Netopia R7200 User Reference Manual

Netopia R7200 User Reference Manual

Sdsl router
Table of Contents

Advertisement

Quick Links

Netopia
R7200 SDSL Router
Nokia Speedlink™ certified
User's Reference Guide

Advertisement

Table of Contents
loading

Summary of Contents for Netopia R7200

  • Page 1 ™ Netopia R7200 SDSL Router Nokia Speedlink™ certified User’s Reference Guide...
  • Page 2 This manual and any associated artwork, software, and product designs are copyrighted with all rights reserved. Under the copyright laws such materials may not be copied, in whole or part, without the prior written consent of Netopia, Inc. Under the law, copying includes translation to another language or format.
  • Page 3: Table Of Contents

    Welcome to the Netopia R7200 SDSL Router User’s Reference Guide. This guide is designed to be your single source for information about your Netopia R7200 SDSL Router. It is intended to be viewed on-line, using the powerful features of the Adobe Acrobat Reader. The information display has been designed to present the maximum information in the minimum space on your screen.
  • Page 4 User’s Reference Guide Adding an external modem ... 4-5 Connecting to a LocalTalk network ... 4-6 Chapter 5 — Setting up your Router with the SmartStart Wizard 5-1 Before running SmartStart ... 5-2 Setting up your Router with the SmartStart Wizard ... 5-3 SmartStart Wizard configuration screens ...
  • Page 5 IP parameters (default profile) screen ... 8-8 IPX parameters (default profile) screen ... 8-9 System configuration screens ... 8-9 Navigating through the system configuration screens... 8-10 System configuration features ... 8-11 Network protocols setup ... 8-12 Filter sets (firewalls) ... 8-12 IP address serving ...
  • Page 6 User’s Reference Guide IP setup ... 10-11 IP subnets ... 10-15 Static routes... 10-17 IP address serving ... 10-21 IP Address Pools ... 10-24 DHCP NetBIOS Options... 10-26 MacIP (KIP forwarding) setup ... 10-28 Chapter 11 — IPX Setup ...11-1 IPX features ...
  • Page 7 Chapter 13 — Monitoring Tools ...13-1 Quick View status overview ... 13-1 General status ... 13-2 Current status ... 13-3 Status lights ... 13-3 Statistics & Logs ... 13-4 General Statistics ... 13-4 Event histories ... 13-5 Routing tables ... 13-7 Served IP Addresses...
  • Page 8 viii User’s Reference Guide Deleting a filter set... 14-17 A sample IP filter set ... 14-17 IPX filters ... 14-21 IPX packet filters ... 14-22 IPX packet filter sets ... 14-23 IPX SAP filters ... 14-25 IPX SAP filter sets ... 14-27 Firewall tutorial ...
  • Page 9 Tips and rules for distributing IP addresses... B-9 Nested IP subnets ... B-11 Broadcasts... B-13 Packet header types... B-13 Appendix C — Understanding Netopia NAT Behavior...C-1 Network configuration... C-1 Background ... C-1 Exported services ... C-5 Important notes ... C-6 Configuration ...
  • Page 10 User’s Reference Guide Appendix D — Binary Conversion Table...D-1 Appendix E — Further Reading... E-1 Appendix F — Technical Specifications and Safety Information... F-1 Pinouts for Auxiliary port modem cable... F-1 Description... F-2 Power requirements ... F-2 Environment ... F-2 Software and protocols...
  • Page 12 User’s Reference Guide...
  • Page 13: Chapter 1 - Introduction

    The Netopia R7200 SDSL Router is a full-featured, stand-alone, multiprotocol router for connecting diverse local area networks (LANs) to the Internet and other remote networks. Once your Netopia R7200 SDSL Router is connected to your computer, and your account is activated by your network service provider, you will have a fast Symmetric Digital Subscriber Line (SDSL) connection between your PC or LAN and the telephone company’s...
  • Page 14: How To Use This Guide

    How to use this guide This guide is designed to be your single source for information about your Netopia R7200 SDSL Router. It is intended to be viewed on-line, using the powerful features of the Adobe Acrobat Reader. The information display has been deliberately designed to present the maximum information in the minimum space on your screen.
  • Page 15: Chapter 2 - Setting Up Internet Services

    Use an ISP that provides Internet access through a Symmetric Digital Subscriber Line (SDSL) and that supports the Netopia R7200 SDSL Router. If you would like to use an ISP that you already have a relationship with but that is not familiar with the Netopia R7200, call us at 1-800-NETOPIA. Our representative can call your ISP and introduce them to the product.
  • Page 16: Unique Requirements

    Setting up a Netopia R7200 account Check whether your ISP has the Netopia R7200 on its list of supported products that have been tested with a particular configuration. If the ISP does not have the Netopia R7200 on such a list, describe the Netopia R7200 in as much detail as needed, so your ISP account can be optimized.
  • Page 17: Obtaining Information From The Isp

    The number of Ethernet IP host addresses available with your account and the first usable IP host address in the address block The Ethernet IP address for your Netopia R7200 The Ethernet IP subnet mask address for your Netopia R7200 Setting Up Internet Services 2-3 Chapter 10, “IP Setup and Network Address...
  • Page 18 2-4 User’s Reference Guide...
  • Page 19: Chapter 3 - Making The Physical Connections

    Cable length and network size limitations when expanding networks For small networks, install the Netopia R7200 near one of the LANs. For large networks, you can install the Netopia R7200 in a wiring closet or a central network administration site.
  • Page 20: What You Need

    You will need: A Windows 95 or 98–based PC or a Macintosh computer with Ethernet connectivity for configuring the Netopia R7200. This may be built-in Ethernet or an add-on card, with TCP/IP installed and configured. See “Before running SmartStart” on page An SDSL wall outlet wired for a connection to a Competitive Local Exchange Carrier (CLEC) who supports Symmetric Digital Subscriber Line connections.
  • Page 21: Netopia R7200 Sdsl Router Back Panel Ports

    8-port Ethernet hub Eight Ethernet jacks. You will use one of these to configure the Netopia R7200. For a new installation, use the Ethernet connection. Alternatively, you can use the console connection to run console-based management using a direct serial connection.
  • Page 22: Netopia R7200 Sdsl Router Status Lights

    3-4 User’s Reference Guide Netopia R7200 SDSL Router status lights The figure below represents the Netopia R7200 status light (LED) panel. Netopia R7200 LED front panel WAN 1 The following table summarizes the meaning of the various LED states and colors: When this happens...
  • Page 23: Overview

    Before connecting the Netopia R7200 to any AppleTalk LANs that contain other AppleTalk routers, you should read “Routers and seeding” on page 12-3. See the later sections in this chapter for details on how to connect the Netopia R7200 to different types of networks. Readying computers on your local network PC and Macintosh computers must have certain components installed before they can communicate through the Netopia R7200.
  • Page 24 TCP/IP stack: This is the software that lets your PC or Macintosh computer communicate using Internet protocols. TCP/IP stacks must be configured with some of the same information you used to configure the Netopia R7200. There are a number of TCP/IP stacks available for PC computers. Windows 95 includes a built-in TCP/IP stack. See “Configuring TCP/IP on Windows 95, 98, or NT computers”...
  • Page 25: Connecting To An Ethernet Network

    Connecting to an Ethernet network The Netopia R7200 supports Ethernet connections through its eight Ethernet ports. The router automatically detects which Ethernet port is in use. You can connect either 10Base-T or EtherWave Ethernet networks to the Netopia R7200. The following table displays some important attributes of these types of Ethernet.
  • Page 26: 10Base-T

    4-4 User’s Reference Guide 10Base-T You can connect a standard 10Base-T Ethernet network to the Netopia R7200 using any of its available Ethernet ports. Netopia R7200 back panel Ethernet Normal The Netopia R7200 in a 10Base-T network To connect your 10Base-T network to the Netopia R7200 through an Ethernet port, use a 10Base-T cable with RJ-45 connectors.
  • Page 27: Adding An External Modem

    Auxiliary connection port HD-15 (female) By default, the Auxiliary port on your Netopia R7200 is enabled for remote console configuration via an external asynchronous modem. This means that all you have to do is connect your modem to the Auxiliary port and configure its settings in the Line Configuration screens under the WAN Configuration menu.
  • Page 28: Connecting To A Localtalk Network

    HD-15 (female) Connect the male HD-15 end of the LocalTalk cable to the Auxiliary port on your Netopia R7200. Connect the other end of the cable to your LocalTalk network. You can use only one connection on the Auxiliary port. You cannot use both the PhoneNET connector and an external modem.
  • Page 29: Chapter 5 - Setting Up Your Router With The Smartstart Wizard

    Once you’ve connected your router to your computer and your telecommunications line and installed a web browser, you’re ready to run the Netopia SmartStart™ Wizard. The SmartStart Wizard will help you set up the router and share the connection. The SmartStart Wizard walks you through a series of questions and, based on your responses, automatically configures the router for connecting your LAN to the Internet or to your remote...
  • Page 30: Before Running Smartstart

    SmartStart, in case you do not want to use the dynamic addressing features built in to the Netopia Router and need to restore the fixed IP address.
  • Page 31: Setting Up Your Router With The Smartstart Wizard

    The SmartStart Wizard presents a series of screens to guide you through the preliminary configuration of a Netopia R7200. It will then create a connection profile using the information you supply to it. Welcome screen. The first screen welcomes you to the SmartStart Wizard configuration utility.
  • Page 32: Easy Option

    Check your cable connections. Be sure you have connected the router and the computer properly, using the correct cables. Refer to the Step 1 “Connect the Router” sheet in your Netopia R7200 documentation folio. Make sure the router is turned on and that there is an Ethernet connection between your computer and the router.
  • Page 33: Advanced Option

    When the test is successful, SmartStart presents you with the Additional Configuration screen. If you have a router that has a permanent unswitched connection to your ISP, such as an IDSL, SDSL, or Ethernet WAN interface router attached to a cable modem, the Additional Configuration screen appears.
  • Page 34: Sharing The Connection

    It is also found in your documentation folio. Note: Forcing a new IP address may turn off the Netopia R7200’s IP address serving capabilities, if you assign an IP address and subnet mask outside the router’s current IP address serving pool.
  • Page 35 Dynamic configuration (recommended) If you configure your Netopia R7200 using SmartStart, you can accept the dynamic IP address assigned by your router. The Dynamic Host Configuration Protocol (DHCP) server, which enables dynamic addressing, is enabled by default in the router. If your PC is not set for dynamic addressing, SmartStart will offer to do this for you when you launch it.
  • Page 36 5-8 User’s Reference Guide Static configuration (optional) If you are manually configuring for a fixed or static IP address, perform the following: Go to Start Menu/Settings/Control Panels and double click the Network icon. From the Network components list, select the Configuration tab. Select TCP/IP-->Your Network Card.
  • Page 37 Click on the Gateway tab (shown below). Under “New gateway,” enter 192.168.1.1. Click Add. This is the Netopia R7200’s pre-assigned IP address. Click OK in this window and the next window. When prompted, reboot the computer. Note: You can also use these instructions to configure other computers on your network with manual or static IP addresses.
  • Page 38: Configuring Tcp/Ip On Macintosh Computers

    Macintosh. Dynamic configuration (recommended) If you configure your Netopia R7200 using SmartStart, you can accept the dynamic IP address assigned by your router. The Dynamic Host Configuration Protocol (DHCP), which enables dynamic addressing, is enabled by default in the router. To configure your Macintosh computer for dynamic addressing do the following: Go to the Apple menu.
  • Page 39 Static configuration (optional) If you are manually configuring for a fixed or static IP address, perform the following: Go to the Apple menu. Select Control Panels and then TCP/IP or MacTCP. With the TCP/IP window open, go to the Edit menu and select User Mode.
  • Page 40 If you want to use MacIP to dynamically assign IP addresses to the Macintosh computers on your network you must install the optional AppleTalk feature set kit. Note: You cannot use MacIP dynamic configuration to configure your Netopia R7200 SDSL Router because you must first configure the router in order to enable AppleTalk.
  • Page 41 Restart the computer. Note: More information about configuring your Macintosh computer for TCP/IP connectivity through a Netopia R7200 can be found in Technote NIR_026, “Open Transport and Netopia Routers,” located on the Netopia Web site. Setting up your Router with the SmartStart Wizard 5-13...
  • Page 42 5-14 User’s Reference Guide...
  • Page 43: Chapter 6 - Console-Based Management

    Console-based management is a menu-driven interface for the capabilities built into the Netopia R7200. Console-based management provides access to a wide variety of features that the router supports. You can customize these features for your individual setup. This chapter describes how to access the console-based management screens.
  • Page 44: Connecting Through A Telnet Session

    “Quick View status overview” on page 13-1 Connecting through a Telnet session Features of the Netopia R7200 can be configured through the console screens. Before you can access the console screens through Telnet, you must have: A network connection locally to the router or IP access to the router.
  • Page 45: Configuring Telnet Software

    ZTerm, included on the Netopia CD, for Macintosh computers. The Netopia R7200 back panel has a connector labeled “Console” for attaching the Router to either a PC or Macintosh computer via the serial port on the computer. (On a Macintosh computer, the serial port is called the Modem port or Printer port.) This connection lets you use the computer to configure and monitor the Netopia...
  • Page 46: Navigating Through The Console Screens

    Navigating through the console screens Use your keyboard to navigate the Netopia R7200’s configuration screens, enter and edit information, and make choices. The following table lists the keys to use to navigate through the console screens.
  • Page 47: Chapter 7 - Easy Setup

    This chapter describes how to use the Easy Setup console screens on your Netopia R7200 SDSL Router. After completing the Easy Setup console screens, your router will be ready to connect to the Internet or another remote site. Easy Setup console screens Using four Easy Setup console screens, you can: Modify a connection profile for your router for the connection to your ISP or remote location...
  • Page 48 If you do not see the Main Menu, verify that: The computer used to view the console screen has its serial port connected to the Netopia R7200’s Console port or an Ethernet connection to one of its Ethernet ports. See your router”...
  • Page 49: Quick Easy Setup Connection Path

    Quick Easy Setup connection path This section may be all you need to do to configure your Netopia R7200 SDSL Router to connect to the Internet. Most ISPs will supply you with several parameter values for you to enter in the router. The ISP will provide the...
  • Page 50: Sdsl Line Configuration

    Select Data Link Encapsulation and press Return. The pop-up menu will offer you the choice of PPP or RFC1483. Your selection depends on which type your ISP uses. The default is RFC1483. Press the Down arrow key until you reach NEXT SCREEN. Press Return to bring up the next screen. Netopia R7200 v4.3.5 Easy Setup... WAN Configuration...
  • Page 51: Easy Setup Profile

    ISP or a corporate site. On a Netopia R7200 SDSL Router you can add up to 15 more connection profiles, for a total of 16, although you can only use one at a time.
  • Page 52: Ip Easy Setup

    Press the Down arrow key until you reach NEXT SCREEN. Press Return to bring up the next screen. IP Easy Setup The IP Easy Setup screen is where you enter information about your Netopia Router’s: Ethernet IP address Ethernet Subnet mask...
  • Page 53: Easy Setup Security Configuration

    Do not confuse the remote IP address and the Default IP Gateway’s address with the block of local IP addresses you receive from your ISP. You use the local IP addresses for the Netopia R7200’s Ethernet port and for IP clients on your local network. The remote IP address and the default gateway’s IP address should point to your ISP’s router.
  • Page 54 PREVIOUS SCREEN Configure a Configuration Access Name and Password here. The final step in configuring the Easy Setup console screens is to restart the Netopia R7200, so that the configuration settings take effect. Select RESTART DEVICE. A prompt asks you to confirm your choice.
  • Page 56 User’s Reference Guide...
  • Page 57: Chapter 8 — Wan And System Configuration

    This chapter describes how to use the console-based management screens to access and configure advanced features of your Netopia R7200 SDSL Router. You can customize these features for your individual setup. These menus provide a powerful method for experienced users to set up their router’s connection profiles and system configuration.
  • Page 58 8-2 User’s Reference Guide Data Rate Mode... Data Rate... ATM VPI: ATM VCI: Data Link Encapsulation... Aux Serial Port... Data Rate (kbps)... Aux Modem Init String: Enter Information supplied to you by your telephone company. The Data Rate Mode pop-up menu offers the choice of Hunt or Locked mode. If you select Hunt (the default) the router will attempt to connect at the data rate you specify in the Data Rate selection, but if it cannot do so, it will then hunt through all the available data rates until it finds one at which it can establish a connection.
  • Page 59: Creating A New Connection Profile

    ADD PROFILE NOW Configure a new Conn. Profile. Finished? On a Netopia R7200 SDSL Router you can add up to 15 more connection profiles, for a total of 16, but you can only use one at a time. Select Profile Name and enter a name for this connection profile. It can be any name you wish. For example: the name of your ISP.
  • Page 60 8-4 User’s Reference Guide Select IP Profile Parameters and press Return. The IP Profile Parameters screen appears. Address Translation Enabled: Local WAN IP Address: Remote IP Address: Remote IP Mask: Filter Set... Remove Filter Set Receive RIP: Toggle to Yes if this is a single IP address ISP account. Configure IP requirements for a remote network connection here.
  • Page 61 Toggle or enter any IPX Parameters you require and return to the Add Connection Profile screen by pressing Escape. For more information, see Select Data Link Encapsulation and press Return. From the pop-up menu select either PPP or RFC1483. If you select PPP, the Data Link Options menu item is displayed;...
  • Page 62: The Default Profile

    8-6 User’s Reference Guide 10. Select Interface Group and press Return. From the pop-up menu select either Primary or Backup. If you select Primary, the profile is applied to your primary WAN interface (the SDSL link). This would be desirable if you were creating a profile to store your authentication information for a PPP connection over the SDSL link.
  • Page 63 Main Menu The Default Profile screen appears. Must Match a Defined Profile: IP Enabled: IP Parameters... IPX Enabled: IPX Parameters... Return/Enter accepts * Tab toggles * ESC cancels. Configure Default WAN Connection Parameters here. You can set Must Match a Defined Profile item to Yes or No (the default). This item controls whether or not the SDSL link will come up without an explicitly configured connection profile.
  • Page 64: Ip Parameters (Default Profile) Screen

    8-8 User’s Reference Guide IP parameters (default profile) screen If you are using RFC1483 datalink encapsulation, the IP Parameters (Default Profile) screen allows you to configure various IP parameters for SDSL connections established without an explicitly configured connection profile: Address Translation Enabled: Filter Set (Firewall)...
  • Page 65: Ipx Parameters (Default Profile) Screen

    Through the console port, using a local terminal (see page 6-3) You can also retrieve the Netopia R7200’s configuration information and remotely set its parameters using the Simple Network Management Protocol (see Open a Telnet connection to the router’s IP address; for example, “192.168.1.1.”...
  • Page 66: Navigating Through The System Configuration Screens

    Select Network Protocols and press Return. The Network Protocols screen appears. Select IP Setup and press Return. The IP Setup screen appears. To go back in this sequence of screens, use the Escape key. Netopia R7200 v4.3.5 Easy Setup... WAN Configuration...
  • Page 67: System Configuration Features

    System configuration features The Netopia R7200 SDSL Router’s default settings may be all you need to configure your Netopia R7200. Some users, however, require advanced settings or prefer manual control over the default selections. For these users, the Netopia R7200 provides system configuration options.
  • Page 68: Network Protocols Setup

    8-12 User’s Reference Guide Network protocols setup These screens allow you to configure your network’s use of the standard networking protocols: IP: Details are given in “IP Setup and Network Address Translation” on page IPX: Details are given in “IPX Setup” on page 11-1. AppleTalk: Details are given in Note: AppleTalk requires the optional AppleTalk feature expansion kit.
  • Page 69: Console Configuration

    Select Current Date and enter the date in the appropriate format. Use one- or two-digit numbers for the month and day, and the last two digits of the current year. The date’s numbers must be separated by forward slashes (/). Select Current Time and enter the time in the format HH:MM, where HH is the hour (using either the 12-hour or 24-hour clock) and MM is the minutes.
  • Page 70: Snmp (Simple Network Management Protocol)

    You can upgrade your Netopia R7200 by adding new feature sets through the Upgrade Feature Set utility. See the release notes that came with your router or feature set upgrade, or visit the Netopia Web site at www.netopia.com for information on new feature sets, how to obtain them, and how to install them on your Netopia R7200.
  • Page 71: Installing The Syslog Client

    You can specify the UNIX syslog Facility to use by selecting the Facility pop-up. Installing the Syslog client The Goodies folder on the Netopia CD contains a Syslog client daemon program that can be configured to report the WAN events you specified in the Logging Configuration screen.
  • Page 72 8-16 User’s Reference Guide...
  • Page 73: Chapter 9 — Line Backup

    The Netopia R7200 SDSL Router offers line backup functionality in the event of a line failure on your primary WAN link. This chapter covers the following topics: “WAN Configuration” on page 9-2 “IP Setup screen” on page 9-4 “Connection Profiles” on page 9-5 “Using Scheduled Connections with Backup”...
  • Page 74: Wan Configuration

    9-2 User’s Reference Guide WAN Configuration To configure Line Backup, from the Main Menu select WAN Configuration and then Backup Configuration. Main Menu From here you will configure yours and the remote sites' WAN information. The Backup Configuration screen appears. WAN Configuration WAN Configuration WAN (Wide Area Network) Setup...
  • Page 75: Backup Configuration Screen

    Backup Configuration screen This screen is used to configure the conditions under which backup will occur, if it will recover, and how the auxiliary port is configured. The circuit type is Switched Asynchronous. Backup Parameters: Backup to Auxiliary Port... Requires Data Link Failure of... Ping Host Name or IP Address: Recovery to DLC SDSL...
  • Page 76: Ip Setup Screen

    IP Address Serving Setup Network Address Translation (NAT)... Filter Sets... Enter an IP address in decimal and dot form (xxx.xxx.xxx.xxx). Set up the basic IP attributes of your Netopia in this screen. For more information on IP Setup see IP Setup 3.3.3.3 255.0.0.0...
  • Page 77: Connection Profiles

    Connection Profiles The line backup feature allows you to configure a complete connection profile for the backup port, just as you do for your primary WAN connection. In this way profiles are associated with a particular interface. The profile should reflect the port it is associated with. It should have switched characteristics for the backup port. Profile Name: Profile Enabled: Data Link Encapsulation is...
  • Page 78 9-6 User’s Reference Guide The Scheduled Connections screen appears. Return/Enter to add a Scheduled Connection. Navigate from here to add/modify/change/delete Scheduled Connections. Select Add Scheduled Connection and press Return. The Add Scheduled Connection screen appears. Scheduled Connection Enable: How Often... Schedule Type...
  • Page 79: Management/Statistics

    Monday: Tuesday: Wednesday: Thursday: Friday: Saturday: Sunday: Scheduled Window Start Time: AM or PM: Scheduled Window Duration Per Day: 24:00 Return/Enter accepts * Tab toggles * ESC cancels. Toggle all the days of the week to Yes, and set the Scheduled Window Duration Per Day to 24:00. This guarantees a permanent connection.
  • Page 80 9-8 User’s Reference Guide Select Backup Management/Statistics and press Return. Note: This option is only visible if backup is not Disabled. The Backup Management/Statistics screen appears. Current Port: Backup State: Time Since Detection: Current Port is a display-only field that shows which port is currently in operation. Backup State is a display-only field that shows the current state of Backup or Recovery.
  • Page 81: Quickview

    connection. The FORCE BACKUP/FORCE RECOVERY option is a selectable option that depending on the current state of backup will force the switching of ports. If you are currently in backup mode, the option will be FORCE RECOVERY. If you are currently in normal WAN link mode, the option will be FORCE BACKUP. Selecting either one and pressing Return will force the link to switch to the other mode.
  • Page 82 9-10 User’s Reference Guide...
  • Page 83: Chapter 10 - Ip Setup And Network Address Translation

    The Netopia R7200 uses Internet Protocol (IP) to communicate both locally and with remote networks. This chapter shows you how to configure the router to route IP traffic. You also learn how to configure the router to serve IP addresses to hosts on your local network.
  • Page 84 Each profile can have NAT enabled. When NAT is enabled, the Netopia R7200 can use either a statically assigned IP address or one dynamically assigned each time the router connects to the ISP. While a dynamically assigned IP address offers the ISP more flexibility, it does have an important limitation: the router requires a static IP address to support Web, FTP, or...
  • Page 85: Using Network Address Translation

    Pick a network number for your local network (referred to as the internal network). This can be any IP address range you want. The Netopia R7200 SDSL Router has a default IP address of 192.168.1.1. You may choose to change this address to match a pre-existing addressing scheme. For this example, we will use 10.0.0.0.
  • Page 86 Select IP Addressing and, from the pop-up menu, choose the IP routing method that your ISP or network administrator specifies (either Numbered or Unnumbered). For more information see “Understanding IP Addressing,” IP Profile Parameters Unnumbered 0.0.0.0 0.0.0.0 0.0.0.0 Both v2 (multicast) Appendix C, “Understanding Netopia NAT Behavior.” Appendix B,...
  • Page 87 If your ISP uses numbered (interface-based) routing, select Local WAN IP Address and enter the local WAN address your ISP gave you. Then select Local WAN IP Mask and enter the WAN subnet mask of the remote site you will connect to. The default address is 0.0.0.0, which allows for dynamic addressing, meaning that your ISP assigns an address via DHCP each time you connect.
  • Page 88: Associating Port Numbers With Nodes

    10-6 User’s Reference Guide When using numbered interfaces, the Netopia Router will use its local WAN IP address and subnet mask to send packets to the remote router. Both routers have WAN IP addresses and subnet masks associated with the connection.
  • Page 89: Advanced Ip/Ipx Router Configuration Options

    Telnet uses port number 23 SNMP uses port number 161 To help direct incoming IP traffic to the appropriate server, the Netopia R7200 lets you associate these and other port numbers with distinct IP addresses on your internal LAN using exported services. See page 10-11 for details.
  • Page 90: Connection Profiles

    Return accepts * ESC cancels * Left/Right moves insertion point * Del deletes. Configure a new Conn. Profile. Finished? On a Netopia R7200 SDSL Router you can add up to 15 more connection profiles, for a total of 16, although only one can be used at a time.
  • Page 91 Address Translation Enabled: IP Addressing... Local WAN IP Address: Local WAN IP Mask: Remote IP Address: Remote IP Mask: Filter Set... Remove Filter Set Receive RIP: Transmit RIP: Configure IP requirements for a remote network connection here. Toggle or enter any IP parameters you require and return to the Add Connection Profile screen by pressing Escape.
  • Page 92: Network Address Translation Guidelines

    10-10 User’s Reference Guide Select ADD PROFILE NOW and press Return. Your new connection profile will be added. If you want to view the connection profiles in your router, return to the WAN Configuration screen, and select Display/Change Connection Profile. The list of connection profiles is displayed in a scrolling pop-up screen.
  • Page 93: Ip Setup

    Main Menu The IP Setup options screen is where you configure the Ethernet side of the Netopia R7200. The information you enter here controls how the router routes IP traffic. Consult your network administrator or Internet service provider to obtain the IP setup information (such as the Ethernet IP address, Ethernet subnet mask, default IP gateway and Primary Domain Name Server IP address) you will need before changing any of the settings in this screen.
  • Page 94 Routing Information Protocol (RIP) is needed if there are IP routers on other segments of your Ethernet network that the Netopia R7200 needs to recognize. If this is the case select Receive RIP and select v1, v2, or Both from the pop-up menu. With Receive RIP set to v1, the Netopia R7200’s Ethernet port will accept routing information provided by RIP packets from other routers that use the same subnet mask.
  • Page 95 Return/Enter to configure UDP/TCP Port-to-IP Address redirection. Select Add Export. The Add Exported Service screen appears. Service... Local Server's IP Address: ADD EXPORT NOW IP Setup and Network Address Translation 10-13 Exported Services (Local Port to IP Address Remapping) Show/Change Exports... Add Export...
  • Page 96 Select any of the services/ports and press Return to associate it with the address of a server on your local area network. For example, if you select www-http 80, press Return, and type 10.0.0.2, the Netopia R7200 redirects any incoming traffic destined for a Web server to address 10.0.0.2.
  • Page 97: Ip Subnets

    Press Escape when you are finished configuring exported services. You are returned to the IP Setup screen. Ethernet IP Address: Ethernet Subnet Mask: Define Additional Subnets... Default IP Gateway: Primary Domain Name Server: Secondary Domain Name Server: Domain Name: Receive RIP: Transmit RIP: Static Routes...
  • Page 98 All eight row labels are always visible, regardless of the number of subnets configured. To add an IP subnet, enter the Netopia R7200’s IP address on the subnet in the IP Address field in a particular row and the subnet mask for the subnet in the Subnet Mask field in that row.
  • Page 99: Static Routes

    Static routes are IP routes that are maintained manually. Each static route acts as a pointer that tells the Netopia R7200 how to reach a particular network. However, static routes are used only if they appear in the IP routing table, which contains all of the routes used by the Netopia R7200 (see Static routes are helpful in situations where a route to a network must be used and other means of finding the...
  • Page 100 10-18 User’s Reference Guide The Static Routes screen will appear. Configure/View/Delete Static Routes from this and the following Screens. Viewing static routes To display a view-only table of static routes, select Display/Change Static Route. The table shown below will appear. +-Dest.
  • Page 101 Select Destination Network Subnet Mask and enter the subnet mask used by the destination network. Select Next Gateway IP Address and enter the IP address for the router that the Netopia R7200 will use to reach the destination network. This router does not necessarily have to be part of the destination network, but it must at least know where to forward packets destined for that network.
  • Page 102 If the static route conflicts with a connection profile, the connection profile will always take precedence. To make sure that the static route is known only to the Netopia R7200, select Advertise Route Via RIP and toggle it to No. To allow other RIP-capable routers to know about the static route, select Advertise Route Via RIP and toggle it to Yes.
  • Page 103: Ip Address Serving

    Menu Configuration In addition to being a router, the Netopia R7200 is also an IP address server. There are four protocols it can use to distribute IP addresses. The first, called Dynamic Host Configuration Protocol (DHCP), is widely supported on PC networks, as well as Apple Macintosh computers using Open Transport and computers using the UNIX operating system.
  • Page 104 DHCP, BootP, Dynamic WAN, and/or MacIP. Example: Your ISP has given your Netopia R7200 the IP address 192.168.6.137, with a subnet mask of 255.255.255.248. The subnet mask allocated will give you six IP addresses to use when connecting to the ISP over the Internet (for more information on IP addressing refer to Addressing.”).
  • Page 105 If you have configured multiple Ethernet IP subnets, the appearance of the IP Address Serving screen is altered slightly: Configure Address Pools... Serve DHCP Clients: DHCP NetBios Options... Serve BOOTP Clients: Serve Dynamic WAN Clients: Serve MacIP/KIP Clients: MacIP/KIP Static Options... The first three menu items are hidden, and Configure Address Pools...
  • Page 106: Ip Address Pools

    The Client Gateway column allows you to specify the default gateway address that will be provided to clients served an address from the corresponding pool. The value defaults to the Netopia R7200’s IP address on the corresponding subnet (or the Netopia R7200’s default gateway, if that gateway is located on the subnet in question).
  • Page 107 When requesting an address, a client may provide a client identifier, or, if it does not, the Netopia R7200 may construct a pseudo-client identifier for the client. When the client subsequently requests an address, the Netopia R7200 will attempt to serve the address previously associated with the pseudo-client identifier.
  • Page 108: Dhcp Netbios Options

    10-26 User’s Reference Guide DHCP NetBIOS Options If your network uses NetBIOS, you can enable the Netopia R7200 to use DHCP to distribute NetBIOS information. NetBIOS stands for Network Basic Input/Output System. It is a layer of software originally developed by IBM and Sytek to link a network operating system with specific hardware.
  • Page 109 From the NetBios Type pop-up menu, select the type of NetBIOS used on your network. Serve NetBios Type: NetBios Type... Serve NetBios Scope: NetBios Scope: Serve NetBios Name Server: NetBios Name Server IP Addr: To serve DHCP clients with the NetBIOS scope, select Serve NetBios Scope and toggle it to Yes. Select NetBios Scope and enter the scope.
  • Page 110: Macip (Kip Forwarding) Setup

    Ethernet), they must use a MacIP (AppleTalk–IP) gateway. The optional Netopia AppleTalk feature enhancement kit provides for this service. A MacIP gateway converts network traffic into the correct format for AppleTalk or IP, depending on the traffic’s destination. The MacIP gateway can also distribute IP addresses to AppleTalk computers on the network.
  • Page 111 The MacIP (KIP) Forwarding Setup screen tells the Netopia R7200 how many static addresses to allocate for MacIP/KIP clients. The addresses must fall within the address pool from the previous screen. Enter the number of static MacIP addresses to reserve.
  • Page 112 10-30 User’s Reference Guide...
  • Page 113: Chapter 11 - Ipx Setup

    Internetwork Packet Exchange (IPX) is the network protocol used by Novell NetWare networks. This chapter shows you how to configure the Netopia R7200 for routing data using IPX. You also learn how to configure the router to serve IPX network addresses.
  • Page 114: Ipx Address

    11-2 User’s Reference Guide IPX address An IPX address consists of a network number, a node number, and a socket number. An IPX network number is composed of eight hexadecimal digits. The network number must be the same for all nodes on a particular physical network segment.
  • Page 115: Netbios

    IPX spoofing The Netopia R7200 has several IPX features designed to restrict the traffic on the dial-up link when the unit is not sending or receiving IPX data. When the link is idle and a user is logged into a Novell server, the server will send keep-alive packets to ensure that the user is still there.
  • Page 116 IPX network to only those required by remote users connecting to the Netopia R7200. An Ethernet SAP filter must be used with networks that have so many servers advertised that the Netopia R7200 would otherwise exhaust its internal memory storing server entries.
  • Page 117: Ipx Routing Tables

    Select Default Gateway Address and enter the network address of the IPX network to which all packets of unknown destination address should be routed. Note: The default gateway address is usually set up to match the IPX Address in your network connection profile.
  • Page 118 11-6 User’s Reference Guide...
  • Page 119: Chapter 12 - Appletalk Setup

    This chapter discusses the concept of AppleTalk routing and how to configure AppleTalk setup for a Netopia R7200 with the AppleTalk kit installed. AppleTalk support is available as a separate kit for the Netopia R7200 SDSL Router. Skip this chapter if you do not have the AppleTalk kit.
  • Page 120 AppleTalk tells them apart according to an additional part of their addresses: the network number. The Netopia R7200 assigns a unique network number to each member network. In terms of the city street metaphor, the network number is similar to the name of the street. Putting a network number together with a node number fully specifies the address of a node on an internet.
  • Page 121: Macip

    When two networks using AppleTalk communicate with each other through a network based on the Internet Protocol, they are said to be tunneling through the IP network. The Netopia R7200 uses AURP to allow your AppleTalk network to tunnel to designated AppleTalk partner networks, as well as to accept connections from remote AppleTalk networks tunneling to your AppleTalk LAN.
  • Page 122: Installing Appletalk

    These scenarios may guide you in deciding how to set the router’s seeding: If the Netopia R7200 is the only router on your network, you must set it to either hard seeding or soft seeding. The default is soft seeding.
  • Page 123 Main Menu The Netopia Feature Set Upgrade screen appears. You may be able to extend the features of your Netopia by purchasing a 'Software Upgrade'. notes that came with your Netopia or visit the Netopia Communications web site at www.netopia.com.
  • Page 124: Configuring Appletalk

    Otherwise, your EtherTalk network may experience routing conflicts. The Netopia R7200 supports creating up to 32 zone names. As an alternative, you can set EtherTalk seeding to soft seeding and let the Netopia R7200 receive the zone name and network number from the other router.
  • Page 125: Localtalk Setup

    Note: Your LocalTalk network may already have a zone and network number in place. For the Netopia R7200’s LocalTalk port to be part of your LocalTalk network, it must have a network number and zone name that matches the values in use on the LocalTalk network.
  • Page 126: Aurp Setup

    12-8 User’s Reference Guide As an alternative, you can set LocalTalk seeding to soft seeding and let the Netopia R7200 receive the zone name and network number from the other router. Select LocalTalk Net Number and enter the desired network number.
  • Page 127 Example: Site A has an AURP tunnel to site B. Both sites have multiple zones defined on the EtherTalk port and a unique zone on their LocalTalk ports. If side A has indicated that one of its EtherTalk zones is the Free Trade Zone and has opted to use the Free Trade Zone option for its tunnel to B, then only this Free Trade Zone will show up on side B and only those machines or services in the Free Trade Zone will be accessible to side B.
  • Page 128 12-10 User’s Reference Guide Partner IP Address or Domain Name: 176.163.8.134 Initiate Connection: Restrict to Free Trade Zone: The Change AURP Partner screen has all the values you entered when you added that partner. All of these values may be modified in this screen. Deleting an AURP partner To delete an AURP partner, in the AURP Setup screen select Delete Partner and press Return.
  • Page 129 The AURP tickle timer is a parameter that you can set anywhere between 0 and 100 hours. This parameter tells the AURP partners when to send out an AURP tickle packet. If this value is set to 0, the Netopia R7200 will never send out a tickle packet.
  • Page 130 12-12 User’s Reference Guide When network number remapping is enabled, you must choose a safe range of network numbers as a destination for the remapping. A safe range of network numbers does not intersect your local AppleTalk network’s range of network numbers. To choose a destination range for the remapping, select From under Remap into Range and enter a starting value.
  • Page 131: Quick View Status Overview

    “Web-based management pages” on page 13-16 Quick View status overview You can get a useful, overall status report from the Netopia R7200 in the Quick View screen. To go to the Quick View screen, select Quick View in the Main Menu.
  • Page 132: General Status

    IPX Address: The Netopia R7200’s IPX address, entered in the IPX Setup screen. EtherTalk Address: The Netopia R7200’s AppleTalk address on its EtherTalk Phase II interface, entered in the EtherTalk Phase II Setup screen (only if the optional AppleTalk feature set is installed).
  • Page 133: Current Status

    ISDN caller identification (if available). Status lights This section shows the current real-time status of the Netopia R7200’s status lights (LEDs). It is useful for remotely monitoring the router’s status. The Quick View screen’s arrangement of LEDs corresponds to the physical arrangement of LEDs on the router.
  • Page 134: Statistics & Logs

    Main Menu When you are troubleshooting your Netopia R7200, the Statistics & Logs screens provide insight into the recent event activities of the router. From the Main Menu go to Statistics & Logs and select one of the options described in the sections below.
  • Page 135: Event Histories

    You can view two different event histories: one for the router’s system and one for the WAN. The Netopia R7200’s built-in battery backup prevents loss of event history from a shutdown or reset.
  • Page 136 13-6 User’s Reference Guide Main Menu WAN Event History The WAN Event History screen lists a total of 128 events on the WAN. The most recent events appear at the top. -Date-----Time-----Event------------------------------------------------------ ----------------------------------SCROLL UP----------------------------------- 07/03/98 13:59:06 07/03/98 13:59:05 07/03/98 13:59:05 >>WAN: data link activated at 1040 Kbps 07/03/98 13:58:32 --Device restarted----------------------------------------- 07/03/98 12:46:39 --Device restarted----------------------------------------- 07/03/98 11:45:57 --Device restarted-----------------------------------------...
  • Page 137: Routing Tables

    To clear the Device Event History, select Clear History and press Return. Routing tables You can view all of the IP, IPX, and AppleTalk routes in the Netopia R7200’s IP, IPX, and AppleTalk routing tables, respectively. To go to a routing table screen, select the routing table you are interested in from the Statistics & Logs screen.
  • Page 138 first invoked. To take a new snapshot, select Update at the bottom of the screen and press Return. IP routing table In the Statistics & Logs screen, select IP Routing Table and press Return. The IP routing table displays all of the IP routes currently known to the Netopia R7200. Network Address-Subnet Mask-----via Router------Port------------------Type---- ----------------------------------SCROLL UP----------------------------------- 0.0.0.0...
  • Page 139 IPX Sap Bindery table In the Statistics & Logs screen, select IPX Sap Bindery Table and press Return. The IPX Sap Bindery table displays all of the IPX Sap Bindery routes currently known to the Netopia R7200. AppleTalk routing table In the Statistics &...
  • Page 140: Served Ip Addresses

    Return. Served IP Addresses You can view all of the IP addresses currently being served by the Netopia R7200 SDSL Router from the Served IP Addresses screen. From the Statistics & Logs menu, select Served IP Addresses. The Served IP Addresses screen appears.
  • Page 141 The IP Address Lease Management screen appears. Reset All Leases Release BootP Leases Reclaim Declined Addresses Hit RETURN/ENTER, you will return to the previous screen. This screen has three options: Reset All Leases: Resets all current IP addresses leased through DHCP without waiting for the default one–hour lease period to elapse Release BootP Leases: Releases any BootP leases that may be in place and which may no longer be required.
  • Page 142: System Information

    AppleTalk MIB I (RFC 1243) Netopia MIB These MIBs are on the Netopia R7200 CD included with the Netopia R7200. Load these MIBs into your SNMP management software in the order they are listed here. Follow the instructions included with your SNMP manager on how to load MIBs.
  • Page 143: The Snmp Setup Screen

    Select System Contact and enter the name of the person responsible for maintaining the router. System Name, System Location, and System Contact set the values returned by the Netopia R7200 SNMP agent for the SysName, SysLocation, and SysContact objects, respectively, in the MIB II system group. Although optional, the information you enter in these items can help a system administrator manage the network more efficiently.
  • Page 144: Snmp Traps

    SNMP traps An SNMP trap is an informational message sent from an SNMP agent (in this case, the Netopia R7200) to a manager. When a manager receives a trap, it may log the trap as well as generate an alert message of its own.
  • Page 145 Return/Enter to modify an existing Trap Receiver. Navigate from here to view, add, modify and delete IP Trap Receivers. Setting the IP trap receivers Select Add IP Trap Receiver. Select Receiver IP Address or Domain Name. Enter the IP address or domain name of the SNMP manager you want to receive the trap.
  • Page 146: Web-Based Management Pages

    13-16 User’s Reference Guide Web-based management pages The web-based management pages add significant new features for monitoring your router. You access the web-based management pages by launching your web browser and entering the URL: http://router_IP_address where router_IP_address is the address of your router. The default address is 198.162.1.1. The System Information page appears.
  • Page 147: Event History Pages

    You can view two different event histories: one for the router’s system and one for the WAN. The Netopia R7200’s built-in battery backup prevents loss of event history from a shutdown or reset.
  • Page 148 13-18 User’s Reference Guide WAN Event History page You can refresh the WAN Event History log by clicking the update this page link.
  • Page 149 Monitoring Tools 13-19 Device Event History page You can refresh the Device Event History log by clicking the update this page link.
  • Page 150 13-20 User’s Reference Guide...
  • Page 151: Suggested Security Measures

    User accounts When you first set up and configure the Netopia R7200, no passwords are required to access the configuration screens. Anyone could tamper with the router’s configuration by simply connecting it to a console. However, by adding user accounts, you can protect the most sensitive screens from unauthorized access. User accounts are composed of name/password combinations that can be given to authorized users.
  • Page 152 14-2 User’s Reference Guide Caution! You are strongly encouraged to add protection to the configuration screens. Unprotected screens could allow an unauthorized user to compromise the operation of your entire network. Once user accounts are created, users who attempt to access protected screens will be challenged. Users who enter an incorrect name or password are returned to a screen requesting a name/password combination to access the Main Menu.
  • Page 153: Dial-In Console Access

    Remote modem terminal emulator setups can dial in to the modem line and establish a remote console session, even though they are not using PPP. This allows Netopia, Inc.'s Up and Running, Guaranteed! department or other administrator with the appropriate security to remotely configure your router for you.
  • Page 154: Enable Smartstart/Smartview/Web Server

    SmartStart. To prevent access to these features toggle this option to No. Telnet access Telnet is a TCP/IP service that allows remote terminals to access hosts on an IP network. The Netopia R7200 supports Telnet access to its configuration screens. Caution! You should consider password-protecting or restricting Telnet access to the Netopia R7200 if you suspect there is a chance of tampering.
  • Page 155: How Filter Sets Work

    Security 14-5 A filter set is a group of filters that work together to check incoming or outgoing data. A filter set can consist of a combination of input and output filters. How filter sets work A filter set acts like a team of customs inspectors. Each filter is an inspector through which incoming and outgoing packages must pass.
  • Page 156: How Individual Filters Work

    14-6 User’s Reference Guide If the package does not match the first inspector’s criteria, it goes to the second inspector, and so on. You can see that the order of the inspectors in the line is very important. For example, let’s say the first inspector’s orders are to send along all packages that come from Rome, and the second inspector’s orders are to reject all packages that come from France.
  • Page 157 This rule applies to Telnet packets that come from a host with the IP address 199.211.211.17. If a match occurs, the packet is blocked. Here is what this rule looks like when implemented as a filter on the Netopia R7200: +-#--Source IP Addr--Dest IP Addr-----Proto-Src.Port-D.Port--On?-Fwd-+ +--------------------------------------------------------------------+ 199.211.211.17...
  • Page 158 14-8 User’s Reference Guide Internet service Who Is World Wide Web SNMP TFTP Port number comparisons A filter can also use a comparison option to evaluate a packet’s source or destination port number. The comparison options are: No Compare: No comparison of the port number specified in the filter with the packet’s port number. Not Equal To: For the filter to match, the packet’s port number cannot equal the port number specified in the filter.
  • Page 159 Putting the parts together When you display a filter set, its filters are displayed as rows in a table: +-#---Source IP Addr---Dest IP Addr-----Proto-Src.Port-D.Port--On?-Fwd-+ +----------------------------------------------------------------------+ 192.211.211.17 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 +----------------------------------------------------------------------+ The table’s columns correspond to each filter’s attributes: #: The filter’s priority in the set. Filter number 1, with the highest priority, is first in the table. Source IP Addr: The packet source IP address to match.
  • Page 160 14-10 User’s Reference Guide Filtering example #1 Returning to our filtering rule example from above (see Start with the rule, then fill in the filter’s attributes: The rule you want to implement as a filter is: Block all Telnet attempts that originate from the remote host 199.211.211.17. The host 199.211.211.17 is the source of the Telnet packets you want to block, while the destination address is any IP address.
  • Page 161: Design Guidelines

    +-#---Source IP Addr---Dest IP Addr-----Proto-Src.Port-D.Port--On?-Fwd-+ +----------------------------------------------------------------------+ 200.233.14.0 +----------------------------------------------------------------------+ This filter blocks any packets coming from a remote network with the IP network address 200.233.14.0. The 0 at the end of the address signifies any host on the class C IP network 200.233.14.0. If, for example, the filter is applied to a packet with the source IP address 200.233.14.5, it will block it.
  • Page 162: Working With Ip Filters And Filter Sets

    14-12 User’s Reference Guide An approach to using filters The ultimate goal of network security is to prevent unauthorized access to the network without compromising authorized access. Using filter sets is part of reaching that goal. Each filter set you design will be based on one of the following approaches: That which is not expressly prohibited is permitted.
  • Page 163: Adding A Filter Set

    View, change, or delete individual filters and filter sets. The sections below explain how to execute these steps. Adding a filter set You can create up to eight different custom filter sets. Each filter set can contain up to 16 output filters and up to 16 input filters.
  • Page 164 The Netopia R-Series Router Packets in the Netopia R7200 pass through an input filter if they originate in the WAN and through an output filter if they’re being sent out to the WAN. The process for adding input and output filters is exactly the same. The main difference between the two involves their reference to source and destination.
  • Page 165 Enter the IP specific information for this filter. To make the filter active in the filter set, select Enabled and toggle it to Yes. If Enabled is toggled to No, the filter can still exist in the filter set, but it will have no effect. If you want the filter to forward packets that match its criteria to the destination IP address, select Forward and toggle it to Yes.
  • Page 166: Viewing Filter Sets

    14-16 User’s Reference Guide 10. When you are finished configuring the filter, select ADD THIS FILTER NOW to save the filter in the filter set. Select CANCEL to discard the filter and return to the Add IP Filter Set screen. Viewing filters To display a view-only table of input or output filters, select Display/Change Input Filter or Display/Change Output Filter in the Add IP Filter Set screen.
  • Page 167: Modifying Filter Sets

    filter set. A sample IP filter set This section contains the settings for a filter set called Basic Firewall, which is part of the Netopia R7200’s factory configuration. Basic Firewall blocks undesirable traffic originating from the WAN (in most cases, the Internet), but forwards all traffic originating from the LAN.
  • Page 168 14-18 User’s Reference Guide The five input filters and one output filter that make up Basic Firewall are shown in the table below. Input filter Setting Enabled Forward Source IP 0.0.0.0 address Source IP 0.0.0.0 address mask Dest. IP 0.0.0.0 address Dest.
  • Page 169 Basic Firewall is suitable for a LAN containing only client hosts that want to access servers on the WAN, but not for a LAN containing servers providing services to clients on the WAN. Basic Firewall’s general strategy is to explicitly forward WAN-originated TCP and UDP traffic to ports greater than 1023. Ports lower than 1024 are the service origination ports for various Internet services such as FTP, Telnet, and the World Wide Web (WWW).
  • Page 170 AURP tunnel. To allow an AURP tunnel between a remote AURP router with the IP address a.b.c.d (corresponding to a numbered IP address such as 163.176.8.243) and a local AURP router (including the Netopia R7200 itself), insert the following input filter ahead of the current input filter 1: Enabled: Yes Forward: Yes Source IP Address: a.b.c.d...
  • Page 171: Ipx Filters

    IPX filters Main Menu IPX packet filters work very similarly to IP packet filters. They filter data traffic coming from or going to remote IPX networks. IPX filters can be set up to forward or discard IPX packets based on a number of user-defined criteria.
  • Page 172: Ipx Packet Filters

    14-22 User’s Reference Guide The items in the IPX Filters and Filter Sets screen are grouped into four areas: IPX packet filters IPX packet filter sets IPX SAP filters IPX SAP filter sets The following sections explain the items in each of these areas. IPX packet filters For each IPX packet filter, you can configure a set of parameters to match on the source or destination attributes of IPX data packets coming from or going to the WAN.
  • Page 173: Ipx Packet Filter Sets

    Select Filter Name and enter a descriptive name for the filter. To specify a source network for the filter to match on, select Source Network and enter an IPX network address. To specify a source node for the filter to match on, select Source Node Address and enter an IPX node address.
  • Page 174 14-24 User’s Reference Guide Add Packet Filter Set Filter Set Name: Show Filters/Change Action on Match... Append Filter... Remove Filter... ADD FILTER SET NOW Return accepts * ESC cancels * Left/Right moves insertion point * Del deletes. Configure an IPX Filter Set here. You must ADD FILTER SET NOW to save. Follow these steps to configure the new packet filter set: Select Filter Set Name and enter a descriptive name for the filter set.
  • Page 175: Ipx Sap Filters

    To add a filter to the filter set, select Append Filter to display a table of filters. Select a filter from the table and press Return to add it to the filter set. The default action of newly added filters is to not forward packets that match their criteria.
  • Page 176 (no characters), and ? to match any single character in the server’s name. For example, the filter could match on the server name “NETOPIA” with “NETO*”, “NETO?IA”, and “NETOPIA*”. To specify a socket for the filter to match on, select Socket and enter an IPX socket number.
  • Page 177: Ipx Sap Filter Sets

    IPX SAP filter sets Before IPX SAP filters can be used, they must be grouped into sets. A SAP filter can be part of more than one filter set. Viewing and modifying SAP filter sets To display a table of IPX SAP filter sets, select Display/Change IPX SAP Filter Sets in the IPX Filters and Filter Sets screen to display a list of filter sets.
  • Page 178 14-28 User’s Reference Guide Set whether filters forward or drop matching packets here. Select a filter and toggle the entry forwarding action to Yes (forward) or No (discard). To add a filter to the filter set, select Append Filter in the Add SAP Filter Set screen to display a table of filters.
  • Page 179: Firewall Tutorial

    Firewall tutorial General firewall terms Filter rule: A filter set is comprised of individual filter rules. Filter set: A grouping of individual filter rules. Firewall: A component or set of components that restrict access between a protected network and the Internet, or between two networks.
  • Page 180: Firewall Design Rules

    14-30 User’s Reference Guide Example TCP/UDP Ports Firewall design rules There are two basic rules to firewall design: “What is not explicitly allowed is denied.” “What is not explicitly denied is allowed.” The first rule is far more secure, and is the best approach to firewall design. It is far easier (and more secure) to allow in or out only certain services and deny anything else.
  • Page 181 and a packet goes through these rules destined for FTP, the packet would forward through the first rule (WWW), go through the second rule (FTP), and match this rule; the packet is allowed through. If you had this filter set for example... Allow WWW access;...
  • Page 182 TCP packets with the ACK bit set, since these packets had to be originated from the local network. Example IP filter set screen This is an example of the Netopia IP filter set screen: Enabled: Forward:...
  • Page 183: Filter Basics

    In the source or destination IP address fields, the IP address that is entered must be the network address of the subnet. A host address can be entered, but the applied subnet mask must be 32 bits (255.255.255.255). The Netopia R7200 has the ability to compare source and destination TCP or UDP ports. These options are as follows:...
  • Page 184: Example Filters

    200.1.1.28 255.255.255.128 This incoming IP packet has a source IP address that matches the network address in the Source IP Address field (00000000) in the Netopia R7200. This will not forward this packet. Example 2 Filter Rule: Incoming packet has the source address of 200.1.1.184.
  • Page 185 IP Address 200.1.1.184 255.255.255.240 Since the Source IP Network Address in the Netopia R7200 is 01100000, and the source IP address after the logical AND is 1011000, this rule does not match and this packet will be forwarded. Example 4 Filter Rule: Incoming packet has the source address of 200.1.1.104.
  • Page 186 14-36 User’s Reference Guide Since the Source IP Network Address in the Netopia R7200 is 01100000, and the source IP address after the logical AND is 01100000, this rule does match and this packet will not be forwarded. Example 5 Filter Rule: Incoming packet has the source address of 200.1.1.96.
  • Page 187: Chapter 15 — Utilities And Diagnostics

    A number of utilities and tests are available for system diagnostic and control purposes. This section covers the following topics: “Ping” on page 15-2 “Trace Route” on page 15-4 “Telnet client” on page 15-5 “Disconnect Telnet console session” on page 15-6 “Factory defaults”...
  • Page 188: Ping

    (Ping-capable) IP host. Each time the target host receives a Ping packet, it returns a packet to the original sender. Ping allows you to see whether a particular IP destination is reachable from the Netopia R7200. You can also ascertain the quality and reliability of the connection to the desired destination by studying the Ping test’s statistics.
  • Page 189 Ping packets. Note that the second return Ping packet is considered to be late because it is not received by the Netopia R7200 before the third Ping packet is sent. The first and third return Ping packets are on time.
  • Page 190: Trace Route

    The time-to-live (TTL) value for each Ping packet sent by the Netopia R7200 is 255, the maximum allowed. The TTL value defines the number of IP routers that the packet can traverse. Ping packets that reach their TTL value are dropped, and a “destination unreachable”...
  • Page 191: Telnet Client

    Select Use Reverse DNS to learn the names of the routers between the Netopia Router and the destination router. The default is Yes. Select START TRACE ROUTE and press Return. A scrolling screen will appear that lists the destination, number of hops, IP addresses of each hop, and DNS names, if selected.
  • Page 192: Disconnect Telnet Console Session

    If you select Continue, you will immediately terminate your session. Factory defaults You can reset the Netopia R7200 to its factory default settings. In the Utilities & Diagnostics screen, select Revert to Factory Defaults and press Return. Select CONTINUE in the dialog box and press Return. The Netopia R7200 will reboot and its settings will return to the factory defaults, deleting your configurations.
  • Page 193: Transferring Configuration And Firmware Files With Tftp

    Trivial File Transfer Protocol (TFTP) is a method of transferring data over an IP network. TFTP is a client-server application, with the router as the client. To use the Netopia R7200 as a TFTP client, a TFTP server must be available.
  • Page 194: Downloading Configuration Files

    Some models do not support all firmware versions. Loading an incorrect firmware version can permanently damage the unit. Do not manually power down or reset the Netopia R7200 while it is automatically resetting or it could be damaged. If you choose to download the firmware, the TFTP Transfer State item will change from Idle to Reading Firmware.
  • Page 195: Uploading Configuration Files

    Using TFTP, you can send a file containing a snapshot of the router’s current configuration to a TFTP server. The file can then be downloaded by a different Netopia R7200 unit to configure its parameters (see configuration files” on page 15-8).
  • Page 196: Updating Firmware

    Send Firmware to Netopia WAN module... WAN module Firmware Status: Updating firmware Firmware updates may be available periodically from Netopia or from a site maintained by your organization’s network administration. The procedure below applies whether you are using the console or the WAN interface module.
  • Page 197: Downloading Configuration Files

    The system will reset at the end of a successful file transfer to put the new firmware into effect. While the system resets, the LEDs will blink on and off. Caution! Do not manually power down or reset the Netopia R7200 while it is automatically resetting or it could be damaged. Downloading configuration files The Netopia R7200 can be configured by downloading a configuration file.
  • Page 198: Restarting The System

    You can restart the system by selecting the Restart System item in the Utilities & Diagnostics screen. You must restart the system whenever you reconfigure the Netopia R7200 and want the new parameter values to take effect. Under certain circumstances, restarting the system may also clear up system or network malfunctions.
  • Page 200 User’s Reference Guide...
  • Page 201: Appendix A - Troubleshooting

    Netopia R7200. It also includes information on how to contact Netopia Technical Support. Important information on these problems can be found in the event histories kept by the Netopia R7200. These event histories can be accessed in the Statistics & Logs screen.
  • Page 202: Console Connection Problems

    Note: If you are attempting to modify the IP address or subnet mask from a previous, successful configuration attempt, you will need to clear the IP address or reset your Netopia R7200 to the factory default before reinitiating the configuration process. For further information on resetting your Netopia R7200 to factory default, see “Factory defaults”...
  • Page 203: How To Reset The Router To Factory Defaults

    Power outages If you suspect that power was restored after a power outage and the Netopia R7200 is connected to a remote site, you may need to switch the Netopia R7200 off and then back on again. After temporary power outages, a connection that still seems to be up may actually be disconnected.
  • Page 204: Technical Support

    If you contact us by telephone, please be ready to supply Netopia Technical Support with the information you used to configure the Netopia R7200. Also, please be at the site of the problem and prepared to reproduce it and to try some troubleshooting steps.
  • Page 205 Netopia Bulletin Board Service: 1 510-865-1321 Online product information Product information can be found in the following: Netopia World Wide Web server via http://www.netopia.com Internet via anonymous FTP to ftp.netopia.com/pub FAX-Back This service provides technical notes that answer the most commonly asked questions and offers solutions for many common problems encountered with Netopia products.
  • Page 206 A-6 User’s Reference Guide...
  • Page 207: Appendix B - Understanding Ip Addressing

    This appendix is a brief general introduction to IP addressing. A basic understanding of IP will help you in configuring the Netopia R7200 and using some of its powerful features, such as static routes and packet filtering. This section covers the following topics: “What is IP?”...
  • Page 208: Subnets And Subnet Masks

    B-2 User’s Reference Guide IP addresses are maintained and assigned by the InterNIC, a quasi-governmental organization now increasingly under the auspices of private industry. Note: It’s very common for an organization to obtain an IP address from a third party, usually an Internet service provider (ISP).
  • Page 209: Example: Using Subnets On A Class C Ip Internet

    When setting up IP routing with a Class A address, or even with multiple Class C addresses, subnetting is fairly straightforward. Subnetting a single Class C address between two networks, however, is more complex. This section describes the general procedures for subnetting a single Class C network between two Netopia routers so that each can have Internet access.
  • Page 210 Below is a diagram of a simple network configuration. The ISP is providing a Class C address to the customer site, and both networks A and B want to gain Internet access through this address. Netopia R7200 B connects to Netopia R7200 A and is provided Internet access through Routers A and B.
  • Page 211: Example: Working With A Class C Subnet

    ISP's equipment. The most important item in this configuration is the static route defined on Router B. This tells Router B what path to take to get to the network defined by Netopia R7200 B. Without this information, Customer Site B will be able to access Customer Site A, but not the Internet.
  • Page 212: Technical Note On Subnet Masking

    These two methods are not mutually exclusive; you can manually issue some of the addresses while the rest are distributed by the Netopia R7200. Using the router in this way allows it to function as an address server. One reason to use the Netopia R7200 as an address server is that it takes less time than manually distributing the addresses.
  • Page 213: Configuration

    DHCP address lease for one hour. The number of devices a Netopia R7200 can serve DHCP to is 512. This is imposed by global limits on the size of the address serving database, which is shared by all address serving functions active in the router.
  • Page 214: Manually Distributing Ip Addresses

    Once the Mac workstation requests and receives a valid address, the Netopia R7200 actively checks for the workstation’s existence once every minute. For a dynamic address, the Netopia R7200 releases the address back to the address pool after it has lost contact with the Mac workstation for over 2 minutes.
  • Page 215: Tips And Rules For Distributing Ip Addresses

    In any situation where a device is dialing into a Netopia router, the router may need to be configured to serve IP via the WAN interface. This is only a requirement if the calling device has not been configured locally to know what its address(es) are.
  • Page 216 (199.1.1.49, 199.1.1.50, and 199.1.1.51). Distributed to the (Ethernet IP address) Pool of addresses distributed Netopia R7200 Manually distributed (static) by MacIP and DHCP...
  • Page 217: Nested Ip Subnets

    The figure shows a possible network configuration following this scheme. The main network is set up with the Class C address a.b.c.0, and contains Router A (which could be a Netopia R7200), a Netopia R7200, and a number of other hosts. Router A maintains a link to the Internet and can be used as the default gateway.
  • Page 218 For Router C The Netopia R7200’s connection profiles for Routers B and C create entries in its IP routing table. One entry points to the subnet a.b.c.128, while a second entry points to the subnet a.b.c.248. The IP routing table might...
  • Page 219: Broadcasts

    These two protocols specify two different ways to organize the very first signals in the sequence of electrical signals that make up an IP packet travelling over Ethernet. By default, the Netopia R7200 uses Ethernet packet headers for IP traffic. If your network requires 802.3 IP framing, you must configure this through SNMP.
  • Page 220 B-14 User’s Reference Guide...
  • Page 221: Appendix C - Understanding Netopia Nat Behavior

    R7200 uses a one-to-many IP address mapping scheme; that is against a single IP address the Netopia R7200 acquires on its WAN interface, the Netopia R7200 can proxy 14, 30, or an unlimited number of IP hosts on the LAN interface.
  • Page 222 (as specified in IP Setup within the Netopia R7200's console) with the router at the ISP through IPCP and then sets up routing. From the diagram on the previous page you can see that the address for the Netopia R7200 is 192.168.5.1 and the address of the router at the ISP is 200.1.1.1.
  • Page 223 If the send and response IP packets were drawn out, this process would look like the following: As you can see, the IP packet from Workstation A is sent to the Netopia R7200 and the source IP address is substituted with 200.1.1.40 and the source port is substituted with 5001, then the IP packet checksum is recalculated.
  • Page 224 TCP or UDP source ports need to be changed as well. These are changed and maintained in an internal table so the Netopia R7200 can determine which host on the local LAN interface sent the IP packet and what host the response from the WAN interface is going to go to on the LAN interface.
  • Page 225: Exported Services

    5001 and the source port for Workstation B has been changed to 5002. If you were to look at the internal port mapping table that is maintained by the Netopia R7200, it would look similar to the following: Source LAN IP 192.168.5.2...
  • Page 226: Important Notes

    Device Event History. When using NAT it is most likely that the Netopia R7200 will be receiving an IP address from a pool of dynamic IP addresses at the ISP. This means that the Netopia R7200's IP presence on the Internet will change with each connection.
  • Page 227: Configuration

    Toggling Address Translation Enabled to Yes enables the Netopia R7200 to send out an all-zeros IPCP address that requests an IP to be assigned to the Netopia R7200’s WAN interface. Note that the remote IP address is 127.0.0.2, which should also be the default gateway under IP Setup in System Configuration. This is done for profile matching purposes and because the IP address of the router the Netopia R7200 is dialing is not always...
  • Page 228: Summary

    Summary NAT is a powerful feature of the Netopia R7200 and when used and set up properly can yield a secure network while only using one IP address on the WAN interface. Note that the addresses listed in this appendix are for demonstration purposes only.
  • Page 229: Appendix D - Binary Conversion Table

    This table is provided to help you choose subnet numbers and host numbers for IP and MacIP networks that use subnetting for IP addresses. Decimal Binary 1000 1001 1010 1011 1100 1101 1110 1111 10000 10001 10010 10011 10100 10101 10110 10111 11000...
  • Page 230 D-2 User’s Reference Guide Decimal Binary 10000000 10000001 10000010 10000011 10000100 10000101 10000110 10000111 10001000 10001001 10001010 10001011 10001100 10001101 10001110 10001111 10010000 10010001 10010010 10010011 10010100 10010101 10010110 10010111 10011000 10011001 10011010 10011011 10011100 10011101 10011110 10011111 Decimal Binary Decimal 10100000 10100001...
  • Page 231: Appendix E - Further Reading

    Further Reading E-1 Alexander, S. and R. Droms, DHCP Options and BOOTP Vendor Extensions, RFC 2131, Silicon Graphics, Inc., Bucknell University, PA, 1997. Angell, David, ISDN for Dummies, IDG Books Worldwide, Foster City, CA, 1995. Thorough introduction to ISDN for beginners. Apple Computer, Inc., AppleTalk Network System Overview, Addison-Wesley Publishing Company, Inc., Reading, MA, 1989.
  • Page 232 E-2 User’s Reference Guide Garcia-Luna-Aceves, J.J., Loop-Free Routing Using Diffusing Computations, IEEE/ACM Transactions on Networking, Vol. 1, No. 1, 1993. Garfinkel, Simson., PGP: Pretty Good Privacy, O’Reilly & Associates, Sebastopol, CA, 1991. A guide to the free data encryption program PGP and the issues surrounding encryption. Green, J.K., Telecommunications, 2nd ed., Business One Irwin, Homewood, IL, 1992.
  • Page 233 Further Reading E-3 Sidhu, G.S., R.F. Andrews, and A.B. Oppenheimer, Inside AppleTalk, 2nd ed., Addison-Wesley Publishing Company, Reading, MA, 1990. Siyan, Karanjit, Internet Firewall and Network Security, New Riders Publishing, Indianapolis, IN, 1995. Similar to the Chapman and Zwicky book. Smith, Philip, Frame Relay Principles and Applications, Addison-Wesley Publishing Company, Reading, MA, 1996.
  • Page 234 E-4 User’s Reference Guide...
  • Page 235: Appendix F - Technical Specifications And Safety Information

    Pinouts for Auxiliary port modem cable HD-15 Pin 1 Ground Pin 2 Pin 3 Pin 4 Pin 5 Pin 6 (not used) Pin 7 Pin 8 Technical Specifications and Safety Information F-1 DB-25 Pin 1 (not used) Pin 2 Pin 3 Pin 4 Pin 5 Pin 6...
  • Page 236: Description

    9.4” (w) x 7.9” (d) x 2.1” (h) Communications interfaces: The Netopia R7200 SDSL Router has an RJ-45 jack for SDSL line connections; an 8–port 10Base-T Ethernet hub for your LAN connection; a DB-9 Console port; and an HD-15 Auxiliary port that can be used as either a serial or LocalTalk port.
  • Page 237: Software And Protocols

    Security: IP/IPX firewalls, UI password security, PAP, CHAP, PAP-TOKEN, CACHE-TOKEN SNMP network management: SNMPv1, MIB-II (RFC 1213), Interface MIB (RFC 1229), Ethernet MIB (RFC 1643), AppleTalk MIB-I (1243), Netopia R7200 MIB Management/configuration methods: HTTP (Web server), serial console, remote modem console, Telnet,...
  • Page 238: Agency Approvals

    F-4 User’s Reference Guide Agency approvals North America Safety Approvals: United States – UL: 1950 Third Edition Canada – CSA: CAN/CSA-C22.2 No. 950-95 EMI: FCC Class B International Safety Approvals: Low Voltage (European directive) 72/23 EN60950 (Europe) ETSI 300 047 (Europe) AS/NRZ 3260 (Australia) TS001(Australia) TS008 (Australia)
  • Page 239: Important Safety Instructions

    It is the responsibility of users requiring service to report the need for service to our Company or to one of our authorized agents. Service can be obtained at Netopia, Inc., 2470 Mariner Square Loop, Alameda, California, 94501. Important This product was tested for FCC compliance under conditions that included the use of shielded cables and connectors between system components.
  • Page 240 Do not use the telephone to report a gas leak in the vicinity of the leak. Battery The Netopia R7200’s lithium battery is designed to last for the life of the product. The battery is not user-ser- viceable. Caution! Danger of explosion if battery is incorrectly replaced.
  • Page 241: Appendix G - About Sdsl

    (web surfing) with little data going in the other direction. Netopia's SDSL router has fewer implementation issues than ADSL routers. It uses 2B1Q line encoding (same as T1 or ISDN) and this doesn't produce the same noise and interference as ADSL, which uses DMT or CAP encoding.
  • Page 242 G-2 User’s Reference Guide Because over 300,000 lines are already deployed using HDSL, service providers feel comfortable with SDSL since it uses the same technology as its predecessor and ISDN. The line coding employed by both HDSL and ISDN has not caused any interference with existing services like T1. This means service providers deploy SDSL solutions without worry about impact on other services in neighboring binder groups.
  • Page 243: Glossary 1

    Glossary 1 access line: A telephone line reaching from the telephone company central office to a point usually on your premises. Beyond this point the wire is considered inside wiring. analog: In telecommunications, telephone transmission and/or switching that is not digital. An analog phone transmission is one that was originally intended to carry speech or voice, but may with appropriate modifications be used to carry data of other types.
  • Page 244 CNA (Calling Number Authentication): A security feature that will reject an incoming call if it does not match the Calling Number field in one of the Netopia ISDN Router’s connection profiles. CND (Calling Number Delivery): Also known as caller ID, a feature that allows the called customer premises equipment (CPE) to receive a calling party’s directory number during the call establishment phase.
  • Page 245 LocalTalk networks are compatible with Phase II but are not extended because a single LocalTalk network cannot have multiple network numbers or multiple zone names. firmware: System software stored in a device’s memory that controls the device. The Netopia ISDN Router’s firmware can be updated.
  • Page 246 (not ISDN) telephone lines. Modem is a contraction of modulator-demodulator. NAT (Network Address Translation): A feature that allows communication between the LAN connected to the Netopia ISDN Router and the Internet using a single IP address, instead of having a separate IP address for each computer on the network.
  • Page 247 Resolves network number conflicts when two or more AppleTalk networks that may have duplicate network numbers are connected together. The Netopia ISDN Router lets you set up a range of network numbers into which remote AppleTalk network numbers are remapped.
  • Page 248 A physical or logical connection between a router and a network. Where a network only allows the use of one protocol, each physical connection corresponds to one logical router port. An example is the Netopia ISDN Router’s LocalTalk port. Where a network allows the use of several protocols, each physical connection may correspond to several logical router ports—one for each protocol used.
  • Page 249 WANs can span a state, a country, or even the world. WAN IP: In addition to being a router, the Netopia ISDN Router is also an IP address server. There are four protocols it can use to distribute IP addresses over the WAN which include: DHCP, BootP, IPCP, and MacIP. WAN IP is a feature for both the Small Office and Corporate Netopia ISDN Router models.
  • Page 250 8 User’s Reference Guide...
  • Page 251: Index

    10Base-T 4-4 10Base-T, connecting 4-4 add static route 10-19 advanced configuration features 8-11 AppleTalk 1-1 configuring LocalTalk 12-7 routing table 13-9 setup 12-1 tunneling (AURP) 12-3 12-8 zones 12-6 12-7 AppleTalk Update-Based Routing Protocol, see AURP application software 4-2 AURP adding a partner 12-9 configuration 12-10 connecting to a partner 12-9...
  • Page 252 console configuration 8-13 console-based management configuring with 6-1 D. port 14-9 date and time setting 8-12 deciding on an ISP account 2-2 default profile 8-6 default terminal emulation software settings 6- delete static route 10-20 designing a new filter set 14-11 DHCP defined B-8 DHCP NetBIOS options 10-26...
  • Page 253 Easy Setup 6-4 navigating through the configuration screens 8- NCSA Telnet 6-3 nested IP subnets B-11 NetBIOS 10-26 11-3 NetBIOS scope 10-27 Netopia connecting to Ethernet, rules 4-3 connecting to LocalTalk 4-6 connection profile 7-5 distributing IP addresses 10-21 Index-3...
  • Page 254 IP setup 7-6 IPX setup 7-6 LocalTalk configuration 12-7 monitoring 13-1 security 14-1 system utilities and diagnostics 15-1 Network Address Translation see NAT 10-1 network problems A-2 network status overview 13-1 next router address 13-10 non-seeding 12-3 output filter 1 14-18 overview 1-1 packet header B-13...
  • Page 255 14-19 trusted subnet 14-19 tunneling 12-3 unproxied addresses 10-1 updating firmware with TFTP 15-7 with XMODEM 15-10 updating Netopia’s firmware 15-7 uploading configuration files 15-9 with TFTP 15-9 with XMODEM 15-11 user accounts 14-1 utilities and diagnostics 15-1 configuration 10-3...
  • Page 256 Index-6...
  • Page 257: Limited Warranty And Limitation Of Remedies

    Netopia warrants to you, the end user, that the Netopia R7200 SDSL Router (the “Product”) will be free from defects in materials and workmanship under normal use for a period of one (1) year from date of purchase. Netopia’s entire liability and your sole remedy under this warranty during the warranty period is that Netopia shall, at its sole option, either repair or replace the Product.
  • Page 258 User’s Reference Guide...

Table of Contents