background image

F

IREWALL

4-41

Intrusion Detection

Содержание 7404BRA FRT

Страница 1: ...ng DoS and client filtering Supports DMT line modulation Four auto negotiating 10 100 Ethernet ports Built in print server PPTP L2TP and IPSec pass through Multiple user Internet access with a single user account Supports PPPoE and PPPoA Plug Play installation Web based management User Guide SMC7404BRA EU ...

Страница 2: ......

Страница 3: ...Broadband Router with built in ADSL Modem From SMC s line of award winning connectivity solutions December 2002 Part No 750 9701 UK 750 9735 Pub No 150000035400A ...

Страница 4: ...ons not expressly approved by our company could void the user s authority to operate this equipment FCC Part 68 This equipment complies with Part 68 of the FCC rules This equipment comes with a label attached to it that contains among other information the FCC registration number and ringer equivalence number REN for this equipment If requested this information must be provided to the telephone co...

Страница 5: ...y person to use a computer or other electronic device to send any message via a telephone facsimile machine unless such message clearly contains in a margin at the top or bottom of each transmitted page or on the first page of the transmission the date and time it is sent and an identification of the business other entity or individual sending the message and the telephone number of the sending ma...

Страница 6: ...mily standard according to EN 55024 1998 Electrostatic Discharge according to EN 61000 4 2 1995 Contact Discharge 4 kV Air Discharge 8 kV Radio frequency electromagnetic field according to EN 61000 4 3 1996 80 1000 MHz with 1 kHz AM 80 Modulation 3 V m Electrical fast transient burst according to EN 61000 4 4 1995 AC DC power supply 1 kV Data Signal lines 0 5 kV Surge immunity test according to EN...

Страница 7: ...COMPLIANCES vi ...

Страница 8: ... Connect the Power Adapter 2 8 3 Configuring Client PCs 3 1 TCP IP Configuration 3 1 4 Configuring the Barricade 4 1 Navigating the Web Browser Interface 4 2 Making Configuration Changes 4 2 Setup Wizard 4 3 Time Zone 4 3 Internet Sharing 4 4 Parameter Setting 4 5 Finish 4 6 PPPoE PPPoA 4 7 Finish 4 8 Multiple Protocol over ATM Mode 4 10 Finish 4 11 Advanced Setup 4 13 Navigating the Web Browser I...

Страница 9: ...30 Static Route 4 30 RIP 4 31 Routing Table 4 33 Firewall 4 34 Access Control 4 35 Access Control Add PC 4 37 URL Blocking 4 38 Schedule Rule 4 39 Intrusion Detection 4 41 DMZ 4 46 SNMP 4 47 Community 4 47 Trap 4 48 ADSL 4 49 Parameters 4 49 Status 4 50 Tools 4 53 Configuration Tools 4 53 Firmware Upgrade 4 54 Reset 4 55 Status 4 56 5 Configuring Client TCP IP 5 1 Windows 95 98 Me 5 1 Disable HTTP...

Страница 10: ...isable HTTP Proxy 5 21 Obtain IP Settings from Your Barricade 5 23 6 Configuring Printer Services 6 1 Install the Printer Port Monitor 6 1 Configure the Print Server 6 4 Configure the Network Printer in Windows 95 98 Me 2000 6 4 Configure the Network Printer in Windows NT 6 6 Configure the Network Printer in Unix Systems 6 7 A Troubleshooting A 1 B Cables B 1 Ethernet Cable B 1 Specifications B 1 ...

Страница 11: ...TABLE OF CONTENTS iv ...

Страница 12: ... convenient and powerful solution About the Barricade The Barricade provides Internet access to multiple users by sharing a single user account This new technology provides many secure and cost effective functions It is simple to configure and can be up and running in minutes Features and Benefits Internet connection via an RJ 11 WAN port Local network connection via four 10 100 Mbps Ethernet port...

Страница 13: ...ted access to Internet services such as Web FTP e mail and Telnet VPN pass through IPSec ESP Tunnel mode L2TP PPTP User definable application sensing tunnel supports applications requiring multiple connections Easy setup through a Web browser on any operating system that supports TCP IP Compatible with all popular Internet applications ...

Страница 14: ...ress The Barricade provides Internet access for up to 253 users via a single shared IP address Using only one ISP account multiple users on your network can browse the Web at the same time Virtual Server If you have a fixed IP address you can set the Barricade to act as a virtual host for network address translation Remote users access various services at your site using a constant IP address Then...

Страница 15: ...d VPN protocols PPTP L2TP and IPSec These protocols allow remote users to establish a secure connection to their corporate network If your service provider supports VPNs then these protocols can be used to create an authenticated and encrypted tunnel for passing secure data over the Internet i e a traditionally shared data network The VPN protocols supported by the Barricade are briefly described ...

Страница 16: ... Barricade refer to Configuring the Barricade on page 4 1 Package Contents After unpacking the Barricade check the contents of the box to be sure you have received the following components Barricade ADSL Router SMC7404BRA EU Power adapter One CAT 5 Ethernet cable Telephone patch cable Documentation CD This User Guide ADSL service ordering guide Immediately inform your dealer in the event of any in...

Страница 17: ...as a gateway server address and DNS server address from your service provider A computer equipped with a 10 Mbps 100 Mbps or 10 100 Mbps Fast Ethernet card or a USB to Ethernet converter TCP IP network protocols installed on each PC that will access the Internet A Java enabled Web browser such as Microsoft Internet Explorer 4 0 or above or Netscape Communicator 4 0 or above installed on one PC at ...

Страница 18: ... area network can run at up to 100 Mbps over the Fast Ethernet ports The Barricade includes an LED display on the front panel for system power and port indications that simplifies installation and network troubleshooting It also provides the following ports on the rear panel Item Description LAN Ports Fast Ethernet ports RJ 45 Connect devices on your local area network to these ports i e a PC hub ...

Страница 19: ...Barricade is receiving power Normal operation Off Power off or failure Ethernet 4 LEDs On Ethernet Link Flashing Send Receive data Off No Link ADSL Syn On ADSL connection is functioning correctly Flashing Startup Off ADSL connection is not established ADSL Data Flashing Send Receive data Off No data transfering ...

Страница 20: ...ing or cooling requirements are needed You should however comply with the following guidelines Keep the Barricade away from any heating devices Do not place the Barricade in a dusty or wet environment You should also remember to turn off the power remove the power cord from the outlet and keep your hands dry when you install the Barricade ...

Страница 21: ... the ADSL wall jack and your telephones These filters pass voice signals through but filter data signals out Phone Line Configuration Installing a Full rate Connection If you are using a full rate G dmt connection your service provider will attach the outside ADSL line to a data voice splitter In this case you can connect your phones and computer directly to the splitter as shown below Figure 2 1 ...

Страница 22: ...rk Using Ethernet Cabling The four LAN ports on the Barricade auto negotiate the connection speed to 10 Mbps Ethernet or 100 Mbps Fast Ethernet as well as the transmission mode to half duplex or full duplex Use twisted pair cabling to connect any of the four LAN ports on the Barricade to an Ethernet adapter on your PC Otherwise cascade any of the LAN ports on the Barricade to an Ethernet hub or sw...

Страница 23: ...ngth does not exceed 100 meters 328 feet Connect the Power Adapter Plug the power adapter into the power socket on the rear of the Barricade and the other end into a power outlet Check the power indicator on the front panel is lit If the power indicator is not lit refer to Troubleshooting on page A 1 In case of a power input failure the Barricade will automatically restart and begin to operate onc...

Страница 24: ...k settings for the Barricade are IP Address 192 168 2 1 Subnet Mask 255 255 255 0 Note These settings can be changed to fit your network requirements but you must first configure at least one computer as described in Configuring Client TCP IP on page 5 1 to access the Barricade s Web configuration interface in order to make the required changes See Configuring the Barricade on page 4 1 for instruc...

Страница 25: ...CONFIGURING CLIENT PCS 3 2 ...

Страница 26: ... Using the Web management interface you may configure the Barricade and view statistics to monitor network activity To access the Barricade s management interface enter the IP address of the Barricade in your web browser http 192 168 2 1 the Barricade automatically switches to Port 88 for management access Then click LOGIN by default there is no password Note For some browsers it may be necessary ...

Страница 27: ...tup virtual DMZ host as well as other functions Go to Advanced Setup on page 4 13 Making Configuration Changes Configurable parameters have a dialog box or a drop down list Once a configuration change has been made on a page be sure to click the Apply or Next button at the bottom of the page to enable the new setting Note To ensure proper screen refresh after a command entry be sure that Internet ...

Страница 28: ...is Time Zone setup For accurate timing of log entries and system events you need to set the time zone Select your time zone from the dropdown list If your area requires it check to enable the clock for daylight saving changes and enter the Daylight Saving Time start and end dates for your location ...

Страница 29: ...ICADE 4 4 Internet Sharing Select the operation mode Go to PPPoE PPPoA on page 4 7 if you will use either of these modes and go to Multiple Protocol over ATM Mode on page 4 10 if you will use multiple protocol routing mode ...

Страница 30: ...VPI that identifies the path between two nodes and a Virtual Circuit Identifier VCI that identifies the data channel within that virtual path Each virtual circuit maintains a constant flow of cells between the two end points When there is no data to transmit empty cells are sent And when data needs to be transmitted it is immediately inserted into the cell flows ...

Страница 31: ...Go to Troubleshooting on page A 1 if you cannot make a connection to the Internet Parameter Description Protocol Indicates the protocol used VPI VCI Virtual Path Identifier VPI and Virtual Circuit Identifier VCI AAL5 Encapsulation Shows the packet encapsulation type ...

Страница 32: ... VCI Data flows are broken up into fixed length cells each of which contains a Virtual Path Identifier VPI that identifies the path between two nodes and a Virtual Circuit Identifier VCI that identifies the data channel within that virtual path Each virtual circuit maintains a constant flow of cells between the two end points When there is no data to transmit empty cells are sent And when data nee...

Страница 33: ...SL Operation Mode WAN Protocol Indicates the protocol used VPI VCI Virtual Path Identifier VPI and Virtual Circuit Identifier VCI AAL5 Encapsulation Shows the packet encapsulation type ISP Parameters Username The ISP assigned username Password The password hidden ...

Страница 34: ...thin its local network it will forward the packets to the Default Gateway usually your ISP will supply this address Subnet Mask The network subnet mask Name Server 1 Primary name server IP address Name Server 2 Alternate name server IP address Name Server 3 Alternate name server IP address Start IP Address Start IP Address of DHCP assigned IP addresses Number of IP Number of IPs available for assi...

Страница 35: ... VPI that identifies the path between two nodes and a Virtual Circuit Identifier VCI that identifies the data channel within that virtual path Each virtual circuit maintains a constant flow of cells between the two end points When there is no data to transmit empty cells are sent And when data needs to be transmitted it is immediately inserted into the cell flows Default Gateway Enter a default ga...

Страница 36: ...the protocol used VPI VCI Virtual Path Identifier VPI and Virtual Circuit Identifier VCI AAL5 Encapsulation Shows the packet encapsulation type Network Layer Parameters WAN IP Address Shows the WAN IP address Subnet Mask Shows the WAN Subnet Mask Default Gateway Shows the WAN Default Gateway ...

Страница 37: ...ress within its local network it will forward the packets to the Default Gateway usually your ISP will supply this address Subnet Mask The network subnet mask Name Server 1 Primary name server IP address Name Server 2 Alternate name server IP address Name Server 3 Alternate name server IP address Start IP Address Start IP Address of DHCP assigned IP addresses Number of IP Number of IPs available f...

Страница 38: ...tive information on the right hand side The Main Menu links are used to navigate to other menus that display configuration parameters and statistics Navigating the Web Browser Interface The Barricade s advanced management interface contains ten main menu items System WAN LAN NAT Routing system Firewall SNMP ADSL Tools and Status ...

Страница 39: ...ng table Firewall Configures a variety of security and specialized functions including Access Control URL blocking Internet access control scheduling Intruder detection and DMZ SNMP Community string and trap server setting ADSL Sets the ADSL operation type and shows the ADSL status Tools Contains options to backup restore the current configuration restore all configuration settings to the factory ...

Страница 40: ...ure to click the APPLY or NEXT button at the bottom of the page to make the new settings active Note To ensure proper screen refresh after a command entry check that Internet Explorer 5 0 is configured as follows Under the menu Tools Internet Options General Temporary Internet Files Settings the setting for Check for newer versions of stored pages should be Every visit to the page ...

Страница 41: ...CONFIGURING THE BARRICADE 4 16 System Settings Time Zone Set your local time zone This information is used for log entries and client filtering ...

Страница 42: ...e before exposing the Barricade to the Internet Passwords can contain from 3 12 alphanumeric characters and are not case sensitive Note If your password is lost or you cannot gain access to the user interface press the reset button colored blue on the rear panel holding it down for at least five seconds to restore the factory defaults Default is no password ...

Страница 43: ... to users on your local network However you can also manage the Barricade from a remote host by entering the IP address of a remote computer on this screen Check the Enabled box to enable this function Note If you check Enable and specify an IP address of 0 0 0 0 any host can manage the Barricade ...

Страница 44: ...main Name Servers are used to map a domain name e g www smc com to the equivalent numerical IP address e g 64 147 25 20 Your ISP should provide the IP address of one or more domain name servers Enter those addresses on this page ...

Страница 45: ... PPPoE Interface IP Address If your IP address is assigned by the ISP each time you connect leave this field all zeros Otherwise enter your ISP supplied static IP address here Subnet Mask If your subnet mask is assigned by the ISP each time you connect leave this field all zeros Otherwise enter your subnet mask here ...

Страница 46: ... to be transmitted it is immediately inserted into the cell flows Encapsulation Specifies how to handle multiple protocols at the ATM transport layer VC MUX Point to Point Protocol over ATM Virtual Circuit Multiplexer null encapsulation allows only one protocol running per virtual circuit with less overhead LLC Point to Point Protocol over ATM Logical Link Control allows multiple protocols running...

Страница 47: ...int to Point Protocol over ATM is a method of encapsulating data for transmission to a far point 1483 Routing 1483 Routing allows a simple low cost connection to the Internet via a standard 10BASE T port The router looks up the network address for each packet seen on the LAN port If the address is listed in the routing table as local it is filtered If the address is listed under the ADSL port it i...

Страница 48: ...ve a unique pair of VPI VCI settings Encapsulatio n Specifies how to handle multiple protocols at the ATM transport layer VC MUX Point to Point Protocol over ATM Virtual Circuit Multiplexer null encapsulation allows only one protocol running per virtual circuit with less overhead LLC Point to Point Protocol over ATM Logical Link Control allows multiple protocols running over one virtual circuit wi...

Страница 49: ...dress The IP address of the Barricade IP Subnet Mask Virtual Path Identifier VPI and Virtual Circuit Identifier VCI DHCP Server To dynamically assign an IP address to client PCs enable the DHCP Dynamic Host Configuration Protocol Server Lease Time Set the DHCP lease time ...

Страница 50: ...dress of the DHCP pool Do not include the gateway address of the Barricade in the client address pool If you change the pool range make sure the first three octets match the gateway s IP address i e 192 168 2 xxx End IP Address Specify the end IP address of the DHCP pool Domain Name If your network uses a domain name enter it here otherwise leave this field blank Parameter Description ...

Страница 51: ...ernet gaming videoconferencing Internet telephony and others These applications may not work when Network Address Translation NAT is enabled If you need to run applications that require multiple connections use these pages to specify the additional public ports to be opened for each application ...

Страница 52: ...se Address Mapping to allow a limited number of public IP addresses to be translated into multiple private IP addresses for use on the internal LAN network This also hides the internal network for increased privacy and security ...

Страница 53: ...irtual Server If you configure the Barricade as a virtual server remote users accessing services such as Web or FTP at your local site via public IP addresses can be automatically redirected to local servers configured with private IP ...

Страница 54: ...2 168 2 2 on port 80 Therefore by just entering the IP Address provided by the ISP Internet users can access the service they need at the local address to which you redirect them The more common TCP service ports include HTTP 80 FTP 21 Telnet 23 and POP3 110 Note The WAN interface should have a fixed IP address to best utilize this function If your ISP only provides dynamic IP addresses a search f...

Страница 55: ... box of an already entered route and click Modify Clicking Delete will remove an entry from the list Parameter Description Index Check the box of the route you wish to delete or modify Network Address Enter the IP address of the remote computer you wish to set a static route to Subnet Mask Enter the subnet mask of the remote network you wish to set a static route to Gateway Enter the WAN IP addres...

Страница 56: ...enabled on this interface Silent Listens for route broadcasts and updates its route table It does not participate in sending route broadcasts Version Sets the RIP Routing Information Protocol version to use on this interface Poison Reverse A poison reverse is a way in which a router tells its neighbor routers that one of the routers is no longer connected ...

Страница 57: ...change Authentication Required None No authentication Password A password authentication key is included in the packet If this does not match what is expected the packet will be discarded This method provides very little security as it is possible to learn the authentication key by watching RIP packets MD5 MD5 is an algorithm that is used to verify data integrity through the creation of a 128 bit ...

Страница 58: ...tion This is a template that identifies the address bits in the destination address used for routing to specific subnets Each bit that corresponds to a 1 is part of the network subnet number each bit that corresponds to 0 is part of the host number Gateway The IP address of the router at the next hop to which matching frames are forwarded Interface The local interface through which the next hop of...

Страница 59: ...tack Ping of Death IP with zero length Smurf Attack UDP port loopback Snork Attack TCP null scan and TCP SYN flooding The firewall does not significantly affect system performance and we advise leaving it enabled to protect your network Note When you check a radio button in the Enable or disable Firewall module function field be sure to click the APPLY button ...

Страница 60: ...FIREWALL 4 35 Access Control Access Control allows users to define the outgoing traffic permitted or ...

Страница 61: ...Table allows the Barricade to enter up to 32 MAC addresses that are not allowed access to the WAN port The following items are on the Access Control screen Note Click Add PC and define the appropriate settings for client PC services As shown on the following screen Parameter Description Normal Filtering Table Displays the IP address or an IP address range filtering table MAC Filtering Table Displa...

Страница 62: ...FIREWALL 4 37 Access Control Add PC ...

Страница 63: ...locking The Barricade allows the user to block access to Web sites from a particular PC by entering either a full URL address or just a keyword This feature can be used to protect children from accessing violent or pornographic web sites ...

Страница 64: ...ased on rules Each access control rule may be activated at a scheduled time Define the schedule on the Schedule Rule page and apply the rule on the Access Control page 1 Click Add Schedule Rule 2 Define the appropriate settings for a schedule rule As shown on the following screen ...

Страница 65: ...CONFIGURING THE BARRICADE 4 40 3 Click OK and then click APPLY to save your settings ...

Страница 66: ...FIREWALL 4 41 Intrusion Detection ...

Страница 67: ...network resources The Barricade protects against the following DoS attacks Ping of Death Ping flood attack SYN flood attack IP fragment attack Teardrop Attack Brute force attack Land Attack IP Spoofing attack IP with zero length TCP null scan Port Scan Attack UDP port loopback Snork Attack etc Note The firewall does not significantly affect system performance so we advise enabling the prevention f...

Страница 68: ...equested the current communication This is a way of ensuring that all communications are initiated by the recipient computer and are taking place only with sources that are known and trusted from previous interactions In addition to being more rigorous in their inspection of packets stateful inspection firewalls also close off ports until connection to the specific port is requested When particula...

Страница 69: ...Name Enter your email account user name Password Enter your email account password Connection Policy Fragmentation half open wait 10 sec Configures the number of seconds that a packet state structure remains active When the timeout value expires the router drops the unassembled packet freeing that structure for use by another packet TCP SYN wait 30 sec Defines how long the software will wait for a...

Страница 70: ...ions per min LOW 200 sessions Set this to 0 as no minimum setting is required and setting it to anything higher will adversly affect performance Maximum incomplete TCP UDP sessions number from same host 10 Maximum number of incomplete TCP UDP sessions from the same host Incomplete TCP UDP sessions detect sensitive time period 300 msec Length of time before an incomplete TCP UDP session is detected...

Страница 71: ... properly from behind the firewall you can open the client up to unrestricted two way Internet access Enter the IP address of a DMZ Demilitarized Zone host on this screen Adding a client to the DMZ may expose your local network to a variety of security risks so only use this option as a last resort ...

Страница 72: ...to access this information Access rights to the agent are controlled by community strings To communicate with the Barricade the NMS must first submit a valid community string for authentication Note Up to 5 community names may be entered Parameter Description Community A community name authorized for management access Access Management access is restricted to Read only Read or Read Write Write Val...

Страница 73: ... private to prevent unauthorized individuals from reading information on your system Version Sets the trap status to disabled or enabled with V1 or V2c The v2c protocol was proposed in late 1995 and includes enhancements to v1 that are universally accepted These include a get bulk command to reduce network management traffic when retrieving a sequence of MIB variables and a more elaborate set of e...

Страница 74: ...ADSL 4 49 ADSL Parameters Parameter Description Operation Mode Automatic ETSI DTS TM 06006 standard G 992 1 standard Address 3C etc Reserved ...

Страница 75: ...CONFIGURING THE BARRICADE 4 50 Status ...

Страница 76: ...am signal Fast Path FEC Correction There are two latency paths that may be used fast and interleaved For either path a forward error correction FEC scheme is employed to ensure higher data integrity For maximum noise immunity an interleaver may be used to supplement FEC Interleaved Path FEC Correction An interleaver is basically a buffer used to introduce a delay allowing for additional error corr...

Страница 77: ...nt the highest level of data presentation Each superframe contains regular ADSL frames one of which is used to provide superframe synchronization identifying the start of a superframe Some of the remaining frames are also used for special functions Received Superframes Interleaved Number of interleaved Superframes received Transmitted Superframes Interleaved Number of interleaved Superframes trans...

Страница 78: ... Backup and click More Configuration to save your Barricade s configuration to a file named config bin on your PC You can then check the Restore radio button and click More Configuration to restore the saved backup configuration file To restore the factory settings check Restore to Factory Defaults and click More Configuration You will be asked to confirm your decision ...

Страница 79: ...ce to the latest versions In the Upgrade Target field choose Firmware or User Interface depending on which you want to update Then click Browse to browse for the previously downloaded file Note For latest firmware user interface version information and download visit SMC s Web site at www smc europe com ...

Страница 80: ...rm a reset from this page The configurations will not be changed back to the factory default settings Note If you use the reset button on the rear panel the Barricade performs a power reset and restores the factory settings ...

Страница 81: ...s The Status screen displays WAN LAN connection status firmware and hardware version numbers as well as information on DHCP clients connected to your network The security log may be saved to a file by clicking Save and choosing a location ...

Страница 82: ...as well as DHCP Server and Firewall status INFORMATION Displays the number of attached clients the firmware versions the physical MAC address for each media interface and for the Barricade as well as the hardware version and serial number Security Log Displays illegal attempts to access your network DHCP Client Log Displays information on DHCP clients on your network ...

Страница 83: ...CONFIGURING THE BARRICADE 4 58 ...

Страница 84: ...dress determines how you need to configure your computer See this section for Windows 95 98 Me configuration See Windows NT 4 0 on page 5 6 Windows 2000 on page 5 11 Windows XP on page 5 15 or Configuring Your Macintosh Computer on page 5 19 depending on your operating system Windows 95 98 Me You may find that the instructions in this section do not exactly match your version of Windows This is be...

Страница 85: ...P item listed for your network card 4 Select the IP Address tab 5 If Obtain an IP address automatically is already selected your computer is already configured for DHCP Click Cancel to close each window and skip to Disable HTTP Proxy on page 5 4 If not locate your IP address and subnet mask Record the numbers in the space provided on the following page ...

Страница 86: ...y Click the IP Address tab and then click Obtain an IP address automatically Click OK 9 Windows may need your Windows 95 98 Me CD to copy some files After it finishes copying it will prompt you to restart your system Click Yes and your computer will shut down and restart TCP IP Configuration Setting IP Address ____ ____ ____ ____ Subnet Mask ____ ____ ____ ____ Primary DNS Server ____ ____ ____ __...

Страница 87: ...ollowing steps are for Internet Explorer and Netscape Determine which browser you use and follow the appropriate steps Internet Explorer 1 Open Internet Explorer and click the stop button Click Tools then Internet Options 2 In the Internet Options window click the Connections tab Next click the LAN Settings button 3 Clear all the checkboxes 4 Click OK and then click OK again to close the Internet ...

Страница 88: ...rnet Click OK 3 Repeat these steps for each Windows 95 98 Me computer connected to your Barricade Obtain IP Settings from Your ADSL Router Now that you have configured your computer to connect to your Barricade it needs to obtain new network settings By releasing old DHCP IP settings and renewing them with settings from your Barricade you can also verify that you have configured your computer corr...

Страница 89: ...rm that your Barricade is functioning Click OK to close the IP Configuration window Windows NT 4 0 After completing hardware setup by connecting your network devices you need to configure your computer to connect to the Barricade First determine how your ISP issues your IP address Many ISPs issue these numbers automatically using Dynamic Host Configuration Protocol DHCP Other ISPs provide a static...

Страница 90: ...ols tab 4 Double click TCP IP Protocol 5 Select the IP Address tab 6 In the Adapter drop down list be sure your Ethernet adapter is selected 7 If Obtain an IP address automatically is already selected your computer is already configured for DHCP Click Cancel to close each window and skip to Disable HTTP Proxy on page 5 9 8 In the TCP IP Properties dialog box ...

Страница 91: ...P settings click the IP address tab Select Obtain IP address automatically and click OK Click OK again to close the Network window 11 Windows may copy some files and will then prompt you to restart your system Click Yes and your computer will shut down and restart TCP IP Configuration Setting IP Address ____ ____ ____ ____ Subnet Mask ____ ____ ____ ____ Default Gateway ____ ____ ____ ____ Primary...

Страница 92: ...etscape on page 5 5 Obtain IP Settings from Your Barricade Now that you have configured your computer to connect to your Barricade it needs to obtain new network settings By releasing old DHCP IP settings and renewing them with settings from your Barricade you will verify that you have configured your computer correctly 1 From the Windows desktop click Start Programs and then click Command Prompt ...

Страница 93: ... your IP Address is now 192 168 2 xxx your Subnet Mask is 255 255 255 0 and your Default Gateway is 192 168 2 1 These values confirm that your Barricade is functioning 4 Type EXIT and press ENTER to close the Command Prompt window Your computer is now configured to connect to the Barricade ...

Страница 94: ... Windows 2000 1 On the Windows desktop click Start Settings Network and Dial Up Connections 2 Click the icon that corresponds to the connection to your Barricade 3 The connection status screen will open Click Properties ...

Страница 95: ...ddress automatically are already selected your computer is already configured for DHCP Click Cancel to close each window and skip to Disable HTTP Proxy on page 5 13 7 Select Obtain an IP address automatically and Obtain DNS server address automatically Click OK or Close to close each window TCP IP Configuration Setting IP Address ____ ____ ____ ____ Subnet Mask ____ ____ ____ ____ Default Gateway ...

Страница 96: ... Settings from Your Barricade Now that you have configured your computer to connect to your Barricade it needs to obtain new network settings By releasing old DHCP IP settings and renewing them with settings from your Barricade you can verify that you have configured your computer correctly 1 From the Windows desktop click Start Programs Accessories and then Command Prompt 2 In the Command Prompt ...

Страница 97: ...168 2 xxx your Subnet Mask is 255 255 255 0 and your Default Gateway is 192 168 2 1 These values confirm that your ADSL Router is functioning 4 Type EXIT and press ENTER to close the Command Prompt window Your computer is now configured to connect to the Barricade ...

Страница 98: ...XP 1 Click start Control Panel 2 In Control Panel click Network and Internet Connections 3 The Network Connections screen will open Double click the connection for this device 4 On the connection status screen click Properties ...

Страница 99: ...ddress automatically are already selected your computer is already configured for DHCP Click Cancel to close each window and skip to Disable HTTP Proxy on page 5 17 8 Select Obtain an IP address automatically and Obtain DNS server address automatically Click OK or Close to close each window TCP IP Configuration Setting IP Address ____ ____ ____ ____ Subnet Mask ____ ____ ____ ____ Default Gateway ...

Страница 100: ...Netscape on page 5 5 Obtain IP Settings from Your Barricade Now that you have configured your computer to connect to your Barricade it needs to obtain new network settings By releasing old DHCP IP settings and renewing them with settings from your Barricade you can verify that you have configured your computer correctly 1 From the Windows desktop click start Programs Accessories Command Prompt 2 I...

Страница 101: ... your IP Address is now 192 168 2 xxx your Subnet Mask is 255 255 255 0 and your Default Gateway is 192 168 2 1 These values confirm that your ADSL Router is functioning Type EXIT and press ENTER to close the Command Prompt window Your computer is now configured to connect to the Barricade ...

Страница 102: ...our operating system This is because these steps and screenshots were created using Mac OS 8 5 Mac OS 7 x and above are similar but may not be identical to Mac OS 8 5 Follow these instructions 1 Pull down the Apple Menu Click Control Panels and select TCP IP 2 In the TCP IP dialog box make sure Ethernet is selected in the Connect via field ...

Страница 103: ...n on the TCP IP screen it should be recorded Use the spaces below to record the current settings 5 After writing down your IP settings select Using DHCP Server in the Configure field and close the window 6 Another box will appear asking whether you want to save your settings Click Save TCP IP Configuration Setting IP Address ____ ____ ____ ____ Subnet mask ____ ____ ____ ____ Router address ____ _...

Страница 104: ...he Barricade s HTML configuration pages The following steps are for Internet Explorer and Netscape Determine which browser you use and follow the appropriate steps Internet Explorer 1 Open Internet Explorer and click the stop button Click Edit and select Preferences 2 In the Internet Explorer Preferences window under Network select Proxies 3 Uncheck all checkboxes and click OK ...

Страница 105: ...scape and click the stop button Click Edit and select Preferences 2 In the Preferences dialog box in the left hand column labeled Category select Advanced Under the Advanced category select Proxies 3 Select Direct Connectionto the Internet and click OK ...

Страница 106: ...m your Barricade you can verify that you have configured your computer correctly 1 Pull down the Apple Menu Click Control Panels and select TCP IP 2 Your new settings are shown in the TCP IP window Verify that your IP Address is now 192 168 2 xxx your Subnet Mask is 255 255 255 0 and your Default Gateway is 192 168 2 1 These values confirm that your Barricade is functioning 3 Close the TCP IP wind...

Страница 107: ...CONFIGURING CLIENT TCP IP 5 24 ...

Страница 108: ...nix see Configure the Print Server on page 6 4 Install the Printer Port Monitor Skip this section if you are using Unix For Windows 95 98 Me NT 2000 XP clients you need to install the port monitor program as described in this section 1 Insert the installation CD ROM into your CD ROM drive Under the PrintSvr directory run the setup exe program The Port Monitor installation program advises you to cl...

Страница 109: ...een indicates that the print client uses the TCP IP network protocol to monitor print requests Click Next 3 Select the destination folder and click on the Next button The setup program will then begin to install the programs into the destination folder ...

Страница 110: ...xt 5 Enter the printer port name that will be used to identify the port monitor in your system and click Next 6 When the setup program finishes installing the port monitor check Yes I want to restart my computer now and then click OK 7 After rebooting your computer add the Barricade print server to your system as described in the following section ...

Страница 111: ...rt monitor as described in the previous section before adding the Barricade s print server to your operating system Configure the Network Printer in Windows 95 98 Me 2000 1 On a Windows 95 98 Me 2000 XP platform open the Printers window in the My Computer menu and double click the Add Printer icon 2 Follow the prompts to add a local printer to your system 3 Specify the printer type attached to the...

Страница 112: ...SMC100 Click the Configure Port button 5 Enter the IP address of the Barricade and click OK Then click Next in the Add Printer Wizard dialog box 6 Continue following the prompts to complete the installation of the Barricade print server The printer will now be added to your Printers menu ...

Страница 113: ...VER 6 6 Configure the Network Printer in Windows NT 1 On a Windows NT platform open the Printers window in the My Computer menu and double click the Add Printer icon 2 Follow the prompts to add a local printer to your system ...

Страница 114: ...ter Wizard dialog box 5 Specify the printer type attached to the Barricade 6 Continue following the prompts to complete the installation of the Barricade print server The printer type you specified will now be added to your Printers menu Configure the Network Printer in Unix Systems Follow the standard configuration procedure on your Unix platform to set up the Barricade print server The printer n...

Страница 115: ...CONFIGURE THE PRINT SERVER 6 8 ...

Страница 116: ...ween the Barricade the external power supply and the wall outlet If the power indicator does not turn on when the power cord is plugged in you may have a problem with the power outlet power cord or external power supply However if the unit powers off after running for a while check for loose power connections power losses or surges at the power outlet If you still cannot isolate the problem then t...

Страница 117: ...ce any defective adapter or cable if necessary Network Connection Problems Cannot Ping the Barricade from the attached LAN or the Barricadecannot Ping any device on the attached LAN Verify that the IP addresses are properly configured For most applications you should use the Barricade s DHCP function to dynamically assign IP addresses to hosts on the attached LAN However if you manually configure ...

Страница 118: ...that you have a valid network connection to the Barricade and that the port you are using has not been disabled Check the network cabling between the management station and the Barricade Forgot or lost the password Press the Reset button on the rear panel holding it down for at least five seconds to restore the factory defaults Troubleshooting Chart Symptom Action ...

Страница 119: ...TROUBLESHOOTING A 4 ...

Страница 120: ...might be red and the other red with white stripes Also an RJ 45 connector must be attached to both ends of the cable Each wire pair must be attached to the RJ 45 connectors in a specific orientation The following figure illustrates how the pins on an Ethernet RJ 45 connector are numbered Be sure to hold the connectors in the same orientation when attaching the wires to the pins Figure B 1 RJ 45 Et...

Страница 121: ... switch use the cable type shown in the following table Pin Assignments With 10BASE T 100BASE TX cable pins 1 and 2 are used for transmitting data and pins 3 and 6 for receiving data Attached Device Port Type Connecting Cable Type MDI X Straight through MDI Crossover RJ 45 Pin Assignments Pin Number Assignment 1 Tx 2 Tx 3 Rx 6 Rx The and signs represent the polarity of the wires that make up each ...

Страница 122: ...ring MDI X then use straight through cable Crossover Wiring If the port on the attached device has straight through wiring MDI use crossover cable Straight Through Cable Pin Assignments End 1 End 2 1 Tx 1 Tx 2 Tx 2 Tx 3 Rx 3 Rx 6 Rx 6 Rx Crossover Cable Pin Assignments End 1 End 2 1 Tx 3 Rx 2 Tx 6 Rx 3 Rx 1 Tx 6 Rx 2 Tx ...

Страница 123: ...nt colors For example one wire might be red and the other red with white stripes Also an RJ 11 connector must be attached to both ends of the cable Each wire pair must be attached to the RJ 11 connectors in a specific orientation The following figure illustrates how the pins on the RJ 11 connector are numbered Be sure to hold the connectors in the same orientation when attaching the wires to the p...

Страница 124: ... Orange 3 Line 1 Ring Red or Blue White 4 Line 1 Tip Green or White Blue 5 Line 2 Ring Yellow or Orange White 6 Not used 1 2 3 4 5 6 Blue White White Blue R1 T1 1 2 3 4 5 6 Red Green R1 T1R2 T2 Black Yellow 1 2 3 4 5 6 Blue White White Blue R1 T1R2 T2 White Orange Orange White 6x2 Jack 6x4 Jack 6x4 Jack T Tip R Ring ...

Страница 125: ...CABLES B 6 ...

Страница 126: ...5 6 8 11 Safety UL 1950 EN60950 TÜV CSA 22 2 No 950 IEEE 802 3 10 BASE T Ethernet IEEE 802 3u 100 BASE TX Fast Ethernet Modem Standards ITU G 992 1 G dmt ITU G 992 2 G Lite ITU G 994 1 G handshake ITU T 413 issue 2 ADSL full rate LAN Interface 4 RJ 45 10 BASE T 100 BASE TX ports Auto negotiates the connection speed to 10 Mbps Ethernet or 100 Mbps Fast Ethernet and the transmission mode to half dup...

Страница 127: ... Configuration DHCP DNS Firewall Client privileges hacker prevention and logging Stateful Packet Inspection Virtual Private Network PPTP IPSec pass through VPN pass through Internet Standards RFC 826 ARP RFC 791 IP RFC 792 ICMP RFC 768 UDP RFC 793 TCP RFC 783 TFTP RFC 1483 AAL5 Encapsulation RFC 1661 PPP RFC 1866 HTML RFC 2068 HTTP RFC 2364 PPP over ATM Temperature Operating 0 to 40 C Storage 40 t...

Страница 128: ...ed Lifetime warranty covers a product during the Life of that Product which is defined as a period of 5 years from the date of purchase of the product from SMC or its authorized reseller All products that are replaced become the property of SMC Replacement products may be either new or reconditioned Any replaced or repaired product carries either a 30 day limited warranty or the remainder of the i...

Страница 129: ...AUSE BEYOND THE RANGE OF THE INTENDED USE OR BY ACCIDENT FIRE LIGHTNING OR OTHER HAZARD LIMITATION OF LIABILITY IN NO EVENT WHETHER BASED IN CONTRACT OR TORT INCLUDING NEGLIGENCE SHALL SMC BE LIABLE FOR INCIDENTAL CONSEQUENTIAL INDIRECT SPECIAL OR PUNITIVE DAMAGES OF ANY KIND OR FOR LOSS OF REVENUE LOSS OF BUSINESS OR OTHER FINANCIAL LOSS ARISING OUT OF OR IN CONNECTION WITH THE SALE INSTALLATION ...

Страница 130: ...installing the equipment All information is subject to change without notice Limitation of Liability In no event whether based in contract or tort including negligence shall SMC be liable for incidental consequential indirect special or punitive damages of any kind or for loss of revenue loss of business or other financial loss arising out of or in connection with the sale installation maintenance...

Отзывы: