Home

SMC Networks SMC7404BRA User's Manual

1. pppox404 192 168 2 1 255 255 255 0 192 168 2 1 192 168 2100 100 Parameter Description ADSL Operation Mode WAN Protocol Indicates the protocol used VPI VCI Virtual Path Identifier VPI and Virtual Circuit Identifier VCI AALS Encapsulation Shows the packet encapsulation type Network Layer Parameters WAN IP Address Shows the WAN IP address Subnet Mask Shows the WAN Subnet Mask Default Gateway Shows the WAN Default Gateway 4 11 CONFIGURING THE BARRICADE Parameter Description DHCP Parameters Default Gateway The default gateway IP address If the Barricade cannot find the destination address within its local network it will forward the packets to the Default Gateway usually your ISP will supply this address Subnet Mask The network subnet mask Name Server 1 Primary name server IP address Name Server 2 Alternate name server IP address Name Server 3 Alternate name server IP address Start IP Address Start IP Address of DHCP assigned IP addresses Number of IP Number of IPs available for assignment by the DHCP server Your Barricade is now setup Go to Troubleshooting on page A 1 if you cannot make a connection to the Internet 4 12 ADVANCED SETUP Advanced Setup Clicking Advanced Setup displays the main menu on the left hand side of the screen and descriptive information on the right hand side The Main Menu links are used to navigate to other menus that display configura
2. 4 10 SMC 1 Time Zone g 2 Internet Sharing g 3 Parameter Setting O 4 Finish OH a Q2a3 aS 3 Parameter Setting ons foo fo fo fas wa fo bP fo fo Subnet Mask bp bp bo bp vewe fo pa Default Gateway Do Po bo Po Parameter Description DNS Enter a domain name server IP address WAN IP Enter an IP Address for the Barricade WAN interface Subnet Mask Enter a subnet mask VPI VCI Virtual Path Identifier VPI and Virtual Circuit Identifier VCI Data flows are broken up into fixed length cells each of which contains a Virtual Path Identifier VPI that identifies the path between two nodes and a Virtual Circuit Identifier VCI that identifies the data channel within that virtual path Each virtual citcuit maintains a constant flow of cells between the two end points When there is no data to transmit empty cells are sent And when data needs to be transmitted it is immediately inserted into the cell flows Default Gateway Enter a default gateway IP address If the Barricade cannot find the destination address within its local network it will forward the packets to the Default Gateway usually your ISP will supply this address SETUP WIZARD Finish 5 24 0a4 8 4 SMC g 1 Time Zone e 2 Internet Sharing 3 Parameter Setting 4 Finish ADSL operation mode WAN PPP over Ethernet 0 34 LLC You have filled in the following Configuration Parameters
3. ADSL Cabl ConnecttOn mi Wie Aiea Me a a AGN ela Eda se B 4 SPCCHICAtONS ida A pie B 4 Winne Conventions seee eih lia E Siage B 4 Specifications a ans oR a A TNO C 1 iti T4BLE OF CONTENTS iv CHAPTER 1 INTRODUCTION Congratulations on your purchase of the Barricade Broadband Router with built in ADSL Modem SMC7404BRA EU We are proud to provide you with a powerful yet simple communication device for connecting your local area network LAN to the Internet For those who want to surf the Internet in the most secure way this Router provides a convenient and powerful solution About the Barricade The Barricade provides Internet access to multiple users by sharing a single user account This new technology provides many secure and cost effective functions It is simple to configure and can be up and running in minutes Features and Benefits Internet connection via an RJ 11 WAN port e Local network connection via four 10 100 Mbps Ethernet ports DHCP for dynamic IP configuration and DNS for domain name mapping Firewall with Stateful Packet Inspection client privileges intrusion detection and NAT 1 1 INTRODUCTION 1 2 NAT also enables multi user Internet access via a single user account and virtual server functionality providing protected access to Internet services such as Web FTP e mail and Telnet VPN pass through IPSec ESP Tunnel mode L2TP PPTP User definable application sens
4. Authentication Code Password or MD5 Authentication key RIP sends routing update messages at regular intervals and when the network topology changes When a router receives a routing update that includes changes to an entry it updates its routing table to reflect the new route RIP routers maintain only the best route to a destination After updating its routing table the router immediately begins transmitting routing updates to inform other network routers of the change Routing Table ls ob daa giao SMC System WAN LAN NAT Routing system ROUTING SYSTEM Routing Table List Routing Table pa SE Eee C 192 168 2 0 255 255 255 0 directly LAN C 127 0 0 1 255 255 255 255 directly Loopback Flags C directly connected S static R RIP I ICMP Redirect Parameter Description Flags Indicates the route status C Direct connection on the same subnet S Static route R RIP Routing Information Protocol assigned route I ICMP Internet Control Message Protocol Redirect route Network Destination IP address Address Netmask The subnetwork associated with the destination This is a template that identifies the address bits in the destination address used for routing to specific subnets Each bit that corresponds to a 1 is part of the network subnet number each bit that corresponds to 0 is part of the host number Gateway The IP address of the router at the next hop to which m
5. ccc cece eee 4 18 IONS ii AA di ache 4 19 WAN Siya ien aia os od TRA RRA oP ie push S 4 20 PPPoE PPP over Ethernet isnin a E 4 20 AEM Sindee tlh e GALLO ns A ARES oy 4 22 ISP DT A A rd Ac 4 23 EAN acts heise oe nis 2 Avie se ters AEE E ade aTe Ara aha din A GE 4 24 UE cee gba teas 4 26 Addt ss Mapping gss pido wins GY gages tlh od wage ia 4 27 Virtual Server adi o ak nd ea aca 4 28 Routing System 2 sii Ge 2h ee Bh a AA Rae Sh pis Cea 4 30 Static ROUTE ia ae ames et ees es 4 30 RIDA Sey Pa ARS a at hE Sed AN atu A 4 31 Routing Tablet iia a ra ia 4 33 Firewall usa nos RPE chess tee DECIA dE RIM ete sagas AN 4 34 ACCESS Control Ai Acie torn Malar abana edo 4 35 Access Controls AddPE tt Saabs lg pj ia 4 37 URL Blocking oia dai ta dra 4 38 Schedule Rule o A O ue Nath od on 4 39 Intrusion Detection 1000 0 eee ee eee 4 41 DMI RIA IAS AI AA IR A Suntan td 4 46 SNMP se Soe ack A A A Aa 4 47 COMEDI s Pads Eo bad he Ms at oda Roe AE deat 4 47 SUP APY oh a aetna hain ia 4 48 PRIDDIS gh seek a lc dia Wa Mente eae ias 4 49 Parametros cde Re eee ee S 4 49 AU A O Seite ti 2 4 50 LOS a A ii ii 4 53 Configuration Tools ta A A 4 53 Firmware Upetade iii a o 4 54 RESCUE Trito SIRE scale alias SIGE tU td ie E 4 55 Status sda A co ead Aan he ea 4 56 5 Configuring Client TCP IP ooooooooo o 5 1 Windows 95 98 Me cc cece ccc ccc cece cece eee eee e ee eaes 5 1 Disable HTTP Proxy su soc se died ian bea ace a ea oe
6. on page 4 7 if you will use either of these modes and go to Multiple Protocol over ATM Mode on page 4 10 if you will use multiple protocol routing mode e gt 9044 9u039 D39 SMC 1 Time Zone g 2 Internet Sharing 3 Parameter Setting O 4 Finish 2 Internet Sharing Please select the Internet sharing protocol Disable Internet Sharing Bridge Mode for single PC PPPoE Routing Mode for multiple PCs PPPoA Routing Mode for multiple PCs Multiple protocol over ATM Routing Mode for multiple PCs Parameter Setting gt OB F ORG 5 S SMC g 1 Time Zone 2 Internet Sharing g 3 Parameter Setting O 4 Finish Parameter 3 Parameter Setting vpet fo aa SETUP WIZARD Description VPI VCI Data flows are broken up into fixed length cells each of which contains a Virtual Path Identifier VPI that identifies the path between two nodes and a Virtual Circuit Identifier VCI that identifies the data channel within that virtual path Each virtual circuit maintains a constant flow of cells between the two end points When there is no data to transmit empty cells are sent And when data needs to be transmitted it is immediately inserted into the cell flows 4 5 CONFIGURING THE BARRICADE Finish e gt 984 9u 39 99 SMC g 1 Time Zone C 2 Internet Sharing C 3 Parameter Setting GQ 4 Finish You have filled in the following Configuration Para
7. ADSL Barricade Broadband Router with built in ADSL Modem Compatible with all leading DSLAMs Firewall hacker attack logging DoS and client filtering Supports DMT line modulation Four auto negotiating 10 100 Ethernet ports Built in print server PPTP L2TP and IPSec pass through Multiple user Internet access with a single user account Supports PPPoE and PPPoA Plug amp Play installation Web based management SMC User Guide SMC7404BRA EU Networks 9009090909000 Broadband Router with built in ADSL Modem From SMC s line of award winning connectivity solutions December 2002 Part No 750 9701 UK 750 9735 Networks Pub No 150000035400A COMPLIANCES FCC Class B This equipment has been tested and found to comply with the limits for a Class B digital device pursuant to Part 15 of the FCC Rules These limits are designed to provide reasonable protection against harmful interference in a residential installation This equipment generates uses and can radiate radio frequency energy and if not installed and used in accordance with instructions may cause harmful interference to radio communications However there is no guarantee that the interference will not occur in a particular installation If this equipment does cause harmful interference to radio or television reception which can be determined by turning the equipment off and on the user is encouraged to try to correct the interference by one or
8. CHAPTER 4 CONFIGURING THE BARRICADE After you have configured TCP IP on a client computer use a Web browser to configure the Barricade The Barricade can be configured by any Java supported browser including Internet Explorer 4 0 or above or Netscape Navigator 4 0 or above Using the Web management interface you may configure the Barricade and view statistics to monitor network activity To access the Barricade s management interface enter the IP address of the Barricade in your web browser http 192 168 2 1 the Barricade automatically switches to LOGIN USER PASSWORD Port 88 for management access Then click LOGIN by default there is no password a cancel Note For some browsers it may be necessary to include 88 after Please type password Thank you the management IP address For example http 192 168 2 1 88 4 1 CONFIGURING THE BARRICADE Navigating the Web Browser Interface The Barricade s management interface consists of a Setup Wizard and an Advanced Setup section Setup Wizard Use the Setup Wizard if you want to quickly setup the Barricade Go to Setup Wizard on page 4 3 Advanced Setup Advanced Setup supports more advanced functions like hacker attack detection IP and MAC address filtering virtual server setup virtual DMZ host as well as other functions Go to Advanced Setup on page 4 13 Making Configuration Changes 4 2 Configurable parameters have
9. You should also remember to turn off the power remove the power cord from the outlet and keep your hands dry when you install the Barricade 2 5 INSTALLATION Connect the ADSL Line Run standard telephone cable from the wall jack providing ADSL service to the WAN port on your Barricade When inserting an ADSL RJ 11 plug be sure the tab on the plug clicks into position to ensure that it is properly seated If you are using splitterless ADSL service be sure you add low pass filters between the ADSL wall jack and your telephones These filters pass voice signals through but filter data signals out Phone Line Configuration Installing a Full rate Connection If you are using a full rate G dmt connection your service provider will attach the outside ADSL line to a data voice splitter In this case you can connect your phones and computer directly to the splitter as shown below 7 Plain Old Telephone System POTS Residential Connection Point NID gt Splitter Datat lt a ADSL Router gt Y ao or lt m a ae y a Io baa id y e Es Ethernet ag J j hub or switch w w A Figure 2 1 Installing With a Splitter 2 6 CONNECT THE SYSTEM Installing a Splitterless Connection If you are using a splitterless G lite connection then your service provider will attach the outside ADSL line directly to your phone system In this case you can connect your phones and computer dir
10. 10 192168 2 I a TA 11 1921682 I E ue 12 192168 2 I E MES 13 1921682 I E dep d 14 192168 2 I gt Ta 15 192168 2 I S ube 16 192168 2 I E use l 17 192168 2 I E iS 18 1921682 I E dea i 19 192168 2 I S UBB 20 192168 2 I 3 TE If you configure the Barricade as a virtual server remote users accessing services such as Web or FTP at your local site via public IP addresses can be automatically redirected to local servers configured with private IP 4 28 NAT addresses In other words depending on the requested service TCP UDP port number the Barricade redirects the external service request to the appropriate server located at another internal IP address For example if you set Type Public Port to TCP 80 HTTP or Web and the Private IP Port to 192 168 2 2 80 then all HTTP requests from outside users will be transferred to 192 168 2 2 on port 80 Therefore by just entering the IP Address provided by the ISP Internet users can access the service they need at the local address to which you redirect them The more common TCP service ports include HTTP 80 FTP 21 Telnet 23 and POP3 110 Note The WAN interface should have a fixed IP address to best utilize this function If your ISP only provides dynamic IP addresses a search for free dynamic IP on any major search engine will turn up tools that will allow you to use the same domain name even though your IP address changes each time you log in to the
11. Domain Name Servers are used to map a domain name e g www smc com to the equivalent numerical IP address e g 64 147 25 20 Your ISP should provide the IP address of one or more domain name servers Enter those addresses on this page 4 19 CONFIGURING THE BARRICADE WAN PPPoE PPP over Ethernet ele RESTE SMC System WAN PPPoE Interface Parameter a PPPoE Interfa Disable 7 LAN NAT Routing system Firewall lt SNMP ADSL Tools Status i 2 Parameter Description Enable Disable Enables Disables the PPPoE Interface IP Address If your IP address is assigned by the ISP each time you connect leave this field all zeros Otherwise enter your ISP supplied static IP address here Subnet Mask If your subnet mask is assigned by the ISP each time you connect leave this field all zeros Otherwise enter your subnet mask here 4 20 WAN Parameter Description VPI VCI Encapsulation Idle Time Minute ISP Name Virtual Path Identifier VPI and Virtual Circuit Identifier VCI Data flows are broken up into fixed length cells each of which contains a Virtual Path Identifier VPI that identifies the path between two nodes and a Virtual Circuit Identifier VCI that identifies the data channel within that virtual path Each virtual circuit maintains a constant flow of cells between the two end points When there is no data to transmit empty c
12. If you have a client PC that cannot run an Internet application properly Ki from behind the firewall you can open the client up to unrestricted two way Internet access Enter the IP address of a DMZ Demilitarized Zone host on this screen Adding a client to the DMZ may expose your local network to a variety of security risks so only use this option as a last resort SNMP Community SMC System lt WAN LAN NAT Routing system Firewall SNMP ADSL Tools Status gt Oba aanG R So SNMP Community In the context of SNMP a relationship between an agent and a set of SNMP managers defines security characteristics The community concept is a local one defined at the agent The agent establishes one community for each desired combination of authentication access control and proxy characteristics Each community is given a unique within this agent community name and the management stations within that community are provided with and must employ the community name in all get operations The agent may establish a number of communities with overlapping management station membership o Community SNMP Use the SNMP configuration screen to display and modify parameters for the Simple Network Management Protocol SNMP A computer attached to the network called a Network Management Station NMS can be used to access this information Access rights to the agent are controlled by c
13. conce 4 40 Intrusion Detection SMC System LAN NAT Routing system Firewall SNMP ADSL Tools Status Intrusion Detection FIREWALL When the SPI Stateful Packet Inspection firewall feature is enabled all packets can be blocked Stateful Packet Inspection SPI allows full support of different application types that are using dynamic port numbers For the applications checked in the list below the Barricade will support full operation as initiated from the local LAN The Barricade firewall can block common hacker attacks including IP Spoofing Land Attack Ping of Death IP with zero length Smurf Attack UDP port loopback Snork Attack TCP null scan and TCP SYN flooding Enable SPI and Anti DoS firewall protection Yes C No Stateful Packet Inspection e When hackers attempt to enter your network we can alert you by e mail Your E mail Address J SMTP Server Address POP3 Server Address J User name Password J Connection Policy Fragmentation half open wait 10 secs TCP SYN wait fo sec TCP FIN wait E sec TCP connection idle timeout eoo sec UDP session idle timeout Fo sec H 323 data channel idle timeout F 80 sec DoS Detect Criteria Total incomplete TCP UDP sessions HIGH aoo session Total incomplete TCP UDP sessions LOW 250 session Incomplete TCP UDP sessions per min HIGH 250 session Incomplete TCP UDP sessions per
14. 1 1 Features and Benefits pida pira dir ad 1 1 Applications a ibi db e a Virus ot aac Me ON bt EEE 1 3 Installati n 16 scsi CARER CGS 2 1 Package Contents catas Maat in ate 2 1 SysteinRequitenents n gin saan ie wa ea Ae Bee dd Be 2 2 Hardware Description 0 cee eens 2 3 LEDS gees dida E dE eS ADO SON e DO 10d di 2 4 Connect the System puritanos dd a 2 5 Connect the ADSL Line 0 ee a ees 2 6 Phone Line Configuration 0 0 0 0 6 2 6 Connect the Power Adapter 0 eee cece eee 2 8 Configuring Client PCs 0 cee cece eee 3 1 TCP IP Configuration cocida ee aw aw ek 3 1 Configuring the Barricade o ooooooo o 4 1 Navigating the Web Browser Interface 0 0 0 6 0 cc cece cece 4 2 Making Configuration Changes 00 0 eee eee eee 4 2 Setup Wizard whet eA es ad A ST 4 3 Time AO a Atel ed cea has 4 3 Internet Shatin it Whee es ead ian he ha Pah 4 4 Parameter Setting aria iia ete Aa eae Rade 4 5 FRIST 4 Neto A A E OE a DATA NE 4 6 PPPROEL 8 PPPOA gaa eigen i wie aonane es aeh 4 7 A E A O EA 4 8 Multiple Protocol over ATM Mode ooooccccooccccccc o 4 10 Eras e A E 4 11 Advanced Epi de 4 13 Navigating the Web Browser Interface oooo oooooomoccccoom 4 13 Making Configuration Changes ooooocccoooorocccccco 4 15 System Settings esas age i E a aae EA a 8 mel Acad cal 4 16 TimeZone ia a er ctas 4 16 TABLE OF CONTENTS Password Settings acti dida 4 17 Remote Management 6
15. 4 25 CONFIGURING THE BARRICADE NAT 4 26 Some applications require multiple connections such as Internet gaming videoconferencing Internet telephony and others These applications may not work when Network Address Translation NAT is enabled If you need to run applications that require multiple connections use these pages to specify the additional public ports to be opened for each application Address Mapping Routing system Firewall SNMP ADSL Tools Status NAT Address Mapping Network Address Translation NAT allows IP addresses used in a private local network to be mapped to one or more addresses used in the public global Internet This feature limits the number of public IP addresses required frorn the ISP and also maintains the privacy and security of the local network We allow one or more than one public IP address to be mapped to a pool of local addresses 1 Gobari 0 fo fo 0 is transformed as multiple virtual IPs from 192 168 2 0 to 192168 2 0 2 Global iP 0 jo fa 0 is transformed as multiple virtual IPs from 192 168 2 0 to 192 168 2 0 3 Global IP D B 7 ct is transformed as multiple virtual IPs from 192 168 2 0 to192 168 2 0 4 Global IP a bB P a is transformed as multiple virtual IPs from 192 168 2 0 to 192 168 2 0 5 Globa fo fo Jo fo is transformed as multiple virtual IPs from 192 168 2 0 to 192 168 2 0 6 Global IP Do a o o is transformed as multiple
16. 4 or Netscape on page 5 5 Obtain IP Settings from Your Barricade Now that you have configured your computer to connect to your Barricade it needs to obtain new network settings By releasing old DHCP IP settings and renewing them with settings from your Barricade you will verify that you have configured your computer correctly i N US Accessories 1 From the Windows desktop sisi A Seto x click Start Programs and E Y Documents Command Prompt then click Command 3 Eh Settings gt Ey Windows NT Explorer Prompt 5 Al Find gt E Administrative Tools Common gt Fas S Barricade Utility cc z S Help fo Startup 2 Inthe Command Prompt Fy 5 E Bun E WLAN Bridge Utility window type IPCONFIG E RELEASE and press the E MJ ShutDown lt ENTER gt key icrosoft Windows 2000 Ue KC gt Copyright 1985 1999 Mi M gt IPCONFIG RELEASE Windows 2888 IP Configuration IP address successfully released for adapter Local Area Connection 1 5 9 CONFIGURING CLIENT TCP IP 3 Type IPCONFIG RENEW and press the lt ENTER gt key Verify that your IP Address is now 192 168 2 xxx your Subnet Mask is 255 255 255 0 and your Default Gateway is 192 168 2 1 These values confirm that your Barricade is functioning ft Windows 2008 Version 5 08 21951 Kc Copyright 1985 1999 Microsoft Corp gt IPCONFIG RELEASE lindows 2808 IP Configuration
17. LAN Verify that the IP addresses are properly configured For most applications you should use the Barricade s DHCP function to dynamically assign IP addresses to hosts on the attached LAN However if you manually configure IP addresses on the LAN verify that the same network address network component of the IP address and subnet mask are used for both the Barricade and any attached LAN devices Be sure the device you want to Ping or from which you are Pinging has been configured for TCP IP Troubleshooting Chart Symptom Action Management Prob ems Cannot connect using the Web browser Forgot or lost the password Be sure to have configured the Barricade with a valid IP address subnet mask and default gateway Check that you have a valid network connection to the Barricade and that the port you are using has not been disabled Check the network cabling between the management station and the Barricade Press the Reset button on the rear panel holding it down for at least five seconds to restore the factory defaults A 3 TROUBLESHOOTING A 4 APPENDIX B CABLES Ethernet Cable Caution Do not plug a phone jack connector into an RJ 45 port For Ethernet connections use only twisted pair cables with RJ 45 connectors that conform to FCC standards Specifications Cable Types and Specifications Cable Type Max Length Connector 10BASE T
18. Parameter ADSL Description Status Line Status Data Rate Upstream Downstream Operation Data Defect Indication Noise Margin Upstream Downstream Output Power Attenuation Upstream Downstream Fast Path FEC Correction Interleaved Path FEC Correction Fast Path CRC Error Interleaved Path CRC Error Shows the current status of the ADSL line Actual and maximum upstream data rate Actual and maximum downstream data rate Minimum noise margin upstream Minimum noise margin downstream Maximum fluctuation in the output power Maximum reduction in the strength of the upstream signal Maximum reduction in the strength of the downstream signal There are two latency paths that may be used fast and interleaved For either path a forward error correction FEC scheme is employed to ensure higher data integrity For maximum noise immunity an interleaver may be used to supplement FEC An interleaver is basically a buffer used to introduce a delay allowing for additional error correction techniques to handle noise Interleaving slows the data flow and may not be optimal for real time signals such as video transmission Indicates the number of Fast Path Cyclic Redundancy Check errors Indicates the number of Interleaved Path Cyclic Redundancy Check errors 4 51 CONFIGURING THE BARRICADE 4 52 Parameter Description Loss of Signal Defect Loss of Frame Defect Loss o
19. Proxies Configure proxies to access the Internet A network proxy is used to provide additional security between your computer and the Internet usually along with a firewall and or to increase performance between networks by reducing redundant traffic via caching Your system adminstrator can provide you with proper proxy settings Direct connection to the Internet Manual proxy configuration O Automatic proxy configuration Configuration ation Curt __ o ie cancer oe CONFIGURING YOUR MACINTOSH COMPUTER Obtain IP Settings from Your Barricade Now that you have configured your computer to connect to your Barricade it needs to obtain new network settings By releasing old DHCP IP settings and renewing them with settings from your Barricade you can verify that you have configured your computer correctly 1 Pull down the Apple Menu Click Control Panels and select TCP IP 2 Your new settings are shown in the TCP IP window Verify that your IP Address is now 192 168 2 xxx your Subnet Mask is 255 255 255 0 and your Default Gateway is 192 168 2 1 These values confirm that your Barricade is functioning About This Computer File Edit View Special Help Apple DVD Player Ap Apple System Profiler Calculator 2 Chooser 8 Clipboard alias Control Panels i Favorites Y Key caps E Mail al Microsoft Office 98 gt GF Network Browser K Note Pad ali
20. gt key Verify that your IP Address is now 192 168 2 xxx your Subnet Mask is 255 255 255 0 and your Default Gateway is 192 168 2 1 These values confirm that your ADSL Router is functioning ex Command P oo C gt ipconfig rele Windows IP Configuration Ethernet adapter Local Area Connection Connection ecific DNS Suffix IP Addres Subnet M is Default Gateway C gt ipconfig renew Mindows IP Configuration Ethernet adapter Local Area Connection Connection ific DNS Suffix IP Addre Subnet Mas Default Type EXIT and press lt ENTER gt to close the Command Prompt window Your computer is now configured to connect to the Barricade CONFIGURING YOUR MACINTOSH COMPUTER Configuring Your Macintosh Computer You may find that the instructions here do not exactly match your operating system This is because these steps and screenshots were created using Mac OS 8 5 Mac OS 7 x and above are similar but may not be identical to Mac OS 8 5 Follow these instructions 1 Pull down the Apple Menu Click Control Panels and select TCP IP 2 Inthe TCP IP dialog box make sure Ethernet is selected in the Connect via field About This Computer File Edit View Special Help Apple DVD Player D Apple System Profiler E Calculator gt Chooser 8 Clipboard alias 5 Control Panels Qj Favorites Key Caps Mail al Microsoft Office 98
21. port is requested When particular types of traffic are checked only the particular type of traffic initiated from the Internal LAN will be allowed For example if the user only checks FTP Service in the Stateful Packet Inspection section all incoming traffic will be blocked except FTP connections initiated from the local LAN Prevents a PING on the Gateway s WAN port from being routed to the network 4 43 CONFIGURING THE BARRICADE 4 44 Description Parameter Defaults RIP Defect Enabled When hackers attempt to enter your network we can alert you by e mail Your E Mail Address SMTP Server Address POP3 Server Address User Name Password Connection Policy Fragmentation 10 sec half open wait TCP SYN wait 30 sec TCP FIN wait 5 sec If an IPX RIP request packet is not replied to by the router it will stay in the input queue and not be released Accumulated packets could cause the input queue to fill causing severe problems for all protocols Enabling this feature prevents the packets accumulating Enter your e mail address Enter your SMTP server address usually the part of the e mail address following the sign Enter your POP3 server address usually the part of the e mail address following the sign Enter your email account user name Enter your email account password Configures the number of seconds that a packet state structure remains active When t
22. provide a static IP address and associated numbers which you must enter manually How your ISP assigns your IP address determines how you need to configure your computer 5 6 Follow these instructions 1 From the Windows desktop click Start Settings Control Panel 2 Double click the Network icon 3 Select the Protocols tab 4 Double click TCP IP Protocol 5 Select the IP Address tab 6 In the Adapter drop down list be sure your Ethernet adapter is selected 7 If Obtain an IP address automatically is already E selected your computer is already configured for DHCP Click Cancel to close each window and skip to Disable HTTP Proxy on page 5 9 8 In the TCP IP Properties dialog box Winbows NT 4 0 gt t Taskbar amp Start Menu lolx a sg Console Add Remove Date Time Devices Display Programs 3 pee a us O Fonts Internet Keyboard Modems Mouse Multimedia PC Card Ports PCMCIA Identification Services Protocols Adapters Bindings Network Protocols p NetBEUI Protocol Microsoft TCP IP Properties 12 x IP Address DNS WINS Address Routing An IP address can be automatically assigned to this network card by a DHCP server If your network does not have a DHCP server ask your network administrator for an address and then type it in the space below Obtain an IP address from a DHC
23. routers support the protocol IP Security Provides IP network layer encryption IPSec can support large encryption networks such as the Internet by using digital certificates for device authentication CHAPTER 2 INSTALLATION Before installing the Barricade Broadband Router with built in ADSL Modem verify that you have all the items listed under Package Contents If any of the items are missing or damaged contact your local distributor Also be sure that you have all the necessary cabling before installing the Barricade After installing the Barricade refer to Configuring the Barricade on page 4 1 Package Contents After unpacking the Barricade check the contents of the box to be sure you have received the following components e Barricade ADSL Router SMC7404BRA EU e Power adapter One CAT 5 Ethernet cable Telephone patch cable e Documentation CD e This User Guide e ADSL service ordering guide Immediately inform your dealer in the event of any incorrect missing or damaged parts If possible please retain the carton and original packing materials in case there is a need to return the product 2 1 INSTALLATION System Requirements 2 2 You must meet the following minimum requirements Internet access from your Internet Service Provider ISP using a DSL modem A PC using a fixed IP address or dynamic IP address assigned via DHCP as well as a gateway server address and DNS s
24. see 5 4 TABLE OF CONTENTS Obtain IP Settings from Your ADSL Router 5 5 AWitid ows NORA LO set cotta hse ds ob i NT 5 6 Disable HTTP Proxy iii ita tac ee Ad 5 9 Obtain IP Settings from Your Barricade o oo oooomoo 5 9 Windows 20001 i sia oA Ansa ha gedaan Badal Shes deta 5 11 Disable HETE Proxy eS A anes EA eS y 5 13 Obtain IP Settings from Your Barricade oo oooooo 5 13 Windows XP iio saab Ges REA he tn BAe a Bias eee Ge Abaya aed 5 15 Disable HETP Proxy cai oa tae desata 5 17 Obtain IP Settings from Your Barricade ooo o ooooo o 5 17 Configuring Your Macintosh Computer s s s sssr eee eee 5 19 Disable FLETE Proxy tiendan alitas Dd tn ido 5 21 Obtain IP Settings from Your Barricade ooo oooooo o 5 23 Configuring Printer Services oooooooooo 6 1 Install the Printer Port Monitor oooooooooomoronrcro amooo 6 1 Configure the Print Servet oc aia as EN 6 4 Configure the Network Printer in Windows 95 98 Me 2000 6 4 Configure the Network Printer in Windows NT 6 6 Configure the Network Printer in Unix Systems 6 7 Troubleshooting spin Vk ag os Seg EHO ES A 1 C bles onc ai is Bcd els Wis eels os B 1 Ethernet Cable sc icve nce i a Goes B 1 Specifications a a hie Santa ates aS B 1 Wiring Conventions 6 0 6 cece eee cence ee B 1 RJ 45 Port Ethernet Connection ooooooooccccccoooacocccc ooo B 2 Pin Assignments 2 0 inate ds Rae alae ed a B 2
25. virtual IPs from 192 168 2 0 to 192 168 2 0 7 Globalip 0 fo 0 fa is transformed as multiple virtual IPs from 192 168 2 0 to 192 168 2 0 a Globa fo jo fo fo istransformed as multiple virtual IPs from 192 168 2 o to 192 168 2 o 9 Global IP o E o E o Jo is transformed as multiple virtual IPs E e zzz from 192 168 2 o to 192 168 2 o 10 Global IP 0 Jo l o o is transformed as multiple virtual IPs from 192 168 2 o to 192 168 2 o E Use Address Mapping to allow a limited number of public IP addresses to be translated into multiple private IP addresses for use on the internal LAN network This also hides the internal network for increased privacy and security 4 27 CONFIGURING THE BARRICADE Virtual Server Virtual Server El You can configure the Barricade as a virtual server so that remote users accessing services such as the Web or FTP at your local site via public IP addresses can be automatically redirected to local servers configured with private IP addresses In other words depending on the requested service TCP UDP port number the Barricade redirects the external service request to the appropriate server located at another internal IP address Routing system Firewall ADSL Tools m Status AE 192168 2 L pies 2 192168 2 I 2 Dee 3 1921682 I a up l 4 192168 2 I z tee 5 192168 2 I z ua l 6 192168 2 I gt Mo 7 192168 2 I up Caan 2 3 192168 2 I E ee
26. Cat 3 4 5 100 ohm UTP 100 m 328 ft RJ 45 100BASE TX Cat 5 100 ohm UTP 100 m 328 ft RJ 45 Wiring Conventions For Ethernet connections a twisted pair cable must have two pairs of wires Each wire pair is identified by two different colors For example one wite might be red and the other red with white stripes Also an RJ 45 connector must be attached to both ends of the cable Each wire pair must be attached to the RJ 45 connectors in a specific orientation The following figure illustrates how the pins on an Ethernet RJ 45 connector ate numbered Be sure to hold the connectors in the same orientation when attaching the wires to the pins Figure B 1 RJ 45 Ethernet Connector Pin Numbers B 1 CABLES RJ 45 Port Ethernet Connection Use the straight through CAT 5 Ethernet cable provided in the package to connect the Barricade to your PC When connecting to other network devices such as an Ethernet switch use the cable type shown in the following table Attached Device Port Type Connecting Cable Type MDI X Straight through MDI Crossover Pin Assignments With 10BASE T 100BASE TX cable pins 1 and 2 are used for transmitting data and pins 3 and 6 for receiving data RJ 45 Pin Assignments Pin Number Assignment 1 Txt 2 Tx 3 Rx 6 Rx The and signs represent the polarity of the wires that make up each wire pair B 2 RJ 45
27. DE Finish e gt 0184 94u3 99 SMC Q 1 Time Zone You have filled in the following Configuration Parameters 2 Internet Sharing 3 Parameter Setting 4 Finish ADSL operation mode WAN PPP over Ethernet 0 34 LLC pppox4D4 DHCP Parameters Default G y 192 168 2 1 255 255 255 0 192 168 2 1 192 166 2100 100 Parameter Description ADSL Operation Mode WAN Protocol Indicates the protocol used VPI VCI Virtual Path Identifier VPT and Virtual Circuit Identifier VCI AALS Encapsulation Shows the packet encapsulation type ISP Parameters Username The ISP assigned username Password The password hidden 4 8 Parameter SETUP WIZARD Description DHCP Parameters Default Gateway Subnet Mask Name Server 1 Name Server 2 Name Server 3 Start IP Address Number of IP The default gateway IP address If the Barricade cannot find the destination address within its local network it will forward the packets to the Default Gateway usually your ISP will supply this address The network subnet mask Primary name server IP address Alternate name server IP address Alternate name server IP address Start IP Address of DHCP assigned IP addresses Number of IPs available for assignment by the DHCP server Your Barricade is now setup Go to Troubleshooting on page A 1 if you cannot make a connection to the Internet 4 9 CONFIGURING THE BARRICADE Multiple Protocol over ATM Mode
28. FOR INCIDENTAL CONSEQUENTIAL INDIRECT SPECIAL OR PUNITIVE DAMAGES OF ANY KIND OR FOR LOSS OF REVENUE LOSS OF BUSINESS OR OTHER FINANCIAL LOSS ARISING OUT OF OR IN CONNECTION WITH THE SALE INSTALLATION MAINTENANCE USE PERFORMANCE FAILURE OR INTERRUPTION OF ITS PRODUCTS EVEN IF SMC OR ITS AUTHORIZED RESELLER HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES SOME COUNTRIES DO NOT ALLOW THE EXCLUSION OF IMPLIED WARRANTIES OR THE LIMITATION OF INCIDENTAL OR CONSEQUENTIAL DAMAGES FOR CONSUMER PRODUCTS SO THE ABOVE LIMITATIONS AND EXCLUSIONS MAY NOT APPLY TO YOU THIS WARRANTY GIVES YOU SPECIFIC LEGAL RIGHTS WHICH MAY VARY FROM COUNTRY TO COUNTRY NOTHING IN THIS WARRANTY SHALL BE TAKEN TO AFFECT YOUR STATUTORY RIGHTS Under the limited lifetime warranty internal and external power supplies fans and cables are covered by a standard one year warranty from date of purchase LIMITED WARRANTY 111 Full Installation Manual Full installation manuals are provided on the Installation CD Rom Manuals in other languages than those included on the CD Rom are provided on www smc europe com section support Firmware and Drivers For latest driver technical information and bug fixes please visit www smc europe com section support Contact SMC Contact details for your relevant countries are available on www smc europe com and www smc com Statement of Conditions In line with our continued efforts to improve internal design
29. GF Network Browser K Note Pad alias E QuickTime Player Recent Applications E Recent Documents 53 Recent Servers i Remote Access Status i Scrapbook amp Sherlock 2 42 SimpleText alias Y Stickies gt vvv Appearance Apple Menu Options AppleTalk ColorSync Configuration Manager Control Strip Date Time Energy Saver Extensions Manager File Exchange File Sharing General Controls Internet lomega Drive Options Keyboard Launcher Location Manager Memory Modem Monitors Mouse MouseWare Multiple Users QuickTime Settings Remote Access Software Update Sound Speech Startup Disk TCP IP Text USB Printer Sharing Web Sharing CONFIGURING CLIENT TCP IP 3 If Using DHCP Server is already E TCP IP B Connect via Ethernet selected in the Setup Configure Using DHCP Server Configure field IP Address lt will be supplied by server gt your computer is already configured Subnet mask lt will be supplied by server gt for DHCP Close the Router address lt will be supplied by server gt TCP IP dialog box Search domains Name server addr lt will be supplied by server gt and skip to Disable HTTP Proxy on page 5 21 el 4 If there is IP Address information on the TCP IP screen it should be recorded Use the spaces below to record the current se
30. IP address succ ully released for adapter Local Area Connection 1 M gt IPCONFIG RENEW lindows 2000 IP Configuration Ethernet adapter Local Area Connection 1 Connection specific DNS Suffix g IP Bdir ss a 2 56 0 ete Fs ie 192 168 2 125 Subnet Mask ss s o a 255 255 255 0 Default Gateway sisare 192 168 2 254 4 Type EXIT and press lt ENTER gt to close the Command Prompt window Your computer is now configured to connect to the Barricade 5 10 Winpows 2000 Windows 2000 1 On the Windows desktop click Start Settings Network and Dial Up Connections 2 Click the icon that corresponds to the Local Area Connection 1 Status connection to your Barricade 3 The connection status screen will open Click Properties 5 11 CONFIGURING CLIENT TCP IP 4 Double click Internet 21x Protocol TCP IP General Sharing Connect using 5 If there is IP Address EEE Configure information on the Internet Protocol TCP IP Properties dialog box noma pe recorded Use axl the spaces below to record Genera Components checked are used by this connection M Client for Microsoft Networks MB SMC EZStart Service SI File and Printer Sharing for Microsoft Networks Internet Protocol TCP IP the current settings You can get IP settings assigned automatically if your network supports this capability Otherwise you
31. ISP 4 29 CONFIGURING THE BARRICADE Routing System These pages define routing related parameters including static routes and RIP Routing Information Protocol parameters Static Route e gt 98419u9 12 3 SMC 4 30 System WAN LAN NAT Routing system Static Route Parameter Please Enter the Following Configuration Parameters Table of current static route entries click lt add gt button to add new entry or click lt delete gt or lt modify gt button to change the selected entry Firewall index Network Address Subnetmask Gateway 4 192 168 4 1 255 255 255 0 64 147 25 20 C2 192 168 44 1 255 255 0 0 64 147 25 21 63 192 168 33 1 255 255 0 0 64 147 25 22 Add Delete Modity Parameter Description Index Check the box of the route you wish to delete or modify Network Address Enter the IP address of the remote computer you wish to set a static route to Subnet Mask Enter the subnet mask of the remote network you wish to set a static route to Gateway Enter the WAN IP address of the gateway to the remote network Click Add to add a new static route to the list or check the box of an already entered route and click Modify Clicking Delete will remove an entry from the list RIP SMC System lt WAN LAN NAT Routing system Firewall SNMP ADSL Tools Status i 2 e gt 084 959 D3 RIP Parame
32. MC is a registered trademark and EZ Connect is a trademark of SMC Networks Inc Other product and company names are trademarks or registered trademarks of their respective holders
33. P Click Cancel to close each window and skip to Disable HTTP Proxy on page 5 4 If not locate your IP address and subnet mask Record the numbers in the space provided on the following page EJ Control Panel AddNew Add Remove Options Hardware Programs Control P on Pane A AA Find Fast Fonts Game Use the settings in Controllers Control Panel to personalize your computer Mail Modems Select an item to view its description Microsoft Home Technical Support ODBC Data Sources 32bit Passwords E Client for Microsoft Networks Microsoft Family Logon Dial Up Adapter SMC EZ Card 10 100 SMC1211TX TCP IP gt Dial Up Adapter Winbows 95 98 ME Click the Gateway tab and TCP IP Properties record the numbers listed under Installed gateways Click the DNS Configuration tab Locate the DNS servers listed under DNS Server Search Order Record any listed HEEE TCP IP Pi ti addresses Properties After writing down your settings check to make sure you have recorded them ee pened correctly Click the IP sees TaN Address tab and then click Obtain an IP address automatically Click OK Windows may need your Windows 95 98 Me CD to copy some files After it finishes copying it will prompt you to restart your ERES system Click Yes and 7 your computer will shut ca a down and restart TCP IP Configurat
34. P Server Enabled 0 52 Apr 15 2002 10 53 20 Gateway 0 0 0 0 Firewall Enabled Boot Code Version V1 12 Primary DNS 168 95 1 1 LAN MAC Address Secondary DNS 0 0 0 0 00 70 46 00 00 01 WAN MAC Address 00 70 46 00 00 02 Hardware Version 01 Serial Num A000000001 Security Log DHCP Client Log View any attempts that have been made to gain View information on LAN DHCP clients currently access to vour network linked to the HomeGatewav ip 192 168 2 101 mac 00 10 B5 The security log may be saved to a file by clicking Save and choosing a location 4 56 STATUS The following items are included on this screen Parameter Description INTERNET Displays WAN connection type and status GATEWAY Displays system IP settings as well as DHCP Server and Firewall status INFORMATION Displays the number of attached clients the firmware versions the physical MAC address for each media interface and for the Barricade as well as the hardware version and serial number Security Log Displays illegal attempts to access your network DHCP Client Log Displays information on DHCP clients on your network 4 57 CONFIGURING THE BARRICADE 4 58 CHAPTER 5 CONFIGURING CLIENT TCP IP After completing hardware setup by connecting all your network devices you need to configure your computer to connect to the Barricade First determine how your ISP issues your IP address Many ISPs issue these numbers automati
35. P server Specify an IP address IP Address 192 168 123 4 Subnet Mask 255 255 255 0 Default Gateway F CONFIGURING CLIENT TCP IP under the IP address tab locate your IP address subnet mask and default gateway Record these values in the spaces provided below 9 Click the DNS tab to erry eer 1 see the primary and IPAddress DNS WINS Address Routing secondary DNS servets a Record these values in Host Name Domain the spaces provided DEMCOMPUTER m DNS Service Search Order UBT 10 After writing down your Down IP settings click the IP Add Edit Remove address tab Select a Pz wee Obtain IP address M Domain Suffix Search Order automatically and click am OK Click OK again Down to close the Network below Remo Oye window 11 Windows may copy some emea a files and will then prompt you to restart your system Click Yes and your computer will shut down and restart TCP IP Configuration Setting IP Address Subnet Mask Default Gateway Primary DNS Server Secondary DNS Server Host Name 5 8 Winbows NT 4 0 Disable HTTP Proxy You need to verify that the HTTP Proxy feature of your Web browser is disabled This is so that your browser can view the Barricade s HTML configuration pages Determine which browser you use and refer to Internet Explorer on page 5
36. Port ETHERNET CONNECTION Straight Through Wiring If the port on the attached device has internal crossover wiring MDI X then use straight through cable Straight Through Cable Pin Assignments End 1 End 2 1 Ix 1 Ix 2 Ix 2 Tx 3 Rx 3 Rx 6 Rx 6 Rx Crossover Wiring If the port on the attached device has straight through wiring MDI use crossover cable Crossover Cable Pin Assignments End 1 End 2 1 Ix 3 Rx 2 Tx 6 Rx 3 Rx 1 Ix 6 Rx 2 Tx B 3 CABLES ADSL Cable Connection Use standard telephone cable to connect the RJ 11 telephone wall outlet to the RJ 11 ADSL port on the ADSL Router Caution Do not plug a phone jack connector into an RJ 45 port Specifications Cable Types and Specifications Cable Type Connector ADSL Line Standard Telephone Cable Rj 11 Wiring Conventions B 4 For ADSL connections a cable requires one pair of wires Each wire is identified by different colors For example one wire might be red and the other ted with white stripes Also an RJ 11 connector must be attached to both ends of the cable Each wire pair must be attached to the RJ 11 connectors in a specific orientation The following figure illustrates how the pins on the RJ 11 connector ate numbered Be sure to hold the connectors in the same orientation when attaching the wires to the pin
37. a dialog box or a drop down list Once a configuration change has been made on a page be sure to click the Apply or Next button at the bottom of the page to enable the new setting Note To ensure proper screen refresh after a command entry be sure that Internet Explorer 5 0 is configured as follows Under the menu Tools Internet Options General Temporary Internet Files Settings the setting for Check for newer versions of stored pages should be Every visit to the page SETUP WIZARD Setup Wizard Time Zone Click on Setup Wizard The first item in the Setup Wizard is Time Zone setup gt o004 89309 29m 8 SMC 1 Time Zone 1 Time Zone O 2 Operation Mode O 3 Modify Parameters o Set the time zone for the HomeGateway This information is used for log entries and firewall settings 4 Confirm Set Time Zone GMT 08 00 Pacific Time US amp Canada Tijuana z I Enable Daylight Savings Start Daylight Savings Time Janay z z End Daylight Savings Time January 1 gt For accurate timing of log entries and system events you need to set the time zone Select your time zone from the dropdown list If your area requires it check to enable the clock for daylight saving changes and enter the Daylight Saving Time start and end dates for your location 4 4 CONFIGURING THE BARRICADE Internet Sharing Select the operation mode Go to PPPoE amp PPPoA
38. all settings Routing system Set Time Zone Firewall GMT 08 00 Pacific Time US amp Canada Tijuana Y SNMP ADSL I Enable Daylight Savings Tools Status Start Daylight Savings Time January afi End Daylight Savings Time January fi Set your local time zone This information is used for log entries and client filtering 4 16 SYSTEM SETTINGS Password Settings e gt 984 94u93 99 SMC System Password Settings Set a password to restrict management access to the Barricade If you want to manage the Barricade from a remote location outside of the local network you must also specify the IP address of the remote PC You can do this in the Firewall Access Control menu Routing system Current Password Idle Time Out 10 Min Firewall Idle Time 0 NO Time Out SNMP New Password ADSL Tools e Re Enter Password for Verification Status A eee Use this page to restrict access based on a password By default there is no password For security you should assign one before exposing the Barricade to the Internet Passwords can contain from 3 12 alphanumeric characters and are not case sensitive Note If your password is lost or you cannot gain access to the user interface press the reset button colored blue on the rear panel holding it down for at least five seconds to restore the factory defaults Default is no password CONFIGURING THE BARRICADE Remote Mana
39. as E QuickTime Player Recent Applications E Recent Documents Es Recent Servers i Remote Access Status F Scrapbook amp Sherlock 2 SimpleText alias Q Stickies vvv Appearance Apple Menu Options AppleTalk ColorSync Configuration Manager Control Strip Date amp Time Energy Saver Extensions Manager File Exchange File Sharing General Controls Internet lomega Drive Options Keyboard Launcher Location Manager Memory Modem Monitors Mouse MouseWare Multiple Users QuickTime Settings Remote Access Software Update Sound Speech Startup Disk 3 Close the TCP IP m TCP IP window rT Connect via Setup Now your computer is configured to connect to the Barricade Name server addr Configure Using DHCP Server DHCP Client ID IP Address lt will be supplied by server gt Subnet mask lt will be supplied by server gt Router address lt will be supplied by server gt lt will be supplied by server gt Search domains 5 23 CONFIGURING CLIENT TCP IP 5 24 CHAPTER 6 CONFIGURING PRINTER SERVICES To use the print server built into the Barricade you must first install the Port Monitor program as described in the following section for Windows 95 98 Me NT 2000 XP To configure the Barricade Print Server for Windows 95 98 Me NT 2000 XP or Unix s
40. atching frames are forwarded Interface The local interface through which the next hop of this route is reached Metric When a router receives a routing update that contains a new or changed destination network entry the router adds 1 to the metric value indicated in the update and enters the network in the routing table Note Most modern routers support RIP 2 so there is usually no need for a static route table 4 33 CONFIGURING THE BARRICADE Firewall 4 34 gt 90419a939 gt 39 SMC gt System WAN LAN NAT Routing system The Barricade provides extensive firewall protection by restricting connection parameters to limit Firewall the risk of hacker attack and defending against a wide array of common attacks However for applications that require unrestricted access to the Internet you can configure a specific client server as a demilitarized zone DMZ Security Settings Firewall Enable or disable Firewall module function Enable Disable The Barricade s firewall enables access control of client PCs blocks common hacker attacks including IP Spoofing Land Attack Ping of Death IP with zero length Smurf Attack UDP port loopback Snork Attack TCP null scan and TCP SYN flooding The firewall does not significantly affect system performance and we advise leaving it enabled to protect your network Note When you check a radio button in the Enable or disable Firewall modul
41. cally using Dynamic Host Configuration Protocol DHCP Other ISPs provide a static IP address and associated numbers which you must enter manually How your ISP assigns your IP address determines how you need to configure your computer See this section for Windows 95 98 Me configuration See Windows NT 4 0 on page 5 6 Windows 2000 on page 5 11 Windows XP on page 5 15 or Configuring Your Macintosh Computer on page 5 19 depending on your operating system Windows 95 98 Me You may find that the instructions in this D Windows Update Programs Favorites Documents section do not exactly match your version of Windows This is because these steps and screenshots were created from Windows 98 Windows 95 and Windows Millennium Edition ate similar but not identical to Windows 98 J Control Panel Printers P Taskbar amp Start M ey Eolder Options 2 Heb A Active Desktop B Windows Update 1 From the Windows desktop click the Start button Choose Settings and then click Control Panel 5 1 CONFIGURING CLIENT TCP IP 2 In Control Panel double click the Network icon In the Network window under the Configuration tab double click the TCP IP item listed for your network card Select the IP Address tab If Obtain an IP address automatically is already selected your computer is already configured for DHC
42. contain the program icon for uninstalling the port monitor and then click Next 5 Enter the printer port name that will be used to identify the port monitor in your system and click Next Select Port Name 6 When the setup program finishes installing the port monitor check Yes I want to restart my computer now and then click OK Reboot 7 7 After rebooting your computer add the Barricade print server to your system as described in the following section 6 3 CONFIGURE THE PRINT SERVER Configure the Print Server The Barricade s print server supports Microsoft Windows 95 98 Me NT 2000 XP and Unix If you are using Windows 95 98 Me NT 2000 XP first install the port monitor as described in the previous section before adding the Barricade s print server to your operating system Configure the Network Printer in Windows 95 98 Me 2000 1 Ona Windows 95 98 Me 2000 XP platform open the Printers window in the My Computer menu and double click the Add Printer icon Fi Printers 3 Specify the printer type attached to the Barricade 6 4 CONFIGURING PRINTER SERVICES 4 Select the monitored port The default port name is SMC100 Click the Configure Port button Add Printer Wizard Creates a file on disk Printer Port Castelle PTP Port 5 Enter the IP address of the Barricade and click OK Then click Next in t
43. detection and DMZ Community string and trap server setting Sets the ADSL operation type and shows the ADSL status Contains options to backup amp restore the current configuration restore all configuration settings to the factory defaults update system firmware or reset the system Provides WAN connection type and status firmware and hardware version numbers system IP settings as well as DHCP NAT Firewall info Displays the number of attached clients the firmware versions the physical MAC address for each media interface and the hardware version and serial number Shows the security and DHCP client log MAKING CONFIGURATION CHANGES Making Configuration Changes Configurable parameters have a dialog box or a drop down list Once a configuration change has been made on a page be sure to amp click the APPLY or NEXT button at the bottom of the page to make the new settings active Note To ensure proper screen refresh after a command entry check that Internet Explorer 5 0 is configured as follows Under the menu Tools Internet Options General Temporaty Internet Files Settings the setting for Check for newer versions of stored pages should be Every visit to the page 4 15 CONFIGURING THE BARRICADE System Settings Time Zone gt 904419ua93 8 9 SMC System Time Zone Set the time zone ofthe Barricade This information is used for log entries and firew
44. e with one that incorporates these newer technologies The standard limited warranty can be upgraded to a 5 year Limited Lifetime warranty by registering new products within 30 days of purchase from SMC or its Authorized Reseller Registration can be accomplished via the enclosed product registration card or online via the SMC web site Failure to register will not affect the standard limited warranty The Limited Lifetime warranty covers a product during the Life of that Product which is defined as a period of 5 years from the date of purchase of the product from SMC or its authorized reseller All products that are replaced become the property of SMC Replacement products may be either new or reconditioned Any replaced or repaired product carries either a 30 day limited warranty or the remainder of the initial warranty whichever is longer SMC is not responsible for any custom software or firmware configuration information or memory data of Customer contained in stored on or integrated with any products returned to SMC pursuant to any warranty Products returned to SMC should have any customer installed accessory or add on components such as expansion modules removed prior to returning the product for replacement SMC is not responsible for these items if they are returned with the product Customers must contact SMC for a Return Material Authorization number prior to returning any product to SMC Proof of purchase may be required Any pr
45. e function field be sure to click the APPLY button Access Control System WAN LAN NAT Routing system Firewall Access Control FIREWALL Access Control allows users to define the trafic type permitted or not permitted to WAN port service This page includes IP address filtering and MAC address filtering Enable Filtering Function Yes No Normal Filtering Table up to 10 computers oo foo foo foo foo oo foo fo_ foo oo o joo foo o oo oo oo foo oo oo Access Control allows users to define the outgoing traffic permitted or 4 35 CONFIGURING THE BARRICADE 4 36 not permitted through the WAN interface The default is to permit all outgoing traffic See the following page for details The Barricade can also limit the access of hosts within the local area network LAN The MAC Filtering Table allows the Barricade to enter up to 32 MAC addresses that are not allowed access to the WAN port The following items are on the Access Control screen Parameter Description Normal Filter
46. ectives the following standards were applied RFI Emission Limit class B according to EN 55022 1998 Limit class B for harmonic current emission according to EN 61000 3 2 1995 Limitation of voltage fluctuation and flicker in low voltage supply system according to EN 61000 3 3 1995 Immunity Product family standard according to EN 55024 1998 Electrostatic Discharge according to EN 61000 4 2 1995 Contact Discharge 4 kV Air Discharge 8 kV e Radio frequency electromagnetic field according to EN 61000 4 3 1996 80 1000 MHz with 1 kHz AM 80 Modulation 3 V m Electrical fast transient burst according to EN 61000 4 4 1995 AC DC power supply 1 kV Data Signal lines 0 5 kV e Surge immunity test according to EN 61000 4 5 1995 AC DC Line to Line 1 kV AC DC Line to Earth 2 kV e Immunity to conducted disturbances Induced by radio frequency fields EN 61000 4 6 1996 0 15 80 MHz with 1 kHz AM 80 Modulation 3 V m Power frequency magnetic field immunity test according to EN 61000 4 8 1993 1 A m at frequency 50 Hz e Voltage dips short interruptions and voltage variations immunity test according to EN 61000 4 11 1994 gt 95 Reduction 10 ms 30 Reduction 500 ms gt 95 Reduction 5000 ms LVD EN 60950 A1 1992 A2 1993 A3 1993 A4 1995 A11 1997 COMPLIANCES vi TABLE OF CONTENTS Introd ction ii NA a eS BSS 1 1 About the Batticade tte att oe tates alsa heme ha Ree Rene ees
47. ectly to the incoming ADSL line but you will have to add low pass filters to your phones as shown below Plain Old Telephone System POTS ak BR Voice LN Residential Voice 7 Filter Connection amp Data Point NID Voice y 8 Data ADSL Router Data gt YU myo or E oe s a NS Lo y N A f AS w Ethernet rw Y J hub or switch ot oe SS E Figure 2 2 Installing Without a Splitter Attach to Your Network Using Ethernet Cabling The four LAN ports on the Barricade auto negotiate the connection speed to 10 Mbps Ethernet or 100 Mbps Fast Ethernet as well as the transmission mode to half duplex or full duplex Use twisted pair cabling to connect any of the four LAN ports on the Barricade to an Ethernet adapter on your PC Otherwise cascade any of the LAN ports on the Barricade to an Ethernet hub or switch and then connect your PC or other network equipment to the hub or switch When 2 7 INSTALLATION inserting an RJ 45 connector be sure the tab on the connector clicks into position to ensure that it is properly seated Warning Do not plug a phone jack connector into an RJ 45 port This may damage the Barricade Notes 1 Use 100 ohm shielded or unshielded twisted pair cable with RJ 45 connectors for all Ethernet ports Use Category 3 4 or 5 for connections that operate at 10 Mbps and Category 5 for connections that operate at 100 Mbps Notes 2 Make sure each twisted pair cable length d
48. ee Configure the Print Server on page 6 4 Install the Printer Port Monitor Skip this section if you are using Unix For Windows 95 98 Me NT 2000 XP clients you need to install the port monitor program as described in this section 1 Insert the installation CD ROM into your CD ROM drive Under the PrintSvr directory run the setup exe program The Port Monitor installation program advises you to close all other Windows programs currently running on your computer Click Next to continue 6 1 INSTALL THE PRINTER Port MONITOR 2 The next screen indicates that the print client uses the TCP IP network protocol to monitor print requests Click Next Select Components x Select the network protocol which print monitor will use Clickt Next to continue with installation TCPAP Protocol lt Back Cancel 3 Select the destination folder and click on the Next button The setup program will then begin to install the programs into the destination folder Choose Destination Location x Setup will install Port Monitor in the following folder To install to this folder click Next To install to a different folder click Browse and select another folder You can choose not to install Port Monitor by clicking Cancel to exit Setup Destination Folder F Program Files Port Monitor Browse Cancel 6 2 CONFIGURING PRINTER SERVICES 4 Select the Program Folder that will
49. ells are sent When data needs to be transmitted it is immediately inserted into the cell flows Specifies how to handle multiple protocols at the ATM transport layer VC MUX Point to Point Protocol over ATM Virtual Circuit Multiplexer null encapsulation allows only one protocol running per virtual circuit with less overhead e LLC Point to Point Protocol over ATM Logical Link Control allows multiple protocols running over one virtual circuit uses slightly more overhead Enter the maximum idle time for the Internet connection After this time has been exceeded the connection will be terminated Choose the ISP to whom this connection will apply 4 21 CONFIGURING THE BARRICADE ATM 4 22 5 OF 44a 3 545 System WAN ATM Interface SI N EA AN AA Routing system 192 168 3 2 SNMP is wna 5 Status 1 d b Parameter Description Protocol e Disable Disables the connection 1483 Bridging Bridging is a standardized layer 2 technology It is typically used in corporate networks to extend the physical reach of a single LAN segment and increase the number of stations on a LAN without compromising performance Bridged data is encapsulated using the RFC1483 protocol to enable data transport e PPPoA Point to Point Protocol over ATM is a method of encapsulating data for transmission to a far point e 1483 Routing 1483 Routing allows a simple low cost connection to the Interne
50. erver address from your service provider A computer equipped with a 10 Mbps 100 Mbps or 10 100 Mbps Fast Ethernet card or a USB to Ethernet converter TCP IP network protocols installed on each PC that will access the Internet A Java enabled Web browser such as Microsoft Internet Explorer 4 0 or above or Netscape Communicator 4 0 or above installed on one PC at your site for configuring the Barricade HARDWARE DESCRIPTION Hardware Description The Barricade contains an integrated DSL modem and connects to the Internet or to a remote site using its RJ 11 WAN port It can be connected directly to your PC or to a local area network using any of the four RJ 45 Fast Ethernet LAN ports Access speed to the Internet depends on your service type Full rate ADSL provides up to 8 Mbps downstream and 640 kbps upstream G lite or splitterless ADSL provides up to 1 5 Mbps downstream and 512 Kbps upstream However you should note that the actual rate provided by specific service providers may vary dramatically from these upper limits Data passing between devices connected to your local area network can run at up to 100 Mbps over the Fast Ethernet ports The Barricade includes an LED display on the front panel for system power and port indications that simplifies installation and network troubleshooting It also provides the following ports on the rear panel Item Description LAN Fast Ethernet port
51. f Power Defect Fast Path HEC Error Interleaved Path HEC Error Statistics Received Superframes Interleaved Transmitted Superframes Interleaved Received Superframes Fast Transmitted Superframes Fast Momentary signal discontinuities Failures due to loss of frames Failures due to loss of power Fast Path Header Error Concealment errors Interleaved Path Header Error Concealment errors Superframes represent the highest level of data presentation Each superframe contains regular ADSL frames one of which is used to provide superframe synchronization identifying the start of a superframe Some of the remaining frames are also used for special functions Number of interleaved Superframes received Number of interleaved Superframes transmitted Number of fast Superframes received Number of fast Superframes transmitted TOOLS Tools Use the Tools menu to backup the current settings to restore previously saved settings or restore the factory default settings Configuration Tools e gt 0841909 15 3 SMC System Configuration Tools Use the Backup tool to save the Barricade s current configuration to a file named config bin on your PC You can then use the Restore tool to restore the saved configuration to the Barricade Firewall Alternatively you can use the Restore to Factory Defaults tool to force the Barricade to perform T SNMP a power reset and restore the o
52. ffecting outside access to your network 1 3 INTRODUCTION 1 4 DMZ Host Support Allows a networked computer to be fully exposed to the Internet This function is used when NAT and firewall security prevent an Internet application from functioning correctly Security The Barricade supports security features that deny Internet access to specified users or filter all requests for specific services the administrator does not want to serve The Barricade s firewall also blocks common hacker attacks including IP Spoofing Land Attack Ping of Death IP with zero length Smurf Attack UDP port loopback Snork Attack TCP null scan and TCP SYN flooding Virtual Private Network VPN The Barricade supports three of the most commonly used VPN protocols PPTP L2TP and IPSec These protocols allow remote users to establish a secure connection to their corporate network If your service provider supports VPNs then these protocols can be used to create an authenticated and encrypted tunnel for passing secure data over the Internet i e a traditionally shared data network The VPN protocols supported by the Barricade are briefly described below e Point to Point Tunneling Protocol Provides a secure tunnel for remote client access to a PPTP security gateway PPTP includes provisions for call origination and flow control required by ISPs L2TP merges the best features of PPTP and L2F Like PPTP L2TP requires that the ISP s
53. gement OF Aa 4aG S o SMC System Remote Management Set the remote management of the HomeGateway WAN LAN NAT Routing system Firewall SNMP ADSL Tools Status i LA By default management access is only available to users on your local network However you can also manage the Barricade from a remote host by entering the IP address of a remote computer on this screen Check the Enabled box to enable this function Note If you check Enable and specify an IP address of 0 0 0 0 any host can manage the Batricade 4 18 SYSTEM SETTINGS DNS gt OOF a0 ag SMC System A Domain Name System DNS server is like an index of IP addresses and Web addresses If you type a Web address into your browser such as www smc com a DNS server will find that WAN name in its index and find the matching IP address 202 42 118 226 Most ISPs provide a DNS LAN server for speed and convenience Since your Service Provider may connect to the Internet with NAT dynamic IP settings it is likely that the DNS server IPs are also provided dynamically However Routing system if there is a DNS server that you would rather use you need to specify the IP address here Firewall SNMP ADSL Tools Domain Name Server DNS Address 200 jo fic 1254 Status Secondary DNS Address optional fo Jo fo q0 Has your Internet service provider given you a DNS address
54. have 4 23 CONFIGURING THE BARRICADE LAN 9 OF da 4 54 SMC System WAN LAN Routing system network Firewall SNMP ADSL Tools Status LAN IP LAN Settings You can enable DHCP to dynamically allocate IP addresses to your client PCs or configure filtering NAT functions based on specific clients or protocols The Barricade must have an IP address for the local IP Address Pool 192 168 2 1 255 255 255 0 Enabled Disabled One Week Domain Name Parameter Description LAN IP IP Address The IP address of the Barricade IP Subnet Mask Virtual Path Identifier VPI and Virtual Circuit Identifier VCI DHCP Server To dynamically assign an IP address to client PCs enable the DHCP Dynamic Host Configuration Protocol Server Lease Time Set the DHCP lease time 4 24 Parameter Description IP Address Pool Start IP Address Specify the start IP address of the DHCP pool Do not include the gateway address of the Barricade in the client address pool If you change the pool range make sure the first three octets match the gateway s IP address i e 192 168 2 xxx End IP Address Specify the end IP address of the DHCP pool Domain Name If your network uses a domain name enter it here otherwise leave this field blank Remember to configure your client PCs for dynamic address allocation See Configuring Client PCs on page 3 1 for details
55. he Add Printer Wizard dialog box 6 Continue following the prompts to complete the installation of the Barricade print server The printer will now be added to your Printers menu 6 5 CONFIGURE THE PRINT SERVER Configure the Network Printer in Windows NT 1 Ona Windows NT platform open the Printers window in the My Computer menu and double click the Add Printer icon E Printers ioj xi 2 Follow the prompts to add a local printer to your system Add Printer Wizard 6 6 CONFIGURING PRINTER SERVICES 3 Select the monitored port The default port name is SMC100 Then click the Configure Port button Add Printer Wizard 4 Enter the IP address of the Barricade and click OK Click Next in the Add Printer Wizard dialog box 5 Specify the printer type attached to the Barricade 6 Continue following the prompts to complete the installation of the Barricade print server The printer type you specified will now be added to your Printers menu Configure the Network Printer in Unix Systems Follow the standard configuration procedure on your Unix platform to set up the Barricade print server The printer name is Ipt1 6 7 CONFIGURE THE PRINT SERVER 6 8 APPENDIX A TROUBLESHOOTING This section describes common problems you may encounter and possible solutions to them The Barricade can be easily monitored through panel
56. he timeout value expires the router drops the unassembled packet freeing that structure for use by another packet Defines how long the software will wait for a TCP session to reach an established state before dropping the session Specifies how long a TCP session will be managed after the firewall detects a FIN exchange TCP connection 3600 seconds The length of time for which a TCP session will idle timeout 1 hour UDP session 30 sec idle timeout be managed if there is no activity The length of time for which a UDP session will be managed if there is no activity FIREWALL Parameter Defaults Description H 323 data 180 sec The length of time for which an H 323 session channel idle will be managed if there is no activity timeout DoS Detect Criteria Total 300 sessions Defines the rate of new unestablished sessions incomplete that will cause the software to s art deleting TCP UDP half open sessions sessions HIGH Total 250 sessions Defines the rate of new unestablished sessions incomplete that will cause the software to szop deleting TCP UDP half open sessions sessions LOW Incomplete 250 sessions Maximum number of allowed incomplete TCP TCP UDP UDP sessions per min sessions per min HIGH Incomplete 200 sessions Set this to 0 as no minimum setting is required TCP UDP and setting it to anything higher will adversly sessions per affect performance min LOW Maximum 10 Maximum number of incomplete TCP UDP inco
57. indicators to identify problems Troubleshooting Chart Symptom Action LED Indicators Power LED is Off Check connections between the Barricade the external power supply and the wall outlet If the power indicator does not turn on when the power cord is plugged in you may have a problem with the power outlet power cord or external power supply However if the unit powers off after running for a while check for loose power connections power losses or surges at the power outlet If you still cannot isolate the problem then the external power supply may be defective In this case contact Technical Support for assistance A 1 TROUBLESHOOTING A 2 Troubleshooting Chart Symptom Action LED Indicators Link LED is Off Verify that the Barricade and attached device are powered on Be sure the cable is plugged into both the Barricade and the corresponding device Verify that the proper cable type is used and that its length does not exceed the specified limits Be sure that the network interface on the attached device is configured for the proper communication speed and duplex mode Check the adapter on the attached device and cable connections for possible defects Replace any defective adapter or cable if necessary Network Connection Problems Cannot Ping the Barricade from the attached LAN or the Barricade cannot Ping any device on the attached
58. ing Table Displays the IP address or an IP address range filtering table MAC Filtering Table Displays the MAC Media Access Control address filtering table Note Click Add PC and define the appropriate settings for client PC services As shown on the following screen FIREWALL Access Control Add PC Firewall VPN SNMP Tools Status Access Control Add PC This page allows users to define service limitation of client PC including IP address service type and scheduling rule criteria For URL blocking function you need config URL address first in URL Blocking Site page For scheduling function you also need config schedule rule first in Schedule Rule page Client PC Description Test Client PC IP Address 192 168 2 2 10_ e Client PC Service CT b H bk p b H bP b Ip p Scheduling Rule Ref Schedule Rule Page Always Blocking gt 4 37 CONFIGURING THE BARRICADE URL Blocking SMC tr 1 L System URL Blocking a WAN LAN Disallowed Web Sites and Keywords NAT Routing system You can block access to certain Web sites from a particular PC by entering either a full URL address Firewall or just a keyword of the Web site To specify the particular PC go back to the Access Control page and check the box for Http with URL Blocking in the Normal Filtering Table SNMP q Hele os g c ADSI site 1 Site 16 one site 2 Site 17 s
59. ing old DHCP IP settings and renewing them with settings from your Barricade you can also verify that you have configured your computer correctly 1 Click Start then Run 00 o HS 3 E E f CONFIGURING CLIENT TCP IP Type WINIPCFG and click OK It may take a second or two for the IP Configuration window to appear From the drop down menu select your network card Click Release and then Renew Verify that your IP address is now 192 168 2 xxx your Subnet Mask is 255 255 255 0 and your Default Gateway is 192 168 2 1 These values confirm that your Barricade Run BE Type the name of a program folder document or Internet resource and Windows will open it for you Open WINIPCFG E Cancel Browse AIP Configuration BBE r Ethernet Adapter Information ATE Adapter Address 00 E0 29 75 35 9E IP Address 192 168 2 161 SubnetMask 255 255 2550 Default Gateway 192 168 2 1 OK Release Release Al Renew All More Info gt gt is functioning Click OK to close the IP Configuration window Windows NT 4 0 After completing hardware setup by connecting your network devices you need to configure your computer to connect to the Barricade First determine how your ISP issues your IP address Many ISPs issue these numbers automatically using Dynamic Host Configuration Protocol DHCP Other ISPs
60. ing to a Network Management Station ADSL Parameters 3 gt OH a Q a3 2 S3 SMC System WAN LAN NAT Routing system Firewall SNMP ADSL Tools Status ADSL Parameter ADSL Operation Mode Automatic atic ETSI DTS TM 06006 Address C3 G 992 1 Annex B Address C4 FC Address CB 00 Address C8 00 Address C9 00 Address CA 24 Parameter Description Operation Mode Automatic ETSI DTS TM 06006 standard e G 992 1 standard Address 3C etc Reserved 4 49 CONFIGURING THE BARRICADE Ga 4 System Monitoring Index LAN ADSL Status Information lt NAT e Status Routing system Data Rate Information Firewall DefectFailure Indication SNMP Statistics ADSL ADSL Status Information Tools Status Status SS a Curen Line Status Activating e Go Top Data Rate Up Stream D Kbps Down Stream ARA e Go Top Operation Data Defect Indication Operation Data Unstreamn Downstream Noise Margin 0 5 dB 0 5 dB Output Power 0 5 dBm 0 5 dBm Attenuation 0 5 dB 0 5 dB n Fast Path FEC Correction Interleaved Path FEC Correction Fast Path CRC Error Interleaved Path CRC Error Loss of Signal Defect Loss of Frame Defect Loss of Power Defect Fast Path HEC Error 65535 65535 Interleaved Path HEC Error 65535 65535 e Go Top Statistics e Go Top 4 50
61. ing tunnel supports applications requiring multiple connections Easy setup through a Web browser on any operating system that supports TCP IP Compatible with all popular Internet applications APPLICATIONS Applications Many advanced networking features are provided by the Barricade e Wired LAN The Barricade provides connectivity to wired 10 100 Mbps devices making it easy to create a network in small offices or homes e Internet Access This device supports Internet access through a DSL connection Since many DSL providers use PPPoE or PPPoA to establish communications with end users the Barricade includes built in clients for these protocols eliminating the need to install these services on your computer e Shared IP Address The Barricade provides Internet access for up to 253 users via a single shared IP address Using only one ISP account multiple users on your network can browse the Web at the same time e Virtual Server If you have a fixed IP address you can set the Barricade to act as a virtual host for network address translation Remote users access various services at your site using a constant IP address Then depending on the requested service or port number the Barricade can route the request to the appropriate server at another internal IP address This secures your network from direct attack by hackers and provides mote flexible management by allowing you to change internal IP addresses without a
62. ion Setting IP Address Subnet Mask Primary DNS Server Secondary DNS Server Default Gateway Host Name 5 3 CONFIGURING CLIENT TCP IP Disable HTTP Proxy You need to verify that the HTTP Proxy feature of your Web browser is disabled This is so that your browser can view the Barricade s HTML configuration pages The following steps are for Internet Explorer and Netscape Determine which browser you use and follow the appropriate 5 4 steps Internet Explorer Zi Microsoft Internet Explorer 1 Open Internet Explorer and click the stop button Click Tools then Internet Options In the Internet Options window click the Connections tab Next click the LAN Settings button Clear all the checkboxes Click OK and then click OK again to close the Internet Options window Winbows 95 98 ME Netscape K Netscape 1 Open Netscape and click the stop button Click Edit then click Preferences 2 Inthe Preferences RES window under Category double click Advanced then click Proxies Select Direct connection to the Internet Click OK 3 Repeat these steps for each Windows 95 98 Me computer connected to your Barricade Obtain IP Settings from Your ADSL Router Now that you have configured your computer to connect to your Barricade it needs to obtain new network settings By releas
63. isabled This is so that your browser can view the Barricade s HTML configuration pages Determine which browser you use and refer to Internet Explorer on page 5 4 or Netscape on page 5 5 Obtain IP Settings from Your Barricade Now that you have configured your computer to connect to your Barricade it needs to obtain new network settings By releasing old DHCP IP settings and renewing them with settings from your Barricade you can verify that you have configured your computer correctly 1 From the Windows desktop click start Programs Accessories Command Prompt Windows Media Play D Windows Movie Mak Files and Settings Tr E System Tools E Stnet Ex POS Address Book E Startup Internet Explorer A MSN Explorer E Calculator cx Command Prompt SPS wizard BD Notepad Q Outlook Express Y Paint Snaglt 5 0 e ee Remote Assistance Program Compatibility Wizard windows Media Player 8 Windows Messenger BD coor O 6 Synchronize Tour Windows xP E Windows Explorer All Programs 8 Windows Movie Maker A WordPad 2 In the Command Prompt window type IPCONFIG RELEASE and press the lt ENTER gt key mmand Prompt IC gt ipconfig release Windows IP Configuration Ethernet adapter Local Area Connection CONFIGURING CLIENT TCP IP 3 Type IPCONFIG RENEW and press the lt ENTER
64. m to the telephone network the telephone company will notify you in advance that temporary discontinuance of service may be required If advance notice is not practical the telephone company will notify the customer as soon as possible Also you will be advised of your right to file a complaint with the FCC if you believe it is necessary The telephone company may make changes in its facilities equipment operations or procedures that will provide advance notice in order for you to make the necessary 111 COMPLIANCES iv modifications in order to maintain uninterrupted service If trouble is experienced with this equipment please contact our company at the numbers shown on back of this manual for repair and warranty information If the trouble is causing harm to the telephone network the telephone company may request you to remove the equipment from the network until the problem is resolved No repairs may be done by the customer This equipment cannot be used on telephone company provided coin service Connection to Party Line Service is subject to state tariffs When programming and or making test calls to emergency numbers e Remain on the line and briefly explain to the dispatcher the reason for the call Perform such activities in off peak hours such as early morning or late evenings The Telephone Consumer Protection Act of 1991 makes it unlawful for any person to use a computer or other electronic device to send any mes
65. meters ADSL operation mode WAN t RFC 1483 Bridging 0 34 AALS Encapsulation LLC Parameter Description Protocol Indicates the protocol used VPI VCI Virtual Path Identifier VPI and Virtual Circuit Identifier VCI AALS Encapsulation Shows the packet encapsulation type Your Barricade is now setup Go to Troubleshooting on page A 1 if you cannot make a connection to the Internet 4 6 PPPoE amp PPPoA gt OF a aaG 5 5 SMC e 1 Time Zone g 2 Internet Sharing co 3 Parameter Setting O 4 Finish 3 Parameter Setting Username pppox404 Password pe Retype Password p SETUP WIZARD ons faoo fo fo fsa vawe o pa ese Parameter Description Username Enter the ISP assigned username Password Enter your password Retype Password Confirm the password DNS Enter a domain name server IP address VPI VCI Virtual Path Identifier VPI and Virtual Circuit Identifier VCI Data flows ate broken up into fixed length cells each of which contains a Virtual Path Identifier VPI that identifies the path between two nodes and a Virtual Circuit Identifier VCI that identifies the data channel within that virtual path Each virtual circuit maintains a constant flow of cells between the two end points When there is no data to transmit empty cells are sent And when data needs to be transmitted it is immediately inserted into the cell flows 4 7 CONFIGURING THE BARRICA
66. min LOW 200 session Maximun incomplete TCP UDP sessions number from same host fio Incomplete TCP UDP sessions detect sensitive time period foo msec Maximun half open fragmentation packet number from same host 30 Half open fragmentation detect sensitive time period fi 0000 msec Flooding cracker block time foo sec E 4 41 CONFIGURING THE BARRICADE 4 42 The Barricade s firewall inspects packets at the application layer maintains TCP and UDP session information including timeouts and number of active sessions and provides the ability to detect and prevent certain types of network attacks such as DoS attacks Network attacks that deny access to a network device are called Denial of Service DoS attacks Denial of Service DoS attacks are aimed at devices and networks with a connection to the Internet Their goal is not to steal information but to disable a device or network so users no longer have access to network resources The Barricade protects against the following DoS attacks Ping of Death Ping flood attack SYN flood attack IP fragment attack Teardrop Attack Brute force attack Land Attack IP Spoofing attack IP with zero length TCP null scan Port Scan Attack UDP port loopback Snork Attack etc Note The firewall does not significantly affect system performance so we advise enabling the prevention features to protect your network Parameter Defaults Description Enable SPI and Yes The Intrusio
67. more of the following measures e Reorient the receiving antenna Increase the separation between the equipment and receiver Connect the equipment into an outlet on a circuit different from that to which the receiver is connected Consult the dealer or an experienced radio TV technician for help Note In order to maintain compliance with the limits for a Class B digital device you are required to use a quality interface cable when connecting to this device Changes or modifications not expressly approved by our company could void the user s authority to operate this equipment FCC Part 68 This equipment complies with Part 68 of the FCC rules This equipment comes with a label attached to it that contains among other information the FCC registration number and ringer equivalence number REN for this equipment If requested this information must be provided to the telephone company This equipment uses the following USOC jacks RJ 11C The REN is used to determine the quantity of devices that may be connected to the telephone line Excessive RENs on the telephone line may result in the devices not ringing in response to an incoming call In most but not all areas the sum of the RENs should not exceed five 5 0 To be certain of the number of devices that may be connected to the line as determined by the total RENs contact the telephone company to determine the maximum REN for the calling area If this equipment causes har
68. mplete sessions from the same host TCP UDP sessions number from same host Incomplete 300 msec Length of time before an incomplete TCP UDP TCP UDP session is detected as incomplete sessions detect sensitive time period Maximum 30 Maximum number of half open fragmentation half open packets from the same host fragmentation packet number from same host Half open 10000 msec Length of time before a half open fragmentation fragmentation session is detected as half open detect sensitive time period Flooding cracker 300 sec Length of time from detecting a flood attack to block time blocking of the attack 4 45 CONFIGURING THE BARRICADE DMZ 4 46 e gt 9104 9u9 539 SMC System LA WAN DMZ Demilitarized Zone LAN NAT If you have a local client PC that cannot run an Internet application properly from behind the NAT Routi te firewall then you can open the client up to unrestricted two way Internet access by defining a I system Virtual DMZ Host irewal Enable DMZ CYes No Multiple PCs can be exposed to the Internet for two way communications e g Internet gaming video conferencing or VPN connections To use the DMZ you must set a static IP address for that PC Public IP Address Client PC IP Address 1 00 00 192 168 2 0 2b Mo fo fo 192168 20 amio Mo Mo Mo 192 168 2 0 ao fo fo fo 192 168 2 0 sh b f pP 192 168 2 0 eb b bP pP 192 168 200 ao Mo Mo Mo 192 168 2 0 emio Mo Mo Mo i 192 168 210
69. n Detection feature of the Barricade Anti DoS firewall limits the access of the incoming traffic at the protection WAN port When the SPI feature is turned on all incoming packets are blocked except those types marked with a check in the Stateful Packet Inspection section at the top of the screen Parameter Defaults FIREWALL Description Stateful Packet Inspection Hacker Prevention Feature Discard Ping from WAN Discard This option allows you to select different application types that are using dynamic port numbers If you wish to use Stateful Packet Inspection SPI for blocking packets click on the Yes radio button in the Enable SPI and Anti DoS firewall protection field and then check the inspection type that you need such as Packet Fragmentation TCP Connection UDP Session FTP Service H 323 Service and TFTP Service It is called a stateful packet inspection because it examines the contents of the packet to determine what the state of the communication is i e it ensures that the stated destination computer has previously requested the current communication This is a way of ensuring that all communications are initiated by the recipient computer and are taking place only with sources that are known and trusted from previous interactions In addition to being more rigorous in their inspection of packets stateful inspection firewalls also close off ports until connection to the specific
70. need to ask your network administrator for the appropriate IP settings 6 If Obtain an IP address automatically and Obtain DNS server address automatically are already selected your computer is Obtain DNS server address automatically mC Use the following DNS server addresses Advanced already configured for DHCP Click Cancel to close each window and skip to Disable HTTP Proxy on page 5 13 Erefered DNS server Alternate DNS server 7 Select Obtain an IP address automatically and Obtain DNS server address automatically Click OK or Close to close each window TCP IP Configuration Setting IP Addtess Subnet Mask Default Gateway Preferred DNS Server Alternate DNS Server 5 12 Winpows 2000 Disable HTTP Proxy You need to verify that the HTTP Proxy feature of your Web browser is disabled This is so that your browser can view the Barricade s HTML configuration pages Determine which browser you use and refer to Internet Explorer on page 5 4 or Netscape on page 5 5 Obtain IP Settings from Your Barricade Now that you have configured your computer to connect to your Barricade it needs to obtain new network settings By releasing old DHCP IP settings and renewing them with settings from your Barricade you can verify that you have configured your computer correctly 1 From the Wind
71. oduct returned to SMC without a valid Return Material Authorization RMA number clearly marked on the outside of the package will be returned to customer at customers expense Customers are responsible for all shipping charges from their facility to SMC SMC is responsible for return shipping charges from SMC to customer LIMITED WARRANTY il WARRANTIES EXCLUSIVE IF A SMC PRODUCT DOES NOT OPERATE AS WARRANTED ABOVE CUSTOMER S SOLE REMEDY SHALL BE REPAIR OR REPLACEMENT OF THE PRODUCT IN QUESTION AT SMC S OPTION THE FOREGOING WARRANTIES AND REMEDIES ARE EXCLUSIVE AND ARE IN LIEU OF ALL OTHER WARRANTIES OR CONDITIONS EXPRESSED OR IMPLIED EITHER IN FACT OR BY OPERATION OF LAW STATUTORY OR OTHERWISE INCLUDING WARRANTIES OR CONDITIONS OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE SMC NEITHER ASSUMES NOR AUTHORIZES ANY OTHER PERSON TO ASSUME FOR IT ANY OTHER LIABILITY IN CONNECTION WITH THE SALE INSTALLATION MAINTENANCE OR USE OF ITS PRODUCTS SMC SHALL NOT BE LIABLE UNDER THIS WARRANTY IF ITS TESTING AND EXAMINATION DISCLOSE THE ALLEGED DEFECT IN THE PRODUCT DOES NOT EXIST OR WAS CAUSED BY CUSTOMER S OR ANY THIRD PERSON S MISUSE NEGLECT IMPROPER INSTALLATION OR TESTING UNAUTHORIZED ATTEMPTS TO REPAIR OR ANY OTHER CAUSE BEYOND THE RANGE OF THE INTENDED USE OR BY ACCIDENT FIRE LIGHTNING OR OTHER HAZARD LIMITATION OF LIABILITY IN NO EVENT WHETHER BASED IN CONTRACT OR TORT INCLUDING NEGLIGENCE SHALL SMC BE LIABLE
72. oes not exceed 100 meters 328 feet Connect the Power Adapter 2 8 Plug the power adapter into the power socket on the rear of the Barricade and the other end into a power outlet Check the power indicator on the front panel is lit If the power indicator is not lit refer to Troubleshooting on page A 1 In case of a power input failure the Barricade will automatically restart and begin to operate once the input power is restored If the Barricade is properly configured it will take about 30 seconds to establish a connection with the ADSL service provider after powering up During this time the Sync indicator will flash After the ADSL connection has been established the ADSL Sync LED will stay on CHAPTER 3 CONFIGURING CLIENT PCs TCP IP Configuration To access the Internet through the Barricade you must configure the network settings of the computers on your LAN to use the same IP subnet as the Barricade The default network settings for the Barricade are IP Address 192 168 2 1 Subnet Mask 255 255 255 0 Note These settings can be changed to fit your network requirements but you must first configure at least one computer as described in Configuring Client TCP IP on page 5 1 to access the Barricade s Web configuration interface in order to make the required changes See Configuring the Barricade on page 4 1 for instructions on configuring the Barricade 3 1 CONFIGURING CLIENT PCs 3 2
73. ommunity strings To communicate with the Barricade the NMS must first submit a valid community string for authentication Parameter Description Community A community name authorized for management access Access Management access is restricted to Read only Read or Read Write Write Valid Enables disables the entry Note Up to 5 community names may be entered 4 47 CONFIGURING THE BARRICADE Trap SMC System WAN SNMP Trap LAN e gt 904 Qus as NAT In the context of SNMP an unsolicited message can be sent by an agent to management Routing system station The purpose is to notify the management station of some unusual event Firewall SNMP ADSL Tools Status 3 Parameter ln oo Description IP Address Community Version 4 48 Traps are sent to this address when errors or specific events occur on the network A community string password specified for trap management Enter a word something other than public or private to prevent unauthorized individuals from reading information on your system Sets the trap status to disabled or enabled with V1 or V2c The v2c protocol was proposed in late 1995 and includes enhancements to v1 that are universally accepted These include a get bulk command to reduce network management traffic when retrieving a sequence of MIB variables and a mote elaborate set of error codes for improved report
74. operational function and or reliability SMC reserves the right to make changes to the product s described in this document without notice SMC does not assume any liability that may occur due to the use or application of the product s described herein In order to obtain the most accurate knowledge of installation bug fixes and other product related information we advise to visit the relevant product support page at www smc europe com before you start installing the equipment All information is subject to change without notice Limitation of Liability In no event whether based in contract or tort including negligence shall SMC be liable for incidental consequential indirect special or punitive damages of any kind or for loss of revenue loss of business or other financial loss arising out of or in connection with the sale installation maintenance use performance failure or interruption of its products even if SMC or its authorized reseller has been adviced of the possiblity of such damages Copyright Information furnished by SMC Networks Inc SMC is believed to be accurate and reliable However no responsibility is assumed by SMC for its use nor for any infringements of patents or other rights of third parties which may result from its use No license is granted by implication or otherwise under any patent or patent rights of SMC SMC reserves the right to change specifications at any time without notice Trademarks S
75. ow Your computer is now configured to connect to the Barricade 5 14 Windows XP 1 Click start Control Panel 2 In Control Panel click Network and Internet Connections 3 The Network Connections screen will open Double click the connection for this device 4 On the connection status screen click Properties Winbows XP Wy E mail B My Recent Documents gt Outlook Express Ay MSN Explorer 2 My Music Windows Media Player ws My Computer Q Windows Movie Maker e Tour Windows XP Files and Settings Transfer Wizard lt 5 Printers and Faxes 9 Help and Support Snaglt 5 0 ge pu W Run All Programs gt File Edit View Favorites Tools Advanced Help Q Psh E Foes F Address 43 Network Connections Network Tasks ras AR E Create a new connection Set up a home or small office network ted in Modem BL tus LAN or High Speed Internet See Also Li Network Troubleshooter General Support Connection Status Connected Duration 00 47 38 11 0 Mbps Speed Activity Sent Received Packets 43 43 5 15 CONFIGURING CLIENT TCP IP Double click Internet Protocol TCP IP If there is IP Address information on the Internet Protocol TCP IP Properties dialog box it should be reco
76. ows desktop click Start Programs Accessories gt 3 Communications gt E internet Explorer B Documents 15 Outlook Express y Paint y EY wordpad y Command Prompt and then Command Settings Prompt Search Help 3 Run Shut Down ade 2 Inthe Command Prompt window type IPCONFIG RELEASE and press the lt ENTER gt key Command prompt _ ______ iol osoft Windows 2000 Version 5 00 2195 KC gt Copyright 1985 1999 Microsoft Corp gt IPCONFIG RELEASE lindows 26898 IP Configuration IP address successfully released for adapter Local Area Connection 1 3 Type IPCONFIG RENEW and press the lt ENTER gt key Verify 5 13 CONFIGURING CLIENT TCP IP that your IP Address is now 192 168 2 xxx your Subnet Mask is 255 255 255 0 and your Default Gateway is 192 168 2 1 These values confirm that your ADSL Router is functioning crosoft Windows 2000 Ue KC Copyright 1985 1999 Micr gt IPCONFIG RELEASE lindows 2000 IP Configuration IP address successfully released for adapter Local Area Connection 1 M gt IPCONFIG RENEY lindows 2898 IP Configuration Ethernet adapter Local Area Connection 1 Connection specific DNS Suffix IP Addr 192 168 2 125 Subnet Mask 255 255 255 0 Default Gateway 192 168 2 254 4 Type EXIT and press lt ENTER gt to close the Command Prompt wind
77. rded Use the spaces below to record the current settings If Obtain an IP address automatically and Obtain DNS server address automatically are already selected your computer is already configured for DHCP Click Cancel to close each window and skip to Disable HTTP Proxy on page 5 17 Local Area Connection 2 Properties General Authentication Advanced Connect using E9 PRISM25 IEEE 802 11 PC Card This connection uses the following items E Client for Microsoft Networks M B File and Printer Sharing for Microsoft Networks 15 005 Packet Scheduler Internet Protocol TCP IP General Altemate Configuration the appropriate IP settings Obtain an IP address automatically O Use the following IP address You can get IP settings assigned automatically if your network supports this capability Otherwise you need to ask your network administrator for Obtain DNS server address automatically Use the following DNS server addresses Cancel Select Obtain an IP address automatically and Obtain DNS server address automatically Click OK or Close to close each window TCP IP Configuration Setting IP Address Subnet Mask Default Gateway Preferred DNS Server Alternate DNS Server Disable HTTP Proxy Winpows XP You need to verify that the HTTP Proxy feature of your Web browser is d
78. riginal factory settings ADSL SOO Backup C Restore Restore to Factory Defaults More Configuration Check Backup and click More Configuration to save your Barricade s configuration to a file named config bin on your PC You can then check the Restore radio button and click More Configuration to restore the saved backup configuration file To restore the factory settings check Restore to Factory Defaults and click More Configuration You will be asked to confirm your decision 4 53 CONFIGURING THE BARRICADE Firmware Upgrade 4 54 e gt 083 Qus 2 Ss Interface depending on which you want to update Then click Browse SMC System WAN Firmware Upgrade LAN NAT This tool allows you to upgrade the Barricade system firmware using a file provided by SMC E GIL Enter the path and name of the upgrade file then click the APPLY button below You will be prompted Firewall to confirm the upgrade SNMP JADSE Upgrade Target Firmware Tools Browse Status Use this screen to update the firmware or user interface to the latest versions In the Upgrade Target field choose Firmware or User gt to browse for the previously downloaded file Note For latest firmware user interface version information and download visit SMC s Web site at www SMC europe com TOOLS System WAN LAN NAT In the e
79. s 6 Figure B 2 RJ 11 Connector Pin Numbers 5 2 232 s 223 a ozm a2 2325 453 jif iiil R1T1 T2R1T1R2 T2R1T1R2 T2934 5 6 123456 123456 6x2 Jack 6x4 Jack 6x4 Jack T Tip R Ring Pin Signal Name Wire Color 1 Not used 2 Line 2 Tip Black or White Orange 3 Line 1 Ring Red or Blue White 4 Line 1 Tip Green or White Blue 5 Line 2 Ring Yellow or Orange White 6 Not used Figure B 3 RJ 11 Pinouts ADSL CABLE CONNECTION B 5 CABLES B 6 APPENDIX C SPECIFICATIONS Standards Compliance CE Mark Emissions FCC Class B VCCI Class B Industry Canada Class B EN55022 CISPR 22 Class B C Tick AS NZS 3548 1995 Class B Immunity EN 61000 3 2 3 EN 61000 4 2 3 4 5 6 8 11 Safety UL 1950 EN60950 T V CSA 22 2 No 950 TEEE 802 3 10 BASE T Ethernet IEEE 802 3u 100 BASE TX Fast Ethernet Modem Standards ITU G 992 1 G dmt ITU G 992 2 G Lite ITU G 994 1 G handshake ITU T 413 issue 2 ADSL full rate LAN Interface 4 RJ 45 10 BASE T 100 BASE TX ports Auto negotiates the connection speed to 10 Mbps Ethernet or 100 Mbps Fast Ethernet and the transmission mode to half duplex or full duplex C 1 SPECIFICATIONS C 2 WAN Interface 1 ADSL RJ 11 port Indicator Panel Power Ethernet ADSL Syn ADSL Data Dimensions 220 x 132 8
80. s RJ 45 Connect devices on your local area Ports network to these ports i e a PC hub or switch Parallel One parallel printer port that can be connected to a printer This printer printer can then be shared by all LAN users port Reset Use this button to reset the power and restore the default factory Button settings To reset without losing configuration settings see Reset on page 4 55 Power Connect the included power adapter to this inlet Inkt Warning Using the wrong type of power adapter may cause damage WAN WAN port RJ 11 Connect your DSL line to this port Port 2 3 INSTALLATION LEDs 2 4 Verify Status Check the power and port LED indicators LED Condition Status Power On The Barricade is receiving power Normal operation Off Power off or failure Ethernet On Ethernet Link ela Flashing Send Receive data Off No Link ADSL Syn On ADSL connection is functioning correctly Flashing Startup Off ADSL connection is not established ADSL Data Flashing Send Receive data Off No data transfering CONNECT THE SYSTEM Connect the System The Barricade can be positioned at any convenient location in your office or home No special wiring or cooling requirements are needed You should however comply with the following guidelines e Keep the Barricade away from any heating devices Do not place the Barricade in a dusty or wet environment
81. sage via a telephone facsimile machine unless such message clearly contains in a margin at the top or bottom of each transmitted page or on the first page of the transmission the date and time it is sent and an identification of the business other entity or individual sending the message and the telephone number of the sending machine or such business other entity or individual In order to program this information into your facsimile refer to your communications software user manual Industry Canada Class B This digital apparatus does not exceed the Class B limits for radio noise emissions from digital apparatus as set out in the interference causing equipment standard entitled Digital Apparatus ICES 003 of Industry Canada Cet appareil num rique respecte les limites de bruits radio lectriques applicables aux appareils num riques de Classe B prescrites dans la norme sur le mat rial brouilleur Appareils Num riques NMB 003 dict e par PIndustriec Australia AS NZS 3548 1995 Class B ACN 069 351 613 COMPLIANCES EC Conformance Declaration Class B This information technology equipment complies with the requirements of the Council Directive 89 336 EEC on the Approximation of the laws of the Member States relating to Electromagnetic Compatibility and 73 23 EEC for electrical equipment used within certain voltage limits and the Amendment Directive 93 68 EEC For the evaluation of the compliance with these Dir
82. t via a standard 10BASE T port The router looks up the network address for each packet seen on the LAN port If the address is listed in the routing table as local it is filtered If the address is listed under the ADSL port it is forwarded Or if the address is not found then it is automatically forwarded to the default router i e the ADSL router at the head end IP Address IP address of the ATM interface Subnet Mask Subnet mask of the ATM interface ISP WAN Parameter Description VPI VCI Virtual Path Indicator Each connection must have a unique pair of VPI VCI settings Virtual Channel Indicator Each connection must have a unique pair of VPI VCI settings Encapsulatio Specifies how to handle multiple protocols at the ATM transport n layer e VC MUX Point to Point Protocol over ATM Virtual Circuit Multiplexer null encapsulation allows only one protocol running per virtual circuit with less overhead LLC Point to Point Protocol over ATM Logical Link Control allows multiple protocols running over one virtual circuit with a little bit more overhead 3 OF AQadRS SMC System WAN ISP Parameter Please Enter the following Configuration Parameters LAN Table of current ISP pool NAT ROD yem Firewall 1 sp enpoxa04 poc SNMP 2 a ADSL Tools 3 I Status AO i 2 Enter the Internet Service Provider name username and password for each ISP connection you
83. tact your network manager for Security Zones more information Note These settings are shared with other lt Forms AutoFill LJ Web Proxy Settings Forms AutoComplete CI Use Web Proxy for all O AutoFill Profile C Bypass Web Proxy for FTP 7 Receiving Files Secure Proxy Settings Download Options O File Helpers O Mail Proxy Settings Cookies J Gopher Proxy Settings 7 Network List the sites you want to connect to directly bypassing the proxies Protocol Helpers set above Put a space or comma between each site Q Proxies O Site Passwords y E mail General Concer E 5 21 CONFIGURING CLIENT TCP IP 5 22 Netscape 1 Open Netscape and click the stop button File JET view Go Favor Click Edit and select Preferences In the Preferences dialog box in the select Proxies left hand column labeled Category select ere bee Advanced Under the Advanced category Preferences Select Direct Preferences Connectionto Sa Applications the Internet rentado n Identity and click Mail Servers News Servers cc Addressing OK Messages Window Settings Copies amp Folders Formatting Return Receipts Disk Space lt 7 Composer Publish y Roaming Access Server Info File Selection y Offline Download SmartUpdate
84. te3 ste 18 site 4 te ta site 5 te 2 site 6 PO te 2 site 7 se 22 Site 8 Stesa Site 9 Site 24 Site of ste asf SSS ste if Siteaf SSS Site 12 te 27f SSS Stea te 28 Stea ste 2f site 15 te 30f The Barricade allows the user to block access to Web sites from a particular PC by entering either a full URL address or just a keyword This feature can be used to protect children from accessing violent or pornographic web sites 4 38 Schedule Rule e gt 08493u9 9 9 SMC System WAN Schedule Rule LAN FIREWALL NAT This page defines schedule rule names and activates the schedule for use in the Access Control Routing system page Firewall Rule Name e Schedule Rule Table up to 10 rules Jim temp Betty consult Part time Add Schedule Rule You may filter Internet access for local clients based on tules Each access control rule may be activated at a scheduled time Define the schedule on the Schedule Rule page and apply the rule on the Access Control page 1 Click Add Schedule Rule 2 Define the appropriate settings for a schedule rule As shown on the following screen 4 39 CONFIGURING THE BARRICADE 3 Click OK and then click APPLY to save your settings Edit Schedule Rule Name Normal Comment Office Hours Activate Time Period fe is fo ea oo Saday IA IA ok
85. ter arm Disable i z Disable None ROUTING SYSTEM Please Enter the following Configuration Parameters General RIP parameter RIP mode Disable Enable Auto summary Disable Enable Table of current interface RIP parameter Disable y fia Disable 7 None Parameter Description Interface The WAN interface to be configured Operation Mode Disable RIP disabled on this interface Enable RIP enabled on this interface Silent Listens for route broadcasts and updates its route table It does not participate in sending route broadcasts Version Sets the RIP Routing Information Protocol Poison Reverse version to use on this interface A poison reverse is a way in which a router tells its neighbor routers that one of the routers is no longer connected 4 31 CONFIGURING THE BARRICADE 4 32 Parameter Description Authentication Required None No authentication e Password A password authentication key is included in the packet If this does not match what is expected the packet will be discarded This method provides very little security as it is possible to learn the authentication key by watching RIP packets MD5 MD is an algorithm that is used to verify data integrity through the creation of a 128 bit message digest from data input which may be a message of any length that is claimed to be as unique to that specific data as a fingerprint is to a specific individual
86. tion parameters and statistics gt 9084 9u 39 99 SMC System Advanced Setup The Barricade supports advanced functions like Stateful Packet Inspection hacker attack Routing system detection content filtering access control a single VPN tunnel virtual DMZ hosts virtual servers Firewall and client filtering SNMP ADSL SMC recommends that you keep the default settings Tools Status Navigating the Web Browser Interface The Barricade s advanced management interface contains ten main menu items System WAN LAN NAT Routing system Firewall SNMP ADSL Tools and Status 4 13 CONFIGURING THE BARRICADE The following table briefly describes the Advanced Setup menu items Menu Description System Sets the local time zone the password for administrator access the IP address of a PC that will be allowed to manage the Barricade remotely and the IP address of a domain name server WAN Specifies the Internet connection settings LAN Sets the TCP IP configuration for the Barricade LAN interface and DHCP clients NAT Shares a single ISP account with multiple users Routing system Firewall SNMP ADSL Tools Status 4 14 sets up virtual servers Sets routing parameters and displays the current routing table Configures a variety of security and specialized functions including Access Control URL blocking Internet access control scheduling Intruder
87. ttings 5 After writing down your IP settings select Using DHCP Server in the Configure field and close the window 6 Another box will appear Save changes to the current configuration asking whether you want to Saving the changes may interrupt any TCP IP save your settings Click services currently established Save Don t Save Cancel TCP IP Configuration Setting IP Address Subnet mask Router address Name server addr 5 20 CONFIGURING YOUR MACINTOSH COMPUTER Disable HTTP Proxy You need to verify that the HTTP Proxy feature of your Web browser is disabled This is so that your browser can view the Barricade s HTML configuration pages The following steps are for Internet Explorer and Netscape Determine which browser you use and follow the appropriate steps Internet Explorer 1 Open Internet Explorer and click the stop File JET view Go Favor button Click Edit and select Preferences B 2 Inthe Internet Explorer Preferences window under Network select Proxies 3 Uncheck all checkboxes and click OK Select All Find F Find Again G Preferences 3 Internet Explorer Preferences Q Security O Ratings applications through Internet Config Advanced Use Proxy Servers If you are accessing the Internet from a private network you can set gateways to allow Internet access Con
88. vent that the system stops responding correctly or in some way stops functioning Routing system you can perform a reset Your settings will not be changed To perform the reset click on Firewall the APPLY button below You will be asked to confirm your decision The reset will be SNMP complete when the power light stops blinking ADSL Tools Status e amp Reset Perform a reset from this page The configurations will not be changed back to the factory default settings Note If you use the reset button on the rear panel the Barricade performs a power reset and restores the factory settings 4 55 CONFIGURING THE BARRICADE Status The Status screen displays WAN LAN connection status firmware and hardware version numbers as well as information on DHCP clients connected to your network i at S E NAAA EXA mh 1 System WAN Status LAN NAT You can use the Status screen to see the connection status for the HomeGateway WAN LAN Routing system interfaces firmware and hardware version numbers any illegal attempts to access your network Firewall as well as information on all DHCP client PCs currently connected to your network lt SNMP ADSL Current Time 01 01 1970 01 29 26 Tools Status INTERNET GATEWAY INFORMATION Cable DSL CONNECTED IP Address 192 168 2 1 Numbers of DHCP Clients 1 WAN IP 192 168 3 2 Subnet Mask 255 255 255 0 Runtime Code Version Subnet Mask 255 255 255 0 DHC
89. x 30 5 mm Weight 0 6 kg Input Power 12V1A Power Consumption 12 Watts max Management Web management Advanced Features Dynamic IP Address Configuration DHCP DNS Firewall Client privileges hacker prevention and logging Stateful Packet Inspection Virtual Private Network PPTP IPSec pass through VPN pass through Internet Standards RFC 826 ARP RFC 791 IP RFC 792 ICMP REC 768 UDP RFC 793 TCP RFC 783 TFTP RFC 1483 AAL5 Encapsulation RFC 1661 PPP RFC 1866 HTML RFC 2068 HTTP RFC 2364 PPP over ATM Temperature Operating 0 to 40 C Storage 40 to 70 C Humidity 5 to 95 noncondensing Warranty Limited Lifetime LIMITED WARRANTY SMC s Limited Warranty Statement Limited Warranty Statement SMC Networks Europe SMC warrants its products to be free from defects in workmanship and materials under normal use and service for the applicable warranty term All SMC products carry a standard 2 year limited warranty from the date of purchase from SMC or its Authorized Reseller SMC may at its own discretion repair or replace any product not operating as warranted with a similar or functionally equivalent product during the applicable warranty term SMC will endeavour to repair or replace any product returned under warranty within 30 days of receipt of the product As new technologies emerge older technologies become obsolete and SMC will at its discretion replace an older product in its product lin

SMC Networks SMC7404BRA User's Manual

Contents

Download Pdf Manuals

Related Search

Related Contents