Netopia R7200 User Reference Manual Download Page 169 | Manualshive

Page: 169 / 258

background image

Security 14-19

Basic Firewall is suitable for a LAN containing only client hosts that want to access ser vers on the WAN, but not
for a LAN containing ser vers providing ser vices to clients on the WAN. Basic Firewall’s general strategy is to
explicitly for ward WAN-originated TCP and UDP traffic to por ts greater than 1023. Por ts lower than 1024 are the
ser vice origination por ts for various Internet ser vices such as FTP, Telnet, and the World Wide Web (WWW).

A more complicated filter set would be required to provide WAN access to a LAN-based ser ver. See the next
section,

“Possible modifications,”

for ways to allow remote hosts to use ser vices provided by ser vers on the

LAN.

Possible modifications

You can modify the sample filter set Basic Firewall to allow incoming traffic using the examples below. These
modifications are not intended to be combined. Each modification is to be the only one used with Basic Firewall.

The results of combining filter set modifications can be difficult to predict. It is recommended that you take
special care if you are making more than one modification to the sample filter set.

Trusted host.

To allow unlimited access by a trusted remote host with the IP address a.b.c.d (corresponding to

a numbered IP address such as 163.176.8.243), inser t the following input filter ahead of the current input
filter 1:

■

Enabled: Yes

■

For ward: Yes

■

Source IP Address: a.b.c.d

■

Source IP Address Mask: 255.255.255.255

■

Dest. IP Address: 0.0.0.0

■

Dest. IP Address Mask: 0.0.0.0

■

Protocol Type: 0

Trusted subnet.

To allow unlimited access by a trusted remote subnet with subnet address a.b.c.d

(corresponding to a numbered IP address such as 163.176.8.0) and subnet mask e.f.g.h (corresponding to a
numbered IP mask such as 255.255.255.0), inser t the following input filter ahead of the current input filter 1:

■

Enabled: Yes

■

For ward: Yes

■

Source IP Address: a.b.c.d

■

Source IP Address Mask: e.f.g.h

■

Dest. IP Address: 0.0.0.0

■

Dest. IP Address Mask: 0.0.0.0

■

Protocol Type: 0

«
...
167
168
169
170
171
...
»

Summary of Contents for R7200

Page 1: ...Netopia R7200 SDSL Router Nokia Speedlink certified User s Reference Guide ...

Page 2: ...may not be copied in whole or part without the prior written consent of Netopia Inc Under the law copying includes translation to another language or format Netopia Inc 2470 Mariner Square Loop Alameda CA 94501 1010 U S A Part Number For additional copies of this electronic manual order Netopia part number 6160021 PF 02 Printed Copies For printed copies of this manual order Netopia part number TER...

Page 3: ...to Your Local Area Network 4 1 Overview 4 1 Readying computers on your local network 4 1 Connecting to an Ethernet network 4 3 10Base T 4 4 Welcome to the Netopia R7200 SDSL Router User s Reference Guide This guide is designed to be your single source for information about your Netopia R7200 SDSL Router It is intended to be viewed on line using the powerful features of the Adobe Acrobat Reader The...

Page 4: ...Macintosh computers 5 10 Chapter 6 Console Based Management 6 1 Connecting through a Telnet session 6 2 Configuring Telnet software 6 3 Connecting a console cable to your router 6 3 Navigating through the console screens 6 4 Chapter 7 Easy Setup 7 1 Easy Setup console screens 7 1 Accessing the Easy Setup console screens 7 1 Quick Easy Setup connection path 7 3 SDSL Line Configuration 7 4 Easy Setu...

Page 5: ...pgrade feature set 8 14 Logging 8 14 Installing the Syslog client 8 15 Chapter 9 Line Backup 9 1 WAN Configuration 9 2 Backup Configuration screen 9 3 IP Setup screen 9 4 Connection Profiles 9 5 Using Scheduled Connections with Backup 9 5 Management Statistics 9 7 QuickView 9 9 Event Logs 9 9 SNMP Support 9 9 Chapter 10 IP Setup and Network Address Translation 10 1 Network Address Translation feat...

Page 6: ...ternetwork Packet Exchange IPX 11 1 IPX address 11 2 Socket 11 2 Routing Information Protocol RIP 11 2 Service Advertising Protocol SAP 11 2 NetBIOS 11 3 IPX spoofing 11 3 IPX setup screen 11 3 IPX routing tables 11 5 Chapter 12 AppleTalk Setup 12 1 AppleTalk networks 12 1 AppleTalk protocol 12 1 MacIP 12 3 AURP 12 3 Routers and seeding 12 3 Installing AppleTalk 12 4 Configuring AppleTalk 12 6 Eth...

Page 7: ...sed management pages 13 16 System Information page 13 16 Event History pages 13 17 Chapter 14 Security 14 1 Suggested security measures 14 1 User accounts 14 1 Dial in console access 14 3 Enable SmartStart SmartView Web server 14 4 Telnet access 14 4 About filters and filter sets 14 4 What s a filter and what s a filter set 14 4 How filter sets work 14 5 How individual filters work 14 6 Design gui...

Page 8: ...14 30 Filter basics 14 33 Example filters 14 34 Chapter 15 Utilities and Diagnostics 15 1 Ping 15 2 Trace Route 15 4 Telnet client 15 5 Disconnect Telnet console session 15 6 Factory defaults 15 6 Transferring configuration and firmware files with TFTP 15 7 Updating firmware 15 7 Downloading configuration files 15 8 Uploading configuration files 15 9 Transferring configuration and firmware files w...

Page 9: ...ts and subnet masks B 2 Example Using subnets on a Class C IP internet B 3 Example Working with a Class C subnet B 5 Distributing IP addresses B 5 Technical note on subnet masking B 6 Configuration B 7 Manually distributing IP addresses B 8 Using address serving B 8 Tips and rules for distributing IP addresses B 9 Nested IP subnets B 11 Broadcasts B 13 Packet header types B 13 Appendix C Understan...

Page 10: ...s and Safety Information F 1 Pinouts for Auxiliary port modem cable F 1 Description F 2 Power requirements F 2 Environment F 2 Software and protocols F 3 Agency approvals F 4 Regulatory notices F 4 Important safety instructions F 5 Appendix G About SDSL G 1 Glossary GL 1 Index Index 1 Limited Warranty and Limitation of Remedies 1 ...

Page 11: ...P P P Pa a a ar r r rt t t t I I I I G G G Ge e e et t t tt t t ti i i in n n ng g g g S S S St t t ta a a ar r r rt t t te e e ed d d d ...

Page 12: ...User s Reference Guide ...

Page 13: ...cquire an IP address automatically and dynamically from a designated pool of available addresses Multi speed symmetrical transmission from 192 Kbps up to 1 5 Mbps to provide scalability without additional equipment investment All digital continuous availability networking eliminating dialing and providing lower more predictable transmission costs Connectivity to Ethernet LANs via a built in 8 port...

Page 14: ...his document open while you perform any of the procedures described and find useful information about the procedure you are performing If you prefer to work from hard copy rather than on line documentation you can also print out all of the manual or individual sections The pages are formatted to print on standard 8 1 2 by 11 inch paper We recommend that you print on three hole punched paper so you...

Page 15: ...hange Carrier CLEC a type of mini phone company The CLEC uses a compatible type of switching equipment known as a Digital Subscriber Line Access Multiplexer DSLAM The DSLAM that you connect to with your Netopia Router must be capable of handling these symmetric connections The Netopia R7200 is certified for use with the Nokia Speedlink DSLAM If you have purchased your Netopia Router through a Neto...

Page 16: ...lar configuration If the ISP does not have the Netopia R7200 on such a list describe the Netopia R7200 in as much detail as needed so your ISP account can be optimized As appropriate refer your ISP to Netopia s Web site www netopia com for more information Obtaining an IP address Typically each network computer that requires Internet access requires its own unique IP address If some or all network...

Page 17: ... name are all obtainable via WAN DHCP if your ISP supports it With Network Address Translation If you are using SmartIP NAT you should obtain the following If you are connecting to a remote site using Network Address Translation on your router your provider will not define the IP address information on your local LAN You can define this information based on an IP configuration that may already be ...

Page 18: ...2 4 User s Reference Guide ...

Page 19: ...etopia R7200 SDSL Router status lights on page 3 4 Find a location When choosing a location for the Netopia Router consider Available space and ease of installation Physical layout of the building and how to best use the physical space available for connecting your Netopia Router to the LAN Available wiring and jacks Distance from the point of installation to the next device length of cable or wal...

Page 20: ...ernet or an add on card with TCP IP installed and configured See Before running SmartStart on page 5 2 An SDSL wall outlet wired for a connection to a Competitive Local Exchange Carrier CLEC who supports Symmetric Digital Subscriber Line connections Identify the connectors and attach the cables Identify the connectors and switches on the back panel and attach the necessary Netopia Router cables Th...

Page 21: ...console screens You can use this if you are an experienced user See Connecting a console cable to your router on page 6 3 Auxiliary port An HD 15 auxiliary port for attaching an external modem or the optional AppleTalk kit Crossover switch A crossover switch with Normal and Uplink positions If you use Ethernet Port 1 for a direct Ethernet connection between a computer and the router set the switch...

Page 22: ...d 7 flash yellow Data is transmitted or received by the ethernet controller 12 flashes yellow The Ethernet interface detects a collision 13 flashes red Link is detected 14 though 21 are solid green Data are received on their respective ports 14 though 21 flash green Note 5 and 8 through 11 are unused since the SDSL link is carried only on WAN channel 1 Also Console carrier 6 is ignored if the cons...

Page 23: ...onnecting to an Ethernet network on page 4 3 Adding an external modem on page 4 5 Connecting to a LocalTalk network on page 4 6 Overview You can connect the Netopia R7200 to an IP or IPX network that uses Ethernet If you have purchased the AppleTalk feature expansion kit you can also connect the router to a LocalTalk network that uses PhoneNET cabling Additionally you can connect an external modem...

Page 24: ...ble for PC computers Windows 95 includes a built in TCP IP stack See Configuring TCP IP on Windows 95 98 or NT computers on page 5 6 Macintosh computers use either MacTCP or Open Transport See Configuring TCP IP on Macintosh computers on page 5 10 Ethernet Ethernet hardware and software drivers enable your PC or Macintosh computer to communicate on the LAN EtherTalk and LocalTalk These are AppleTa...

Page 25: ...either 10Base T or EtherWave Ethernet networks to the Netopia R7200 The following table displays some important attributes of these types of Ethernet Attribute EtherWave 10Base T Max length of backbone branch or end to end cable length 330 feet 100 meters 330 feet 100 meters Cable type Twisted pair 10Base T Twisted pair 10Base T Netopia R7200 port used Ethernet Ethernet Other restrictions Maximum ...

Page 26: ...R7200 back panel The Netopia R7200 in a 10Base T network Ethernet Normal Auxiliary Console Power Line 8 1 1 Uplink Ethernet Nor 8 1 To connect your 10Base T network to the Netopia R7200 through an Ethernet port use a 10Base T cable with RJ 45 connectors If you have more than eight devices to connect you can attach additional devices using another 10Base T hub ...

Page 27: ... that all you have to do is connect your modem to the Auxiliary port and configure its settings in the Line Configuration screens under the WAN Configuration menu For pinout information on the HD 15 to DB 25 modem cable see Pinouts for Auxiliary port modem cable in Appendix F Technical Specifications and Safety Information Macintosh PC PC 10Base T Hub Ethernet Nor 8 1 If you add devices connected ...

Page 28: ...on the Auxiliary port You cannot use both the PhoneNET connector and an external modem If your LocalTalk network is not based on standard PhoneNET cabling use a PhoneNET to LocalTalk adaptor cable available from Farallon division of Netopia Connect the adaptor cable s RJ 11 connector to the AppleTalk cable s PhoneNET connector Connect the cable s mini DIN 3 connector to your LocalTalk network Be s...

Page 29: ...ard will help you set up the router and share the connection The SmartStart Wizard walks you through a series of questions and based on your responses automatically configures the router for connecting your LAN to the Internet or to your remote corporate network The SmartStart Wizard will automatically check your Windows 95 98 or NT PC s TCP IP configuration to be sure you can accept a dynamically...

Page 30: ...ase T Either a built in or third party Ethernet card 10Base T Browser software Netscape Communicator or Microsoft Internet Explorer included on the Netopia CD Required for web based registration and web based monitoring Notes The computer running SmartStart must be on the same Ethernet cable segment as the Netopia R7200 Repeaters such as 10Base T hubs between your computer and the Netopia R7200 ar...

Page 31: ...se files If you have received a CD or diskette that has been customized by your reseller or ISP you can run the SmartStart Wizard directly from the CD or diskette and follow the instructions your reseller or ISP provides This makes your Netopia R7200 configuration even easier If you have received only the ini files from your reseller or ISP perform the following Copy the entire directory folder co...

Page 32: ...utside the 192 168 1 x network and want to continue using it use the Advanced option to assign the router an IP address in your target IP range See Advanced option on page 5 5 If all of the above steps fail to resolve the problem reset the router to its factory default settings and rerun SmartStart See Factory defaults on page 15 6 for instructions Setup Options screen You can choose either Easy o...

Page 33: ...dvanced configuration options available via Telnet are explained in Console Based Management on page 6 1 However if you need no further configuration options click Quit Congratulations You re finished Router IP Address screen If you selected the Advanced option in the Setup Options screen on page 5 4 SmartStart asks you to choose between entering the router s current IP address and assigning an IP...

Page 34: ...turns you to an Additional Configuration screen on page 5 5 New IP Address screen If you want to change the router s IP address you enter the new IP address the subnet mask and the router s serial number in this screen Remember the serial number is on the bottom of the router It is also found in your documentation folio Note Forcing a new IP address may turn off the Netopia R7200 s IP address serv...

Page 35: ...ssing in advance SmartStart need only be launched once To configure your PC for dynamic addressing do the following Note You can also use these instructions to configure other computers on your network to accept IP addresses served by the Netopia R7200 1 Go to the Start Menu Settings Control Panels and double click the Network icon From the Network components list select the Configuration tab 2 Se...

Page 36: ... tab 2 Select TCP IP Your Network Card Then select Properties In the TCP IP Properties screen shown below select the IP Address tab Click Specify an IP Address Enter the following IP Address 192 168 1 2 Subnet Mask 255 255 255 0 or for 12 user models 255 255 255 240 This address is an example of one that can be used to configure the router with the Easy option in the SmartStart Wizard Your ISP or ...

Page 37: ...ick Enable DNS Enter the following information Host Type the name you want to give to this computer Domain Type your domain name If you don t have a domain name type your ISP s domain name for example netopia com DNS Server Search Order Type the primary DNS IP address given to you by your ISP Click Add Repeat this process for the secondary DNS Domain Suffix Search Order Enter the same domain name ...

Page 38: ...can only be done after the router is configured You must have built in Ethernet or a third party Ethernet card and its associated drivers installed in your Macintosh Dynamic configuration recommended If you configure your Netopia R7200 using SmartStart you can accept the dynamic IP address assigned by your router The Dynamic Host Configuration Protocol DHCP which enables dynamic addressing is enab...

Page 39: ...its own IP address Option Select Type Connect via Ethernet Configure Manually IP Address 192 168 1 2 Subnet mask 255 255 255 0 or for 12 user models 255 255 255 240 Router or Gateway address 192 168 1 1 Name server address Enter the primary and secondary name server addresses given to you by your ISP Implicit Search Path Starting domain name Enter your domain name if you do not have a domain name ...

Page 40: ... Transport TCP IP 1 Go to the Apple menu Select Control Panels and then TCP IP 2 With the TCP IP window open go to the Edit menu and select User Mode Choose Advanced and click OK 3 In the TCP IP window select or type information into the fields as shown in the following table 4 Close the TCP IP control panel and save the settings These are the only fields you need to modify in these screens TCP IP...

Page 41: ... From the pull down menu under EtherTalk select an available zone then click the More button In the MacTCP More window select the Server radio button If necessary fill in the Domain Name Server information given to you by your administrator 5 Restart the computer Note More information about configuring your Macintosh computer for TCP IP connectivity through a Netopia R7200 can be found in Technote...

Page 42: ...5 14 User s Reference Guide ...

Page 43: ... management screens contain seven entry points to the Netopia Router configuration and monitoring features The entry points are displayed in the Main Menu shown below The Easy Setup menus display and permit changing the values contained in the default connection profile Experienced users can use Easy Setup to initially configure the router directly through a console session Easy Setup menus contai...

Page 44: ...Statistics Logs menus display nine sets of tables and device logs that show information about your router your network and their history See Statistics Logs on page 13 4 for detailed information The Quick Menus screen is a shortcut entry point to 22 of the most commonly used configuration menus that are accessed through the other menu entry points The Quick View menu displays at a glance current r...

Page 45: ...pia R7200 back panel has a connector labeled Console for attaching the Router to either a PC or Macintosh computer via the serial port on the computer On a Macintosh computer the serial port is called the Modem port or Printer port This connection lets you use the computer to configure and monitor the Netopia R7200 via the console screens To connect the Netopia R7200 to your computer for serial co...

Page 46: ...re contains an autobaud detection feature If you are at any screen on the serial console you can change your baud rate and press Return HyperTerminal for the PC requires a disconnect The new baud rate is displayed at the bottom of the screen To Use These Keys Move through selectable items in a screen or pop up menu Up Down Left and Right Arrow Set a change to a selected item or open a pop up menu ...

Page 47: ... SDSL Router Accessing the Easy Setup console screens To access the console screens Telnet to the Netopia Router over your Ethernet network or physically connect with a serial console cable and access the Netopia Router with a terminal emulation program See Connecting through a Telnet session on page 6 2 or Connecting a console cable to your router on page 6 3 Note Before continuing make sure you ...

Page 48: ...nsole port your computer s serial port is not being used by another device such as an internal modem or an application Turn off all other programs other than your terminal emulation program that may be interfering with your access to the port You have entered the correct password if necessary Your Netopia R7200 s console access may be password protected from a previous configuration See your syste...

Page 49: ... Router a Static IP address do the following 1 Open a Telnet session to 192 168 1 1 to bring up the Main Menu If you don t know how to do this see Connecting through a Telnet session on page 6 2 Alternatively you can connect the console cable and open a direct serial console connection using a terminal emulator program See Connecting a console cable to your router on page 6 3 Parameter Your value ...

Page 50: ...ou the choice of PPP or RFC1483 Your selection depends on which type your ISP uses The default is RFC1483 2 Press the Down arrow key until you reach NEXT SCREEN Press Return to bring up the next screen Netopia R7200 v4 3 5 Easy Setup WAN Configuration System Configuration Utilities Diagnostics Statistics Logs Quick Menus Quick View SDSL Line Configuration Data Link Encapsulation RFC1483 TO MAIN ME...

Page 51: ...0 0 0 0 which allows for dynamic addressing when your ISP assigns an address each time you connect However you can enter another specific address if you want to use static addressing In that case enter the local WAN address your ISP gave you Press Return 3 If you selected PPP data link encapsulation in the SDSL Line Configuration screen a PPP Authentication menu item appears The authentication pro...

Page 52: ...SP has given you This will be the Netopia Router s IP address If Network Address Translation is enabled in the Easy Setup connection profile the Ethernet IP Address defaults to an address 192 168 1 1 within a range reserved by the Internet address administration authority for use within private networks Because this is a private network address it should never be directly connected to the Internet...

Page 53: ...ter does not recognize the destination of any IP traffic it forwards that traffic to this gateway Do not confuse the remote IP address and the Default IP Gateway s address with the block of local IP addresses you receive from your ISP You use the local IP addresses for the Netopia R7200 s Ethernet port and for IP clients on your local network The remote IP address and the default gateway s IP addr...

Page 54: ...outer will restart and your configuration settings will be activated You can then Exit or Quit your Telnet application Easy Setup is now complete Easy Setup Security Configuration It is strongly suggested that you password protect configuration access to your Netopia By entering a Name and Password pair here access via serial Telnet SNMP and Web Server will be password protected Be sure to remembe...

Page 55: ...P P P Pa a a ar r r rt t t t I I I II I I I A A A Ad d d dv v v va a a an n n nc c c ce e e ed d d d C C C Co o o on n n nf f f fi i i ig g g gu u u ur r r ra a a at t t ti i i io o o on n n n ...

Page 56: ...User s Reference Guide ...

Page 57: ... powerful method for experienced users to set up their router s connection profiles and system configuration This section covers the following topics WAN configuration on page 8 1 Creating a new Connection Profile on page 8 3 The default profile on page 8 6 System configuration screens on page 8 9 Navigating through the system configuration screens on page 8 10 System configuration features on pag...

Page 58: ...ess you are otherwise advised by your ISP or exchange carrier CLEC The ATM VCI Virtual Channel Identifier value is used to identify a connection between two ATM switches In most cases the default value of 38 can be used unless you are otherwise advised by your ISP or exchange carrier CLEC Select Data Link Encapsulation and press Return The pop up menu will offer you the choice of PPP or RFC1483 Yo...

Page 59: ...entry describing how the router is to get to a remote site or how to recognize and authenticate a connection To create a new connection profile you navigate to the WAN Configuration screen from the Main Menu and select Add Connection Profile The Add Connection Profile screen appears On a Netopia R7200 SDSL Router you can add up to 15 more connection profiles for a total of 16 but you can only use ...

Page 60: ...lable Select IPX Profile Parameters and press Return The IPX Profile Parameters screen appears IP Profile Parameters Address Translation Enabled Yes Local WAN IP Address 0 0 0 0 Remote IP Address 0 0 0 0 Remote IP Mask 0 0 0 0 Filter Set Remove Filter Set Receive RIP Off Toggle to Yes if this is a single IP address ISP account Configure IP requirements for a remote network connection here IPX Prof...

Page 61: ... Authentication Protocol CHAP Challenge Handshake Authentication Protocol PAP TOKEN CACHE TOKEN or None PAP is the most common and requires you to enter a User Name and Password in the next two fields CHAP requires you to enter a Host Name and Secret in the next two fields PAP TOKEN requires you to enter a User Name in the next field CACHE TOKEN requires you to enter a User Name and Password in th...

Page 62: ...ration screen and select Display Change Connection Profile The list of Connection Profiles is displayed in a scrolling pop up screen The default profile If you are using RFC1483 datalink encapsulation the Default Profile screen controls whether or not the SDSL link will come up without an explicitly configured connection profile PPP datalink encapsulation does not support a default profile and the...

Page 63: ...rs see IP parameters default profile screen on page 8 8 This screen allows you to configure various IP parameters for SDSL connections established without an explicitly configured connection profile If Must Match a Defined Profile is set to No then an IPX Enabled item is visible Toggling this item to Yes or No the default controls whether or not IPX will be supported on the SDSL link If IPX Enable...

Page 64: ...plicitly configured connection profile For an SDSL link Network Address Translation NAT is disabled by default in the Default Profile You can enable it by toggling to Yes For details on setting up IP Parameters see IP Setup and Network Address Translation on page 10 1 IP Parameters Default Profile Address Translation Enabled No Filter Set Firewall Remove Filter Set Receive RIP Both Transmit RIP Of...

Page 65: ...tem configuration screens in either of two ways By using Telnet with the Router s Ethernet port IP address Through the console port using a local terminal see Connecting a console cable to your router on page 6 3 You can also retrieve the Netopia R7200 s configuration information and remotely set its parameters using the Simple Network Management Protocol see SNMP on page 13 12 Open a Telnet conne...

Page 66: ...hese steps 1 Beginning in the Main Menu select System Configuration and press Return The System Configuration screen appears 2 Select Network Protocols and press Return The Network Protocols screen appears 3 Select IP Setup and press Return The IP Setup screen appears To go back in this sequence of screens use the Escape key Netopia R7200 v4 3 5 Easy Setup WAN Configuration System Configuration Ut...

Page 67: ...P address distribution through DHCP MacIP or BootP Greater network security through the use of filters System configuration of AppleTalk LAN settings System configuration of connections to AppleTalk networks through the Internet or any IP network using AURP AppleTalk tunneling System configuration of connection profiles To access the system configuration screens select System Configuration in the ...

Page 68: ...by means of filter sets and a basic firewall Details are given in Security on page 14 1 IP address serving These screens allow you to configure IP address serving on your network by means of DHCP WANIP BootP and with the optional AppleTalk kit MacIP Details are given in IP address serving on page 10 21 Date and time You can set the system s date and time in the Set Date and Time screen Select Date...

Page 69: ...onsole configuration You can change the default terminal communications parameters to suit your requirements To go to the Console Configuration screen select Console Configuration in the System Configuration screen Follow these steps to change a parameter s value 1 Select the parameter you want to change 2 Select a new value for the parameter Return to step 1 if you want to configure another param...

Page 70: ...isit the Netopia Web site at www netopia com for information on new feature sets how to obtain them and how to install them on your Netopia R7200 Logging You can configure a UNIX compatible syslog client to report a number of subsets of the events entered in the router s WAN Event History See WAN Event History on page 13 6 The Syslog client for the PC only is supplied as a ZIP file on the Netopia ...

Page 71: ... Setup Request from our DN 5108645534 May 5 10 14 06 tsnext netopia com Requested Disc from DN 917143652500 May 5 10 14 06 tsnext netopia com Received Clear Confirm for our DN 5108645534 May 5 10 14 06 tsnext netopia com Link 1 down No answer May 5 10 14 06 tsnext netopia com Device restarted May 5 10 14 06 tsnext netopia com Received Speech Setup Ind from DN not supplied May 5 10 14 06 tsnext net...

Page 72: ...8 16 User s Reference Guide ...

Page 73: ...ilure or physical cable breakage or in the case of Frame Relay with LMI or PPP loss of end to end connectivity Detection of one of these failures causes the router to switch from using the primary WAN port to using the Auxiliary port to which a modem has been attached or to an internal asynchronous modem WAN module if one is installed The port used for backup is determined by whether or not a seco...

Page 74: ...appears Backup WAN Configuration Main Menu Configuration WAN Configuration WAN Wide Area Network Setup Display Change Connection Profile Add Connection Profile Delete Connection Profile WAN Default Answer Profile Scheduled Connections Backup Configuration Establish WAN Connection Disconnect WAN Connection From here you will configure yours and the remote sites WAN information ...

Page 75: ...n IP address or resolvable DNS name that the router will ping Should this address become unreachable the router will treat this as a loss of connectivity and begin the backup timer Select Recovery to WAN_name where WAN_name is the type of WAN connection you have e g SDSL and press Return Choose either Manual or Automatic to determine how the system will return to the primary WAN link when it becom...

Page 76: ... not editable Note Auxiliary port configuration in the Line Configuration Screen for the WAN module is hidden if backup is enabled and no Internal modem WAN module is installed IP Setup screen The IP Setup screen now permits entry of a backup IP gateway address This field is visible if the Default IP Gateway field is filled out and Backup is enabled You must have a default gateway configured for t...

Page 77: ...c is initiated from the LAN If you want to use the backup link to provide redundancy for services such as a web service that you provide to the outside world you must force the connection to stay up You do this by creating a scheduled connection entry that will be a permanent forced up connection for the backup port The backup port will be activated upon primary WAN link failure and remain active ...

Page 78: ...et Weekly Schedule and press Return The Set Weekly Schedule screen appears Scheduled Connections Display Change Scheduled Connection Add Scheduled Connection Delete Scheduled Connection Return Enter to add a Scheduled Connection Navigate from here to add modify change delete Scheduled Connections Add Scheduled Connection Scheduled Connection Enable On How Often Weekly Schedule Type Forced Up Set W...

Page 79: ...becomes effective Now if your primary WAN link fails the backup link will become active and remain active until the primary link recovers Management Statistics The Statistics Logs menu offers a Backup Management Statistics option To view the Backup Management Statistics from the Main Menu select Statistics Logs Set Weekly Schedule Monday Yes Tuesday Yes Wednesday Yes Thursday Yes Friday Yes Saturd...

Page 80: ...kup or Recovery Time Since Detection is a display only field that is only visible if backup or recovery is in progress It displays the elapsed time since detection of either primary WAN line failure or re establishment of the Statistics Logs WAN Event History Device Event History IP Routing Table IPX Routing Table IPX SAP Bindery Table Served IP Addresses Backup Management Statistics General Stati...

Page 81: ...tion of backup or recovery Quick View Default IP Gateway 0 0 0 0 CPU Load 4 Unused Memory 387 KB Domain Name Server 0 0 0 0 WAN Interface Group Auxiliary Port Domain Name happyinternet com WAN Event History Current Date 4 17 99 10 57 12 AM Date Time Event SCROLL UP 04 17 99 10 39 37 Line Failure Switching to backup port 04 17 99 10 38 51 Line Recovery Switching to primary port 04 17 99 10 37 42 Li...

Page 82: ...9 10 User s Reference Guide ...

Page 83: ...ion also provides increased security by hiding the local IP addresses of the LAN connected to the Netopia R7200 from the outside world With SmartIP the setup is simpler so Internet service providers typically offer internet accounts supporting Network Address Translation at a significant cost savings For a detailed discussion of Network Address Translation see Appendix C Understanding Netopia NAT ...

Page 84: ...ore flexibility it does have an important limitation the router requires a static IP address to support Web FTP or other services available to the WAN To support these services with NAT enabled a service can be associated with only one machine on the LAN When connected to the Internet or some other large network using NAT the individual machines on your LAN are not directly accessible from the WAN...

Page 85: ...r 10 0 0 4 to a Windows NT PC 10 0 0 5 to a Windows 95 PC Note See Associating port numbers with nodes on page 10 6 3 In the connection profile toggle Address Translation Enabled to Yes or No Yes to enable NAT and press Return The Easy Setup connection profile is accessible by using either of the following two approaches From the Easy Setup menu in the Main Menu screen select the next screen Conne...

Page 86: ...umbered or Unnumbered For more information see Appendix B Understanding IP Addressing and Appendix C Understanding Netopia NAT Behavior IP Profile Parameters Address Translation Enabled Yes IP Addressing Unnumbered Local WAN IP Address 0 0 0 0 Remote IP Address 0 0 0 0 Remote IP Mask 0 0 0 0 Filter Set Remove Filter Set Receive RIP Both Transmit RIP v2 multicast Configure IP requirements for a rem...

Page 87: ...d or NAT profiles The Local WAN IP Mask is displayed for numbered profiles The Remote IP Address and Remote IP Mask are displayed for unnumbered profiles IP Profile Parameters Address Translation Enabled Yes IP Addressing Numbered Local WAN IP Address 0 0 0 0 Local WAN IP Mask 0 0 0 0 Filter Set Remove Filter Set Receive RIP Off Enter an IP address in decimal and dot form xxx xxx xxx xxx Configure...

Page 88: ... 168 100 6 is assigned to the Netopia R7200 NAT indicates that the address was assigned dynamically by Network Address Translation Internal users can access the Internet as they always do the external Internet however views all traffic from the internal network as originating from 192 168 100 6 and all traffic your network receives is addressed to 192 168 100 6 Associating port numbers with nodes ...

Page 89: ...se Network Address Translation NAT will attempt to autoconfigure itself without an explicitly configured connection profile if permitted to do so by the setting of the Must Match a Defined Profile item in the Default Profile screen See The default profile on page 8 6 The link up process at the interface between the SDSL data link encapsulation module and the IP router functions as follows When the...

Page 90: ...aling in to the router For example to create a new Connection Profile you navigate to the WAN Configuration screen from the Main Menu and select Add Connection Profile The Add Connection Profile screen appears On a Netopia R7200 SDSL Router you can add up to 15 more connection profiles for a total of 16 although only one can be used at a time 1 Select Profile Name and enter a name for this connect...

Page 91: ...u item becomes available Select IPX Profile Parameters and press Return The IPX Profile Parameters screen appears 6 Toggle or enter any IPX parameters you require and return to the Add Connection Profile screen by pressing Escape For more information see IPX Setup on page 11 1 IP Profile Parameters Address Translation Enabled Yes IP Addressing Unnumbered Local WAN IP Address 0 0 0 0 Local WAN IP M...

Page 92: ... port on both the server and client With two different UDP TCP ports exported you can have Web servers on two different IP hosts If you will be using multiple connection profiles define the remote IP address of the most accessible profile such as that for your ISP to the default IP gateway in the TCP IP settings on users workstations That way IP traffic not intended specifically for any of the rem...

Page 93: ...nfigure IP setup for your Netopia R7200 Select Ethernet IP Address and enter the IP address for the Netopia R7200 s Ethernet port Select Ethernet Subnet Mask and enter the subnet mask for the Ethernet IP address that you entered in the last step For unlimited user models if you desire multiple subnets select Define Additional Subnets twelve user models do not offer this option If you select this i...

Page 94: ...Routing Information Protocol RIP is needed if there are IP routers on other segments of your Ethernet network that the Netopia R7200 needs to recognize If this is the case select Receive RIP and select v1 v2 or Both from the pop up menu With Receive RIP set to v1 the Netopia R7200 s Ethernet port will accept routing information provided by RIP packets from other routers that use the same subnet ma...

Page 95: ...ported Service screen appears Exported Services Local Port to IP Address Remapping Show Change Exports Add Export Delete Export Return Enter to configure UDP TCP Port to IP Address redirection Add Exported Service Service Local Server s IP Address 0 0 0 0 ADD EXPORT NOW CANCEL ...

Page 96: ...s 10 0 0 2 Some services such as Timbuktu require the export of multiple TCP ports When you associate Timbuktu with a local server or Timbuktu host all of the major Timbuktu services are exported i e Observe Control Send and Exchange Note If the TCP port of a service you want to use is not listed you can add it by selecting Other on the pop up menu Add Exported Service Type Port Service ftp 21 tel...

Page 97: ...e up to eight Ethernet IP subnets on unlimited user models one primary subnet and up to seven secondary subnets by entering IP address subnet mask pairs IP Setup Ethernet IP Address 192 128 117 162 Ethernet Subnet Mask 255 255 255 0 Define Additional Subnets Default IP Gateway 192 128 117 163 Primary Domain Name Server 0 0 0 0 Secondary Domain Name Server 0 0 0 0 Domain Name Receive RIP Both Trans...

Page 98: ...gured To add an IP subnet enter the Netopia R7200 s IP address on the subnet in the IP Address field in a particular row and the subnet mask for the subnet in the Subnet Mask field in that row For example To delete a configured subnet set both the IP address and subnet mask values to 0 0 0 0 either explicitly or by clearing each field and pressing Return to commit the change When a configured subn...

Page 99: ...ow to reach a particular network However static routes are used only if they appear in the IP routing table which contains all of the routes used by the Netopia R7200 see IP routing table on page 13 8 Static routes are helpful in situations where a route to a network must be used and other means of finding the route are unavailable For example static routes are useful when you cannot rely on RIP T...

Page 100: ...low will appear The table has the following columns Dest Network The network IP address of the destination network Static Routes Display Change Static Route Add Static Route Delete Static Route Configure View Delete Static Routes from this and the following Screens Dest Network Subnet Mask Next Gateway Priority Enabled 0 0 0 0 0 0 0 0 163 176 8 1 Low Yes Select a Static Route to modify ...

Page 101: ...d toggle it to No Be sure to read the rules on the installation of static routes in the IP routing table See Rules of static route installation on page 10 20 Select Destination Network IP Address and enter the network IP address of the destination network Select Destination Network Subnet Mask and enter the subnet mask used by the destination network Select Next Gateway IP Address and enter the IP...

Page 102: ...es in the Add Static Route screen see Adding a static route on page 10 19 Deleting a static route To delete a static route in the Static Routes screen select Delete Static Route to display a table of static routes Select a static route from the table and press Return to delete it To exit the table without deleting the selected static route press Escape Rules of static route installation The Netopi...

Page 103: ...contrast BootP address assignments are permanent since there is no lease renewal mechanism in BootP The third protocol called Dynamic WAN is part of the PPP MP suite of wide area protocols used for WAN connections It allows remote terminal adapters and NAT enabled routers to be assigned a temporary IP address for the duration of their connection The fourth protocol called MacIP is used only for co...

Page 104: ...o first figure out which machines are going to be allocated specific static IP addresses so that you can determine the pool of IP addresses that you will be serving addresses from via DHCP BootP Dynamic WAN and or MacIP Example Your ISP has given your Netopia R7200 the IP address 192 168 6 137 with a subnet mask of 255 255 255 248 The subnet mask allocated will give you six IP addresses to use whe...

Page 105: ...s appears instead If you select Configure Address Pools you will be taken to the IP Address Pools screen that allows you to configure an address serving pool for each of the configured Ethernet IP subnets See IP Address Pools on page 10 24 IP Address Serving Configure Address Pools Serve DHCP Clients Yes DHCP NetBios Options Serve BOOTP Clients Yes Serve Dynamic WAN Clients Yes Serve MacIP KIP Cli...

Page 106: ...fy the base and extent of the address serving pool for a particular subnet Entering 0 0 0 0 for the first client address or 0 for the number of clients indicates that no addresses will be served from the corresponding Ethernet IP subnet The Client Gateway column allows you to specify the default gateway address that will be provided to clients served an address from the corresponding pool The valu...

Page 107: ...est if the address is available The client stores this address in non volatile storage for example on disk and the specific storage method location differs depending on the client operating system When requesting an address a client may provide a client identifier or if it does not the Netopia R7200 may construct a pseudo client identifier for the client When the client subsequently requests an ad...

Page 108: ... NetBIOS a non IBM network operating system or network interface card must offer a NetBIOS emulator Many vendors either provide a version of NetBIOS to interface with their hardware or emulate its transport layer communications services in their network products A NetBIOS emulator is a program provided by NetWare clients that allow workstations to run applications that support IBM s NetBIOS calls ...

Page 109: ...are now finished setting up DHCP NetBIOS Options To return to the IP Address Serving screen press Escape To enable BootP s address serving capability select Serve BOOTP Clients and toggle to Yes Note Addresses assigned through BootP are permanently allocated from the IP Address Serving pool until you release them To release these addresses navigate back to the Main Menu then Statistics Logs Served...

Page 110: ... communicate with the Internet or any other IP network Users should point their MacTCP or TCP IP control panel to look in the LocalTalk zone for the MacIP server Macintosh computers that have Ethernet selected in the MacTCP or TCP IP control panel can do their own AppleTalk IP conversions Setting up MacIP involves choosing MacIP dynamic address serving and then configuring that type KIP forwarding...

Page 111: ...erve Note that the address pool IP range is listed for your referral in this screen You have finished your IP setup MacIP KIP Forwarding Setup This screen tells the Netopia how many static addresses to allocate for MacIP KIP clients The addresses must fall within one of the address pools from the previous screen Number of Static Addresses 0 First Static Client Address 0 0 0 0 Enter the number of s...

Page 112: ...10 30 User s Reference Guide ...

Page 113: ... features IPX RIP and SAP NetBIOS broadcast packet forwarding IPX type 20 IPX packet filtering definable by source and destination IPX address and socket number for added security IPX SAP filtering to aid in optimizing WAN bandwidth Dial on demand features Spoofing of IPX keep alive SPX and server serialization packets Configurable RIP SAP timers on connection profiles IPX definitions This section...

Page 114: ... and provides timing information ticks so that the fastest route to a destination can be determined IPX routers use RIP to create and dynamically maintain databases of internetwork routing information See IPX routing tables on page 11 5 for more information Service Advertising Protocol SAP SAP is a protocol that provides servers and routers with a method for exchanging service information Using SA...

Page 115: ...ithout bringing up the dial up link SPX keep alive packets are also treated in this manner IPX RIP and SAP messages will not be sent if the link is down Together these features enable the user to remain connected to a Novell server or SPX peer without bringing up the dial up link except to send and receive actual user data IPX setup screen You will use the IPX Setup screen to configure the Etherne...

Page 116: ...tBios Forwarding and toggle it to Yes This parameter will determine whether IPX Packet type 20 packets are forwarded on the Ethernet interface These packets are used by NetBIOS and some other applications 6 Select Ethernet Inbound SAP Filter Set to filter incoming IPX SAP advertisements on the Ethernet By attaching an incoming SAP filter on the Ethernet you can restrict the number of SAP entries l...

Page 117: ...IPX internet IPX routing tables IPX routing tables provide information on current IPX routes and services To go to the IPX Routing Table screen select IPX Routing Table in the Statistics Logs screen This table shows detailed information about current IPX network routes To go to the IPX SAP Bindery Table screen select IPX SAP Bindery Table in the Statistics Logs screen This table shows detailed inf...

Page 118: ...11 6 User s Reference Guide ...

Page 119: ...d pair or coaxial over which information travels from one device to another AppleTalk protocol AppleTalk is a protocol set for local area networks developed by Apple Computer While initially applied to the LocalTalk cabling system for connecting Macintosh computers and LaserWriter printers it has been expanded to use other cabling systems such as Ethernet as well as dial up telephone networks and ...

Page 120: ...ing a zone from which the service can be selected Like network numbers zone names are assigned by routers A routing table is maintained by each AppleTalk router The table serves as a map of the internet specifying the path and distance in hops between its router and other networks The routing table is used to determine whether a router will forward a data packet and if so to which network You can ...

Page 121: ...ork a seed router is configured with the correct information and other routers obtain their information from that router when they are turned on or reset Routers commonly use one of three types of seeding procedures hard seeding soft seeding and non seeding Hard seeding When a router that uses hard seeding is turned on or reset it requests network number and zone name information from any existing...

Page 122: ...ters must be soft seeding or non seeding and the Netopia R7200 must already be active when those other routers are rebooted If you want the Netopia R7200 and all other routers on your network to use only their own configurations set the Netopia R7200 and all other routers to hard seeding In this case any router including the Netopia R7200 that is rebooted will not begin routing if it detects a rou...

Page 123: ...pgrade Feature Set Netopia Feature Set Upgrade You may be able to extend the features of your Netopia by purchasing a Software Upgrade For a list of available upgrades please see the release notes that came with your Netopia or visit the Netopia Communications web site at www netopia com To purchase an upgrade you must provide your Serial Number which is xx xx xx You will receive an Upgrade Key wh...

Page 124: ...e EtherTalk network that you will be connecting to the Netopia R7200 use the zone names and network numbers used by that router for that EtherTalk network Otherwise your EtherTalk network may experience routing conflicts The Netopia R7200 supports creating up to 32 zone names As an alternative you can set EtherTalk seeding to soft seeding and let the Netopia R7200 receive the zone name and network...

Page 125: ... you are using LocalTalk with the Netopia R7200 select LocalTalk Enabled and make sure LocalTalk is set to On which is the default Note Since the LocalTalk connector attaches to the Auxiliary port on the router that port will no longer be available for a third external modem Select LocalTalk Zone Name and enter a new or existing zone name Note Your LocalTalk network may already have a zone and net...

Page 126: ...creen appears To activate AURP and enable connections to and from AURP partners select AURP Enable and toggle it to On Viewing AURP partners To see a table of existing AURP partners select Display Change Partner and press Return Note The Netopia R7200 can define a total of 32 AURP partners AURP Free Trade Zone The Free Trade Zone is an AURP security feature It allows the Netopia administrator to s...

Page 127: ...ople for example chagall arts edu Domain names are matched to the IP addresses actually used by IP routers for example 163 7 8 202 To initiate a connection with an AURP partner select Initiate Connection and toggle it to Yes This will open a connection to the remote AppleTalk network after rebooting You can choose to restrict this partner to the Free Trade Zone by toggling Restrict to Free Trade Z...

Page 128: ...AURP tunnels select Accept Connections From and choose Anyone or Configured Partners Only from the pop up menu If you choose Anyone all incoming AURP connections will be accepted The more secure option is Configured Partners Only which accepts connections only from recognized AURP partners the ones you have set up Configuring AURP Options In the AURP Setup screen select Advanced Options and go to ...

Page 129: ...g a remote AppleShare volume In many AppleTalk internets individual AppleTalk networks come and go Routers are designed to notify each other at the end of their Update Interval every time there s such a change in the network topology This will cause the Netopia s WAN link to be brought up To minimize what may be unnecessary calls change the Update Interval value to some larger value At the end of ...

Page 130: ... range select Cluster Remote Networks and toggle it to Yes This setting takes any number of remote networks being remapped and causes them to be remapped into a continuous range To override the AppleTalk maximum limit of 15 hops select Enable Hop Count Reduction and toggle it to Yes Hosts on a local AppleTalk network will then see AppleTalk destinations across the IP tunnel as being only one hop a...

Page 131: ...ng topics Quick View status overview on page 13 1 Statistics Logs on page 13 4 Event histories on page 13 5 Routing tables on page 13 7 Served IP Addresses on page 13 10 System Information on page 13 12 SNMP on page 13 12 Web based management pages on page 13 16 Quick View status overview You can get a useful overall status report from the Netopia R7200 in the Quick View screen To go to the Quick ...

Page 132: ...Address The Netopia R7200 s hardware address for those interfaces that support DHCP IP Address The Netopia R7200 s IP address entered in the IP Setup screen IPX Address The Netopia R7200 s IPX address entered in the IPX Setup screen EtherTalk Address The Netopia R7200 s AppleTalk address on its EtherTalk Phase II interface entered in the EtherTalk Phase II Setup screen only if the optional AppleTa...

Page 133: ...AT address in use for this connection the IPX address in use if IP is also in use or the ISDN caller identification if available Status lights This section shows the current real time status of the Netopia R7200 s status lights LEDs It is useful for remotely monitoring the router s status The Quick View screen s arrangement of LEDs corresponds to the physical arrangement of LEDs on the router Each...

Page 134: ...ffic on the Netopia R7200 s data ports This information is useful for monitoring and troubleshooting your LAN Note that the counters roll over at their maximum field width that is they restart again at 0 General Statistics Statistics Logs Main Menu General Statistics Phys I F Rx Bytes Tx Bytes Rx Pkts Tx Pkts Rx Err Tx Err Ethernet Hub 123456789 123456789 12345678 12345678 12345678 12345678 LocalT...

Page 135: ...ansmitted Rx Packets The number of packets received Tx Pkts The number of packets transmitted Rx Err The number of bad Ethernet packets received Tx Err The number of errors occurring when Ethernet packets are transmitted simultaneously by nodes on the LAN Event histories The Netopia R7200 records certain relevant occurrences in event histories Event histories are useful for diagnosing problems bec...

Page 136: ...oll down select SCROLL DOWN at the bottom of the list and press Return WAN Event History Statistics Logs Main Menu Device Event History WAN Event History Current Date 12 3 98 03 02 23 PM Date Time Event SCROLL UP 07 03 98 13 59 06 DSL IP up channel 1 gateway 173 166 107 1 07 03 98 13 59 05 DSL Channel 1 up 07 03 98 13 59 05 WAN data link activated at 1040 Kbps 07 03 98 13 58 32 Device restarted 07...

Page 137: ... about the selected event appears Press Return or Escape to dismiss the dialog box To clear the Device Event History select Clear History and press Return Routing tables You can view all of the IP IPX and AppleTalk routes in the Netopia R7200 s IP IPX and AppleTalk routing tables respectively To go to a routing table screen select the routing table you are interested in from the Statistics Logs sc...

Page 138: ...stics Logs WAN Event History Device Event History IP Routing Table IPX Routing Table IPX SAP Bindery Table AppleTalk Routing Table Served IP Addresses General Statistics System Information IP Routing Table Network Address Subnet Mask via Router Port Type SCROLL UP 0 0 0 0 255 0 0 0 0 0 0 0 Other 127 0 0 1 255 255 255 255 127 0 0 1 Loopback Local 192 168 1 0 255 255 255 240 192 168 1 1 Ethernet Loc...

Page 139: ...y an asterisk it has multiple zones To display the zones select the network entry and press Return Range Displays the ending network number for the extended network Def Zone Name Displays the zone or zones associated with the specified network or network range The zone name shown is either the only zone or the default zone name for an extended network To see the complete list of zones for an exten...

Page 140: ... table corresponds to an AppleTalk route or network range If the list of routes shown exceeds the size of the screen you can scroll through it by using SCROLL UP and SCROLL DOWN To scroll up select SCROLL UP at the top of the table and press Return To scroll down select SCROLL DOWN at the bottom of the table and press Return Served IP Addresses You can view all of the IP addresses currently being ...

Page 141: ... lease period to elapse Release BootP Leases Releases any BootP leases that may be in place and which may no longer be required Reclaim Declined Addresses Reclaims served leases that have been declined for example by devices that may no longer be on the network IP Address Lease Management Reset All Leases Release BootP Leases Reclaim Declined Addresses Hit RETURN ENTER you will return to the previ...

Page 142: ...Netopia R7200 supports the following management information base MIB documents MIB II RFC 1213 Interface MIB RFC 1229 Ethernet MIB RFC 1643 AppleTalk MIB I RFC 1243 Netopia MIB These MIBs are on the Netopia R7200 CD included with the Netopia R7200 Load these MIBs into your SNMP management software in the order they are listed here Follow the instructions included with your SNMP manager on how to l...

Page 143: ...in the MIB II system group Although optional the information you enter in these items can help a system administrator manage the network more efficiently Community strings The Read Only Community String and the Read Write Community String are like passwords that must be used by an SNMP manager querying or configuring the Netopia R7200 An SNMP manager using the Read Only Community String can examin...

Page 144: ...operations and Set Requests are still allowed using the non empty Read Write community string Even if you decide not to use SNMP you should change the community strings This prevents unauthorized access to the Netopia R7200 through SNMP For more information on security issues see Suggested security measures on page 14 1 SNMP traps An SNMP trap is an informational message sent from an SNMP agent in...

Page 145: ...eivers screen Modifying IP trap receivers 1 To edit an IP trap receiver select Display Change IP Trap Receiver in the IP Trap Receivers screen 2 Select an IP trap receiver from the table and press Return 3 In the Change IP Trap Receiver screen edit the information as needed and press Return Deleting IP trap receivers 1 To delete an IP trap receiver select Delete IP Trap Receiver in the IP Trap Rec...

Page 146: ...The System Information page appears System Information page This is the initial page you link to when you connect to the web based management pages It displays useful general information about your router Ethernet Address The router s hardware or MAC address Firmware Version The router s model number and current firmware revision level Current Date The current date and time as you have configured ...

Page 147: ...ernal activity If you click any link in the left frame that page is displayed in the right frame Event History pages The Netopia R7200 records certain relevant occurrences in event histories Event histories are useful for diagnosing problems because they list what happened before during and after a problem occurs You can view two different event histories one for the router s system and one for th...

Page 148: ...13 18 User s Reference Guide WAN Event History page You can refresh the WAN Event History log by clicking the update this page link ...

Page 149: ...Monitoring Tools 13 19 Device Event History page You can refresh the Device Event History log by clicking the update this page link ...

Page 150: ...13 20 User s Reference Guide ...

Page 151: ...s and filters all of which are covered later in this chapter there are other actions you can take to make the Netopia R7200 and your network more secure Change the SNMP community strings or passwords The default community strings are universal and could easily be known to a potential intruder Set the answer profile so it must match incoming calls to a connection profile Leave the Enable Dial in Co...

Page 152: ...s access to the configuration screens Access to the Security Options screen can be protected with a password Select Password for This Screen in the Security Options screen and enter a password Make sure this password is secure and is different from any of the user account passwords Protecting the configuration screens You can protect the configuration screens with user accounts You can administer ...

Page 153: ...lay a list of accounts Select an account from the list and press Return to delete it To exit the list without deleting the selected account press Escape Dial in console access Remote modem terminal emulator setups can dial in to the modem line and establish a remote console session even though they are not using PPP This allows Netopia Inc s Up and Running Guaranteed department or other administra...

Page 154: ...o the SNMP screens select Enable Telnet Access to SNMP Screens and toggle it to No See SNMP traps on page 13 14 To restrict Telnet access to all of the configuration screens select Enable Telnet Console Access and toggle it to No About filters and filter sets Security should be a high priority for anyone administering a network connected to the Internet Using packet filters to control network comm...

Page 155: ...of all outgoing packages That inspector looks for a certain destination which could be as specific as a street address or as broad as an entire country and checks each package s destination address to see if it matches that destination A filter inspects data packets like a customs inspector scrutinizing packages Filter priority Continuing the customs inspectors analogy imagine the inspectors lined...

Page 156: ...ply their filters in a particular order The first filter applied can forward or discard a packet before that packet ever reaches any of the other filters If the first filter can neither forward nor discard the packet because it cannot match any criteria the second filter has a chance to forward or reject it and so on Because of this hierarchical structure each filter is said to have a priority The...

Page 157: ...sent from The destination IP address where the packet is going The type of higher layer Internet protocol the packet is carrying such as TCP or UDP Port numbers A filter can also match a packet s port number attributes but only if the filter s protocol type is set to TCP or UDP since only those protocols use port numbers The filter can be configured to match the following The source port number th...

Page 158: ...cified in the filter Equal For the filter to match the packet s port number must equal the port number specified in the filter Greater Than For the filter to match the packet s port number must be greater than the port number specified in the filter Greater Than or Equal For the filter to match the packet s port number must be greater than or equal to the port number specified in the filter Other ...

Page 159: ...h This is the port on the sending host that originated the packet D Port The destination port to match This is the port on the receiving host for which the packet is intended On Displays Yes when the filter is in effect or No when it is not Fwd Shows whether the filter forwards Yes a packet or discards No it when there s a match Protocol Number to use Full name N A 0 Ignores protocol type ICMP 1 I...

Page 160: ...been anything The mask for Source IP Addr must be 255 255 255 255 since an exact match is desired Source IP Addr 199 211 211 17 Source IP address mask 255 255 255 255 Dest IP Addr 0 0 0 0 Destination IP address mask 0 0 0 0 Note To learn about IP addresses and masks see Appendix B Understanding IP Addressing 3 Using the tables on page 14 7 find the destination port and protocol numbers the local T...

Page 161: ...t on paper by determining how the filters would respond to a number of different hypothetical packets Consider the combined effect of the filters If every filter in a set fails to match on a particular packet the packet is Forwarded if all the filters are configured to discard not forward Discarded if all the filters are configured to forward Discarded if the set contains a combination of forward ...

Page 162: ...ter sets This section covers IP filters and filter sets For working with IPX filters and filter sets see IPX filters on page 14 21 To work with filters and filter sets begin by accessing the filter set screens Note Make sure you understand how filters work before attempting to use them Read the section About filters and filter sets beginning on page 14 4 The procedure for creating and maintaining ...

Page 163: ...filter set you add will be called Filter Set 1 the next filter will be Filter Set 2 and so on To give a new filter set a different name select Filter Set Name and enter a new name for the filter set To save the filter set select ADD FILTER SET The saved filter set is empty contains no filters but you can return to it later to add filters see Modifying filter sets on page 14 17 Or you can add filte...

Page 164: ...ilter your local network is the destination of the packets it checks and the remote network is their source From the perspective of an output filter your local network is the source of the packets and the remote network is their destination Adding filters to a filter set In this section you ll learn how to add an input filter to a filter set Adding an output filter works exactly the same way provi...

Page 165: ...s allows you to further modify the way the filter will match on the destination address Enter 0 0 0 0 to force the filter to match on all destination IP addresses 7 Select Protocol Type and enter ICMP TCP UDP Any or the number of another IP transport protocol see the table on page 14 9 Note If Protocol Type is set to TCP or UDP the settings for port comparison that you configure in steps 8 and 9 w...

Page 166: ...he parameters in this screen are set in the same way as the ones in the Add Filter screen see Adding filters to a filter set on page 14 14 Deleting filters To delete a filter select Delete Input Filter or Delete Output Filter in the Add IP Filter Set screen to display a table of filters Select the filter from the table and press Return to delete it Press Escape to exit the table without deleting t...

Page 167: ...in the IP Filter Sets screen to display a list of filter sets Select a filter set from the list and press Return to delete it Press Escape to exit the list without deleting the filter set A sample IP filter set This section contains the settings for a filter set called Basic Firewall which is part of the Netopia R7200 s factory configuration Basic Firewall blocks undesirable traffic originating fr...

Page 168: ...s forward all TCP and UDP traffic respectively when the destination port is greater than 1023 This type of traffic generally does not allow a remote host to connect to the LAN using one of the potentially intrusive Internet services such as Telnet FTP and WWW Output filter 1 This filter forwards all outgoing traffic to make sure that no outgoing connections from the LAN are blocked Setting Input f...

Page 169: ...e the only one used with Basic Firewall The results of combining filter set modifications can be difficult to predict It is recommended that you take special care if you are making more than one modification to the sample filter set Trusted host To allow unlimited access by a trusted remote host with the IP address a b c d corresponding to a numbered IP address such as 163 176 8 243 insert the fol...

Page 170: ...omparison Equal Dest Port ID 21 Note A similar filter could be used to permit Telnet or WWW access Set the Dest Port ID to 23 for Telnet or to 80 for WWW AURP tunnel To allow an AURP tunnel between a remote AURP router with the IP address a b c d corresponding to a numbered IP address such as 163 176 8 243 and a local AURP router including the Netopia R7200 itself insert the following input filter...

Page 171: ...ainst that server being accessed IPX packet filtering must be used for that purpose Setting up and using IPX filter sets is a four step process 1 Create the filters to use 2 Create the filter sets to use 3 Add filters to the filter sets 4 Attach the filter sets to the answer profile or to connection profiles You can configure IPX filters and set up IPX filter sets from the IPX Filters and Filter S...

Page 172: ...esired filter and press Return to go to the Change Packet Filter screen The parameters in this screen are the same as the ones in the Add Packet Filter screen see the next section Adding a packet filter To add a new IPX packet filter select Add IPX Packet Filter in the IPX Filters and Filter Sets screen and press Return The Add Packet Filter screen appears By default the filter s socket numbers an...

Page 173: ...en without saving the new filter Deleting a packet filter To delete a packet filter select Delete IPX Packet Filter in the IPX Filters and Filter Sets screen to display a table of filters Select a filter from the table and press Return to delete it Press the Escape key to exit the table without deleting the filter IPX packet filter sets Before the individual filters can be used IPX packet filters ...

Page 174: ...ch screen appears Select a filter and toggle the packet forwarding action to Yes forward or No discard Add Packet Filter Set Filter Set Name Show Filters Change Action on Match Append Filter Remove Filter ADD FILTER SET NOW CANCEL Return accepts ESC cancels Left Right moves insertion point Del deletes Configure an IPX Filter Set here You must ADD FILTER SET NOW to save Show Filters Change Actions ...

Page 175: ...lter set Note Deleting a filter set does not delete the filters in that set However the filters in the deleted set are no longer in effect unless they are part of another set The deleted set will no longer appear in the answer profile or any connection profiles to which it was added IPX SAP filters For each IPX SAP filter you can configure a set of parameters to match on certain attributes of IPX ...

Page 176: ...server name NETOPIA with NETO NETO IA and NETOPIA 3 To specify a socket for the filter to match on select Socket and enter an IPX socket number 4 To specify a type number for the filter to match on select Type and enter an IPX type number 5 To specify an IPX network address for the filter to match on select IPX Network and enter an IPX network address 6 To specify an IPX node address for the filte...

Page 177: ...es in the Add SAP Filter Set screen see the next section Adding a SAP filter set To add a new IPX SAP filter set select Add IPX SAP Filter Set in the IPX Filters and Filter Sets screen The Add SAP Filter Set screen appears Follow these steps to configure the new SAP filter set 1 Select Filter Set Name and enter a descriptive name for the filter set 2 To change the forwarding action of filters in t...

Page 178: ...g the filter press Escape 5 To save the current filter set select ADD FILTER SET NOW in the Add SAP Filter Set screen Select CANCEL to exit the Add SAP Filter Set screen without saving the new filter set Deleting a SAP filter set To delete a SAP filter set select Delete IPX SAP Filter Set in the IPX Filters and Filter Sets screen to display a list of filter sets Select a filter set from the list a...

Page 179: ...er information is what the packet filter uses to make filtering decisions It is important to note that a packet filter does not look into the IP data stream the User Data from above to make filtering decisions Basic protocol types TCP Transmission Control Protocol TCP provides reliable packet delivery and has a retransmission mechanism so packets are not lost RFC 793 is the specification for TCP U...

Page 180: ...used you would have to figure out everything that you want to disallow now and in the future Firewall Logic Firewall design is a test of logic and filter rule ordering is critical If a packet is forwarded through a series of filter rules and then the packet matches a rule the appropriate action is taken The packet will not forward through the remainder of the filter rules For example if you had th...

Page 181: ...to convert the IP address and mask in question to binary This will allow you to perform the logical AND to determine whether a packet matches a filter rule Logical AND function When a packet is compared in most cases a logical AND function is performed First the IP addresses and subnet masks are converted to binary and then combined with AND The rules for the logical use of AND are as follows 0 AN...

Page 182: ... have the ACK bit set The ACK bit is helpful for firewall design and reduces the number of potential filter rules A filter rule could be created just allowing incoming TCP packets with the ACK bit set since these packets had to be originated from the local network Example IP filter set screen This is an example of the Netopia IP filter set screen Implied Meaning Y Y Y N If all filter rules are YES...

Page 183: ...n TCP or UDP ports These options are as follows Example network Item What it means No Compare Does not compare TCP or UDP port Not Equal To Matches any port other than what is defined Less Than Anything less than the port defined Less Than or Equal Any port less than or equal to the port defined Equal Matches only the port defined Greater Than or Equal Matches the port or any port greater Greater ...

Page 184: ...ule 200 1 1 0 Source IP Network Address 255 255 255 128 Source IP Mask Forward No What happens on match IP Address Binary Representation 200 1 1 28 00011100 Source address in incoming IP packet AND 255 255 255 128 10000000 Perform the logical AND 00000000 Logical AND result Filter Rule 200 1 1 0 Source IP Network Address 255 255 255 128 Source IP Mask Forward No What happens on match IP Address Bi...

Page 185: ... this packet will be forwarded Example 4 Incoming packet has the source address of 200 1 1 104 Filter Rule 200 1 1 96 Source IP Network Address 255 255 255 240 Source IP Mask Forward No What happens on match IP Address Binary Representation 200 1 1 184 10111000 Source address in incoming IP packet AND 255 255 255 240 11110000 Perform the logical AND 10110000 Logical AND result Filter Rule 200 1 1 ...

Page 186: ...e IP Network Address in the Netopia R7200 is 01100000 and the source IP address after the logical AND is 01100000 this rule does match and this packet will not be forwarded This rule masks off a single IP address Filter Rule 200 1 1 96 Source IP Network Address 255 255 255 255 Source IP Mask Forward No What happens on match IP Address Binary Representation 200 1 1 96 01100000 Source address in inc...

Page 187: ...console session on page 15 6 Factory defaults on page 15 6 Transferring configuration and firmware files with TFTP on page 15 7 Transferring configuration and firmware files with XMODEM on page 15 9 Restarting the system on page 15 12 Note These utilities and tests are accessible only through the console based management screens See Chapter 6 Console Based Management for information on accessing t...

Page 188: ...295 3 Select Data Size to change the default setting This is the size in bytes of each Ping packet sent The default setting is adequate in most cases but you can change it to any value from 0 only header data to 1664 4 Select Delay seconds to change the default setting The delay in seconds determines the time between Ping packets sent The default setting is adequate in most cases but you can chang...

Page 189: ...me Message Description Resolving host name Finding the IP address for the domain name style address Can t resolve host name IP address can t be found for the domain name style address Pinging Ping test is in progress Complete Ping test was completed Cancelled by user Ping test was cancelled manually Destination unreachable from w x y z Ping test was able to reach the router with IP address w x y z...

Page 190: ...re dropped and a destination unreachable notification is returned to the sender see the table on the previous page This ensures that no infinite routing loops occur The TTL value can be set and retrieved using the SNMP MIB II ip group s ipDefaultTTL object Trace Route You can count the number of routers between your Netopia Router and a given destination with the Trace Route utility In the Statist...

Page 191: ...et client select Telnet from the Utilities Diagnostics menu The Telnet client screen appears Enter the host name or the IP address in dotted decimal format of the machine you want to Telnet into and press Return Either accept the default control character Q used to suspend the Telnet session or type a different one START A TELNET SESSION becomes highlighted Press Return and the Telnet session will...

Page 192: ...ress Return The Netopia R7200 will reboot and its settings will return to the factory defaults deleting your configurations In an emergency you can also use the Reset switch to return the router to its factory default settings Call Netopia Technical Support for instructions on using the Reset switch Note Reset to factory defaults with caution You will need to reconfigure all of your settings in th...

Page 193: ...rmware The router firmware governs how the router communicates with your network and the WAN module the WAN module firmware governs how the WAN module communicates with the remote site WAN module firmware is included on your Netopia CD for XMODEM transfer and later updates will be available on the Netopia website Router firmware updates are also periodically posted on the Netopia website To update...

Page 194: ... TFTP Transfer State item will change from Idle to Reading Firmware The TFTP Current Transfer Bytes item will reflect the number of bytes transferred Downloading configuration files The Netopia R7200 can be configured by downloading a configuration file using TFTP Once downloaded the file reconfigures all of the router s parameters as if someone had manually done so through the console port To dow...

Page 195: ...r your network administrator To upload a configuration file follow these steps 1 Select TFTP Server Name and enter the server name or IP address of the TFTP server you will use The server name or IP address is available from the site where the server is located 2 Select Config File Name and enter a name for the file you will upload The file will appear with the name you choose on the TFTP server Y...

Page 196: ...hout downloading the file or select CONTINUE to download the file If you choose CONTINUE you will have ten seconds to use your terminal emulation software to initiate an XMODEM transfer of the firmware file If you fail to initiate the transfer in that time the dialog box will disappear and the terminal emulation software will inform you of the transfer s failure You can then try again X Modem File...

Page 197: ...ransfer of the configuration file If you fail to initiate the transfer in that time the dialog box will disappear and the terminal emulation software will inform you of the transfer s failure You can then try again The system will reset at the end of a successful file transfer to put the new configuration into effect Uploading configuration files A file containing a snapshot of the Netopia R7200 s...

Page 198: ... transfer s failure You can then try again Restarting the system You can restart the system by selecting the Restart System item in the Utilities Diagnostics screen You must restart the system whenever you reconfigure the Netopia R7200 and want the new parameter values to take effect Under certain circumstances restarting the system may also clear up system or network malfunctions Some configurati...

Page 199: ...P P P Pa a a ar r r rt t t t I I I II I I II I I I A A A Ap p p pp p p pe e e en n n nd d d di i i ix x x xe e e es s s s ...

Page 200: ...User s Reference Guide ...

Page 201: ...on process review the following suggestions before calling for technical support There are four zones to consider when troubleshooting initial configuration 1 The computer s connection to the router 2 The router s connection to the telecommunication line s 3 The telecommunication line s connection to your ISP 4 The ISP s connection to the Internet If the connection from the computer to the router ...

Page 202: ...The default values are 9600 N 8 and 1 Characters are missing from some of the configuration screens Try changing the Netopia R7200 s default speed of 9600 bps and setting your terminal emulation software to match the new speed Network problems Problems communicating with remote IP hosts Verify the accuracy of the default gateway s IP address entered in the IP Setup or Easy Setup screen Use the Net...

Page 203: ...ip size Reset Switch slot 3 Carefully insert the larger end of a standard size paper clip until you contact the internal Reset Switch No need to unwind the paper clip 4 Press this switch 5 This will reset the unit to factory defaults and you will now be able to reprogram the router Power outages If you suspect that power was restored after a power outage and the Netopia R7200 is connected to a rem...

Page 204: ...on appears in the Netopia R7200 s Main Menu screen Model number Serial number Firmware version What kind of local network s do you have with how many devices Ethernet LocalTalk EtherTalk TCP IP IPX Other How to reach us We can help you with your problem more effectively if you have completed the environment profile in the previous section If you contact us by telephone please be ready to supply Ne...

Page 205: ...ound in the following Netopia World Wide Web server via http www netopia com Internet via anonymous FTP to ftp netopia com pub FAX Back This service provides technical notes that answer the most commonly asked questions and offers solutions for many common problems encountered with Netopia products FAX Back 1 510 814 5040 ...

Page 206: ...A 6 User s Reference Guide ...

Page 207: ...s the term IP in a very general and inclusive way to identify all of the following Networks that use the Internet Protocol along with accompanying protocols such as TCP UDP and ICMP Packets that include an IP header within their structure Devices that send IP packets About IP addressing Every networking protocol uses some form of addressing in order to ensure that packets are delivered correctly I...

Page 208: ...ge organizations that have very large numbers of IP hosts while smaller organizations with fewer hosts get Class B or Class C addresses You can tell the various classes apart by the value of the first or high order byte Class A networks use values from 1 to 127 Class B networks use values from 128 to 191 and Class C networks use values from 192 to 223 The following table summarizes some of the dif...

Page 209: ...determine this information simply from an IP address Subnet mask information is configured as part of the process of setting up IP routers and gateways such as the Netopia R7200 Note If you receive a routed account from an ISP there must be a mask associated with your network IP address By using the IP address with the mask you can discover exactly how many IP host addresses you actually have To c...

Page 210: ... 255 128 mask 192 168 1 2 via router Usable IP Addresses available to Customer Site A 192 168 1 1 192 168 1 126 Netopia R7200 A IP Address 192 168 1 2 Subnet Mask 255 255 255 128 Remote IP 192 168 1 129 Remote Sub 255 255 255 128 Gateway 192 168 1 1 Usable IP Addresses avail able to Customer Site A 192 168 1 1 192 168 1 126 PC 1 IP Address 192 168 1 3 Subnet Mask 255 255 255 128 Gateway 192 168 1 ...

Page 211: ...able to access Customer Site A but not the Internet If it is not possible to define a static route on Router B RIP could be enabled to serve the same purpose To use RIP instead of a static route enable Transmit RIP on Netopia R7200 A and Transmit and Receive RIP on Router B This will allow the route from Customer Site B to propagate on Router B and Customer Site A Example Working with a Class C su...

Page 212: ...elpful in determining dynamic address allocation for a network The term lease describes the action of a workstation requesting and using an IP address The address is dynamic and can be returned to the address pool at a later time The term renew refers to what the workstations do to keep their leased IP address At certain intervals the workstation talks to the DHCP or MacIP server and renews the le...

Page 213: ...equests and renews its lease every half hour The Mac workstation relinquishes its address upon shutdown in all but one case If the TCP IP control panel is set to initialize at startup and no IP services are used or the TCP IP control panel is not opened the DHCP address will NOT be relinquished upon shutdown However if the TCP IP control panel is opened or if an IP application is used the Mac WILL...

Page 214: ...t s why manually distributed addresses are called static addresses Static addresses are useful in cases when you want to make sure that a host on your network cannot have its address taken away by the address server Appropriate candidates for a static address include a network administrator s computer a computer dedicated to communicating with the Internet and routers Using address serving The Net...

Page 215: ...e s IP Setup screen This method requires a static value to be used Thus any user dialing in can obtain the same IP address for every connection to the profile If you want to serve addresses statically define the address in the Connection Profile Notes The addresses that are to be served cannot be used elsewhere For example you wouldn t want to define a static address in a Connection Profile to be ...

Page 216: ...ss 199 1 1 32 is reserved as the network address Address 199 1 1 47 is reserved as the broadcast address This leaves 14 addresses to allocate from 199 1 1 33 through 199 1 1 46 If you want to allocate a sub block of 10 addresses using DHCP enter 10 in the DHCP Setup screen s Number of Addresses to Allocate item Then in the same screen s First Address item enter the first address in the sub block t...

Page 217: ...twork address can be used on your main network while portions of it can be subnetted to the two remaining networks Note The IP address a b c 0 has letters in place of the first three numbers to generalize it for this example The figure shows a possible network configuration following this scheme The main network is set up with the Class C address a b c 0 and contains Router A which could be a Neto...

Page 218: ...ss The Netopia R7200 compares the packet s destination IP address with the routes in its IP routing table It begins with the route at the bottom of the list and works up until there s a match or the route to the default gateway is reached When a b c 249 is masked by the first route s subnet mask it yields a b c 248 which matches the network address in the route The Netopia R7200 uses the connectio...

Page 219: ...ckets as well as to packets addressed to their specific individual host addresses Depending on the age and type of IP equipment you use broadcasts will be addressed using either all zeros or all ones but not both If your network requires zeros broadcasting you must configure this through SNMP Packet header types As previously mentioned IP works with other protocols to allow communication over IP n...

Page 220: ...B 14 User s Reference Guide ...

Page 221: ...ed within the Netopia R7200 to acquire a statically or dynamically assigned IP address on its WAN interface and proxy against locally assigned IP addresses on its LAN interface The Netopia R7200 uses a one to many IP address mapping scheme that is against a single IP address the Netopia R7200 acquires on its WAN interface the Netopia R7200 can proxy 14 30 or an unlimited number of IP hosts on the ...

Page 222: ...ified 192 168 X X Class C address range which is used for networks not attached to the Internet This address range is described in RFC 1597 The dynamic IP address acquisition on the WAN interface of the Netopia R7200 is one of several features of NAT Another is the mapping of locally assigned IP addresses to the single globally unique IP address acquired by the Netopia R7200 on its WAN interface N...

Page 223: ...e IP address is substituted with 200 1 1 40 and the source port is substituted with 5001 then the IP packet checksum is recalculated When this modified packet reaches the WWW server on the Internet the WWW server responds and sends the IP packet back to destination IP address 200 1 1 40 and destination port 5001 When the Netopia R7200 receives this IP packet from the WWW server the Netopia R7200 r...

Page 224: ... the single globally unique IP address that was acquired on the WAN interface which is 200 1 1 40 Netopia Router WWW Server 163 176 4 32 ISP Router 200 1 1 1 Netopia Router LAN 192 168 5 1 WAN 200 1 1 40 Workstations A B ISP Router to WWW Src IP 200 1 1 40 Dst IP 163 176 4 32 Src Port 5001 Dst Port 80 ISP Router to WWW Src IP 200 1 1 40 Dst IP 163 176 4 32 Src Port 5002 Dst Port 80 WWW to ISP Rout...

Page 225: ...xported services are essentially user defined pointers for a particular type of incoming TCP or UDP service from the WAN interface to a host on the local LAN interface This is necessary since the Netopia R7200 and thus the attached local LAN has only one IP presence on the WAN interface and Internet Exported services allows the user to redirect one type of service for example Port 21 FTP to a sing...

Page 226: ...W and FTP servers or AURP partners on the Netopia R7200 s local LAN interface In this case if a dynamic IP address is assigned to the WAN interface of the Netopia R7200 each time the administrator of the Netopia R7200 will have to notify clients who want to access services on the Netopia R7200 s LAN interface of the new IP address after each connection With NAT enabled there cannot be two or more ...

Page 227: ...matching purposes and because the IP address of the router the Netopia R7200 is dialing is not always known As mentioned earlier in this appendix NAT works well for IP sessions originated on the Netopia R7200 s LAN interface destined for the Internet without any additional configuration For incoming IP connections from the Internet to a host on the Netopia R7200 s LAN interface exported services n...

Page 228: ...ices can be redirected to a single or multiple hosts For example port 80 WWW server could be redirected to 192 168 5 3 on the Netopia R7200 s LAN interface and port 23 Telnet can be redirected to that same host Summary NAT is a powerful feature of the Netopia R7200 and when used and set up properly can yield a secure network while only using one IP address on the WAN interface Note that the addres...

Page 229: ...0 104 1101000 9 1001 41 101001 73 1001001 105 1101001 10 1010 42 101010 74 1001010 106 1101010 11 1011 43 101011 75 1001011 107 1101011 12 1100 44 101100 76 1001100 108 1101100 13 1101 45 101101 77 1001101 109 1101101 14 1110 46 101110 78 1001110 110 1101110 15 1111 47 101111 79 1001111 111 1101111 16 10000 48 110000 80 1010000 112 1110000 17 10001 49 110001 81 1010001 113 1110001 18 10010 50 1100...

Page 230: ...1 173 10101101 205 11001101 237 11101101 142 10001110 174 10101110 206 11001110 238 11101110 143 10001111 175 10101111 207 11001111 239 11101111 144 10010000 176 10110000 208 11010000 240 11110000 145 10010001 177 10110001 209 11010001 241 11110001 146 10010010 178 10110010 210 11010010 242 11110010 147 10010011 179 10110011 211 11010011 243 11110011 148 10010100 180 10110100 212 11010100 244 1111...

Page 231: ...ations network Bradley T C Brown and A Malis Multiprotocol Interconnect over Frame Relay Network Working Group Internet Engineering Task Force RFC 1490 1993 Case J D J R Davins M S Fedor and M L Schoffstall Introduction to the Simple Gateway Monitoring Protocol IEEE Network March 1988 Case J D J R Davins M S Fedor and M L Schoffstall Network Management and the Design of SNMP ConneXions The Interop...

Page 232: ...No 14 October 1991 McNamara J E Local Area Networks Digital Press Educational Services Digital Equipment Corporation Bedford MA 01730 Malamud C Analyzing Novell Networks Van Nostrand Reinhold New York NY 1991 Malamud C Analyzing Sun Networks Van Nostrand Reinhold New York NY 1991 Martin J SNA IBM s Networking Solution Prentice Hall Englewood Cliffs NJ 1987 Martin J with K K Chapman and the ARBEN G...

Page 233: ...pany New York NY 1991 Stallings W Handbook of Computer Communications Standards Vols 1 3 Howard W Sams Carmel IN 1990 Stallings W Local Networks 3rd ed Macmillan Publishing Company New York NY 1990 Stevens W R TCP IP Illustrated Vol 1 Addison Wesley Publishing Company Reading MA 1994 Sunshine C A ed Computer Network Architectures and Protocols 2nd ed Plenum Press New York NY 1989 Tannenbaum A S Co...

Page 234: ...E 4 User s Reference Guide ...

Page 235: ... nd d d d S S S Sa a a af f f fe e e et t t ty y y y I I I In n n nf f f fo o o or r r rm m m ma a a at t t ti i i io o o on n n n Pinouts for Auxiliary port modem cable HD 15 DB 25 Pin 1 Ground Pin 1 not used Pin 2 TDA Pin 2 TD Pin 3 TDB Pin 3 RD Pin 4 RDA Pin 4 RTS Pin 5 RDB Pin 5 CTS Pin 6 not used Pin 6 DCE Ready Pin 7 DTR Pin 7 Ground Pin 8 CTS Pin 8 RLSD 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 S...

Page 236: ...0 to 40 C Storage temperature 0 to 70 C Relative storage humidity 20 to 80 noncondensing Pin 9 DSR Pin 9 RSET EIA 530 Pin 10 DCD Pin 10 not used Pin 11 not used Pin 11 TSET EIA 530 Pin 12 TCA Pin 12 not used Pin 13 TCB Pin 13 not used Pin 14 RCA Pin 14 TD EIA 530 STD EIA 232 Pin 15 RCB Pin 15 not used Pin 16 RD EIA 530 SRD EIA 232 Pin 17 RSET Pin 18 not used Pin 19 RTS EIA 530 SRTS EIA 232 Pin 20 ...

Page 237: ... routing AURP tunneling MacIP IPX Optional add on feature WAN support SDSL Security IP IPX firewalls UI password security PAP CHAP PAP TOKEN CACHE TOKEN SNMP network management SNMPv1 MIB II RFC 1213 Interface MIB RFC 1229 Ethernet MIB RFC 1643 AppleTalk MIB I 1243 Netopia R7200 MIB Management configuration methods HTTP Web server serial console remote modem console Telnet SNMP Diagnostics Ping ev...

Page 238: ...lectrical devices United States This equipment has been tested and found to comply with the limits for a Class B digital device pursuant to Part 15 of the FCC Rules These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment This equipment generates uses and can radiate radio frequency energy and if not installe...

Page 239: ...e to the user s satisfaction Before installing this equipment users should ensure that it is permissible to be connected to the facilities of the local telecommunications company The equipment must also be installed using an acceptable method of connection In some cases the company s inside wiring associated with a single line individual service may be extended by means of a certified connector as...

Page 240: ...at the network interface Use caution when installing or modifying telephone lines Avoid using a telephone other than a cordless type during an electrical storm There may be a remote risk of electric shock from lightning Do not use the telephone to report a gas leak in the vicinity of the leak Battery The Netopia R7200 s lithium battery is designed to last for the life of the product The battery is...

Page 241: ...irections Asymmetric DSL Service is better suited for individual consumers who generally require more speed in the download stream web surfing with little data going in the other direction Netopia s SDSL router has fewer implementation issues than ADSL routers It uses 2B1Q line encoding same as T1 or ISDN and this doesn t produce the same noise and interference as ADSL which uses DMT or CAP encodi...

Page 242: ...ortable with SDSL since it uses the same technology as its predecessor and ISDN The line coding employed by both HDSL and ISDN has not caused any interference with existing services like T1 This means service providers deploy SDSL solutions without worry about impact on other services in neighboring binder groups ...

Page 243: ...nnection points bandwidth The range of frequencies expressed in Kilobits per second that can pass over a given data transmission channel within a network The bandwidth determines the rate at which information can be sent through a channel the greater the bandwidth the more information that can be sent in a given amount of time BAP Bandwidth Allocation Protocol Protocol that manages the dynamic ban...

Page 244: ...acters that serve much like passwords for devices using SNMP Different community strings may be used to allow an SNMP user to gather device information or change device configurations CRC Cyclic Redundancy Check A computational means to ensure the integrity of a block of data The mathematical function is computed before the data is transmitted at the originating device Its numerical value is compu...

Page 245: ...ateways provide address translation services but do not translate data Gateways must be used in conjunction with special software packages that allow computers to use networking protocols not originally designed for them hard seeding A router setting In hard seeding if a router that has just been reset detects a network number or zone name conflict between its configured information and the inform...

Page 246: ...s Internet related services Most importantly an ISP provides Internet access services and products to other companies and consumers ITU International Telecommunication Union United Nations specialized agency for telecommunications Successor to CCITT LAN local area network A privately owned network that offers high speed communications channels to connect information processing equipment in a limit...

Page 247: ... pathway but are arranged in proper sequence at the destination side before forwarding the complete message to an addressee packet switching network A telecommunications network based on packet switching technology wherein a transmission channel is occupied only for the duration of the transmission of the packet PAP PPP authentication protocol A method for ensuring secure network access parameter ...

Page 248: ...eding non seeding seed router and soft seeding seed router A router that provides network number and zone information to any router that starts up on the same network See also hard seeding non seeding seeding and soft seeding serial port A connector on the back of the workstation through which data flows to and from a serial device server A device or system that has been specifically configured to...

Page 249: ...media such as telephone lines WANs can span a state a country or even the world WAN IP In addition to being a router the Netopia ISDN Router is also an IP address server There are four protocols it can use to distribute IP addresses over the WAN which include DHCP BootP IPCP and MacIP WAN IP is a feature for both the Small Office and Corporate Netopia ISDN Router models wiring closet A central loc...

Page 250: ...8 User s Reference Guide ...

Page 251: ...2 8 tunnel 14 20 B back panel 3 2 ports 3 3 backup line 9 1 basic firewall 14 18 BootP 10 21 clients 10 27 broadcasts B 13 C capabilities 1 1 change static route 10 20 community strings 13 13 configuration troubleshooting PC A 1 configuration files downloading with TFTP 15 8 downloading with XMODEM 15 11 uploading with TFTP 15 9 uploading with XMODEM 15 11 configuration screens protecting 14 2 con...

Page 252: ...1 E Easy Setup connection profile 7 5 IP setup 7 6 IPX setup 7 6 navigating 6 4 overview 7 1 quick connection path 7 3 Ethernet 4 2 EtherTalk 4 2 event history device 13 7 WAN 13 6 exported services 10 12 F features 1 1 filter parts 14 7 parts of 14 7 filter priority 14 5 filter set adding 14 13 display 14 9 filter sets adding 14 13 defined 14 4 deleting 14 17 disadvantages 14 11 modifying 14 17 s...

Page 253: ... spoofing 11 3 ISP account types 2 2 information to obtain 2 3 L LED status 13 3 LEDs 3 4 13 3 line backup 9 1 backup IP gateway 9 4 connection profiles 9 5 management and statistics 9 7 scheduled connections 9 5 WAN configuration 9 2 LocalTalk 12 7 connecting 4 6 setup 12 7 M MacIP 10 21 defined B 8 MacIP KIP Forwarding options 10 28 MacIP setup 12 3 MacIP KIP clients 10 28 MacIP KIP static optio...

Page 254: ...numbers 14 7 proxy addresses 10 1 Q Quick View 13 1 R restarting the system 15 12 restricting telnet access 14 4 RIP 10 12 router to serve IP addresses to hosts 10 1 Routing Information Protocol RIP 11 2 routing tables AppleTalk 13 9 IP 10 17 13 8 S SAP filter sets viewing and modifying 14 28 SAP server types 11 3 screens connecting to 8 9 SDSL defined G 1 security filters 14 4 14 20 measures to i...

Page 255: ... Transfer Protocol TFTP 15 7 Trivial File Transfer Protocol see TFTP troubleshooting A 1 configuration PC A 1 console based management 7 2 event histories 13 5 13 17 WAN statistics 13 4 trusted host 14 19 trusted subnet 14 19 tunneling 12 3 U unproxied addresses 10 1 updating firmware with TFTP 15 7 with XMODEM 15 10 updating Netopia s firmware 15 7 uploading configuration files 15 9 with TFTP 15 ...

Page 256: ...Index 6 ...

Page 257: ...TNESS FOR A PARTICULAR PURPOSE REGARDING THE ENCLOSED PRODUCT EXCEPT AS OTHERWISE EXPRESSLY PROVIDED ABOVE NETOPIA AND ITS LICENSOR S DO NOT WARRANT GUARANTEE OR MAKE ANY REPRESENTATION REGARDING THE USE OR THE RESULTS OF THE USE OF THE PRODUCT IN TERMS OF ITS CORRECTNESS ACCURACY RELIABILITY CURRENTNESS OR OTHERWISE THE ENTIRE RISK AS TO THE RESULTS AND PERFORMANCE OF THE PRODUCT IS ASSUMED BY YO...

Page 258: ...2 User s Reference Guide ...

Reviews:

No comments

Related manuals for R7200

Verizon DSL-2750B

Brand: D-Link Pages: 2

Brand: D-Link Pages: 4

Brand: DataRemote Pages: 2

Brand: iDirect Pages: 60

Module NI PXI-8250

Brand: National Instruments Pages: 39

Brand: National Instruments Pages: 16

Brand: National Instruments Pages: 23

RDX QuikStation 4

Brand: Tandberg Data Pages: 2

Brand: Lancom Pages: 70

Brand: Patton electronics Pages: 12

DiamondLink 3201

Brand: Patton Pages: 12

Ezi-SERVOII EtherCAT TO

Brand: Fastech Pages: 108

Brand: Global411 Pages: 15

Brand: iGateWeb.com Pages: 6

Brand: Axis Pages: 98

Brand: Maipu Pages: 19

Ether-GSH24T v3

Brand: AirLive Pages: 2

Dimension GS-2024

Brand: ZyXEL Communications Pages: 266

Brands by name

0 1 2 3 4 5 6 7 8 9 A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

Popular brands

Load more brands