Home
SMCWBR14S-N2 - Edge-Core
Contents
1. RJ 45 Pin Assignments Pin Number Assignment 1 RE 2 Tx 3 Rx4 6 Rx 1 The and signs represent the polarity of the wires that make up each wire pair Straight Through Wiring If the port on the attached device has internal crossover wiring MDI X then use straight through cable Straight Through Cable Pin Assignments End 1 End 2 1 Tx 1 Tx 2 Tx 2 Tx 3 Rx 3 Rx 6 Rx 6 Rx B 3 CABLES B 4 Crossover Wiring If the port on the attached device has straight through wiring MDI use crossover cable Crossover Cable Pin Assignments End 1 End 2 1 Tx 3 Rx 2 Tx 6 Rx 3 Rx 1 Txt 6 Rx 2 Tx APPENDIX C SPECIFICATIONS IEEE Standards IEEE 802 3 10 BASE T Ethernet IEEE 802 3u 100 BASE TX Fast Ethernet IEEE 802 3 802 3u 802 11g 802 1D LAN Interface 4 RJ 45 10 BASE T 100 BASE TX ports Auto negotiates the connection speed to 10 Mbps Ethernet or 100 Mbps Fast Ethernet and the transmission mode to half duplex or full duplex WAN Interface 1 RJ 45 port Indicator Panel Power WAN Online WLAN LAN 1 4 WPS Dimensions 188 x 133 x 33 mm 7 40 x 5 24 x 1 30 in Weight 0 285 kg 0 764 lbs Input Power 9V1A Power Consumption 8 Watts maximum C 1 SPECIFICATIONS C 2 Advanced Features Dynamic IP Address Configuration DHCP DNS Firewall Clien
2. Igel SAVE SETTINGS CANCEL 4 61 CONFIGURING THE BARRICADE UPnP 4 62 The Universal Plug and Play architecture offers pervasive peer to peer network connectivity of PCs of all form factors intelligent appliances and wireless devices UPnP enables seamless proximity network in addition to control and data transfer among networked devices in the office home and everywhere within your network SMC SETUP WIZARD SYSTEM WAN The Universal Plug and Play architecture offers pervasive peer to peer network connectivity of PCs of all form factors intelligent appliances and wireless devices LAN UPnP enables seamless proximity network in addition to control and data transfer WIRELESS among networked devices in the home office and everywhere in between NAT Enable or disable UPnP o ROUTING features Enable Disable FIREWALL UPnP Universal Plug and Play Setting Igel SAVE SETTINGS CANCEL STATUS UPnP allows the device to automatically join a network obtain an IP address e convey its capabilities and learn about the presence and capabilities of other devices Check the Enable radio button to activate this function DDNS DDNS Dynamic Domain Name Service DDNS provides users on the Internet with a method to tie their domain name to a computer or server DDNS allows your domain name to follow your IP address automatically by having your DNS records changed when your IP address changes
3. d O902 1 OPre shared Key OPassphrase 8 63 characters OHex 64 digits PIN PBC Manual a HELP SAVE SETTINGS CANCEL 802 1X WiFi Protected Setup NAT ROUTING FIREWALL UPnP DDNS TOOLS STATUS Parameter Description Authentication Choose 802 1X or Pre shared Key to use as the authentication method 802 1X for the enterprise network with a RADIUS server See 802 1X on page 4 34 Pre shated key for the SOHO network environment without an authentication server Pre shated key type Select the key type to be used in the Pre shared Key Pre shared Key Type in the key here 4 31 CONFIGURING THE BARRICADE 4 32 WPA2 WPA2 is a product certification that is available through the Wi Fi Alliance WPA2 certifies that wireless equipment is compatible with the IEEE 802 111 standard The WPA2 product certification formally replaces Wired Equivalent Privacy WEP and the other security features of the original IEEE 802 11 standard The goal of WPA2 certification is to support the additional mandatory security features of the IEEE 802 11i standard that are not already included for products that support WPA SMC SETUP WIZARD SYSTEM WPA WAN WPA is a security enhancement that strongly increases the level of data protection and access control for LAN existing wireless LAN Matching authentication and encryption methods must be setup on your router and WIRELES
4. This DNS feature is powered by DynDNS org or TZO com With a DDNS connection you can host your own web site email server FTP site and more at your own location even if you have a dynamic IP address SMC SETUP WIZARD DDNS Dynamic DNS Settings SYSTEM Dynamic DNS provides users on the Internet a method to tie their domain name s to computers or servers DDNS allows your domain name to follow your IP address LAN automatically by having your DNS records changed when your IP address changes WIRELESS with a DDNS connection you can host your own web site email server FTP site and NET more at your own location even if you have a dynamic IP address ROUTING This DNS feature is powered by an external service provider not by Bluewin FIREWALL Dynamic DNS OEnable Disable Provider DynDNS org gt DDNS Domain Name STATUS TZ0 com HS DDNS Account Email NOHP com DDNS Password Key HELP SAVE SETTINGS CANCEL 4 63 CONFIGURING THE BARRICADE Tools Use the Tools menu to backup the current configuration restore a previously saved configuration update firmware and reset the Barricade Configuration Tools Choose a function and click Next SMC SETUP WIZARD SYSTEM WAN Use the Backup tool to save the router s current configuration to a file named backup bin on your PC You can then use the Restore tool to restore the saved LAN configuration to the router Alt
5. Click on the Disconnect after x minutes of no activity and then enter the idle time for the Internet connection This is the period of time for which the connection to the Internet is maintained during inactivity If your ISP charges you by the minute you should change the idle time out to one minute Most ISPs provide a DNS server for speed and convenience Since your Service Provider may connect to the Internet with dynamic IP settings it is likely that the DNS server IP s are also provided dynamically Clicking on the Click here to enter your DNS Settings for DNS configuration See DNS on page 4 22 PPTP Point to Point Tunneling Protocol A version of PPP Point to Point Protocol that has the ability to encapsulate packets of data formatted for one network protocol in packets used by another protocol This tunneling technique allows TCP IP data to be transmitted over a non TCP IP network PPTP can be used to join diferent physical networks using the Internet as an intermediary Use PPTP Authentication PPTP Account PPTP Password Retype Password Host Name Get IP By DHCP rz Service IP Address 0 19 b je A 1 Ls O Disconnect after 5 minutes of no activity Click here to enter your DNS Settings Click NEXT to proceed or BACK to change your settings CONFIGURING THE BARRICADE 4 10 L2TP Layer 2 Tunneling Protocol The Barricade supports L2TP connection The L2TP connection delive
6. r sokkal kapcsolatos r szletek rt forduljon a helyi szab lyoz hat s ghoz vagy az SMC Networksh z COMPLIANCES xi Polish Portuguese Slovenian Slovak Niniejsze urz dzenie to urz dzenie do odbierania i przesy ania sygna u transceiver w bezprzewodowej sieci LAN o cz stotliwo ci 2 4 GHz przeznaczone do u ytku wewn trz pomieszcze w domach i biurach we wszystkich krajach cz onkowskich UE i EFTA Zgodnie z artyku em 6 4 dyrektywy 1999 5 EC dotycz cej norm dla urz dze radiowych i ko cowych urz dze teletransmisyjnych powiadomione zosta y nast puj ce kraje cz onkowskie Austria Belgia Dania Finlandia Francja Niemcy W ochy Luksemburg Holandia Hiszpania Szwecja Szwajcaria Wielka Brytania Portugalia Grecja Irlandia Islandia W niekt rych krajach obowi zuj wymagania dotycz ce dzia ania na zewn trz budynk w na przyk ad wymagania licencyjne i dozwolone kana y pracy Szczeg owe informacje na temat obowi zuj cych ogranicze u ytkowania zewn trznego mo na uzyska kontaktuj c si z lokalnym urz dem regulacji lub firm SMC Networks Este dispositivo um transreceptor de LAN sem fios de 2 4 GHz destinado a uma utiliza o interior em casa e no escrit rio em todos os Estados membros notificados da CE e da EFTA De acordo com o artigo 6 4 da Directiva sobre R amp TTE 1999 5 CE foram notificados os seguintes Estados membros da CE EFTA ustria B lgica Dinamar
7. WAN On WAN link Off No WAN link Online On Internet connection is functioning correctly Flashing The Barricade is establishing an Internet link Off No Internet link WLAN On WLAN link Flashing The Barricade is sending or receiving data via WLAN Off No WLAN link LAN 1 4 On Ethernet link Flashing The LAN port is sending or receiving data Off No Ethernet link WPS On WPS link is successfully established a Off This LED will be on for 300 seconds after Setup WPS connection is successfully established then go off The WPS is disabled Slow WPS association is establishing between the Flashing Barricade and clients Quick WPS access failed Flashing 2 4 ISP SETTINGS The Barricade contains the following ports and buttons Item Description LAN Ports Fast Ethernet ports RJ 45 Connect devices on your local area network to these ports i e a PC hub switch or IP set top box WAN Port WAN port RJ 45 Connect your cable xDSL modem line to this port Reset Button Use this button to reset the power and restore the default factory settings To reset without losing configuration settings see Reset on page 4 66 Power Inlet Connect the included power adapter to this inlet Warning Using the wrong type of power adapter may cause damage WPS Button Press this button for over 4 seconds to start using the WPS on top panel ISP Settings If you are not sure of your conn
8. ka Radio LAN device atbilst Direkt vas 1999 5 EK b tiskaj m pras b m un citiem ar to saist tiem noteikumiem Ofici l EK atbilst bas deklar cija ir atrodama attiec g produkta sada timeklr http www smc com iuo SMC Networks deklaruoja kad is radijo LAN renginys atitinka esminius reikalavimus ir kitas 1999 5 EB Direktyvos nuostatas Oficiali jo EB atitikties deklaracij galima rasti atitinkam gamini skyriuje iame tinklalapyje http www smc com Hierbij verklaart SMC Networks dat het toestel Radio LAN device in overeenstemming is met de essenti le eisen en de andere relevante bepalingen van richtlijn 1999 5 EG Het offici le EC gelijkvormigheidattest kan men vinden op de internetsite http www smc com onder de betrokken productcategorie B dan SMC Networks tiddikjara li dan it tag mir LAN tar Radju huwa konformi mar rekwi iti essenzjali u dispo izzjonijiet rilevanti o ra ta Direttiva 1999 5 KE Id Dikjarazzjoni ta Konformit uffi jali tal KE tinsab fit taqsima korrispondenti fis sit ta l Internet http www smc com Az SMC Networks kijelenti hogy a Radio LAN eszk z megfelel a vonatkoz alapvet k vetelm nyeknek s az 1999 5 EC ir nyelv egy b el r sainak A hivatalos EC megfelel s gi nyilatkozat megtal lhat a vonatkoz term k ismertet j n l a k vetkez c men http www smc com Firma SMC Networks niniejszym o wiadcza e urz dzenie Radio LAN jest zgo
9. IraA a Aou6eupoUpyo OMav a Nopfny a lorrav a 2ound a EABetia Hvwu vo Bao Aeio Moptoyal a EM da IpAav a loAavdia Ze opicu veg XWPE rriB AAovrai ATAIT OEIG yia xprjor o ESWTEPIK XKWPO rrug ATAIT OEI Trapaxwpnons ddeiac kal errirperr ueva kav Aia Aerroupy ac ArreuOuvOe rE OTNV rorikri apu ia APX OTNV SMC Networks yia AeTrrop peles OXETIK HE TOUG Tp XOVTEG TEDIODIOUOUC yia XP ON oe EEWTEPIK xupo Italian ll presente device un ricetrasmettitore LAN wireless da 2 4 GHz previsto per l uso in interni a casa e in ufficio in tutti gli Stati membri della CE e dell EFTA notificati Conformemente all articolo 6 4 della Direttiva 1999 5 CE R amp TTE sono stati notificati i seguenti Stati membri della CE dell EFTA Austria Belgio Danimarca Finlandia Francia Germania Grecia Irlanda Islanda Italia Lussemburgo Norvegia Paesi Bassi Portogallo Regno Unito Spagna Svezia Svizzera In alcuni Paesi si applicano i requisiti per il funzionamento in esterni quali requisiti di licenza e canali consentiti Contattare l Autorit normativa locale del proprio Paese o SMC Networks per informazioni dettagliate sulle limitazioni correnti per l utilizzo in esterni ix Latvian Lithuanian Maltese Hungarian COMPLIANCES ST ier ce ir 2 4 GHz bezvadu LAN raiduztv r js kas paredz ts izmantoSanai iek telp s m j s un birojos visas pazinotajas EK un EBTA European Free Trade
10. Spanish Por medio de la presente SMC Networks declara que el Radio LAN device cumple con los requisitos esenciales y cualesquiera otras disposiciones aplicables o exigibles de la Directiva 1999 5 CE The official EC Declaration of Conformity can be found under the corresponding product section on the web http www smc com Greek Me rnv rrapo oa n SMC Networks dnAwvel ri n CUOKEU ac pparou TOTTIKO OIKTUOU OULNOPPWVETAI HE TIG OUOIW EIC ATTAIT OEIG KAI TC Aorrr c OXETIKEG SIaTagEIg TNS Odny as 1999 5 EK H err onun O Awon cuup pooong EK rrap yxerai OTHV avr oroixr EV TNTA TTPOl VTWV OTM loTooeAida http www smc com French Par la pr sente SMC Networks d clare que l appareil Radio LAN device est conforme aux exigences essentielles et aux autres dispositions pertinentes de la directive 1999 5 CE La d claration de conformit officielle peut tre trouv e sur notre site internet http www smc com dans la rubrique Produits Italian Con la presente SMC Networks dichiara che questo Radio LAN device conforme ai requisiti essenziali ed alle altre disposizioni pertinenti stabilite dalla direttiva 1999 5 CE La Dichiarazione di conformit CE ufficiale disponibile nella sezione dedicata al rispettivo prodotto sul sito Web http www smc com Latvian Lithuanian Dutch Maltese Hungarian Polish Portuguese Slovenian Slovak Finnish COMPLIANCES Ar o SMC Networks deklar
11. der krav vedr rende udend rs betjening af enheden f eks licenskrav og tilladte betjeningskanaler Kontakt de lokale lovgivende myndigheder eller SMC Networks for at f oplysninger om aktuelle begr nsninger vedr rende udend rs betjening Estonian See seade on 2 4 GHz juhtmeta LAN vastuv tu saatejaam mis on m eldud kodus ja kontoris kasutamiseks k ikides teavitatud EU ja Euroopa Vabakaubanduse Assotsiatsiooni EFTA liikmesriikides Vastavalt R amp TTE direktiivi 1999 5 E paragrahvile 6 4 on teavitatud j rgmisi EU EFTA liikmesriike Austriat Belgiat Taanit Soomet Prantsusmaad Saksamaad Itaaliat Luksemburgi Hollandit Norrat Hispaaniat Rootsit veitsi hendkuningriiki Portugali Kreekat lirimaad Islandi M ningates riikides kehtivad v ljas kasutamiseks n uded n iteks litsentsin uded ja lubatud t kanalid Palun teavitage vastavat kohalikku ametkonda v i ettev tet SMC Networks i kui soovite t psemaid andmeid v ljas kasutamisel kehtivate piirangute kohta Greek Aurr n CUOKEUN elval vac ac pparog TroutTrod kTNG TOTTIKO IKT OU 2 4 GHZ Trou TrpoopiZetal yia OIKIAK KAI errayyeAparikri XP ON OE EOWTEPIK xwpo oe da ra kp rn u An TNG EK kom EZE2 X pquova pe ro p8po 6 4 Tn O ny ag yia pa rog amp GorrAiop KAI THAETTIKOIVWVIAKO TEDUOTIKO amp orrNop R amp TTE 1999 5 EK xouv avakoivw8e ra ak Aou8a kp rn y An EE EZE2 Auorp a B Ayio Aav a i av a FaM a Fepuav a
12. it will stay in the input queue and not be released Accumulated packets could cause the input queue to fill causing severe problems for all protocols Enabling this feature prevents the packets from accumulating Discard Ping to WAN Default Disabled Prevent a ping on the Barricade s WAN port from being routed to the network SMC SETUP WIZARD SYSTEM WAN When the SPI Stateful Packet Inspection firewall feature is enabled all packets can VAN be blocked Stateful Packet Inspection SPI allows full support of different application types that are using dynamic port numbers For the applications checked WIRELESS in the list below the Device will support full operation as initiated from the local LAN NATU The Device firewall can block common hacker attacks including IP Spoofing Land ROUTING Attack Ping of Death IP with zero length Smurf Attack UDP port loopback Snork FIREWALL Attack TCP null scan and TCP SYN flooding Intrusion Detection Access Control MAC Filter URL Blocking Schedule Rule 1 n Detection Feature SPI and Anti DoS firewall protection RIP defect Discard Ping To WAN Interface a o 2 Intrusion Detection DMZ Stateful Packet Packet Fragmentation UPnP DDNS V TCP Connection TOOLS El UDP Session STATUS v FTP Service v H 323 Service El TFTP Service Scroll down to view more information 4 56 FIREWALL SMC SETUP WIZARD our Email Address SYST
13. nost SMC Networks t mto prohla uje Ze toto r diov za zen LAN je ve shod se z kladn mi po adavky a dal mi p slu n mi ustanoven mi sm rnice 1999 5 ES Oficialni ES prohl en o shod je uvedeno v p slu n sti k produktu na webu http www smc com Danish SMC Networks erkl rer herved at f lgende Radio LAN enhed overholder de v sentlige krav og andre relevante bestemmelser i direktiv 1999 5 EF Den officielle EU overensstemmelseserkl ring er tilg ngelig under det relevante produktafsnit p f lgende webadresse http www smc com German Hiermit erkl rt SMC Networks dass sich dieses Wireless LAN Ger t in bereinstimmung mit den grundlegenden Anforderungen und den anderen relevanten Vorschriften der Richtlinie 1999 5 EG befindet Die offizielle EC Declaration of Conformity finden Sie im Internet unter http www smc com unter der entsprechenden Produktkategorie Estonian K esolevaga kinnitab SMC Networks et see Radio LAN seade vastab direktiivi 1995 5 EU p hin uetele ja teistele asjakohastele s tetele Ametliku EU vastavusdeklaratsiooni leiate vastavast tootejaotisest aadressil http www smc com English Hereby SMC Networks declares that this Radio LAN device is in compliance with the essential requirements and other relevant provisions of Directive 1999 5 EC The official EC Declaration of Conformity can be found under the corresponding product section on the web http www smc com
14. 5 8 V 50 60 Hz nicht ber oder unterschreiten sowie den minimalen Strom von 1 A nicht unterschreiten Der atbeitsplatzbezogene Schalldruckpegel nach DIN 45 635 Teil 1000 betr gt 70 dB A oder weniger TABLE OF CONTENTS Introduction si85545 9 525 29455545 29464 ER 1 1 About the Barricade ds sco eed As As an Ried aeg Sachs 1 1 Features and Benefits annere daiane aa cee cece 1 2 JXpplicationsz ica dsc d dee Leg LE Meet Ad Ms 1 3 Instalacion aa o ans teases 2 1 Package Contento rita ee odia pd 2 1 System Requirements cid ee et Ee 2 2 Hardware Description 2 2 KEE 2 5 Connect the Syst m E Deg npe AUR er OR das 2 6 Connect the Cable xDSL Modem 000000 eee 2 6 Connecting the Barricade to your LAN 0 000004 2 6 Connect the Power Adapter 2 7 Configuring the ClientPC 3 1 TCP IP Configuration ree ie idee i ae adas 3 2 Windows 2000 0 so pies atonal det E AS Moe AUS 3 3 Obtain IP Settings From Your Barricade o o ooooooo 3 5 Manual IP Configuration 3 7 KEE 3 9 RER NEE 3 14 Configuring Your Macintosh Computer 3 15 Disable HTIP Proxy 4 au dici ecd i KE agde A oh 3 17 xvi T4BLE OF CONTENTS xvil Configuring the Barricade 4 1 Navigating the Web Browser Interface 4 2 Making Configuration Changes 4 2 Setup Wizatd comadre pera eyes eta 4 3 A A hate vu hU aucuns 4 3 Wireless Settings de Yo yee A 4 4 Connection Type Setting 4 6 KEE 4 12 ET 4 12
15. Association Eiropas br v s tirdzniec bas asoci cija dal bvalst s Atbilsto i radioiekartu un telekomunik ciju gala iek rtu direkt vas 1999 5 EK 6 4 pantam pazinotas EK EBTA valstis ir Austrija Be ija D nija Somija Francija V cija It lija Luksemburga N derlande Norv ija Sp nija Zviedrija veice Apvienot Karaliste Portug le Grie ija Irija Islande Da s valst s ir sp k ierobe ojumi lieto anai rvid piem ram licences pras bas un darb bai atlautie kan li L dzu sazinieties ar viet jo regul jo o instanci vai SMC Network lai sa emtu inform ciju par pa reiz jiem ierobe ojumiem lieto anai rvid is renginys yra 2 4 GHz belaidis LAN siustuvas imtuvas skirtas naudoti patalpose namie ar biure visose notifikuotose EB ir ELPA alyse nar se Pagal RTTE Direktyvos 1999 5 EB 6 4 straipsn notifikuotos yra ios EB ELPA alys nar s Austrija Belgija Danija Suomija Pranc zija Vokietija Italija Liuksemburgas Nyderlandai Norvegija Ispanija vedija veicarija Jungtin Karalyst Portugalija Graikija Airija Islandija Kai kuriose alyse galioja tam tikri reikalavimai norint naudoti rengin lauke pvz licencijos ir suteikti ry io kanalai Jei norite su inoti kokie apribojimai galioja norint naudoti rengin lauke kreipkit s nacionalin reguliavimo institucij arba SMC Networks Dan it tag mir huwa LAN transreciever ming ajr fili ta 2 4
16. GHz ma sub biex jintu a fuq ewwa fi djar u uffi ini fil pajji i notifikati tal KE u l Istati Membri ta EFTA B mod konformi ma Artikolu 6 4 tad Direttiva R amp TTE 1999 5 KE l Istati Membri tal KE EFTA li ejjin ew notifikati L Awstrija Il Bel ju Id Danimarka Il Finlandja Franza Il ermanja L Italja ll Lussemburgu L Olanda In Norve ja Spanja L Izvezja L I vizzera Ir Renju Unit Il Portugal Il Gre ja L Irlanda L Islanda Rekwi iti g al t addim fuq barra b al ti ijiet ta li enzja u kanali permessi g al t addim japplikaw f ertu pajji i Jekk jog bok ikkuntattja lill awtorit regolarorja lokali jew SMC Networks g al dettalji dwar restrizzjonijiet attwali dwar l u u fuq barra Ez az eszk z egy 2 4 GHz es vezet k n lk li LAN ad vev amely belt ri s irodai haszn latra k sz lt s az sszes rtes tett EC s EFTA tagorsz gban haszn lhat Az 1999 5 EC jel R amp TTE el r s 6 4 es cikk nek megfelel en a k vetkez EC EFTA tagorsz gok kaptak rtes t st Ausztria Belgium D nia Finnorsz g Franciaorsz g N metorsz g Olaszorsz g Luxemburg Hollandia Norv gia Spanyolorsz g Sv dorsz g Sv jc Egyes lt Kir lys g Portug lia G r gorsz g rorsz g s Izland Egyes orsz gokban k l n el r sok vonatkoznak a k lt ri haszn latra p ld ul a licencre s az enged lyezett csatorn kra A k lt ri haszn latra vonatkoz aktu lis el
17. Password Settings ee dE EIER eld epp Eds 4 13 Remote Manas ment cole EIE ET eee eee 4 14 WAN Settings oureesr sey pei Had 3 ex ead EXER Pea ete pas 4 15 Dynamic TP uge oars Reeve Age 4 16 PPPoE o A dree tae eee imis 4 17 PPP ERE PERGERET IS 4 18 LEZXEP Lsssnervcc eemesc Go Pe ke peed eer yess dye bs 4 19 Static TP Sate tiges eb Sa Len eU Re is Zeen 4 20 Clone MAC Address ANS lle die lle br ella 4 21 INS it A XP MEE LESER 4 22 LAN Settings oyy ue tir at 4er rig wetegti a kei 4 23 Wireless EE 4 25 Channeland SSID iioii relie ei ete 4 26 ACCESS COROLA is 4 28 eut irei rr y 4 29 Wi Fi Protected Setup Ai 4 36 NAT eer A dE ee ay oh a ee ee ea ing 4 40 Address Mapping oie Ses a ee Ee E E Has 4 41 Virtual Server i d le pos ir uir iret Eeer bs 4 42 Special Application i i ie ee n ee 4 43 NAT Mapping Table NEEN 4 44 R m iuris Rec eee ere un RE Re A RPER PEERS 4 45 Static Route cesses se Pe eae eave NEEN ay 4 45 Firewall a tenes Lakes bestem Benen E 4 49 ACCESS Control i Voss nuns hy Settee ae oe 4 50 MAG Filter an spy sana cae abe weg yak wa eR elias 4 52 URL Blocking sy wise Eed kent ented eae evi 4 53 Schedule Rule oi rai anaes 4 54 TABLE OF CONTENTS Intrusion Detection 4 56 DIMZ A tie o MU e de tus DU oU 4 61 UPAR A din o ha cido 4 62 DON Sm EE 4 63 Vol ii A e UR spi tiet ee d 4 64 Configuration Tools ii nh e eA get EA 4 64 Firmware Upgrade 2 ZE oper hr ehm 4 65 R Setz os AERE aen eed ae E AR a SEA
18. SMC SETUP WIZARD SYSTEM WPA WAN 4 S WPA is a security enhancement that strongly increases the level of data protection and access control for LAN existing wireless LAN Matching authentication and encryption methods must be setup on your router and WIRELESS wireless client devices to use WPA px English Home Logout Channel and SSID WPA WPAZ v TKIP e doen OPre shared Key Access Control Security WEP WPA 802 1X Wi Fi Protected Setup HELP lU SAVE SETTINGS CANCEL PIN PBC Microsoft Internet Explorer Manual NAT ROUTING FIREWALL UPnP DDNS TOOLS STATUS A Notice 802 13 Authentication should be enabled to make this Function work 4 33 CONFIGURING THE BARRICADE 4 34 Parameter Description Authentication Choose 802 1X or Pre shared Key to use as the authentication method 802 1X for the enterprise network with a RADIUS server See 802 1X on page 4 34 e Pre shared key for the SOHO network environment without an authentication server Pre shared key type Select the key type to be used in the Pre shared Key Pre shared Key Type in the key here 802 1X If 802 1 X is used in your network then you should enable this function for the Barricade SMC SETUP WIZARD SYSTEM 802 1X WAN This page allows you to set the 802 1X a method for performing authentication to wireless connection These LAN parameters are used for this access point
19. a virtual server remote users accessing services such as web or FTP at your local site via public IP addresses can be automatically redirected to local servers configured with private IP addresses In other words depending on the requested service TCP UDP port number the Barricade redirects the external service request to the appropriate server located at another internal IP address SMC SETUP WIZARD SYSTEM Virtual Server WAN You can configure the router as a virtual server so that remote users accessing services such as the Web LAN or FTP at your local site via public IP addresses can be automatically redirected to local servers configured WIRELESS with private 1P addresses In other words depending on the requested service TCP UDP port number the router redirects the external service request to the appropriate server located at another internal IP NAT address This tool can support both port ranges multiple ports and combinations of the two Address Mapping For example gt Virtual Server Special Application Port Ranges ex 100 150 NAT Mapping Table Multiple Ports ex 25 110 80 ROUTING Combination ex 25 100 80 FIREWALL UPnP no o ype DDNS 1 TCP Y o Add Clean TOOLS 2 I D Ada Geen STATUS 3 If Grup o Ada Clean 4 A I TCP x o Ada Clean 5 jl TCP y o Add Clean 6 R If TCP sl o Add Clean 7 ii TCP o Ad
20. and then click SAVE SETTINGS to save your settings SMC SETUP WIZARD SYSTEM Access Control Add PC This page allows users to define service limitations of client PCs including IP address service type and scheduling rule criteria For the URL blocking function you need to configure the URL address first on the URL Blocking Site page For the WIRELESS scheduling function you also need to configure the schedule rule first on the Schedule Rule page NAT ROUTING FIREWALL Client PC Description testing Access Control Client PC IP Address 192 168 2 50 100 MAC Filter URL Blocking Schedule Rule Intrusion Detection SERE TED Detail Description e Blocking WWW HTTP TCP Port 80 3128 8000 8001 8080 C DMZ es S T CN ie HTTP Ref URL Blocking Site Page DDNS Email Sending SMTP TCP Port 25 TOOLS News Forums NNTP TCP Port 119 STATUS Email Receiving POP3 TCP Port 110 B Secure HTTP HTTPS TCP Port 443 D File Transfer FTP TCP Port 21 o a E Telnet Service TCP Port 23 AIM AOL Instant Messenger TCP Port 5190 SMC SETUP WIZARD File Transfer FTP TCP Port 21 SYSTEM Telnet Service TCP Port 23 AIM AOL Instant Messenger TCP Port 5190 LAN NetMeetin H 323 TCP Port 1720 1503 WIRELESS DNS UDP Port 53 NAT SNMP UDP Port 161 162 ROUTING VPN PPTP TCP Port 1723 FIREWALL VPN L2TP UDP Port 1701 TCP All TCP Port UDP All UDP Port Access Control MAC Filter URL B
21. gateway field Advanced 4 Select Use the following PEM DNS server addresses 5 Enter the IP address for the Barricade in the Preferred DNS server field This automatically relays DNS requests to the DNS server s provided by your ISP Otherwise add a specific DNS server into the Alternate DNS Server field and click OK to close the dialog boxes 6 Record the configured information in the following table TCP IP Configuration Setting IP Address Subnet Mask Preferred DNS Server Alternate DNS Server Default Gateway 3 13 TCP IP CONFIGURATION Disable HTTP Proxy You need to verify that the HTTP Proxy feature of your web browser is disabled This is so that your browser can view the Barricade s HTML configuration pages 1 To disable the proxy in Internet Options 3 14 Internet Explorer click Tools Click Internet Options and then the Connections tab shown on the right In the Local Area Network LAN settings section click LAN Settings to display the Local Area Network LAN Settings pop up window below In the Proxy server section ensure the Use a proxy server for your LAN These settingswillnotapply to dial up or VPN connections check box is not ticked Click OK General Security Privacy Content Connections Programs Advanced To set up an Internet connection click 93 Setup Dial up and Virtual Private Network settings Choo
22. only twisted pair cables with RJ 45 connectors that conform with FCC standards Specifications Cable Types and Specifications Cable Type Max Length Connector 10BASE T Cat 3 4 5 100 ohm UTP 100 m 328 ft RJ 45 100BASE TX Cat 5 100 ohm UTP 100 m 328 ft RJ 45 Wiring Conventions For Ethernet connections a twisted pair cable must have two pairs of wires Each wire pair is identified by two different colors For example one wire might be red and the other red with white stripes Also an RJ 45 connector must be attached to both ends of the cable B 1 CABLES Each wire pair must be attached to the RJ 45 connectors in a specific orientation The following figure illustrates how the pins on an Ethernet RJ 45 connector are numbered Be sure to hold the connectors in the same orientation when attaching the wires to the pins Figure B 1 RJ 45 Ethernet Connector Pin Numbers RJ 45 Port Connection Use the straight through CAT 5 Ethernet cable provided in the package to connect the Router to your PC When connecting to other network devices such as an Ethernet switch use the cable type shown in the following B 2 table Attached Device Port Type Connecting Cable Type MDI X MDI Straight through Crossover RJ 45 CABLE Pin Assignments With 100BASE TX 10BASE T cable pins 1 and 2 are used for transmitting data and pins 3 and 6 for receiving data
23. rear panel holding it down for at least 10 seconds to restore the factory defaults The default password is smcadmin Enter a maximum Idle Time Out in minutes to define a maximum period of time for which the login session is maintained during inactivity If the connection is inactive for longer than the maximum idle time it will perform system logout and you have to log in again to access the management interface Default 10 minutes 4 13 CONFIGURING THE BARRICADE Remote Management 4 14 By default management access is only available to users on your local network However you can also manage the Barricade from a remote host by entering the IP address of a remote computer on this screen Check the Enabled check box and enter the IP address of the Host Address and click SAVE SETTINGS SMC SETUP WIZARD SYSTEM Remote Management Time Zone Set the remote management of the router If you want to manage the router from a remote location outside of the local network you must also specify the IP address of the remote PC Password Settings Remote Management WAN LAN WIRELESS NAT ROUTING Igel SAVE SETTINGS CANCEL FIREWALL uPnP b jb Ie DDNS TOOLS STATUS Note If you check Enable and specify an IP address of 0 0 0 0 any remote host can manage the Barricade For remote management via WAN IP address you need to connect using port 8080 Simply enter WAN IP address followed by 8
24. relevanta best mmelser i direktiv 1999 5 EG Den officiella EG f rs kran om verensst mmelse finns under motsvarande produktavsnitt p http www smc com H r me l sir SMC Networks v yfir ad essi Radio LAN b na ur er i samraemi vi grunnkr fur og a rar vi eigandi kr fur sem ger ar eru tilskipun 1999 5 EB Opinberu EB samraemisyfirlysinguna er a finna i vi eigandi hluta um pennan b na vefsetrinu http www smc com SMC Networks erkleerer herved at Radio LAN enheten er i samsvar med de grunnleggende kravene og vrige relevante krav i direktiv 1999 5 EF Denne offisielle EU konformitetserkl ringen finnes under korresponderende produktseksjon p Internett http www smc com Countries of Operation amp Conditions of Use in EC EFTA member states English French This device is a 2 4 GHz wireless LAN transceiver intended for indoor home and office use in all notified EC and EFTA member states In accordance with article 6 4 of the R amp TTE Directive 1999 5 EC the following EC EFTA member states have been notified Austria Belgium Denmark Finland France Germany Italy Luxembourg Netherlands Norway Spain Sweden Switzerland United Kingdom Portugal Greece Ireland Iceland Requirements for outdoor operation like license requirements and allowed channels of operation apply in some countries Please contact your local regulation authority or SMC Networks for details on current restrictions
25. require multiple connections such as Internet gaming video conferencing Internet telephony and others These applications cannot work when Network Address Translation NAT is enabled If you need to run applications that require multiple connections specify the port normally associated with an application in the Trigger Port field select the protocol type as TCP or UDP then enter the public ports associated with the trigger port to open them for inbound traffic The range of i 28800 e Trigger Ports is from 1 to 65535 OTcP OuDP GTcP OupP tcp m Oupp B667 2300 2400 47624 28800 29000 tcp OupP tcp os Cum tTcp Oupp e ro Ou GTCP Oupp ren Ou GrcP Oupp GTP Cup OTEP Cup Dr Home 3 tcp Grp o S Oupp OubP ETS OTcP OTcP Cum owe H GTcP GTcP 5 4 Ouop Ouop D tcp rop ii Ouve Over E 1 GTcP Grp o i Cum Oupe E Drop Grp n i Oupp Oupe 2 TC selectone Grp n O UD Battle net Cupp 3 E Dialpad S TC ICU I TCP 10 H vo MSN Gaming Zone UDP O vol hone 2 Quick Time 4 Popular applications MSN Gaming Zone D eer 1 w HELP __SAVE SETTINGS j CANCEL A 4 43 CONFIGURING THE BARRICADE NAT Mapping Table 4 44 This screen displays the current NAPT Network Address Port Translatio
26. system that supports TCP IP Compatible with all popular Internet applications INTRODUCTION Applications Many advanced networking features are provided by this Barricade Wired and Wireless LAN The Barricade provides connectivity to 10 100 Mbps devices and wireless connection speed up to 300 Mbps This router is fully compliant with specifications defined in IEEE 802 11b IEEE 802 11g and IEEE 802 11n draft v2 0 standards making it easy to create a network in small offices or homes Internet Access This device allows you to share your Cable xDSL Internet connection Since many ADSL providers use PPPoE to establish communications with end users the Barricade includes a built in client for this protocol eliminating the need to install these services on your computer Shared IP Address The Barricade provides Internet access for up to 253 users via a single shared IP address Using only one ISP account multiple users on your network can browse the web at the same time Virtual Server If you have a fixed IP address you can set the Barricade to act as a virtual host for network address translation Remote users access various services at your site using a constant IP address Then depending on the requested service or port number the Barricade can route the request to the appropriate server at another internal IP address This secures your network from direct attack by hackers and provides more flexible management
27. to connect to the Authentication Server WIRELESS Channel and SSID OtEnable ODisable Access Control Security 300 Seconds 0 for no timeout checking 13600 Seconds 0 for no re authentication 802 1X 60 Seconds after authentication failed Wi Fi Protected Setup PIN PBC Manual NAT ROUTING FIREWALL UPnP DDNS TOOLS STATUS a Parameter WIRELESS Description Authentication Session Idle Timeout Re Authentication Period Quiet Period Server Type Enable 802 1X authentication Defines a maximum period of time for which the connection is maintained during inactivity Defines a maximum period of time for which the authentication server will dynamically re assign a session key to a connected client Defines a maximum period of time for which the ADSL Router will wait between failed authentications The Server Type of your authentication server is RADIUS RADIUS Server Parameters Server IP Server Port Secret Key NAS ID The IP address of your authentication server The port used for the authentication service The secret key shared between the authentication server and its clients Defines the request identifier of the Network Access Server 4 35 CONFIGURING THE BARRICADE Wi Fi Protected Setup WPS 4 36 The Barricade was implemented with the ease of use Wi Fi Protected Setup WPS WPS makes a secure wireless network much easier
28. to share into the Global IP field Enter a range of internal IPs that will share the global IP into the from field SMC SETUP WIZARD SYSTEM Address Mapping Network Address Translation NAT allows IP addresses used in a private local network to be mapped to one or LAN more addresses used in the public global Internet This feature limits the number of public IP addresses required WIRELESS from the ISP and also maintains the privacy and security of the local network We allow one or more than one SC public IP address to be mapped to a pool of local addresses d Address Mapping Virtual Server s 5 1 Global IP NAT Mapping Table from D o LN ef ROUTING s m Special Application is transformed as multiple virtual IPs o e jo FIREWALL 2 Globalip 0 Ui Jo 18 Jis transformed as multiple virtual IPs urar from 0 8 DDNS TOOLS STATUS fomo o Jo p Jo k lo Jo Jp 3 Global If o 8 8 lis transformed as multiple virtual IPs In e de Io In 4 Global jet 10 0 0 is transformed as multiple virtual IPs fom 0 o o o kdo o jo o 5 Global 1P 0_ LD 0 0 is transformed as multiple virtual 1Ps sent o Jo Io kdo Io jo Jo 4 4 41 CONFIGURING THE BARRICADE Virtual Server 4 42 If you configure the Barricade as
29. v None Disable Disable None Disable Disable None Disable Disable None Disable Enable Silent Disable v None HELP SAVE SETTINGS CANCEL Parameter ROUTING Description General RIP Parameters RIP mode Auto summary Globally enables or disables RIP If Auto summary is disabled then RIP packets will include sub network information from all sub networks connected to the router If enabled this sub network information will be summarized to one piece of information covering all sub networks Table of current Interface RIP parameter Interface Operation Mode Version Poison Reverse Authentication Required Authentication Code The WAN interface to be configured Disable RIP disabled on this interface Enable RIP enabled on this interface Silent Listens for route broadcasts and updates its route table It does not participate in sending route broadcasts Sets the RIP Routing Information Protocol version to use on this interface A method for preventing loops that would cause endless retransmission of data traffic None No authentication Password A password authentication key is included in the packet If this does not match what is expected the packet will be discarded This method provides very little security as it is p
30. 080 for example 211 20 16 1 8080 File Edit View Favorites Tools Help Back gt Y A Qusearh 3jFavorites 4 Address 211 20 16 1 8080 WAN SETTINGS WAN Settings Specify the WAN connection type required by your Internet Service Provider Choose Dynamic IP Address PPPoE PPTP L2TP or Static IP Address for your WAN link SMC SETUP WIZARD SYSTEM WAN Settings p wan The Barricade can be connected to your service provider in any of the following ways Dynamic IP Address PPPoE SC Dynamic IP Address Obtains an IP address automatically from your service provider L2TP O PPPoE PPP over Ethemet is a common connection method used for xDSL Static IP Address TES O PPTP Point to Point Tunneling Protocol is a common connection method used in European xDSL connections Layer 2 Tunneling Protocol is a common connection method used in LAN o e European xDSL connections WIRELESS Your service provider provides a static IP address to access Intemet O Static IP Address Mose LEGIS FIREWALL UPnP DDNS TOOLS STATUS Select the connection type and click More Configuration 4 15 CONFIGURING THE BARRICADE Dynamic IP 4 16 The Host Name is optional but may be required by some service provider s The default MAC address is set to the WANS physical interface on the Barricade If required by your service provider you can use the Clone MAC Address button to copy the MAC address of the Network Interface
31. 55 255 0 for the Default gateway 192 168 2 1 subnet mask Use Joane server SEES Saca 192 168 2 1 for the Use the following DNS server addresses 3 Preferred DNS server 192 168 2 1 Default gateway field Alternate DNS server S i 3 Select Use the Advanced followingDNSserver addresses 4 Enter the IP address for the Barricade in the Preferred DNS server field This automatically relays DNS requests to the DNS server s provided by your ISP Otherwise add a specific DNS server into the Alternate DNS Server field and click OK to close the dialog boxes 5 Record the configured information in the following table TCP IP Configuration Setting IP Addtess Subnet Mask Preferred DNS Server Alternate DNS Server Default Gateway 3 7 TCP IP CONFIGURATION 3 8 Disable HTTP Proxy You need to verify that the HTTP Proxy feature of your web browser is disabled This is so that your browser can view the Barricade s HTML configuration pages 1 To disable the proxy in Er zi Internet Explorer click General Security Privacy Content Connections Programs Advanced Tools Click Internet A ae Setup Options and then m Dialup and Virtual Private Network settings the Connections tab shown on the right In Choose Settings if you need to configun EETES the Local Area Network Soln
32. 6 odst 4 smernice 1999 5 ES o r diovom zariaden a koncov ch telekomunika nych zariadeniach boli upovedomen nasleduj ce lensk t ty ES EZVO Belgicko D nsko Franc zsko F nsko Gr cko Holandsko Island rsko Luxembursko Nemecko N rsko Portugalsko Rak sko panielsko vaj iarsko v dsko Taliansko Ve k Brit nia V niektor ch t toch sa na prev dzku v exteri roch vz ahuj ur it po iadavky napr klad po iadavky na licenciu alebo po iadavky na prev dzkov kan ly Podrobn inform cie o aktu lnych obmedzeniach pri prev dzke v exteri roch v m poskytn miestne regula n org ny alebo spolo nos SMC Networks Finnish Swedish Icelandic Norwegian COMPLIANCES Laite on 2 4 GHz n langaton LAN vastaanotin joka on tarkoitettu koti ja toimistokaytt66n kaikissa EY n ja EFTAn j senmaissa joihin siit on ilmoitettu Radio ja telepaatelaitedirektiivin 1999 5 EY mukaisesti seuraaville EY EFTA maille on ilmoitettu It valta Belgia Tanska Suomi Ranska Saksa Italia Luxemburg Alankomaat Norja Espanja Ruotsi Sveitsi Iso Britannia Portugali Kreikka Irlanti ja Islanti Joissakin maissa ulkok ytt koskevat erilliset vaatimukset kuten erikseen anottava lupa ja sallittujen kanavien rajoittaminen Ota yhteytt paikalliseen k ytt valvovaan viranomaiseen tai SMC Networksiin jos haluat lis tietoja laitteen ulkok yt n rajoituksista Apparaten r en 2 4 GHz t
33. A WPA2 PSK security 4 Manually configure profile using WZC Disable the security authentication manually Click on Wireless Network Connection change advanced settings of the client PC Click on the Wireless Networks choose the appropriate wireless network name and click Properties Click Authentication and uncheck the Enable IEEE 802 1X authentication for this network Click OK to finish configuration TROUBLESHOOTING Troubleshooting Chart Symptom Action The wireless network is often interrupted The Barricade cannot be detected by a wireless client Move your wireless PC closer to the Barricade to find a better signal If the signal is still weak change the angle of the antenna There may be interference possibly caused by microwave ovens or wireless phones Change the location of the possible sources of interference or change the location of the Barricade Change the wireless channel on the Barricade See Channel and SSID on page 4 26 Check that the antenna connectors and cabling are firmly connected The distance between the Barricade and wireless PC is too great Make sure the wireless PC has the same SSID and security settings as the Barricade See Channel and SSID on page 4 26 and Security on page 4 29 A 5 TROUBLESHOOTING A 6 APPENDIX B CABLES RJ 45 Cable Caution DO NOT plug a phone jack connector into any RJ 45 port Use
34. AY INFORMATION uPnP DONS ADSL DISCONNECTED IP Address 192 168 2 1 Numbers of DHCP Clients 3 TOOLS Game Subnet Mask Runtime Code Version 255 255 255 0 0 00 01 Sep 10 2007 12 46 46 STATUS DHCP Server Enabled Boot Code Version V0 12 WM Firewall Enabled LAN MAC Address 00 17 3F C2 4E 13 UPnP Enabled Wireless MAC Address 00 17 3F C2 Wireless Enabled 4E 13 PPTP Client WAN MAC Address 00 17 3F C2 4E Line 1 Disabled 14 Clone MAC PPTP Server Hardware Version 08 Linei Disconnected Serial Num 12732823302725 Une Disconnected Une Disconnected Security Log DHCP Client Log Making Configuration Changes Configurable parameters have a dialog box or a drop down list Once a configuration change has been made on a screen click the APPLY or SAVE SETTINGS or NEXT button at the bottom of the screen to enable the new setting Note To ensure proper screen refresh after a command entry be sure that Internet Explorer is configured as follows Under the menu Tools Internet Options General Temporary Internet Files Settings the setting for Check for newer versions of stored pages should be Every visit to the page 4 2 SETUP WIZARD Setup Wizard Time Zone Click on SETUP WIZARD and NEXT then you will see the Time Zone screen Select your local time zone from the drop down menu This information is used for log entries and client filtering 2 Time Zone This page allows you to configure the localized time
35. Card NIC installed in your PC to replace the WAN MAC addtess If necessary you can use the Renew button on the Status page to renew the WAN IP address SMC SETUP WIZARD SYSTEM Dynamic IP WAN gt Dynamic IP Address PPPoE a If required by your Service Provider you can use the Clone MAC Address button to copy the MAC address of the Network Interface Card installed in your PC to replace the WAN MAC address The Host name is optional but may be required by some Service Provider s The default MAC address is set to the WAN S physical interface on the Barricade L21P Static IP Address If necessary you can use the Release and Renew buttons on the Status page to release and renew the WAN IP address Clone MAC Address DNS LAN WIRELESS Lin Us L ce Le Lia Clone MAC Address NAT ROUTING FIREWALL UPnP DDNS TOOLS HELP __SAVE SETTINGS J cANcEL STATUS Note Make sure you record the MAC addtess that you clone so that if you lose your settings you will be able to re connect to the Internet Click SAVE SETTINGS to proceed or CANCEL to change your settings PPPOE WAN SETTINGS Enter the PPPoE user name and password assigned by your Service Provider The Service Name is normally optional but may be required by some service providers Enter a Maximum Idle Time in minutes to define a maximum period of time for which the Internet connection is m
36. Configuration 3 2 To access the Internet through the Barricade you must configure the network settings of the computers on your LAN to use the same IP subnet as the Barricade The default network settings for the Barricade are IP Address 192 168 2 1 Subnet Mask 255 255 255 0 Note These settings can be changed to fit your network requirements but you must first configure at least one computer to access the Barricade s web configuration interface in order to make the required changes See Configuring the Barricade on page 4 1 for instructions on configuring the Barricade Windows 2000 DHCP IP Configuration 1 On the Windows desktop click Start Settings Network and Dial Up Connections 2 Click the icon that corresponds to the connection to your Barricade 3 The connection status screen will open Click Properties CONFIGURING THE CLIENT PC GF New Office Document A Open Office Document E Windows Update D Acrobat Reader 5 0 DN winzip E Programs L CX Document G Printers m 0 00 SMR Taskbar amp Start Menu Local Area Connection 1 Status 3 xl General m Connection Status Connected Duration 00 15 12 Speed 10 0 Mbps m Activity Sent Ah Received dk Packets 49 D Disable 3 3 TCP IP CONFIGURATION 3 4 4 Double click Internet Local Area Connection 1 Properties 3j Protocol TCP IP General Sharing Connect
37. DEENEN WIRELESS Security To make your wireless network safe you should turn on the security function The Barricade supports the following security mechanism e WEP e WPA SETUP WIZARD SYSTEM Security The router can transmit your data securely over the wireless network Matching security mechanisms must be LAN setup on your router and wireless client devices You can choose the allowed security mechanisms in this page WIRELESS and configure them in the sub pages Channel and SSID DESEN Allowed Client Type No WEP No WPA WEP Only HELP SAVE SETTINGS CANCEL WPA Onl 802 1X WiFi Protected Setup Manual NAT ROUTING FIREWALL UPnP DDNS TOOLS STATUS 4 29 CONFIGURING THE BARRICADE 4 30 WEP If you want to use WEP to protect your wireless network you need to set the same parameters for the Barricade and all your wireless clients SMC SETUP WIZARD WEP SYSTEM WEP is the basic mechanism to transmit your data securely over the wireless network Matching encryption keys WAN must be setup on your router and wireless client devices to use WEP LAN WIRELESS Channel and SSID Os4 bit 128 bit gH Hex O asen Access Control Security eo we Static WEP Key Setting 802 1 Wi Fi Protected Setup EN PBC 10 26 hex digits for 64 WEP 128 WEP GENERATE 1 32 characters Manual NAT ROUTING FIREWALL UPnP DDNS T
38. EM Your Email Address SMTP Server Address LAN POP3 Server Address WIRELESS User name NAT ROUTING Se FIREWALL iccess Fragmentation half open MAC Filter wait 10sec URL Blocking TCP SYN wait 30 sec Schedule Rule TCP FIN wait 5 Leer Intrusion Detection TCP connection idle 3600 1 DMZ timeout A lsec mE m i SE 120 sec 3 annel idle H DDNS timeout OX ZS TOOLS STATUS Total incomplete TCP UDP sessions HIGH 300 session Total incomplete TCP UDP sessions LOW 250 session Incomplete TCP UDP sessions per min HIGH 250 _ session Incomplete TCP UDP sessions ner min LOW 200 seccion S SMC SETUP WIZARD SYSTEM P3 English fr Home TCP SYN wait TCP FIN wait 5 sec TCP connection idle LAN timeout ae WIRELESS UDP session idle timeout 120 sec H 323 data channel idle NAT Ke 180 sec ROUTING FIREWALL Access Control Total incomplete TCP UDP sessions HIGH 300 session MAC Filter Total incomplete TCP UDP sessions LOW 250 session URL Blocking Incomplete TCP UDP sessions per min HIGH 250 session Schedule Rule A ES Incomplete TCP UDP sessions per min LOW 200 session Maximum incomplete TCP UDP sessions number 30 D from same host UPnP Incomplete TCP UDP sessions detect sensitive Ee 300 meer DONS Maximum half open fragmentation packet number 37 TOOLS
39. LAN Wireless clients should be configured to use the same SSID a Enter new SSID or use the default value b Select Wireless made For best compatibility SMC recommend Mixed 11b 11g 11n c Select operating channel d Click Next to continue Mixed 802 11n 802 11g and 802 11b ES Description Wireless Channel Extension Channel SSID Wireless Mode The radio channel used by the wireless router and its clients to communicate with each other This channel must be the same on the Barricade and all of its wireless clients The Barricade will automatically assign itself a radio channel or you may select one manually Setting the Bandwith Mode as 20 40MHz allows you to use this extension channel as the secondary channel for doubling the bandwith of your wireless netwotk Service Set ID The SSID must be the same on the Barricade and all of its wireless clients Default SMC This device supports 11n 11g and 11b wireless networks Make your selection depending on the type of wireless network that you have SMC recommend using Mixed 802 11n 802 11g and 802 11b to provide compatibility with 11n 11g and 11b wireless clients SETUP WIZARD Parameter Description Bandwidth Broadcast SSID 20MHz Sets the operation bandwidth as 20 MHz 20 40MHz Allows automatic detection of the operation bandwidth between 20 MHz and 40 MHz Choosing the bandwidth mode as 20 40MHz allows yo
40. MAC Address L2TP Password DNS LAN Retype Password WIRELESS GetIP By DHCP v px English Home Logout NAT ROUTING L2TP Server Address 0 o lo Jo FIREWALL v Disconnect after 10___minutes of no activity UPnP DDNS TOOLS Click here to enter your DNS Settings STATUS Clear _save SETTINGS Click SAVE SETTINGS to proceed or Clear to change your settings 4 19 CONFIGURING THE BARRICADE Static IP If your Service Provider has assigned a fixed IP address enter the assigned IP address subnet mask and the gateway address on this screen SMC SETUP WIZARD SYSTEM Static IP WAN Dynamic IP Address PPPoE If your Service Provider has assigned a fixed IP address enter the assigned IP address subnet mask and the gateway address provided PPTP o llo 0 L2TP Static IP Address 0 10 0 Clone MAC Address DNS le o 0 LAN WIRELESS NAT ROUTING FIREWALL UPnP DDNS TOOLS STATUS HELP SAVESETTINGS J cancel Click SAVE SETTINGS to proceed or CANCEL to change your settings 4 20 WAN SETTINGS Clone MAC Address Some ISPs require you to register your MAC address with them If this is the case and you have previously registered the MAC address of another device the MAC address of the Barricade must be changed to the MAC address that you have registered with your ISP SMC SETUP WIZARD
41. NY OTHER PERSON TO ASSUME FOR IT ANY OTHER LIABILITY IN CONNECTION WITH THE SALE INSTALLATION MAINTENANCE OR USE OF ITS PRODUCTS SMC SHALL NOT BE LIABLE UNDER THIS WARRANTY IF ITS TESTING AND EXAMINATION DISCLOSE THE ALLEGED DEFECT IN THE PRODUCT DOES NOT EXIST OR WAS CAUSED BY CUSTOMER S OR ANY THIRD PERSON S MISUSE NEGLECT IMPROPER INSTALLATION OR TESTING UNAUTHORIZED ATTEMPTS TO REPAIR OR ANY OTHER CAUSE BEYOND THE RANGE OF THE INTENDED USE OR BY ACCIDENT FIRE LIGHTNING OR OTHER HAZARD LIMITATION OF LIABILITY IN NO EVENT WHETHER BASED IN CONTRACT OR TORT INCLUDING NEGLIGENCE SHALL SMC BE LIABLE FOR INCIDENTAL CONSEQUENTIAL INDIRECT SPECIAL OR PUNITIVE DAMAGES OF ANY KIND OR FOR LOSS OF REVENUE LOSS OF BUSINESS OR OTHER FINANCIAL LOSS ARISING OUT OF OR IN CONNECTION WITH THE SALE INSTALLATION MAINTENANCE USE PERFORMANCE FAILURE OR INTERRUPTION OF ITS PRODUCTS EVEN IF SMC OR ITS AUTHORIZED RESELLER HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES SOME STATES DO NOT ALLOW THE EXCLUSION OF IMPLIED WARRANTIES OR THE LIMITATION OF INCIDENTAL OR CONSEQUENTIAL DAMAGES FOR CONSUMER PRODUCTS SO THE ABOVE LIMITATIONS AND EXCLUSIONS MAY NOT APPLY TO YOU THIS WARRANTY GIVES YOU SPECIFIC LEGAL RIGHTS WHICH MAY VARY FROM STATE TO STATE NOTHING IN THIS WARRANTY SHALL BE TAKEN TO AFFECT YOUR STATUTORY RIGHTS SMC will provide warranty service for one year following discontinuance from the active SMC pric
42. OOLS ecl S Parameter Description WEP Mode Select 64 bit or 128 bit key to use for encryption Key Entry Method Select Hex or ASCII to use for encryption key Static WEP Key You may automatically generate encryption keys or manually Setting enter the keys To generate the key automatically with passphrase enter a string of characters and click the GENERATE button Select the default key from the drop down menu Click SAVE SETTINGS Note The passphrase can consist of up to 32 alphanumeric characters To manually configure the encryption key enter five hexadecimal pairs of digits for the 64 bit key or enter 13 pairs for the 128 bit key A hexadecimal digit is a number or letter in the range 0 9 or A F Note WEP protects data transmitted between wireless nodes but does not protect any transmissions over your wired network or over the Internet WIRELESS WPA Wi Fi Protected Access WPA combines temporal key integrity protocol TKIP and 802 1X mechanisms It provides dynamic key encryption and 802 1X authentication service SMC SETUP WIZARD SYSTEM WPA PX English MhHome GLogout WPA is a security enhancement that strongly increases the level of data protection and access control for LAN existing wireless LAN Matching authentication and encryption methods must be setup on your router and WIRELESS wireless client devices to use WPA Channel and SSID Access Control Security
43. RL Blocking Schedule Rule Intrusion Detection HELP SAVE SETTINGS CANCEL DMZ UPnP DDNS TOOLS STATUS 4 54 FIREWALL Follow these steps to add a schedule rule SMC SETUP WIZARD Edit Schedule Rule SYSTEM LAN Name normal WIRELESS Comment office hours NAT e ROUTING FIREWALL Access Control Every Day MAC Filter sunday AI URL Blocking Monday le Jm 18 00 Schedule Rule d Tuesday le o 18 00 Intrusion Detection Wednesday 8 00 s io UPnP Thursday la 00 18 00 DDNS Friday s on 28 00 TOOLS Saturday B STATUS eR CANCEL 1 Click Add Schedule Rule on the Schedule Rule screen The Edit Schedule Rule screen will appear 2 Define the appropriate settings for a schedule rule 3 Click OK and then click SAVE SETTINGS to save your settings 4 55 CONFIGURING THE BARRICADE Intrusion Detection e Intrusion Detection Feature Stateful Packet Inspection SPI and Anti DoS firewall protection Default Enabled The Intrusion Detection Feature of the Barricade Router limits access for incoming traffic at the WAN port When the SPI feature is turned on all incoming packets will be blocked except for those types marked in the Stateful Packet Inspection section RIP Defect Default Enabled If an RIP request packet is not acknowledged to by the router
44. S wireless client devices to use WPA Channel and SSID Access Control Security WEP WPA 802 1X Wi Fi Protected Setup i PBC Manual HELP SAVE SETTINGS CANCEL ROUTING FIREWALL UPnP DDNS TOOLS STATUS Os802 1X OPre shared Key OPassphrase 8 63 characters O Hex 64 ligits NAT Parameter Description Authentication Choose 802 1X or Pre shared Key to use as the authentication method 802 1X for the enterprise network with a RADIUS server See 802 1X on page 4 34 Pre shared key for the SOHO network environment without an authentication server Pre shared key type Select the key type to be used in the Pre shared Key Pre shared Key Type in the key here WIRELESS WPA WPA2 Wi Fi Protected Access WPA combines temporal key integrity protocol TKIP and 802 1x mechanisms It provides dynamic key encryption and 802 1x authentication service Wi Fi Protected Access 2 WPA2 is a product certification that is available through the Wi Fi Alliance WPA2 certifies that wireless equipment is compatible with the IEEE 802 111 standard The WPA2 product certification formally replaces Wired Equivalent Privacy WEP and the other security features of the original IEEE 802 11 standard The goal of WPA2 certification is to support the additional mandatory security features of the IEEE 802 111 standard that are not already included for products that support WPA
45. SMC Networks USER GUIDE Barricade N Draft 11n Wireless 4 port Broadband Router SMCWBR14S N2 Wireless Broadband Router User s Guide From SMC s line of award winning connectivity solutions SMC Networks 20 Mason Irvine CA 92618 RO2 F W 1 0 Phone 949 679 8000 Information furnished is believed to be accurate and reliable However no responsibility is assumed by our company for its use nor for any infringements of patents or other rights of third parties which may result from its use No license is granted by implication or otherwise under any patent or patent rights of our company We reserve the right to change specifications at any time without notice Copyright 2008 by SMC Networks Inc 20 Mason Irvine CA 92618 All rights reserved Trademarks Product and company names are trademarks or registered trademarks of their respective holders LIMITED WARRANTY Limited Warranty Statement SMC Networks Inc SMC warrants its products to be free from defects in workmanship and materials under normal use and service for the applicable warranty term All SMC products carry a standard 90 day limited warranty from the date of purchase from SMC or its Authorized Reseller SMC may at its own discretion repair or replace any product not operating as warranted with a similar or functionally equivalent product during the applicable warranty term SMC will endeavor to repair or replace any product re
46. STATUS Parameter Description Index Check the box of the route you wish to delete or modify Network Address Enter the IP address of the remote computer for which to set a static route Subnet Mask Enter the subnet mask of the remote network for which to set a static route Gateway Enter the WAN IP address of the gateway to the remote network Click Add to add a new static route to the list or check the box of an already entered route and click Modify Clicking Delete will remove an entry from the list 4 45 CONFIGURING THE BARRICADE 4 46 RIP RIP sends routing update messages at regular intervals and when the network topology changes When a router receives a routing update that includes changes to an entry it updates its routing table to reflect the new route RIP routers maintain only the best route to a destination After updating its routing table the router immediately begins transmitting routing updates to inform other network routers of the change SMC SETUP WIZARD SYSTEM RIP Parameters WAN Please Enter the following Configuration Parameters LAN WIRELESS NAT ROUTING Static Route VW RIP Routing Table General RIP parameter RIP mode Disable O Enable Auto summary Disable O Enable Table of current interface RIP parameter FIREWALL UPnP DDNS TOOLS STATUS Disable Disable Disable v Disable v None Disable v Enable
47. SYSTEM WAN Some ISPs require you to register your MAC address with them If you have done this the MAC address of the Dynamic IP Address Gateway must be changed to the MAC address that you supplied to your ISP Clone MAC Address PPPoE PPTP L2TP O Use the Gateway s default MAC address 00 17 3F C2 4E 14 Static IP Address Clone MAC Address WAN Interface MAC Address O Use this PC s MAC address 00 04 E2 0D 02 FD Enter a new MAC address manually LAN foo zpz ke ke J ae fra WIRELESS HELP _ SAVE SETTINGS CANCEL NAT ROUTING FIREWALL UPnP DDNS TOOLS STATUS 4 21 CONFIGURING THE BARRICADE DNS 4 22 A Domain Name Server DNS is an index of IP addresses and web addresses If you type a web address into your browser such as www smc com a DNS server will find that name in its index and find the matching IP address xxx xxx xxx xxx Most ISPs provide a DNS server for speed and convenience Since your Service Provider may connect to the Internet with dynamic IP settings it is likely that the DNS server IP s are also provided dynamically However if there is a DNS server that you would rather use you need to specify the IP address here SMC SETUP WIZARD SYSTEM WAN Dynamic IP Address PPPoE PPTP L2TP Static IP Address Clone MAC Address DNS LAN WIRELESS NAT ROUTING FIREWALL UPnP DDNS TOOLS STATUS DNS A Domain Name Server DNS is an index of IP add
48. a Clean 5 I TCP v ri add clean For example if you set Type Public Port to TCP 80 HTTP or web and the Private IP Port to 192 168 2 2 80 then all HTTP requests from outside users will be transferred to 192 168 2 2 on port 80 Therefore by just entering the IP address provided by the ISP Internet users can access the service they need at the local address to which you redirect them The more common TCP service ports include HTTP 80 FTP 21 Telnet 23 and POP3 110 A list of ports is maintained at the following link http www iana org assignments port numbers Special Application NAT Some applications require multiple connections such as Internet gaming video conferencing and Internet telephony These applications may not work when Network Address Translation NAT is enabled If you need to run applications that require multiple connections use these screens to specify the additional public ports to be opened for each application SMC SETUP WIZARD SYSTEM LAN WIRELESS NAT Address Mapping Virtual Server Special Application NAT Mapping Table ROUTING FIREWALL UPnP DDNS TOOLS STATUS SMC SETUP WIZARD SYSTEM LAN WIRELESS NAT Address Mapping Virtual Server Special Application NAT Mapping Table ROUTING FIREWALL UPnP DDNS TOOLS STATUS Special Application z English P Home E Some applications
49. a Ke EN LAN settings section nnection is not present click LAN Settings I connection y Current default None Set Default to display the Local Ee Area Network LAN Local Area Network LAN settings Settings pop up window SE E decedens ETA below OK Cancel Apply 2 In the Proxy server Local Area Network LAN settings ES section ensure the Use Automatic configuration Automatic configuration may override manual settings To ensure the a proxy server for use of manual settings disable automatic configuration your LAN These EE Use automatic configuration script settingswillnotapply wee o to dial up or VPN NEN connections check Use a proxy server for your LAN These settings will not apply to dial up or VPN connections box is not ticked I Port Advanced ss proxy server For local addresses Lal coma Address 3 Click OK Windows XP DHCP IP Configuration 1 On the Windows desktop click Start Control Panel 2 Inthe Control Panel window click Network and Internet Connections 3 The Network Connections window will open Locate and double click the Local Area Connection icon for the Ethernet adapter that is connected to the Barricade 4 Inthe connection status screen click Properties CONFIGURING THE CLIENT PC 5 E mail Pe My Recent Documents gt Sens E e My Pictures mi MSN Explorer e Ig e Windows Media Player qs My Co
50. ack TCP null scan and TCP SYN flooding For details see Intrusion Detection page 4 56 The firewall does not significantly affect system performance so we advise enabling the function to protect your network Select Enable and click the SAVE SETTINGS button 4 49 CONFIGURING THE BARRICADE Access Control 4 50 Access Control allows users to define the outgoing traffic permitted or not permitted through the WAN interface The default is to permit all outgoing traffic SMC SETUP WIZARD SYSTEM WAN Access Control allows users to define the traffic type permitted or not permitted to WAN port service This page SS includes IP address filtering and MAC address filtering WIRELESS Enable Filtering NAT Function ROUTING FIREWALL Access Control Access Control O Enable O Disable Normal Filtering Table up to 10 computers ees DO ae rape Schedule Rule Intrusion Detection DMZ UPnP Igel sang SETTINGS CANCEL DDNS TOOLS STATUS The following items are on the Access Control screen Parameter Description Enable Filtering Enable or Disable Access control function Function Normal Filtering Table Displays descriptive list of Filtering rules defined FIREWALL To create a new access control rule 1 Click Add PC on the Access Control screen The Access Control Add PC screen will appear 2 Define the appropriate settings for client PC services 3 Click OK
51. aintained during inactivity If the connection is inactive for longer than the Maximum Idle Time then it will be dropped You can enable the Auto reconnect option to automatically re establish the connection as soon as you attempt to access the Internet again SMC SETUP WIZARD SYSTEM WAN Dynamic IP Address PPPoE PPTP UI Static IP Address Clone MAC Address DNS WIRELESS NAT ROUTING FIREWALL UPnP DDNS TOOLS STATUS PPPoE Enter the PPPoE user name and password assigned by your Service Provider The Service Name is normally optional but may be required by some service providers Enter a Maximum Idle Time in minutes to define a maximum period of time for which the Internet connection is maintained during inactivity ifthe connection is inactive for longer than the Maximum Idle Time then it will be dropped You can enable the Auto reconnect option to automatically re establish the connection as soon as you attempt to access the Intemet again If your Internet Service Provider requires the use of PPPoE enter the information below Use PPPoE Authentication User Name Password Please retype your password Serice Name MTU Maximum Idle Time 5 min V Auto reconnect 1454 Click SAVE SETTINGS to proceed or CANCEL to change your settings 4 17 CONFIGURING THE BARRICADE PPTP 4 18 Enter the Account ID and Password and Host Name assigned by your ISP in the appr
52. at the network interface on the attached device is configured for the proper communication speed and duplex mode Check the adapter on the attached device and cable connections for possible defects Replace any defective adapter or cable if necessary Network Connection Problems Cannot ping the Barricade from the attached LAN or the Barricade cannot ping any device on the attached LAN Verify that the IP addresses are properly configured For most applications you should use the Barricade s DHCP function to dynamically assign IP addresses to hosts on the attached LAN However if you manually configure IP addresses on the LAN verify that the same network address network component of the IP address and subnet mask are used for both the Barricade and any attached LAN devices Be sure the device you want to ping or from which you are pinging has been configured for TCP IP TROUBLESHOOTING Troubleshooting Chart Symptom Action Management Problems Cannot connect Be sure to have configured the Barricade with a valid using the web IP address subnet mask and default gateway browser Check that you have a valid network connection to the Barricade and that the port you are using has not been disabled e Check the network cabling between the management station and the Batricade Forgot or lost Press the Reset button on the rear panel holding it the password down for at leas
53. bove Mozilla Firefox 1 0 or above Hardware Description 2 2 The Barricade connects to a cable or x DSL modem with Ethernet connection using it s RJ 45 WAN port It can be connected directly to your PC or to a local area network using the Fast Ethernet LAN ports Data passing between devices connected to your local area network can run at up to 100 Mbps over the Fast Ethernet port and up to 300 Mbps over the built in wireless access point The Barricade includes an LED display on the top panel for system power and port indications that simplifies installation and network troubleshooting HARDWARE DESCRIPTION The following figures show the top and rear panels of the Barricade SMC Networks BARRICADEN Draft 11n Wireless 4 port Broadband Router SMCWBR14S N2 Power WAN Online WLAN LANI LANZ La Lu WPS Figure 2 1 Top Panel LA ee AO O Power LAN4 LAN3 LAN2 LAN1 WAN Reset 9V 1A Figure 2 2 Rear Panel INSTALLATION The power and port LED indicators on the top panel are illustrated by the following table LED Status Description Power On The Barricade is receiving power Normal operation Off Power off or failure
54. by allowing you to change internal IP addresses without affecting outside access to your network 1 3 APPLICATIONS 1 4 DMZ Host Support Allows a networked computer to be fully exposed to the Internet This function is used when NAT and firewall security prevent an Internet application from functioning correctly Security The Barricade supports security features that deny Internet access to specified users or filter all requests for specific services that the administrator does not want to serve The Barricade s firewall also blocks common hacker attacks including IP Spoofing Land Attack Ping of Death IP with zero length Smurf Attack UDP port loopback Snork Attack TCP null scan and TCP SYN flooding WPA WPA2 IEEE802 1x WEP SSID and MAC filtering provide security over the wireless network Virtual Private Network VPN Pass through The Barricade supports three of the most commonly used VPN protocols PPTP L2TP and IPSec These VPN protocols are transparent pass through The protocols supported by the Barricade are briefly described below e Point to Point Tunneling Protocol Provides a secure tunnel for remote client access to a PPTP security gateway PPTP includes provisions for call origination and flow control required by ISPs LZIP merges the best features of PPTP and L2F Like PPTP L2TP requires that the ISP s routers support the protocol IP Security Provides IP network layer encrypt
55. c Displays Energy Keyboard Mouse Sound Saver Internet amp Network e ejoQ is Internet Network QuickTime Sharing System k Lo ES A 9 G o BH e Accounts Classic Date amp Time Software Speech Startup Disk Universal Update Access 3 15 CONFIGURING YOUR MACINTOSH COMPUTER 3 16 5 If Using DHCP Serveris eo Network 5 ocation utomatic already selected in the tection Automate S Show Built in Ethernet E Configure field your Ise PPPoE AppleTalk Proxies computer is already Configure Uie 5 configured for DHCP If us eg zt by DHCP Server not select this option Subnet Mask UR Search Domains Optional DHCP Client ID Ethernet Address 00 50 e4 00 2c 06 earthlink net Click the tock to prevent further changes Revert Apply Now Your new settings are shown in the TCP IP tab Verify that your IP Addressisnow192 168 2 xxx yourSubnetMaskis255 255 255 0and your Default Gateway is 192 168 2 1 These values confirm that your Barricade is functioning Close the Network window Now your computer is configured to connect to the Barricade CONFIGURING THE CLIENT PC Disable HTTP Proxy You need to verify that the HTTP Proxy feature of your web browser is disabled This is so that your browser can view the Barricade s HTML configuration pages The following steps are for Internet Explorer Internet Explorer 1 Open Internet Explorer and c
56. ca Finl ndia Fran a Alemanha It lia Luxemburgo Holanda Noruega Espanha Su cia Su a Reino Unido Portugal Gr cia Irlanda Isl ndia Os requisitos para uma utiliza o no exterior tais como de licen a e de canais de funcionamento permitidos aplicam se a alguns pa ses Para obter informa es sobre as restri es de utiliza o no exterior contacte a autoridade local competente ou a SMC Networks Ta naprava je oddajno sprejemna enota za brez i no lokalno omre je namenjena uporabi na domu ali v pisarni v vseh prigla enih dr avah lanicah ES in EFTA Skladno s lenom 6 4 Direktive 1999 5 ES o radijski opremi in telekomunikacijski terminalski opremi so bile obve ene naslednje dr ave lanice ES EFTA Avstrija Belgija Danska Finska Francija Nem ija Italija Luksemburg Nizozemska Norve ka panija vedska vica Velika Britanija Portugalska Gr ija Irska Islandija V nekaterih dr avah veljajo zahteve za delovanje na prostem kot so zahteve za dovoljenje in dovoljeni kanali za delovanje e potrebujete natan ne informacije o trenutnih omejitvah uporabe na prostem se obrnite na lokalni regulativni organ ali dru bo SMC Networks Toto zariadenie je prij ma a vysiela pre bezdr tov siete v p sme 2 4 GHz a je ur en na pou itie v interi roch dom cnost a kancel ri vo v etk ch lensk ch t toch ES a EZVO ktor m bol ozn men z mer uvies zariadenie na trh V s lade s l
57. ct after 10 minutes of no activity Click here to enter your DNS Settings BACK NEXT Click NEXT to proceed or BACK to change your settings SETUP WIZARD Static IP Address Enter the IP address Subnet Mask and Gateway Address provided to you by your ISP in the appropriate fields below Static IP If your Service Provider has assigned a fixed IP address enter the assigned IP address subnet mask and the gateway address provided n n n 0 D 0 H o 0 Click NEXT to proceed or BACK to change your settings 4 11 CONFIGURING THE BARRICADE System Time Zone 4 12 Select your local time zone from the drop down list This information is used for log entries and client filtering SMC SETUP WIZARD Set Time Zone SYSTEM Use this setting to ensure the time based client filtering feature and system log Time Zone entries are based on the correct localised time Password Settings EA E IN 5 Remote Management GMT 08 00 Pacific Time US amp Canada Tijuana v LAN WIRELESS NAT ROUTING FIREWALL UPnP Configure Time Server NTP DDNS Enable Daylight Savings Start Daylight Savings Time January vj End Daylight Savings Time afi s You can automatically maintain the system time on your router by synchronising with a public time server aver the Internet TOOLS STATUS v Enable Automatic Time Server Maintenance Whe
58. dne z zasadniczymi wymaganiami oraz pozosta ymi stosownymi postanowieniami Dyrektywy 1999 5 EC Oficjalna Deklaracja zgodno ci UE znajduje si w odpowiedniej sekcji produktu w witrynie http www smc com A SMC Networks declara que este dispositivo de LAN de R dio est em conformidade com os requisitos essenciais e com outras provis es relevantes da Directiva 1999 5 CE A Declara o de Conformidade CE oficial encontra se na sec o correspondente do produto na Web http www smc com Dru ba SMC Network izjavlja da je naprava Radio LAN skladna z bistvenimi zahtevami in drugimi ustreznimi predpisi direktive 1999 5 ES Za uradno izjavo o skladnosti ES glejte razdelek za ustrezni izdelek na spletni strani http www smc com Spolo nost SMC Networks tymto vyhlasuje Ze toto zariadenie Radio LAN sp a z kladn po iadavky a al ie pr slu n ustanovenia smernice 1999 5 ES Ofici lne prehl senie ES o zhode je uveden v sekcii pr slu n ho produktu v lokalite http www smc com SMC Networks vakuuttaa t ten ett Radio LAN device tyyppinen laite on direktiivin 1999 5 EY oleellisten vaatimusten ja sit koskevien direktiivin muiden ehtojen mukainen EY n virallinen vaatimustenmukaisuusvakuutus on tuotteen kohdalla Web sivustossa http www smc com vi COMPLIANCES vil Swedish Icelandic Norwegian H rmed intygar SMC Networks att denna Radio LAN apparat uppfyller de vasentliga egenskapskrav och vriga
59. dress The IP address of the Barricade IP Subnet Mask The IP subnet mask DHCP Server DHCP allows individual computers to obtain the TCP IP configuration at startup from a centralized DHCP server To dynamically assign an IP address to a client PC enable the DHCP Dynamic Host Configuration Protocol function 4 23 CONFIGURING THE BARRICADE 4 24 Parameter Description Lease Time The length of time the DHCP server will reserve the IP address for each computer Setting lease times for shorter intervals such as one day or one hour frees IP addresses after the specified period of time This also means that a particular computer s IP address may change over time If you have set any advanced features such as DMZ this is dependent on the IP address For this reason you will not want the IP address to change IP Address Pool Start IP End IP Domain Name The DHCP IP Address Pool is the range of IP addresses set aside for dynamic assignment to the computers on your network This field indicates the first of the contiguous IP addresses in the IP address pool This field indicates the last of the contiguous IP addresses in the IP address pool The domain name is the name you assign to your network WIRELESS Wireless The Barricade also operates as a wireless access point allowing wireless computers to communicate with each other To configure this function all you need to do is to enable the
60. e Ihre Regulierungsbeh rde oder SMC Networks f r die aktuellen Einschr nkungen beim Einsatz im Aussenbereich Toto za zen je p ij ma a vys la pro bezdr tov s t LAN v p smu 2 4 GHz ur en pro pou it v interi ru dom cnost a kancel ve v ech lensk ch zem ch ES a ESVO kter m byl ozn men z m r uv st za zen na trh V souladu s l 6 odst 4 sm rnice 1999 5 ES o r diov ch za zen ch a telekomunika n ch koncov ch za zen ch byly uv dom ny tyto lensk zem ES nebo ESVO Belgie D nsko Finsko Francie Irsko Island It lie Lucembursko N mecko Nizozemsko Norsko Portugalsko Rakousko ecko Spojen kr lovstv pan lsko v dsko v carsko Na pou it ve venkovn m prost ed se v n kter ch zem ch vztahuj ur it po adavky nap po adavky na licenci nebo provoz v povolen ch kan lech O omezen venkovn ho pou it se informujte u m stn ch regul tor nebo u spole nosti SMC Networks viii COMPLIANCES Danish Enheden er en 2 4 GHz tr dl s LAN transceiver beregnet til indend rs hjemme og kontorbrug i alle notificerede EU og EFTA medlemslande henhold til afsnit 6 4 i R amp TTE direktivet 1999 5 EF er f lgende EU EFTA medlemslande notificeret strig Belgien Danmark Finland Frankrig Tyskland Graekenland Island Irland Italien Luxembourg Holland Norge Portugal Spanien Sverige Schweiz og Storbritannien visse lande g lder
61. e it in the Host Name field Click on the Clone the MAC Address and the MAC Address of the current PC will be filled automatically Dynamic IP The Host name is optional but may be required by some Service Providers The default MAC address is set to the WAN s physical interface on the Barricade If required by your Service Provider you can use the Clone MAC Address button to copy the MAC address of the Network Interface Card installed in your PC to replace the WAN MAC address If necessary you can use the Release and Renew buttons on the Status page to release and renew the WAN IP address Win Lin Lis Le Le Uu Clone MAC Address d BACK Click NEXT to proceed or BACK to change your settings 4 7 CONFIGURING THE BARRICADE 4 8 PPPoE Enter the User Name and Password required by your ISP in the appropriate fields If your ISP has provided you with a Service Name enter it in the Service Name field otherwise leave it blank Leave the Maximum Transmission Unit MTU at the default value 1454 unless you have a particular reason to change it Enter the maximum idle time for the Internet connection After this time has been exceeded the connection will be terminated Check the Auto reconnect check box to automatically re establish the connection as soon as you attempt to access the Internet again PPPoE Enter the PPPoE user name and password assigned by your Service Provider The Service Na
62. e list Under the limited lifetime warranty internal and external power supplies fans and cables are covered by a standard one year warranty from date of purchase SMC Networks Inc 20 Mason Irvine CA 92618 DI COMPLIANCES Federal Communication Commission Interference Statement This equipment has been tested and found to comply with the limits for a Class B digital device pursuant to Part 15 of the FCC Rules These limits are designed to provide reasonable protection against harmful interference in a residential installation This equipment generates uses and can radiate radio frequency energy and if not installed and used in accordance with the instructions may cause harmful interference to radio communications However there is no guarantee that interference will not occur in a particular installation If this equipment does cause harmful interference to radio or television reception which can be determined by turning the equipment off and on the user is encouraged to try to correct the interference by one of the following measures Reorient or relocate the receiving antenna Increase the separation between the equipment and receiver Connect the equipment into an outlet on a circuit different from that to which the receiver is connected Consult the dealer or an experienced radio TV technician for help This device complies with Part 15 of the FCC Rules Operation is subject to the following two conditions 1 Th
63. ection method please contact your Internet Service Provider There are several connection types to choose from Static IP DHCP PPPoE PPTP and L2TP Note If using the PPPoE option you will need to remove or disable any PPPoE client software on your computers 2 5 INSTALLATION Connect the System The Barricade can be positioned at any convenient location in your office or home No special wiring or cooling requirements are needed You should however comply with the following guidelines Keep the Barricade away from any heating devices Do not place the Barricade in a dusty or wet environment You should also remember to turn off the power remove the power cord from the outlet and keep your hands dry when you install the Barricade Connect the Cable xDSL Modem Connect the cable xDSL modem using a CAT 5 Ethernet cable RJ 45 to the Barricade s WAN port When inserting the RJ 45 plug be sure the tab on the plug clicks into position to ensure it is properly seated Connecting the Barricade to your LAN 2 6 The four LAN ports on the Barricade auto negotiate the connection speed to 10 Mbps Ethernet or 100 Mbps Fast Ethernet as well as the transmission mode to half duplex or full duplex Use RJ 45 cables to connect any of the four LAN ports on the Barricade to an Ethernet adapter on your PC Otherwise cascade any of the LAN ports on the Barricade to an Ethernet hub or switch and then connect your PC or other netwo
64. ei Wireless Mode Bandwidth DICH OFF v CUPS CVA ner ON v CANCEL HELP SAVE SETTINGS Parameter Description Wireless Channel Extension Channel SSID Wireless Mode The radio channel used by the wireless router and its clients to communicate with each other This channel must be the same on the Barricade and all of its wireless clients The Barricade will automatically assign itself a radio channel or you may select one manually Setting the Bandwith Mode as 20 40MHz allows you to use this extension channel as the secondary channel for doubling the bandwith of your wireless network Service Set ID The SSID must be the same on the Barricade and all of its wireless clients Default SMC This device supports 11n 11g and 11b wireless networks Make your selection depending on the type of wireless network that you have SMC recommend using Mixed 802 11n 802 11g and 802 11b to provide compatibility with 11n 11g and 11b wireless clients WIRELESS Parameter Description Bandwidth Broadcast SSID Protected Mode 802 11e WMM QoS 20MHz Sets the operation bandwidth as 20 MHz 20 40MHz Allows automatic detection of the operation bandwidth between 20 MHz and 40 MHz Choosing the bandwidth mode as 20 40MHz allows you to use the extension channel Enable or disable the broadcasting of the SSID Disabling SSID broadcast will provide inc
65. either a full URL address or just a keyword This feature can be used to protect children from accessing violent or pornographic web sites SMC SETUP WIZARD SYSTEM English P Home URL Blocking Disallowed Web Sites and Keywords ERN You can block access to certain Web sites from a particular PC by entering either a full WIRELESS URL address or just a keyword of the Web site MAT To specify the particular PC go back to the Access Control page and check the box _ ROUTING for Http with URL Blocking in the Normal Filtering Table FIREWALL Access Control MAC Filter URL Blocking Schedule Rule URL Keyword Intrusion Detection DMZ UPnP DDNS TOOLS STATUS You can define up to 30 sites here 4 53 CONFIGURING THE BARRICADE Schedule Rule You may filter Internet access for local clients based on rules Each access control rule may be activated at a scheduled time Define the schedule on the Schedule Rule screen and apply the rule on the Access Control screen SMC SETUP WIZARD SYSTEM WAN This page defines schedule rule names and activates the schedule for use in the Access Control page Schedule Rule LAN WIRELESS Schedule Rule Table up to 10 rules NAT ROUTING E eegen No Valid Schedule Rule 1 FIREWALL Add Schedule Rule Access Control h MAC Filter U
66. er 5 5 or above Using the web management interface you can configure the Barricade and view statistics to monitor network activity To access the Barricade s management interface enter the IP address of the Barricade in your web browser http 192 168 2 1 Enter the default password smcadmin and click LOGIN Notes 1 Passwords can contain from 3 12 alphanumeric characters and are case sensitive 2 You might click the language selection at the top right corner of the screen for your regional location before accessing the management interface Address http J 192 168 2 1 login stm y amp PASSWORD eeeeeesce 4 1 CONFIGURING THE BARRICADE Navigating the Web Browser Interface The Barricade s management interface consists of a Setup Wizard and an Advanced Settings section Setup Wizard Use the Setup Wizard for quick and easy configuration of your Internet connection and basic LAN settings Advanced Settings Advanced Settings supports more advanced functions like NAT system maintenance firewall and UPnP SMC SETUP WIZARD SYSTEM WAN You can use the Status screen to see the connection status for the router s WAN LAN interfaces firmware and hardware version numbers any illegal attempts to access your LAN network as well as information on all DHCP client PCs currently connected to your Status WIRELESS network MAT Current Time 09 12 2007 11 20 43 am ROUTING FIREWALL INTERNET GATEW
67. er beschreven In Belgie is outdoor gebruik enkel toegestaan gebruik makend van de 2 46 2 4835 GHz band Kanaal13 French Conditions requises pour des installations int rieures ou ext rieures licences requises et canaux autoris s dans certains pays comme d crits ci dessous En Belgique l installation ext rieure est seulement autoris e sur la bande 2 46 2 4835 GHz Canal 13 En France l installation ext rieure est seulement autoris e sur la bande 2 4 2 454 GHz Canal 1 7 DGT Statement of Taiwan EE ER EI AN EE IA SRM IAEA FR AF gt E EE ESA mi AON ROPER ZEEE EH HERA gt MELEE gt MUERA A ETB A gt dB REVELE RUPEES REM LS gt PERS FRA ERED EERE ZB gt xiii COMPLIANCES Safety Compliance Underwriters Laboratories Compliance Statement Important Before making connections make sure you have the correct cord set Check it read the label on the cable against the following Operating Voltage Cord Set Specifications 120 Volts UL Listed CSA Certified Cord Set Minimum 18 AWG Type SVT or SJT three conductor cord Maximum length of 15 feet Parallel blade grounding type attachment plug rated 15 A 125 V 240 Vo
68. ernatively you can use the Restore to Factory Configuration Tools WIRELESS Defaults tool to force the router to perform a power reset and restore the original factory settings NAT ROUTING FIREWALL Backup Router Configuration UPnP o Restore from saved Configuration file DONS backup cfg DOUE Restore router to Factory Defaults Configuration Tools Next gt gt Firmware Upgrade Reset STATUS e Backup Router Configuration this allows you to save the Barricade s configuration to a file Restore from saved Configuration file this function is used to restore the previously saved backup configuration file Restore router to Factory Defaults this resets the Barricade back to the original default settings 4 64 TOOLS Firmware Upgrade Use this screen to update the firmware or user interface to the latest versions 1 Download the upgrade file from the SMC web site first and save it to your hard drive 2 Then click Browse to look for the downloaded file Click SAVE SETTINGS Check the Status screen Information section to confirm that the upgrade process was successful SMC SETUP WIZARD SYSTEM Firmware Upgrade This tool allows you to upgrade the router firmware using a file provided by us You can download the latest firmware from LAN WIRELESS It is recommended that when performing a firmware upgarde the computer upgrading Ta the router is connected
69. for outdoor use Ce produit est un appareil radio LAN transceiver de 2 4 GHz destin aux PME et a l utilisation domestique dans tous les pays certifi s conformes aux conditions de EU et de l EFTA En accord avec l article 6 4 de la R amp TTE directive 1999 5 EC the membres de la EU et de l EFTA sont les suivants Autriche Belgique Danemark finalnde France Allemagne Italie Luxembourg Pays Bas Norv ge Espagne Suede Suisse Royaume Uni Portugal Gr ce Irelande Icelande Des conditions sont appliqu es certains pays pour l utilisation en ext rieur tels que des licences sp c fiques et des canaux d op ration Veuillez contacter votre autorit locale ou SMC Networks pour plus de d tails quant aux restrictions actuelles concernant l utilisation en ext rieur Dutch Spanish German Czech COMPLIANCES Dit toestel is een 2 4 Ghz draadloze Lan transceiver bestemd voor gebruik binnen huis en kantoor in alle geinformeerde lidstaten van de EC en de EFTA In overeenstemming met artikel 6 4 van de R amp T TE Directive 1999 5 EC zijn de volgende EC EFTA lidstaten verwittigd Belgi Denemarken Duitsland Finland Frankrijk Griekenland lerland IJsland Itali Luxemburg Nederland Noorwegen Oostenrijk Portugal Spanje Verenigd Koninkrijk Zweden Zwitserland Benodigdheden voor gebruik buiten zoals gebruiksvergunningen en toegelaten werkkanalen zijn van toepassing in sommige landen Gelieve uw lokale instan
70. from same host Half open fragmentation detect sensitive time 40000 3 STATUS period 110000 msec Flooding cracker block time 300 sec HELP II SAVE SETTINGS j CANCEL Ri Stateful Packet Inspection This is called a stateful packet inspection because it examines the contents of the packet to determine the state of the communications i e it ensures that the stated destination computer has previously requested the current communication This is a way of ensuring that all communications are initiated by the recipient computer and are taking place only with 4 57 CONFIGURING THE BARRICADE 4 58 sources that are known and trusted from previous interactions In addition to being more rigorous in their inspection of packets stateful inspection firewalls also close off ports until connection to the specific port is requested When particular types of traffic are checked only the particular type of traffic initiated from the internal LAN will be allowed For example if the user only checks FTP Service in the Stateful Packet Inspection section all incoming traffic will be blocked except for FTP connections initiated from the local LAN Stateful Packet Inspection allows you to select different application types that are using dynamic port numbers If you wish to use the Stateful Packet Inspection SPI to block packets click on the Yes radio button in the Enable SPI and Anti DoS firewall protection fie
71. i Protected Setup d PIN PBC Manual NAT ROUTING FIREWALL UPnP DDNS TOOLS STATUS Cas 1 Power on your client device supporting WPS PIN code method 2 Start WPS PIN process on client device For instructions on how to do this refer to the user manual of the client device 3 Enter the PIN code of client device Note The PIN code is generally printed on the bottom of the unit or displayed in the configuration utility 4 Click the Start PIN button on the screen 4 37 CONFIGURING THE BARRICADE Push Button Configuration PBC Method To achieve successful WPS connection you can use one of the following ways 1 push and hold the WPS button on your Barricade or 2 click the Start PBC button on this screen SMC SETUP WIZARD SYSTEM WAN TAN Push and hold the WPS button on your router for 4 seconds or click Start PBC button Now push or click WPS button on the client device you are connecting Note This must be done WIRELESS within 2 minutes of pressing the WPS button Channel and SSID Access Control Stan PBC ls Security WEP WPA 802 1X WiFi Protected Setup PIN d PBC Manual NAT ROUTING FIREWALL UPnP DDNS TOOLS STATUS Push Button Configuration PBC Method 1 Power on your network devices such as an access point and client network devices 2 Press the WPS button for 4 seconds or click the Start PBC button on the screen 3 Press the WPS button or click the PBC button on
72. ion IPSec can suppott large encryption networks such as the Internet by using digital certificates for device authentication CHAPTER 2 INSTALLATION Before installing the Barricade verify that you have all the items listed under Package Contents If any of the items are missing or damaged contact your local distributor Also be sure that you have all the necessary cabling before installing the Barricade After installing the Barricade refer to Configuring the Barricade on page 4 1 Package Contents After unpacking the Barricade check the contents of the box to be sure you have received the following components Barricade N Draft 11n Wireless 4 port Broadband Router SMCWBR14S N2 Power adapter One CAT 5 Ethernet cable RJ 45 One documentation CD e Quick Install Guide Warranty Information Card Immediately inform your dealer in the event of any incorrect missing ot damaged parts If possible please retain the carton and original packing materials in case there is a need to return the product 2 1 INSTALLATION System Requirements You must meet the following minimum requirements Broadband Cable xDSL Internet service and Modem with Ethernet connection e 2 4GHz 802 11n draft wireless adapter or 2 4GHz 802 11b g wireless adapter installed on each PC Alternatively an Ethernet adapter can be used Anup to date web browser Internet Explorer 5 5 or above Netscape 4 7 or a
73. is device may not cause harmful interference and 2 this device must accept any interference received including interference that may cause undesired operation FCC Caution Any changes or modifications not expressly approved by the party responsible for compliance could void the user s authority to operate this equipment IMPORTANT NOTE FCC Radiation Exposure Statement This equipment complies with FCC radiation exposure limits set forth for an uncontrolled environment This equipment should be installed and operated with minimum distance 20 cm between the radiator amp your body This transmitter must not be co located or operating in conjunction with any other antenna or transmitter For product available in the USA market only channel 1 11 can be operated Selection of other channels is not possible COMPLIANCES EC Declaration of Conformity C O SMC contact for these products in Europe is SMC Networks Europe Edificio Conata II Calle Fructuos Gelabert 6 8 20 4a 08970 Sant Joan Despi Barcelona Spain Marking by the above symbol indicates compliance with the Essential Requirements of the R amp TTE Directive of the European Union 1999 5 EC This equipment meets the following conformance standards EN 300 328 EN 301 489 EN 60950 1 iv COMPLIANCES Council recommendation 1999 519 EC of 12 July 1999 limitations of exposure of the general public to electromagnetic fields 0 Hz to 300 GHz Czech Spole
74. k currently linked to the router AREA 09 12 2007 DHCP ip 192 168 2 100 mac 00 0E 9B 6E UPnP 09 12 2007 DHCP ip 192 168 2 101 mac 00 04 E2 0D BONS 09 12 2007 DHCP ip 192 168 2 102 mac 00 1C DF 07 09 12 2007 DHCP 09 12 2007 DHCP 09 12 2007 DHCP 09 12 2007 DHCP 09 12 2007 DHCP 09 12 2007 DHCP 09 12 2007 DHCP Ri 4 67 CONFIGURING THE BARRICADE 4 68 The following items are included on the Status screen Parameter Description INTERNET Displays WAN connection type and status Renew Cli GATEWAY Disp ck on this button to establish a connection to the WAN ays system IP settings as well as DHCP Server and Firewall status INFORMATION Disp ays the number of attached clients the firmware versions the physical MAC address for each media interface and for the ADSL Router as well as the hardware version and serial number Security Log Displays attempts to access your network Save Click on this button to save the security log file Clear Click on this button to delete the access log Refresh Click on this button to refresh the screen DHCP Client Log Displays information on DHCP clients on your network FINDING THE MAC ADDRESS OF A NETWORK CARD Finding the MAC address of a Network Card WINDOWS NT4 2000 XP Click Start Programs Command Prompt Type ipconfig all and press ENTER The MAC address is listed as the Physical Address MACINTOSH Click System Prefere
75. ld and then check the inspection type that you need such as Packet Fragmentation TCP Connection UDP Session FTP Service H 323 Service or TFTP Service When hackers attempt to enter your network we can alert you by e mail Enter your email address Specify your SMTP and POP3 servers user name and password Connection Policy FIREWALL Enter the appropriate values for TCP UDP sessions as described in the following table Parameter Defaults Description Fragmentation 10 sec Configures the number of seconds that a packet half open wait state structure remains active When the timeout value expires the router drops the unassembled packet freeing that structure for use by another packet TCP SYN wait 30 sec Defines how long the software will wait for a TCP session to synchronize before dropping the session TCP FIN wait 5 sec Specifies how long a TCP session will be maintained after the firewall detects a FIN packet TCP connection 3600 The length of time for which a TCP session will idle timeout seconds e managed if there is no activity 1 hour UDP session idle 30 sec The length of time for which a UDP session will timeout H 323 datachannel 180 sec idle timeout be managed if there is no activity The length of time for which an H 323 session will be managed if there is no activity 4 59 CONFIGURING THE BARRICADE e DoS Criteria and Port Scan Criteria Set up DoS and port scan criteria i
76. lick the Stop A in About Internet Explorer button Click Explorer Preferences License Agreement In the Internet Explorer Preferences window SE z Hide Explorer 36H under Netwotk select Proxies Hide Others 8H All Quit Explorer Q Uncheck all check boxes and click OK 36 Internet Explorer Preferences If you are accessing the Internet from a private network you can set gateways to allow Internet access Contact your network manager for more information Note These settings are shared with other applications through Intemet Config Use Proxy Servers Web Proxy Settings Use Web Proxy for all Bypass Web Proxy for FTP Security Security Zones Ratings Advanced y Forms AutoFill Forms AutoComplete AutoFill Profile y Receiving Files Secure Proxy Settings LR EMEN E Mal Proxy Settings Q File Helpers Cookies _ Gopher Proxy Settings Y Network Protocol Helpers List the sites you want to connect to directly bypassing the proxies set above Put a space or comma between each site Q Proxies Site Passwords y E mail General 3 17 CONFIGURING YOUR MACINTOSH COMPUTER 3 18 CHAPTER 4 CONFIGURING THE BARRICADE After you have configured TCP IP on a client computer use a web browser to configure the Barricade The Barricade can be configured by any Java supported browser such as Internet Explor
77. locking Schedule Rule Intrusion Detection m Samire O tcp upp Port Range Lt Ip Lin TOOLS J E KR STATUS E eh Zeg Scheduling Rule Always Blocking d SAVE SETTINGS CANCEL I 4 51 CONFIGURING THE BARRICADE MAC Filter 4 52 The MAC Filter allows you to define what client PC s can access the Internet When enabled only the MAC addresses defined in the MAC Filtering table will have access to the Internet All other client devices will be denied access You can enter up to 32 MAC addresses in this table SMC SETUP WIZARD SYSTEM WAN This section helps provides MAC Filter configuration When enabled only MAC addresses configured will have access to your network All other client devices will get LAN denied access This security feature can support up to 32 devices and applies to WIRELESS clients NAT ROUTING MAC Address O Enable Disable FIREWALL Access Control VW MAC Filter URL Blocking Schedule Rule MAC Filtering Table MAC Filtering Table up to 32 computers Intrusion Detection DMZ UPnP DDNS TOOLS STATUS 1 MAC Address Control select enable or disable 2 MAC Filtering Table enter the MAC address in the space provided FIREWALL URL Blocking The Barricade allows the user to block access to web sites by entering
78. lts Europe only Cord Set with HO5VV F cord having three conductors with minimum diameter of 0 75 mm2 IEC 320 receptacle Male plug rated 10 A 250 V The unit automatically matches the connected input voltage Therefore no additional adjustments are necessary when connecting it to any input voltage within the range marked on the power adapter Information for Power Source N86 This unit is to be used with a class 2 or level 3 external power adapter approved suitable for use in North American equipment installation having an output voltage rating of 12 V DC and output current rating of 1 0 A or equivalent xiv COMPLIANCES XV Wichtige Sicherheitshinweise Germany 1 Pr E 10 11 12 13 14 15 Bitte lesen Sie diese Hinweise sorgf ltig durch Heben Sie diese Anleitung f r den sp teren Gebrauch auf Vor jedem Reinigen ist das Ger t vom Stromnetz zu trennen Verwenden Sie keine Fl s sigoder Aerosolreiniger Am besten eignet sich ein angefeuchtetes Tuch zur Reinigung Die Netzanschlu Bsteckdose soll nahe dem Ger t angebracht und leicht zug nglich sein Das Ger t ist vor Feuchtigkeit zu sch tzen Bei der Aufstellung des Ger tes ist auf sicheren Stand zu achten Ein Kippen oder Fallen k nnte Besch digungen hervorrufen Die Bel ftungs ffnungen dienen der Luftzirkulation die das Ger t vor berhitzung sch tzt Sorgen Sie daf r da diese ffnungen nicht abgedeckt
79. ly affect system performance so we advise enabling the prevention features to protect your network 4 60 DMZ FIREWALL If you have a client PC that cannot run an Internet application properly from behind the firewall you can open the client up to unrestricted two way Internet access Enter the IP address of a DMZ Demilitarized Zone host on this screen Adding a client to the DMZ may expose your local network to a variety of security risks so only use this option as a last resort SMC SETUP WIZARD SYSTEM LAN WIRELESS NAT ROUTING FIREWALL Access Control MAC Filter URL Blocking Schedule Rule Intrusion Detection DMZ UPnP DDNS TOOLS STATUS DMZ Demilitarised Zone If you have a local client PC that cannot run an Internet application properly from behind the NAT firewall then you can open the client up to unrestricted two way Internet access by defining a Virtual DMZ Host Enable DMZ O Enable O Disable Multiple PCs can be exposed to the Internet for two way communications e g Internet gaming video conferencing or VPN connections To use the DMZ you must set a static IP address for that PC 0 0 0 0 192 168 2 0 192 168 2 0 192 168 2 0 192 168 2 0 5 0 0 0 aae 192 168 2 192 168 2 192 168 2 192 168 2 dadadada ejerereyrerere Slfelfelfel fe felfe
80. me is normally optional but may be required by some service providers Enter a Maximum Idle Time in minutes to define a maximum period of time for which the Intemet connection is maintained during inactivity If the connection is inactive for longer than the Maximum Idle Time then it will be dropped You can enable the Auto reconnect option to automatically re establish the connection as soon as you attempt to access the Internet again If your Internet Service Provider requires the use of PPPoE enter the information below Use PPPoE Authentication User Name Password Please retype your password Senice Name MTU 1454 Maximum Idle Time 5 Tira a 7 Auto reconnect Click NEXT to proceed or BACK to change your settings Note Clicking NEXT will not automatically connect the Barricade to the Internet The Barricade will only connect when you explicitly request it to for example by launching your web browser SETUP WIZARD PPTP Point to Point Tunneling Protocol The Barricade supports PPTP connection The PPTP connection delivers user level authentication VPN virtual private network for secure network path Enter the user account ID and password required by your ISP in the appropriate fields If your ISP has provided you with a Host Name enter it in the Host Name field otherwise leave it blank If your ISP uses DHCP service enable the Get IP by DHCP Then enter the Service IP Address provided by your ISP
81. mputer Q Windows Movie Maker g e Connect To Tour Windows XP Ea Printers and Faxes Files and Settings Transfer Wizard 9 Help and Support e Snaglt 5 0 m ES Search I Run All Programs gt OR Network Tasks EI Create a new connection Q Set up a home or small office network Te General Support Connection Status Connected Duration 00 47 38 Speed 11 0 Mbps TCP IP CONFIGURATION 3 10 5 Double click Internet Protocol TCP IP 6 If Obtain an IP address automatically and Obtain DNS server address automatically are already selected your computer is already configured for DHCP If not select these options now and click OK EIS 4 Local Area Connection 3 Properties General Advanced Connect using E9 SMC EZ Card 10 100 SMC1255FTX ST 2 This connection uses the following items e JE QoS Packet Scheduler A i AEGIS Protocol IEEE 802 14 v2 3 1 9 r2 Internet Protocol TCP IP Internet Protocol TCP IP Properties Y Pik General Altemate Configuration You can get IP settings assigned automatically if your network supports this capability Otherwise you need to ask your network administrator for the appropriate IP settings Obtain an IP address automatically O Use the following IP address Obtain DNS server address automatically Use the foll
82. n address mappings SMC SETUP WIZARD SYSTEM WAN NAT Mapping Table displays the current NAPT address mappings LAN WIRELESS NAT Address Mapping HELP Virtual Server NAT Mapping Table Special Application NAT Mapping Table ROUTING FIREWALL UPnP DDNS TOOLS STATUS NAT Mapping Table displays the current NAPT address mappings The NAT address mappings are listed 20 lines per page click the control buttons to move forwards and backwards As the NAT mapping is dynamic a Refresh button is provided to refresh the NAT Mapping Table with the mots updated values The content of the NAT Mapping Table is described as follows Protocol protocol of the flow Local IP local LAN host s IP address for the flow Local Port local LAN host s port number for the flow Pseudo IP translated IP address for the flow Pseudo Port translated port number for the flow Peer IP remote WAN host s IP address for the flow Peer Port remote WAN host s port number for the flow ROUTING Routing These screens define routing related parameters including static routes and RIP Routing Information Protocol parameters Static Route SMC SETUP WIZARD SYSTEM WAN n E id Subnet Mas Gateway Configure onfigure LAN WIRELESS NAT ROUTING HELP __ SAVE SETTINGS CANCEL gt Static Route RIP Routing Table FIREWALL UPnP Static Route Parameter DDNS TOOLS
83. n the spaces provided as shown below Parameter Defaults Description Total incomplete TCP UDP sessions HIGH Total incomplete TCP UDP sessions LOW Incomplete TCP UDP sessions per min HIGH Incomplete TCP UDP sessions per min LOW Maximumincomplete TCP UDP sessions number from same host Incomplete TCP UDP sessions detect sensitive time period Maximum half open fragmentation packet number from same host Half open fragmentation detect sensitive time period Flooding cracker block time 300 sessions 250 sessions 250 sessions 200 sessions 10 300 msec 30 10000 msec 300 second Defines the rate of new unestablished sessions that will cause the software to szart deleting half open sessions Defines the rate of new unestablished sessions that will cause the software to stop deleting half open sessions Maximum number of allowed incomplete TCP UDP sessions per minute Minimum number of allowed incomplete TCP UDP sessions per minute Maximum number of incomplete TCP UDP sessions ftom the same host Length of time before an incomplete TCP UDP session is detected as incomplete Maximum number of half open fragmentation packets from the same host Length of time before a half open fragmentation session is detected as half open Length of time from detecting a flood attack to blocking the attack Note The firewall does not significant
84. n you enable this option you will need to configure two different time servers use the options below to set the primary and secondary NTP servers in your area Primary Server 132 163 4 102 North America Secondary Server 132 163 4 102 North America a For accurate timing of log entries and system events you need to set the time zone Select your time zone from the drop down list If daylight savings is used in your area check the box to enable the function and select the start end dates If you want to automatically synchronize the Barricade with a public time server check the box to Enable Automatic Time Server Maintenance Select the desired servers from the drop down menu Click SAVE SETTINGS SYSTEM Password Settings Use this screen to change the password for accessing the management interface SMC SETUP WIZARD Password Settings SYSTEM Time Zone Set a password to restrict management access to the router b Password Settings ETE Current Password Idle Time Out 10 win Idle Time 0 NO Time Out WAN gege New Password LAN WIRELESS Re Enter Password for Verification Re Enter Passy NAT ROUTING FIREWALL UPnP HELP SAVE SETTINGS CANCEL DDNS TOOLS STATUS Passwords can contain from 3 12 alphanumeric characters and are case sensitive Note If you lost the password or you cannot gain access to the user interface press the blue reset button on the
85. nces Network The MAC address is listed as the Ethernet Address on the TCP IP tab LINUX Run the command sbin ifconfig The MAC address is the value after the word HWaddr 4 69 CONFIGURING THE BARRICADE 4 70 APPENDIX A TROUBLESHOOTING This section describes common problems you may encounter and possible solutions to them The Barricade can be easily monitored through panel indicators to identify problems Troubleshooting Chart Symptom LED Indicators Action Power LED is off Check connections between the Barricade the external power supply and the wall outlet If the power indicator does not turn on when the power cord is plugged in you may have a problem with the power outlet power cord or external power supply However if the unit powers off after running for a while check for loose power connections power losses or surges at the power outlet If you still cannot isolate the problem then the external power supply may be defective In this case contact Technical Support for assistance A 1 TROUBLESHOOTING A 2 Troubleshooting Chart Symptom Action LED Indicators LAN LED is Off Verify that the Barricade and attached device are powered on Be sure the cable is plugged into both the Barricade and the corresponding device Verify that the proper cable type is used and that its length does not exceed the specified limits Be sure th
86. of no TOOLS activity STATUS Click here to enter your DNS Settings Click SAVE SETTINGS to proceed or Clear to change your settings WAN SETTINGS L2TP Enter the L2TP Account ID and Password assigned by your ISP in the appropriate fields If your ISP uses DHCP service enable the Get IP by DHCP Then enter the L2TP Server Address provided by your ISP Click on the Disconnect after x minutes of no activity and then enter the idle time for the Internet connection This is the period of time for which the connection to the Internet is maintained during inactivity If your ISP charges you by the minute you should change the idle time out to one minute Most ISPs provide a DNS server for speed and convenience Since your Service Provider may connect to the Internet with dynamic IP settings it is likely that the DNS server IP s are also provided dynamically Clicking on the Click here to enter your DNS Settings for DNS configuration See DNS on page 4 22 SMC SETUP WIZARD SYSTEM L2TP WAN Some ISP s require the use of L2TP to establish connections to their networks If the installation instructions that accompany your modem ask you to set up a dialup connection using a L2TP VPN tunnel then select this option Note that once the Router is Dynamic IP Address installed you will not need to use the dialup VPN on your PC any more PPPoE ppm Lamm Use L2TP Authentication Static IP Address L2TP Account Clone
87. opriate fields If your ISP uses DHCP service enable the Get IP by DHCP Then enter the Service IP Address provided by your ISP Click on the Disconnect after x minutes of no activity and then enter the idle time for the Internet connection This is the period of time for which the connection to the Internet is maintained during inactivity If your ISP charges you by the minute you should change the idle time out to one minute Most ISPs provide a DNS server for speed and convenience Since your Service Provider may connect to the Internet with dynamic IP settings it is likely that the DNS server IP s are also provided dynamically Clicking on the Click here to enter your DNS Settings for DNS configuration See DNS on page 4 22 SMC SETUP WIZARD SYSTEM PPTP WAN Point to Point Tunneling Protocol A version of PPP Point to Point Protocol that has the ability to encapsulate packets of data formatted for one network protocol in packets used by another protocol This tunneling technique allows TCP IP data to be Dynamic IP Address transmitted over a non TCP IP network PPTP can be used to join different physical networks using the Internet as an SST intermediary gt PPTP L2TP Use PPTP Authentication Static IP Address Clone MAC Address PPTP Account pis PPTP Password LAN Gees Retype Password NAT Host Name ROUTING Get IP By DHCP a FIREWALL ge Service IP Address 0 lo lo 10 DDNS O Disconnect fer minutes
88. orking standard utilizes advanced MIMO multiple in multiple out technology to deliver incredible speed and range With wireless speeds up to 300Mbps five times faster than 802 11g the SMCWBR14S N2 provides sufficient bandwidth to stream HD video listen to digital music play online games transfer large files make VoIP calls and surf the Internet simultaneously 1 1 FEATURES AND BENEFITS Features and Benefits 1 2 TEEE802 11n draft v2 0 compliant Wireless speeds up to 300 Mbps Increased speed and coverage up to 15 times the speed of IEEE 802 11g Fully backwards compatible with 802 11b g wireless networks Allows you to stream HD video listen to digital music play online games transfer large files make VoIP calls and surf the Internet simultaneously Wi Fi Multimedia WMM for wireless quality of service Local network connection via a 10 100 Mbps Ethernet port DHCP for dynamic IP configuration and DNS for domain name mapping Firewall with Stateful Packet Inspection client privileges intrusion detection and NAT NAT also enables multi user Internet access via a single user account and virtual server functionality providing protected access to Internet services such as web FTP email and Telnet VPN transparent pass through IPSec ESP Tunnel mode L2TP PPTP User definable application sensing tunnel supports applications requiring multiple connections Easy setup through a web browser on any operating
89. ossible to learn the authentication key by watching RIP packets Password Authentication key 4 47 CONFIGURING THE BARRICADE 4 48 Routing Table SMC SETUP WIZARD SYSTEM Routing Table WAN List Routing Table LAN EEE Subnet Mask gt c 192 168 2 0 255 255 255 0 directly LAN NAT C 127 0 0 1 255 255 255 255 directly Loopback ae ROUTING Flags C directly connected S static R RIP I ICMP Redirect Static Route RIP HELP Routing Table FIREWALL UPnP DDNS TOOLS STATUS Parameter Description Flags Indicates the route status C Direct connection on the same subnet S Static route R RIP Routing Information Protocol assigned route I ICMP Internet Control Message Protocol Redirect route Network Address Destination IP address Netmask The subnetwork associated with the destination This is a template that identifies the address bits in the destination address used for routing to specific subnets Each bit that corresponds to a 1 is part of the subnet mask number each bit that corresponds to 0 is part of the host number Gateway The IP address of the router at the next hop to which frames are forwarded Interface The local interface through which the next hop of this route is reached Metric When a router receives a routing update that contains a new or changed destination network entry the router adds 1 to the metric value indicated in the update and enters
90. owing DNS server addresses 9 7 Cenes CONFIGURING THE CLIENT PC Obtain IP Settings From Your Barricade Now that you have configured your computer to connect to your Barricade it needs to obtain new network settings By releasing old DHCP IP settings and renewing them with settings from your Barricade you can verify that you have configured your computer correctly 1 2 On the Windows desktop click Start Programs Accessories Command Prompt e Accessibility D w Windows Catalog A Windows Update 4 MSN Explorer e Windows Media Play D Windows Movie Make eo Tour Windo Files and Settings Tr SPS Wizard e Snaglt 5 0 All Programs P Ei Communications E Entertainment DH ICH System Tools D A Address Book e Games Stret Ex D m Startup D 8 Internet Explorer ei MSN Explorer Q Outlook Express Calculator Command Prompt 2 Notepad Y Paint Program Compatibility Wizard Y Synchronize Tour Windows XP p Remote Assistance e Windows Media Player Ki Windows Messenger 3 Windows Explorer QB Windows Movie Maker A WordPad In the Command Prompt window type ipconfig release and press the Enter key Command Prompt BS Windows IP Configuration Ethernet adapter Local Area Connection Connection ific DNS Suffix 3 11 TCP IP CONFIGURATION 3 Type ipconfig renew and press the Enter key Verify
91. r dl s LAN mottagare f r inomhusbruk i hem och p kontor i alla underr ttade EG och EFTA medlemsstater Enligt artikel 6 4 i R amp TTE direktivet 1999 5 EG r f ljande EG EFTA stater underr ttade sterrike Belgien Danmark Finland Frankrike Tyskland Italien Luxemburg Nederl nderna Norge Spanien Sverige Schweiz Storbritannien Portugal Grekland Irland och Island I vissa l nder tillkommer krav f r utomhusbruk t ex licenskrav och till tna anv ndarkanaler Kontakta lokala tillsynsmyndigheter eller SMC Networks f r information om aktuella best mmelser f r utomhusbruk bessi b na ur er 2 4 GHz pr laust LAN sendivi taeki til notkunar innanh ss a heimili og skrifstofu llum tilkynntum a ildarr kjum EB og EFTA samr mi vi grein 6 4 R amp TTE tilskipuninni 1999 5 EB hefur eftirfarandi a ildarr kjum EB EFTA veri tilkynnt ar um Austurr ki Belg a Danm rk Finnland Frakkland skaland tal a L xemborg Holland Noregur Sp nn Sv j Sviss Bretland Port gal Grikkland rland sland Kr fur fyrir notkun utanh ss svo sem kr fur um leyfi og heimila ar r sir eiga vi sumum l ndum Hafi samband vi regluger aryfirv ld hverjum sta e a SMC Networks til a f uppl singar um gildandi takmarkanir notkun utanh ss Denne enheten er en tr dl s 2 4 GHz LAN mottaker som er beregnet for innend rs privat og kontorbruk i alle underrettede EF og EFTA medlem
92. reased security by hiding the SSID of your wireless network Enabling this function to ensure the best performance of your 11n throughput in case there is a lot of interference from the 11gand 11b devices in the wireless network Enable or disable the use of QoS The QoS Quality of Service function allows you to differentiate WMM Wi Fi Multimedia traffic and provide it with high priority forwarding service 4 27 CONFIGURING THE BARRICADE Access Control 4 28 Using the Access Control functionality you can restrict access based on MAC address Each PC has a unique identifier known as a Medium Access Control MAC address With MAC filtering enabled the computers whose MAC addtess you have listed in the filtering table will be able to connect or will be denied access to the Barricade SMC SETUP WIZARD A CORITOI SYSTEM ccess Control WAN For a more secure Wireless network you can specify that only certain Wireless PCs can connect to the Access LAN Point Up to 32 MAC addresses can be added to the MAC Filtering Table When enabled all registered MAC addresses are controlled by the Access Rule WIRELESS Channel and SSID Enable MAC Filtering OYes Ono Access Control CERTE Access Rule for registered MAC address allow O Deny MAC Filtering Table up to 32 stations 802 1X Wi Fi Protected Setup PIN PBC Manual NAT ROUTING FIREWALL UPnP DDNS TOOLS STATUS
93. resses and Web addresses If you type a Web address into your browser such as www smc com a DNS server will find that name in its index and find the matching IP address xxx xxx xxx xxx Most ISPs provide a DNS server for speed and convenience Since your Service Provider may connect to the Internet with dynamic IP settings it is likely that the DNS server IP s are also provided dynamically However if there is a DNS server that you would rather use you need to specify the IP address here Igel SAVESETTINGS __ CANCEL LAN SETTINGS LAN Settings You can enable DHCP to dynamically allocate IP addresses to your client PCs or configure filtering functions based on specific clients or protocols The Barricade must have an IP address for the local network SMC SETUP WIZARD SYSTEM LAN Settings WAN You can enable DHCP to dynamically allocate IP addresses to your client PCs or configure filtering functions P LAN based on specific clients or protocols The router must have an IP address for the local network WIRELESS NAT LAN IP ROUTING FIREWALL UPnP DDNS TOOLS STATUS fe foe amp 1 255 255 265 Lu OEnabled O Disabled A Forever Y IP Address Pool IS 168 2 oo 182 im 2 Lg iy smc HELP __SAvE SETTINGS _ J Cencel The LAN Settings parameters are listed below Parameter Description LAN IP IP Ad
94. rk equipment to the hub or switch When inserting an RJ 45 connector be sure the tab on the connector clicks into position to ensure that it is properly seated Notes 1 Use 100 ohm shielded or unshielded twisted pair cable with RJ 45 connectors for all Ethernet ports Use Category 3 4 or 5 for connections that operate at 10 Mbps and Category 5 for connections that operate at 100 Mbps 2 Make sure each twisted pair cable length does not exceed 100 meters 328 feet CONNECT THE SYSTEM Connect the Power Adapter Plug the power adapter into the power socket on the back panel of the Barricade and the other end into a power outlet Check the power indicator on the front panel is lit If the power indicator is not lit refer to Troubleshooting on page A 1 In case of a power input failure the Barricade will automatically restart and begin to operate once the input power is restored 2 7 INSTALLATION 2 8 CHAPTER 3 CONFIGURING THE CLIENT PC After completing hardware setup by connecting all your network devices you need to configure your computer to connect to the Barricade You can either configure your computer to automatically obtain IP settings DHCP or manually configure IP address settings Static IP Depending on your operating system see Windows 2000 on page 3 3 Windows XP on page 3 9 Of Configuring Your Macintosh Computer on page 3 15 3 1 TCP IP CONFIGURATION TCP IP
95. rs computer level authentication VPN virtual private network for secure network path Enter the user account ID and password required by your ISP in the appropriate fields If your ISP uses DHCP service enable the Get IP by DHCP Then enter the L2TP Server Address provided by your ISP Click on the Disconnect after x minutes of no activity and then enter the idle time for the Internet connection This is the period of time for which the connection to the Internet is maintained during inactivity If your ISP charges you by the minute you should change the idle time out to one minute Most ISPs provide a DNS server for speed and convenience Since your Service Provider may connect to the Internet with dynamic IP settings it is likely that the DNS server IP s are also provided dynamically Clicking on the Click here to enter your DNS Settings for DNS configuration See DNS on page 4 22 dX English Pr Home Logout L2TP Some ISP s require the use of L2TP to establish connections to their networks Ifthe installation instructions that accompany your modern ask you to set up a dialup connection using a L2TP VPN tunnel then select this option Note that once the Router is installed you will not need to use the dialup VPN on your PC any more Use L2TP Authentication L2TP Account L2TP Password Retype Password GetIP By DHCP 9 L2TP Server Address 0 nn l o El Disconne
96. rs illegal attempts to access your network as well as information on DHCP clients connected to your network The security log may be saved to a file by clicking Save and choosing a location English Home Status SYSTEM You can use the Status screen to see the connection status for the router s WAN LAN interfaces firmware and hardware version numbers any illegal attempts to access your LAN network as well as information on all DHCP client PCs currently connected to your WIRELESS network aall Current Time 09 12 2007 01 21 46 pm ROUTING FIREWALL INTERNET GATEWAY INFORMATION UPnP DONS ISCONNECTED IP Address 192 168 2 1 Numbers of DHCP Clients 3 TOOLS Subnet Mask Runtime Code Version 255 255 255 0 0 00 01 Sep 10 2007 12 46 46 MU DHCP Server Enabled Boot Code Version V0 12 u Firewall Enabled LAN MAC Address 00 17 3F C2 4E 13 UPnP Enabled Wireless MAC Address 00 17 3F C2 Wireless Enabled 4E 13 PPTP Client WAN MAC Address 00 17 3F C2 4E 14 Clone MAC PPTP Server Hardware Version 0B Linei Disconnected Serial Num 12732823302725 Line2 Disconnected Une Disconnected Security Log DHCP Client Log Scroll down to view more information on the Status screen SMC SETUP WIZARD Line2 Disconnected SYSTEM Line3 Disconnected LAN e z STEE Security Log DHCP Client Log NAT View any attempts that have been made to View information on LAN DHCP clients ROUTING gain access to your networ
97. se Settings if you need to configure a proxy server for a connection Local Area Network LAN settings LAN Settings do not apply to dial up connections Choose Settings above for dial up settings LAN Settings Local Area Network LAN Settings Automatic configuration Automatic configuration may override manual settings To ensure the use of manual settings disable automatic configuration C Automatically detect settings O Use automatic configuration script Proxy server nue a proxy server for your LAN These settings will not apply to dial up or VPN connections CONFIGURING THE CLIENT PC Configuring Your Macintosh Computer You may find that the instructions here do not exactly match your operating system This is because these steps and screen shots were created using Mac OS 10 2 Mac OS 7 x and above are similar but may not be identical to Mac OS 10 2 Follow these instructions 1 Pulldown the Apple Menu D Click System Preferences 2 Double click the Network icon in the Systems Preferences window Finder File About This Mac Get Mac OS X Software System Preferences Edit View Dock gt Location gt Recent Items gt Force Quit Sleep Restart Shut Down Log Out OQ eoc System Preferences e Personal GE 2 E Desktop Dock General International Login Items MyAccount Screen Effects Hardware Me e G amp x W 9 c o CDs amp DVDs ColorSyn
98. soft Windows 2008 Version 5 80 2195 lt C gt Copyright 1985 2808 Microsoft Corp C Documents and Settings Nlaurence gt IPCONFIG RELEASE Windows 2000 IP Configuration IP addre successfully released for adapter Local Area Connection 2 C Documents and SettingsNlaurence gt 3 5 TCP IP CONFIGURATION 3 6 Type ipconfig renew and press the Enter key Verify that your IP Addressisnow192 168 2 xxx yourSubnetMaskis255 255 255 0and your Default Gateway is 192 168 2 1 These values confirm that your Barricade is functioning correctly ion 5 00 2195 oft Corp C Documents and Settings laurence gt IPCONFIG RELEASE Windows 2888 IP Configuration IP addre successfully released for adapter Local Area Connection C Documents and Settings laurence gt IPCONFIG RENEW Windows 2888 IP Configuration Ethernet adapter Local Area Connection 2 Default Gateway C Documents and Settin Type exit and press the Enter key to close the Command Prompt window CONFIGURING THE CLIENT PC Manual IP Configuration 1 Follow steps 1 4 in DHCP IP Configuration on page 3 3 2 Select Use the te als followingIPaddr ess General Enter an IP address Pel ee based on the default the appropriate IP settings network 192 168 2 x C Obtain an IP address automatically r Use the following IP address where x 18 between 2 IP address 192 168 2 20 and 254 and use Subnet mask 255 255 255 0 255 2
99. sstater overensstemmelse med artikkel 6 4 i R amp TTE direktivet 1999 5 EF har f lgende EF EFTA medlemsstater blitt underrettet sterrike Belgia Danmark Finland Frankrike Tyskland Italia Luxembourg Nederland Norge Spania Sverige Sveits Storbritannia Portugal Hellas Irland og Island Krav for utend rsbruk som lisenskrav og tillatte brukskanaler gjelder i noen land Ta kontakt med din lokale regulerende myndighet eller SMC Networks for detaljert informasjon om gjeldende begrensninger for utend rs bruk COMPLIANCES Requirements for indoor vs outdoor operation license requirements and allowed channels of operation apply in some countries as described below In Italy the end user must apply for a license from the national spectrum authority to operate this device outdoors In Belgium outdoor operation is only permitted using the 2 46 2 4835 GHz band Channel 13 In France outdoor operation is only permitted using the 2 4 2 454 GHz band Channels 1 7 Italian In alcuni Paesi si applicano i requisiti per il funzionamento in interni esterni i requisiti di licenza e i canali consentiti come descritto si seguito In Italia l utente finale deve richiedere una licenza all Autorit competente nazionale per il funzionamento in esterni del device Dutch Vereisten voor werking indoor versus outdoor licentie vereisten en toegestane kanalen voor gebruik zijn van toepassing in bepaalde landen zoals hierond
100. t Technique sur www smc com DEUTSCH Technischer Support und weitere Information unter www smc com SPANISH En www smc com Ud podr encontrar la informaci n relativa a servicios de soporte t cnico DUTCH Technische ondersteuningsinformatie beschikbaar op www smc com PORTUGUES Informa es sobre Suporte T cnico em www smc com SWEDISH Information om Teknisk Support finns tillgangligt p www smc com INTERNET E mail address techsupport smc com Driver updates http www smc com index cfm action tech_support_drivers_downloads World Wide Web http www smc com SMCWBR14S N2 20 Mason Irvine CA 92618 Phn 949 679 8000 www smc com
101. t privileges hacker prevention and logging Stateful Packet Inspection Virtual Private Network PPTP L2TP IPSec pass through VPN pass through Internet Standards RFC 826 ARP RFC 791 IP RFC 792 ICMP RFC 768 UDP RFC 793 TCP RFC 783 TFTP RFC 1661 PPP RFC 1866 HTML RFC 2068 HTTP Radio Features Wireless RF module Frequency Band 802 11n Radio 2 4GHz 802 11g Radio 2 4GHz 802 11b Radio 2 4GHz USA FCC 2412 2462MHz Ch1 Ch11 Canada IC 2412 2462MHz Ch1 Ch11 Europe ETSI 2412 2472MHz Ch1 Ch13 Japan STD T66 STD 33 2412 2484MHz Ch1 Ch14 Modulation Type OFDM CCK Operating Channels IEEE 802 11n Compliant 11 channels US Canada Europe Japan Operating Channels IEEE 802 11g Compliant 11 channels US Canada 13 channels Europe Japan SPECIFICATIONS Operating Channels IEEE 802 11b Compliant 11 channels US Canada 13 channels Europe 14 channels Japan Standards Compliance Safety LVD Environmental CE Mark Temperature Operating 0 to 40 C 32 to 104 F Storage 40 to 70 C 40 to 158 F Humidity 5 to 95 non condensing Vibration IEC 68 2 36 IEC 68 2 6 Shock IEC 68 2 29 Drop TEC 68 2 32 C 3 Networks TECHNICAL SUPPORT From U S A and Canada 24 hours a day 7 days a week Phn 800 SMC 4 YOU 949 679 8000 Fax 949 679 1481 ENGLISH Technical Support information available at www smc com FRENCH Informations Suppor
102. t six seconds to restore the factory defaults A 3 TROUBLESHOOTING A 4 Troubleshooting Chart Symptom Action Wireless Problems A wireless PC cannot associate Make sure the wireless PC has the same SSID settings as the Barricade with the See Channel and SSID on page 4 26 Barricade You need to have the same security settings on the clients and the Barricade See Security on page 4 29 WEP encryption Ifyou are using WEP encryption on the SMC Barricade and not working Windows Zero Configuration WZC service to configure when using the wireless settings on your PC you may experience Windows Zero problems connecting to the SMC Barricade This is caused Configuration by a conflict with beacon packet element ID 221 used by the WZC service WPS protocol and Windows Zero Configuration WZC service There are four different ways you can easily solve this problem Take any one of the following actions 1 Update WZC Please visit Microsoft download center for upgrading the WZC Wireless LAN API KB918997 at http www mictosoft com downloads details aspx Fa milyID 52a43bab dce4e 413f ac71 158efd1lada50 amp DisplayLang en 2 Disable WPS Check Disabled and click Apply Changes on Wi Fi Protected Setup WPS screen See Wi Fi Protected Setup WPS on page 4 36 for details 3 Use WPA WPA2 PSK See WPA on page 4 31 WPA2 on page 4 32 for configuring WP
103. tage EET RE oud 4 66 Neu PE 4 67 Finding the MAC address of a Network Card 004 4 69 Windows NT4 2000 XP k ai e a A n 4 69 Macititos ee Ee e DES QE A 4 69 TANUK ii Rp eo haha e eique dee gebe 4 69 xviii T4BLE OF CONTENTS Troubleshooting e Se E oc nee ee Ne ease SN A 1 B TEE B 1 R 45 C ble 4n pactos aie aes UN eis a B 1 Specifications bp eu Se bee eh ee heed Pte had B 1 Witing Conventions E epe ek ae eee eee dis B 1 RJ 45 Port Connection oen osc in tk ate ete B 2 Pin Assignments Ae os yee ey A ye a B 3 C Specifications oooooooooooooo oo C 1 CHAPTER 1 INTRODUCTION Congratulations on your purchase of the Barricade N Draft 11n Wireless 4 port Broadband Router SMCWBR14S N2 We are proud to provide you with a powerful yet simple communication device for connecting your local area network LAN to the Internet For those who want to surf the Internet in the most secure way this router provides a convenient and powerful solution About the Barricade The Barricade provides Internet access to multiple users by sharing a single user account This new technology provides many secure and cost effective functions It is simple to configure and can be up and running in minutes The Barricade is compliant with the next generation IEEE 802 11n draft v2 0 specification while maintaining full backwards compatibility with the IEEE 802 11b g standards This next generation wireless netw
104. that your IP Addressisnow192 168 2 xxx yourSubnetMaskis255 255 255 0and your Default Gateway is 192 168 2 1 These values confirm that your Barricade is functioning correctly Command Prom BE c gt ipconfig release Windows IP Configuration Ethernet adapter Local Area Connection Connection specific DNS Suffix IP Addr Subnet Mask Default Gateway ic gt ipconfig renew Mindows IP Configuration Ethernet adapter Local Area Connection Connection specific DNS Suffix IP Addy ae Subnet kee Default Gateway 4 Type exit and press the Enter key to close the Command Prompt window Your computer is now configured to connect to the Barricade 3 12 CONFIGURING THE CLIENT PC Manual IP Configuration 1 Follow steps 1 5 in DHCP IP Configuration on page 3 9 2 SelectUse the followingIP A Address KEN You can get IP settings assigned automatically if your network supports this capability Otherwise you need to ask your network administrator for 3 Enter an IP address based on the appropriate IP settings the default network Obtain an IP address automatically Use the following IP address 192 168 2 x where x is IP address 192 168 2 22 between 2 and 254 and use Subnet mask 205 205 205 0 Default gateway 192 168 2 1 255 255 255 0 for the subnet mask Use Use the following DNS server addresses Preferred DNS server 192 168 2 1 192 168 2 1 for the Default din cu Pa
105. the network in the routing table FIREWALL Firewall The Barricade Router s firewall inspects packets at the application layer maintains TCP and UDP session information including time outs and the number of active sessions and provides the ability to detect and prevent certain types of network attacks Network attacks that deny access to a network device are called Denial of Service DoS attacks DoS attacks are aimed at devices and networks with a connection to the Internet Their goal is not to steal information but to disable a device or network so users no longer have access to network resources SMC SETUP WIZARD SYSTEM Security Settings Firewall WAN cX English MHome Logout The Device provides extensive firewall protection by restricting connection parameters LAN B to limit the risk of hacker attack and defending against a wide array of common WIRELESS attacks However for applications that require unrestricted access to the Internet WAT you can configure a specific client server as a demilitarized zone DMZ ROUTING Enable or disable Firewall features Enable ODisable FIREWALL Access Control Igel SAVE SETTINGS CANCEL MAC Filter URL Blocking Schedule Rule Intrusion Detection DMZ UPnP DDNS TOOLS STATUS The Barricade protects against the following DoS attacks IP Spoofing Land Attack Ping of Death IP with zero length Smurf Attack UDP port loopback Snork Att
106. tie of SMC Networks te contacteren voor details op huidige beperkingen voor gebruik in buitenlucht Este aparato es un transmisor inalambrico de 2 4 GHz previsto para el uso interior en domicilios y Pymes en todos los Estados de la CE y la EFTA notificados De acuerdo con el articulo 6 4 de la Directiva R amp TTE 1999 5 EC los siguientes estados de la CE y de la EFTA han sido notificados Austria B lgica Dinamarca Finlandia Francia Alemania Italia Luxemburgo Pa ses Bajos Noruega Espa a Suecia Suiza Reino Unido Portugal Grecia Irlanda Islandia Los requisitos para su uso exterior como requerimiento de licencia y canales de operaci n permitidos se aplican en algunos pa ses Por favor contacte la autoridad reguladora local o SMC Networks para m s detalles en relaci n con las restricciones actuales para uso exterior Dieses Wireless LAN Ger t arbeitet im 2 4 GHz Frequenzband und ist f r den Einsatz im Innenbereich in den benachrichtigten EC EFTA Mitgliedstaaten geeignet In bereinstimmung mit Artikel 6 4 der R amp TTE Direktive 1999 5 EC wurden folgende Mitgliedstaaten benachrichtigt sterreich Belgien D nemark Finland Frankreich Deutschland Italien Luxemburg Niederlande Norwegen Spanien Schweden Schweiz Gro britannien Portugal Griechenland Irland Island F r den Einsatz im Aussenbereich sind in einigen L ndern Lizenzen erforderlich oder die Anzahl der Kan le ist eingeschr nkt Bitte kontaktieren Si
107. to achieve by using an eight digit PIN number and the Push Button Control PBC SMC SETUP WIZARD SYSTEM Wi Fi Protected Setup WPS WAN Wi Fi Protected Setup is used to easily add devices ta a network using a PIN or LAN button press Devices must support Wi Fi Protected Setup in order to be WIRELESS configured by this method Channel and SSID Access Control Security me wen 802 1X Current PIN 35611653 gt wa Protected Setup Wi Fi Protected Setup WPS Obisabled Enabled Generate New PIN Restore Default PIN Manual NAT ROUTING FIREWALL UPnP DDNS TOOLS STATUS Check Enable and click Apply Changes Pressing Generate New PIN creates a new Current PIN number Pressing Restore Default PIN sets the PIN code to the factory default number Note If you are using WEP encryption on the SMC Barricade and Windows Zero Configuration WZC service to configure the wireless settings on your PC you may experience problems connecting to the SMC Barricade Refer to the Troubleshooting section for further details Take the following steps for easy network security settings WIRELESS PIN Code Setup SMC SETUP WIZARD STEM PIN Method WAN LAN Enter the PIN from the client device and click Start PIN Then start WPS on the client device from it s wireless utility or WPS application within 2 minutes WIRELESS Channel and SSID Access Control Security WEP WPA 802 1X Wi F
108. turned under warranty within 30 days of receipt of the product The standard limited warranty can be upgraded to a Limited Lifetime warranty by registering new products within 30 days of purchase from SMC or its Authorized Reseller Registration can be accomplished via the enclosed product registration card or online via the SMC web site Failure to register will not affect the standard limited warranty The Limited Lifetime warranty covers a product during the Life of that Product which is defined as the period of time during which the product is an Active SMC product A product is considered to be Active while it is listed on the current SMC price list As new technologies emerge older technologies become obsolete and SMC willl at its discretion replace an older product in its product line with one that incorporates these newer technologies At that point the obsolete product is discontinued and is no longer an Active SMC product A list of discontinued products with their respective dates of discontinuance can be found at http www smc com index cfm action customer_service_warranty All products that are replaced become the property of SMC Replacement products may be either new or reconditioned Any replaced or repaired product carries either a 30 day limited warranty or the remainder of the initial warranty whichever is longer SMC is not responsible for any custom software or firmware configuration information or memor
109. u to use the extension channel Enable or disable the broadcasting of the SSID Disabling SSID broadcast will provide increased security by hiding the SSID of your wireless network Protected Mode Enabling this function to ensure the best performance of your 11n throughput in case there is a lot of interference from the 11gand 11b devices in the wireless network 802 11e WMM Enable or disable the use of QoS The QoS Quality of Service QoS function allows you to differentiate WMM Wi Fi Multimedia traffic and provide it with high priority forwarding service Click NEXT to continue 4 5 CONFIGURING THE BARRICADE Connection Type Setting Specify the WAN connection type required by your Internet Service Provider Specify Dynamic IP Address PPPoE PPTP L2TP or Static IP Address 4 Connection Type Setting This page allows you to select a connection type to connect internet a Select required connection type For the correct settings contact your ISP O Dynamic IP A ins an IP address automatically from your service provider a common connection method used for xDSL PPP over Ethernet opean xDSL connections Your service provider provides a static IP address to access Internet services b Click Next to continue Select your connection type to proceed Click BACK to go back and change your settings SETUP WIZARD Dynamic IP Address If the ISP requires you to input a Host Name typ
110. using 3 SMC EZ Card 10 100 SMC1211TX Configure Components checked are used by this connection M B Client for Microsoft Networks MIE SMC EZStart Service E m File and Printer Sharing for Microsoft Networks 5 If Obtain an IP address aix automaticallyandObtain DNS server address Hie san EE the appropriate IP settings automatically are already E ca selected your computer is C Use the folowing IP address 3 IF address already configured for es Subnet mask DHCP If not select these e SS options now and click OK Obtain DNS server address automatically r C Use the following DNS server addresses Freferred DNS server Advanced CONFIGURING THE CLIENT PC Obtain IP Settings From Your Barricade Now that you have configured your computer to connect to your Barricade it needs to obtain new network settings By releasing old DHCP IP settings and renewing them with settings from your Barricade you can verify that you have configured your computer correctly 1 On the Windows desktop click Start Programs Accessories Commanc Prompt Windows Update 7 a Communications gt internet Explorer ommand Prompt w Outlook Express w Paint CY WordPad Y Documents Settings L Search Help Run Shut Down BN Start 2 In the Command Prompt window type ipconfig release and press the Enter key Micro
111. via a network cable and not via wireless connection ROUTING Enter the path and name or browse to the location of the upgrade file then click the FIREWALL SAVE SETTINGS button You will be prompted to confirm the upgrade to complete the process UPnP DDNS TOOLS Configuration Tools HELP SAVE SETTINGS j caNcEL gt Firmware Upgrade Reset STATUS 4 65 CONFIGURING THE BARRICADE Reset Click REBOOT ROUTER to reset the ADSL Router The reset will be complete when the power LED stops blinking SMC SETUP WIZARD SYSTEM Reset In the event that the system stops responding correctly or in some way staps functioning you can perform a reset Your settings will not be changed To perform the LAN reset click on the REBOOT ROUTER button below You will be asked to confirm your WIRELESS decision The reset will be complete when the power light stops blinking ROUTING E FIREWALL uPnP DDNS TOOLS Configuration Tools Firmware Upgrade NET STATUS If you perform a reset from this screen the configurations will not be changed back to the factory default settings Note If you use the Reset button on the back panel the Barricade performs a power reset If the button is pressed for over 10 seconds all the LEDs will illuminate and the factory default settings will be restored 4 66 TOOLS STATUS The Status screen displays WAN LAN connection status firmware and hardware version numbe
112. werden Beachten Sie beim Anschlu an das Stromnetz die AnschluBwerte Verlegen Sie die Netzanschlufileitung so daB niemand dar ber fallen kann Es sollte auch nichts auf der Leitung abgestellt werden Alle Hinweise und Warnungen die sich am Ger t befinden sind zu beachten Wird das Ger t ber einen l ngeren Zeitraum nicht benutzt sollten Sie es vom Strom netz trennen Somit wird im Falle einer berspannung eine Besch digung vermieden Durch die L ftungs ffnungen d rfen niemals Gegenst nde oder Fl ssigkeiten in das Gerat gelangen Dies k nnte einen Brand bzw elektrischen Schlag ausl sen ffnen sie niemals das Ger t Das Ger t darf aus Gr nden der elektrischen Sicherheit nur von authorisiertem Servicepersonal ge ffnet werden Wenn folgende Situationen auftreten ist das Ger t vom Stromnetz zu trennen und von einer qualifizierten Servicestelle zu berpr fen a Netzkabel oder Netzstecker sind besch digt b Fl ssigkeit ist in das Ger t eingedrungen c Das Gerat war Feuchtigkeit ausgesetzt d Wenn das Ger t nicht der Bedienungsanleitung entsprechend funktioniert oder Sie mit Hilfe dieser Anleitung keine Verbesserung erziclen e Das Ger t ist gefallen und oder das Geh use ist besch digt f Wenn das Ger t deutliche Anzeichen eines Defektes aufweist Stellen Sie sicher da die Stromversorgung dieses Ger tes nach der EN 60950 gepr ft ist Ausgangswerte der Stromversorgung sollten die Werte von AC 7
113. wireless function define the radio channel the SSID and the security options SMC SETUP WIZARD SYSTEM Wireless Settings The router can be quickly configured as an wireless access point for roaming clients by setting the service set LAN identifier SSID and channel number It also supports data encryption and client filtering WIRELESS Channel and SSID Enable or disable Wireless module function Enable Disable Access Control Security SAVE SETTINGS 9024X WiFi Protected Setup PIN PBC Manual NAT ROUTING FIREWALL UPnP DDNS TOOLS STATUS Check Enable and click SAVE SETTINGS 4 25 CONFIGURING THE BARRICADE Channel and SSID You must specify a common radio channel and SSID Service Set ID to be used by the Barricade and all of its wireless clients Be sure you configure all of its clients to the same values SMC SETUP WIZARD SYSTEM WAN LAN Channel and SSID This page allows you to define SSID and Channel ID for wireless connection In the wireless environment the router can also act as an wireless access point These parameters are used for the mobile stations to connect to this access point 4 26 WIRELESS gt Channel and SSID Access Control Security 802 1 WiFi Protected Setup PIN PBC Manual NAT ROUTING FIREWALL UPnP DDNS TOOLS STATUS Extension Channel Wireless Channel GRY Mixed 802 11n 802 119 and 802 11b v 20MHz Broadcast Soup
114. y data of Customer contained in stored on or integrated with any products returned to SMC pursuant to any warranty Products returned to SMC should have any customer installed accessory or add on components such as expansion modules removed prior to returning the product for replacement SMC is not responsible for these items if they are returned with the product Customers must contact SMC for a Return Material Authorization number prior to returning any product to SMC Proof of purchase may be required Any product returned to SMC without a valid Return Material Authorization RMA number clearly marked on the outside of the package will be returned to customer at customer s expense For warranty claims within North America please call our toll free customer support number at 800 762 4968 Customers ate responsible for all shipping charges from their facility to SMC SMC is responsible for return shipping charges from SMC to customer LIMITED WARRANTY WARRANTIES EXCLUSIVE IF AN SMC PRODUCT DOES NOT OPERATE AS WARRANTED ABOVE CUSTOMER S SOLE REMEDY SHALL BE REPAIR OR REPLACEMENT OF THE PRODUCT IN QUESTION AT SMC S OPTION THE FOREGOING WARRANTIES AND REMEDIES ARE EXCLUSIVE AND ARE IN LIEU OF ALL OTHER WARRANTIES OR CONDITIONS EXPRESS OR IMPLIED EITHER IN FACT OR BY OPERATION OF LAW STATUTORY OR OTHERWISE INCLUDING WARRANTIES OR CONDITIONS OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE SMC NEITHER ASSUMES NOR AUTHORIZES A
115. your client devices of your network Note This connection procedure must be done within 2 minutes after pressing the WPS button on the Barricade 4 38 WIRELESS Manual For client devices without WPS manually configure the device as displayed on the screen SMC SETUP WIZARD SYSTEM LAN For client devices without WPS manually configure the device with the following settings WIRELESS Channel and SSID Access Control Security 802 1X Wi Fi Protected Setup PIN PBC gt Manual NAT ROUTING FIREWALL UPnP DDNS TOOLS STATUS 4 39 CONFIGURING THE BARRICADE NAT Network Address Translation allows multiple users to access the Internet sharing one public IP SMC SETUP WIZARD NAT Settings SYSTEM WAN Network Address Translation NAT allows multiple users at your local site to access the Internet through a single public IP address or multiple public IP addresses NAT can LAN also prevent hacker attacks by mapping local addresses to public addresses for key WIRELESS services such as the Web or FTP NAT Enable or disable NAT module Address Mapping function Enable ODisable Virtual Server Special Application SAVE SETTINGS NAT Mapping Table ROUTING STATUS 4 40 NAT Address Mapping Allows one or more public IP addresses to be shared by multiple internal users This also hides the internal network for increased privacy and security Enter the Public IP address you wish
116. zone amp automatic time maintenance Automatic time maintenance synchronizes the Barricade with a public time server on the Internet SMC recommend to use this 3 Wireless Settings Sne 4 Connection Type Setting a Select the required time zone GMT 08 00 Pacific Time US amp Canada Tijuana b Enable or disable automatic time server maintenance By default this feature is enabled Menable Automatic Time Server Maintenance c Select primary amp secondary time server from the predefined list Primary Server 1321634 102 North America Secondary Server 132 163 4 102 North America d Click Next to continue If you want to automatically synchronize the Barricade with a public time server check the box to Enable Automatic Time Server Maintenance Select the desired servers from the drop down menus Click NEXT to continue CONFIGURING THE BARRICADE Wireless Settings This screen allows you to configure the SSID wireless Mode and channel Optionally you can disable broadcasting of SSID for added security SSID is the name given to your wireless LAN Wireless clients within the same network should 4 Connection Type Setting Parameter be configured to use the same SSID 3 Wireless Settings This page allows you to configure the wireless SSID Mode and channel Optionally you can disable broadcasting of SSID for added security SSID is the name given to your wireless
Download Pdf Manuals
Related Search
Related Contents
Copyright © All rights reserved.
Failed to retrieve file