background image

Firewall

67

Internet Access

Policy

Figure 43   

The Internet Access Policy Screen

The 

Internet Access Policy

 screen lets you configure your Router’s 

access availability according to specified day/time with options in 
blocking the application, website (URL), and website keywords.

1

Select 

Access Policy number 

from the drop-down menu.

2

Enter the Policy Name in the field provided.

3

Select on Status for enabling or disabling this policy.

4

The policy can be applied to a single client or a group clients.

To do this, enter the MAC Addresses or the IP Addresses of each PC 
up to the total number limited by the number of the entries.Or enter the 
range of PC’s IP Address with the last digits of their IP Addresses.

5

Select on Deny/Allow to specify your restriction types.

6

To change the schedule, check the appropriate check box for each day 
you want to allow access, and enter the permitted access times for 
each day in 24-hour clock format.

For example, to allow access Monday through Friday between 9 am 
and 5 pm, check the

 

boxes for Mon, Tue, Wed, Thu and Fri, and select 

Содержание OfficeConnect 3CRWDR200A-75

Страница 1: ...www 3Com com Part Number 10015251 Rev AA Published June 2006 OfficeConnect ADSL Wireless 108Mbps 11g Firewall Router User Guide Model WL 553 3CRWDR200A 75 3CRWDR200B 75 ...

Страница 2: ...ion contained in or delivered to you in conjunction with this User Guide Unless otherwise indicated 3Com registered trademarks are registered in the United States and may or may not be registered in other countries 3Com OfficeConnect and the 3Com logo are registered trademarks of 3Com Corporation Intel and Pentium are registered trademarks of Intel Corporation Microsoft MS DOS Windows and Windows ...

Страница 3: ...3 Package Contents 13 Minimum System and Component Requirements 15 Front Panel 15 Rear Panel 17 2 HARDWARE INSTALLATION Introduction 19 Safety Information 19 Positioning the Router 19 Using the Rubber Feet 20 Stacking the Router 20 Wall Mounting 20 Before you Install your Router 21 Powering Up the Router 22 Connecting the Router 23 3 SETTING UP YOUR COMPUTERS Obtaining an IP Address Automatically ...

Страница 4: ...ess Settings 41 Summary 42 5 ROUTER CONFIGURATION Navigating Through the Router Configuration Pages 45 Main Menu 45 Option Tabs 46 Welcome Screen 46 Notice Board 47 Password 47 Wizard 48 LAN Settings 49 Unit Configuration 49 DHCP Lease Table 50 Wireless Settings 50 Configuration 51 Encryption 53 Configuring WPA WPA2 Encryption 54 Configuring WEP Encryption 56 WMM 58 Connection Control 59 Advanced ...

Страница 5: ...rt 70 Time Zone 71 Configuration 72 Upgrade 73 Advanced 73 Routing 74 Static Route 74 RIP 75 DNS 77 DDNS 77 DSL 79 IPSec 79 Proxy ARP 80 ALG 81 Management 82 Syslog 82 SNMP 83 Trusted Station 84 Remote Management 84 Diagnostics 85 Device Info 86 Summary 86 WAN 86 Statistics 87 Route 87 ARP 88 Support Feedback 88 Support 89 Feedback 89 ...

Страница 6: ...ED 97 Recovering from Corrupted Software 97 Frequently Asked Questions 98 A USING THE 3COM DISCOVERY TOOL Running the Discovery Application 101 Windows Installation 95 98 2000 Me NT 101 B IP ADDRESSING The Internet Protocol Suite 103 Managing the Router over the Network 103 IP Addresses and Subnet Masks 103 How does a Device Obtain an IP Address and Subnet Mask 105 DHCP Addressing 105 Static Addre...

Страница 7: ...v C SAFETY INFORMATION D END USER SOFTWARE LICENSE AGREEMENT E ISP INFORMATION GLOSSARY REGULATORY NOTICES FOR THE ADSL WIRELESS 108MBPS 11G FIREWALL ROUTER INDEX ...

Страница 8: ...vi ...

Страница 9: ...te is shipped with the OfficeConnect ADSL Wireless 108Mbps 11g Firewall Router and contains information that differs from the information in this guide follow the information in the release note Most user guides and release notes are available in Adobe Acrobat Reader Portable Document Format PDF on the 3Com World Wide Web site http www 3com com Naming Convention Throughout this guide the OfficeCon...

Страница 10: ...njury Table 2 Text Conventions Convention Description The words enter and type When you see the word enter in this guide you must type something and then press Return or Enter Do not press Return or Enter when an instruction simply says type Keyboard key names If you must press two or more keys simultaneously the key names are linked with a plus sign Example Press Ctrl Alt Del Words in italics Ita...

Страница 11: ...product number on the title page Page number if appropriate Example OfficeConnect ADSL Wireless 108Mbps 11g Firewall Router User Guide Product Number 3CRWDR200A 75 Page 24 Do not use this e mail address for technical support questions For information about contacting Technical Support please refer to the Support and Safety Information sheet Related Documentation In addition to this guide each Rout...

Страница 12: ...10 ABOUT THIS GUIDE ...

Страница 13: ...tlet and harness the combined power of all of your computers OfficeConnect ADSL Wireless 108Mbps 11g Firewall Router The OfficeConnect ADSL Wireless 108Mbps 11g Firewall Router is designed to provide a cost effective means of sharing a single broadband Internet connection amongst several wired and wireless computers The Router also provides internet services with standardized mechanism namely NAT ...

Страница 14: ...Firewall Router in your network Figure 2 it becomes your connection to the Internet Connections can be made directly to the Router or to an OfficeConnect Switch or Hub expanding the number of computers you can have in your network Figure 2 Example Network Using a ADSL Wireless 108Mbps 11g Firewall Router ...

Страница 15: ... to enable remote access to Web FTP and other services on your network Security Firewall protection against Internet hacker attacks and encryption to protect wireless network traffic Filtered access of inappropriate Web sites using the built in URL filter Internet Access Policy to schedule your Internet Access rules with options in keywords and applications blocking Wireless Multimedia to maximize...

Страница 16: ...your model is 3CRWDR200B 75 One Product Range Sheet One CD ROM containing the Firewall Router Discovery program and this User Guide Installation Guide One Support and Safety Information Sheet One Warranty Flyer If any of these items are missing or damaged please contact your retailer ...

Страница 17: ...ur Router An 802 11b or 802 11g wireless NIC A cable modem or DSL modem with an Ethernet port RJ 45 connector An active Internet access account A Web browser that supports JavaScript such as Netscape 4 7 or higher Internet Explorer 5 0 or higher or Mozilla 1 2 1 or higher Front Panel The front panel of the Router contains a series of indicator lights LEDs that help describe the status of various n...

Страница 18: ...cable to reset the unit to Factory Defaults See Reset to Factory Default on page 72 On for 2 seconds and then off The Router has detected and prevented a hacker from attacking your network from the Internet Continuously on A fault has been detected with your Router during the start up process Refer to Chapter 6 Troubleshooting 2 Power LED Green Indicates that the Router is powered on 3 Wireless LA...

Страница 19: ...f nothing is connected the modem is switched off or there is a problem refer to Chapter 6 Troubleshooting Rear Panel The rear panel Figure 4 of the Router contains four LAN ports one Ethernet Cable DSL port a power adapter OK LED and a power adapter socket Figure 4 Router Rear Panel 6 Wireless Antennae The antennae on the product should be placed in a V position when initially installed CAUTION Do...

Страница 20: ...m with the power adapter or adapter cable 10 Reset Button Press this button for resetting your Router to factory default 11 Four 10 100 LAN ports Using suitable RJ 45 cable you can connect your Router to a computer or to any other piece of equipment that has an Ethernet connection for example a hub or a switch The LAN ports will automatically set themselves to MDI or MDIX depending on the device t...

Страница 21: ...MENT Veuillez lire attentivement la section Consignes importantes de sécurité avant de mettre en route Positioning the Router You should place the Router in a location that is conveniently located for connection to the cable or DSL modem that will be used to connect to the Internet is centrally located to the wireless computers that will connect to the Router A suitable location might be on top of...

Страница 22: ...r self adhesive rubber feet to prevent your Router from moving around on your desk or when stacking with other flat top OfficeConnect units Only stick the feet to the marked areas at each corner of the underside of your Router Stacking the Router If you are stacking your Router with other OfficeConnect units install the Router at the top of the stack Refer to the documentation supplied with your o...

Страница 23: ...he wall Router CAUTION Only wall mount single units do not wall mount stacked units Before you Install your Router Before you install and configure your Router you need the following additional information If you do not have this information contact your Internet Service Provider ISP Space is provided below for you to record this information If you have a DSL connection and your ISP allocates IP i...

Страница 24: ...ically over a protocol other than PPPoE you do not need any further information This configuration is typical of cable connections Powering Up the Router To power up the Router 1 Plug the power adapter into the power adapter socket located on the back panel of the Router 2 Plug the power adapter into a standard electrical wall socket IP Address ____ ____ ____ ____ Subnet Mask ____ ____ ____ ____ D...

Страница 25: ...ect your computer to one of the four LAN ports on the Router using a Category 5 twisted pair cable Check that the corresponding LAN status LED on the Router lights You have now completed the hardware installation of your Router Next you need to set up your computers so that they can make use of the Router to communicate with the Internet 3Com recommends that you perform the initial Router configur...

Страница 26: ...24 CHAPTER 2 HARDWARE INSTALLATION To communicate wirelessly with your Router your wireless NIC should be set as follows Encryption none Service Area Name SSID 3Com Channel 11 ...

Страница 27: ...e that you have at least one computer connected to the Firewall Router Refer to Chapter 2 for details on how to do this 2 Launch your Web browser on the computer 3 Enter the following URL in the location or address field of your browser http 192 168 1 1 Figure 9 The Login screen displays Figure 9 Web Browser Location Field Factory Default 4 To log in as an administrator enter the password the defa...

Страница 28: ...try Selection screen will appear Select the country you wish to configure the Firewall Router for then click Apply Figure 11 If your purchased your Firewall Router in the United States you do not see this screen as it is automatically set Figure 11 Country Selection Screen 6 When you have selected a country either ...

Страница 29: ...Figure 12 Select the Wizard tab and click Wizard or If your Router has not been configured before the Wizard will launch automatically refer to Figure 13 7 Click Next 8 You will be guided step by step through a basic setup procedure Figure 12 Welcome Screen ...

Страница 30: ...nistration Password screen Figure 14 appears type the Old Password then a new password in both the New Password and Confirm Password boxes 3Com recommends entering a new password when setting up the Firewall Router for the first time The Firewall Router is shipped from the factory with a default password admin 1 Password is case sensitive ...

Страница 31: ...ual Path Identifier contained in the ATM cell header to designate the virtual path on the physical ATM link VCI stands for Virtual Channel Identifier 16 bit field in the header of an ATM cell The VCI together with the VPI is used to identify the next destination of a cell as it passes through a series of ATM switches on its way to its destination You may select on DSL Auto connect or enter the val...

Страница 32: ...ded into a real time RT class and non real time NRT class VBR RT is used for connections in which there is a fixed timing relationship between samples VBR NRT is used for connections in which there is no fixed timing relationship between samples but that still need a guaranteed QoS Typical VBR sources are compressed voice and video These applications require small delay variations Figure 16 The AT...

Страница 33: ... page 39 and click Next PPPoE PPPoA Mode Figure 17 PPPoE Screen To setup the Firewall Router for use with a PPP over Ethernet PPPoE or PPP over ATM used mainly in UK connection use the following procedure 1 Enter your PPP over Ethernet ATM user name in the PPPoE PPPoA User Name text box 2 Enter your PPP over Ethernet ATM password in the PPPoE PPPoA Password text box 3 Enter your PPP over Ethernet ...

Страница 34: ... access the web configurator at one time when this is checked 7 Use Static IP Address Check this box to enter the IP Address manually Check all of your settings and then click Next Enable 802 1q Check on this to enable this function The 802 1q standard defines the VLAN protocol which allows insertion of a 4 byte identifier into the ethernet frame format to identify the VLAN to which the frame belo...

Страница 35: ... system get an IP address automatically Manually entering an IP address To set WAN IP address by yourself 1 WAN IP Address Enter the IP address for using in the WAN from your ISP 2 WAN Subnet Mask Enter the WAN subnet mask 3 Default Gateway Enter the default gateway for using in the WAN from your ISP 4 Enter your primary DNS address in the Primary DNS Address text box 5 Enter your secondary DNS ad...

Страница 36: ...e Subnet Mask for WAN interface 3 Enter your Primary DNS Address and Secondary DNS address Your ISP may provide you with primary and secondary DNS addresses If they have been provided enter the addresses in the appropriate text boxes If not leave 0 0 0 0 in the boxes 4 Enable NAT Check the Enable NAT to enable this function which will allow more than one PC in the LAN to connect the internet 5 Cli...

Страница 37: ...bnet Mask for the LAN See LAN Settings LAN Settings Figure 21 LAN IP Address Screen This screen displays a suggested LAN IP address and subnet mask of the Firewall Router It also allows you to change the IP address and subnet mask 1 Primary IP Address Enter the first IP Address for your LAN interface 2 Subnet Mask Enter the Subnet Mask for your LAN interface 3 Enable DHCP server on the LAN Check t...

Страница 38: ...uter contains a Dynamic Host Configuration DHCP server that can automatically configure the TCP IP settings of every computer on your network Figure 22 DHCP Server Setup Screen To activate the DHCP Server option select Enable the DHCP server with the following settings Enter the start and end IP Address of your DHCP range Enter the leased time in hour to specify the frequency for DHCP assignment C...

Страница 39: ...mends that you change the SSID to something other than the default Click Next when you have finished If you are configuring the Firewall Router from a wireless computer any changes you make to the wireless configuration will result in communication between the Firewall Router and your computer being lost This is why 3Com strongly recommends that you configure the Firewall Router from a wired compu...

Страница 40: ...ents Summary Figure 24 Configuration Summary Screen When you complete the Setup Wizard a configuration summary will display 3Com recommends that you verify the configuration information of the Firewall Router and then print this page for your records Click Finish to display the Wizard completed screen shown in Figure 25 ...

Страница 41: ... you may need to reconfigure the computer you are using in order to make contact with the Firewall Router again Your Firewall Router is now configured and ready for use For information on improving your Wireless network security see Wireless Settings on page 50 See Chapter 5 for a detailed description of the Router configuration screens ...

Страница 42: ...44 CHAPTER 4 RUNNING THE SETUP WIZARD ...

Страница 43: ...ter CD ROM to detect and configure your Router Refer to Appendix A for information on using the Discovery program Obtaining an IP Address Automatically Refer to the section below which relates to your operating system for details on how to obtain an IP address automatically Windows 2000 If you are using a Windows 2000 based computer use the following procedure to change your TCP IP settings 1 From...

Страница 44: ...l Area Properties Screen 6 Ensure that the options Obtain an IP Address automatically and Obtain DNS server address automatically are both selected as shown in Figure 7 Click OK Figure 7 Internet Protocol TCP IP Properties Screen 7 Restart your computer ...

Страница 45: ...start your computer Windows 95 98 ME If you are using a Windows 95 98 ME computer use the following procedure to change your TCP IP settings 1 From the Windows Start Menu select Settings Control Panel 2 Double click on Network Select the TCP IP item for your network card and click on Properties 3 In the TCP IP dialog select the IP Address tab and ensure that Obtain IP address automatically is sele...

Страница 46: ...creen similar to Figure 8 should be displayed 4 Select the Never Dial a Connection option Figure 8 Internet Properties Screen You may wish to remove the PPPoE client software from your computer to free resources as it is not required for use with the Router Disabling Web Proxy Ensure that you do not have a web proxy enabled on your computer Go to the Control Panel and click on Internet Options Sel...

Страница 47: ...47 When you click on a topic from the main menu that page will appear in the main part of the screen Welcome displays the firmware version of the Router allows you to change your password and launch the Wizard LAN Settings allows you to configure the LAN interface and view the leased DHCP client list Wireless Settings enables disables access from wireless computers configures WPA or WEP encryption...

Страница 48: ...d statistics on your LAN WAN ATM ADSL connection Support Feedback contains a comprehensive online help system and allows you to provide 3Com with feedback on your Router Option Tabs Each corresponding menu page may also provide sub sections which are accessed through the use of tabs see Figure 26 for example To access a sub section simply click on the required tab Getting Help On every screen a He...

Страница 49: ... Notice Board Screen The Notice Board is used to display the firmware version and configuration warning messages For example you would be warned if you had disabled wireless networking or wireless encryption Password Figure 27 Password Screen ...

Страница 50: ...Enter the new password in the New Password field 3 Enter the new password again in the Confirm Password field 4 Click Save Apply to save the new password The password is case sensitive If you have forgotten your password you need to reset the Router See Reset to Factory Default on page 72 Wizard Figure 28 Wizard Screen Click WIZARD to launch the configuration wizard Refer to Chapter 4 for informat...

Страница 51: ...assing through it picks out the group registration information and configures multicasting accordingly Select on the box to enable it 4 Enable DHCP server on the LAN Check this box to enable the DHCP service on the router The Firewall Router contains a Dynamic Host Configuration DHCP server that can automatically configure the TCP IP settings of every computer on your network 5 Select Enable the D...

Страница 52: ...st the client s name MAC Address IP Address and Expiration time which reflects the value specified in DHCP server setting in Unit Configuration on this chapter Wireless Settings The Wireless Settings menu provides options described in the following sections To improve the security of your wireless network 3Com recommends that you 1 Change the SSID from its default value see page 52 2 Enable Encryp...

Страница 53: ...eless networks The Router supports 11b 11g Super G and Mixed 11b 11g which is the default Channel Selection Select a number from the drop down list to specify which Channel the Router will transmit and receive on If another access point or Router nearby is using the same Channel as you there will be a reduction in the performance of your network If this seems to be the case you should select a dif...

Страница 54: ...e as the Router Have the same Channel number as the Router Use the same encryption type and keys as the Router Ensure that the PC is included in the authorized Wireless PCs list if Connection Control is enabled See page 59 Enable Broadcast SSID Disable this feature after you have installed your wireless network to improve the security of your network When the check box is checked the Router will b...

Страница 55: ...ed first and then enable it as the last step This will simplify setting up your network The Router supports two types of encryption WPA WPA2 Mixed WPA WPA2 Wi Fi Protected Access WPA is a subset of the IEEE 802 11i standard Both WPA and WPA2 use Temporal Key Integrity Protocol TKIP Message Integrity Check MIC and IEEE 802 11x In addition to TKIP WPA2 also uses Advanced Encryption Standard AES The ...

Страница 56: ...ed by the Router secure data transmitted through wireless communications between the Router and its wireless clients Enabling encryption has no security effect on data transmitted through wired Ethernet connections or through your connections to the Internet Configuring WPA WPA2 Encryption You can choose to use a RADIUS server to authenticate clients or you can specify a pre shared key The pre sha...

Страница 57: ...er To set up WPA WPA2 Mixed WPA and WPA2 with Radius Server 1 Select Encryption Method from the drop down box 2 Enter the frequency for key generating in seconds 3 Enter the RADIUS Server IP address 4 Enter the Server Port 5 Enter the key for the Radius Server 6 Click Save to save your changes ...

Страница 58: ...of between 8 and 63 characters in length in the Pre Shared key field This passphrase will be used to generate a 256 bit key dynamically 2 Enter the frequency for key generating in seconds 3 Click Save to save your changes Configuring WEP Encryption There are two levels of WEP encryption available 64 bit sometimes referred to as 40 bit and 128 bit Use the Encryption strength drop down menu to selec...

Страница 59: ... WEP the passphrase will generate 4 different keys However in 128 bit WEP this method only generates 1 key which is replicated for all 4 keys If you encounter any difficulty when you enable WEP ensure that you check that each key on your wireless computer is exactly the same as each key on your Router In other words Key number 1 on the Wireless computer must have the same Hex number as Key number ...

Страница 60: ...ommends that you leave the settings unchanged if you are not sure with your configuration Changing the values may lead to unexpected blockages of traffic on your wireless LAN and the blockages might be difficult to diagnose WMM provides prioritized media access and is based on the Enhanced Distributed Channel EDCA method The WMM screen gives two separate menus to set up the parameters one is for A...

Страница 61: ...nter Frame Space Number Sometimes referred to as the Random Backoff wait This value should also be smaller for higher priority traffic TXOPLimit Transmit Opportunity Limit Enter a number in millisecond ACM ACK Policy Audio Compression Management support Acknowledgement Frame which will respond from the recipient back to the sender that data was successfully received Can be enabled or disabled Conn...

Страница 62: ... can connect to the Router select permit prevent and then enter the MAC address of the wireless clients If you enable this feature from a Wireless PC it will automatically be added to the Authorized Wireless PC list You may enter a maximum of 40 PCs in the list Click Save to save your existing configurations or Cancel to discard all changes The MAC Address must be entered as 6 hexadecimal pairs fo...

Страница 63: ...he RTS CTS handshake Setting this attribute to zero turns on the RTS CTS handshake Enter a value between 0 and 2432 Fragment Threshold defines a threshold above which the wireless packet will be split up or fragmented For a fragmented packet if transmission of part of it were to be interfered with only the portion that was successfully transmitted would need to be re sent Throughput will generally...

Страница 64: ... Figure 39 Virtual Servers Screen Activating and configuring a virtual server allows one or more of the computers on your network to function as a public server For example one of your computers could be configured as an FTP server allowing others outside of your office network to download files of your choosing Or if you have created a Web site you can configure one of your computers as a Web ser...

Страница 65: ...splay NAT Port Triggering Setup screen Figure 40 Some software applications require special or multiple connections to the Internet and these would normally be blocked by the firewall For example Internet Telephony or Video conferences require multiple connections So that these special applications can work properly and are not blocked the firewall needs to be told about them In each instance ther...

Страница 66: ...uration page to enter more entries The Router will automatically allow FTP and NetMeeting sessions You do not need to configure these as Special Applications Only one computer on your network can use the special application at any one time Virtual DMZ DMZ De Militarized Zone Host is a computer without the protection of the firewall This feature allows a single computer to be exposed to unrestricte...

Страница 67: ...s the ability to detect and prevent certain types of network attacks such as DoS attacks Denial of Service DoS attacks are aimed at devices and networks with a connection to the Internet The goal is not to steal information but to disable a device or network so users no longer have access to network resources To configure SPI information on your Router 1 Select Firewall from the main menu then sel...

Страница 68: ... Inspection SPI Hacker Pattern detection and Denial of Services DOS features to further guard your networks from internet attacks Web Filters Check on the box to filter out the internet activities programs from the following Proxy Java ActiveX and Cookies Click on Save to save your changes or Cancel to cancel your changes ...

Страница 69: ...cy 4 The policy can be applied to a single client or a group clients To do this enter the MAC Addresses or the IP Addresses of each PC up to the total number limited by the number of the entries Or enter the range of PC s IP Address with the last digits of their IP Addresses 5 Select on Deny Allow to specify your restriction types 6 To change the schedule check the appropriate check box for each d...

Страница 70: ...ilter To filter a specific site enter the URL for that site For example to stop your users from browsing a site called www badsite com enter www badsite com or badsite com in one of these fields If badsite com has multiple sub domains such as this badsite com and that badsite com then you can either Block them individually by entering this badsite com in one field and that badsite com in another o...

Страница 71: ...Ls of a number of pre defined categories The Router comes with a 14 day free trial of the 3Com Content Filter Service To activate the 14 day free trial of the service you must first register your Router at www 3com com To continue using the service after the trial period you must purchase the full 3Com Content Filter Service 3CSBCFS URL filtering rules supersede content filtering rules If the 3Com...

Страница 72: ... with the specified content filter server or cancel to discard your changes System Tools The main frame of the System Tools screen includes four administration items Restart Time Zone Configuration and Upgrade Figure 45 Restart Figure 45 Restart Screen If your Router is not operating correctly you can choose to restart the Router by selecting Restart the Router simulating the effect of power cycli...

Страница 73: ...th internet time servers to read the correct time from NTP servers on the Internet and sets its system clock automatically You may enter two NTP servers according to your priority Choose the time zone that is closest to your actual location The time zone setting is used by the system clock when displaying the correct time in the log files Click on Save Apply to apply your settings ...

Страница 74: ... saved to a file press Browse to locate the backup file on your computer and then click RESTORE to copy the data into the Router s memory The password will remain unchanged Reset to Factory Default If you want to reset the settings on your Router to those that were loaded at the factory click RESET You will lose all your configuration changes The Router LAN IP address will revert to 192 168 1 1 an...

Страница 75: ...mended that you make a backup of the configuration beforehand in case the upgrade process fails for any reason for example the connection between the computer and the Router is lost while the new software is being copied to the Router The upgrade procedure can take up to two minutes and is complete when the Alert LED has stopped flashing and is permanently off Make sure that you do not interrupt p...

Страница 76: ...omatic Assigned Default Gateway to automatically assign a gateway to the router Or you may enter the Default Gateway IP Address in the field provided and select on its associated interface Static Route Router supports static route functionality Select the Static Route tab to display the screen shown in Figure 50 ...

Страница 77: ...are both set to 0 0 0 0 this is the default route Gateway the gateway used to route data to the network specified by the network address The network interface associated with the IP address RIP The Router supports the Routing Information Protocol RIP RIP allows you to set up routing information on one RIP enabled device and have that routing information replicated to all RIP enabled devices on the...

Страница 78: ...e Operation Mode drop down list If you select Enable the Router transmits RIP update information to other RIP enabled devices If you select Silent the Router only receives RIP update messages 2 Select either 1 for RIPv1 or 2 for RIPv2 from the Version drop down list 3Com recommends that you use RIPv1 if there is any RIP enabled device on your network that does not support RIPv2 In all other cases ...

Страница 79: ...matically assigned DNS or you may manually specify your DNS server s IP Address DDNS Dynamic Domain Name Server DDNS enables you to map a static domain name to a dynamic IP address The Router supports two DDNS providers TZO com and DYNDNS org Before you can set up DDNS you must obtain an account password and static domain name from your DDNS provider DDNS is disabled by default ...

Страница 80: ...e using the DDNS 3 In the Username E mail text box enter the account name 4 In the Key text box enter the account password 5 Click Apply to make this service active DynDNS org If you select DYNDNS org 1 In the Host Name text box enter the host name 2 In the Username text box enter the account name 3 In the Password text box enter the account password 4 In the Refresh Time box enter how often you w...

Страница 81: ...heck the boxed for the type of DSL connection that you are using Select the type of phone line you are using Also Check the compatibility type IPSec Figure 55 IPSec Screen Internet Protocol Security IPSec is a standards based VPN that offers flexible solutions for secure data communications across a public ...

Страница 82: ...reen Proxy ARP is a variation of Address Resolution Protocol ARP in which an intermediate device in this case the Router sends an ARP response on behalf of an end node to the requesting host Proxy ARP can help decrease bandwidth consumption on slow speed WAN links and allows a site to use a single IP address for two physical networks To use proxy ARP you must have a range of static IP addresses as...

Страница 83: ...lity for permitting SIP sessions is passed onto the ALG instead of the firewall It supports access control restrictions authentication encryption etc Application layer gateways can be made for all application level protocols They can be used for access control but also for inter networking for example between IPv4 and IPv6 Session Initiation Protocol SIP is a protocol developed by the IETF MMUSIC ...

Страница 84: ...figure the Router Point to send the device logs to the server You may need to configure the syslog server to accept logs from the Router Figure 58 Syslog Screen To view the current logs 1 Click on the view the syslogs button To send the device logs to a syslog server 1 Click on Configure syslogs 2 Click on Enable 3 Select on the drop down menu for a list of available types of logging activities 4 ...

Страница 85: ...ork devices Click Enable Disable to enable disable the agent To Configure the SNMP 1 Type the Read Community which is the password for the incoming Get and GetNext requests from the management station 2 Type the Set Community which is the password for incoming Set requests from the management station 3 Type the System Name for the program 4 Type the System Location for the program 5 Type the Syste...

Страница 86: ...et you add remove the MAC address of the stations which can access the web administration Remote Management Figure 61 The Remote Management Screen It is possible to administer the Router remotely Select one of the following options for remote administration Disable Remote Administration This option is set as default ...

Страница 87: ...inistration from any Internet Host This option allows any host to access the administration pages To remotely administer your Router enter http xxx xxx xxx xxx 8000 in the location bar of the browser running on the remote computer where xxx xxx xxx xxx is the Internet IP address of the Router You may then login using the administration password Diagnostics Figure 62 The Diagnostics Screen The Diag...

Страница 88: ...tings menu provides the following options Summary Figure 63 Summary Screen The Summary screen is used to display the information of your LAN status WAN Figure 64 WAN Status Screen The WAN Status Screen is used to display the information of your DSL Connection Status ...

Страница 89: ...tion of your LAN WAN ATM ADSL Connection Statistics Click on the button for each connection device for more detailed information Route Figure 66 Route Screen The Route Screen is used to display the routing status information between your LAN and WAN Refer to Static Route in this section for more information ...

Страница 90: ...P Figure 67 ARP Screen The ARP screen is used to display the Proxy ARP status Refer to Proxy ARP in this section for more information Support Feedback Selecting Support Feedback from the main menu displays the Support and Feedback screens ...

Страница 91: ...splays the support links screen which contains a list of Internet links that provide information and support concerning the Router Figure 68 Feedback Figure 69 Feedback Screen Selecting the Feedback option displays the Feedback screen and allows you to provide feedback to 3Com on the operation of your ...

Страница 92: ...90 CHAPTER 5 ROUTER CONFIGURATION Router Figure 69 This screen should not be used to obtain technical support ...

Страница 93: ...ferent cable Browsing to the Router Configuration If you have connected your Router and computers together but cannot browse to the Router configuration screens check the following Confirm that the physical connection between your computer and the Router is OK and that the LAN Status LEDs on the Router and NIC are illuminated and indicating the same speed 10Mbps or 100Mbps Some NICs do not have st...

Страница 94: ...erform the same functions If you still cannot browse to the Router then use the Discovery program on the accompanying CD ROM as described in Appendix A Connecting to the Internet If you can browse to the Router configuration screens but cannot access sites on the Internet check the following Confirm that the physical connection between the Router and the cable DSL modem is OK and that the link sta...

Страница 95: ...ork connections whilst this process is taking place so choose a time when this would be convenient 1 Remove power from the Router 2 Disconnect all your computers and the cable DSL modem from the Router 3 Using a straight through Ethernet cable connect the Ethernet Cable DSL port on the rear of the Router to any one of the LAN ports 4 Re apply power to the Router The Alert LED will flash as the Rou...

Страница 96: ...t Ensure that the Wireless Clients are using the same SSID or Service Area Name as the Router The SSID is case sensitive Ensure that the encryption method and level that you use on your clients are the same as those configured on the Router The Router can simultaneously support WPA and WEP encryption but can only support one configuration of each Ensure that you have the Wireless computer enabled ...

Страница 97: ...choose the best speed depending on the quality of your connection As the signal quality weakens then the speed falls back to a lower speed The speeds supported by 802 11g are 54 Mbps 48 Mbps 36 Mbps 24 Mbps 18 Mbps 12 Mbps and 6 Mbps The speeds supported by 802 11b are 11 Mbps 5 5 Mbps 2 Mbps and 1 Mbps In general the closer you are to the Router the better the speed If you are not achieving the s...

Страница 98: ...er LED are off check your power adapter connection If the mains outlet is working and is capable of supplying power to other devices contact 3Com Technical Support and ask for a replacement power adapter Please quote the power adapter part number shown on the OfficeConnect power adapter you are using Alternatively quote the part number for your region Power Adapter Part Numbers The operating tempe...

Страница 99: ...ted a hacker attack from the Internet and has prevented it from harming your network You need take no specific action on this unless you decide that these attacks are happening frequently in which case you may wish to discuss this with your ISP The Router logs such attacks and this information is available through the Status and Logs screens Recovering from Corrupted Software If the Alert LED rema...

Страница 100: ...connect your Router to the Cable DSL modem and the computers in your network Do not forget to reconfigure the computer you used for the software upload If the Router does not resume normal operation following the upload it may be faulty Contact your supplier for advice Frequently Asked Questions How do I reset the Router to Factory Defaults See Forgotten Password and Reset to Factory Defaults on p...

Страница 101: ...he Internet It is also possible to set up VPN hosts on your LAN that clients elsewhere on the Internet can connect to but this is not a recommended configuration Where can I download software updates for the Router Updates to the Router software are posted on the 3Com support web site accessible by visiting http www 3com com What other online resources are there The 3Com Knowledgebase at http know...

Страница 102: ...100 CHAPTER 6 TROUBLESHOOTING ...

Страница 103: ...tallation 95 98 2000 Me NT 1 Insert the Router CD ROM in the CD ROM drive on your computer A menu will appear select Router Discovery Discovery will find the Router even if it is unconfigured or misconfigured Figure 70 Discovery Welcome Screen 2 When the Welcome screen is displayed click on Next and wait until the application discovers the Routers connected to your LAN ...

Страница 104: ...scovered Router Screen 3 Figure 72 shows an example Discovered Devices screen Highlight the Cable DSL Router by clicking on it and press Next Figure 72 Discovery Finish Screen 4 Click on Finish to launch a web browser and display the login page for the Router ...

Страница 105: ...vice over the network the Router must be correctly configured with the following IP information An IP address A Subnet Mask IP Addresses and Subnet Masks Each device on your network must have a unique IP address to operate correctly An IP address identifies the address of the device to which data is being sent and the address of the destination network IP addresses have the format n n n x where n ...

Страница 106: ... split into two parts Part one 192 168 100 identifies the network on which the device resides Part two 8 identifies the device within the network This type of IP Address operates on a subnet mask of 255 255 255 0 See Table 3 for an example about how a network with three computers and a Router might be configured Table 3 IP Addressing and Subnet Masking Type Two In larger networks where there are m...

Страница 107: ...llows computers on your network to obtain an IP address and subnet mask automatically DHCP assigns a temporary IP address and subnet mask which gets reallocated once you disconnect from the network DHCP will work on any client Operating System such as Windows 95 Windows 98 or Windows NT 4 0 Also using DHCP means that the same IP address and subnet mask will never be duplicated for devices on the n...

Страница 108: ...s a scheme where devices allocate themselves an IP address at random from the industry standard subnet of 169 254 x x with a subnet mask of 255 255 0 0 If two devices allocate themselves the same address the conflict is detected and one of the devices allocates itself a new address Automatic IP addressing support was introduced by Microsoft in the Windows 98 operating system and is also supported ...

Страница 109: ...WARNING Only stack the Router with other OfficeConnect units WARNING To ensure compliance with international safety standards only use the power adapter that is supplied with the unit WARNING The socket outlet must be near to the unit and easily accessible You can only remove power from the unit by disconnecting the power cord from the outlet WARNING This unit operates under SELV Safety Extra Low ...

Страница 110: ...bei den zuständigen Stellen ob die Verwendung von Funkfrequenz in dem Bereich in dem der Bluetooth Access Point eingesetzt werden soll erlaubt ist VORSICHT Bei der Installation und beim Ausbau des Geräts ist mit höchster Vorsicht vorzugehen VORTSICHT Stapeln Sie das Geräts nur mit anderen OfficeConnect Gerätes zusammen VORSICHT Aufgrund von internationalen Sicherheitsnormen darf das Gerät nur mit ...

Страница 111: ... toutes les consignes Nous vous demandons de lire attentivement les consignes suivantes de sécurité avant d installer ou de retirer l appareil AVERTISSEMENT La Router fournit et utilise de l énergie radioélectrique radio fréquence rf L utilisation de l énergie radioélectrique est interdite dans certains environnements L utilisateur devra se renseigner sur l autorisation de cette énergie dans la zo...

Страница 112: ...ilisateurs ou entretenues par les utilisateurs à l intérieur du moyeu Si vous avez un problème physique avec le moyeu qui ne peut pas être résolu avec les actions de la résolution des problèmes dans ce guide contacter votre fournisseur AVERTISSEMENT Débranchez l adaptateur électrique avant de retirer cet appareil AVERTISSEMENT Ports RJ 45 Il s agit de prises femelles blindées de données RJ 45 Vous...

Страница 113: ...yright notices in the same form as on the original You agree not to remove or deface any portion of any legend provided on any licensed program or documentation delivered to you under this Agreement ASSIGNMENT NO REVERSE ENGINEERING You may transfer the Software Documentation and the licenses granted herein to another party in the same country in which you obtained the Software and Documentation i...

Страница 114: ...erged portions in any form LIMITED WARRANTIES AND LIMITATION OF LIABILITY All warranties and limitations of liability applicable to the Software are as stated on the Limited Warranty Card or in the product manual whether in paper or electronic form accompanying the Software Such warranties and limitations of liability are incorporated herein in their entirety by this reference GOVERNING LAW This A...

Страница 115: ... ComCast Cox Excite Rogers Shaw Insight Videotron PPPoE DSL Usually special software installed on PC MacPOET WinPOET EnterNet 300 The Router has this software built in and you can remove it from your PC You will need to enter the user name and password that your ISP provided to you in the PPPoE page of the Router Leave the service name blank unless your ISP requires it Bell Century Tel Citizens Pr...

Страница 116: ... the Internet Settings page CableSpeed Cnet Direct Link Drizzle DSL Extreme Earthlink Wireless Fast Point Flashcom GTE WhirlWind Heavenet HSA Corp I 55 InterAccess LinkLine Mission Nauticom NAS Omitel Onterra Phatpipe Rhythms Speakeasy Sterling XO Zyan Static Cable Cable Modem Always on ISP assigns specific IP information which needs to be entered on the Fixed IP page of the Router Cox Cable Sprin...

Страница 117: ...s Point An Access Point is a device through which wireless clients connect to other wireless clients and which acts as a bridge between wireless clients and a wired network such as Ethernet Wireless clients can be moved anywhere within the coverage area of the access point and still connect with each other If connected to an Ethernet network the access point monitors Ethernet traffic and forwards ...

Страница 118: ...a at speeds of up to 10 Mbps Category 5 Cables One of five grades of Twisted Pair TP cabling defined by the EIA TIA 586 standard Category 5 can be used in Ethernet 10BASE T and Fast Ethernet networks 100BASE TX and can transmit data up to speeds of 100 Mbps Category 5 cabling is better to use for network cabling than Category 3 because it supports both Ethernet 10 Mbps and Fast Ethernet 100 Mbps s...

Страница 119: ...network is the location of the DNS server your ISP has assigned DSL modem DSL stands for digital subscriber line A DSL modem uses your existing phone lines to send and receive data at high speeds Encryption A method for providing a level of security to wireless data transmissions The OfficeConnect Cable DSL Router and Wireless Cable DSL Router offer a choice of encryption methods See WPA and WEP f...

Страница 120: ...computers and communications IETF Internet Engineering Task Force An organization responsible for providing engineering solutions for TCP IP networks In the network management area this group is responsible for the development of the SNMP protocol Infrastructure mode Infrastructure mode is the wireless configuration supported by the Router You will need to ensure all of your clients are set up to ...

Страница 121: ...icular network device Most devices that connect to a LAN have a MAC address assigned to them as they are used to identify other devices in a network MAC addresses are 6 bytes long NAT Network Address Translation NAT enables all the computers on your network to share one IP address The NAT capability of the Router allows you to access the Internet from any computer on your home network without havi...

Страница 122: ... to all RIP enabled devices on the network RJ 45 A standard connector used to connect Ethernet networks The RJ stands for registered jack Server A computer in a network that is shared by multiple end stations Servers provide end stations with access to shared network services such as computer files and printer queues SPI Stateful Packet Inspection This feature requires the firewall to remember wha...

Страница 123: ...s in one piece when it reaches its destination IP relates to the address of the end station to which data is being sent as well as the address of the destination network Traffic The movement of data packets on a network universal plug and play Universal plug and play is a system which allows compatible applications to read some of their settings from the Router This allows them to automatically co...

Страница 124: ... Encryption strength is 40 64 bit or 128 bit Wi Fi Wireless Fidelity This is the certification granted by WECA to products that meet their interoperability criteria see also 802 11b WECA Wireless Client The term used to describe a desktop or mobile PC that is wirelessly connected to your wireless network Wireless LAN Service Area Another term for ESSID Extended Service Set Identifier Wizard A Wind...

Страница 125: ...GLOSSARY 123 WPA Wi Fi Protected Access A dynamically changing encryption mechanism for wireless networking Encryption strength is 256 bit ...

Страница 126: ...124 GLOSSARY ...

Страница 127: ...the manufacturer s instructions as described in the user documentation that comes with the product This product contains encryption It is unlawful to export out of the U S without obtaining a U S Export License Channels Country 1 13 Argentina Australia Austria Bahrain Belarus Belgium Brazil Chile China Columbia Costa Rica Croatia Cyprus Czech Republic Denmark Finland France Germany Greece Hong Kon...

Страница 128: ...ield in excess of Health Canada limits for the general population consult Safety Code 6 obtainable from Health Canada s website www hc sc gc ca rpb This product must maintain a minimum body to antenna distance of 20 cm Under these conditions this product will meet the Basic Restriction limits of 1999 519 EC Council Recommendation of 12 July 1999 on the limitation of exposure of the general public ...

Страница 129: ...he user is encouraged to try to correct the interference by one or more of the following measures Reorient or relocate the receiving antenna Increase the separation between the equipment and receiver Connect the equipment into an outlet on a circuit different from that to which the receiver is connected Consult the dealer or an experienced radio TV technician for help The user may find the followi...

Страница 130: ...operate to the user s satisfaction Before installing this equipment users should ensure that it is permissible to be connected to the facilities of the local telecommunications company The equipment must also be installed using an acceptable method of connection The customer should be aware that compliance with the above conditions may not prevent degradation of service in some situations Repairs ...

Страница 131: ...conditions 1 this device may not cause interference and 2 this device must accept any interference including interference that may cause undesired operation of this device L utilisation de ce dispositif est autorisée seulement aux conditions suivantes 1 il ne doit pas produire de brouillage et 2 l utilisateur du dispositif doit étre prêt à accepter tout brouillage radioélectrique reçu même si ce b...

Страница 132: ...maximal Si le matriel ou son antenne d emission est installe a l exterieur il doit faire l objet d une licence Industry Canada Emissions Compliance Statement This Class B digital apparatus complies with Canadian ICES 003 Avis de Conformité à la Réglementation d Industrie Canada Cet appareil numérique de la classe B est conform à la norme NMB 003 du Canada Safety Compliance Notice This device has b...

Страница 133: ... 3Com Corporation dat het toestel RLAN device in overeenstemming is met de essentiële eisen en de andere relevante bepalingen van richtlijn 1999 5 EG Bij deze verklaart 3Com Corporation dat deze RLAN device voldoet aan de essentiële eisen en aan de overige relevante bepalingen van Richtlijn 1999 5 EC French Par la présente 3Com Corporation déclare que l appareil RLAN device est conforme aux exigen...

Страница 134: ...e cumple con los requisitos esenciales y cualesquiera otras disposiciones aplicables o exigibles de la Directiva 1999 5 CE Portuguese 3Com Corporation declara que este RLAN device está conforme com os requisitos essenciais e outras disposições da Directiva 1999 5 CE Malti Hawnhekk 3Com Corporation jiddikjara li dan RLAN device jikkonforma mal tiijiet essenzjali u ma provvedimenti orajn relevanti l...

Страница 135: ... Este equipamento opera em caráter secundário isto é no tem direito a proteço contra interferncia prejudicial mesmo de estaçes do mesmo tipo e no causar interferncia a sistema operando em caráter primário ...

Страница 136: ...134 ...

Страница 137: ... 78 DHCP 40 49 86 105 DHCP Server 27 Discovery Application 101 DNS 26 37 38 primary 37 38 secondary 37 38 DoS attacks 65 Dynamic IP Address 37 62 E Enable 802 1q 36 encryption 53 WEP 53 WPA 53 F Firewall 62 SPI 65 66 Forgotten Password 93 I Internet addresses 103 IP Address 22 39 103 L LAN 39 49 LED 15 Login 102 M MAC Address modifying 60 N Network addresses 103 Networking wireless 94 NIC wireless...

Страница 138: ...et Mask 39 103 Summary 42 Support Information 88 Support Links 89 T TCP IP 25 27 40 49 103 Time Zone 33 71 U Unit Configuration 86 Upgrade 73 URL Filter 68 V Virtual Servers 62 VLAN 36 W Web Proxy 28 Wireless channel selection 51 configuration 51 connection control 59 encryption 53 LED 16 networking 94 NIC 15 service area name 52 settings 41 50 WMM 58 WPA encryption configuring 54 ...

Страница 139: ......

Страница 140: ...s and services visit our World Wide Web site at www 3com com All specifications are subject to change without notice Copyright 2006 3Com Corporation All rights reserved 3Com and OfficeConnect are registered trademarks of 3Com Corporation All other company and product names may be trademarks of their respective companies ...

Отзывы: