 Configuring the Wireless Barricade Plus 4 1 Navigating the Web Browser Interface 0 00 4 2 Making Configuration Changes 000s cece ee eee 4 3 Setup Wizardi A en teh sent dot oa ase A ae tate 4 3 Broadband Type fowc osha son ech nn 4 3 Advanced Setup Menu ssi casa hitietate ae Sia eek eed 4 7 Navigating the Web Browser Interface 00sec ee cece 4 7 Main Meniuy 2 2 nnteit e con wane eb ee 4 8 Making Configuration Changes 0 00 eee eee eee 4 10 SYSTEM SEUNS 52 Ase Grier ates ee a neta ia ath ee ae 4 11 Set Time Zone an A ee adden ileal tdi Dia 4 11 Setting a Password 4 2d 248 Moni ar 4 12 Remote Management enn ogei eie da a a eee 4 13 Networking and Client Services nunun runnner 4 14 WAN GonHsuration era gee Shake dap ea Be 4 14 DNS Conttouration ur ate a Ad eee 4 18 ix TABLE OF CON
59. elds EN 61000 4 6 1996 0 15 80MHz with 1kHz AM 80 Modulation 3V m Power frequency magnetic field immunity test according to EN 61000 4 8 1993 1A m at frequency 50Hz Voltage dips short interruptions and voltage variations immunity test according to EN 61000 4 11 1994 gt 95 Reduction 10ms 30 Reduction 500ms gt 95 Reduction 5000ms LVD EN60950 A1 1992 A2 1993 A3 1993 A4 1995 A11 1997 Industry Canada Class B This digital apparatus does not exceed the Class B limits for radio noise emissions from digital apparatus as set out in the interference causing equipment standard entitled Digital Apparatus ICES 003 of the Department of Communications Cet appareil num rique respecte les limites de bruits radio lectriques applicables aux appareils num riques de Classe B prescrites dans la norme sur le mat riel brouilleur Appareils Num riques NMB 003 dict e par le minist re des Communications COMPLIANCES vi Safety Compliance Underwriters Laboratories Compliance Statement Important Before making connections make sure you have the correct cord set Check it read the label on the cable against the following Operating Voltage Cord Set Specifications 120 Volts UL Listed CSA Certified Cord Set Minimum 18 AWG Type SVT or SJT three conductor cord Maximum length of 15 feet Parallel blade grounding type attachment plug rated 15A 125V 240 Volts Europe only
60. er and a wizard to help you create a new connection 4 Click Properties General m Connection Status Connected Duration 00 15 12 Speed 10 0 Mbps r Activity Sent m Received are Packets 43 0 5 16 5 Double click Internet Protocol TCP IP 6 All the information that you need to record is on the Internet Protocol TCP IP Properties dialog box Use the spaces below to record the information If Obtain an IP address automatically and Obtain DNS server address automatically are already selected your computer is already configured for DHCP Click Cancel to close each window and skip to Step 2 Disable HTTP Proxy CONFIGURING CLIENT TCP IP ca Ares Connection a General Sharing Connect using BP smc Ez caa tonowe O Components checked are used by this connection E Client for Microsoft Networks M SMC EZStart Service M a File and Printer Sharing for Microsoft Networks Internet Protocol TCP IP Install Uninstall Properties Description Transmission Control Protocol Intemet Protocol The default wide area network protocol that provides communication across diverse interconnected networks T Show icon in taskbar when connected OK Cancel Internet Protocol TCP IP Properties 2h x General You can get IP settings assigned automatically if your network supports this capability Otherwise you need to ask y
61. erference to radio or television reception which can be determined by turning the equipment off and on the user is encouraged to try to correct the interference by one or more of the following measures e Reorient the receiving antenna e Increase the separation between the equipment and receiver e Connect the equipment into an outlet on a circuit different from that to which the receiver is connected Consult the dealer or an experienced radio TV technician for help FCC Caution To assure continued compliance example use only shielded interface cables when connecting to computer or peripheral devices Any changes or modifications not expressly approved by the party responsible for compliance could void the user s authority to operate this equipment This device complies with Part 15 of the FCC Rules Operation is subject to the following two conditions 1 This device may not cause harmful interference and 2 this device must accept any interference received including interference that may cause undesired operation CAUTION STATEMENT FCC RF Radiation Exposure Statement This equipment complies with FCC RF radiation exposure limits set forth for an uncontrolled environment This equipment should be installed and operated with a minimum distance of 20 centimeters between the radiator and your body This transmitter must not be co located or operating in conjunction with any other antenna or transmitter 111 COMPLIANCES
62. ess the APPLY button 4 29 NETWORKING AND CLIENT SERVICES 4 30 Access Control http 192 168 2 1 setupa stm Microsoft Internet Explorer Fie Edt View Favorites Tools Help Bock gt 7 OA Qsearch airavontes History Sy Sb i A Address http 1192 168 2 1 setupa stm SMC System WAN Access Control LAN Wireless NAT Firewall Access Control allows users to define the traffic type permitted or not nermitted to WAN port service This page includes IP address filtering and MAC address filtering e Enable Filtering Function Yes C No Normal Filtering Table up to 10 computers No Valid Filtering Rule MAC Filtering Table up to 32 computers L E ME ny E m m m CEN i C u E i Ca a il emet Using this option allows you to specify different privileges for the client PCs up to 32 computers The following items are included in the Access Control screen Field Description Normal Filtering Table Displays the IP address and filtering status of the connected client PC MAC Filtering Table Displays the MAC address of the client PC CONFIGURING THE WIRELESS BARRICADE PLUS Note Click on Add PC and define the appropriate settings for client PC services as shown in the following screen Ai http 192 168 2 1 setupa stm Microsoft Internet Explorer 18 xi Fie Edt View Favortes Tools Help
63. est firmware version information visit SMC s Web site at http www smc europe com CONFIGURING THE WIRELESS BARRICADE PLUS Reset SMC System EWAN Reset LAN Wireless In the event that the system stops responding correctly or in some way stops functioning you can perform a NAT reset Your settings will not be changed To perform the reset click on the APPLY button below You will be Firewall asked to confirm your decision The reset will be complete when the power light stops blinking VPN gt SNMP Tools Status 12 If the Wireless Barricade Plus stops responding you can click on the Apply button to refresh the gateway The saved configurations of the Wireless Barricade Plus will not be changed back to factory default settings after resetting the gateway Note Ifyou use the reset button on the rear panel the Wireless Barricade Plus performs a power reset and restores the factory settings 4 49 NETWORKING AND CLIENT SERVICES 4 50 Status You can use the following screen to display WAN LAN connection status firmware and hardware version numbers as well as information on all DHCP clients connected to your network System WAN LAN Wireless NAT Firewall VPN gt SNMP Tools Status Status You can use the Status screen to see the connection status for the Barricade Plus WAN LAN interfaces firmware and hardware version numbers any illegal attempts
64. eturned under warranty within 30 days of receipt of the product As new technologies emerge older technologies become obsolete and SMC will at its discretion replace an older product in its product line with one that incorporates these newer technologies The standard limited warranty can be upgraded to a 5 year Limited Lifetime warranty by registering new products within 30 days of purchase from SMC or its Authorized Reseller Registration can be accomplished via the enclosed product registration card or online via the SMC web site Failure to register will not affect the standard limited warranty The Limited Lifetime warranty covers a product during the Life of that Product which is defined as a period of 5 years from the date of purchase of the product from SMC or its authorized reseller All products that are replaced become the property of SMC Replacement products may be either new or reconditioned Any replaced or repaired product carries either a 30 day limited warranty or the remainder of the initial warranty whichever is longer SMC is not responsible for any custom software or firmware configuration information or memory data of Customer contained in stored on or integrated with any products returned to SMC pursuant to any warranty Products returned to SMC should have any customer installed accessory or add on components such as expansion modules removed prior to returning the product for replacement SMC is not responsible for
65. f you can successfully Ping the Wireless Barricade Plus then you are now ready to connect to the Internet 5 46 APPENDIX A TROUBLESHOOTING This appendix describes common problems you may encounter and possible solutions to them The Wireless Barricade Plus can be easily monitored through panel indicators to identify problems If you cannot resolve any connection problems after checking the indicators then refer to the other sections in the following table Troubleshooting Chart Symptom Action LED Indicators Power LED is Off External power supply has failed or is disconnected e Check connections between the Wireless Barricade Plus the external power supply and the wall outlet Ifthe power indicator does not turn on when the power cord is plugged in you may have a problem with the power outlet power cord or external power supply However if the unit powers off after running for a while check for loose power connections power losses or surges at the power outlet If you still cannot isolate the problem then the external power supply may be defective In this case contact SMC Technical Support for assistance A 1 TROUBLESHOOTING Troubleshooting Chart Symptom Action LED Indicators Link LED is Off e Verify that the Wireless Barricade Plus and attached device are powered on e Be sure the cable is plugged into both the Wireless Barricade Plus and
66. formation on PPTP DDNS and UPnP please visit www smc europe com or contact the SMC technical support team CHAPTER 1 INTRODUCTION Congratulations on your purchase of the Barricade Plus Wireless Cable DSL Broadband Router SMC is proud to provide you with a powerful yet simple communication device for connecting your local area network LAN to the Internet For those who want to surf the Internet in the most secure way this Wireless Cable DSL Broadband Router provides a convenient and powerful solution About the Wireless Barricade Plus The Wireless Barricade Plus provides Internet access to multiple users by sharing a single user account It serves as a wireless Access Point and includes a 10 100Mbps WAN port which allows you to connect to an xDSL or Cable modem The most outstanding feature of the Wireless Barricade Plus is its extensive firewall protection and Virtual Private Network VPN services This new Wireless Barricade Plus technology provides many secure and cost effective functions It is simple to configure and can be up and running in minutes 1 1 FEATURES AND BENEFITS Features and Benefits 1 2 Internet connection to xDSL or cable modem via a 10 100 Mbps WAN port Local network connection via 10 100 Mbps Ethernet ports or 11 Mbps wireless interface supporting up to 128 mobile users 802 11b Compliant interoperable with multiple vendors Provides seamless roaming within 802 11b WLAN environment S
67. ght through cable These ports can be connected directly to a PC or to a server equipped with an Ethernet network interface card or to a networking device such as an Ethernet hub or switch e One RJ 45 port for connection to an xDSL or cable modem This port is fixed at 10 100 Mbps full duplex This port only supports MDI X pin signals so you will have to use either straight through or crossover cable depending on the port type used on the modem e Two detachable antennas dipole omni directional The following figure shows the components of the Wireless Barricade Plus gt 2 WAN 1 2 3 RESET Max et no gt lt Figure 2 1 Front and Rear Panels 2 3 INSTALLATION Item Description LEDs Power WLAN WAN and LAN port status indicators See Verify Port Status on page 2 11 Wireless Dual antennas provide optimal reception by dynamically Antennas choosing the best antenna for each client Reset Use this button to reset the power and restore the default Button factory settings WAN WAN port RJ 45 Connect your Cable modem xDSL modem Port or an Ethernet router to this port LAN Fast Ethernet ports RJ 45 Connect devices on your local area Ports network to these ports such as a PC hub or switch Power Connect the included power adapter to this inlet ER Warning Using the wrong type of power adapter may cause damage System Requirements 2
68. gure the LAN WAN and wireless interface as well as other functions 4 7 NAVIGATING THE WEB BROWSER INTERFACE While the Tools menu is used to backup the Wireless Barricade Plus restore the factory settings update the firmware or reset the Wireless Barricade Plus The Status menu is used to see the connection status for the Wireless Barricade Plus WAN LAN interfaces firmware and hardware version numbers any illegal attempts to access your network as well as information on all DHCP client PCs currently connected on your network Main Menu 4 8 Using the Web management interface you can define system parameters manage and control the Wireless Barricade Plus and its ports or monitor network conditions The following table briefly describes the selections available from this Advanced Setup screen Menu Description System Menu Configures TCP IP settings and client services Time Zone Sets the local time zone Password Settings Sets the password for administrator access Remote Management Sets the IP address for remote management station WAN Menu e Specifies the Internet connection type 1 Dynamic IP host configuration and the physical MAC address of each media interface 2 PPPoE configuration or 3 Static IP and gateway address e Specifies DNS servers to use for domain name resolution LAN Menu Sets the TCP IP configuration of the Wireless Barricade Plus LAN interface and all DHCP clients
69. he following steps are for Internet Explorer and for Netscape Determine which browser you use and follow the appropriate steps 5 38 CONFIGURING CLIENT TCP IP Internet Explorer File F203 view Go Favor 1 Open Internet Explorer and click the stop button Click Edit and select Preferences Find Find Again 3G Preferences 3 2 Inthe Internet Explorer Preferences Internet Security If you are accessing the Internet from a private network you can set gateways to allow Internet access Contact your network manager for Explorer Security Zones more information Note These settings are shared with other Ratings applications through Internet Config Preferences Advanced Use Proxy Servers r lt gt Forms AutoFill C web Proxy Settings window Forms AutoComplete C Use web Proxy for all under o Autor Beetle C Bypass Web Proxy for FTP 7 Receiving Files C secure Proxy Settings Network Download Options i gt SEEKER Gi Mail Proxy Settings select Cookies C Gopher Proxy Settings i are List the sit it ti t to directly bi ing the i ist the sites you want to connect to directly bypassing the proxies Proxies Protsent Hera set above Put a space or comma between each site Q Proxies Site Passwords 3 Uncheck sy E mail General all checkboxes and click OK 5 39 SETTING TCP IP To Work WITH THE WIRELESS BARRICADE PLUS
70. ht benutzt sollten Sie es vom Stromnetz trennen Somit wird im Falle einer berspannung eine Besch digung vermieden 12 Durch die L ftungs ffnungen d rfen niemals Gegenst nde oder Fl ssigkeiten in das COMPLIANCES Ger t gelangen Dies k nnte einen Brand bzw elektrischen Schlag ausl sen 13 ffnen sie niemals das Ger t Das Ger t darf aus Gr nden der elektrischen Sicherheit nur von authorisiertem Servicepersonal ge ffnet werden 14 Wenn folgende Situationen auftreten ist das Ger t vom Stromnetz zu trennen und von einer qualifizierten Servicestelle zu berpr fen Netzkabel oder Netzstecker sind besch digt Fl ssigkeit ist in das Ger t eingedrungen Das Ger t war Feuchtigkeit ausgesetzt Wenn das Ger t nicht der Bedienungsanleitung entsprechend funktioniert oder Sie mit ang Hilfe dieser Anleitung keine Verbesserung erzielen e Das Ger t ist gefallen und oder das Geh use ist besch digt f Wenn das Ger t deutliche Anzeichen eines Defektes aufweist 15 Stellen Sie sicher da die Stromversorgung dieses Ger otes nach der EN 60950 gepr ft ist Ausgangswerte der Stromversorgung sollten die Werte von AC 7 5 8V 50 60Hz nicht ber oder unterschreiten sowie den minimalen Strom von 1A nicht unterschreiten Der arbeitsplatzbezogene Schalldruckpegel nach DIN 45 635 Teil 1000 betr gt 70dB A oder weniger vii COMPLIANCES viii TABLE OF CONTENTS TABLE OF CONTENTS Introductions
71. icade Plus it needs to obtain new network settings By releasing any old IP settings and renewing them with settings from your Wireless Barricade Plus you will also verify that you have configured your computer correctly 1 Pull down the Apple Menu Click Control Panels and select TCP IP About This Computer File Edit View Special Help Apple DVD Player D Apple System Profiler E Calculator gt Chooser BL Clipboard alias Control Panels M Favorites Key Caps Mail al Microsoft Office 98 ER Network Browser K Note Pad alias E QuickTime Player Recent Applications G Recent Documents amp Recent Servers i Remote Access Status i Scrapbook amp Sherlock 2 2 SimpleText alias Q Stickies Appearance gt Apple Menu Options AppleTalk ColorSync Configuration Manager gt control Strip Date amp Time Energy Saver Extensions Manager File Exchange File Sharing General Controls Internet lomega Drive Options Keyboard Launcher Location Manager Memory Modem Monitors Mouse MouseWare Multiple Users QuickTime Settings Remote Access Software Update Sound Speech Startup Disk vvv Text USB Printer Sharing Web Sharing 5 41 SETTING TCP IP To Work WITH THE WIRELESS BARRICADE PLUS 2 Inthe TCP IP window your Connect via Setup new settings will be shown Verify pucr
72. ing a networking technology known as Dynamic Host Configuration Protocol or DHCP Other ISPs will specify your IP address and associated numbers which you must enter manually This is also known as a static IP address How your ISP assigns your IP address determines how you will configure your computer 5 36 Here is what to do 1 Pull down the Apple Menu Click Control Panels and select TCP IP 2 Inthe TCP IP dialog box make sure that Ethernet is selected in the Connect Via field CONFIGURING CLIENT TCP IP File Edit View Special About This Computer Help Apple DVD Player D Apple System Profiler H calculator gt Chooser BL Clipboard alias Control Panels A Favorites Key Caps A Mail al Microsoft Office 98 ER Network Browser K Note Pad alias E QuickTime Player Recent Applications Recent Documents amp Recent Servers i Remote Access Status 72 Scrapbook Sherlock 2 lt 3 SimpleText alias Stickies Appearance Apple Menu Options AppleTalk ColorSync Configuration Manager Control Strip Date amp Time Energy Saver Extensions Manager File Exchange File Sharing General Controls Internet lomega Drive Options Keyboard Launcher Location Manager Memory Modem Monitors Mouse MouseWare Multiple Users QuickTime Settings Remote Access Software Update Sound Speech Startup Disk Text USB Printer Sharing W
73. ing hacker access Specify your E mail servers user name and password Connection Policy Enter the appropriate values for TCP UDP sessions e DoS Criteria and Port Scan Criteria Setup DoS and port scan criteria in the spaces provided 4 37 NETWORKING AND CLIENT SERVICES 4 38 DMZ Demilitarized Zone SMC System WAN LAN DMZ Demilitarized Zone Wireless f x f ENAT If you have a local client PC that cannot run an Internet application properly from behind the NAT firewall then you can open the client up to unrestricted two way Internet access by defining a Virtual DMZ Host Firewall Enable DMZ Yes No Multiple PCs can be exposed to the Internet for two way communications e g Internet gaming video conferencing or VPN connections To use the DMZ you must set a static IP address for that PC Public IP Address Client PC IP Address 1 10 2 12 96 19218820 2p p p p 19218820 3 fo p p 192 168 220 4 p p fo 192 168 2 0 5p pP p pP 192 168 2 0 ep p p fo 19218820 7 fo p p 19218820 ef p p 19218820 If you have a client PC that cannot run an Internet application properly from behind the firewall then you can open the client up to unrestricted two way Internet access Enter the IP address of a DMZ host to this screen Adding a client to the DMZ Demilitarized Zone may expose your local network to a variety of security risks so only use this option as a last resort CONFIGURING THE WIRELESS BARRICADE PLUS
74. irewall gt SNMP Tools 1 Global p P PB 1 is transformed as multiple virtual IPs Status from 192 168 2 0 to1921682 0 2 Goba 2 0 0 0 _is transformed as multiple vitual IPs fom 192 168 2 0 to 192188 2 0 3 Globall OP B B 1 is transformed as multiple virtual IPs from 192 168 2 0 to192168 2 0 4 GlobalIP 0 0 0 1 is transformed as multiple virtual IPs from 192 168 2 0 to1921682 0 5 GlobaliP 0 EB 0 L is transformed as multiple virtual IPs from 192168 2 0 total from 192 168 2 to192188 2 0 6 Globa OP D P 1 is transformed as multiple virtual IPs from 192 168 2 to 192 168 2 0 7 GlobaliP 2 BE Ps transformed as multiple vitual IPs from 192 168 2 0 to1921688 2 0 8 Globa 0 0 D 2 is transformed as multiple virtual IPs from 192 168 2 Nora 9 Global OD B 1 is transformed as multiple virtual IPs from 192 1682 0 to 192 168 2 0 10 Global IP BR RB BR b is transformed as multiple virtual IPs from 192 168 2 to 192 168 2 0 oeo Use the Address Mapping option to limit the number of public IP addresses required from the ISP and maintain the privacy and security of the local network 4 26 CONFIGURING THE WIRELESS BARRICADE PLUS Virtual Server System lt WAN x Eon You can configure the Barricade Plus as a virtual server so that remote users accessing services such as the Wireless Web or FTP at your local site via public IP addresses can be automatically redirected to
75. k Add 3 In the DNS Configuration tab add the IP address for the Wireless Barricade Plus and click Add This automatically relays DNS requests to the DNS server s provided by your ISP Otherwise add specific DNS servers into the DNS Server Search Order field and click Add TCP IP Properties 71x Bindings Advanced Neso TCP IP Properties BE DNS Configuration Gateway WINS Configuration IPA Bindings Advanced NetBlOS An IP address can be automatically assigned to this comput DNS Configuration Gateway WINS Configuration IP Address If your network does not automatically assign IP addresses fe Det Sekten for an address and then type it ir The first gateway in the Installed Gateway list will be the default Des d The address order in the list will be the order in which these machines are used Obtain an IP address automatically Specify an IP address New gateway IP Address 192 168 2 22 1 192 168 2 1 Add nn Ae BE BE 255 255 255 Bindings Advanced News DNS Configuration Gateway WINS Configuration IP Address C Disable DNS Enable DNS Host MyComputer Domain OK DNS Server Search Order ______________ 168 95 192 1 Add Gai 168 95 1 1 Hemeve Domain Suffix Search Order 5 44 CONFIGURING CLIENT TCP IP 4 After finishing TCP IP setup click OK and then reboot the computer After that set up other P
76. k window Select Network Protocol Fast Infrared Protocol 5 PX SPX compatible Protocol Microsoft 32 bit DLC Microsoft DLC 6 The TCP IP protocol will be listed in the Network window Click OK to complete the install procedure and restart your PC to enable the TCP IP protocol 5 2 CONFIGURING CLIENT TCP IP Windows 2000 1 Click the Start button and choose Settings then click Control Panel Double click the Network and Dial up Connections icon then Local Area Connection icon and press the Properties button in the General tab Click the install button to add the network component to your PC Double click on Protocol to add the TCP IP protocol Select Network Component Type EE Click the type of network component you want to install a Client a Service Protocol Description A protocol is a language your computer uses to communicate with other computers 5 3 INSTALLING TCP IP ProTocoL IN Your PC 5 Choose Internet Protocol TCP IP in the Network Protocols Click the OK button to return to the Network window Select Network Protocol Bx 6 The TCP IP protocol will be listed in the Network window Click OK to complete the install procedure 5 4 CONFIGURING CLIENT TCP IP Setting TCP IP to Work with the Wireless Barricade Plus Windows 95 98 ME 1 Click the Start bu
77. lient PCs for dynamic address allocation Valid IP addresses consist of four numbers and are separated by periods The first three fields are the network portion and can be from 0 255 while the last field is the host portion and can be from 1 254 However remember not to include the gateway address of the Wireless Barricade Plus in the client address pool If you change the pool range make sure the first three octets match the gateway s IP address i e 192 168 2 xxx Note Verify that your IP address pool is from 192 168 2 2 to 192 168 2 254 your subnet mask is 255 255 255 0 and your default gateway is 192 168 2 1 4 19 NETWORKING AND CLIENT SERVICES Wireless Configuration 4 20 To configure the Wireless Barricade Plus as a wireless access point for wireless clients either stationary or roaming all you need to do is define the radio channel the Service Set identifier SSID and encryption options System WAN Wireless Settings LAN Wireless The gateway can be quickly configured as a wireless access point for roaming clients by setting the service set identifier and channel number It also supports data encryption and client filtering NAT Firewall VPN SNMP Tools Status CONFIGURING THE WIRELESS BARRICADE PLUS Channel and SSID Back DE A search Favorites Gristory Ei 3 mS Address http 192 168 2 1 setupa stm System ON Channel and SSID LAN
78. local servers NAT configured with private IP addresses In other words depending on the requested service TCP UDP port number the Barricade Plus redirects the external service request to the appropriate server located at another internal IP address Virtual Server Firewall VPN SNMP Tools IP Sane 192 168 2 G TCP 1 C UDP L oo 4 it Sun I 1 _ ri ute r 1 _ m e m m Om _ 15 rs OO A L M o m c m E o A m m 4 27 NETWORKING AND CLIENT SERVICES 4 28 If you configure the Wireless Barricade Plus as a virtual server remote users accessing services such as Web or FTP at your local site via public IP addresses can be automatically redirected to local servers configured with private IP addresses In other words depending on the requested service TCP UDP port number the Wireless Barricade Plus redirects the external service request to the appropriate server located at another internal IP address The WAN interface must have a fixed IP addtess to utilize this function For example if you set Type Public Port to TCP 80 HTTP or Web and the Private IP Port to 192 168 2 2 80 then all HTTP request from outside users will be transferred to 192 168 2 2 Therefore by just entering the IP Address provided by the ISP Internet users can access the service they need at the local address to which you redirect them Some of the more common TCP servic
79. ls Help Heak gt gt OA A search Biravortes Bristory I Address hetp 192 168 2 1 setupw stm SMC 1 Broadband Type 2 IP Address Info 2 IP Address Info a Cable Modem HostName n MAC Adios fin en ea fF Fa Release Renew Your ISP may have given you a host name If so enter it into this field Click Finish to complete the setup The Status page will open to allow you to view the connection status as well as other information See Status on page 4 50 for details CONFIGURING THE WIRELESS BARRICADE PLUS Fixed IP xDSL setupw stm icrosoft Internet Explorer Help Back gt OA A search Favores Gusto E 4 St A address he 168 2 1 setupw stm VSS 2 1P Address Info 2 IP Address Info BB Fixed IP xDSL a es BR z u ca ca Subnet Mask Inu Mm nn Enter the IP address subnet mask and gateway provided to you by your ISP in the appropriate fields Some xDSL Internet Service Providers may assign a fixed static IP address for your gateway If you have been provided with this information choose this option and enter the assigned IP address subnet mask gateway IP and DNS IP addresses for the Wireless Barricade Plus Click Finish to complete the setup The Status page will open to allow you to view the connection status as well as other information See Status on page 4 50 for details SETUP WIZARD 4 6 PPPoE
80. m CONFIGURING THE WIRELESS BARRICADE PLUS SNMP Use the SNMP configuration screen to display and modify parameters for the Simple Network Management Protocol SNMP A computer attached to the network called a Network Management Station NMS can be used to access this information Access rights to the agent are controlled by community strings To communicate with the Wireless Barricade Plus the NMS must first submit a valid community string for authentication The options for configuring community strings and related trap functions are described in the following sections SMC System WAN SNMP Setting LAN Wireless NAT The Device provides SNMP setting for community and trap information Firewall VPN SNMP Tools Status i tH 4 43 NETWORKING AND CLIENT SERVICES 4 44 Community SMC System WAN LAN Wireless NAT Firewall VPN SNMP Tools Status SNMP Community In the context of SNMP a relationship between an agent and a set of SNMP managers defines security characteristics The community concept is a local one defined at the agent The agent establishes one community for each desired combination of authentication access control and proxy characteristics Each community is given a unique within this agent community name and the management stations within that community are provided with and must employ the community name in all get operations The
81. me System DNS Host Name Domain OEMCOMPUTER r DNS Service Search Order Add Edit r Domain Suffix Search Order _ 5 Add Edt PEDE Care av 5 31 SETTING TCP IP To Work WITH THE WIRELESS BARRICADE PLUS 9 After writing down your IP settings click the IP address tab Select Obtain IP address automatically and click OK Click OK again to close the Network window 10 Windows may copy some files and will then prompt you to restart your system Click Yes and your computer will shut down and restart TCP IP Configuration Setting IP Address Subnet Mask Primary DNS Server Secondary DNS Server Default Gateway 5 32 CONFIGURING CLIENT TCP IP Step 2 Disable HTTP Proxy You will need to verify that the HTTP Proxy feature of your Web browser is disabled This is so that your Web browser will be able to view the configuration pages inside your Wireless Barricade Plus The following steps are for Internet Explorer and for Netscape Determine which browser you use and follow the appropriate steps Internet Explorer 1 Open Internet Explorer and click the stop button Click Tools then Internet Options Zi Microsoft Internet Explorer In the Internet Options window click the Connections tab Next click the LAN Settings button Internet Options 5 33 SETTING TCP IP To Work WITH THE WIRELESS BARRICADE PLUS 3 Clear all
82. n file or restore all configuration settings to the factory defaults Upgrades the system with the latest firmware obtained from SMC s website at www smc com Reboots the system and retains all of your configuration settings 4 9 NAVIGATING THE WEB BROWSER INTERFACE Menu Description Status Menu Displays WAN LAN connection status firmware and hardware version numbers as well as information on all DHCP client PCs connected Help Button Contains information for product support ee troubleshooting and network terminology Home Button Go to the overview page of this Web management interface Logout Button Exit the Wireless Barricade Plus system Logout Making Configuration Changes Configurable parameters have a dialog box or a drop down list Once a configuration change has been made on a page be sure to amp click the APPLY button at the bottom of the page to confirm the new settings Note To ensure proper screen refresh after a command entry be sure that Internet Explorer 5 0 is configured as follows Under the menu Tools Internet Options General Temporary Internet Files Settings the setting for Check for newer versions of stored pages should be Every visit to the page 4 10 CONFIGURING THE WIRELESS BARRICADE PLUS System Settings Set Time Zone 192 168 2 1 setupa stm System WAN LAN Wireless lt NAT Firewall VPN SNMP T
83. nd then click Command Prompt 5 20 Windows Update gt e Communications amp internet Explorer GAIT Documents gt EJ OutlookExpress WY Paint EY wordpad y Programs gt Settings gt Search Help Run ALTEN 5 g 5 CONFIGURING CLIENT TCP IP 2 Inthe Command Prompt window type IPCONFIG RELEASE and press the lt ENTER gt key D gt IPCONFIG RELEASE Windows 2868 IP Configuration IP address successfully released for adapter Local Area Connection D gt 3 Type IPCONFIG RENEW and press the lt ENTER gt key Verify that your IP address is now 192 168 2 xxx 2 255 your Subnet Mask is 255 255 255 0 and your Default Gateway is 192 168 2 1 These values confirm that your Wireless Barricade Plus is functioning D gt IPGCONFIG RELEASE Windows 2666 IP Configuration IP address successfully released for adapter Local Area Connection D gt IPCONFIG RENEW Windows 2888 IP Configuration Ethernet adapter Local Area Connection Connection specific DNS Suffix IP Addre oe we St a a er wre GR 2188 Subnet M ee ew ew ww ne 3 255 255 255 0 Default Gateway 2 2 2 192 168 2 1 Type EXIT and press lt ENTER gt to close the Command Prompt window 5 21 SETTING TCP IP To Work WITH THE WIRELESS BARRICADE PLUS Configuring Your Computer with Windows XP 5 22 Step 1 Configure TCP IP Settings After you have complet
84. oft Internet Explorer Fie Edt View Favorites Tools Help eBak gt A A Asearch GFavortes Bristory D J E Address http 192 168 2 1 setupa stm SMC System DAN NAT Settings LAN Wireless NAT Network Address Translation NAT allows multiple users at your local site to access the Internet through a single public IP address or multiple public IP addresses NAT can also prevent hacker attacks by mapping local addresses to public addresses for key services such ki as the Web or FTP Firewall VPN SNMP Tools Status Network Address Translation NAT provides multiple Internet connections using single IP address If you need multiple connections use the following screen to specify the public IP addresses to be opened for your client users NAT can also prevent hacker attacks by mapping local addresses to public addresses for key services such as the Web or FTP 4 25 NETWORKING AND CLIENT SERVICES Address Mapping SMC System aj WAN Address Mappin LAN apping Wireless Network Address Translation NAT allows IP addresses used in a private local network to be mapped to one NAT or more addresses used in the public global Internet This feature limits the number of public IP addresses required from the ISP and also maintains the privacy and security of the local network We allow one or more than one public IP address to be mapped to a pool of local addresses F
85. ools Status Time Zone Set the time zone of the Barricade Plus This information is used for log entries and firewall settings Set Time Zone GMT 08 00 Pacific Time US amp Canada Tijuana I Enable Daylight Savings Start Daylight Savings Time January z 1 End Daylight Savings Time January Z Set the time zone for the Wireless Barricade Plus This information is used for log entries and client filtering 4 11 SYSTEM SETTINGS Setting a Password If this is your first time to access the Wireless Barricade Plus you should define a new password record it and put it in a safe place From the Advanced Setup menu select System and click on Password Settings and follow the instructions on the screen setupa stm Microsoft Internet Explorer Edit View Favorites Tools Help Heak gt gt OA A Qsearch Favortes History Dr G A A Address http 192 168 2 1 setupa stm System Password Settings Set a password to restrict management access to the Barricade Plus If you want to manage the Barricade Plus from a remote location outside of the local network you must also specify the IP address ofthe remote PC You can do this in the Firewall Access Control menu Wireless NAT Firewall a Curreri Password Idle Time Out 0 Min SA Idle Time 0 NO Time Out T SNMP New Password Tools Status Re Enter Password for Verification
86. our network administrator for the appropriate IP settings gt Use the following IP address IF address Subnet mask Default gateway Obtain DNS server address automatically gt Use the following DNS server addresses Prefered DNS server Alternate DNS server Advanced 5 17 SETTING TCP IP To Work WITH THE WIRELESS BARRICADE PLUS 7 Select Obtain an IP address automatically and then select Obtain DNS server address automatically Then click OK Click OK or Close to close each window TCP IP Configuration Setting IP Address Subnet Mask Primary DNS Server Secondary DNS Server Default Gateway Step 2 Disable HTTP Proxy You will need to verify that the HTTP Proxy feature of your Web browser is disabled This is so that your Web browser will be able to view the configuration pages inside your Wireless Barricade Plus The following steps are for Internet Explorer and for Netscape Determine which browser you use and follow the appropriate steps Internet Explorer 1 Open Internet Explorer and click the stop button NET Mail and News gt Click Tools then l ae enue Internet Options Adress fiesta MSN Messenger Service Show Related Links Links Bestoftheweb Internet Options CONFIGURING CLIENT TCP IP 2 Inthe Internet Options window click Internet Options the Connections tab Next click the LAN Se
87. p 192 168 2 1 setupa st osoft Internet Expl System WAN URL Blocking LAN gt Wireless 7 You can block access to certain Web sites from a particular PC by entering either a full URL address or just a keyword of the Web irewal aie Disallowed Web Sites and Keywords To specify the particular PC go back to the Access Control page and check the box for Http with URL Blocking in the Normal Filtering Table Rue Number O URL Kemod Rule Numer URL Kemos TER p RN Using the above screen to block access to the Web sites specified in the table CONFIGURING THE WIRELESS BARRICADE PLUS Schedule Rule EI 192 168 2 1 setupa stm Microsoft Internet Explorer System WAN Schedule Rule LAN Wireless NAT Firewall Schedule Rule Table up to 10 rules No Valid Schedule Rule This page defines schedule rule names and activates the schedule for use in the Access Control page VPN lt SNMP Add Schedule Rule Tools Status You can filter Internet access for local clients based on the Rule Name and time of day 4 33 NETWORKING AND CLIENT SERVICES 1 Click on Add Schedule Rule 2 Define the appropriate settings for a schedule rule as shown in the following screen 3 Click OK and then the APPLY button to save your settings as shown on previous page
88. page Setup Wizard Broadband Type Select the type of broadband connection you have 2 168 2 1 setupw stm Microsoft Internet Explorer Fle Edt view Favortes Toos Hep Heak gt gt 7 OA A Qsearch GFavortes BHstory Gy Gt A address http 192 168 2 1 setupw stm 1 Broadband Type 2 IP Address Info 1 Broadband Type Specify the WAN connection type required by your Internet Service Provider Specify a Cable modem Fixed IP xDSL or PPPoE xDSL G a Cable Modem A Cable modem requires minimal configuration When you have set up an account with your Cable provider the Cable modem will automatically configure itself so you probably do not need to enter anything more However if there is a Domain Name System DNS server that you would rather use you need to specify the IP address By Fixed 1P xDSL Some xDSL Intemet Service Providers may assign a fixed IP address for your gateway If you have been provided with this information choose this option and enter the assigned IP address subnet mask gateway IP and DNS IP addresses for your Barricade Plus c gi PPPoE xDSL if you connect to the Internet using an xDSL Modem and your ISP has provided you with a password and Service Name then your ISP uses PPPoE You must choose this option and enter the required information SETUP WIZARD Cable Modem http 192 168 2 1 setupw stm Microsoft Internet Explorer Fie Edt View Favorites Too
89. port auto configuration for pin signals auto MDI MDI X that allows you to use straight through cable for connecting the Wireless Barricade Plus to any network device See Appendix B for details on wiring Use twisted pair cable to connect any of the three LAN ports on the Wireless Barricade Plus to an Ethernet adapter on your PC Otherwise you can cascade any of LAN ports on the Wireless Barricade Plus to an Ethernet hub or switch and then connect your PC or other network equipment to the hub or switch When inserting an RJ 45 plug be sure the tab on the plug clicks into position to ensure that it is properly seated Warning Do not plug a phone jack connector into any RJ 45 port This may damage the Wireless Barricade Plus Instead use only twisted pair cables with RJ 45 connectors that conform with FCC standards 2 7 INSTALLATION 2 8 Notes 1 Use 100 ohm shielded or unshielded twisted pair cable with RJ 45 connectors for all connections Use Category 3 4 or 5 for connections that operate at 10 Mbps and Category 5 for connections that operate at 100 Mbps 2 Make sure each twisted pair cable does not exceed 100 meters 328 feet RESET i 1 A lt p N Figure 2 3 Making LAN Connections Attach to Your Network Using Radio Signals Install a wireless network adapter in each computer that will be connected to the Internet or your local network via radio signals SMC currently offers several wi
90. r Wireless Barricade Plus Step 3 Obtain IP Settings from Your Wireless Barricade Plus Now that you have configured your computer to connect to your Wireless Barricade Plus it needs to obtain new network settings By releasing any old IP settings and renewing them with settings from your Wireless Barricade Plus you will also verify that you have configured your computer correctly 5 13 SETTING TCP IP To Work WITH THE WIRELESS BARRICADE PLUS 1 Click Start then Run 98 gt EA 2 fe BN z Windows 2 Type WINIPCFG and click OK It may take a minute or two for the IP Configuration window to appear 3 From the drop down menu ERIP Configuration select your network card Click Release and then Renew Verify that your IP address is now 192 168 2 xxx your Subnet Mask is 255 255 255 0 and your Default Gateway is 192 168 2 1 These values confirm that your Wireless Barricade Plus is functioning Click OK to close the IP Configuration window 5 14 CONFIGURING CLIENT TCP IP Configuring Your Computer with Windows 2000 Step 1 Configure TCP IP Settings After you have completed the hardware setup you need to configure your computer to connect to your Wireless Barricade Plus You also need to determine how your ISP issues your IP address Many ISPs issue these numbers automatically using a networking technology known as Dynamic Host Configuration Protocol or DHCP Other
91. re 1 Connect the LAN You can connect the Wireless Barricade Plus to your PC or to a hub or switch Run Ethernet cable from one of the LAN ports on the rear of the Wireless Barricade Plus to your computer s network adapter or to another network device You can also connect the Wireless Barricade Plus to your PC using a wireless client adapter via radio signals Position both antennas on the back of the Wireless Barricade Plus into the desired positions For more effective coverage you may want to position one antenna along the vertical axis and the other antenna along the horizontal axis The antennas emit signals along the toroidal plane and thus provide more effective coverage when positioned along alternate axes 2 Connect the WAN Prepare an Ethernet cable for connecting the Wireless Barricade Plus to a cable xDSL modem or Ethernet router 3 Power on Connect the power adapter to the Wireless Barricade Plus Internet Internet SMC7004WFW Access Wireless Cable DSL Broadband Router C p Device Wireless PC Card WE C T ee Notebook with SOHO Office or ee Figure 2 2 Connecting the Wireless Barricade Plus 2 6 INSTALLATION Attach to Your Network Using Ethernet Cabling The three LAN ports on the Wireless Barricade Plus can auto negotiate the connection speed to 10 Mbps Ethernet or 100 Mbps Fast Ethernet as well as the transmission mode to half duplex or full duplex These LAN ports also sup
92. reless network cards including the SMC2602W Wireless PCI card and the SMC2632W Wireless PC card Rotate both antennas on the back of the Wireless Barricade Plus to the desired position For more effective coverage position one antenna along the vertical axis and the other along the horizontal axis Try to place the Wireless Barricade Plus in a position that is located in the center of your wireless network Normally the higher you place the antenna the better the performance Ensure that the Wireless Barricade Plus location provides optimal reception throughout your home or office Computers equipped with a wireless adapter can communicate with each other as an independent wireless LAN by configuring each INSTALLATION computer to the same radio channel However the Wireless Barricade Plus can provide access to your wired wireless LAN or to the Internet for all wireless workstations Each wireless PC in this network infrastructure can talk to any computer in the wireless group via a radio link or access other computers or network resources in the wired LAN infrastructure or over the Internet via the Wireless Barricade Plus The wireless infrastructure configuration not only extends the accessibility of wireless PCs to the wired LAN but also doubles the effective wireless transmission range for wireless PCs by retransmitting incoming radio signals through the Wireless Barricade Plus A wireless infrastructure can be used for ac
93. ress the Properties button in the General tab Select the TCP IP line that has been assigned to your network card in the Local Area Connection Properties window Click the Properties button to set the TCP IP protocol for the Wireless Barricade Plus Local Area Connection Properties ued General Sharing Connect using E SMC EZ Card 10 100 SMC1211TX Components checked are used by this connection gt File and Printer Sharing for Microsoft Networks a e l TCP IP FZ NetBEUI ol v wf Install Uninstall Properties YT NWLink NetBIOS Description Transmission Control Protocol Internet Protocol The default wide area network protocol that provides communication across diverse interconnected networks 45 56 IT Show icon in taskbar when connected You can dynamically assign TCP IP addtess settings to a client or you can manually configure a client with address settings to meet your specific network requirements Note that the default IP address of the Wireless Barricade Plus is 192 168 2 1 CONFIGURING CLIENT TCP IP Windows XP 1 Click the start button and choose Control Panel 2 Select the Network and Internet Connections icon then click the Network Connections icon and double g click on the LAN or High Speed Internet ms 3 Press the Properties button in the General tab
94. the Internet or to a remote site using its RJ 45 WAN port It can be connected directly to your PC or to a local area network using any of the three Fast Ethernet LAN ports or through the wireless interface Access speed to the Internet depends on your service type Full rate ADSL can provide up to 8 Mbps downstream and 640 Mbps upstream G lite or splitterless ADSL provides up to 1 5 Mbps downstream and 512 Kbps upstream Cable modems can provide up to 36 Mbps downstream and 2 Mbps upstream However you should note that the actual rate provided by specific service providers may vary dramatically from these upper limits Although access speed to the Internet is determined by the modem type connected to your Wireless Barricade Plus data passing between devices connected to your local area network can run up to 100 Mbps over the Fast Ethernet ports The Wireless Barricade Plus includes an LED display on the front panel for system power and port indications that simplifies installation and network troubleshooting It also provides three RJ 45 LAN ports one RJ 45 WAN port as well as two detachable antennas on the rear panel INSTALLATION Three RJ 45 ports for connection to a 1OBASE T 100BASE TX Ethernet Local Area Network LAN These ports can auto negotiate the operating speed to 10 100 Mbps the mode to half full duplex and the pin signals to MDI MDI X i e allowing these ports to be connected to any network device with strai
95. the WAN port support automatic MDI MDI X configuration This means that you can use straight through cable to attach the LAN ports to any network device However when connecting the WAN port to a broadband modem you will need to use either straight through or crossover cable depending on the port type used on the modem B 1 CABLES Figure B 1 illustrates how the pins on the RJ 45 connector are numbered Be sure to hold the connectors in the same orientation when attaching the wires to the pins al xz 8 1 Figure B 1 RJ 45 Connector Pin Numbers Straight through Cable Straight Through RJ 45 Pin Assignments End 1 End 2 1 TD 1 TD 2 ID 2 ID 3 RD 3 RD 6 RD 6 RD Pins 4 5 7 and 8 are not connected Crossover Cable Crossover RJ 45 Pin Assignments End 1 End 2 1 TD 3 RD 2 TD 6 RD 3 RD 1 D 6 RD 2 TD Pins 4 5 7 and 8 are not connected B 2 RJ 45 Port Pin Assignments CABLES All LAN ports on the Wireless Barricade Plus support automatic MDI MDI X configuration This means that the pin signals in use will depend on whether the LAN port is operating in MDI or MDI X mode However the WAN port is configured only for MDI X mode Pin MDI Signal Name MDI X Signal Name 1 Transmit Data ID Receive Data RD 2 Transmit Data TD Receive Data RD 3 R
96. the corresponding device Verify that the proper cable type is used and that its length does not exceed the specified limits e Be sure that the network interface on the attached device is configured for the proper communication speed and duplex mode e Check the adapter on the attached device and cable connections for possible defects Replace any defective adapter or cable if necessary Network Connection Problems Cannot Pingthe Wireless Barricade Plus from the attached LAN or the Wireless Barricade Plus cannot Ping any device on the attached LAN e Verify that the IP addresses are properly configured For most applications you should use the Wireless Barricade Plus DHCP function to dynamically assign IP addresses to any host on the attached LAN However if you manually configure any IP addresses on the LAN verify that the same network address network component of the IP address and subnet mask are used for both the Wireless Barricade Plus and any attached LAN devices Be sure the device you want to Ping or from which you are Pinging has been configured for TCP IP Mobile users cannot access the Wireless Barricade Plus e Make sure that the Wireless Barricade Plus and all mobile users are configured to use the same radio channel Service Set Identifier SSID and encryption keys Ensure that all mobile users are within range of the Wireless Barricade Plus as specified in Appendix C
97. to access your network as well as information on all DHCP client PCs currently connected to your network Current Time 05 09 2002 05 23 53 INTERNET Cable DSL DISCONNECTED GATEWAY IP Address 192 168 2 1 Subnet Mask 255 255 255 0 DHCP Server Enabled Firewall Enabled IPSec Enabled Tunnel 1 Disabled Tunnel 2 Disabled Tunnel 3 Disabled PPTP Client Line 1 Disconnected PPTP Server Line 1 Disconnected Line 2 Disconnected INFORMATION Numbers of DHCP Clients 1 Runtime Code Version 1 00 P2 0 May 08 2002 02 49 53 Boot Code Version V1 00 LAN MAC Address 00 70 46 00 00 01 WAN MAC Address 00 70 46 00 00 02 Hardware Version 01 Serial Num 000000001 Security Log your network 05 09 2002 05 40 192 168 2 1 47 Datagram re DHCP Client Log View any attempts that have been made to gain access to View information on LAN DHCP clients currently linked to the Barricade Plus fip 192 168 2 100 mac 00 E0 29 CONFIGURING THE WIRELESS BARRICADE PLUS The following items are included in this screen Field Description INTERNET Displays WAN connection type and status GATEWAY Displays system IP settings as well as DHCP NAT PPTP Client and PPTP Server Firewall INFORMATION Displays the number of attached clients the firmware versions the physical MAC address for each media interface as well as the hardware version and serial number Release Cli
98. ttings button 3 Clear all the checkboxes 4 Click OK and then click OK again to close the Internet Options window Netscape Netscape 1 Open Netscape and click the stop button Click Edit then click Preferences 5 19 SETTING TCP IP To Work WITH THE WIRELESS BARRICADE PLUS 2 Inthe Preferences Category window under Category double click Advanced then click Proxies Select Direct connection to the Internet Click OK E Appearance Fonts Colors 3 Navigator A network proxy is used to provide additional security between your Lanni computer and the Internet usually along with a firewall and or to a increase perfomance between networks by reducing redundant traffic Applications ncreass via caching Smart Browsing i E Identity Direct connection to the internet a je Manual proxy configuration Wiew Proxies Automatic proxy configuration Configuration location URL Reload Step 3 Obtain IP Settings From Your Wireless Barricade Plus Now that you have config Barricade Plus it needs to old IP settings and renewi ured your computer to connect to your Wireless obtain new network settings By releasing any ng them with settings from your Wireless Barricade Plus you will also verify that you have configured your computer correctly 1 From the Windows desktop click the Start button then Programs then Accessories a
99. tton and choose Settings then click Control Panel Double click the Network icon Select the TCP IP line that has been assigned to your network card in the Configuration tab of the Network window Click the Properties button to set the TCP IP protocol for the Wireless Barricade Plus Network Configuration Identification Access Control The following network components are installed f7 NetBEUI gt SMC2662W AR EZ Connect 11 Mbps Wireles X TCP IP gt Dial Up Adapter Y TCP IP gt PRISM25 IEEE 802 11 PC Card TCP IP gt SMC2662W AR EZ Connect 11 Mbps Wireless v File and printer sharing for Microsoft Networks a Remove Properties Primary Network Logon Client for Microsoft Networks 7 File and Print Sharing Description TCPAIP is the protocol you use to connect to the Internet and wide area networks Mies You can dynamically assign TCP IP address settings to a client or you can manually configure a client with address settings to meet your specific network requirements Note that the default IP address of the Wireless Barricade Plus is 192 168 2 1 5 5 SETTING TCP IP To Work WITH THE WIRELESS BARRICADE PLUS Windows 2000 1 Click the Start button and choose Settings then click Control Panel Double click the Network and Dial up Connections icon then Local Area Connection icon and p
100. upports 64 bit and 128 bit WEP Wired Equivalent Privacy DHCP for dynamic IP configuration and DNS for domain name mapping Firewall with Stateful Packet Inspection client privileges intrusion detection VPN and NAT NAT also enables multi user access with a single user account and virtual server functionality providing protected access to Internet services such as Web FTP mail and Telnet Supports VPN Virtual Private Network tunneling IPSec and PPTP Easy setup through a Web browser on any operating system that supports TCP IP Compatible with all popular Internet applications INTRODUCTION Applications Many advanced applications are provided by the Wireless Barricade Plus such as e Flexible LAN Access The Wireless Barricade Plus provides connectivity to 10 100 Mbps wired devices as well as 11 Mbps wireless mobile users The wireless interface makes it easy to create a network in difficult to wire environments or to provide quick access to databases for mobile workers e Internet Access This device supports Internet access through an xDSL or Cable connection Since many DSL providers use PPPoE to establish communications with end users the Wireless Barricade Plus includes a built in client for this protocol eliminating the need to install this service on your computer e Shared IP Address The Wireless Barricade Plus provides Internet access for up to 253 users with a shared IP address Using only on
101. wer indicator does not light up refer to Troubleshooting in Appendix A Verify Port Status INSTALLATION Check the power and port indicators as shown in the following table LED Condition Status Power On Wireless Barricade Plus is receiving power Green WLAN On The Wireless Barricade Plus has established a valid Green wireless connection WAN On The WAN port has established a valid network Green connection LAN Link On The indicated LAN port has established a valid Green network connection Activity Flashing The indicated LAN port is transmitting or Amber receiving traffic 2 11 INSTALLATION 2 12 CHAPTER 3 CONFIGURING CLIENT PCs TCP IP Configuration To access the Internet through the Barricade Plus Wireless Cable DSL Broadband Router you must configure the network settings of the computers on your LAN to use the same IP subnet as the Wireless Barricade Plus The default network settings for the Wireless Barricade Plus are Gateway IP Address 192 168 2 1 Subnet Mask 255 255 255 0 Note These settings can be changed to fit your network requirements but you must first configure at least one computer as described in Chapter 5 to access the Wireless Barricade Plus Web configuration interface See Chapter 4 for information on configuring the Wireless Barricade Plus If you have not previously configured TCP IP for your computer refer to Installing
102. y releasing any old IP settings and renewing them with settings from your Wireless Barricade Plus you will also verify that you have configured your computer correctly 1 From the Windows desktop click the Start button then Programs then Accessories and then click Command Prompt 9 NER W windows Catalog 1 mere Accessibilt gt Windows Update a ET Communications Windows Media Play iii Entertainment gt Q Windows Movie Make a System Tools QJ Address Book Tour Windows XP E Startup I Calculator Internet Explorer Files and Settings Tra N MSN Explorer Outlook Express e Snaglt 5 0 All Programs ex Command Prompt E Notepad W Paint Program Compatibility Wizard Synchronize Tour Windows xP Q windows Explorer E Windows Movie Maker A wordPad p Remote Assistance Windows Media Player _ 2 Windows Messenger 5 27 SETTING TCP IP to Work WITH THE WIRELESS BARRICADE PLUS 2 In the Command Prompt window type IPCONFIG RELEASE and press the lt ENTER gt key C gt ipconfig release Mindows IP Configuration Ethernet adapter Local Area Connection Connection specific DNS Suffix IP Addre Subnet M Default Gateway 3 Type IPCONFIG RENEW and press the lt ENTER gt key Verify that your IP address is now 192 168 2 xxx 2 255 your Subnet Mask is 255 255 255 0 and your Default Gateway is 192 168 2 1 Thes
103. yping http 192 168 2 1 8080 in the Address field of your Web browser 4 13 NETWORKING AND CLIENT SERVICES Networking and Client Services You can use the Setup Wizard to change the required settings or you can select the basic configuration items you need to change from the Setup Wizard screen Use the Advanced Setup menu to configure the WAN connection options the LAN interface including TCP IP parameters for the Wireless Barricade Plus gateway address DHCP address pool for dynamic client address allocation and other advanced services WAN Configuration Specify the WAN connection type required by your Internet Service Provider then click More Configuration to provide detailed configuration parameters for the selected connection type Wj http 192 168 2 1 setupa stm Microsoft Internet Explorer _ 10 x File Edt View Favorites Tools Help ek gt O A A Asch Feos Arsoy B Sm EI Address http 192 168 2 1 setupa stm SM System WAN WAN Settings The Barricade Plus can be connected to your service provider in any of these ways Dynamic IP Obtains an IP address automatically from your service provider C PPPoE PPP over Ethernet is a common connection method used for xDSL Firewall Uses a static IP address Your service provider gives a static IP Wp s Spei address to access Internet services Tools More Configuration Status

SMC Networks SMC7004WFW User's Manual

Contents

Download Pdf Manuals

Related Search

Related Contents