Home

Soho NBG800 User's Manual

1. Froncie Garvan Pao pose bim Fr mre Digia Equipreas DEC Karena 124 GLC dM OLE Figure 10 Select Network Protocol step5 In the left window choose Microsoft In the right select TCP IP After the TCP IP component is completely installed click OK You will be returned to the Network menu Figure 11 The TCP IP item in the Network box indicates that TCP IP has been installed 10 SOHOware Secure Cable DSL Router PU DE Chis 21141 Based Adaptar HetEELI Figure 11 Network step6 the Configuration card Figure 11 select TCP IP and click Properties The TCP IP Properties dialog box will open Figure 12 Figure 12 TCP IP Properties 1 step7 the Address page Figure 12 select Obtain an IP address automatically Click OK and go to step 9 If you want to assign a static IP to a PC go to step 8 Note The BroadGuard operates as a DHCP server it automatically assigns an IP address to connecting computers and must be the only DHCP server on the network SOHOware Secure Cable DSL Router 11 step8 step9 step10 On the Address page Figure 12 select Specify IP address and assign an IP to your PC in the Address field If the PC is to be used as a DMZ Host or controlled by Access Control assign an IP to the PC from the range 92 168 1 2 192 168 1 11 Enter 255 255 255 0 into the Subnet Mask field On the Gateway shee
2. BroadGuard Secure Cable DSL Houter User s Guide Model No NBG800 P N 85 500600 02 Rev Al January 2001 SOHOware Inc Tel 1 408 565 9888 Fax 1 408 565 9889 SOHOware Europe Tel 44 1489 611 788 Fax 44 1489 611 787 Technical Support E mail support sohoware com Technical Support Call Center 24hrs 1 888 785 8222 Toll Free Customer Service US only 800 632 1118 ext 2801 Fax 1 408 565 9889 TRADEMARKS SOHOware is a trademark of SOHOware Inc All other names mentioned in this document are trademarks registered trademarks of their respective owners SOHOware provides this document as is without warranty of any kind neither expressed nor implied including but not limited to the particular purpose We may make improvements and or changes in this manual or in the product s and or the program s described in this manual at any time This document could include technical inaccuracies or typographical errors FCC WARNING This equipment has been tested and found to comply with the limits for a Class B digital device pursuant to part 15 of the FCC Rules These limits are designed to provide reasonable protection against harmful interference in a residential installation This equipment generates uses and can radiate radio frequency energy and if not installed and used in accordance with the instructions may cause harmful interference to radio communications However
3. esee 24 tae nem brine des 26 26 Systemi Properties saco PER RERO EIN 27 Cable Broadband Connection eese 28 Broadband Connection teo ERR ERO PEDIR eee IRSE US 28 DSL Broadband Connection nennen 29 Hacker Attack E mail Alerts 30 Change Password ei ERE 31 ACCESS Mx er E PP eere eek 32 Globally Disallowed Websites Keywords eee 33 DVDs eases nae nate 34 PHCP ee IM Ha 35 DHCP IP Address Assignments 35 SAUS Aia enr p HRS NE D ERRAT ERE PER Ye CH ERE AETR 36 PPPOE C h kk nue ior UE HERD IOTER ERES 37 PPPOE Service Running RI PORE Hes 38 PPPoE Check Succ s sinoni oe e ect 38 PPPoE Check Unsu cessftul tte their eren 39 Authentication Failed se eere ee er reti 39 Hacker Alert Tests ineo tte ne metier e b Reged 40 View Current Access Control Settings esee 40 Access eie RE Oe e e 41 Download Firmware eese eee tne A E EEEE 41 H 44 44 IP ConfiSurati n tertie eame 45 Command Prompt 1 sees r a anr eea eis 45 Command Prompts 2 arai UTE NS EEA AE 46 R etr re te eti a 46 Commarnd PromptE4 eerte rope T E 47 Stats ir e 47
4. Figure 42 DMZ Host Usually all PCs connected to the BroadGuard are protected from Internet intruders by a built in firewall For some kinds of Internet applications for example Internet interactive games video conferencing VPN Virtual Private Networks or as an e mail server etc computers must be exposed to the Internet The DMZ Host function assigns one of the client computers to be exposed BroadGuard setting You must assign a static IP address to the Client PC to be exposed to the Internet then click Save to make the setting effective Click Restart to initialize the BroadGuard with the updated settings Once the static IP address is assigned to a specific client PC you MUST specify the PC as the DMZ Host DMZ Host Disable For extra security when you do not require the DMZ Host to be exposed to the Internet you should disable this function by entering a 0 zero in the Client PC IP Address box Note The DMZ PC operates outside the protection of the BroadGuard s built in firewall If the DMZ PC is not operating in the DMZ role but is still powered on for local use you should disable DMZ Host to prevent hackers from accessing the PC 34 SOHOware Secure Cable DSL Router DHCP Settings imap Den F seines m Hr Sees Tom paasa LI Figure 43 DHCP Settings Under normal operation all client PCs IP addresses are automatically assigned by the BroadGuard s DHCP server The IP address range runs from 192 1
5. MAC Address Short for Media Access Control Address a hardware address that uniquely identifies each node on a network NAT Network Address Translation A routing protocol that allows global IP addresses to be translated into multiple private IP addresses for use on internal LAN networks The explosion in the use of the Internet has created a critical problem for the Internet Assigned Numbers Authority which is charged with assigning IP addresses to Internet users ISPs etc NAT is a technology that has been introduced to help maximize the utilization of assigned IANA or global IP addresses TCP IP SOHOware Secure Cable DSL Router 69 TCP IP protocols are used for Internet communications and consist of TCP Transmission Control Protocol which uses a set of rules to exchange messages with other Internet points Internet Protocol which uses a set of rules to identify Internet addresses on the Internet Every computer on the Internet has a unique IP address The IP protocol helps Internet users to identify each sender or receiver of information that is sent across the Internet VPN Virtual Private Network The use of encryption in the lower protocol layers to provide a secure connection through an otherwise insecure network typically the Internet BBS Bulletin Board Service A computer and associated software that typically provides an electronic message database where people can log in and leave messa
6. SOHOware Secure Cable DSL Router 75
7. SOHOware Secure Cable DSL Router vii Figure 63 Figure 64 Figure 65 Figure 66 Figure 67 Figure 68 Figure 69 Figure 70 Figure 71 Figure 72 Figure 73 Figure 74 Figure 75 Figure 76 Figure 77 Figure 78 Figure 79 Figure 80 Figure 81 Figure 82 Figure 83 Figure 84 Figure 85 Figure 86 Figure 87 Figure 88 Figure 89 Figure 90 Control Panel ifs eee ert e e 52 NetWOtk eret tee etenim erede 53 Select Network Component 53 Select Network Adapters AE tenerent 53 NetWOtk etra i Rer ER ER EGRE 54 Welcome to Dial Up Networking eere 55 Make New Connection ll RR EET 55 New Connection an n RR ERREUR ERES E dS 56 Connecti nz3 o e RN 56 Dial Up Networking sienn ee ERE o EN WR E e E 57 ContiectLo DR REN ERR 57 Connection Established 58 Routing and Remote Access irpreni aeee eene 58 Common Configurations n ert PH RIT PERIERE ERE 59 R mote Ch nt Protocols ebbe Bee te tenete 59 Internet Connection ato even rre to ee S 60 IP Address Assignmefit oie ec P 60 Address Range Assignment eese nennen nre nennen 61 New Address Range nett p RR RES 61 Address Range Assignment eese eterne 62 Managing Multiple Remote Access Servers sese 62 Rout
8. RE REN R E AAA ERWERBEN A 11 TCP IPProperties 2 x URS ERR 12 Control Panel 5 oe AT Ro e n seti ees 13 cU We M 13 Microsoft TCP IP Properties l esee 14 Microsoft TCP IP Properties 2 essere 15 Control Panel 2 ie e ERN E IR D ER UR E 15 Network and Dial up Connections esee 16 Local Area Connection Status esses 16 Local Area Connection Properties esee 17 Internet Protocol TCP IP Properties 1 eene 17 Internet Protocol TCP IP Properties 2 eeeeeeeeeereeeeeneene 18 Usitig the DHCP Server iae ER REOR ERES 19 Manual Configuration of IP Addresses essen 20 Saving the Configuration issie i e ie a a i 20 Entering the Setup Wizard peeo rre ede e E ness 21 Enter Network Password erne nee aineen e aea eee ae aa ie eea ena a a 21 EMP Slant Page e coe e n d a E R mei A EEE 23 Broadband Connection Ier eee iei 24 vi SOHOware Secure Cable DSL Router Figure 31 Figure 32 Figure 33 Figure 34 Figure 35 Figure 36 Figure 37 Figure 38 Figure 39 Figure 40 Figure 41 Figure 42 Figure 43 Figure 44 Figure 45 Figure 46 Figure 47 Figure 48 Figure 49 Figure 50 Figure 51 Figure 52 Figure 53 Figure 54 Figure 55 Figure 56 Figure 57 Figure 58 Figure 59 Figure 60 Figure 61 Figure 62 Cable Broadband Connection
9. 10 100 Ethernet switch allow multiple users to share a single cable DSL account simultaneously Easy to use No driver or software required Easily configured and managed through a web browser Netscape Communicator 4 0 Microsoft Internet Explorer 3 0 or above from LAN connected PCs Consumer oriented Firewall Security via NAT Network Address Translation protects your network from intruders Built in anti attack SOHOware Secure Cable DSL Router 1 algorithm Denial of Service amp Stateful Packet Inspection protect your PCs from hacker attacks Access Control Provides management control of Internet application use The feature allows parents employers to monitor what their children are doing or to see how the network connection is being used Flexible and Expandable Connects directly to computers to an Ethernet hub for network expansion or to a SOHOware NetBlaster for wireless network access e Virtual Private Network VPN Allows Internet security protocol packets such as PPTP to pass through the BroadGuard so that a remote PC can securely access a server located on your network or allows a PC behind the BroadGuard to remotely access a VPN server Multimedia Streaming Protocol Multimedia data is streamed at a constant rate for best enjoyment of Real Player QuickTime IP TV Video on Demand and Video Phone Intelligent Routing Built in RIP I amp II routing protocols The BroadGua
10. 52 View Current Access Control Settings On this page you can view access control settings of PCs restricted by you You will see each PC s manually assigned IP address and a list of the denied Internet applications for each restricted PC 40 SOHOware Secure Cable DSL Router Access Monitor Figure 53 Access Monitor Access Monitor shows the current Internet activities of monitored users The table shows the PC s IP address and its Internet activities Easily monitor Internet activity flow through the BroadGuard to see whether there is any improper Internet activity on your home office network The information shown is automatically updated every 5 seconds Click any website s hypertext address to go to that website Download Firmware Less LL oe SE ee eee a Lens mum a cd Lem ena SS MN LN UA RORIS Figure 54 Download Firmware This tool permits easy downloading of the latest BroadGuard firmware The SOHOware website provides two different files depending on whether you are using a Windows Mac or Linux computer SOHOware Secure Cable DSL Router 41 Windows Users Download the firmware from the SOHO ware web site and save the file on your local hard drive Double click the file and follow the on screen instructions to run the firmware upgrade After the upgrade process is complete you must turn o
11. Access window Click OK to save and close the Routing and Remote Access window These changes make it possible to run any Internet application through this server That completes the VPN server setup The next stage is to set permissions for the users access the server Set User Permissions step1 Click Start Settings Control Panel In Control Panel double click the Administrative Tools icon The Administrative Tools window will open Figure 87 64 SOHOware Secure Cable DSL Router Rue ine iR Lo ee pred cingi aam Aaa Figure 87 Administrative Tools step2 Double click Computer Management Expand System Tools Local Users and Groups Click Users to show all users lists in Computer Management Figure 88 Dmm em omme LssLLLLLLLLLLLLZI 1 me f Figure 88 Computer Management step3 Double click the name of the user you want to set permissions for The Properties box will open Figure 89 SOHOware Secure Cable DSL Router 65 Figure 89 User Properties step4 On the Dial in card check either Allow access or Control access through Remote Access Policy which one you use depends on your security policy Click OK to save and complete the setting An icon will appear in the Network and Dial Up Connections folder Figure 90 Figure 90 Network and Dial Up Connections 66 SOHOware Secure Cable DSL Router step5 When there is a live connection from a remote user the icon will show activi
12. Gateway IP The IP address of the BSP s Internet Network Gateway DNS Server IP The IP address of the BSP s Domain Name Server 36 SOHOware Secure Cable DSL Router BroadGuard yp address The IP address of the NGB800 Subnet Mask 255 255 255 0 is the default setting MAC Address The MAC address of the BroadGuard Firewall The NGB800 firewall status Tools Five useful tools are provided PPPoE Check Hacker Alert Test View Current Access Control Settings Access Monitor and Download Firmware PPPoE Check DSL Users Only If you are a DSL user this page will help you to check whether your settings for PPPoE work or not After making the PPPoE settings on the broadband connection save and restart your BroadGuard Then open the PPPoE Check page and click Check Now Figure 46 PPPoE Check Either of the following screens Figure 47 or Figure 48 indicate that your PPPoE has worked well SOHOware Secure Cable DSL Router 37 mh merma ira opine aliii te DR ge Cou Des admh 0 221 ie eee p ub ILE L h gw ru rrrire im rae mz ai etm Figure 47 PPPoE Service Running aiaiai De ges prin jei EJ QA emen 2d 5 mut SOHO Lt Te Prosdzumd WER mam lex FHE panine parem eee ime Pili purre Bii liim ee
13. a cable modem to the Cable DSL port the green one cross over is for connecting a DSL modem to the cable DSL port Plug one end of the cable into the cable DSL port of the BroadGuard and the other end into the Ethernet port of the cable DSL modem If the cable is connected correctly the Cable DSL LED will remain lit the cable DSL modem must be turned on If not try switching the cables green for white step2 Connect to the PCs Use a standard RJ 45 Ethernet cable not provided to connect the Ethernet LAN adapters in the computers to the BroadGuard LAN ports Step3 Install the power adapter Plug the power adapter into an AC power outlet Plug the other end into the BroadGuard The Power LED should light immediately Note Use only the power adapter supplied with the BroadGuard Power Campubers Figure 4 Connecting the BroadGuard Note Only one PC should be connected to the BroadGuard during setting up 6 SOHOware Secure Cable DSL Router Some BSPs use an Ethernet adapter s MAC address as an identifier to provide Internet service In these cases you need to clone the Ethernet adapters MAC address to the BroadGuard At the BroadGuard disconnect the Ethernet cables from the other PCs on the network leaving only the PC with the Ethernet adapter that you wish to register connected Note If you previously used a registered MAC address to connect to your broadband service yo
14. accessing the Internet can be supported by the BroadGuard 253 PCs may simultaneously access the Internet via the BroadGuard Where should we install the BroadGuard on our network In a typical environment the BroadGuard is installed between a cable DSL modem and LAN Connect the BroadGuard to the cable DSL modem with Cat 5 RJ 45 cable Plug one end of the cable into the WAN port of the BroadGuard and the other end into the Ethernet port of the cable DSL modem Does the BroadGuard support IPX or AppleTalk No TCP IP is the protocol standard for the Internet and has become the global standard for communications IPX a NetWare communications protocol used only to route messages from one node to another and AppleTalk a communications protocol used on Apple and Macintosh networks can be used for LAN to LAN connections but those protocols cannot connect from WAN to LAN I m using Linux Does the BroadGuard support this operating system Yes The BroadGuard is compatible with any operating system Does the BroadGuard support 100Mbps Fast Ethernet Yes Both 10 and 100Mbps Fast Ethernet are supported Does the BroadGuard support ICQ send file Yes with the following fix ICQ menu gt preference gt connections tab gt check I am behind a firewall or proxy and set the firewall time out to 80 seconds An Internet user can then send a file to a user behind the BroadGuard How do I get Napster to work with the BroadGuard Napst
15. authentication PPPoE host name domain name or specifies an IP address to make an Internet connection Hacker Attack E mail Alerts An anti attack algorithm is built into the BroadGuard to protect your network from conventional hacker attacks If you enable e mail alerts whenever the BroadGuard detects an attack it will send a warning e mail to the address entered here Change Password Changes the security password Setup Advanced Access Control The Access Control section allows you to control Internet use in your home office DMZ Host Use this function to expose a PC to the Internet for playing Internet interactive games video conferencing as a VPN server or as an e mail server through the BroadGuard A static IP address needs to be assigned to the DMZ Host PC DHCP Setting Enable Disable the BroadGuard s DHCP server Use to set the dynamic IP address range Status e View WAN connection status and Internet Network settings e View LAN Network Settings e View Firewall Status Tools PPPoE Check Checks PPPoE is functioning correctly 22 SOHOware Secure Cable DSL Router Hacker Alert Sends a test Hacker Alert E mail Test View Current The PCs in the list have been denied access to Access Control the services shown Settings Access Monitor Shows the current Internet activities of monitored users Download Download the latest
16. mask field type 255 255 255 0 step6 In the Router address field type the BroadGuard IP default is 192 168 1 1 step7 In the Name server addr field type the name server address es provided by your broadband service provider Step8 Close this screen and save the configuration as shown in Figure 26 Figure 26 Saving the Configuration Step9 Restart your computer 20 SOHOware Secure Cable DSL Router Chapter 3 Network Configuration BroadGuard Network Configuration Network Configuration is easy to setup on the BroadGuard using a standard web browser Netscape Communicator 4 0 Microsoft Internet Explorer 3 0 or above Entering the BroadGuard Setup Home Page step1 Start the web browser and type 192 168 1 1 in the address field Figure 27 Press Enter F Microsoft internet Explorer Figure 27 Entering the Setup Wizard Step2 Enter Network Password window will open Figure 28 Figure 28 Enter Network Password Step3 Enter the factory default User Name admin Step4 X Enter the factory default Password 1234 step5 Click OK Note Refer to Change Password on page 31 if you wish to change the password SOHOware Secure Cable DSL Router 21 Setup Home Page There are three sections on the home page Setup Basic Broadband Connection Use when your BSP Broadband Service Provider requests you to enter specific settings e g MAC address
17. 3 Control Panel ko a Multimedia Network Passwords Panel Use the f 9 g a 5 object s B My Computer Figure 63 Control Panel 52 SOHOware Secure Cable DSL Router step2 In Control Panel double click the Network icon The Network dialog box will open Figure 64 Figure 64 Network step3 Click Add The Select Network Component Type dialog box will open Figure 65 romni Figure 65 Select Network Component Type step4 Double click Adapter The Select Network adapters dialog box will open Figure 66 Dalla M ceno PPP con AT p Figure 66 Select Network Adapters SOHOware Secure Cable DSL Router 53 step5 step6 step7 step8 In the left window choose Microsoft In the right select Microsoft Virtual Private Networking Adapter After the Microsoft Virtual Private Networking Adapter component is completely installed click OK You will be returned to the Network menu Figure 67 The Microsoft Virtual Private Networking Adapter item in the Network box indicates that it has been successfully installed nmm gt SOHO aas 10100 P Figure 67 Network Windows may ask for the Windows CD ROM Insert the Windows CD and click OK The system will ask you to restart your computer Click Yes to complete the installation After restarting click My Computer Dial Up Networking The Welcome to Dia
18. 4 Connection Established Windows 2000 VPN Server Setup Note You must have two Network Interface Cards installed in your Windows 2000 server step1 Click Start Programs Administrative Tools Routing and Remote Access Figure 75 Routing and Remote Access step2 In the Routing and Remote Access box Figure 75 right click the server name and choose Configure and Enable Routing and Remote Access The Routing and Remote Access Server Setup Wizard welcome screen will open Click Next and the Common Configurations dialog box will open Figure 76 58 SOHOware Secure Cable DSL Router tod wal rrrad r da tcu Serri ites Winer Figure 76 Common Configurations Step3 Check Virtual private network VPN server and click Next The Remote Client Protocols dialog box will open Figure 77 Figure 77 Remote Client Protocols step4 sure TCP IP is in the Protocols list then check Yes all of the available protocols are on this list Click Next and the Internet Connection dialog box will open Figure 78 SOHOware Secure Cable DSL Router 59 vmi ewes ia cala a unu mrm ini m mri mem Figure 78 Internet Connection step5 Highlight the Local Area Connection with the IP address in the 192 168 1 2 192 168 1 254 range Click Next The IP Address Assignment box will open Figure 79 Figure 79 IP Address Assignment step6 Check From a specified range of addresses Cli
19. 68 1 1 to 192 168 1 254 Up to 253 IP addresses may be assigned to client PCs The IP address 192 168 1 1 is reserved for the BroadGuard The other IP addresses are divided into two IP groups One is the dynamic IP group the other is the static IP group The dynamic IP start address may be specified by the user e g 192 168 1 100 default value Once this start IP address has been assigned by you all IP addresses running from 192 168 1 100 to 192 168 1 254 will be part of the dynamic IP address pool IP addresses from 192 168 1 2 to 192 168 1 99 will be available as static IP addresses You can see the client PC s information on the DHCP IP Address Assignments screen Figure 44 DHCP IP Address Assignments Note IP information of statically assigned IP PCs is not shown here SOHOware Secure Cable DSL Router 35 Each time the BroadGuard is powered off the DHCP IP Address Assignments information will be cleared even though your computer may still be switched on To prevent this problem step1 Shut down your PC step2 Power your BroadGuard on step3 Turn your PCs on Status The Status section contains Internet information the BroadGuard LAN IP address assignment and the Public IP Address assignments Figure 45 This information is useful in resolving a connection problem 5 Figure 45 Status Tnternet Internet IP address assigned by your BSP Subnet Mask 255 255 255 0 is the default setting
20. All replaced products and parts will become the property of SOHOware Any replaced or repaired product or part has a ninety 90 day warranty or the remainder of the initial warranty period whichever is longer SOHOware shall not be liable under this warranty if its testing and examination disclose that the alleged defect in the product does not exist or was caused by the purchaser s or any third party s misuse neglect improper installation or testing unauthorized attempt to repair or modify or any other cause beyond the range of the intended use or by accident fire lightning or other hazard Software Software and documentation materials are supplied as is without warranty as to their performance merchantability or fitness for any particular purpose However the diskette media containing the software are covered by a 90 day warranty that protects the purchaser against failure within that period Limited Warranty Service Procedures Any product 1 received in error 2 in a defective or non functioning condition or 3 exhibiting a defect under normal working conditions can be returned to SOHOware by following these steps You must prepare e dated proof of purchase e product model number amp quantity e product serial number precise reason for return e your name address e mail address telephone fax SOHOware Secure Cable DSL Router 73 1 Inform the distributor or retailer 2 Ship the product back to the distr
21. BroadGuard firmware Firmware After clicking OK you will enter the setup home page Click the Broadband Connection link to begin setup of your broadband connection Tak ug a Bee ion He d gt Alario Soca Caria DAT aeri DHCP cs change Lin Corm pd HEROS Sirius iki riek lr a Md Hus A da a HEROS Tools PPPGE Bla Prid Care Rice Mardi je ceniza the leet Figure 29 Setup Start Page SOHOware Secure Cable DSL Router 23 Basic Broadband Connection Select the type of Broadband service that you are subscribed to Click either Cable Figure 30 Broadband Connection Modem or DSL to set up the network properties There is no need to enter any information in Broadband Connection Figure 30 unless your BSP has assigned you specific Internet connection information Host Name Domain Name MAC address authentication PPPoE or a static IP Address Cable Setup Cabin Cosran tan LL Td Bamm ed e Cans ees eer dd Corm Op ee dd sie mie Rub oe brem cam Figure 31 Cable Broadband Connection 24 SOHOware Secure Cable DSL Router MAC Address Clone Some BSPs use an Ethernet adapter s MAC address as an identifier to provide Internet service
22. Client lt 52 Windows 2000 VPN Server Setup sese eene 58 APPENDIX B GLOSSARY eeeeeeee ee esee ee ets eo neto setas etas e tasto seta sete 68 TECHNICAL SPECIFICATIONS ee eeee ee esee ee 71 TECHNICAL SUPPONRT 4 eeeeeee eese eese eese taste attestato sess toss 72 SOHOWARE LIMITED WARRANTY eeeeee esses ese n stone toss tas eta seta soo 73 SOHOware Secure Cable DSL Router List Figure 1 Figure 2 Figure 3 Figure 4 Figure 5 Figure 6 Figure 7 Figure 8 Figure 9 Figure 10 Figure 11 Figure 12 Figure 13 Figure 14 Figure 15 Figure 16 Figure 17 Figure 18 Figure 19 Figure 20 Figure 21 Figure 22 Figure 23 Figure 24 Figure 25 Figure 26 Figure 27 Figure 28 Figure 29 Figure 30 of Figures BroadGuard Connections dritten inet benennen erede 1 Front Panel cttm pet n crn EO WIE D tede 2 judge 3 Connecting the BroadGuard eese eene 6 Wired LAN Extension eet eene e ee RR Een eae eae 7 Wireless LAN Extension tenete 8 Panel eR 9 hood T 9 Select Network Component Type eesseseeseeseeeeeeeeereeee tete 10 Select Network Protocol orte Seer 10 oid E 11 TCP IP Properties L
23. Enter your BSP s domain name server s IP address into the DNS Service Search Order field and click Add If you don t know your BSP s domain name and domain name server IP address contact your BSP to get this information 14 SOHOware Secure Cable DSL Router Prepare Figure 17 Microsoft TCP IP Properties 2 step7 system will ask you to restart the computer Click Yes to complete the installation Windows 2000 step1 Click Start Settings Control Panel Control Panel Accessibility Add Remove Add Remove Administrative Date Time Options Hardware Programs Tools E Folder Options Fonts Game we M Keyboard Controllers Regional Scanners anc Options Cameras Figure 18 Control Panel SOHOware Secure Cable DSL Router 15 step2 Double click the Network and Dial up Connections icon Figure 18 The Network and Dial up Connections window will open Figure 19 F9 Network and Dial up Connections Connection 1 Macronix 98715 Family Fast Ethernet Adapter ACPT Figure 19 Network and Dial up Connections step3 Double click Local Area Connection The Local Area Connection Status dialog box will open Figure 20 Local Area Connection Status Figure 20 Local Area Connection Status step4 Click Properties 16 SOHOware Secure Cable DSL Router Local Area Connection Properties Figure 21 Local Area Connection Properties step5
24. IP pastorate nl fr fu F adhe mm Wm r4 Sabre anh zm cm m d ATP 15 ifs i i r Mei Policing DAS iron DIS carver fies im 1 bharata server Figure 23 Internet Protocol Properties 2 step9 Click OK to complete the installation 18 SOHOware Secure Cable DSL Router Mac OS Using the DHCP server to assign an IP address step1 Click the Apple icon in the upper left corner of the screen and select Control Panel TCP IP The TCP IP Setup Ethernet dialog box will appear as shown in Figure 24 bt bp dinir Us Hi bee hp parse road pppd bp reer lk epee hp diuine h Figure 24 Using the DHCP Server step2 From the Connect Via list box choose Ethernet step3 From the Configure list box choose Using DHCP Server step4 Leave the DHCP Client ID field blank Manual Assignment of IP addresses step1 Click the Apple icon in the upper left corner of the screen and select Control Panel TCP IP The TCP IP Setup Ethernet dialog box will appear as shown in Figure 25 SOHOware Secure Cable DSL Router 19 fom 1 TT IIT Figure 25 Manual Configuration of IP Addresses step2 From the Connect Via list box choose Ethernet step3 From the Configure list box choose Manually step4 Inthe JP Address field type an IP address 192 168 1 2 or 192 168 1 3 192 168 1 4 or 192 168 1 5 Stepb In the Subnet
25. In these cases you need to clone the Ethernet adapter s MAC address to the BroadGuard At the BroadGuard disconnect the Ethernet cables from the other PCs on the network leaving only the PC with the Ethernet adapter that you wish to register connected Note If you previously used a registered MAC address to connect to your broadband service you need to use the same Ethernet adapter and clone its MAC address to the Broad Guard There are two MAC addresses shown on the screen One is the PC s Ethernet card s this PC is connected to the BroadGuard via Ethernet the other is the BroadGuard s Click Clone MAC to change the IP address of the BroadGuard to that of the Ethernet card Click Restore MAC to restore the original MAC address of the BroadGuard Note After saving the settings and restarting the BroadGuard you MUST turn your cable DSL modem off and on Host Name Some BSPs e g Cox Home may ask their subscribers to enter information into this field in order to make a connection to their broadband service Begin setting up the BroadGuard with the computer originally setup by the Cox G Home technician or the computer that you registered with Cox 9 Home this computer will already contain your Cox 9 Home Host Name If you have not been given a specific name leave this field blank Finding your PC Host Name Windows 95 98 98SE Me step1 Right click Network Neighborhood Click Properties The Network dialog box will open SOHOw
26. Li d em Figure 48 PPPoE Check Successful If you see a screen similar to the following Figure 49 it means that your BSP s server may not be operating or something could be wrong with your DSL modem e g a loose cable either on the DSL modem side or the BroadGuard port 38 SOHOware Secure Cable DSL Router DroadGunrd HEEN 1200 Sand gerne Eemi Barr T l FRII Haar Senet ing ervyurm Pale aree di Figure 49 PPPoE Check Unsuccessful A screen such as that shown in Figure 50 indicates that you entered a wrong username login password or service name Go to the DSL broadband connection setup page to check them again F r Hao ee EI 4d m dzu Beato eee VW hd Vite Fae Scere muni BRRGRAE Cees Shit ioe eo Pe ae mum FER Pap Bush mil WE oman ns cmepisted emp PPF PPP mum beg lene Mg ab Lop d Hoe ab icm Mem IOn 1 aman Figure 50 Authentication Failed SOHOware Secure Cable DSL Router 39 Hacker Alert Test Figure 51 Hacker Alert Test Click the Alert Test button to automatically generate an email sent to the address specified in Hacker Attack E mail Alerts page 30 The subject line will read NBG800 Hacker Alert Test View Current Access Control Settings Figure
27. ONFIGURATION eeeeeee 21 BROADGUARD NETWORK CONFIGURATION eeeeeeeee enne eene enne ene 21 ENTERING THE BROADGUARD SETUP HOME PAGE eene 21 SETUP HOMEPAGE tert epe eite ripe Eee Pp eee eae 22 BASIG Ufa traer rd Me 24 Broadband Connection eese a e eese eene 24 Hacker Attack E mail Alerts eese esee eene enean 30 Change Password ia a e HORT ES 31 ADVANCED 5 9 Erb e ERO ROME ONE eut 32 iv SOHOware Secure Cable DSL Router Access Control a eerte ten reir 32 DMZ Hosius t Is 34 DMZ Host isset deiecit de ae 34 DHCP Settings ee D e ERRORS ERI RERO Cr t Pe ERR 35 STATUS voc tre toss MA 36 ca oat eat we aa edt ade ni 37 PPPoE Check DSL Users Only eese 37 View Current Access Control Settings eese 40 ACCOSS MOWIYOEF s peer Ah estan RR HR ERE ans Hd 41 CHAPTER 4 TROUBLESHOOTING 4 eee ee eene eene eene testa stes sns tnss ene 43 CHAPTER 5 FAQS sissscssssscinocscsesstsosaessdsccvesssoessodsscsseebasuasevesioasondeswaisetesensensconnses 49 APPENDIX A VPN REMOTE ACCESS ccccsssssssssscssscsssssscssscssssseesseeseeree 52 BROADGUARD VPN SERVER 52 CLIENT CONFIGURATION E G MICROSOFT PPTP essere 52 Windows 98 98 SE Me VPN
28. Select Internet Protocol TCP IP and click Properties Figure 21 The Internet Protocol TCP IP Properties window will open Figure 22 Internet Protocol TCP IP Properties Figure 22 Internet Protocol TCP IP Properties 1 SOHOware Secure Cable DSL Router 17 step6 Select Obtain an IP address automatically and Obtain DNS server address automatically Click OK and go to step 9 If you want to assign a static IP to a PC go to step 7 Note The BroadGuard operates as a DHCP server it automatically assigns an IP address to connecting computers and must be the only DHCP server on the network step7 Check Use the following IP address Figure 23 and enter an IP address for your PC in the Address field If the PC is to be used as a DMZ Host or controlled by Access Control assign an IP to the PC from the range 192 168 1 2 192 168 1 11 Enter 255 255 255 0 into the Subnet Mask field On the Gateway sheet enter the BroadGuard s IP address into the Default Gateway field the default value is 192 168 1 1 Click OK step8 Check Use the following DNS server addresses Figure 23 and enter a DNS IP address for your BSP in the Preferred DNS server field If you don t know your BSP s domain name server IP address contact your BSP to get this information ena Tucan get P marng aged puternice pour eee es Paget Le pou need to ask vou rael peopel Diens
29. TCP IP Properties gt lt Address DNS WINS Address DHCP Relay Routing An IP address can be automatically assigned to this network card by a DHCP server If your network does not have a DHCP server ask your network administrator for an address and then type it in the space below Adapter 17 NDC 10 100 Fast Ethernet PCI Adapter Mx A Mx38713 gt TIEXsddress Mest Defaulbiaatevvay Advanced ees ams Figure 16 Microsoft TCP IP Properties 1 step4 the Address page Figure 16 select Obtain IP address from a DHCP server and click OK and go to step 6 If you want to assign a static IP to a PC go to step 5 Note The BroadGuard operates as a DHCP server it automatically assigns an IP address to connecting computers and must be the only DHCP server on the network step5 the IP Address page Figure 16 select Specify an IP address and assign an IP address to your PC in Address field If the PC is to be used as a DMZ Host or controlled by Access Control assign an IP to the PC from the range 192 168 1 2 11 Enter 255 255 255 0 into the Subnet Mask field On the Gateway sheet enter the BroadGuard s IP address into the Default Gateway field the default value is 192 168 1 1 Click OK step6 On the DNS page enter your PC name into the Host name field see Finding your PC Host Name page 25 and your BSP s domain name into the Domain field
30. al of a Denial of Service DoS attack is not to steal information but to disable a device or network so users no longer have access to network resources For example TearDrop a DoS hacker tool which is widely available on the Internet allows users to remotely crash any unprotected Windows computer on the Internet Most types of Internet attacks try to exploit the weaknesses in the TCP stacks of the operating systems of host machines BroadGuard protects against the following types of DoS attacks SYN Flooding Ping of Death LAND attacks Smurf attacks P Spoofing TearDrop WinNuke What is Stateful Packet Inspection SPI Stateful Packet Inspection is a technology similar to that used in enterprise level firewall products It is generally regarded as a state of the art firewall technology With SPI the BroadGuard makes security decisions based on the origination of Internet sessions The BroadGuard will allow incoming data 50 SOHOware Secure Cable DSL Router from the Internet only if it is part of a session that was initiated by one of the users on the secure Local Area Network LAN but will block all communications that are initiated from the Internet SPI has the added benefit of being easy to manage making it ideal for those who don t have MIS people for networking maintenance Does the BroadGuard support routing protocols Yes it support both RIP I amp RIP II I am not able to get the web configur
31. are Secure Cable DSL Router 25 Figure 32 Network step2 Click on the dentification tab and write down the information contained in the Computer Name field this is your Host Name Windows NT 4 0 step1 Right click Network Neighborhood Click Properties The Network dialog box will open Figure 33 Network 26 SOHOware Secure Cable DSL Router step2 Write down the information contained in the Computer Name field this is your Host Name Windows 2000 step Right click My Computer Click Properties The System Properties dialog box will open Srii Frapin 08 el Hack Furio Prol teamed Aui rider uer ionge ial vini hirer ns compte Tull camcn Lr YA RNG AUP aes Moana ah ea Figure 34 System Properties Step2 Click on the dentification tab and write down the information contained in the Computer Name field this is your Host Name Domain Name Some BSPs e g Cox Home may ask their subscribers to enter information into this field in order to make a connection to their broadband service The BroadGuard will automatically get this information from the Cox Home server If you have not been given a specific name leave this field blank Note You must restart the PC after entering your Cox Home Host Name as described above If your broadband service provider assigns you a static IP address you mu
32. ation screen for the BroadGuard What can I do You may have to remove the proxy settings on your Internet browser e g Netscape Navigator or Internet Explorer Or remove the dial up settings on your browser Will the BroadGuard allow me to use my own public IP and Domain The BroadGuard allows for customization of your public IP and Domain If you use a cable connection see Figure 35 page 28 For DSL users see Figure 37 page 29 Is there an internal cable or DSL modem in the BroadGuard No the BroadGuard must work in conjunction with an external cable or DSL modem Which modems are compatible with the BroadGuard The BroadGuard is compatible with virtually any cable or DSL modem that supports Ethernet How can I check whether I have static DHCP IP Addresses Consult your BSP to confirm the information How do I get Half Life Team Fortress to Work with the BroadGuard If you want to host a game you must expose your PC to the Internet using DMZ Host see DMZ Host page 34 If you only want to join a game hosted by somebody else then there is no need to set your machine as a DMZ Host How do I get mIRC to work with the BroadGuard You must expose your PC to the Internet using DMZ Host see DMZ Host page 34 How can I learn more about Internet safety issues As parents protecting children from accessing websites that contain improper content is critical Many sites discuss this issue on the Internet You can use a search en
33. ck Next The Address Range Assignment box will open Figure 80 60 SOHOware Secure Cable DSL Router end ew mer de vir be Weed Abiem Plime vaa rar oan ibas dug paran ion op poker E ripae aan spore om EE e jo Figure 80 Address Range Assignment Step7 Click Next The New Address Range box will open Figure 81 her Address Ear Tesa im akhbar ari ening iP addrece or the marba adit in es ange HUI yar TO uH 17 0 debe 19 1688 1 5 Murder of 5 o cw Figure 81 New Address Range step8 In the Start IP address field enter a start IP address in the range 192 168 1 2 192 168 1 254 Enter an end IP address in the same range In the example in Figure 81 we allow five remote users to access the VPN server We recommend the number of addresses is five or less to prevent influencing the throughput of the BroadGuard Click OK to save the settings You will be returned to the Address Range Assignment box Figure 82 SOHOware Secure Cable DSL Router 61 nu md Fed rm farris rerrr rao eel Figure 82 Address Range Assignment step9 Click Next The Managing Multiple Remote Access Servers dialog box will open Figure 83 ki ens Peed doce Seen rei eam ee ci sumen ey canis pli Figure 83 Managing Multiple Remote Access Ser
34. er is fully compatible with the BroadGuard and requires no special settings Can multiple gamers on the LAN get on one game server and play simultaneously with just one public IP address It depends on which network game or what kind of game server you are using For example Unreal Tournament supports multi login with one public IP How can I avoid receiving corrupted FTP downloads If you are experiencing corrupted files when you download a file with your FTP client try using another FTP program How will I be notified of new BroadGuard firmware upgrades All firmware upgrades are posted on the SOHOware website at SOHOware Secure Cable DSL Router 49 www sohoware com where they can be downloaded for free Does the BroadGuard pass PPTP packets Yes Does the BroadGuard support IPSec This function will be supported in later firmware upgrades What is the recommended maximum number of VPN sessions I can run on the BroadGuard We recommend the number of sessions is five or less to prevent influencing the throughput of the BroadGuard Will the BroadGuard function in a Macintosh environment Yes but the BroadGuard s setup pages are accessible only through Internet Explorer v4 0 or Netscape Navigator v4 0 or higher for Macintosh With which type of firewall is the BroadGuard equipped The BroadGuard uses NAT anti DoS Denial of Service and SPI Stateful Packet Inspection Whatis DoS Denial of Service The go
35. erlink which is often another HTML document possibly stored on another computer DNS Domain Name Server A server used to translate a Domain Name to a numerical form IP address PPPoE 68 SOHOware Secure Cable DSL Router PPPoE supports reliable and straightforward end user authentication with no security risk and can provide a range of operational benefits to both the subscriber as well as the service provider Among these are network management and diagnostic capabilities that can identify operational problems and automatically offer resolutions Firewall A security system used to enforce an access control policy between a LAN and the Internet Gateway A device that links two different networks Internet A global network that connects millions of computers for information exchange IP Address The Internet Protocol IP is a set of basic rules for network communication Each computer on the Internet has a unique IP address e g 192 168 1 2 and its IP functions as an I D number identifier address BSP Broadband Service Provider A BSP is a company that provides individuals or companies broadband access to the Internet and other related Internet services via cable or DSL Local Area Network LAN A LAN is a network of interconnected workstations sharing the resources of a single server or each other within a relatively small geographic area LAN Adapter A device that connects the computer to the network cable
36. etwork Interfaces LAN Four 10 100 Base TX Switched Ethernet RJ 45 connectors Autosensing Switch LAN ports Four RJ 45 10Base T 100Base TX Ethernet ports for PCs peripherals or a wireless LAN bridge WAN One 10Base T Ethernet RJ 45 connector for cable DSL modem User Interface Browser based Management Maximum Number of PCs 253 Firewall Security NAT DMZ SPI Prevention of DoS attacks VPN Support Client and server pass through Microsoft PPTP Protocols WAN TCP IP DHCP client IP Multicast RTSP PPTP and PPPoE LAN TCP IP DHCP server NAT RIP I amp II LED Indicators Power Status Internet activity WAN Ethernet port activity LAN Operating Environment Operating Temperature 0 50 deg C 32 122 deg F Humidity 0 to 90 non condensing Dimensions 258 x 168 x 45mm 10 2 x 6 6 x 1 8 in Weight 770 gm 27 2 oz Power Consumption AC 5V 1A Warranty BroadGuard Unit 3 year Limited Power Adapter One year SOHOware Secure Cable DSL Router 71 Technical Support Support from Your Network Supplier If additional assistance is required call your supplier for help Have the following information ready before you make the call LED status 2 Alist of the product hardware including revision levels and if possible a brief description of the network structure 3 Details of recent configuration changes if applicable S
37. ff and turn on your BroadGuard to make your new firmware effective Mac amp Linux Users For Mac and Linux users we currently offer the firmware binary file only These users will require a third party TFTP program to complete the firmware upgrade After the upgrade process is complete you must turn off and turn on your BroadGuard to make your new firmware effective 42 SOHOware Secure Cable DSL Router Chapter 4 Troubleshooting If you cannot find your problem listed below see Chapter 5 FAQs page 49 or see the BroadGuard FAQ at the SOHOware website 1 I can t connect to the BroadGuard The BroadGuard is properly installed LAN connections are OK and it is powered ON Ensure that your PC and the BroadGuard are on the same network segment If you are not sure restart the BroadGuard let the PC get the IP address automatically Ensure that your PC is using a static IP Address within the default range of 192 168 1 2 to 192 168 1 254 and is thus compatible with the BroadGuard default IP Address of 192 168 1 1 The Subnet Mask should be set to 255 255 255 0 to match the BroadGuard On the client PC you can check these settings by using Control Panel Network to check the properties for the TCP IP protocols 2 The Status LED stays lit when it shouldn t The Status LED lights when the device is powered up and checks for proper operation After finishing the checking procedure the LED turns off to show the system is wo
38. ges Apart from public message areas a BBS may provide archives of files personal electronic mail and any other services or activities of interest to the bulletin board s system operator the sysop News Forum An electronic meeting place where people can exchange news or discuss common interests Hacker A person who enjoys exploring the details of programmable systems and how to stretch their capabilities as opposed to most users who prefer to learn only the minimum necessary Recently misused to describe a Cracker See the next item Cracker An individual who attempts to gain unauthorized access to a computer system These individuals are often malicious Contrary to widespread myth cracking does not usually involve some mysterious leap of hackerly brilliance but rather persistence and the dogged repetition of a handful of fairly well known tricks that exploit common weaknesses in the security of target systems Firmware Software stored in read only memory ROM or programmable ROM PROM Easier to change than hardware but harder than software stored on disk Firmware is often responsible for the behavior of a system when it is first switched on 70 SOHOware Secure Cable DSL Router Technical Specifications Standards Compliance IEEE 802 3 10Base T amp 100Base TX Certifications FCC Class B VCCI CE Standards Compliance Compression TCP IP RFC 1144 DHCP 1533 1541 DNS 1034 1035 N
39. gine e g www yahoo com to get those sites addresses by entering the keywords child safety The www getnetwise org website is suggested for parents to obtain more information SOHOware Secure Cable DSL Router 51 Appendix A VPN REMOTE ACCESS Thanks to advanced technology you can use the BroadGuard to remotely access your office VPN server from your home office and you also can build a VPN server for mobile sales to access for urgent purposes BroadGuard supports all PPTP packet based VPN software BroadGuard VPN Server Configuration To run a VPN server you will find using a static IP will greatly simplify your system management as the IP address never changes The PC must be exposed to the Internet as a DMZ Host Only one PC can be used as a VPN server as only one PC may be set as a DMZ Host step1 See Broadband page 24 and check Specify an IP Address and then enter all IP address information into all fields Step2 PC that you plan to make a VPN server must be assigned as the DMZ Host Client Configuration e g Microsoft PPTP Set up your Microsoft computer as a VPN Client VPN is natively supported in Windows 98 98SE and Me On a Windows 95 machine you need to upgrade to Dial Up Networking Version 1 3 Windows 98 98 SE Me VPN Client Setup step1 Click Start Settings Control Panel File Edit View Go Favorites Help EN we X a x Back Forward Up Cut Copy Paste Unc Address S
40. howare com for on line registration Register to receive free a Warranty protection 3 year on BroadGuard device 1 year on power adapter Information on upcoming product releases and special product offers a Free technical support and firmware upgrades SOHOware Secure Cable DSL Router iii Table of Contents CHAPTER 1 INTRODUCTION eeeeee eee ee ene tn enata tust to tasas tasas tat tn tn sneo 1 FEATURES AND BENEFITS Sinera i enne entente nennen i ai a i a ia 1 GETTING TO KNOW YOUR BROADGUARD cerent nennen 2 Front Panel etr e ee ae ede RETE ERE REOS 2 LED Indicatorszo sa ete e EE eva ide e aive 3 ROGP EP 3 CHAPTER 2 INSTALLATION 4 eeeeeee eee ee enata enata tns tn stata sene tn tasse ta taao 5 WHAT YOU NEED s ent EUN e SERRE ERE eee exe ente eA E 5 Broadband Internet Account eese eese eee ennt nente tenens 5 MAKING A CONNECTION erobern ea ee eee eee ER eee epe Ene ebore penne eT 6 NETWORK EXTENSION irre REF REO WERTE E EIE tape 7 Wired EAN Extensiloft deer e eo a OT EE RES 7 Wireless LAN Extensionz d e deer ea ORO RH 8 NETWORK CONFIGURATION ssccesscecssseeeseeceseeesneecueeesnceceuceseneecueeeeaeecereeenaeenees 9 Windows 95 95 Me re ere em ree e 9 Windows NIA O aeset ete ee ee Pe ERR 13 Windows 2000 5 eter tts eei ee rete tore Eee ue rare ete te ere Pes 15 Maca tS 19 CHAPTER 3 NETWORK C
41. ibutor retailer with prepaid freight The purchaser must pay the shipping freight from the distributor retailer to SOHOware Any package sent C O D Cash On Delivery will be refused 3 Charges Usually RMA Returned Material Authorization items will be returned to the purchaser via Airmail prepaid by SOHOware If returned by another carrier the purchaser will pay the difference A return freight and handling fee will be charged to the purchaser if SOHOware determines that there was No Problem Found or that the damage was caused by the user Warning SOHOware is not responsible for the integrity of any data on storage equipment hard drives tape drives floppy diskettes etc We strongly recommend that our customers backup their data before sending such equipment in for diagnosis or repair Services after Warranty Period After the warranty period expires all products can be repaired for a reasonable service charge The shipping charges to and from the SOHOware facility will be borne by the purchaser Return for Credit In the case of a DOA Dead on Arrival or a shipping error a return for credit will automatically be applied to the purchaser s account unless otherwise requested Limitation of Liability All expressed and implied warranties of a product s merchantability or of its fitness for a particular purpose are limited in duration to the applicable period as set forth in this limited warranty and no warranty wi
42. iguration x Ethernet Adapter Information REALTEK RTL8129 Fast Etherne J Adapter Address 00 80 C6 F9 05 18 IP Address 203 70 128 34 Subnet Mask 255 255 255 0 Default Gateway 203 70 128 250 DK Renew Release All Renew All More Info gt gt Figure 57 IP Configuration step3 Select the network adapter you use to connect to the BroadGuard Click Release step4 Click Renew to retrieve new information IP address subnet mask and default gateway address from the BroadGuard Click OK to save the changes and exit the program step5 Goto DHCP IP Address Assignments see Figure 44 page 35 Click Refresh Windows NT 4 0 step1 Click Start Programs Command Prompt Command Prompt Microsoft R Windows NICIM C Copyright 1985 1996 Microsoft Corp release Mindous NT IP Configuration IP address 102 168 1 107 successfully released for adapter UND32 ay Figure 58 Command Prompt 1 Step2 ipconfig release Figure 58 and press Enter Step3 ipconfig renew and press Enter to retrieve new information IP address subnet mask and default gateway address from the BroadGuard Figure 59 SOHOware Secure Cable DSL Router 45 ndawz ALGER he Gorp ig relaie EID AT 1 igurat ion ENT TTE TADO Ethernet adapter Figure 59 Command Prompt 2 step4 Exit step6 Go to DHCP IP Address As
43. ing and Remote Access eese E AE enne 62 Routing and Remote Access essent nennen nennen nennen 63 Local Area connection Properties sees 64 Administrative Tools oe been boe ope ep Ee eus 65 Computer Management e i eee 65 User Propert ES oot estie pne e Mo emet 66 Network and Dial Up Connections eee 66 viii SOHOware Secure Cable DSL Router Chapter 1 Introduction The SOHOware BroadGuard Secure cable DSL Router provides convenient Internet access to office family users by sharing a single Broadband Service Provider BSP account The BroadGuard functions with cable DSL modems and allows up to 253 computers to share secure broadband Internet access simultaneously 7x C Internet XL dj Computers Figure 1 BroadGuard Connections Embedded Network Address Translation NAT enables you to use a private set of IP addresses that the BroadGuard translates into a single public IP address The BroadGuard can also act as a DHCP server by automatically allocating a dynamic IP address to each computer on the network An enhanced firewall and the Access Control feature monitor incoming data packets and filter server requests Together they allow parents employers to see how the network connection is being used and protect all PCs behind the BroadGuard Features and Benefits Share Your Internet Connection Built in NAT DHCP and
44. it means that your BSP has a problem Figure 62 Status SOHOware Secure Cable DSL Router 47 5 You can t view a PC s name or its IP address in the DHCP IP Address Assignments page though it can still access the Internet Each time the BroadGuard is powered off the DHCP IP Address Assignments information will be cleared even though your computer may still be switched on To prevent this problem step1 Shut down your PC step2 Power your BroadGuard on step3 Turn your PCs 6 I can connect to the BroadGuard but can t get outside connections Ensure that all of your cabling is properly connected and that all of the BroadGuard s cable DSL and LAN LEDs are correctly illuminated Power down your cable DSL modem and BroadGuard for a few seconds Then turn the cable DSL modem on After the modem goes through its self test turn the BroadGuard on After the BroadGuard goes through its self test check whether you can get an outside connection Ensure that your cable or DSL modem is DHCP capable Make sure all broadband connection setup is correct The problem may be caused by your BSP Broadband Service Provider issuing a different IP address from time to time The BroadGuard gets its public IP from the BSP s DHCP server automatically The BroadGuard must renew the public IP if the BSP cancels the originally assigned IP address 48 SOHOware Secure Cable DSL Router Chapter 5 FAQs How many PCs simultaneously
45. l Up Networking dialog box will open Figure 68 54 SOHOware Secure Cable DSL Router Figure 68 Welcome to Dial Up Networking step9 Click Next The Make New Connection dialog box will open Figure 69 Figure 69 Make New Connection 1 Step10 Type a descriptive name for the connection Choose Microsoft VPN Adapter from the Select a device dropdown list Click Next SOHOware Secure Cable DSL Router 55 Figure 70 Make New Connection 2 Step11 Enter the Internet IP Address of the VPN server you want to connect to and click Next Figure 71 Make New Connection 3 Step12 Click Finish to complete the settings The system may ask you to install Microsoft Dial Up adapter Click OK to continue step13 Windows may ask for the Windows CD ROM Insert your Windows CD and click OK Step14 In the Dial Up Networking folder Figure 72 you should have a new VPN connection 56 SOHOware Secure Cable DSL Router nai 227 Figure 72 Dial Up Networking step15 Double click the newly created icon The Connect To dialog box will open Figure 73 Figure 73 Connect To Step16 Enter your User name Password and the Internet IP address of the VPN server Click Connect Note Connecting to the VPN server may take several attempts before a connection is established Step17 The Connection Established dialog box will open Figure 74 SOHOware Secure Cable DSL Router 57 Lonrechien E rtabirrhed Figure 7
46. l access the Internet through a single IP you need to configure the TCP IP settings For Windows 95 98 Me see the following section for Windows NT 4 0 go to page 13 and for Windows 2000 go to page 15 For Mac OS users turn to page 19 Windows 95 98 Me step1 Click Start Settings Control Panel Figure 7 0 ol Pane Blx Eile Edit View Go Favorites Help l5 E ar Back Forward Up Cut Copy Paste Unc Address E Control Panel 4 Multimedia Network Passwords 25 object s 3 My Computer 2 Figure 7 Control Panel step2 In Control Panel double click the Network icon The Network dialog box will open Figure 8 Chest Kr bicrasoft Heteorka PCI Fast Eheee DECchp 21140 Besed Adapige Fig end sharnir Microso ee e Figure 8 Network SOHOware Secure Cable DSL Router 9 step3 If TCP IP is already shown in the list go to Step 6 If not click Add The Select Network Component Type dialog box will open Figure 9 Select Moteork Component Typo HEI Click fhe bpa of notek composant you wel io insist Protocol pee Tengu a computer user Competers same pimaod In communicar Figure 9 Select Network Component Type step4 Double click Protocol The Select Network Protocol dialog box will open Figure 10 Click ihe Aigo than yo wani so dick DE Ioehe sn ia sksd eia n Grek for thre desica cho Here Dia
47. ll be considered valid after its expiration date If this product does not function as warranted your sole remedy shall be repair or replacement as provided for above In no case shall SOHOware be liable for any incidental consequential special or indirect damages resulting from loss of data loss of profits or loss of use even if SOHOware or an authorized SOHOware distributor dealer has been advised of the possibility of such damages or for any claim by any other party 74 SOHOware Secure Cable DSL Router EC DECLARATION OF CONFORMITY For the following equipment Product Name BroadGuard Secure Cable DSL Router Model Number NBG800 Produced by Manufacturers NATIONAL DATACOMM CORPORATION Name Manufacturer s 4F NO 24 2 INDUSTRY EAST 4TH ROAD Address SCIENCE PARK HSIN CHU TAIWAN R O C is hereby confirmed to comply with the requirements set out in the Council Directive on the Approximation of the Laws of the Member States relating to Electromagnetic Compatibility 89 336 EEC The product meets or exceeds the following EMC standards EMI EN50081 1 1992 EN55022 B EMS EN50082 1 1997 The manufacturer importer is responsible for this declaration Company Name SOHOware Europe Company Address 1 EARLSFORT CENTRE HATCH STREET DUBLIN 2 IRELAND Person authorized to make this declaration Name CHIN TU WU Position Title MANAGING DIRECTOR COM Date Legal Signature 15 January 2001
48. ntaining particular words Click View Modify Globally Disallowed Website Keyword List to open the limited web sites list Figure 41 32 SOHOware Secure Cable DSL Router Disallowed Websites Beyemrds ball comin rama y aic pa m aru al m Mann Aen Erei eet foie fn do im igs man eee ee queis m n L3 Figure 41 Globally Disallowed Websites Keywords This list will be applied to all restricted users Enter the full domain name of the website or just enter a keyword Click Save to save the new list Access Control may be used to restrict use of the following Internet applications E mail File Downloading Checking File downloading stops use of the FTP protocol and prevents users from downloading files from an FTP site but they will still be able to download files from a website News Forum Bulletin Board Service Web Surfing You may control Internet access of up to 10 PCs on your home office network 1 Choose the static IP address for the PC from the dropdown list 2 Check the boxes for the applications you wish to deny to this IP address 3 Click Save SOHOware Secure Cable DSL Router 33 ULP ram aprenden Frau uar ee imas qam suis d PPP iln ein irn red mele em mr dd P ibiti Ee D PT ien iei Bel PT L uh Br cmi e P eii TE TN I ww
49. or an uplink port on that device Cable DSL port Ethernet 10Base T port is used for linking to the Ethernet SOHOware Secure Cable DSL Router 3 port of a cable DSL modem Reset Re start the BroadGuard by pressing the Reset button for longer than 5 seconds If you forget the password for the Setup Wizard restore the default settings by pressing the reset button for longer than 13 seconds Enter the default users name admin and password 1234 to regain access to the BroadGuard Power 5V Used to connect the external power adapter supplied with the BroadGuard Note that only the supplied adapter should be used 4 SOHOware Secure Cable DSL Router Chapter 2 Installation What You Need Before installing the SOHOware BroadGuard you need the following Any Network Operating System with TCP IP installed Internet browser installed 10Mbps 100Mbps or 10 100Mbps Ethernet network adapters installed Broadband Internet Account You should be subscribed to a broadband Internet service and have a cable DSL modem with a 10Base T interface Know whether your Public IP address is fixed or is dynamically assigned ask your Broadband Service Provider 1 If your IP address is dynamically assigned most common the BroadGuard will automatically get a public IP address from your ISP through the modem You will not need to do any IP address configuration There is no need to enter any information in Broadband Connection
50. rd automatically learns the outside Internet infrastructure and determines the most efficient data transfer route Class B Certified Safe for use in residential environments Getting to Know Your BroadGuard Front Panel Users can monitor the status of the BroadGuard via the LEDs on the front panel Figure 2 SOHOLU re AL auri 4 mh fH 1 2 3 Power Siaius Cable DSL 4 Figure 2 Front Panel 2 SOHOware Secure Cable DSL Router LED Indicators LED Color Function Power Green Lit Power ON Unlit Power OFF Status Red Blinking On power up the BroadGuard checks for proper operation The checking procedure takes only a few seconds Lit If this LED is always lit the device is not working properly Go to Chapter 4 Troubleshooting page 43 Cable DSL Orange Lit Indicates a good connection to a cable DSL Link Activity modem Blinking Data is being transmitted received to from a cable DSL modem LAN Green Lit Blinking Indicates the link status and activity LAN Ports 1 4 DERE of 100Mbps Ethernet data Link Activi d Lit Blinking Indicates the link status and activity CY of 10Mbps Ethernet data Rear Panel Ports on the Rear Panel Figure 3 Figure 3 Rear Panel LAN Ports There are four 10 100Base T Switch ports for linking computers or other Ethernet devices e g a hub switch When linking to other networking devices we need a cross over cable
51. rithm is built in to the BroadGuard so that it can protect client PCs from conventional attacks With BroadGuard you have a professional firewall but without any specialized setup configuration BroadGuard gives your network the capability to prevent many kinds of hackers attacks If you turn on the e mail alert function whenever BroadGuard detects an Internet attack it will automatically send an e mail with an attached log file to you The info will look something like the following udp 203 69 97 139 211 55 79 155 840 port scan attack forward udp 203 69 97 139 211 55 79 155 546 port scan attack forward udp 203 69 97 139 211 55 79 155 544 port scan attack forward In the example above the first IP address 203 69 97 139 on each line indicates the address the hacker is using The second 211 55 79 155 is the user s Internet IP address As for ports 840 546 and 544 they are the numbers of ports that are being attacked Forward this e mail to your BSP for analysis Note The e mail alert is sent at approximately the same time your computer is attacked Enter the e mail address that the warnings should be sent to The e mail server address can be obtained from your broadband service provider Click Save to store the settings Click Restart to initialize the BroadGuard with the new settings 30 SOHOware Secure Cable DSL Router Change Password For security reasons you should change the default administrator pa
52. rking fine If the LED remains lit after this time the BroadGuard is not working properly Contact your dealer 3 Ican t browse through the BroadGuard Check that both ends of the network cable and power adapter are properly connected Check that all LEDs on the front panel are functioning properly Use Status Figure 55 to check that your BroadGuard is still connected to your BSP If there is no public IP address shown on the screen the problem lies with the BSP SOHOware Secure Cable DSL Router 43 Figure 55 Status Check that the PC got an IP address assigned to it automatically for Windows 95 98 Me see Figure 12 page 11 For Windows NT 4 0 see Figure 16 page 14 For Windows 2000 see Figure 22 page 17 For Mac users see Figure 24 page 19 Make sure that TCP IP is setup on the client PCs and that the IP addresses are in the range 192 168 1 x x is from 2 to 254 Check the IP Address via the View DHCP IP Address Assignments page If the IP address assignments are not within the stated range follow the steps below to rebuild the setup Windows 95 98 Me step1 Click Start Run type winipcfg and click OK Figure 56 Run zix X Type the name of a program folder document or Internet resource and Windows will open itfor you Cancel Browse Figure 56 Run Open mm pcfg Step2 Configuration dialog box will open Figure 57 44 SOHOware Secure Cable DSL Router ivo IP Conf
53. signments see Figure 44 page 35 Click Refresh Windows 2000 step1 Click Start Programs Accessories Command Prompt dipconfig velease Mindous 2000 P Configuration IP address successfully released for adapter local Area Connection CA Figure 60 Command Prompt 3 step2 Type ipconfig release Figure 60 and press Enter step3 Type ipconfig renew and press Enter to retrieve new information IP address subnet mask and default gateway address from the BroadGuard Figure 61 46 SOHOware Secure Cable DSL Router Command Prompt NPipconfig release Windows 2000 IP Configuration IP address successfully released for adapter Local Area Connection Windows 2888 IP Configuration Connection Onnection specific DNS Suffix he ethome net gt IP Address 92 168 1 3 55 255 255 8 192 168 1 1 Figure 61 Command Prompt 4 step4 Type Exit step5 Go to DHCP IP Address Assignments see Figure 44 page 35 Click Refresh 4 Entering a URL or IP address results in a timeout error Follow the steps below to solve this problem step1 Check if other PCs can connect to the network without problems If they can ensure the problem PC s IP settings are correct IP address subnet mask default gateway and DNS step2 Check the BroadGuard Internet settings IP address subnet mask default gateway and DNS in Status Figure 62 If there is no information shown on the screen
54. ssword 1234 Change rd ae LE ee ienes ipri iy Figure 39 Change Password to a password of your choice step1 step2 step3 Enter the current password the new password and then retype it for verification Click Save Click Restart to initialize the BroadGuard with the new password The Enter Network Password dialog box will open Enter the username admin and key in the new password Click OK and you will enter the BroadGuard Setup page again SOHOware Secure Cable DSL Router 31 Advanced Access Control pp PC Fu ORG 1 ROLLS CEA MAFRi em DEAE daTia T resumen inn pee ug r YF pe par gin pns 1 Chur Per 1 m PC deep rm mi 1 eni Sen fe Se sien unie ipm in m vem d Cs irm ie ANLE Bun NJ Tra ee T wis Tam Figure 40 Access Control This feature prevents users or children from running disallowed Internet applications or accessing unsuitable websites maximum 10 websites In order to achieve this functionality a static IP should be assigned to users who will be restricted Up to 10 local users can be denied access to particular websites or to website addresses co
55. st check Specify an IP Address and then enter all IP address information into all fields Figure 35 If not you can skip this step SOHOware Secure Cable DSL Router 27 price leon d Seer Phal bine mit qnem pow ae nde ness check iiaia an IP Adidisss Ananaia hi yeu lores leen qiven a P check ap F jinam 7 Seton adores Automatic dy P Specify an ijdem IP addins ARP Dy Your Ep f p B i Subnet Matk rj Your 1 Eee ee fp Gateway krar by rur hk hk h b Hrcadban Sarria Proedder ghen m OMS addres F poe anier the masina in thes bao Primary OHZ IP b B B b Becandary DHS b hb HH b Figure 35 Cable Broadband Connection Click Save and Restart to start sharing your broadband connection DSL Setup DSL Breadbasd FE quas ieee Veer Peres 1 ler t al PET nl Tes aml tairi Bei eda dien ius Fia D er ae imm aed Sarva _ Dima Du marl Hum re pe ge dm Com Figure 36 Broadband Connection Check Yes to enable PPPoE service Several parameters are required to establish a DSL connection via PPPoE User Name Login Password some broadband service providers also require a Service Name Enter all information provided by your BSP into all required fields 28 SOHOware Secure Cable DSL Ro
56. t enter the BroadGuard s IP address into the New Gateway field the default value is 192 168 1 1 Click Add to add this value to the Installed Gateway list Click OK iia DE ONS aane Canlsgunadan FP DAS E1731 IMS Euren Seat d lic _ Figure 13 TCP IP Properties 2 On the DNS Configuration page check Enable DNS Enter your PC name into the Host field see Finding your PC Host Name page 25 and your BSP s domain name into the Domain field Enter your BSP s domain name server s IP address into the DNS Server Search Order field and click Add If you don t know your BSP s domain name and domain name server IP address contact your BSP to get this information Click OK The system will ask you to restart the computer Click Yes to complete the installation 12 SOHOware Secure Cable DSL Router Windows NT 4 0 step1 Click Start Settings Control Panel Control Panel Multimedia Network Passwords Figure 14 Control Panel step2 Double click the Network icon Figure 14 The Network dialog box will open Figure 15 NwLink IPX SPX Compatible Transport YT NwLink NetBIOS Figure 15 Network step3 the Protocols card select TCP IP Protocol and click Properties Figure 15 SOHOware Secure Cable DSL Router 13 Microsoft
57. there is no guarantee that interference will not occur in a particular installation If this equipment does cause harmful interference to radio or television reception which can be determined by turning the equipment on and off the user is encouraged to try to correct the interference by one or more of the following measures e Reorient or relocate the receiving antenna e Relocate the equipment with respect to the receiver Plug the equipment into an outlet on a circuit different from that to which the receiver is connected e Consult your dealer or an experienced radio TV technician for help You are cautioned that changes or modifications not expressly approved by the party responsible for compliance could void your authority to operate the equipment This device complies with part 15 of the FCC Rules Operation is subject to the following two conditions 1 This device may not cause harmful interference and 2 This device must accept any interference received including interference that may cause undesired operation ii SOHOware Secure Cable DSL Router Packing List Check the contents of your package to ensure that they match the packing list below If anything is missing or damaged contact the store where you purchased the product The BroadGuard pack comes with the following One BroadGuard Device One Power Adapter One User s Guide and Quick Guide Two Color coded RJ 45 UTP cables Registration card or go to www so
58. ty Figure 90 Note Connections to the VPN server may take several attempts before a connection is established SOHOware Secure Cable DSL Router 67 Appendix B GLOSSARY Ethernet One of the most common Local Area Network LAN protocols Ethernet uses a bus topology that supports a data transfer rate of 10Mbps Fast Ethernet Much the same as Ethernet but 10 times faster requires upgraded network cards and hubs Protocol A protocol is a set of rules for communicating between computers 10Base T A variant of Ethernet that allows computers to be networked at 10Mbps via twisted pair cable 100Base TX A variant of Ethernet that allows computers to be networked at 100Mbps via twisted pair cable Browser A software application used to locate and display Web pages such as Netscape Navigator and Microsoft Internet Explorer DHCP Dynamic Host Configuration Protocol DHCP is a protocol that assigns temporary IP addresses to PCs Without DHCP the IP address must be entered manually at each computer Domain Name The Domain Name identifies one or more IP addresses For example the domain name of sohoware com represents about a dozen IP addresses URL Uniform Resource Locator A Uniform Resource Locator is a standard for specifying the location of an object on the Internet such as a file or a newsgroup URLs are used extensively on the World Wide Web They are used in HTML documents to specify the target of a hyp
59. u need to clone this Ethernet adapter s MAC address to the BroadGuard Network Extension If you want to connect more users to your network or use a wireless connection through the BroadGuard refer to the following section Wired LAN Extension This section describes how to extend your BroadGuard LAN using one of our SOHOware Home series products e g a 10Mbps or 10 100Mbps Ethernet Hub S witch Easy two step installation procedure step1 Set the Uplink port of the external hub switch to the Uplink position Step2 Use standard RJ 45 Ethernet cable to connect any BroadGuard LAN port to the Uplink port of the hub switch If the device does not feature an Uplink switch use a cross over cable Set to Uplink 10Mbps or 10 100Mbps Ethernet Hub Switch BroadGuard Standard RJ 45 J Ethernet Cable Figure 5 Wired LAN Extension SOHOware Secure Cable DSL Router 7 Wireless LAN Extension This section describes how to extend your BroadGuard LAN to a CableFREE NetBlaster II Wireless hub Just connect any normal port of the BroadGuard to the CableFREE NetBlaster II with standard RJ 45 Ethernet cable for more SOHOware NetBlaster II information visit www sohoware com CablaFREE MetBlasler I Wireless Hub _ Any LAN Port af i the HEGET EroadGuard Standard RJ 5 Ememat Cats Figure 6 Wireless LAN Extension 8 SOHOware Secure Cable DSL Router Network Configuration If your local network wil
60. unless your BSP has assigned you specific Internet connection information Host Name Domain Name MAC address authentication PPPoE or a static IP address To do a manual setup type 192 168 1 1 into the web address location on a web browser on any connected PC Enter the factory default user name admin and password 1234 After clicking OK you will enter the setup home page Click the Broadband Connection link to begin setup of the broadband connection 2 Ifyou have an AT amp T formerly MediaOne cable service or any service that requires a Media Access Control MAC address for authentication when you are setting up the BroadGuard for first use only the PC with the registered Ethernet card s MAC address can be connected to the BroadGuard 3 If you have a DSL service with PPPoE obtain the following information from your BSP e The user login name e The login password Service name some BSPs may not require you to use this SOHOware Secure Cable DSL Router 5 4 If you have a fixed public IP address obtain the following information from your ISP e The assigned Gateway IP address Domain Name Server s IP address Subnet Mask Making a Connection All the connection ports are on the rear panel of the BroadGuard Follow the steps below to complete the hardware installation step1 Connect to a cable DSL modem Two cables are supplied with the SOHOware NBG800 The white cable straight through is for connecting
61. upport from SOHOware If you have any problems that you cannot resolve with the information in troubleshooting please note the following information and contact our technical support team e What you were doing when the error occurred e What error messages you saw e Whether the problem can be reproduced e serial number of your SOHOware product USA amp Europe Telephone 1 408 565 9888 Technical Support 1 888 785 8222 Toll Free Customer 1 800 632 1118 ext 2801 Service US only FAX 1 408 565 9889 E mail support sohoware com Asia Pacific Telephone 886 3 5783966 FAX 886 3 5777989 E mail techsupt ndc com tw For more information on networking please visit us at http www sohoware com 72 SOHOware Secure Cable DSL Router SOHOware Limited Warranty Hardware SOHOware Inc warrants its products to be free of defects in workmanship and materials under normal use and service from the date of purchase from SOHOware or its Authorized Reseller and for the period of time specified in the documentation supplied with each product Should a product fail to be in good working order during the applicable warranty period SOHOware will at its option and expense repair or replace it or deliver to the purchaser an equivalent product or part at no additional charge except as set forth below Repair parts and replacement products are furnished on an exchange basis and will be either reconditioned or new
62. uter Connect on demand This setting allows the BroadGuard to automatically make a connection to your BSP whenever you launch an Internet application The default setting is Yes Maximum Idle Time Before Disconnecting If there is no activity on the connection longer than the time set here the connection will automatically be dropped If your Broadband service provider assigns you a static IP address you must set Use PPPoE DSL Service to NO Next check Specify an IP Address and enter all IP address information into all fields If not you can skip this step Vi gini Bird bored Padi leri sil quibm sean DP abdin check Thales an IP Addeen Bunce ical H yeu lores leen given a specifi P addres check Sipari an F Feld V Siren DP adie Auge tically an P IP by vows Subnet Mmk Assigned try Your L Gateway by Your pm p n b B r Han yout Hrbadbaan Previder giren you a OMS 7 F pee anier Tis in ther Malti Primary OHZ IF mec DES m Figure 37 DSL Broadband Connection Click Save and Restart to start sharing your broadband connection SOHOware Secure Cable DSL Router 29 Hacker Attack E mail Alerts FEES Hache amach 0 18 Pus EE on an pin eee eee eee ee pe eee imm Sa ee Figure 38 Hacker Attack E mail Alerts An anti attack algo
63. vers Step10 Check No I don t want then click Next step11 Click Finish A Routing and Remote Access warning screen will open Figure 84 Figure 84 Routing and Remote Access 62 SOHOware Secure Cable DSL Router Step12 Click OK to return to the Routing and Remote Access main screen Figure 85 em aim XP DDR Y ELI pd copie iis d WP aca Corer Deiis Lia ewe TRNL ET i rir kipra hdc 4 H Figure 85 Routing and Remote Access In the left pane double click the server and double click JP Routing In the right double click the Local Area Connection with the IP address in the 192 168 1 2 192 168 1 254 range The Local Area connection Properties box will open Figure 86 SOHOware Secure Cable DSL Router 63 Lital Aga Caspian Preparing Bara Corigunsior Hakeai 8 Haba 3 E roo renal Sebo ibrar ora dre Leda sibus itera bl M Lr jr e 77 irapa Fugrsani sion cheng Figure 86 Local Area connection Properties Step14 On the General card check Enable IP Router Manager Click Input Filters Remove all filters from the list then click OK Click Output Filters Once again remove all filters from the list then click OK Click OK to close the window and return to the Routing and Remote

Soho NBG800 User's Manual

Contents

Download Pdf Manuals

Related Search

Related Contents