SMC Networks SMC7904WBRA2 User Manual

TABLE OF CONTENTSxConfiguring the ADSL Router . . . . . . . . . . . . . . . . . . . 4-1Navigating the Management Interface . . . . . . . . . . . . .

CONFIGURATION PARAMETERS4-61Intrusion Detection• Intrusion Detection FeatureStateful Packet Inspection (SPI) and Anti-DoS firewall protection (Default

CONFIGURING THE ADSL ROUTER4-62

CONFIGURATION PARAMETERS4-63• Stateful Packet Inspection This is called a “stateful” packet inspection because it examines the contents of the packet

CONFIGURING THE ADSL ROUTER4-64• Connection PolicyEnter the appropriate values for TCP/UDP sessions as described in the following table. Parameter De

CONFIGURATION PARAMETERS4-65• DoS Criteria and Port Scan CriteriaSet up DoS and port scan criteria in the spaces provided (as shown below). Note: The

CONFIGURING THE ADSL ROUTER4-66DMZIf you have a client PC that cannot run an Internet application properly from behind the firewall, you can open the

CONFIGURATION PARAMETERS4-67SNMPUse the SNMP configuration screen to display and modify parameters for the Simple Network Management Protocol (SNMP).C

CONFIGURING THE ADSL ROUTER4-68TrapSpecify the IP address of the NMS to notify when a significant event is detected by the agent. When a trap conditio

CONFIGURATION PARAMETERS4-69UPNPThe Universal Plug and Play architecture offers pervasive peer-to-peer network connectivity of PCs of all form factors

CONFIGURING THE ADSL ROUTER4-70QOSThe QoS (Quality of Service) function allows you to differentiate traffic types and provide high-priority forwarding

TABLE OF CONTENTSxiTroubleshooting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A-1Cables . . . . . . . . . . . . . . . . . . . . . .

CONFIGURATION PARAMETERS4-71Traffic MappingUse this screen to classify traffic into Diffserv forwarding groups and outgoing VCs. Click Add traffic cla

CONFIGURING THE ADSL ROUTER4-72Traffic StatisticsThis screen shows the WAN outbound traffic statistics of all the Diffserv forwarding groups in the la

CONFIGURATION PARAMETERS4-73ADSLADSL (Asymmetric Digital Subscriber Line) is designed to deliver more bandwidth downstream (from the central office to

CONFIGURING THE ADSL ROUTER4-74ADSL StatusThe Status screen displays information on connection line status, data rate, operation data and defect indic

CONFIGURATION PARAMETERS4-75Fast Path FEC CorrectionThere are two latency paths that may be used: fast and interleaved. For either path, a forward err

CONFIGURING THE ADSL ROUTER4-76DDNSDynamic Domain Name Service (DDNS) provides users on the Internet with a method to tie their domain name to a compu

CONFIGURATION PARAMETERS4-77TOOLSUse the Tools menu to backup the current configuration, restore a previously saved configuration, restore factory set

CONFIGURING THE ADSL ROUTER4-78Trace Route UtilityTraceroute is the program that shows you the route over the network between two systems, listing all

CONFIGURATION PARAMETERS4-79Configuration Tools • Backup allows you to save the Barricade’s configuration to a file. • Restore can be used to restore

CONFIGURING THE ADSL ROUTER4-80Firmware UpgradeUse this screen to update the firmware or user interface to the latest versions. 1. Download the upgrad

1-1CHAPTER 1INTRODUCTIONCongratulations on your purchase of the ADSL2 BarricadeTM g, hereafter referred to as the "Barricade". We are proud

CONFIGURATION PARAMETERS4-81ResetClick REBOOT ROUTER to reset the Barricade. The reset will be complete when the power LED stops blinking. If you perf

CONFIGURING THE ADSL ROUTER4-82STATUSThe Status screen displays WAN/LAN connection status, firmware, and hardware version numbers, illegal attempts to

CONFIGURATION PARAMETERS4-83

CONFIGURING THE ADSL ROUTER4-84The following items are included on the Status screen: Parameter DescriptionINTERNET Displays WAN connection type and

FINDING THE MAC ADDRESS OF A NETWORK CARD4-85Finding the MAC address of a Network CardWINDOWS NT4/2000/XPClick Start/Programs/Command Prompt. Type “ip

A-1APPENDIX ATROUBLESHOOTINGThis section describes common problems you may encounter and possible solutions to them. The Barricade can be easily monit

TROUBLESHOOTINGA-2LED IndicatorsLink LED is Off• Verify that the Barricade and attached device are powered on. • Be sure the cable is plugged into bot

TROUBLESHOOTINGA-3Management ProblemsCannot connect using the web browser• Be sure to have configured the Barricade with a valid IP address, subnet ma

TROUBLESHOOTINGA-4Wireless ProblemsA wireless PC cannot associate with the Barricade.• Make sure the wireless PC has the same SSID settings as the Bar

B-1APPENDIX BCABLESEthernet CableCaution: DO NOT plug a phone jack connector into any RJ-45 port. Use only twisted-pair cables with RJ-45 connectors t

INTRODUCTION1-2• Firewall with Stateful Packet Inspection, client privileges, intrusion detection, and NAT• NAT also enables multi-user Internet acces

CABLESB-2Each wire pair must be attached to the RJ-45 connectors in a specific orientation. The following figure illustrates how the pins on an Ethern

ETHERNET CABLEB-3Pin AssignmentsWith 100BASE-TX/10BASE-T cable, pins 1 and 2 are used for transmitting data, and pins 3 and 6 for receiving data.Strai

CABLESB-4Crossover WiringIf the port on the attached device has straight-through wiring (MDI), use crossover cable.Crossover Cable Pin AssignmentsEnd

C-1APPENDIX CSPECIFICATIONSPhysical CharacteristicsPortsFour 10/100Mbps RJ-45 PortsOne ADSL RJ-11One external dipole antennaADSL FeaturesSupports DMT

SPECIFICATIONSC-2Security FeaturesPassword protected configuration accessUser authentication (PAP/CHAP) with PPPFirewall NAT NAPTVPN pass through LAN

SPECIFICATIONSC-3Operating Channels IEEE 802.11b compliant:11 channels (US, Canada)13 channels (ETSI)14 channels (Japan)Operating Channels IEEE 802.11

SPECIFICATIONSC-4Modulation Rate-Receiver Sensitivity Typical (dBm)802.11g - 6Mbps -88802.11g - 9Mbps -87802.11g - 12Mbps -84802.11g - 18Mbps -82802.1

SPECIFICATIONSC-5ELECTROMAGNETIC COMPATIBILITYCER&TTEETSIFCC part 15 Class BFCC part 68RoHSSafetyUL 60950-1 CSA 22.2 No. 60950-1 EN 60950-1 &

APPLICATIONS1-3• Shared IP AddressThe Barricade provides Internet access for up to 253 users via a single shared IP address. Using only one ISP accoun

2-1CHAPTER 2INSTALLATIONBefore installing the ADSL2 BarricadeTM g, verify that you have all the items listed under the Package Contents list. Also be

INSTALLATION2-2System RequirementsYou must meet the following minimum requirements:• ADSL Internet Service installed.• 2.4GHz Wireless adapter or Ethe

HARDWARE DESCRIPTION2-3The Barricade includes an LED display on the top for system power and port indications that simplifies installation and network

INSTALLATION2-4LED IndicatorsThe power and port LED indicators on the top are illustrated by the following figure and table.Figure 2-2. Top View LED

ISP SETTINGS2-5ISP SettingsPlease collect the following information from your ISP before setting up the Barricade:• ISP account user name and password

INSTALLATION2-6The splitter is required for connecting your Barricade and phone to the same phone line. If you have a dedicated phone line for ADSL co

CONNECT THE SYSTEM2-7Connecting the Power AdapterPlug the power adapter into the power socket on the rear of the Barricade, and the other end into a p

3-1CHAPTER 3CONFIGURING CLIENT PCAfter completing hardware setup by connecting all your network devices, you need to configure your computer to connec

CONFIGURING CLIENT PC3-2TCP/IP ConfigurationTo access the Internet through the Barricade, you must configure the network settings of the computers on

WINDOWS 98/ME3-32. In Control Panel, double-click the Network icon.3. In the Network window, under the Configuration tab, double-click the TCP/IP item

CONFIGURING CLIENT PC3-45. Windows may need your Windows 98/Me CD to copy some files. After it finishes copying, it will prompt you to restart your sy

WINDOWS 98/ME3-53. In the Internet Options window, click the Connections tab. Next, click the LAN Settings... button.4. Clear all the check boxes.5. C

CONFIGURING CLIENT PC3-6Obtain IP Settings from Your ADSL RouterNow that you have configured your computer to connect to your Barricade, it needs to o

WINDOWS NT 4.03-7Windows NT 4.01. On the Windows desktop, click Start/Settings/Control Panel.2. Double-click the Network icon.

CONFIGURING CLIENT PC3-83. In the Network window, Select the Protocols tab. Double-click TCP/IP Protocol.4. When the Microsoft TCP/IP Properties windo

38 TeslaIrvine, CA 92618Phone: (949) 679-800054Mbps Wireless Router with built-in ADSL ModemFrom SMC’s line of award-winning connectivity solutionsApr

WINDOWS NT 4.03-98. Windows may copy some files, and will then prompt you to restart your system. Click Yes and your computer will shut down and resta

CONFIGURING CLIENT PC3-102. In the Command Prompt window, type “IPCONFIG /RELEASE” and press the ENTER key.3. Type “IPCONFIG /RENEW” and press the ENT

WINDOWS 20003-11Windows 20001. On the Windows desktop, click Start/Settings/Network and Dial-Up Connections. 2. Click the icon that corresponds to the

CONFIGURING CLIENT PC3-12Disable HTTP ProxyYou need to verify that the “HTTP Proxy” feature of your web browser is disabled. This is so that your brow

WINDOWS 20003-133. Type “IPCONFIG /RENEW” and press the ENTER key. Verify that your IP Address is now 192.168.2.xxx, your Subnet Mask is 255.255.255.0

CONFIGURING CLIENT PC3-14Windows XP1. On the Windows desktop, click Start/Control Panel.2. In the Control Panel window, click Network and Internet Con

WINDOWS XP3-152. In the Command Prompt window, type “IPCONFIG/RELEASE” and press the ENTER key.3. Type “IPCONFIG /RENEW” and press the ENTER key. Veri

CONFIGURING CLIENT PC3-16Configuring Your Macintosh ComputerYou may find that the instructions here do not exactly match your operating system. This i

CONFIGURING YOUR MACINTOSH COMPUTER3-173. If “Using DHCP Server” is already selected in the Configure field, your computer is already configured for D

CONFIGURING CLIENT PC3-183. Uncheck all check boxes and click OK.

Information furnished is believed to be accurate and reliable. However, no responsibility is assumed by our company for its use, nor for any infringem

4-1CHAPTER 4CONFIGURING THE ADSL ROUTERAfter you have configured TCP/IP on a client computer, you can configure the Barricade using your web browser.

CONFIGURING THE ADSL ROUTER4-2Navigating the Management InterfaceOn initial configuration the first screen is Country Selection. Select your country f

NAVIGATING THE MANAGEMENT INTERFACE4-3The Setup Wizard is located on the top of the left hand side. Use the Setup Wizard for quick and easy configurat

CONFIGURING THE ADSL ROUTER4-4Setup WizardTIME ZONEClick on SETUP WIZARD and NEXT, then you will see the Time Zone screen. Select your local time zone

SETUP WIZARD4-5Wireless SettingsThis screen allows you to configure the SSID, wireless Mode and channel. Optionally you can disable broadcasting of SS

CONFIGURING THE ADSL ROUTER4-6ADSL SettingsSelect your Country and Internet Service Provider. This will automatically configure the Barricade with the

SETUP WIZARD4-7SummaryThis screen shows a summary of the configuration parameters that you have made using the Setup Wizard. Parameter DescriptionWi

CONFIGURING THE ADSL ROUTER4-8If the parameters are correct, click Finish to save these settings.Your Barricade is now set up. Go to “Troubleshooting”

SETUP WIZARD4-9ADSL Settings - Country or ISP Not ListedIf your Country or Internet Service Provider is not listed select “Others”. This will allow yo

CONFIGURING THE ADSL ROUTER4-10PPPoEClick NEXT to continue.Go to “Summary” on page 4-7 in the manual for details about the settings. Parameter Descrip

vLIMITED WARRANTYLimited Warranty Statement: SMC Networks, Inc. (“SMC”) warrants its products to be free from defects in workmanship and materials, un

SETUP WIZARD4-11PPPoAClick NEXT to continue.Go to “Summary” on page 4-7 in the manual for details about the settings.Parameter DescriptionVPI/VCI Ente

CONFIGURING THE ADSL ROUTER4-121483 Bridging-DHCPClick NEXT to continue.Go to “Summary” on page 4-7 in the manual for details about the settings.Param

SETUP WIZARD4-131483 Bridging-StaticClick NEXT to continue.Go to “Summary” on page 4-7 in the manual for details about the settings.Parameter Descript

CONFIGURING THE ADSL ROUTER4-141483 RoutingClick NEXT to continue.Go to “Summary” on page 4-7 in the manual for details about the settings.Parameter D

SETUP WIZARD4-15Bridging Click NEXT to continue.Go to “Summary” on page 4-7 in the manual for details about the settings.Parameter DescriptionManageme

CONFIGURING THE ADSL ROUTER4-161483 Routing-DHCPClick NEXT to continue.Go to “Summary” on page 4-7 in the manual for details about the settings.Parame

CONFIGURATION PARAMETERS4-17Configuration ParametersThe left-hand side displays the main menu and the right-hand side shows descriptive information. T

CONFIGURING THE ADSL ROUTER4-18QoS Allows you to prioritize your network traffic.ADSL Sets the ADSL operation type and shows the ADSL status.DDNS Conf

CONFIGURATION PARAMETERS4-19SYSTEMTime ZoneSelect your local time zone from the drop-down menu. This information is used for log entries and client fi

CONFIGURING THE ADSL ROUTER4-20Password SettingsUse this screen to change the password for accessing the management interface. Passwords can contain

LIMITED WARRANTYviWARRANTIES EXCLUSIVE: IF AN SMC PRODUCT DOES NOT OPERATE AS WARRANTED ABOVE, CUSTOMER’S SOLE REMEDY SHALL BE REPAIR OR REPLACEMENT O

CONFIGURATION PARAMETERS4-21Remote ManagementBy default, management access is only available to users on your local network. However, you can also man

CONFIGURING THE ADSL ROUTER4-22WANSpecify the WAN connection parameters provided by your Internet Service Provider (ISP).The following three items are

CONFIGURATION PARAMETERS4-23ATM PVCEnter the ATM (Asynchronous Transfer Mode) virtual connection parameters here. Parameter DescriptionVC1 - VC8 Clic

CONFIGURING THE ADSL ROUTER4-24ATM Interface1483 BridgingEnter the Bridging settings provided by your ISP. Parameter DescriptionVLAN Select VLAN grou

CONFIGURATION PARAMETERS4-25PPPoA Parameter DescriptionVPI/VCI Enter the Virtual Path Identifier (VPI) and Virtual Circuit Identifier (VCI) supplied b

CONFIGURING THE ADSL ROUTER4-261483 Routing Confirm Password Confirm password.MTU Leave the Maximum Transmission Unit (MTU) at the default value unles

CONFIGURATION PARAMETERS4-27PPPoE Parameter DescriptionVPI/VCI Enter the Virtual Path Identifier (VPI) and Virtual Circuit Identifier (VCI) supplied

CONFIGURING THE ADSL ROUTER4-28IP over RFC 1483 bridged Password Enter password provided by your ISP.Confirm Password Confirm password.MTU Leave the M

CONFIGURATION PARAMETERS4-29Clone MAC AddressSome ISPs require you to register your MAC address with them. If this is the case, the MAC address of the

CONFIGURING THE ADSL ROUTER4-30DNSDomain Name Servers (DNS) are used to map a domain name (e.g., www.smc.com) with the IP address (e.g., 64.147.25.20)

viiCOMPLIANCESEC Conformance Declaration SMC contact for these products in Europe is:SMC Networks Europe,Edificio Conata II,Calle Fructuós Gelabert 6-

CONFIGURATION PARAMETERS4-31LANUse the LAN menu to configure the LAN IP address, VLAN binding and to enable the DHCP server for dynamic client address

CONFIGURING THE ADSL ROUTER4-32VLANVLANs are organized and controlled by VLAN Profiles. Up to 4 VLAN profiles can be created. Once a VLAN profile is c

CONFIGURATION PARAMETERS4-33Click Add VLAN to setup the profile. • Description: enter a name or description for the VLAN. • IP Address: enter the IP a

CONFIGURING THE ADSL ROUTER4-34WIRELESSThe Barricade also operates as a wireless access point, allowing wireless computers to communicate with each ot

CONFIGURATION PARAMETERS4-35Channel and SSIDYou must specify a common radio channel and SSID (Service Set ID) to be used by the Barricade and all of i

CONFIGURING THE ADSL ROUTER4-36Access ControlUsing the Access Control functionality, you can restrict access based on MAC address. Each PC has a uniqu

CONFIGURATION PARAMETERS4-37SecurityTo make your wireless network safe, you should turn on the security function. The Barricade supports WEP (Wired Eq

CONFIGURING THE ADSL ROUTER4-38WEPIf you want to use WEP to protect your wireless network, you need to set the same parameters for the Barricade and a

CONFIGURATION PARAMETERS4-39key before saving settings. This is so you can configure your wireless client with the correct key.To manually configure t

CONFIGURING THE ADSL ROUTER4-40WPAWi-Fi Protected Access (WPA) combines temporal key integrity protocol (TKIP) and 802.1X mechanisms. It provides dyna

COMPLIANCESviiiSafety ComplianceWichtige Sicherheitshinweise (Germany)1. Bitte lesen Sie diese Hinweise sorgfältig durch.2. Heben Sie diese Anleitun

CONFIGURATION PARAMETERS4-41802.1XIf 802.1X is used in your network, then you should enable this function for the Barricade. Parameter Description802.

CONFIGURING THE ADSL ROUTER4-42WDSThe Wireless Distribution System (WDS) provides a means to extend the range of a Wireless Local Area Network (WLAN).

CONFIGURATION PARAMETERS4-43Advanced SettingTo change the settings on this screen is recommended for experienced user only. It is advised to leave the

CONFIGURING THE ADSL ROUTER4-44• Fragmentation Threshold: this is the maximum size for directed data packets transmitted. Larger frames fragment into

CONFIGURATION PARAMETERS4-45NATNetwork Address Translation allows multiple users to access the Internet sharing one public IP.

CONFIGURING THE ADSL ROUTER4-46Address MappingAllows one or more public IP addresses to be shared by multiple internal users. This also hides the inte

CONFIGURATION PARAMETERS4-47Virtual ServerIf you configure the Barricade as a virtual server, remote users accessing services such as web or FTP at yo

CONFIGURING THE ADSL ROUTER4-48Special Application Some applications require multiple connections, such as Internet gaming, video-conferencing, and In

CONFIGURATION PARAMETERS4-49NAT Mapping Table This screen displays the current NAPT (Network Address Port Translation) address mappings.

CONFIGURING THE ADSL ROUTER4-50ROUTINGThese screens define routing related parameters, including static routes and RIP (Routing Information Protocol)

ixTABLE OF CONTENTSIntroduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-1About the Barricade . . . . . . . . . . . . . .

CONFIGURATION PARAMETERS4-51RIPRIP sends routing-update messages at regular intervals and when the network topology changes. When a router receives a

CONFIGURING THE ADSL ROUTER4-52Operation Mode Disable: RIP disabled on this interface.Enable: RIP enabled on this interface.Silent: Listens for route

CONFIGURATION PARAMETERS4-53Routing Table Parameter DescriptionFlags Indicates the route status: C = Direct connection on the same subnet.S = Static

CONFIGURING THE ADSL ROUTER4-54FIREWALLThe Barricade Router’s firewall inspects packets at the application layer, maintains TCP and UDP session inform

CONFIGURATION PARAMETERS4-55Access ControlAccess Control allows users to define the outgoing traffic permitted or not-permitted through the WAN interf

CONFIGURING THE ADSL ROUTER4-56To add the PC to the filtering table: 1. Click Add PC on the Access Control screen.2. Define the appropriate settings f

CONFIGURATION PARAMETERS4-57MAC Filter The Barricade can also limit the access of hosts within the local area network (LAN). The MAC Filtering Table a

CONFIGURING THE ADSL ROUTER4-58URL BlockingThe Barricade allows the user to block access to web sites by entering either a full URL address or just a

CONFIGURATION PARAMETERS4-59Schedule RuleYou may filter Internet access for local clients based on rules. Each access control rule may be activated at

CONFIGURING THE ADSL ROUTER4-60Follow these steps to add a schedule rule:1. Click Add Schedule Rule on the Schedule Rule screen. 2. Define the appropr