Smc7901bra Manual
Smc7901bra Manual
Smc7901bra Manual
Copyright © 2004 by
SMC Networks, Inc.
38 Tesla
Irvine, CA 92618
All rights reserved..
Trademarks:
Product and company names are trademarks or registered trademarks of their respective holders.
LIMITED WARRANTY
Limited Warranty Statement: SMC Networks, Inc. (“SMC”) warrants its products to be
free from defects in workmanship and materials, under normal use and service, for the
applicable warranty term. All SMC products carry a standard 90-day limited warranty from
the date of purchase from SMC or its Authorized Reseller. SMC may, at its own discretion,
repair or replace any product not operating as warranted with a similar or functionally
equivalent product, during the applicable warranty term. SMC will endeavor to repair or
replace any product returned under warranty within 30 days of receipt of the product.
The standard limited warranty can be upgraded to a Limited Lifetime* warranty by registering
new products within 30 days of purchase from SMC or its Authorized Reseller. Registration
can be accomplished via the enclosed product registration card or online via the SMC Web
site. Failure to register will not affect the standard limited warranty. The Limited Lifetime
warranty covers a product during the Life of that Product, which is defined as the period of
time during which the product is an “Active” SMC product. A product is considered to be
“Active” while it is listed on the current SMC price list. As new technologies emerge, older
technologies become obsolete and SMC will, at its discretion, replace an older product in its
product line with one that incorporates these newer technologies. At that point, the obsolete
product is discontinued and is no longer an “Active” SMC product. A list of discontinued
products with their respective dates of discontinuance can be found at:
http://www.smc.com/index.cfm?action=customer_service_warranty.
All products that are replaced become the property of SMC. Replacement products may be
either new or reconditioned. Any replaced or repaired product carries either a 30-day limited
warranty or the remainder of the initial warranty, whichever is longer. SMC is not responsible
for any custom software or firmware, configuration information, or memory data of
Customer contained in, stored on, or integrated with any products returned to SMC pursuant
to any warranty. Products returned to SMC should have any customer-installed accessory or
add-on components, such as expansion modules, removed prior to returning the product for
replacement. SMC is not responsible for these items if they are returned with the product.
Customers must contact SMC for a Return Material Authorization number prior to returning
any product to SMC. Proof of purchase may be required. Any product returned to SMC
without a valid Return Material Authorization (RMA) number clearly marked on the outside
of the package will be returned to customer at customer’s expense. For warranty claims within
North America, please call our toll-free customer support number at (800) 762-4968.
Customers are responsible for all shipping charges from their facility to SMC. SMC is
responsible for return shipping charges from SMC to customer.
i
LIMITED WARRANTY
ii
COMPLIANCES
Federal Communication Commission Interference
Statement
This equipment has been tested and found to comply with the limits for a Class B digital
device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable
protection against harmful interference in a residential installation. This equipment generates,
uses and can radiate radio frequency energy and, if not installed and used in accordance with
instructions, may cause harmful interference to radio communications. However, there is no
guarantee that the interference will not occur in a particular installation. If this equipment
does cause harmful interference to radio or television reception, which can be determined by
turning the equipment off and on, the user is encouraged to try to correct the interference by
one or more of the following measures:
• Reorient or relocate the receiving antenna
• Increase the separation between the equipment and receiver
• Connect the equipment into an outlet on a circuit different from that to which the receiver
is connected
• Consult the dealer or an experienced radio/TV technician for help
FCC Caution: To assure continued compliance, (example - use only shielded interface cables
when connecting to computer or peripheral devices) any changes or modifications not
expressly approved by the party responsible for compliance could void the user’s authority to
operate this equipment.
This device complies with Part 15 of the FCC Rules. Operation is subject to the following
two conditions: (1) This device may not cause harmful interference, and (2) this device must
accept any interference received, including interference that may cause undesired operation.
IMPORTANT STATEMENT
FCC Radiation Exposure Statement
This equipment complies with FCC radiation exposure limits set forth for an uncontrolled
environment. This equipment should be installed and operated with a minimum distance of
20 cm (8 in) between the radiator and your body. This transmitter must not be co-located or
operating in conjunction with any other antenna or transmitter.
FCC - Part 68
This equipment complies with Part 68 of the FCC rules. This equipment comes with a label
attached to it that contains, among other information, the FCC registration number and
ringer equivalence number (REN) for this equipment. If requested, this information must be
provided to the telephone company.
This equipment uses the following USOC jacks: RJ-11C.
iii
COMPLIANCES
The REN is used to determine the quantity of devices that may be connected to the
telephone line. Excessive RENs on the telephone line may result in the devices not ringing in
response to an incoming call. In most, but not all areas, the sum of the RENs should not
exceed five (5.0). To be certain of the number of devices that may be connected to the line, as
determined by the total RENs, contact the telephone company to determine the maximum
REN for the calling area.
If this equipment causes harm to the telephone network, the telephone company will notify
you in advance that temporary discontinuance of service may be required. If advance notice is
not practical, the telephone company will notify the customer as soon as possible. Also, you
will be advised of your right to file a complaint with the FCC if you believe it is necessary.
The telephone company may make changes in its facilities, equipment, operations, or
procedures that will provide advance notice in order for you to make the necessary
modifications in order to maintain uninterrupted service.
If trouble is experienced with this equipment, please contact our company at the numbers
shown on back of this manual for repair and warranty information. If the trouble is causing
harm to the telephone network, the telephone company may request you to remove the
equipment from the network until the problem is resolved.
No repairs may be done by the customer.
This equipment cannot be used on telephone company-provided coin service. Connection to
Party Line Service is subject to state tariffs.
When programming and/or making test calls to emergency numbers:
• Remain on the line and briefly explain to the dispatcher the reason for the call.
• Perform such activities in off-peak hours such as early morning or late evenings.
The Telephone Consumer Protection Act of 1991 makes it unlawful for any person to use a
computer or other electronic device to send any message via a telephone facsimile machine
unless such message clearly contains, in a margin at the top or bottom of each transmitted
page or on the first page of the transmission the date and time it is sent and an identification
of the business, other entity, or individual sending the message and the telephone number of
the sending machine or such business, other entity, or individual.
In order to program this information into your facsimile, refer to your communications
software user manual.
iv
COMPLIANCES
v
COMPLIANCES
Safety Compliance
Wichtige Sicherheitshinweise (Germany)
1. Bitte lesen Sie diese Hinweise sorgfältig durch.
2. Heben Sie diese Anleitung für den späteren Gebrauch auf.
3. Vor jedem Reinigen ist das Gerät vom Stromnetz zu trennen. Verwenden Sie keine
Flüssigoder Aerosolreiniger. Am besten eignet sich ein angefeuchtetes Tuch zur
Reinigung.
4. Die Netzanschlu ßsteckdose soll nahe dem Gerät angebracht und leicht zugänglich sein.
5. Das Gerät ist vor Feuchtigkeit zu schützen.
6. Bei der Aufstellung des Gerätes ist auf sicheren Stand zu achten. Ein Kippen oder Fallen
könnte Beschädigungen hervorrufen.
7. Die Belüftungsöffnungen dienen der Luftzirkulation, die das Gerät vor Überhitzung
schützt. Sorgen Sie dafür, daß diese Öffnungen nicht abgedeckt werden.
8. Beachten Sie beim Anschluß an das Stromnetz die Anschlußwerte.
9. Verlegen Sie die Netzanschlußleitung so, daß niemand darüber fallen kann. Es sollte auch
nichts auf der Leitung abgestellt werden.
10. Alle Hinweise und Warnungen, die sich am Gerät befinden, sind zu beachten.
11. Wird das Gerät über einen längeren Zeitraum nicht benutzt, sollten Sie es vom Stromnetz
trennen. Somit wird im Falle einer Überspannung eine Beschädigung vermieden.
12. Durch die Lüftungsöffnungen dürfen niemals Gegenstände oder Flüssigkeiten in das
Gerät gelangen. Dies könnte einen Brand bzw. elektrischen Schlag auslösen.
13. Öffnen sie niemals das Gerät. Das Gerät darf aus Gründen der elektrischen Sicherheit
nur von authorisiertem Servicepersonal geöffnet werden.
14. Wenn folgende Situationen auftreten ist das Gerät vom Stromnetz zu trennen und von
einer qualifizierten Servicestelle zu überprüfen:
a. Netzkabel oder Netzstecker sind beschädigt.
b. Flüssigkeit ist in das Gerät eingedrungen.
c. Das Gerät war Feuchtigkeit ausgesetzt.
d. Wenn das Gerät nicht der Bedienungsanleitung entsprechend funktioniert oder Sie mit
Hilfe dieser Anleitung keine Verbesserung erzielen.
e. Das Gerät ist gefallen und/oder das Gehäuse ist beschädigt.
f. Wenn das Gerät deutliche Anzeichen eines Defektes aufweist.
15. Zum Netzanschluß dieses Gerätes ist eine geprüfte Leitung zu verwenden. Für einen
Nennstrom bis 6 A und einem Gerätegewicht größer 3 kg ist eine Leitung nicht leichter
als H05VV-F, 3G, 0.75 mm2 einzusetzen.
Der arbeitsplatzbezogene Schalldruckpegel nach DIN 45 635 Teil 1000 beträgt 70 dB(A) oder
weniger.
vi
TABLE OF CONTENTS
1 Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1-1
About the Barricade ADSL Router . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-1
Features and Benefits . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-2
Applications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-3
2 Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-1
Package Contents . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-1
System Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-2
Hardware Description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-2
RJ-45 Port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-4
USB Port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-4
Front Panel LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-5
Hardware Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-5
Fast Ethernet Connection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-5
USB Connection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-6
ISP Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-6
Connect the System . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-7
Connect the ADSL Line . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-7
Phone Line Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-8
Attach to Your Network Using Ethernet Cabling . . . . . . . . . . 2-10
Connect the Power Adapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-11
USB Driver Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-11
Windows 98/Me/2000 Driver Installation . . . . . . . . . . . . . . . . 2-12
Windows XP Driver Installation . . . . . . . . . . . . . . . . . . . . . . . . 2-17
vii
TABLE OF CONTENTS
viii
TABLE OF CONTENTS
NAT . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-29
Address Mapping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-29
Virtual Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-30
Special Applications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-31
NAT Mapping Table . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-33
Routing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-34
Static Route . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-34
RIP Parameter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-36
Routing Table . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-38
Firewall . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-39
Access Control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-40
Access Control Add PC . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-41
MAC Filter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-42
URL Blocking . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-43
Schedule Rule . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-44
Edit Schedule Rule . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-45
Intrusion Detection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-46
DMZ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-51
SNMP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-52
Community . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-52
Trap . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-53
UPnP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-54
ADSL . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-55
Parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-55
Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-56
DDNS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-59
Tools . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-60
Configuration Tools . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-60
Firmware Upgrade . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-61
Reset . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-62
Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-63
ix
TABLE OF CONTENTS
A Troubleshooting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .A-1
B Cables . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .B-1
Ethernet Cable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . B-1
Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . B-1
Wiring Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . B-1
RJ-45 Port Ethernet Connection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . B-2
Pin Assignments . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . B-3
ADSL Cable Connection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . B-5
Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . B-5
Wiring Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . B-5
C Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .C-1
Glossary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-1
x
CHAPTER 1
INTRODUCTION
Congratulations on your purchase of the Barricade ADSL Router
(SMC7901BRA), hereafter refered to as the ADSL Router. We are proud
to provide you with a powerful yet simple communication device for
connecting your local area network (LAN) to the Internet. For those who
want to surf the Internet in the most secure way, this router provides a
convenient and powerful solution.
1-1
FEATURES AND BENEFITS
• NAT also enables multi-user Internet access via a single user account,
and virtual server functionality (providing protected access to Internet
services such as Web, FTP, email, and Telnet)
1-2
INTRODUCTION
Applications
Many advanced networking features are provided by the SMC7901BRA:
• Wired LAN
• Internet Access
• Shared IP Address
The ADSL Router provides Internet access for up to 253 users via a
single shared IP address. Using only one ISP account, multiple users
on your network can browse the Web at the same time.
• Virtual Server
If you have a fixed IP address, you can set the ADSL Router to act as
a virtual host for network address translation. Remote users access
various services at your site using a constant IP address. Then,
depending on the requested service (or port number), the ADSL
Router can route the request to the appropriate server (at another
internal IP address). This secures your network from direct attack by
hackers, and provides more flexible management by allowing you to
change internal IP addresses without affecting outside access to your
network.
1-3
APPLICATIONS
• Security
The ADSL Router supports security features that deny Internet access
to specified users, or filter all requests for specific services that the
administrator does not want to serve. The ADSL Router’s firewall also
blocks common hacker attacks, including IP Spoofing, Land Attack,
Ping of Death, IP with zero length, Smurf Attack, UDP port
loopback, Snork Attack, TCP null scan, and TCP SYN flooding.
The ADSL Router supports three of the most commonly used VPN
protocols – PPTP, L2TP, and IPSec. The VPN protocols supported
by the ADSL Router are briefly described below.
1-4
CHAPTER 2
INSTALLATION
Before installing the Barricade ADSL Router, verify that you have all the
items listed under “Package Contents.” If any of the items are missing or
damaged, contact your local distributor. Also be sure that you have all the
necessary cabling before installing the ADSL Router. After installing the
ADSL Router, refer to “Configuring the Barricade ADSL Router” on
page 4-1.
Package Contents
After unpacking the ADSL Router, check the contents of the box to be
sure you have received the following components:
• Power adapter
2-1
INSTALLATION
System Requirements
You must meet the following minimum requirements:
Hardware Description
The ADSL Router contains an integrated ADSL modem and connects to
the Internet or to a remote site using its RJ-11 port. It can be connected
directly to your PC or to a local area network using the Fast Ethernet LAN
port. Also you can use the USB port for connecting you PC to the Internet
while retaining the RJ-45 LAN connection.
Access speed to the Internet depends on your service type. Full-rate ADSL
provides up to 8 Mbps downstream and 640 kbps upstream. G.lite (or
splitterless) ADSL provides up to 1.5 Mbps downstream and 512 kbps
upstream. However, you should note that the actual rate provided by
specific service providers may vary dramatically from these upper limits.
2-2
HARDWARE DESCRIPTION
Data passing between devices connected to your local area network can
run at up to 100 Mbps over the Fast Ethernet port.
The ADSL Router includes an LED display on the front panel for system
power and port indications that simplifies installation and network
troubleshooting. It also provides one LAN port, one USB connector and
one ADSL port on the side panel.
2-3
INSTALLATION
Item Description
ADSL Port ADSL port (RJ-11). Connect your ADSL line to this port.
USB Port Connect your PC to this port.
Reset Button Use this button to reset the power and restore the default
factory settings. To reset without losing configuration settings,
see “Reset” on page 4-62.
LAN Port Fast Ethernet port (RJ-45). Connect devices on your local area
network to this port (i.e., a PC, hub, or switch).
Power Button Use this button to power on the device.
Power Inlet Connect the included power adapter to this inlet.
Warning: Using the wrong type of power adapter may cause
damage.
RJ-45 Port
The side-panel LAN port is a dual-speed RJ-45 port. It supports auto-
negotiation, so the optimum communication mode (half or full duplex)
and data rate (10 Mbps or 100 Mbps) are selected automatically.
USB Port
The USB port located on the side panel of the ADSL Router can connect
to any notebook or desktop using a USB cable. Support is currently
provided for Windows 98/Me/2000/XP. (See “USB Driver Installation”
on page 2-11 for software installation information.)
2-4
HARDWARE INSTALLATION
Hardware Installation
With its base stand, the ADSL Router can be placed on a desktop or shelf,
in an upright position.
2-5
INSTALLATION
USB Connection
1. Select an available USB port on the PC.
2. Carefully insert the USB cable’s Type-A plug (i.e., the flat plug) into
the USB port and press until it is firmly seated in the port.
3. Insert the other end of the cable into the ADSL Router.
4. Install the driver from the CD-ROM.
ISP Settings
Please collect the following information from your ISP before setting up
the ADSL Router:
2-6
CONNECT THE SYSTEM
You should also remember to turn off the power, remove the power cord
from the outlet, and keep your hands dry when you install the ADSL
Router.
2-7
INSTALLATION
Plain Old
Telephone
System (POTS)
Residential Voice
Connection
Point (NID)
Splitter
Data
ADSL Router
or
Ethernet
hub or switch
2-8
CONNECT THE SYSTEM
Plain Old
Telephone
System (POTS)
Voice
Residential Filter
Connection Voice
Point [Network & Data
Interface
Device (NID)]
Voice
& Data
ADSL Router
Data
or
Ethernet
hub or switch
2-9
INSTALLATION
Use twisted-pair cabling to connect any of the LAN port on the ADSL
Router to an Ethernet adapter on your PC. Otherwise, cascade the LAN
port on the ADSL Router to an Ethernet hub or switch, and then connect
your PC or other network equipment to the hub or switch. When inserting
an RJ-45 connector, be sure the tab on the connector clicks into position
to ensure that it is properly seated.
Warning: Do not plug a phone jack connector into an RJ-45 port. This
may damage the ADSL Router. Instead, use only twisted-pair
cables with RJ-45 connectors that conform with FCC
standards.
2-10
USB DRIVER INSTALLATION
Check the power indicator on the front panel is lit. If the power indicator is
not lit, refer to “Troubleshooting” on page A-1.
In case of a power input failure, the ADSL Router will automatically restart
and begin to operate once the input power is restored.
The CD-ROM that comes with the package contains all the drivers
available for the ADSL Router.
2-11
INSTALLATION
1. Insert the USB cable’s Type-A plug (i.e., the flat plug) into the USB
port and the other end of the cable into the ADSL Router.
2. Windows 2000 will automatically detect the new hardware and prompt
you to install the driver. Click “Next” to continue the installation.
2-12
USB DRIVER INSTALLATION
4. Insert the CD-ROM into the CD drive and type D:\drivers (assuming
D: is the location of your CD drive). Click “OK.”
2-13
INSTALLATION
Note:Windows 98 may ask you for the Windows 98 CD. If so, remove
the ADSL Router driver CD, insert the Windows 98 CD and
click “OK.”
2-14
USB DRIVER INSTALLATION
2-15
INSTALLATION
2-16
USB DRIVER INSTALLATION
2-17
INSTALLATION
2-18
USB DRIVER INSTALLATION
2-19
INSTALLATION
2-20
CHAPTER 3
CONFIGURING THE
CLIENT PC
After completing hardware setup by connecting all your network devices,
you need to configure your computer to connect to the Barricade ADSL
Router. First determine how your ISP issues your IP address. Many ISPs
issue these numbers automatically using Dynamic Host Configuration
Protocol (DHCP). Other ISPs provide a static IP address and associated
numbers, which you must enter manually. How your ISP assigns your IP
address determines how you need to configure your computer.
3-1
TCP/IP CONFIGURATION
TCP/IP Configuration
To access the Internet through the ADSL Router, you must configure the
network settings of the computers on your LAN to use the same IP subnet
as the ADSL Router. The default network settings for the ADSL Router
are:
IP Address: 192.168.2.1
Subnet Mask: 255.255.255.0
DHCP IP Configuration
You may find that the instructions in this section do not exactly match
your version of Windows. This is because these steps and screen shots
were created from Windows 98. Windows 95 and Windows Millennium
Edition are similar, but not identical, to Windows 98.
3-2
CONFIGURING THE CLIENT PC
2. In Control Panel,
double-click the Network
icon.
3-3
TCP/IP CONFIGURATION
3-4
CONFIGURING THE CLIENT PC
Manual IP Configuration
1. Follow steps 1-3 in “DHCP IP Configuration” on page 3-19
3-5
TCP/IP CONFIGURATION
3-6
CONFIGURING THE CLIENT PC
3-7
TCP/IP CONFIGURATION
Internet Explorer
1. Open Internet Explorer.
3-8
CONFIGURING THE CLIENT PC
DHCP IP Configuration
After completing the hardware setup by connecting your network devices,
you need to configure your computer to connect to the ADSL Router.
First determine how your ISP issues your IP address. Many ISPs issue
these numbers automatically using Dynamic Host Configuration Protocol
(DHCP). Other ISPs provide a static IP address and associated numbers,
which you must enter manually. How your ISP assigns your IP address
determines how you need to configure your computer.
3-9
TCP/IP CONFIGURATION
6. If “Obtain an IP address
automatically” is already
selected, your computer is
already configured for DHCP.
Click Cancel to close each
window.
7. Windows may copy some files, and will then prompt you to restart
your system. Click Yes and your computer will shut down and restart.
3-10
CONFIGURING THE CLIENT PC
3-11
TCP/IP CONFIGURATION
3. Type “IPCONFIG /RENEW” and press the ENTER key. Verify that
your IP Address is now 192.168.2.xxx, your Subnet Mask is
255.255.255.0 and your Default Gateway is 192.168.2.254. These
values confirm that your ADSL Router is functioning.
4. Type “EXIT” and press the ENTER key to close the Command
Prompt window.
3-12
CONFIGURING THE CLIENT PC
Manual IP Configuration
1. Follow steps 1-5 in “DHCP IP Configuration” on page 3-9.
3-13
TCP/IP CONFIGURATION
DHCP IP Configuration
1. On the Windows desktop,
click Start/Settings/
Network and Dial-Up
Connections.
3-14
CONFIGURING THE CLIENT PC
4. Double-click Internet
Protocol (TCP/IP).
5. If “Obtain an IP address
automatically” and
“Obtain DNS server
address automatically” are
already selected, your
computer is already
configured for DHCP. If
not, select these options.
Click Cancel to close each
window.
3-15
TCP/IP CONFIGURATION
3-16
CONFIGURING THE CLIENT PC
3. Type “IPCONFIG /RENEW” and press the ENTER key. Verify that
your IP Address is now 192.168.2.xxx, your Subnet Mask is
255.255.255.0 and your Default Gateway is 192.168.2.254. These
values confirm that your ADSL Router is functioning.
4. Type “EXIT” and press the ENTER key to close the Command
Prompt window.
3-17
TCP/IP CONFIGURATION
Manual IP Configuration
1. Follow steps 1-4 in “DHCP IP Configuration” on page 3-14.
4. Enter the IP address for the ADSL Router in the Preferred DNS server
field. This automatically relays DNS requests to the DNS server(s)
provided by your ISP. Otherwise, add a specific DNS server into the
Alternate DNS Server field and click OK to close the dialog boxes.
3-18
CONFIGURING THE CLIENT PC
DHCP IP Configuration
1. On the Windows desktop,
click Start/Control Panel.
3-19
TCP/IP CONFIGURATION
3-20
CONFIGURING THE CLIENT PC
5. Double-click Internet
Protocol (TCP/IP).
6. If “Obtain an IP address
automatically” and “Obtain
DNS server address
automatically” are already
selected, your computer is
already configured for DHCP.
Click Cancel to close each
window.
3-21
TCP/IP CONFIGURATION
3-22
CONFIGURING THE CLIENT PC
3. Type “IPCONFIG /RENEW” and press the ENTER key. Verify that
your IP Address is now 192.168.2.xxx, your Subnet Mask is
255.255.255.0 and your Default Gateway is 192.168.2.1. These values
confirm that your ADSL Router is functioning.
Type “EXIT” and press the ENTER key to close the Command Prompt
window.
3-23
TCP/IP CONFIGURATION
Manual IP Configuration
1. Follow steps 1-5 in “DHCP IP Configuration” on page 3-19.
5. Enter the IP address for the ADSL Router in the Preferred DNS
server field. This automatically relays DNS requests to the DNS
server(s) provided by your ISP. Otherwise, add a specific DNS server
into the Alternate DNS Server field and click OK to close the dialog
boxes.
3-24
CONFIGURING THE CLIENT PC
3-25
CONFIGURING YOUR MACINTOSH COMPUTER
3-26
CONFIGURING THE CLIENT PC
4. Your new settings are shown in the TCP/IP tab. Verify that your IP
Address is now 192.168.2.xxx, your Subnet Mask is 255.255.255.0 and
your Default Gateway is 192.168.2.1. These values confirm that your
ADSL Router is functioning.
3-27
CONFIGURING YOUR MACINTOSH COMPUTER
Internet Explorer
1. Open Internet Explorer and click the Stop
button. Click Explorer/Preferences.
3-28
CHAPTER 4
CONFIGURING THE
BARRICADE ADSL ROUTER
After you have configured TCP/IP on a client computer, use a web
browser to configure the Barricade ADSL Router. The ADSL Router can
be configured by any Java-supported browser such as Internet Explorer
4.0 or above. Using the web management interface, you may configure the
ADSL Router and view statistics to monitor network activity.
4-1
CONFIGURING THE BARRICADE ADSL ROUTER
Setup Wizard: Use the Setup Wizard if you want to quickly set up the
ADSL Router. Go to “Setup Wizard” on page 4-4.
4-2
NAVIGATING THE WEB BROWSER INTERFACE
4-3
CONFIGURING THE BARRICADE ADSL ROUTER
Setup Wizard
Getting Start
Click on the Setup Wizard picture. The first item in the Setup Wizard is
Getting Started.
4-4
SETUP W IZARD
Time Settings
For accurate timing of log entries and system events, you need to set the
time zone. Select your time zone from the drop-down list.
4-5
CONFIGURING THE BARRICADE ADSL ROUTER
Parameter Setting
In Parameter Setting, select the country and the Internet Service Provider
(ISP). This will automatically configure the Barricade with the correct
Protocol, Encapsulation type and VPI/VCI settings for your ISP.
Parameter Description
Country Select your country.
Internet Service Provider Choose your ISP.
Protocol Select the Internet sharing protocol you wish to
use.
Management IP Address IP address of the device.
4-6
SETUP W IZARD
For manual configuration you will need to know the Protocol, DNS
Server, Encapsulation and VPI/VCI settings used by your ISP. If you have
a Static IP address you will also need to know the IP address, Subnet Mask
and Gateway address. Please contact your ISP for these details if you do
not already have them.
Parameter Description
Country Select your country.
Internet Service Provider Choose your ISP.
Protocol Select the Internet sharing protocol you wish to
use.
Management IP Address IP address of the device.
4-7
CONFIGURING THE BARRICADE ADSL ROUTER
Parameter Description
Management IP Address IP address of the device.
VPI/VCI Enter the Virtual Path Identifier (VPI) and Virtual
Circuit Identifier (VCI) supplied by your ISP.
Encapsulation Select the encapsulation type used by your ISP
from the drop-down list.
4-8
SETUP W IZARD
Parameter Description
DNS Server Domain Name Servers are used to map a domain
name (e.g., www.somesite.com) to the equivalent
numerical IP address. Your ISP should provide the
IP address of a Domain Name Server. Enter the IP
address on this page.
VPI/VCI Enter the Virtual Path Identifier (VPI) and Virtual
Circuit Identifier (VCI) supplied by your ISP.
Encapsulation Select the encapsulation type used by your ISP
from the drop-down list.
4-9
CONFIGURING THE BARRICADE ADSL ROUTER
Parameter Description
IP Address Enter your ISP-supplied static IP address here.
Subnet Mask Enter the subnet mask provided by your ISP.
Default Gateway Enter the gateway address provided by your ISP.
DNS Server Domain Name Servers are used to map a domain
name (e.g., www.somesite.com) to the equivalent
numerical IP address. Your ISP should provide the
IP address of a Domain Name Server. Enter the IP
address on this page.
VPI/VCI Enter the Virtual Path Identifier (VPI) and Virtual
Circuit Identifier (VCI) supplied by your ISP.
Encapsulation Select the encapsulation type used by your ISP
from the drop-down list.
4-10
SETUP W IZARD
Parameter Description
VPI/VCI Enter the Virtual Path Identifier (VPI) and Virtual
Circuit Identifier (VCI) supplied by your ISP.
Encapsulation Select the encapsulation type used by your ISP
from the drop-down list.
Username Enter user name.
Password Enter password.
Confirm Password Confirm password.
4-11
CONFIGURING THE BARRICADE ADSL ROUTER
Parameter Description
VPI/VCI Enter the Virtual Path Identifier (VPI) and Virtual
Circuit Identifier (VCI) supplied by your ISP.
Encapsulation Select the encapsulation type used by your ISP
from the drop-down list.
Username Enter user name.
Password Enter password.
Confirm Password Confirm password.
4-12
SETUP W IZARD
Parameter Description
IP Address Enter your ISP-supplied static IP address here.
Subnet Mask Enter the subnet mask provided by your ISP.
Default Gateway Enter the gateway address provided by your ISP.
DNS Server Enter the Domain Name Server address.
VPI/VCI Enter the Virtual Path Identifier (VPI) and Virtual
Circuit Identifier (VCI) supplied by your ISP.
Encapsulation Select the encapsulation type used by your ISP
from the drop-down list.
4-13
CONFIGURING THE BARRICADE ADSL ROUTER
Confirm
The Confirm page allows you to view the configuration settings. Click
APPLY to save your settings, or BACK to make changes.
Parameter Description
ISP Displays ISP selected.
Protocol Indicates the protocol used.
Management IP Address IP address of the device.
Function Shows if DHCP is enabled or disabled.
Your ADSL Router is now set up. If you cannot make a connection to the
Internet, go to “Troubleshooting” on page A-1.
4-14
ADVANCED SETUP
Advanced Setup
Clicking the Home icon returns you to the home page. The Main Menu
links are used to navigate to other menus that display configuration
parameters and statistics.
Menu Description
System Sets the local time zone, the password for administrator access, the IP
address of a PC that will be allowed to manage the ADSL Router
remotely, and the IP address of a Domain Name Server.
WAN Specifies the Internet connection settings.
LAN Sets the TCP/IP configuration for the ADSL Router LAN interface and
DHCP clients.
NAT Shares a single ISP account with multiple users, sets up virtual servers.
Routing Sets routing parameters and displays the current routing table.
Firewall Configures a variety of security and specialized functions including:
Access Control, URL blocking, Internet access control scheduling,
Intruder detection, and DMZ.
4-15
CONFIGURING THE BARRICADE ADSL ROUTER
Menu Description
SNMP Community string and trap server setting.
UPnP Allows you to enable or disable the Universal Plug and Play function.
ADSL Sets the ADSL operation type and shows the ADSL status.
Tools Contains options to back up and restore the current configuration,
restore all configuration settings to the factory defaults, update system
firmware, or reset the system.
Status Provides WAN connection type and status, firmware and hardware
version numbers, system IP settings, as well as DHCP, NAT, and firewall
information.
Displays the number of attached clients, the firmware versions, the
physical MAC address for each media interface, and the hardware version
and serial number.
Shows the security and DHCP client log.
Note: To ensure proper screen refresh after a command entry, check that
Internet Explorer 5.0 is configured as follows: Under the menu
Tools/Internet Options/General/Temporary Internet
Files/Settings, the setting for “Check for newer versions of stored
pages” should be “Every visit to the page.”
4-16
SYSTEM SETTINGS
System Settings
Time Settings
Set the time zone and time server for the ADSL Router. This information
is used for log entries and client access control.
4-17
CONFIGURING THE BARRICADE ADSL ROUTER
Password Settings
Use this page to restrict access based on a password. By default, there is no
password. For security you should assign one before exposing the ADSL
Router to the Internet.
Passwords can contain from 3 to12 alphanumeric characters and are not
case sensitive.
Note: If your password is lost, or you cannot gain access to the user
interface, press the reset button (colored blue) on the rear panel
(holding it down for at least five seconds) to restore the factory
defaults. (The default password is “smcadmin.”)
Enter a maximum Idle Time Out (in minutes) to define a maximum period
of time an inactive login session will be maintained. If the connection is
inactive for longer than the maximum idle time, it will be logged out, and
you will have to login to the web management system again.
(Default: 10 minutes)
4-18
SYSTEM SETTINGS
Remote Management
4-19
CONFIGURING THE BARRICADE ADSL ROUTER
DNS
4-20
WAN
WAN
Specify the WAN connection parameters provided by your Internet
Service Provider (ISP).
The ADSL Router can be connected to your ISP in one of the following
ways:
• ATM PVC
• Clone MAC
ATM PVC
The ADSL Router uses ATM as its WAN interface. Protocols including
1483 Routing, 1483 Bridging, MAC Encapsulated Routing (MER), PPPoA
and PPPoE with LLC-SNAP and VC-Mux encapsulations are supported
for each ATM PVC. The ADSL Router supports up to 8 ATM PVCs. Click
on each ATM VC for WAN configuration.
4-21
CONFIGURING THE BARRICADE ADSL ROUTER
Parameter Description
Description Click on the VC to set the values for the connection.
VPI/VCI Virtual Path Identifier (VPI) and Virtual Circuit Identifier (VCI).
Encapsulation Specifies how to handle multiple protocols at the ATM transport
layer.
• VC-MUX: Point-to-Point Protocol over ATM Virtual
Circuit Multiplexer (null encapsulation) allows only one
protocol running per virtual circuit with less overhead.
• LLC: Point-to-Point Protocol over ATM Logical Link
Control (LLC) allows multiple protocols running over one
virtual circuit (using slightly more overhead).
Protocol Protocol used for the connection.
4-22
WAN
ATM Interface
Clicking on the ATM VC brings up the following screen.
4-23
CONFIGURING THE BARRICADE ADSL ROUTER
Parameter Description
Protocol • Disable: Disables the connection.
• 1483 Bridging: Bridging is a standardized layer 2
technology. It is typically used in corporate networks to
extend the physical reach of a single LAN segment and
increase the number of stations on a LAN without
compromising performance. Bridged data is
encapsulated using the RFC1483 protocol to enable data
transport.
• PPPoA: Point-to-Point Protocol over ATM is a method
of encapsulating data for transmission to a far point.
• 1483 Routing: 1483 Routing allows a simple, low-cost
connection to the Internet via a standard Ethernet port.
The router looks up the network address for each packet
seen on the LAN port. If the address is listed in the
routing table as local, it is filtered. If the address is listed
under the ADSL port, it is forwarded. Or if the address
is not found, then it is automatically forwarded to the
default router (i.e., the ADSL router at the head end).
VPI/VCI See Virtual Path Identifier (VPI) and Virtual Circuit Identifier
(VCI). Data flows are broken up into fixed length cells, each of
which contains a Virtual Path Identifier (VPI) that identifies
the path between two nodes, and a Virtual Circuit Identifier
(VCI) that identifies the data channel within that virtual path.
Each virtual circuit maintains a constant flow of cells between
the two end points. When there is no data to transmit, empty
cells are sent. When data needs to be transmitted, it is
immediately inserted into the cell flows.
Encapsulation Shows the packet encapsulation type.
Packet encapsulation specifies how to handle multiple
protocols at the ATM transport layer.
• VC-MUX: Point-to-Point Protocol over ATM Virtual
Circuit Multiplexer (null encapsulation) allows only one
protocol running per virtual circuit with less overhead.
• LLC: Point-to-Point Protocol over ATM Logical Link
Control allows multiple protocols running over one
virtual circuit (using slightly more overhead).
QoS Class ATM QoS classes including CBR, UBR and VBR.
4-24
WAN
Parameter Description
PCR/SCR/MBS QoS Parameters - PCR (Peak Cell Rate), SCR (Sustainable Cell
Rate) and MBS (Maximum Burst Size) are configurable.
IP assigned by Select Yes if the IP address was provided by your ISP.
ISP
IP Address If your IP address is assigned by the ISP each time you
connect, leave this field all zeros. Otherwise, enter your ISP
supplied static IP address here.
Subnet Mask If your subnet mask is assigned by the ISP each time you
connect, leave this field all zeros. Otherwise, enter your subnet
mask here.
Connect Type Sets connection mode to always connected, automatic or
manual connection.
Idle Time Enter the maximum idle time for the Internet connection.
(minute) After this time has been exceeded the connection will be
terminated.
Username Enter user name.
Password Enter password.
Confirm Confirm password.
Password
MTU Leave the Maximum Transmission Unit (MTU) at the default
value (1500) unless you have a particular reason to change it.
4-25
CONFIGURING THE BARRICADE ADSL ROUTER
Some ISPs may require that you register your MAC address with them. If
this is the case, the MAC address of the ADSL Router must be changed to
the MAC address that you have registered with your ISP.
4-26
LAN
LAN
Use the LAN menu to configure the LAN IP address and to enable the
DHCP server for dynamic client address allocation.
Parameter Description
LAN IP
IP Address The IP address of the ADSL Router.
IP Subnet Mask The subnet mask of the ADSL Router.
DHCP Server To dynamically assign an IP address to client PCs, enable the
DHCP (Dynamic Host Configuration Protocol) Server.
Lease Time Set the DHCP lease time.
4-27
CONFIGURING THE BARRICADE ADSL ROUTER
Parameter Description
IP Address Pool
Start IP Specify the start IP address of the DHCP pool. Do not include
the gateway address of the ADSL Router in the client address
pool. (See “TCP/IP Configuration” on page 3-2). If you
attempt to include the ADSL Router gateway address
(192.168.2.1 by default) in the DHCP pool, an error dialog box
will appear. If you change the pool range, make sure the first
three octets match the gateway’s IP address, i.e.,
192.168.2.xxx.
End IP Specify the end IP address of the DHCP pool.
Domain Name If your network uses a domain name, enter it here. Otherwise,
leave this field blank.
4-28
NAT
NAT
Some applications require multiple connections, such as Internet gaming,
videoconferencing, Internet telephony, and others. These applications may
not work when Network Address Translation (NAT) is enabled. If you
need to run applications that require multiple connections, use these pages
to specify the additional public ports to be opened for each application.
Address Mapping
4-29
CONFIGURING THE BARRICADE ADSL ROUTER
Virtual Server
Using this feature, you can put PCs with public IPs and PCs with private
IPs in the same LAN area.
For example, if you set Type/Public Port to TCP/80 (HTTP or web) and
the Private IP/Port to 192.168.2.2/80, then all HTTP requests from
outside users will be transferred to 192.168.2.2 on port 80. Therefore, by
just entering the IP address provided by the ISP, Internet users can access
the service they need at the local address to which you redirect them.
4-30
NAT
Special Applications
Some applications, such as Internet gaming, videoconferencing, Internet
telephony and others, require multiple connections. These applications
cannot work with Network Address Translation (NAT) enabled. If you
need to run applications that require multiple connections, use the
following screen to specify the additional public ports to be opened for
each application.
4-31
CONFIGURING THE BARRICADE ADSL ROUTER
Note: Choosing a row that already contains data will overwrite the
current settings.
For a full list of ports and the services that run on them, see
www.iana.org/assignments/port-numbers.
4-32
NAT
NAT Mapping Table displays the current NAPT address mappings. The
NAT address mappings are listed 20 lines per page, click the control
buttons to move forwards and backwards. As the NAT mapping is
dynamic, a Refresh button is provided to refresh the NAT Mapping Table
with the mots updated values.
4-33
CONFIGURING THE BARRICADE ADSL ROUTER
Routing
These pages define routing related parameters, including static routes and
Routing Information Protocol (RIP) parameters.
Static Route
Parameter Description
Index Displays the number of the route.
Network Address Enter the IP address of the remote computer for
which to set a static route.
Subnet Mask Enter the subnet mask of the remote network for
which to set a static route.
Gateway Enter the WAN IP address of the gateway to the
remote network.
Configure Allows you to modify or delete configuration
settings.
4-34
ROUTING
Parameter Description
Index Displays the number of the route.
Network Address Enter the IP address of the remote computer for
which to set a static route.
Subnet Mask Enter the subnet mask of the remote network for
which to set a static route.
Gateway Enter the WAN IP address of the gateway to the
remote network.
Configure Allows you to modify or delete configuration
settings.
4-35
CONFIGURING THE BARRICADE ADSL ROUTER
RIP Parameter
The device supports RIP v1 and v2 to dynamically exchange routing
information with adjacent routers.
Parameter Description
General RIP Parameters
RIP mode Globally enables or disables RIP.
Auto summary If Auto summary is disabled, then RIP packets will
include sub-network information from all sub-
networks connected to the router. If enabled, this
sub-network information will be summarized to
one piece of information covering all sub-
networks.
Table of current Interface RIP
parameter
Interface The WAN interface to be configured.
Operation Mode Disable: RIP disabled on this interface.
Enable: RIP enabled on this interface.
Silent: Listens for route broadcasts and updates its
route table. It does not participate in sending route
broadcasts.
4-36
ROUTING
Parameter Description
Version Sets the RIP version to use on this interface.
Poison Reverse A method for preventing loops that would cause
endless retransmission of data traffic.
Authentication Required • None: No authentication.
• Password: A password authentication key is
included in the packet. If this does not match
what is expected, the packet will be discarded.
This method provides very little security as it
is possible to learn the authentication key by
watching RIP packets.
• MD5: An algorithm that is used to verify data
integrity through the creation of a 128-bit
message digest from data input (which may
be a message of any length) that is claimed to
be as unique to that specific data as a
fingerprint is to a specific individual.
Authentication Code Password or MD5 Authentication key.
4-37
CONFIGURING THE BARRICADE ADSL ROUTER
Routing Table
Parameter Description
Flags Indicates the route status:
C = Direct connection on the same subnet.
S = Static route.
R = RIP (Routing Information Protocol) assigned route.
I = ICMP (Internet Control Message Protocol) Redirect route.
Network Destination IP address.
Address
Netmask The subnetwork associated with the destination.
This is a template that identifies the address bits in the destination
address used for routing to specific subnets. Each bit that corresponds
to a “1” is part of the subnet mask number; each bit that corresponds
to “0” is part of the host number.
Gateway The IP address of the router at the next hop to which frames are
forwarded.
Interface The local interface through which the next hop of this route is
reached.
Metric When a router receives a routing update that contains a new or
changed destination network entry, the router adds 1 to the metric
value indicated in the update and enters the network in the routing
table.
4-38
FIREWALL
Firewall
The ADSL Router’s firewall enables access control of client PCs, blocks
common hacker attacks, including IP Spoofing, Land Attack, Ping of
Death, IP with zero length, Smurf Attack, UDP port loopback, Snork
Attack, TCP null scan, and TCP SYN flooding. The firewall does not
significantly affect system performance and we advise leaving it enabled to
protect your network.
Note: After you check the radio button in the “Enable or disable Firewall
features” field, you must click the SAVE SETTINGS button to
display the list of firewall features.
4-39
CONFIGURING THE BARRICADE ADSL ROUTER
Access Control
The ADSL Router can also limit the access of hosts within the local area
network (LAN). The MAC Filtering Table allows the ADSL Router to
enter up to 32 MAC addresses that are not allowed access to the WAN
port.
4-40
FIREWALL
Parameter Description
Normal Filtering Table Displays the IP address (or an IP address range) filtering
table.
2. Define the appropriate settings for client PC services (as shown on the
following screen).
3. Click OK and then click APPLY to save your settings.
4-41
CONFIGURING THE BARRICADE ADSL ROUTER
MAC Filter
The ADSL Router can also limit the access of hosts within the local area
network (LAN). The MAC Filtering Table allows the ADSL Router to enter
up to 32 MAC addresses that are not allowed access to the WAN port.
4-42
FIREWALL
URL Blocking
The ADSL Router allows the user to block access to web sites from a
particular PC by entering either a full URL address or just a keyword. This
feature can be used to protect children from accessing violent or
pornographic web sites.
4-43
CONFIGURING THE BARRICADE ADSL ROUTER
Schedule Rule
You may filter Internet access for local clients based on rules.
Each access control rule may be activated at a scheduled time. Define the
schedule on the Schedule Rule page, and apply the rule on the Access
Control page.
2. Define the appropriate settings for a schedule rule (as shown on the
following screen).
3. Upon completion, click SAVE SETTINGS to save your schedule rules.
4-44
FIREWALL
4-45
CONFIGURING THE BARRICADE ADSL ROUTER
Intrusion Detection
The ADSL Router’s firewall inspects packets at the application layer,
maintains TCP and UDP session information including timeouts and
number of active sessions, and provides the ability to detect and prevent
certain types of network attacks such as Denial-of-Service (DoS) attacks.
4-46
FIREWALL
Network attacks that deny access to a network device are called DoS
attacks. DoS attacks are aimed at devices and networks with a connection
to the Internet. Their goal is not to steal information, but to disable a
device or network so users no longer have access to network resources.
The ADSL Router protects against DoS attacks including: Ping of Death
(Ping flood) attack, SYN flood attack, IP fragment attack (Teardrop
Attack), Brute-force attack, Land Attack, IP Spoofing attack, IP with zero
length, TCP null scan (Port Scan Attack), UDP port loopback, Snork
Attack.
4-47
CONFIGURING THE BARRICADE ADSL ROUTER
4-48
FIREWALL
4-49
CONFIGURING THE BARRICADE ADSL ROUTER
4-50
FIREWALL
DMZ
4-51
CONFIGURING THE BARRICADE ADSL ROUTER
SNMP
Community
Use the SNMP configuration screen to display and modify parameters for
the Simple Network Management Protocol (SNMP). A computer attached
to the network, called a Network Management Station (NMS), can be used
to access this information. Access rights to the agent are controlled by
community strings. To communicate with the ADSL Router, the NMS
must first submit a valid community string for authentication.
Parameter Description
Community A community name authorized for management access.
Access Management access is restricted to Read Only (Read) or
Read/Write (Write).
Valid Enables/disables the entry.
4-52
SNMP
Trap
Parameter Description
IP Address Traps are sent to this address when errors or specific events
occur on the network.
Community A community string (password) specified for trap
management. Enter a word, something other than public or
private, to prevent unauthorized individuals from reading
information on your system.
Version Sets the trap status to disabled, or enabled with V1 or V2c.
The v2c protocol was proposed in late 1995 and includes
enhancements to v1 that are universally accepted. These
include a get-bulk command to reduce network
management traffic when retrieving a sequence of MIB
variables, and a more elaborate set of error codes for
improved reporting to a Network Management Station.
4-53
CONFIGURING THE BARRICADE ADSL ROUTER
UPnP
Click Enable to turn on the Universal Plug and Play function of the ADSL
Router. This function allows the device to automatically:
• obtain an IP address
4-54
ADSL
ADSL
Parameters
Parameter Description
Operation Mode • Automatic
• T1.413 Issue 2
• G.992.1 (G.DMT)
• G.922.2 (G.Lite)
4-55
CONFIGURING THE BARRICADE ADSL ROUTER
Status
The Status page displays ADSL status information.
4-56
ADSL
Parameter Description
Status
Line Status Shows the current status of the ADSL line.
Data Rate
Upstream Actual and maximum upstream data rate.
Downstream Actual and maximum downstream data rate.
Operation
Data/Defect
Indication
Noise Margin
Upstream: Minimum noise margin upstream.
Downstream: Minimum noise margin downstream.
Output Power Maximum fluctuation in the output power.
Attenuation
Upstream: Maximum reduction in the strength of the upstream signal.
Downstream: Maximum reduction in the strength of the downstream
signal.
Fast Path FEC There are two latency paths that may be used: fast and
Correction interleaved. For either path a forward error correction (FEC)
scheme is employed to ensure higher data integrity. For
maximum noise immunity, an interleaver may be used to
supplement FEC.
Interleaved Path An interleaver is basically a buffer used to introduce a delay,
FEC Correction allowing for additional error correction techniques to handle
noise. Interleaving slows the data flow and may not be
optimal for real-time signals such as video transmission.
Fast Path CRC Indicates the number of Fast Path Cyclic Redundancy Check
Error errors.
Interleaved Path Indicates the number of Interleaved Path Cyclic Redundancy
CRC Error Check errors.
Loss of Signal Momentary signal discontinuities.
Defect
Loss of Frame Failures due to loss of frames.
Defect
4-57
CONFIGURING THE BARRICADE ADSL ROUTER
Parameter Description
Loss of Power Failures due to loss of power.
Defect
Fast Path HEC Fast Path Header Error Concealment errors.
Error
Interleaved Path Interleaved Path Header Error Concealment errors.
HEC Error
Statistics (Superframes represent the highest level of data presentation.
Each superframe contains regular ADSL frames, one of
which is used to provide superframe synchronization,
identifying the start of a superframe. Some of the remaining
frames are also used for special functions.)
Received Number of interleaved superframes received.
Superframes
Interleaved
Transmitted Number of interleaved superframes transmitted.
Superframes
Interleaved
Received Number of fast superframes received.
Superframes Fast
Transmitted Number of fast superframes transmitted.
Superframes Fast
4-58
DDNS
DDNS
DDNS is a standard mechanism for managing the identity of the dynamic
networks created by DHCP.
With DDNS enabled, you can host your own web site, email server, FTP
site and more at your own location even if you have a dynamic IP address.
Parameter Description
Dynamic DNS Enables/disables DDNS.
Provider This feature is powered by either DynDNS.org or
TZO.com. With a DDNS connection you can host your
own web site, email server, FTP site, and more at your own
location, even if you have a dynamic IP address.
Domain Name A series of alphanumeric strings separated by periods, that
maps to the address of the router network connection and
identifies the owner of the address.
Account/E-mail Enter in the user account or email address for management
access to the ADSL Router from the WAN connection
(Internet).
Password/Key Enter password/key for remote security.
4-59
CONFIGURING THE BARRICADE ADSL ROUTER
Tools
Use the Tools menu to back up the current settings, to restore previously
saved settings, or to restore the factory default settings.
Configuration Tools
Check Backup and click More Configuration to save your ADSL Router’s
configuration to a file named config.bin on your PC. You can then check
the “Restore” radio button and click More Configuration to restore the
saved backup configuration file.
To restore the factory settings, check Restore to Factory Defaults and click
More Configuration. You will be asked to confirm your decision.
4-60
TOOLS
Firmware Upgrade
Use this screen to update the firmware or user interface to the latest
versions.
4-61
CONFIGURING THE BARRICADE ADSL ROUTER
Reset
Perform a reset from this page.
The configurations will not be changed back to the factory default settings.
Note: If you use the reset button on the rear panel, the ADSL Router
performs a power reset and restores the factory settings.
4-62
STATUS
Status
The Status screen displays WAN/LAN connection status, firmware and
hardware version numbers, as well as information on DHCP clients
connected to your network.
4-63
CONFIGURING THE BARRICADE ADSL ROUTER
The security log may be saved to a file by clicking Save and choosing a
location.
Parameter Description
INTERNET Displays WAN connection type and status.
Release Click on this button to disconnect from the WAN.
Renew Click on this button to establish a connection to the WAN.
GATEWAY Displays system IP settings, as well as DHCP Server and
Firewall status.
INFORMATION Displays the number of attached clients, the firmware versions,
the physical MAC address for each media interface and for the
ADSL Router, as well as the hardware version and serial
number.
ATM PVC Displays ATM connection type and status.
Security Log Displays illegal attempts to access your network.
Save Click on this button to save the security log file.
Clear Click on this button to delete the access log.
Refresh Click on this button to refresh the screen.
DHCP Client Log Displays information on DHCP clients on your network.
4-64
APPENDIX A
TROUBLESHOOTING
This section describes common problems you may encounter and possible
solutions to them. The ADSL Router can be easily monitored through
panel indicators to identify problems.
Troubleshooting Chart
Symptom Action
LED Indicators
POWER LED is • Check connections between the ADSL Router, the
Off external power supply, and the wall outlet.
• If the power indicator does not turn on when the
power cord is plugged in, you may have a problem
with the power outlet, power cord, or external power
supply. However, if the unit powers off after running
for a while, check for loose power connections, power
losses, or surges at the power outlet. If you still cannot
isolate the problem, then the external power supply
may be defective. In this case, contact Technical
Support for assistance.
A-1
TROUBLESHOOTING
Troubleshooting Chart
Symptom Action
LED Indicators
LAN LED is • Verify that the ADSL Router and attached device are
Off powered on.
• Be sure the cable is plugged into both the ADSL
Router and the corresponding device.
• Verify that the proper cable type is used and that its
length does not exceed the specified limits.
• Be sure that the network interface on the attached
device is configured for the proper communication
speed and duplex mode.
• Check the adapter on the attached device and cable
connections for possible defects. Replace any
defective adapter or cable if necessary.
Network Connection Problems
Cannot ping the • Verify that the IP addresses are properly configured.
ADSL Router For most applications, you should use the ADSL
from the Router’s DHCP function to dynamically assign IP
attached LAN, addresses to hosts on the attached LAN. However, if
or the ADSL you manually configure IP addresses on the LAN,
verify that the same network address (network
Router cannot component of the IP address) and subnet mask are
ping any device used for both the ADSL Router and any attached
on the attached LAN devices.
LAN
• Be sure the device you want to ping (or from which
you are pinging) has been configured for TCP/IP.
A-2
TROUBLESHOOTING
Troubleshooting Chart
Symptom Action
Management Problems
Cannot connect • Be sure to have configured the ADSL Router with a
using the Web valid IP address, subnet mask, and default gateway.
browser • Check that you have a valid network connection to the
ADSL Router and that the port you are using has not
been disabled.
• Check the network cabling between the management
station and the ADSL Router.
Forgot or lost • Press the Reset button on the rear panel (holding it
the password down for at least five seconds) to restore the factory
defaults.
A-3
TROUBLESHOOTING
A-4
APPENDIX B
CABLES
Ethernet Cable
Caution: Do not plug a phone jack connector into an RJ-45 port. For
Ethernet connections, use only twisted-pair cables with RJ-45
connectors that conform to FCC standards.
Specifications
Cable Types and Specifications
Cable Type Max. Length Connector
10BASE-T Cat. 3, 4, 5 100-ohm UTP 100 m (328 ft) RJ-45
100BASE-TX Cat. 5 100-ohm UTP 100 m (328 ft) RJ-45
Wiring Conventions
For Ethernet connections, a twisted-pair cable must have two pairs of
wires. Each wire pair is identified by two different colors. For example, one
wire might be red and the other, red with white stripes. Also, an RJ-45
connector must be attached to both ends of the cable.
B-1
CABLES
B-2
RJ-45 PORT ETHERNET CONNECTION
Pin Assignments
With 10BASE-T/100BASE-TX cable, pins 1 and 2 are used for
transmitting data, and pins 3 and 6 for receiving data.
Straight-Through Wiring
If the port on the attached device has internal crossover wiring (MDI-X),
then use straight-through cable.
B-3
CABLES
Crossover Wiring
If the port on the attached device has straight-through wiring (MDI), use
crossover cable.
B-4
ADSL CABLE CONNECTION
Specifications
Cable Types and Specifications
Cable Type Connector
ADSL Line Standard Telephone Cable RJ-11
Wiring Conventions
For ADSL connections, a cable requires one pair of wires. Each wire is
identified by different colors. For example, one wire might be red and the
other, red with white stripes. Also, an RJ-11 connector must be attached to
both ends of the cable.
B-5
CABLES
White/Orange
Orange/White
Blue/White
White/Blue
Blue/White
White/Blue
Yellow
Green
Black
Red
R1 T1 T2 R1 T1 R2 T2 R1 T1 R2
T = Tip R = Ring
B-6
APPENDIX C
SPECIFICATIONS
Standards Compliance
CE Mark
Emissions
FCC Class B, VCCI Class B
Industry Canada Class B
EN55022 (CISPR 22) Class B
C-Tick - AS/NZS 3548 (1995) Class B
Immunity
EN 61000-3-2/3
EN 61000-4-2/3/4/5/6/8/11
Safety
UL 1950
EN60950 (TÜV)
CSA 22.2 No. 950
IEEE 802.3 10 BASE-T Ethernet
IEEE 802.3u 100 BASE-TX Fast Ethernet
USB specification
Modem Standards
ITU G.992.1 (G.dmt)
ITU G.992.2 (G.lite)
ITU G.994.1 (G.handshake)
ITU T.413 issue 2 - ADSL full rate
LAN Interface
1 RJ-45 10 BASE-T/100 BASE-TX port, 1 USB port
Auto-negotiates the connection speed to 10 Mbps Ethernet or 100 Mbps
Fast Ethernet, and the transmission mode to half-duplex or full-duplex
C-1
SPECIFICATIONS
WAN Interface
1 ADSL RJ-11 port
Indicator Panel
Power, LAN, ADSL Syn, ADSL Data
Dimensions
130.5 x 98.0 x 66.5 mm (5.14 x 3.86 x 2.62 in.)
Weight
0.194 kg (0.43 lbs)
Input Power
12 V 1 A
Power Consumption
2.52 Watts maximum
Management
Web management
Advanced Features
Dynamic IP Address Configuration – DHCP, DNS, DDNS
Firewall – Client privileges, hacker prevention and logging,
Stateful Packet Inspection
Virtual Private Network – PPTP, IPSec pass-through, VPN pass-through
Internet Standards
RFC 826 ARP, RFC 791 IP, RFC 792 ICMP, RFC 768 UDP, RFC 793 TCP,
RFC 783 TFTP, RFC 1483 AAL5 Encapsulation, RFC 1661 PPP,
RFC 1866 HTML, RFC 2068 HTTP, RFC 2364 PPP over ATM
Temperature
Operating 0 to 40 °C (32 to 104 °F)
Storage -40 to 70 °C (-40 to 158 °F)
Humidity
5% to 95% (non-condensing)
C-2
GLOSSARY
10BASE-T
IEEE 802.3 specification for 10 Mbps Ethernet over two pairs of
Category 3, 4, or 5 UTP cable.
100BASE-TX
IEEE 802.3u specification for 100 Mbps Fast Ethernet over two pairs of
Category 5 UTP cable.
Auto-Negotiation
Signalling method allowing each node to select its optimum operational
mode (e.g., 10 Mbps or 100 Mbps and half or full duplex) based on the
capabilities of the node to which it is connected.
Bandwidth
The difference between the highest and lowest frequencies available for
network signals. Also synonymous with wire speed, the actual speed of the
data transmission along the cable.
Collision
A condition in which packets transmitted over the cable interfere with each
other. Their interference makes both signals unintelligible.
Collision Domain
Single CSMA/CD LAN segment.
CSMA/CD
CSMA/CD (Carrier Sense Multiple Access/Collision Detect) is the
communication method employed by Ethernet, Fast Ethernet, or Gigabit
Ethernet.
Glossary-1
GLOSSARY
End Station
A workstation, server, or other device that does not forward traffic.
Ethernet
A network communication system developed and standardized by DEC,
Intel, and Xerox, using baseband transmission, CSMA/CD access, logical
bus topology, and coaxial cable. The successor IEEE 802.3 standard
provides for integration into the OSI model and extends the physical layer
and media with repeaters and implementations that operate on fiber, thin
coax and twisted-pair cable.
Fast Ethernet
A 100 Mbps network communication system based on Ethernet and the
CSMA/CD access method.
Full Duplex
Transmission method that allows two network devices to transmit and
receive concurrently, effectively doubling the bandwidth of that link.
IEEE
Institute of Electrical and Electronic Engineers.
IEEE 802.3
Defines carrier sense multiple access with collision detection (CSMA/CD)
access method and physical layer specifications.
IEEE 802.3ab
Defines CSMA/CD access method and physical layer specifications for
1000BASE-T Fast Ethernet.
IEEE 802.3u
Defines CSMA/CD access method and physical layer specifications for
100BASE-TX Fast Ethernet.
Glossary-2
GLOSSARY
IEEE 802.3x
Defines Ethernet frame start/stop requests and timers used for flow
control on full-duplex links.
LAN Segment
Separate LAN or collision domain.
LED
Light emitting diode used or monitoring a device or network condition.
MIB
An acronym for Management Information Base. It is a set of database
objects that contains information about the device.
RJ-45 Connector
A connector for twisted-pair wiring.
Glossary-3
GLOSSARY
Straight-through Port
An RJ-45 port which does not cross the receive and transmit signals
internally (MDI) so it can be connected with straight-through twisted-pair
cable to any device having a crossover port (MDI-X). Also referred to as a
“Daisy-Chain” port. The RJ-45, 10/100 Mbps port supports Auto MDI/
MDI-X.
Switched Ports
Ports that are on separate collision domains or LAN segments.
UTP
Unshielded twisted-pair cable.
Glossary-4