Page 1 ™ Netopia R6000 Series ADSL Routers R6100 ADSL Router R6120 ADSL with V.90 R6131 ADSL with ISDN R6161 Bonded ADSL User’s Reference Guide...
Page 2 This manual and any associated artwork, software, and product designs are copyrighted with all rights reserved. Under the copyright laws such materials may not be copied, in whole or part, without the prior written consent of Netopia, Inc. Under the law, copying includes translation to another language or format.
Page 3: Table Of Contents
Netopia R6000 Series ADSL Router: R6100, R6120, R6131, or R6161. It is intended to be viewed on-line, using the powerful features of the Adobe Acrobat Reader. The information display has been designed to present the maximum information in the minimum space on your screen.
Page 4 Chapter 6 — Console-Based Management ...6-1 Connecting through a Telnet Session... 6-2 Conﬁguring Telnet software ... 6-3 Connecting a Console Cable to your Router ... 6-3 Navigating through the Console Screens... 6-4 Navigating through the conﬁguration screens ... 6-5 Chapter 7 — Easy Setup ...7-1 Easy Setup console screens...
Page 5 R6161 Multilink PPP-based Bonded ADSL (WAN Module 2) Setup ... 8-8 Delayed remote conﬁguration change toggle... 8-9 Creating a New Connection Proﬁle... 8-11 RIP Proﬁle Options ... 8-16 PPP Ethernet LAN Reconﬁguration... 8-18 Conﬁguration ... 8-18 Quick View... 8-19 The WAN Default Proﬁle... 8-20 IP Parameters (Default Proﬁle) screen...
Page 6 User’s Reference Guide Chapter 10 — IP Setup ...10-1 IP setup ... 10-2 IP subnets ... 10-5 Static routes... 10-7 IP address serving ... 10-11 IP Address Pools ... 10-14 DHCP NetBIOS Options... 10-16 MacIP (KIP forwarding) setup ... 10-18 More Address Serving Options...
Page 7 MultiNAT Conﬁguration Example ... 11-30 Firmware Upgrades and NAT ... 11-34 Chapter 12 — IPX Setup ...12-1 IPX features ... 12-1 IPX deﬁnitions ... 12-1 Internetwork Packet Exchange (IPX) ... 12-1 IPX address ... 12-2 Socket ... 12-2 Routing Information Protocol (RIP) ... 12-2 Service Advertising Protocol (SAP)...
Page 8 viii User’s Reference Guide General Statistics ... 14-4 Event histories ... 14-5 Routing tables ... 14-7 Served IP Addresses... 14-10 System Information... 14-12 SNMP ... 14-12 The SNMP Setup screen ... 14-13 SNMP traps ... 14-14 Web-based management pages ... 14-16 System Information page ...
Page 9 Allowing VPNs through a Firewall ... 15-24 PPTP example ... 15-25 ATMP example ... 15-28 Chapter 16 — Security ...16-1 Suggested Security Measures... 16-1 User Accounts ... 16-1 Dial-in Console Access ... 16-4 RADIUS Client Support... 16-5 RADIUS client conﬁguration... 16-5 Warning alerts ...
Page 10 Conﬁguration problems ... A-1 Console connection problems ... A-2 Network problems ... A-2 How to Telnet or Console to your Router from a Windows 9X Workstation ... A-3 How to reset the router to factory defaults ... A-11 Power outages... A-11 Technical support ...
Page 11 Appendix B — Understanding IP Addressing ...B-1 What is IP?... B-1 About IP addressing ... B-1 Subnets and subnet masks ... B-2 Example: Using subnets on a Class C IP internet... B-3 Example: Working with a Class C subnet ... B-5 Distributing IP addresses ...
Page 12 User’s Reference Guide...
Page 14 User’s Reference Guide...
Page 15: Chapter 1 - Introduction
The Netopia R6000 Series ADSL Router is a full-featured, stand-alone, multiprotocol router for connecting diverse local area networks (LANs) to the Internet and other remote networks. Once your Netopia R6000 Series ADSL Router is connected to your computer, and your account is activated by your network service provider, you will have a fast Asymmetric Digital Subscriber Line (ADSL) connection between your PC or LAN and the telephone company’s network of high-speed digital facilities.
Page 16: How To Use This Guide
How to use this guide This guide is designed to be your single source for information about your Netopia R6000 Series ADSL Router. It is intended to be viewed on-line, using the powerful features of the Adobe Acrobat Reader. The information display has been deliberately designed to present the maximum information in the minimum space on your screen.
Page 17: Chapter 2 - Setting Up Internet Services
The DSLAM that you connect to with your Netopia Router must be capable of handling these asymmetric connections. If you have purchased your Netopia Router through a Netopia ISP partner, you can be sure that an account that supports ADSL connections will be available.
Page 18: Unique Requirements
Check whether your ISP has the Netopia R6000 Series on its list of supported products that have been tested with a particular conﬁguration. If the ISP does not have the Netopia R6000 Series on such a list, describe the Netopia R6000 Series in as much detail as needed, so your ISP account can be optimized. As appropriate, refer your ISP to Netopia’s Web site, www.netopia.com, for more information.
Page 19: Obtaining Information From The Isp
If you are using NAT, you should obtain the following: If you are connecting to a remote site using Network Address Translation on your router, your provider will not deﬁne the IP address information on your local LAN. You can deﬁne this information based on an IP conﬁguration that may already be in place for the existing network.
Page 20 2-4 User’s Reference Guide...
Page 21: Chapter 3 - Making The Physical Connections
Cable length and network size limitations when expanding networks For small networks, install the Netopia R6000 Series near one of the LANs. For large networks, you can install the Netopia R6000 Series in a wiring closet or a central network administration site.
Page 22: What You Need
You will need: A Windows 95, 98, 2000, or NT–based PC or a Macintosh computer with Ethernet connectivity for conﬁguring the Netopia R6000 Series. This may be built-in Ethernet or an add-on card, with TCP/IP installed and conﬁgured. See An ADSL wall outlet wired for a connection to a Competitive Local Exchange Carrier (CLEC) or other service provider that supports Asymmetric Digital Subscriber Line connections.
Page 23: Identify The Connectors And Attach The Cables
Identify the connectors and attach the cables Identify the connectors and switches on the back panel and attach the necessary Netopia Router cables. The ﬁgure below displays the back of the Netopia R6000 Series ADSL Router. Netopia R6000 Series back panel...
Page 24: Netopia R6000 Series Adsl Router Back Panel Ports
3-4 User’s Reference Guide Netopia R6000 Series ADSL Router back panel ports The following table describes all the Netopia R6000 Series ADSL Router back panel ports. Port Power port A mini-DIN8 power adapter cable connection. Line ports Two telephone-style jacks labeled Line 1 and Line 2. Line 1 is for your ADSL connection.
Page 25: Netopia R6000 Series Adsl Router Status Lights
Netopia R6000 Series ADSL Router status lights The ﬁgure below represents the Netopia R6000 Series status light (LED) panel. Netopia R6000 Series LED front panel WAN 1 The following table summarizes the meaning of the various LED states and colors: When this happens...
Page 26: Leds Start-Up Sequence
3-6 User’s Reference Guide LEDs start-up sequence The WAN 1 Management status light (LED #2 in the ﬁgure above) displays the status of the Netopia R6000 Series’ attempt to connect to the DSLAM. When the router is powered on: Initially the WAN 1 Management LED and the WAN1 Channel 1 LED (LED #4 in the ﬁgure above) are dark.
Page 27: Overview
Before connecting the Netopia R6000 Series to any AppleTalk LANs that contain other AppleTalk routers, you should read “Routers and seeding” on page 13-3. See the later sections in this chapter for details on how to connect the Netopia R6000 Series to different types of networks. Readying computers on your local network PC and Macintosh computers must have certain components installed before they can communicate through the Netopia R6000 Series.
Page 28 TCP/IP stack: This is the software that lets your PC or Macintosh computer communicate using Internet protocols. TCP/IP stacks must be conﬁgured with some of the same information you used to conﬁgure the Netopia R6000 Series. There are a number of TCP/IP stacks available for PC computers. Windows 95 includes a built-in TCP/IP stack. See “Conﬁguring TCP/IP on Windows 95, 98, or 2000 computers”...
Page 29: Connecting To An Ethernet Network
The Netopia R6000 Series supports Ethernet connections through its eight Ethernet ports. The router automatically detects which Ethernet port is in use. You can connect a standard 10Base-T Ethernet network to the Netopia R6000 Series using any of its available Ethernet ports.
Page 30: Adding An External Modem
Auxiliary connection port HD-15 (female) By default, the Auxiliary port on your Netopia R6000 Series is enabled for remote console conﬁguration via an external asynchronous modem. This means that all you have to do is connect your modem to the Auxiliary port and conﬁgure its settings in the Line Conﬁguration screens under the WAN Conﬁguration menu.
Page 31: Connecting To A Localtalk Network
HD-15 (female) Connect the male HD-15 end of the LocalTalk cable to the Auxiliary port on your Netopia R6000 Series. Connect the other end of the cable to your LocalTalk network. You can use only one connection on the Auxiliary port.
Page 32 4-6 User’s Reference Guide...
Page 33: Chapter 5 - Sharing The Connection
Once you have set up your physical local area network, you will need to conﬁgure the TCP/IP stack on each client workstation connected to your Netopia R6000 Series. This chapter describes how to conﬁgure TCP/IP for both Windows-based and Macintosh computers.
Page 34: Conﬁguring Tcp/Ip On Windows 95, 98, Or 2000 Computers
DNS will be assigned by the router with DHCP. Click OK in this window and the next window. When prompted, reboot the computer. Note: You can also use these instructions to conﬁgure other computers on your network to accept IP addresses served by the Netopia R6000 Series.
Page 35: Static Conﬁguration (Optional)
Subnet Mask: 255.255.255.0, or for 12-user models 255.255.255.240 This address is an example of one that can be used to conﬁgure the router. Your ISP or network administrator may ask you to use a different IP address and subnet mask.
Page 36 Click on the Gateway tab (shown below). Under “New gateway,” enter 192.168.1.1. Click Add. This is the Netopia R6000 Series’s pre-assigned IP address. Click OK in this window and the next window. When prompted, reboot the computer. Note: You can also use these instructions to conﬁgure other computers on your network with manual or static IP addresses.
Page 37: Conﬁguring Tcp/Ip On Macintosh Computers
You must have either Open Transport or Classic Networking (MacTCP) installed. Note: If you want to use the Dynamic Host Conﬁguration Protocol (DHCP) server built into your Netopia R6000 Series to assign IP addresses to your Macintoshes, you must be running Open Transport, standard in MacOS 8 and optional in earlier system versions.
Page 38: Static Conﬁguration (Optional)
Option: Connect via: Conﬁgure: IP Address: Subnet mask: Router or Gateway address: Name server address: Implicit Search Path: Starting domain name: Close the TCP/IP or MacTCP control panel and save the settings. If you are using MacTCP, you must restart the computer. If you are using Open Transport, you do not need to restart.
Page 39: Dynamic Conﬁguration Using Macip (Optional)
If you want to use MacIP to dynamically assign IP addresses to the Macintosh computers on your network you must install the optional AppleTalk feature set kit. Note: You cannot use MacIP dynamic conﬁguration to conﬁgure your Netopia R6000 Series ADSL Router because you must ﬁrst conﬁgure the router in order to enable AppleTalk.
Page 40 Restart the computer. Note: More information about conﬁguring your Macintosh computer for TCP/IP connectivity through a Netopia R6000 Series can be found in Technote NIR_026, “Open Transport and Netopia Routers,” located on the Netopia Web site.
Page 41: Chapter 6 - Console-Based Management
Console-based management is a menu-driven interface for the capabilities built into the Netopia R6000 Series. Console-based management provides access to a wide variety of features that the router supports. You can customize these features for your individual setup. This chapter describes how to access the console-based management screens.
Page 42: Connecting Through A Telnet Session
A network connection locally to the router or IP access to the router. Note: Alternatively, you can have a direct serial console cable connection using the provided console cable for your computer and the Console port on the back of the router. For more information on attaching the console cable, see “Connecting a Console Cable to your Router”...
Page 43: Conﬁguring Telnet Software
Connecting a Console Cable to your Router You can perform all of the system conﬁguration activities for your Netopia R6000 Series through a local serial console connection using terminal emulation software, such as HyperTerminal provided with Windows 95 on the PC, or ZTerm, included on the Netopia CD, for Macintosh computers.
Page 44: Navigating Through The Console Screens
Refresh the screen Go to topmost selectable item Go to bottom right selectable item You can connect to the Netopia R6000 Series’s system conﬁguration screens in either of two ways: By using Telnet with the Router’s Ethernet port IP address Suggested Value...
Page 45: Navigating Through The Conﬁguration Screens
Through the console port, using a local terminal (see page 6-3) You can also retrieve the Netopia R6000 Series’s conﬁguration information and remotely set its parameters using the Simple Network Management Protocol (see Open a Telnet connection to the router’s IP address; for example, “192.168.1.1.”...
Page 46 6-6 User’s Reference Guide...
Page 47: Chapter 7 - Easy Setup
This chapter describes how to use the Easy Setup console screens on your Netopia R6000 Series ADSL Router. After completing the Easy Setup console screens, your router will be ready to connect to the Internet or another remote site. Easy Setup console screens Using four Easy Setup console screens, you can: Create or modify a connection proﬁle for your router for the connection to your ISP or remote location...
Page 48 If you do not see the Main Menu, verify that: The computer used to view the console screen has its serial port connected to the Netopia R6000 Series’s Console port or an Ethernet connection to one of its Ethernet ports. See your Router”...
Page 49: Quick Easy Setup Connection Path
If your service provider has not pre-conﬁgured your router, follow these instructions. This section may be all you need to do to conﬁgure your Netopia R6000 Series ADSL Router to connect to the Internet. Most ISPs will supply you with several parameter values for you to enter in the router. The ISP will...
Page 50 Select the ﬁrst item on the Main Menu list, Easy Setup. Press Return to bring up the ADSL Line Conﬁguration menu screen. “Connecting through a Telnet Session” on page “Connecting a Console Cable to your Router” on page Netopia R6100 v4.8 Easy Setup...
Page 51: Adsl Line Conﬁguration
ISP or a corporate site. On a Netopia R6000 Series ADSL Router you can add up to 15 more connection proﬁles, for a total of 16, although you can only use one at a time.
Page 52 7-6 User’s Reference Guide Address Translation Enabled: IP Addressing... Local WAN IP Address: Local WAN IP Mask: Remote IP Address: Remote IP Mask: PPP Authentication... Send User Name: Send Password: PREVIOUS SCREEN Enter basic information about your WAN connection with this screen. To enable address translation, toggle Address Translation Enabled to Yes (the default).
Page 53: Ip Easy Setup
IP Easy Setup The IP Easy Setup screen is where you enter information about your Netopia Router’s: Ethernet IP address Ethernet Subnet mask Domain Name Domain Name Server IP address(es) Default gateway IP address If necessary, consult with a network administrator to obtain the information you will need. For more information about setting up IP, see “IP Setup”...
Page 54: Easy Setup Security Conﬁguration
PREVIOUS SCREEN Configure a Configuration Access Name and Password here. The ﬁnal step in conﬁguring the Easy Setup console screens is to restart the Netopia R6000 Series, so that the conﬁguration settings take effect. Select RESTART DEVICE. A prompt asks you to conﬁrm your choice.
Page 55 Note: You can also restart the system at any time by using the Restart System utility (see “Restarting the system” on page 17-13) or by turning the Netopia Router off and on with the power switch. The Router will restart and your conﬁguration settings will be activated. You can then Exit or Quit your Telnet application.
Page 56 7-10 User’s Reference Guide...
Page 58 User’s Reference Guide...
Page 59: Chapter 8 — Wan And System Conﬁguration
This chapter describes how to use the console-based management screens to access and conﬁgure advanced features of your Netopia R6000 Series ADSL Router. You can customize these features for your individual setup. These menus provide a powerful method for experienced users to set up their router’s connection proﬁles and system conﬁguration.
Page 60: Wan Conﬁguration
8-2 User’s Reference Guide WAN Conﬁguration To conﬁgure your Wide Area Network (WAN) connection, navigate to the WAN Conﬁguration screen from the Main Menu and select WAN Conﬁguration, then WAN Setup. Main Menu Configuration The Choose Interface to Conﬁgure screen appears. Note: The R6161 adds a second menu item ADSL (Wan Module 2) Setup.
Page 61: Line Conﬁguration
Data Link Encapsulation... RFC1483 Mode... On ADSL WAN interfaces, the ATM connection between the router and the central ofﬁce equipment (DSLAM) is divided logically into one or more virtual circuits (VCs). A virtual circuit may be either a permanent virtual circuit (PVC) or a switched virtual circuit (SVC).
Page 62 8-4 User’s Reference Guide Choosing Display/Change Circuit (or Delete Circuit) displays a pop-up menu that allows you to select the circuit to be modiﬁed or deleted. Display/Change Circuit... Add Circuit... Delete Circuit... Data Link Encapsulation... RFC1483 Mode... Up/Down Arrow Keys to select, ESC to dismiss, Return/Enter to Edit. Changing a circuit If you want to make any changes to the circuit you select, you make them in the Change Circuit screen.
Page 63 VC. It will revert back to dynamic binding if the number of VCs is reduced to one; for example, by deleting previously deﬁned VCs. When the link comes up the router binds the VC dynamically to the ﬁrst suitable Connection Proﬁle or to the Default Proﬁle if there is no Connection Proﬁle conﬁgured.
Page 64 8-6 User’s Reference Guide the type your ISP uses. Press Escape to return to the Choose Interface to Conﬁgure screen. You can now specify how the Auxiliary Serial Port is to be used by selecting Auxiliary Serial Port and pressing Return. Adding a circuit Choosing Add Circuit displays the Add Circuit screen.
Page 65: Auxiliary Serial Port Conﬁguration
Auxiliary Serial Port conﬁguration By default, the Auxiliary Serial Port is enabled for an asynchronous modem. Aux Serial Port... Data Rate (kbps)... Aux Modem Init String: Aux Modem Directory Number: If the AppleTalk feature set is installed, then LocalTalk becomes the default option. You can also specify it to be Unused by selecting it from the Aux Serial Port pop-up menu.
Page 66: R6161 Multilink Ppp-Based Bonded Adsl (Wan Module 2) Setup
R6161 Multilink PPP-based Bonded ADSL (WAN Module 2) Setup The Netopia R6000 Series offers Multilink PPP-based DSL Bonding support for R6161 ADSL routers. Multilink PPP-based DSL Bonding allows your ISP to aggregate the speed of two separate DSL lines to create a single virtual pipe of higher speed.
Page 67: Delayed Remote Conﬁguration Change Toggle
Delayed remote conﬁguration change toggle The Netopia R6000 Series supports delaying some conﬁguration changes until after the router is restarted. If your router is preconﬁgured by your service provider, or if you are not remotely conﬁguring the router, you can leave this setting unchanged.
Page 68 | Are you sure you want to do this? +----------------------------------------------------+ Toggling from Yes to No makes the router ready to be conﬁgured. If you toggle from No to Yes after any conﬁguration changes have been entered (and conﬁrm the reboot), your changes are committed and the router comes up using the newly created conﬁguration.
Page 69: Creating A New Connection Proﬁle
ADD PROFILE NOW Configure a new Conn. Profile. Finished? On a Netopia R6000 Series ADSL Router you can add up to 15 more connection proﬁles, for a total of 16, but you can only use one at a time. Select Proﬁle Name and enter a name for this connection proﬁle. It can be any name you wish. For example: the name of your ISP.
Page 70 8-12 User’s Reference Guide Select Data Link Encapsulation and press Return. From the pop-up menu select PPP, RFC1483, ATMP, PPTP, or IPsec. If you select PPP, the Data Link Options menu item is displayed; if you select RFC1483, the Data Link Options item is hidden. PPTP, ATMP, and IPsec options are intended for use with Virtual Private Network (VPN) proﬁles.
Page 71: Rip Proﬁle Options
Select IP Proﬁle Parameters and press Return. The IP Proﬁle Parameters screen appears. Address Translation Enabled: IP Addressing... NAT Map List... NAT Server List... Local WAN IP Address: Local WAN IP Mask: Remote IP Address: Remote IP Mask: Filter Set... Remove Filter Set RIP Profile Options...
Page 72 11. Select ADD PROFILE NOW and press Return. Your new Connection Proﬁle will be added. If you want to view the Connection Proﬁles in your router, return to the WAN Conﬁguration screen, and select Display/Change Connection Proﬁle. The list of Connection Proﬁles is displayed in a scrolling pop-up screen.
Page 73 +-Profile Name---------------------IP Address----IPX Network-+ +------------------------------------------------------------+ | Easy Setup Profile | Profile 02 +------------------------------------------------------------+ Up/Down Arrow Keys to select, ESC to dismiss, Return/Enter to Edit. WAN and System Conﬁguration 8-15 WAN Configuration 127.0.0.2 0.0.0.0...
Page 74: Conﬁguration
8-16 User’s Reference Guide The Netopia R6000 Series permits conﬁguring RIP parameters through the IP Proﬁle Parameters RIP Proﬁle Parameters screen for Connection Proﬁles. The three Routing Information Protocol (RIP) options, Receive RIP, Transmit RIP, and TX RIP Policy, are located in the RIP Proﬁle Parameters screen.
Page 75 Netopia R6000 Series needs to recognize. If this is the case select Receive RIP and select v1, v2, or Both from the pop-up menu. With Receive RIP set to v1, the Netopia R6000 Series’s Ethernet port will accept routing information provided by RIP packets from other routers that use the same subnet mask.
Page 76 This allows a central site router to supply an entire IP subnet, rather than a single IP address, for use by a Netopia router. If the applicable Connection Proﬁle speciﬁes an unnumbered, non-NAT connection and Negotiate LAN IP Addr/Mask is set to On, PPP will attempt to negotiate both an IP Address and subnet mask.
Page 77: Quick View
The Quick View screen (as shown below) displays both Primary and Secondary DNS Server addresses. This is useful because both may be served via PPP. Default IP Gateway: Primary DNS Server: Secondary DNS Server: 163.176.4.10 ----------------MAC Address--------IP Address--------------------------------- Ethernet Hub: 00-00-c5-78-5d-10 Ethernet WAN1: 00-00-c5-78-5d-12...
Page 78: The Wan Default Proﬁle
IP Address, you need not explicitly conﬁgure a connection proﬁle, and the default behavior of the router will be able to connect automatically once it is powered on. If Must Match a Deﬁned Proﬁle is set to No, then the IP Enabled item is visible. Toggling this item to Yes (the default) or No controls whether or not IP will be supported on the ADSL link.
Page 79: Ip Parameters (Default Proﬁle) Screen
If Must Match a Deﬁned Proﬁle is set to No, then an IPX Enabled item is visible. Toggling this item to Yes or No (the default) controls whether or not IPX will be supported on the ADSL link. If IPX Enabled is set to Yes, an IPX Parameters item becomes visible.
Page 80: Ipx Parameters (Default Proﬁle) Screen
8-22 User’s Reference Guide IPX parameters (default proﬁle) screen If you are using RFC1483 datalink encapsulation, the IPX Parameters (Default Proﬁle) screen allows you to conﬁgure various IPX parameters for ADSL connections established without an explicitly conﬁgured connection proﬁle: NetBios Packet Forwarding: Path Delay: Incoming Packet Filter Set...
Page 81: System Conﬁguration
System Conﬁguration The Netopia R6000 Series ADSL Router’s default settings may be all you need to conﬁgure your Netopia R6000 Series. Some users, however, require advanced settings or prefer manual control over the default selections. For these users, the Netopia R6000 Series provides system conﬁguration options.
Page 82: Network Protocols Setup
8-24 User’s Reference Guide Network protocols setup These screens allow you to conﬁgure your network’s use of the standard networking protocols: IP: Details are given in “IP Setup” on page IPX: Details are given in “IPX Setup” on page 12-1. AppleTalk: Details are given in Note: AppleTalk requires the optional AppleTalk feature expansion kit.
Page 83: Console Conﬁguration
Select Current Date and enter the date in the appropriate format. Use one- or two-digit numbers for the month and day and the last two digits of the current year. The date’s numbers must be separated by forward slashes (/). Select Current Time and enter the time in the format HH:MM, where HH is the hour (using either the 12-hour or 24-hour clock) and MM is the minutes.
Page 84: Snmp (Simple Network Management Protocol)
You can upgrade your Netopia R6000 Series by adding new feature sets through the Upgrade Feature Set utility. See the release notes that came with your router or feature set upgrade, or visit the Netopia Web site at www.netopia.com for information on new feature sets, how to obtain them, and how to install them on your Netopia R6000 Series.
Page 85: Installing The Syslog Client
You can specify the UNIX syslog Facility to use by selecting the Facility pop-up. Installing the Syslog client The Goodies folder on the Netopia CD contains a Syslog client daemon program that can be conﬁgured to report the WAN events you speciﬁed in the Logging Conﬁguration screen.
Page 86 8-28 User’s Reference Guide...
Page 87: Chapter 9 — Dial Backup
The Netopia R6000 Series offers dial backup functionality in the event of a line failure on its primary WAN link. The ﬁrmware supports backup to an external modem connected to the Auxiliary port or an internal V.90 modem via a V.90 modem WAN module or an ISDN interface via an ISDN WAN interface module in the second WAN slot.
Page 88: Wan Conﬁguration
9-2 User’s Reference Guide WAN Conﬁguration To conﬁgure Dial Backup, from the Main Menu select WAN Conﬁguration and then WAN Setup. Main Menu The Choose Interface to Conﬁgure screen appears. WAN Configuration WAN Configuration WAN (Wide Area Network) Setup... Display/Change Connection Profile... Add Connection Profile...
Page 89 The router senses what type of WAN interface modules are installed in the WAN interface slots. For example, if you have an ISDN daughter card installed in slot 2, the screen will say ISDN (Wan Module 2) Setup... Choose the interface you want to conﬁgure for backup, either Motherboard Auxiliary Setup... or (Wan Module 2) Setup...
Page 90 0.4 sec ON, 0.2 sec OFF, 0.4 sec ON, 0.2 sec OFF, 0.8 sec ON, 4.0 sec Never the line will not answer to any ring pattern You may choose when the Netopia R6000 Series’s modem connection tones are audible in the Internal Modem Setup ATDT...
Page 91 Enter information supplied to you by your ISDN phone company. The router will attempt to auto-detect all of your ISDN parameters. If it cannot do so, you can edit them manually in the ISDN Line Conﬁguration screen. You can select the Switch Type that your ISP or corporate site uses from the pop-up menu.
Page 92: Backup Conﬁguration Screen
The value zero is not permitted. Select Ping Host Name or IP Address and enter an IP address or resolvable DNS name that the router will ping. This is an optional item that is particularly useful for testing if the remote end of a VPN connection has gone down.
Page 93: Ip Setup Screen
You can toggle Auto-Recovery on loss of Layer 2 to Yes or No (the default). This setting determines whether the router should try to Auto-Recover when the backup is invoked because of a Layer 2 loss, for example, a no valid Connection Proﬁle. (Layer 1 is still available, and this is what recovery checks.) Use this setting with caution.
Page 94: Connection Proﬁles
9-8 User’s Reference Guide Connection Proﬁles The line backup feature allows you to conﬁgure a complete Connection Proﬁle for the backup port, just as you do for your primary WAN connection. In this way proﬁles are associated with a particular interface. The proﬁle should reﬂect the port it is associated with.
Page 95 The Scheduled Connections screen appears. Return/Enter to add a Scheduled Connection. Navigate from here to add/modify/change/delete Scheduled Connections. Select Add Scheduled Connection and press Return. The Add Scheduled Connection screen appears. Scheduled Connection Enable: How Often... Schedule Type... Set Weekly Schedule... Use Connection Profile...
Page 96 9-10 User’s Reference Guide Monday: Tuesday: Wednesday: Thursday: Friday: Saturday: Sunday: Scheduled Window Start Time: AM or PM: Scheduled Window Duration Per Day: 24:00 Return/Enter accepts * Tab toggles * ESC cancels. Toggle all the days of the week to Yes, and set the Scheduled Window Duration Per Day to 24:00. This guarantees a 24X7 connection.
Page 97: Management/Statistics
Management/Statistics The Statistics & Logs menu offers a Backup Management/Statistics option. To view the Backup Management/Statistics, from the Main Menu select Statistics & Logs. Main Menu Select Backup Management/Statistics and press Return. Note: This option is only visible if backup is not Disabled. The Backup Management/Statistics screen appears.
Page 98: Quickview
9-12 User’s Reference Guide Current Port: Backup State: Time Since Detection: Current Port is a display-only ﬁeld that shows which port is currently in operation. Backup State is a display-only ﬁeld that shows the current state of Backup or Recovery. Time Since Detection is a display-only ﬁeld that is only visible if backup or recovery is in progress.
Page 99: Event Logs
Return/Enter on event item for details or SCROLL [UP/DOWN] item for scrolling. SNMP Support The router supports objects for determining the state of backup, as well as providing traps for the backup and recovery events. No objects support conﬁguration of backup or recovery.
Page 100 9-14 User’s Reference Guide...
Page 101 The Netopia R6000 Series uses Internet Protocol (IP) to communicate both locally and with remote networks. This chapter shows you how to conﬁgure the router to route IP trafﬁc. You also learn how to conﬁgure the router to serve IP addresses to hosts on your local network.
Page 102: Chapter 10 - Ip Setup
Ethernet subnet mask, default IP gateway, and Primary Domain Name Server IP address) you will need before changing any of the settings in this screen. Changes made in this screen will take effect only after the Netopia R6000 Series is reset.
Page 103: Ip Setup
Netopia R6000 Series needs to recognize. If this is the case select Receive RIP and select v1, v2, or Both from the pop-up menu. With Receive RIP set to v1, the Netopia R6000 Series’s Ethernet port will accept routing information provided by RIP packets from other routers that use the same subnet mask.
Page 104 10-11). Since no two hosts can use the same IP address at the same time, make sure that the addresses distributed by the Netopia R6000 Series and those that are manually conﬁgured are not the same. Each method of distribution must have its own exclusive range of addresses to draw from.
Page 105: Ip Subnets
All eight row labels are always visible, regardless of the number of subnets conﬁgured. To add an IP subnet, enter the Netopia R6000 Series’s IP address on the subnet in the IP Address ﬁeld in a particular row and the subnet mask for the subnet in the Subnet Mask ﬁeld in that row.
Page 106 10-6 User’s Reference Guide For example: IP Address ---------------- 192.128.117.162 192.128.152.162 0.0.0.0 To delete a conﬁgured subnet, set both the IP address and subnet mask values to 0.0.0.0, either explicitly or by clearing each ﬁeld and pressing Return to commit the change. When a conﬁgured subnet is deleted, the values in subsequent rows adjust up to ﬁll the vacant ﬁelds.
Page 107: Static Routes
Static routes are IP routes that are maintained manually. Each static route acts as a pointer that tells the Netopia R6000 Series how to reach a particular network. However, static routes are used only if they appear in the IP routing table, which contains all of the routes used by the Netopia R6000 Series (see on page 14-8).
Page 108 10-8 User’s Reference Guide The Static Routes screen will appear. Configure/View/Delete Static Routes from this and the following Screens. Viewing static routes To display a view-only table of static routes, select Display/Change Static Route. The table shown below will appear. +-Dest.
Page 109 Select Destination Network Subnet Mask and enter the subnet mask used by the destination network. Select Next Gateway IP Address and enter the IP address for the router that the Netopia R6000 Series will use to reach the destination network. This router does not necessarily have to be part of the destination network, but it must at least know where to forward packets destined for that network.
Page 110 If the static route conﬂicts with a connection proﬁle, the connection proﬁle will always take precedence. To make sure that the static route is known only to the Netopia R6000 Series, select Advertise Route Via RIP and toggle it to No. To allow other RIP-capable routers to know about the static route, select Advertise Route Via RIP and toggle it to Yes.
Page 111: Ip Address Serving
Menu Configuration In addition to being a router, the Netopia R6000 Series is also an IP address server. There are four protocols it can use to distribute IP addresses. The ﬁrst, called Dynamic Host Conﬁguration Protocol (DHCP), is widely supported on PC networks, as well as Apple Macintosh computers using Open Transport and computers using the UNIX operating system.
Page 112 (if you have the AppleTalk kit installed) are automatically enabled. Select Number of Client IP Addresses and enter the total number of contiguous IP addresses that the Netopia R6000 Series will distribute to the client machines on your local area network. Twelve-user models are limited to twelve IP addresses.
Page 113 If you have conﬁgured multiple Ethernet IP subnets, the appearance of the IP Address Serving screen is altered slightly: Configure Address Pools... Serve DHCP Clients: DHCP NetBios Options... Serve BOOTP Clients: Serve Dynamic WAN Clients: Serve MacIP/KIP Clients: MacIP/KIP Static Options... The ﬁrst three menu items are hidden, and Conﬁgure Address Pools...
Page 114: Ip Address Pools
The value defaults to the Netopia R6000 Series’s IP address on the corresponding subnet (or the Netopia R6000 Series’s default gateway, if that gateway is located on the subnet in question). You can override the value by entering any address that is part of the subnet.
Page 115 When requesting an address, a client may provide a client identiﬁer, or, if it does not, the Netopia R6000 Series may construct a pseudo-client identiﬁer for the client. When the client subsequently requests an address, the Netopia R6000 Series will attempt to serve the address previously associated with the pseudo-client identiﬁer.
Page 116: Dhcp Netbios Options
10-16 User’s Reference Guide DHCP NetBIOS Options If your network uses NetBIOS, you can enable the Netopia R6000 Series to use DHCP to distribute NetBIOS information. NetBIOS stands for Network Basic Input/Output System. It is a layer of software originally developed by IBM and Sytek to link a network operating system with speciﬁc hardware.
Page 117 From the NetBios Type pop-up menu, select the type of NetBIOS used on your network. Serve NetBios Type: NetBios Type... Serve NetBios Scope: NetBios Scope: Serve NetBios Name Server: NetBios Name Server IP Addr: To serve DHCP clients with the NetBIOS scope, select Serve NetBios Scope and toggle it to Yes. Select NetBios Scope and enter the scope.
Page 118: Macip (Kip Forwarding) Setup
Ethernet), they must use a MacIP (AppleTalk–IP) gateway. The optional Netopia AppleTalk feature enhancement kit provides for this service. A MacIP gateway converts network trafﬁc into the correct format for AppleTalk or IP, depending on the trafﬁc’s destination. The MacIP gateway can also distribute IP addresses to AppleTalk computers on the network.
Page 119: More Address Serving Options
The ability to serve as a DHCP Relay Agent. The Netopia R6000 Series supports reserving an IP address only for a type 1 client identiﬁer (i.e., an Ethernet hardware address). It does not support reserving an IP address for an arbitrary client identiﬁer. (For more information on client identiﬁers, see RFC 2131, section 9.14.)
Page 120: Conﬁguring The Ip Address Server Options
10-20 User’s Reference Guide Conﬁguring the IP Address Server options To access the enhanced DHCP server functions, from the Main Menu navigate to Statistics & Logs and then Served IP Addresses. Main Menu The following example shows the Served IP Addresses screen after three clients have leased IP addresses. The ﬁrst client did not provide a Host Name in its DHCP messages;...
Page 121 IP addresses. (You cannot select IP addresses in the MacIP static range, as well as the router’s Ethernet IP address(es) that have been automatically excluded on startup, since you cannot perform any operations on these addresses.) -IP Address------Type----Expires—-Host Name/Client Identifier-----------------...
Page 122 10-22 User’s Reference Guide Details… is displayed if the entry is associated with both a host name and a client identiﬁer. Selecting Details… displays a pop-up menu that provides additional information associated with the IP address. The pop-up menu includes the IP address as well as the host name and client identiﬁer supplied by the client to which the address is leased.
Page 123 -IP Address------Type----Expires—-Host Name/Client Identifier----------------- ----------------------------------SCROLL UP----------------------------------- 192.168.1.100 192.168.1.101 192.1+-------------------------------------------------------------+ 192.1+-------------------------------------------------------------+ 192.1| 192.1| You are about to make changes that will affect an address 192.1| that is currently in use. Are you sure you want to do this? | 192.1| 192.1| CANCEL 192.1| 192.1+-------------------------------------------------------------+...
Page 124 The router’s Ethernet IP address(es) will be automatically excluded from the address serving pool(s) on startup. Entries in the served IP address list corresponding to the router’s Ethernet IP address(es) that have been automatically excluded on startup are not selectable.
Page 125 Netopia Router. If the Netopia Router is conﬁgured to act as a DHCP server, it will assign the client an address from an address pool conﬁgured locally in the Netopia Router and respond to the client's request...
Page 126: Dhcp Relay Agent
10-26 User’s Reference Guide Select IP Address Serving and press Return. The IP Address Serving screen appears. IP Address Serving Mode... Number of Client IP Addresses: 1st Client Address: Client Default Gateway... Serve DHCP Clients: DHCP NetBIOS Options... Serve BOOTP Clients: Select IP Address Serving Mode.
Page 127: Connection Proﬁles
Netopia Router does not. The DHCP server(s) to which the Netopia Router is relaying DHCP requests must be conﬁgured with one or more address pools that are within the Netopia Router’s primary Ethernet LAN subnet. (There is no mechanism for DHCP clients to receive an address on a secondary subnet via a relayed DHCP request.)
Page 128 10-28 User’s Reference Guide On a Netopia R6000 Series ADSL Router you can add up to 15 more connection proﬁles, for a total of 16, although only one can be used at a time. Select Proﬁle Name and enter a name for this connection proﬁle. It can be any name you wish. For example: the name of your ISP.
Page 129 Select ADD PROFILE NOW and press Return. Your new connection proﬁle will be added. If you want to view the connection proﬁles in your router, return to the WAN Conﬁguration screen, and select Display/Change Connection Proﬁle. The list of connection proﬁles is displayed in a scrolling pop-up screen.
Page 130 10-30 User’s Reference Guide...
Page 131: Chapter 11 - Multiple Network Address Translation (Multinat)
To help you understand some of the concepts discussed here, it may be helpful to introduce some NAT terminology. The term mapping refers to rules that associate one or more private addresses on the Netopia Router’s LAN to one or more public addresses on the Netopia Routers WAN interface (typically the Internet).
Page 132: Features
IP address to which you would like to provide access. You may also deﬁne a speciﬁc public IP address to use for this service if you want to use an IP other than the WAN IP address of the Netopia Router.
Page 133 If a host on the private network initiates a connection to the Internet, for example, the Netopia Router automatically sets up a one-to-one mapping of that host’s private IP address to one of the public IP addresses allocated to be used for Dynamic NAT.
Page 134: Wan Network
For example, if a connection is initiated from the public network and is destined for a public IP address conﬁgured on the Netopia Router, the following comparisons are made in this order. The Netopia Router ﬁrst checks its internal NAT cache to see if the data is part of a previously initiated connection, if not…...
Page 135: Enhancements
WAN IP address. Any public addresses not associated with the Connection Proﬁle WAN IP address must have a static route pointing to it from a router on the public network if public users are expected to be able to access the NATed machines or services.
Page 136: Supported Trafﬁc
PAT mapping list. Coexistent mapped and unmapped trafﬁc on a public interface. If the router's IP address is not included in a NAT list, it will be invisible to the external network. Mapped services (exports) may use multiple public addresses.
Page 137: Multinat Conﬁguration
IP proﬁle parameters, described on Basic conﬁguration – Easy Setup Proﬁle The screen below is an example. Depending on the type of router you are using, ﬁelds displayed in this screen may vary. Number to Dial: Address Translation Enabled: IP Addressing...
Page 138: Advanced Conﬁguration - Server Lists And Dynamic Nat
See the MultiNAT Conﬁguration Example on page In order to conﬁgure the router to make servers on your LAN visible to the Internet, you use advanced features in the System Conﬁguration screens, described in Note: There is no implicit binding between the WAN IP interface address and NAT, as in earlier ﬁrmware versions, so you cannot disallow conﬁguration of NAT simply because the interface is numbered or disallow...
Page 139: Ip Setup
Network Address Translation (NAT)... Filter Sets... Enter an IP address in decimal and dot form (xxx.xxx.xxx.xxx). Set up the basic IP attributes of your Netopia in this screen. Select Network Address Translation (NAT) and press Return. Multiple Network Address Translation (MultiNAT) 11-9...
Page 140 Static public address ranges must not overlap other static, PAT, public addresses, or the public address assigned to the router’s WAN interface. A PAT public address must not overlap any static address ranges. It may be the same as another PAT address or server list address, but the port range must not overlap.
Page 141 The Add NAT Public Range screen appears. Range Name: Type... Public Address: First Public Port: Last Public Port: ADD NAT PUBLIC RANGE Select Range Name and give a descriptive name to this range. Select Type and from the pop-up menu, assign its type. Options are static, dynamic, or pat (the default). If you choose pat as the range type, select Public Address and enter the exterior IP address in the range you want to assign.
Page 142 11-12 User’s Reference Guide Map List Name: Add Map... Select Map List Name and enter a descriptive name for this map list. A new menu item, Add Map, appears. Select Add Map and press Return. The Add NAT Map screen appears. First Private Address: Last Private Address: Use NAT Public Range...
Page 143 +-Public Address Range------------Type----Name-------------+ +----------------------------------------------------------+ | 0.0.0.0 | 206.1.1.6 | 206.1.1.1 | <<NEW RANGE...>> +----------------------------------------------------------+ Up/Down Arrow Keys to select, ESC to cancel, Return/Enter to Delete. From the list of public ranges you deﬁned, select the one that you want to map to the interior range for this mapping and press Return.
Page 144: Modifying Map Lists
11-14 User’s Reference Guide Modifying map lists You can make changes to an existing map list after you have created it. Since there may be more than one map list you must select which one you are modifying. From the Network Address Translation screen select Show/Change Map List and press Return. Select the map list you want to modify from the pop-up menu.
Page 145 Add Map allows you to add a new map to the map list. Show/Change Maps allows you to modify the individual maps within the list. Delete Map allows you to delete a map from the list. Move Map allows you to change the priority order in which the map is evaluated within the list. See maps on page 11-16.
Page 146: Moving Maps
11-16 User’s Reference Guide Make any modiﬁcations you need and then select CHANGE NAT MAP and press Return. Your changes will become effective and you will be returned to the Show/Change NAT Map List screen. Moving maps The Move Maps screen permits reordering the priority of maps in a map list. Since the maps are read from top to bottom, those at the top have the highest priority and those at the bottom have the lowest.
Page 147 +---Private Address Range---------Type----Public Address Range------------+ +-------------------------------------------------------------------------+ | 192.168.1.2 | 192.168.1.252 | 192.168.1.1 +-------------------------------------------------------------------------+ Up/Down Arrow Keys to select, ESC to dismiss, Return/Enter to Edit. You can press Escape at any time in the pop-up menu to abort the move and restore the map list to its original ordering.
Page 148: Adding Server Lists
11-18 User’s Reference Guide Adding Server Lists Server lists, also known as Exports, are handled similarly to map lists. If you want to make a particular server’s port accessible (and it isn’t accessible through other means, such as a static mapping), you must create a server list.
Page 149 Select Add Server and press Return. The Add NAT Server screen appears. Service... Server Private IP Address: Public IP Address: ADD NAT SERVER Select Service and press Return. A pop-up menu appears listing a selection of commonly exported services. Service... Server Private IP Address: Public IP Address: ADD NAT SERVER...
Page 150 Note: CUSeeMe (or other services that listen on speciﬁc ports) through MultiNat works as it did for non-MultiNat releases prior to version 4.4. In order to use CUSeeMe through the Netopia Router, you must export the ports 7648 and 7649. In MultiNat, you may use a port range export. Without the export, CUSeeMe will fail to work.
Page 151: Modifying Server Lists
Modifying server lists Once a server list exists, you can select it for modiﬁcation or deletion. Select Show/Change Server List from the Network Address Translation screen. Select the Server List Name you want to modify from the pop-up menu and press Return. Up/Down Arrow Keys to select, ESC to dismiss, Return/Enter to Edit.
Page 152 11-22 User’s Reference Guide Selecting Show/Change Server or Delete Server displays the same pop-up menu. +-Private Address--Public Address----Port------------+ +----------------------------------------------------+ Se| 192.168.1.254 | 192.168.1.254 | 192.168.1.254 Ad| 192.168.1.254 | 192.168.1.254 +----------------------------------------------------+ Up/Down Arrow Keys to select, ESC to dismiss, Return/Enter to Edit. Select any server from the list and press Return.
Page 153: Deleting A Server
Deleting a server To delete a server from the list, select Delete Server from the Show/Change NAT Server List menu and press Return. A pop-up menu lists your conﬁgured servers. Select the one you want to delete and press Return. A dialog box asks you to conﬁrm your choice.
Page 154: Binding Map Lists And Server Lists
Binding Map Lists and Server Lists Once you have created your map lists and server lists, for most Netopia Router models you must bind them to a proﬁle, either a Connection Proﬁle or the Default Proﬁle. You do this in one of the following screens: IP proﬁle parameters...
Page 155 Select NAT Map List and press Return. A pop-up menu displays a list of your deﬁned map lists. Address Trans| Easy-PAT IP Addressing| my_map NAT Map List.| NAT Server Li| Local WAN IP | Remote IP Add| Remote IP Mas| Filter Set...| Remove Filter| Receive RIP: |...
Page 156: Ip Parameters (Wan Default Proﬁle)
11-26 User’s Reference Guide IP Parameters (WAN Default Proﬁle) The Netopia R6000 Series Routers support a WAN default proﬁle that permits several parameters to be conﬁgured without an explicitly conﬁgured Connection Proﬁle. The procedure is similar to the procedure to bind map lists and server lists to a Connection Proﬁle.
Page 157 Select NAT Map List and press Return. A pop-up menu displays a list of your deﬁned map lists. Address Trans| <<None>> NAT Map List.| NAT Server Li| Filter Set (F| Remove Filter| Receive RIP: | Up/Down Arrow Keys to select, ESC to dismiss, Return/Enter to Edit. Select the map list you want to bind to the default proﬁle and press Return.
Page 158: Nat Associations
11-28 User’s Reference Guide NAT Associations Conﬁguration of map and server lists alone is not sufﬁcient to enable NAT for a WAN connection because map and server lists must be linked to a proﬁle that controls the WAN interface. This can be a Connection Proﬁle, a WAN Ethernet interface, a default proﬁle, or a default answer proﬁle.
Page 159 keys. Select the item by pressing Return to display a pop-up menu of all of your conﬁgured lists. Profile/Interface Name-------------Nat+------------------+Server List Name Easy Setup Profile Profile 01 Profile 02 Profile 03 Profile 04 Default Answer Profile Up/Down Arrow Keys to select, ESC to dismiss, Return/Enter to Edit. Select the list name you want to assign and press Return again.
Page 160: Multinat Conﬁguration Example
Public IP addresses assigned by the ISP are 206.1.1.1 through 206.1.1.6 (255.255.255.248 subnet mask). Your internal devices have IP addresses of 192.168.1.1 through 192.168.1.254 (255.255.255.0 subnet mask). Netopia Router's address is: Web server's address is: Mail server's address is: FTP server's address is: In this example you will statically map the ﬁrst ﬁve public IP addresses (206.1.1.1 - 206.1.1.5) to the ﬁrst ﬁve...
Page 161 Default IP Gateway: IP Address Serving: Number of Client IP Addresses: 1st Client Address: PREVIOUS SCREEN Set up the basic IP & IPX attributes of your Netopia in this screen. Then navigate to the Network Address Translation (NAT) screen. System Main Menu...
Page 162 11-32 User’s Reference Guide Select Show/Change Public Range, then Easy-PAT Range, and press Return. Enter the value your ISP assigned for your public address (206.1.1.6, in this example). Toggle Type to pat. Your public address is then mapped to the remaining private IP addresses using PAT. (If you were not using the Easy-PAT Range and Easy-PAT List that are created by default by using Easy Setup, you would have to deﬁne a public range and map list.
Page 163 You do this through either the NAT Associations screen or the proﬁle’s conﬁguration screens. The PAT part of this example setup will allow any user on the Netopia Router's LAN with an IP address in the range of 192.168.1.6 through 192.168.1.254 to initiate trafﬁc ﬂow to the outside world (for example, the Internet).
Page 164: Firmware Upgrades And Nat
IP address, 206.1.1.3. For the sake of this example, alias both services to 206.1.1.2. Now, as before, the PAT conﬁguration will allow any user on the Netopia Router's LAN with an IP address in the range of 192.168.1.6 through 192.168.1.254 to initiate trafﬁc ﬂow to the Internet.
Page 165: Chapter 12 - Ipx Setup
Internetwork Packet Exchange (IPX) is the network protocol used by Novell NetWare networks. This chapter shows you how to conﬁgure the Netopia R6000 Series for routing data using IPX. You also learn how to conﬁgure the router to serve IPX network addresses.
Page 166: Ipx Address
12-2 User’s Reference Guide IPX address An IPX address consists of a network number, a node number, and a socket number. An IPX network number is composed of eight hexadecimal digits. The network number must be the same for all nodes on a particular physical network segment.
Page 167: Netbios
If the link is idle, the keep-alive packets will be sent back to the server by the locally connected Netopia R6000 Series as though they came back from the user without bringing up the dial-up link.
Page 168 12-4 User’s Reference Guide Before changing any of the settings in this screen, consult your network administrator for the IPX setup information you will need. Changes made in this screen will take effect only after the Netopia R6000 Series is reset.
Page 169: Ipx Routing Tables
IPX routing tables provide information on current IPX routes and services. To go to the IPX Routing Table screen, select IPX Routing Table in the Statistics & Logs screen. This table shows detailed information about current IPX network routes. Net Addr-Hops-Ticks-Type--Status-Interface--------------via Router------------ -----------------------------------SCROLL UP---------------------------------- 00000020...
Page 170 12-6 User’s Reference Guide...
Page 171: Chapter 13 - Appletalk Setup
This chapter discusses the concept of AppleTalk routing and how to conﬁgure AppleTalk setup for a Netopia R6000 Series with the AppleTalk kit installed. AppleTalk support is available as a separate kit for the Netopia R6000 Series ADSL Router. Skip this chapter if you do not have the AppleTalk kit.
Page 172 AppleTalk tells them apart according to an additional part of their addresses: the network number. The Netopia R6000 Series assigns a unique network number to each member network. In terms of the city street metaphor, the network number is similar to the name of the street. Putting a network number together with a node number fully speciﬁes the address of a node on an internet.
Page 173: Macip
When two networks using AppleTalk communicate with each other through a network based on the Internet Protocol, they are said to be tunneling through the IP network. The Netopia R6000 Series uses AURP to allow your AppleTalk network to tunnel to designated AppleTalk partner networks, as well as to accept connections from remote AppleTalk networks tunneling to your AppleTalk LAN.
Page 174: Installing Appletalk
These scenarios may guide you in deciding how to set the router’s seeding: If the Netopia R6000 Series is the only router on your network, you must set it to either hard seeding or soft seeding. The default is soft seeding.
Page 175 Main Menu The Netopia Feature Set Upgrade screen appears. You may be able to extend the features of your Netopia by purchasing a 'Software Upgrade'. notes that came with your Netopia or visit the Netopia Communications web site at www.netopia.com.
Page 176: Conﬁguring Appletalk
EtherTalk network may experience routing conﬂicts. The Netopia R6000 Series supports creating up to 32 zone names. As an alternative, you can set EtherTalk seeding to soft seeding and let the Netopia R6000 Series receive the zone name and network number from the other router.
Page 177: Localtalk Setup
You can also set the range of EtherTalk Phase II network numbers. Select Net Low and enter the lower limit of the network number range. Select Net High and enter the upper limit of the range. Select the Seeding pop-up menu and choose the seeding method for the Netopia R6000 Series to use. (See “Routers and seeding”...
Page 178: Aurp Setup
13-8 User’s Reference Guide If another router is already present on the LocalTalk network that you will be connecting to the Netopia R6000 Series, use the zone name and network number used by that router for that LocalTalk network. Otherwise, your LocalTalk network may experience routing conﬂicts.
Page 179 Example: Site A has an AURP tunnel to site B. Both sites have multiple zones deﬁned on the EtherTalk port and a unique zone on their LocalTalk ports. If side A has indicated that one of its EtherTalk zones is the Free Trade Zone and has opted to use the Free Trade Zone option for its tunnel to B, then only this Free Trade Zone will show up on side B and only those machines or services in the Free Trade Zone will be accessible to side B.
Page 180 13-10 User’s Reference Guide Partner IP Address or Domain Name: 176.163.8.134 Initiate Connection: Restrict to Free Trade Zone: The Change AURP Partner screen has all the values you entered when you added that partner. All of these values may be modiﬁed in this screen. Deleting an AURP partner To delete an AURP partner, in the AURP Setup screen select Delete Partner and press Return.
Page 181 The AURP tickle timer is a parameter that you can set anywhere between 0 and 100 hours. This parameter tells the AURP partners when to send out an AURP tickle packet. If this value is set to 0, the Netopia R6000 Series will never send out a tickle packet.
Page 182 13-12 User’s Reference Guide When network number remapping is enabled, you must choose a safe range of network numbers as a destination for the remapping. A safe range of network numbers does not intersect your local AppleTalk network’s range of network numbers. To choose a destination range for the remapping, select From under Remap into Range and enter a starting value.
Page 183: Quick View Status Overview
“Web-based management pages” on page 14-16 Quick View status overview You can get a useful, overall status report from the Netopia R6000 Series in the Quick View screen. To go to the Quick View screen, select Quick View in the Main Menu.
Page 184: General Status
Unused Memory: The total remaining system memory available for use. Domain Name Server: If you are using the router’s defaults (DHCP and NAT) this value will be 0.0.0.0. If you have assigned an IP address as your default gateway, it is shown here.
Page 185: Current Status
ISDN caller identiﬁcation (if available). Status lights This section shows the current real-time status of the Netopia R6000 Series’s status lights (LEDs). It is useful for remotely monitoring the router’s status. The Quick View screen’s arrangement of LEDs corresponds to the physical arrangement of LEDs on the router.
Page 186: Statistics & Logs
Main Menu When you are troubleshooting your Netopia R6000 Series, the Statistics & Logs screens provide insight into the recent event activities of the router. From the Main Menu go to Statistics & Logs and select one of the options described in the sections below.
Page 187: Event Histories
You can view two different event histories: one for the router’s system and one for the WAN. The Netopia R6000 Series’s built-in battery backup prevents loss of event history from a shutdown or reset.
Page 188 14-6 User’s Reference Guide Main Menu WAN Event History The WAN Event History screen lists a total of 128 events on the WAN. The most recent events appear at the top. -Date-----Time-----Event------------------------------------------------------ ----------------------------------SCROLL UP----------------------------------- 07/03/98 13:59:06 07/03/98 13:59:05 07/03/98 13:59:05 >>WAN: data link activated at 1040 Kbps 07/03/98 13:58:32 --Device restarted----------------------------------------- 07/03/98 12:46:39 --Device restarted----------------------------------------- 07/03/98 11:45:57 --Device restarted-----------------------------------------...
Page 189: Routing Tables
To clear the Device Event History, select Clear History and press Return. Routing tables You can view all of the IP, IPX, and AppleTalk routes in the Netopia R6000 Series’s IP, IPX, and AppleTalk routing tables, respectively. To go to a routing table screen, select the routing table you are interested in from the Statistics & Logs screen.
Page 190 14-8 User’s Reference Guide IP routing table In the Statistics & Logs screen, select IP Routing Table and press Return. The IP routing table displays all of the IP routes currently known to the Netopia R6000 Series. Network Address-Subnet Mask-----via Router------Port------------------Type---- ----------------------------------SCROLL UP----------------------------------- 0.0.0.0...
Page 191 IPX Sap Bindery table In the Statistics & Logs screen, select IPX Sap Bindery Table and press Return. The IPX Sap Bindery table displays all of the IPX Sap Bindery routes currently known to the Netopia R6000 Series. AppleTalk routing table In the Statistics &...
Page 192: Served Ip Addresses
Return. Served IP Addresses You can view all of the IP addresses currently being served by the Netopia R6000 Series ADSL Router from the Served IP Addresses screen. From the Statistics & Logs menu, select Served IP Addresses. The Served IP Addresses screen appears.
Page 193 The IP Address Lease Management screen appears. Reset All Leases Release BootP Leases Reclaim Declined Addresses Hit RETURN/ENTER, you will return to the previous screen. This screen has three options: Reset All Leases: Resets all current IP addresses leased through DHCP without waiting for the default one–hour lease period to elapse Release BootP Leases: Releases any BootP leases that may be in place and which may no longer be required.
Page 194: System Information
14-12 User’s Reference Guide System Information The System Information screen gives a summary view of the general system level values in the Netopia R6000 Series ADSL Router. From the Statistics & Logs menu select System Information. The System Information screen appears.
Page 195: The Snmp Setup Screen
For SNMP management, the latest Netopia MIB is modiﬁed so that old leaves have been renamed generically. The following table shows the old and new names. ipFilterSrcPortComparison ipFilterSrcPort ipFilterDstPortComparison ipFilterDstPort The MIB textual descriptions have been modiﬁed to reﬂect the fact that these ﬁelds are now used by UDP and TCP for port matching and ICMP for code and type ﬁeld matching.
Page 196: Snmp Traps
SNMP traps An SNMP trap is an informational message sent from an SNMP agent (in this case, the Netopia R6000 Series) to a manager. When a manager receives a trap, it may log the trap as well as generate an alert message of its own.
Page 197 The Netopia R6000 Series sends traps using UDP (for IP networks). You can specify which SNMP managers are sent the IP traps generated by the Netopia R6000 Series. Up to eight receivers can be set. You can also review and remove IP traps.
Page 198: Web-Based Management Pages
The Web-based management pages add signiﬁcant new features for monitoring your router. You access the Web-based management pages by launching your Web browser and entering the URL: http://router_IP_address where router_IP_address is the address of your router. The default address is 198.162.1.1. The System Information page appears. System Information page...
Page 199: Event History Pages
You can view two different event histories: one for the router’s system and one for the WAN. The Netopia R6000 Series’s built-in battery backup prevents loss of event history from a shutdown or reset.
Page 200 14-18 User’s Reference Guide WAN Event History page You can refresh the WAN Event History log by clicking the update this page link.
Page 201 Monitoring Tools 14-19 Device Event History page You can refresh the Device Event History log by clicking the update this page link.
Page 202 14-20 User’s Reference Guide...
Page 203: Overview
(Internet). The Netopia Router can be used in VPNs either to initiate the connection or to answer it. When used in this way, the routers are said to be tunnelling through the public network (Internet). The advantages are that, like your long distance phone call, you don't need a direct line between one computer or LAN and the other, but use the local connections, making it much cheaper;...
Page 204 Netopia’s PPTP implementation is compatible with Microsoft’s and can function as either the client (PAC) or the server (PNS). As a client, a Netopia R6000 Series Router can provide all users on a LAN with secure access over the Internet to the resources of another LAN by setting up a tunnel with a Windows NT server running Remote Access Services (RAS) or with another Netopia Router.
Page 205 PPTP language) or a foreign agent (in ATMP language). When used to answer the tunnelled connection, the Netopia Router is called a PPTP Network Server (PNS, in PPTP language) or a home agent (in ATMP language). In either case, the Netopia Router wraps, or encapsulates, information that one end of the tunnel exchanges with the other, in a wrapper called General Routing Encapsulation (GRE), at one end of the tunnel, and unwraps, or decapsulates, it at the other end.
Page 206: About Pptp Tunnels
PPTP server or to terminate a tunnel initiated by a remote PPTP client. PPTP conﬁguration To set up the router as a PPTP Network Server (PNS) capable of answering PPTP tunnel requests you must also conﬁgure the VPN Default Answer Proﬁle. See information.
Page 207 If you do not specify the PPTP Partner IP Address, the router will use the default gateway to reach the partner and the Tunnel Via Gateway ﬁeld is hidden. If the partner should be reached via an alternate port (i.e., the LAN instead of the WAN), the Tunnel Via Gateway ﬁeld allows this path to be resolved.
Page 208 MS-CHAP version 1 (MS-CHAP-V1). When you choose MS-CHAP as the authentication method for the PPTP tunnel, the Netopia Router will start negotiating MS-CHAP-V2. If the router you are connecting to does not support MS-CHAP-V2, it will fall back to MS-CHAP-V1, or, if the router you are connecting to does not support MPPE at all, the PPP session will be dropped.
Page 209: Encryption Support
Netopia’s ATMP implementation supports Data Encryption Standard (DES) data encryption for user data transfer over the ATMP tunnel between two Netopia routers. The encryption option, None or DES, is a selectable option in the ATMP Tunnel Options screen.
Page 210: About Ipsec Tunnels
MS-CHAP version 1 (MS-CHAP-V1). When you choose MS-CHAP as the authentication method for the PPTP tunnel, the Netopia Router will start negotiating MS-CHAP-V2. If the router you are connecting to does not support MS-CHAP-V2, it will fall back to MS-CHAP-V1, or, if the router you are connecting to does not support MPPE at all, the PPP session will be dropped.
Page 211: Ip Proﬁle Parameters
The Add Connection Proﬁle screen appears. Profile Name: Profile Enabled: Data Link Encapsulation... IP Enabled: IP Profile Parameters... Interface Group... COMMIT From the Data Link Encapsulation pop-up menu select IPsec. Then select Data Link Options. The IPsec Encryption & Authentication Options screen appears. Encryption Transform...
Page 212 15-10 User’s Reference Guide Encryption Transform... Encryption Key 1: Encryption Key 2: Encryption Key 3: Authentication Type... Authentication Transform... Authentication Key: Compression Type... COMMIT You must enter an Encryption Key or keys if the Encryption Transform is DES or 3DES. The key for DES must be a hexadecimal entry of eight bytes (16 bytes of input).
Page 213: Advanced Ip Proﬁle Options
Map Lists, Server Lists, and PAT addresses are described in detail in Address Translation (MultiNAT).” You can specify a Filter Set. See the sections on ﬁlter sets in the accompanying User’s Reference Guide on your Netopia CD. IP Profile Options 123456789 0.0.0.0...
Page 214 Next Hop Gateway option allows you to enter the address by which the gateway partner is reached. If you do not specify the Remote Tunnel Endpoint Address, the router will use the default gateway to reach the partner. If the partner should be reached via an alternate port (for example, the LAN instead of the WAN), the Next Hop Gateway ﬁeld allows this path to be resolved.
Page 215: Vpn Default Answer Proﬁle
VPN Default Answer Proﬁle The WAN Conﬁguration menu offers a VPN Default Answer Proﬁle option. Use this selection when your router is acting as the server for VPN connections, that is, when you are on the answering end of the tunnel establishment.
Page 216 15-14 User’s Reference Guide default) if you do not. This applies to both ATMP and PPTP connections. For PPTP tunnel connections only, you must deﬁne what type of authentication these connections will use. Select Receive Authentication and press Return. A pop-up menu offers the following options: PAP (the default), CHAP, or MS-CHAP.
Page 217: Vpn Quickview
Microsoft Windows Dial-Up Networking software permits a remote stand-alone workstation to establish a VPN tunnel to a PPTP server such as a Netopia Router located at a central site. Dial-Up Networking also allows a mobile user who may not be connected to a PAC to dial into an intermediate ISP and establish a VPN tunnel to, for example, a corporate headquarters, remotely.
Page 218: Installing Dial-Up Networking
Netopia router. Note: For the latest information and tech notes on Dial-Up Networking and VPNs be sure to visit the Netopia Web site at http://www.netopia.com and, for the latest software and release notes, the Microsoft Web site at http://www.microsoft.com.
Page 219: Creating A New Dial-Up Networking Proﬁle
This returns you to the Windows Setup screen. Click the OK button. Respond to the prompts to install Dial-Up Networking from the system disks or CD-ROM. When prompted, reboot your PC. Creating a new Dial-Up Networking proﬁle A Dial-Up Networking proﬁle is like an address book entry that contains the information and parameters you need for a secure private connection.
Page 220 Windows 98 users select PPP: Windows 98, Windows NT Server, Internet In the Allowed network protocols area check TCP/IP and uncheck all of the other checkboxes. Note: Netopia’s PPTP implementation does not currently support tunnelling of IPX and NetBEUI protocols. Click the TCP/IP Settings button.
Page 221: Installing The Vpn Client
Installing the VPN Client Before installing the VPN Client you must have TCP/IP installed and have an established Internet connection. Windows 95 VPN installation From your Internet browser navigate to the following URL: http://www.microsoft.com/NTServer/nts/downloads/recommended/dunl3win95/releasenotes.aso Download the Microsoft Windows 95 VPN patch dun 1.3 to the Windows 95 computer you intend to use as a VPN client with PPTP.
Page 222: Connecting Using Dial-Up Networking
15-20 User’s Reference Guide Click the Windows Setup tab. The Windows Setup screen will be displayed within the top center box. Double-click Communications. This displays a list of possible selections for the communications option. Active components will have a check in the checkboxes to their left. Check Dial Up Networking at the top of the list and Virtual Private Networking at the bottom of the list.
Page 223: Atmp Conﬁguration
ATMP conﬁguration ATMP is a Datalink Encapsulation option in Connection Proﬁles. It is not an option in device or link conﬁguration screens, since ATMP is not a native encapsulation. The Easy Setup Proﬁle does not offer ATMP datalink encapsulation. See “Creating a New Connection Proﬁle”...
Page 224 You can specify a Network Name. When the tunnel partner is another Netopia Router, this name may be used to match against a Connection Proﬁle. When the partner is an Ascend router in Gateway mode, then Network Name is used by the Ascend router to match a gateway proﬁle.
Page 225 Ordinarily, Ping is an excellent troubleshooting tool, but it will not be effective in this circumstance. Instead, use another TCP- or UDP-based network service for troubleshooting. Since the Netopia Router is capable of serving Telnet and HTTP, we recommend using these services instead of Ping.
Page 226: Allowing Vpns Through A Firewall
15-24 User’s Reference Guide Allowing VPNs through a Firewall An administrator interested in securing a network will usually combine the use of VPNs with the use of a ﬁrewall or some similar mechanism. This is because a VPN is not a complete security solution, but rather a component of overall security.
Page 227: Pptp Example
PPTP example To enable a ﬁrewall to allow PPTP trafﬁc, you must provision the ﬁrewall to allow inbound and outbound TCP packets speciﬁcally destined for port 1723. The source port may be dynamic, so often it is not useful to apply a compare function upon this portion of the control/negotiation packets.
Page 228 15-26 User’s Reference Guide For Input Filter 2 set the Protocol Type to allow GRE as shown below. Enabled: Forward: Source IP Address: Source IP Address Mask: Dest. IP Address: Dest. IP Address Mask: Protocol Type: In the Display/Change IP Filter Set screen select Display/Change Output Filter. Display/Change Output Filter screen +-#----Source IP Addr----Dest IP Addr------Proto-Src.Port-D.Port--On?-Fwd-+ +-------------------------------------------------------------------------+...
Page 229 For Output Filter 2 set the Protocol Type to allow GRE as shown below. Enabled: Forward: Source IP Address: Source IP Address Mask: Dest. IP Address: Dest. IP Address Mask: Protocol Type: Virtual Private Networks (VPN) 15-27 Change Output Filter 2 0.0.0.0 0.0.0.0 0.0.0.0...
Page 230: Atmp Example
15-28 User’s Reference Guide ATMP example To enable a ﬁrewall to allow ATMP trafﬁc, you must provision the ﬁrewall to allow inbound and outbound UDP packets speciﬁcally destined for port 5150. The source port may be dynamic, so often it is not useful to apply a compare function on this portion of the control/negotiation packets.
Page 231 For Input Filter 2 set the Protocol Type to allow GRE as shown below. Enabled: Forward: Source IP Address: Source IP Address Mask: Dest. IP Address: Dest. IP Address Mask: Protocol Type: In the Display/Change IP Filter Set screen select Display/Change Output Filter. Display/Change Output Filter screen +-#----Source IP Addr----Dest IP Addr------Proto-Src.Port-D.Port--On?-Fwd-+ +-------------------------------------------------------------------------+...
Page 232 15-30 User’s Reference Guide For Output Filter 2 set the Protocol Type to allow GRE as shown below. Enabled: Forward: Source IP Address: Source IP Address Mask: Dest. IP Address: Dest. IP Address Mask: Protocol Type: Change Output Filter 2 0.0.0.0 0.0.0.0 0.0.0.0...
Page 233: Suggested Security Measures
In addition to setting up user accounts, Telnet access, and ﬁlters (all of which are covered later in this chapter), there are other actions you can take to make the Netopia R6000 Series and your network more secure: Change the SNMP community strings (or passwords). The default community strings are universal and could easily be known to a potential intruder.
Page 234 16-2 User’s Reference Guide However, by adding user accounts, you can protect the most sensitive screens from unauthorized access. User accounts are composed of name/password combinations that can be given to authorized users. Caution! You are strongly encouraged to add protection to the conﬁguration screens. Unprotected screens could allow an unauthorized user to compromise the operation of your entire network.
Page 235 When you enter your password, you are prompted to conﬁrm it by re-entering it in a pop-up window. +----------------------------------------------------------------+ En+----------------------------------------------------------------+ En| Please re-enter Password: De+----------------------------------------------------------------+ Password for This Screen (11 chars max): Configuration Changes Reset WAN Connection: Re-type your password to conﬁrm your entry. When you press Return, the password becomes effective. Protecting the conﬁguration screens You can protect the conﬁguration screens with user accounts.
Page 236: Dial-In Console Access
Remote modem terminal emulator setups can dial in to the modem line and establish a remote console session, even though they are not using PPP. This allows Netopia, Inc.'s Up and Running, Guaranteed! department or other administrator with the appropriate security to remotely conﬁgure your router for you.
Page 237 The Netopia R6000 Series Routers implement a Remote Authentication Dial-In User Service (RADIUS) client (RFC 2138) and adds the ability to authenticate console conﬁguration access using a RADIUS server. This feature is strictly for console menu access authentication only and is not intended for WAN connectivity access authentication.
Page 238 Choosing RADIUS Only causes the router to ignore the local database and to authenticate users using the conﬁgured RADIUS server. Choosing RADIUS then Local causes the router to attempt to authenticate a user ﬁrst using a RADIUS server and then, if that fails, using the local authentication database.
Page 239: Warning Alerts
In addition to specifying the server’s hostname or IP address, you must also specify a RADIUS Server Secret and an Alt RADIUS Server Secret (if conﬁgured) known to both the router and the RADIUS server. The secret is used to encrypt RADIUS transactions in transit. The RADIUS Server Secret items are limited to 31 characters.
Page 240: Enable Smartstart/Smartview/Web Server
You may want to restrict access to the Web-based screens to prevent inadvertent switching or connecting and disconnecting of connection proﬁles. Since SmartStart can be used to reconﬁgure the router, you may want to block inadvertent damage resulting from unauthorized use of SmartStart. To prevent access to these features toggle this option to No.
Page 241: Telnet Access
Telnet Access Telnet is a TCP/IP service that allows remote terminals to access hosts on an IP network. The Netopia R6000 Series supports Telnet access to its conﬁguration screens. Caution! You should consider password-protecting or restricting Telnet access to the Netopia R6000 Series if you suspect there is a chance of tampering.
Page 242 16-10 User’s Reference Guide Each inspector has a speciﬁc task. One inspector’s task may be to examine the destination address of all outgoing packages. That inspector looks for a certain destination—which could be as speciﬁc as a street address or as broad as an entire country—and checks each package’s destination address to see if it matches that destination.
Page 243: How Individual Filters Work
This rule applies to Telnet packets that come from a host with the IP address 199.211.211.17. If a match occurs, the packet is blocked. Here is what this rule looks like when implemented as a ﬁlter on the Netopia R6000 Series: +-#--Source IP Addr--Dest IP Addr-----Proto-Src.Port-D.Port--On?-Fwd-+ +--------------------------------------------------------------------+ 199.211.211.17...
Page 244 16-12 User’s Reference Guide Parts of a ﬁlter A ﬁlter consists of criteria based on packet attributes. A typical ﬁlter can match a packet on any one of the following attributes: The source IP address (where the packet was sent from) The destination IP address (where the packet is going) The type of higher-layer Internet protocol the packet is carrying, such as TCP or UDP Port numbers...
Page 245 Port number comparisons A ﬁlter can also use a comparison option to evaluate a packet’s source or destination port number. The comparison options are: No Compare: No comparison of the port number speciﬁed in the ﬁlter with the packet’s port number. Not Equal To: For the ﬁlter to match, the packet’s port number cannot equal the port number speciﬁed in the ﬁlter.
Page 246 16-14 User’s Reference Guide Putting the parts together When you display a ﬁlter set, its ﬁlters are displayed as rows in a table: +-#---Source IP Addr---Dest IP Addr-----Proto-Src.Port-D.Port--On?-Fwd-+ +----------------------------------------------------------------------+ 192.211.211.17 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 +----------------------------------------------------------------------+ The table’s columns correspond to each ﬁlter’s attributes: #: The ﬁlter’s priority in the set.
Page 247 Filtering example #1 Returning to our ﬁltering rule example from above (see Start with the rule, then ﬁll in the ﬁlter’s attributes: The rule you want to implement as a ﬁlter is: Block all Telnet attempts that originate from the remote host 199.211.211.17. The host 199.211.211.17 is the source of the Telnet packets you want to block, while the destination address is any IP address.
Page 248: Design Guidelines
16-16 User’s Reference Guide +-#---Source IP Addr---Dest IP Addr-----Proto-Src.Port-D.Port--On?-Fwd-+ +----------------------------------------------------------------------+ 200.233.14.0 +----------------------------------------------------------------------+ This ﬁlter blocks any packets coming from a remote network with the IP network address 200.233.14.0. The 0 at the end of the address signiﬁes any host on the class C IP network 200.233.14.0. If, for example, the ﬁlter is applied to a packet with the source IP address 200.233.14.5, it will block it.
Page 249: Working With Ip Filters And Filter Sets
An approach to using ﬁlters The ultimate goal of network security is to prevent unauthorized access to the network without compromising authorized access. Using ﬁlter sets is part of reaching that goal. Each ﬁlter set you design will be based on one of the following approaches: That which is not expressly prohibited is permitted.
Page 250: Adding A Filter Set
16-18 User’s Reference Guide View, change, or delete individual ﬁlters and ﬁlter sets. The sections below explain how to execute these steps. Adding a ﬁlter set You can create up to eight different custom ﬁlter sets. Each ﬁlter set can contain up to 16 output ﬁlters and up to 16 input ﬁlters.
Page 251 The Netopia Router Packets in the Netopia R6000 Series pass through an input ﬁlter if they originate in the WAN and through an output ﬁlter if they’re being sent out to the WAN. The process for adding input and output ﬁlters is exactly the same. The main difference between the two involves their reference to source and destination.
Page 252 16-20 User’s Reference Guide Enter the IP specific information for this filter. To make the ﬁlter active in the ﬁlter set, select Enabled and toggle it to Yes. If Enabled is toggled to No, the ﬁlter can still exist in the ﬁlter set, but it will have no effect. If you want the ﬁlter to forward packets that match its criteria to the destination IP address, select Forward and toggle it to Yes.
Page 253 ICMP Code Compare – Select one of the following options from the pop-up menu: No Compare, Not Equal To, Less Than, Less Than or Equal, Equal, Greater Than or Equal, or Greater Than. In addition to the Type, an 8-bit ﬁeld, Code, gives more information about the Type. ICMP Codes include: It is unlikely that you would need to ﬁlter on ICMP code types.
Page 254: Viewing Filter Sets
16-22 User’s Reference Guide Select a ﬁlter from the table and press Return. The Change Filter screen appears. The parameters in this screen are set in the same way as the ones in the Add Filter screen (see page 16-19). Enter the IP specific information for this filter.
Page 255: Deleting A Filter Set
ﬁlter set. A sample IP ﬁlter set This section contains the settings for a ﬁlter set called Basic Firewall, which is part of the Netopia R6000 Series’s factory conﬁguration. Basic Firewall blocks undesirable trafﬁc originating from the WAN (in most cases, the Internet), but forwards all trafﬁc originating from the LAN.
Page 256 16-24 User’s Reference Guide The ﬁve input ﬁlters and one output ﬁlter that make up Basic Firewall are shown in the table below. Input ﬁlter Setting Enabled Forward Source IP 0.0.0.0 address Source IP 0.0.0.0 address mask Dest. IP 0.0.0.0 address Dest.
Page 257 Basic Firewall is suitable for a LAN containing only client hosts that want to access servers on the WAN, but not for a LAN containing servers providing services to clients on the WAN. Basic Firewall’s general strategy is to explicitly forward WAN-originated TCP and UDP trafﬁc to ports greater than 1023. Ports lower than 1024 are the service origination ports for various Internet services such as FTP, Telnet, and the World Wide Web (WWW).
Page 258 AURP tunnel. To allow an AURP tunnel between a remote AURP router with the IP address a.b.c.d (corresponding to a numbered IP address such as 163.176.8.243) and a local AURP router (including the Netopia R6000 Series itself), insert the following input ﬁlter ahead of the current input ﬁlter 1: Enabled: Yes Forward: Yes Source IP Address: a.b.c.d...
Page 259: Ipx Filters
IPX Filters Main Menu IPX packet ﬁlters work very similarly to IP packet ﬁlters. They ﬁlter data trafﬁc coming from or going to remote IPX networks. IPX ﬁlters can be set up to forward or discard IPX packets based on a number of user-deﬁned criteria.
Page 260: Ipx Packet Filters
16-28 User’s Reference Guide The items in the IPX Filters and Filter Sets screen are grouped into four areas: IPX packet ﬁlters IPX packet ﬁlter sets IPX SAP ﬁlters IPX SAP ﬁlter sets The following sections explain the items in each of these areas. IPX packet ﬁlters For each IPX packet ﬁlter, you can conﬁgure a set of parameters to match on the source or destination attributes of IPX data packets coming from or going to the WAN.
Page 261: Ipx Packet Filter Sets
Select Filter Name and enter a descriptive name for the ﬁlter. To specify a source network for the ﬁlter to match on, select Source Network and enter an IPX network address. To specify a source node for the ﬁlter to match on, select Source Node Address and enter an IPX node address.
Page 262 16-30 User’s Reference Guide Add Packet Filter Set Filter Set Name: Show Filters/Change Action on Match... Append Filter... Remove Filter... ADD FILTER SET NOW Return accepts * ESC cancels * Left/Right moves insertion point * Del deletes. Configure an IPX Filter Set here. You must ADD FILTER SET NOW to save. Follow these steps to conﬁgure the new packet ﬁlter set: Select Filter Set Name and enter a descriptive name for the ﬁlter set.
Page 263: Ipx Sap Filters
To add a ﬁlter to the ﬁlter set, select Append Filter to display a table of ﬁlters. Select a ﬁlter from the table and press Return to add it to the ﬁlter set. The default action of newly added ﬁlters is to not forward packets that match their criteria.
Page 264 (no characters), and ? to match any single character in the server’s name. For example, the ﬁlter could match on the server name “NETOPIA” with “NETO*”, “NETO?IA”, and “NETOPIA*”. To specify a socket for the ﬁlter to match on, select Socket and enter an IPX socket number.
Page 265: Ipx Sap Filter Sets
IPX SAP ﬁlter sets Before IPX SAP ﬁlters can be used, they must be grouped into sets. A SAP ﬁlter can be part of more than one ﬁlter set. Viewing and modifying SAP ﬁlter sets To display a table of IPX SAP ﬁlter sets, select Display/Change IPX SAP Filter Sets in the IPX Filters and Filter Sets screen to display a list of ﬁlter sets.
Page 266 16-34 User’s Reference Guide Set whether filters forward or drop matching packets here. Select a ﬁlter and toggle the entry forwarding action to Yes (forward) or No (discard). To add a ﬁlter to the ﬁlter set, select Append Filter in the Add SAP Filter Set screen to display a table of ﬁlters.
Page 267: Firewall Tutorial
Firewall Tutorial General ﬁrewall terms Filter rule: A ﬁlter set is comprised of individual ﬁlter rules. Filter set: A grouping of individual ﬁlter rules. Firewall: A component or set of components that restricts access between a protected network and the Internet or between two networks.
Page 268: Firewall Design Rules
16-36 User’s Reference Guide Example TCP/UDP Ports Firewall design rules There are two basic rules to ﬁrewall design: “What is not explicitly allowed is denied.” “What is not explicitly denied is allowed.” The ﬁrst rule is far more secure and is the best approach to ﬁrewall design. It is far easier (and more secure) to allow in or out only certain services and deny anything else.
Page 269 and a packet goes through these rules destined for FTP, the packet would forward through the ﬁrst rule (WWW), go through the second rule (FTP), and match this rule; the packet is allowed through. If you had this ﬁlter set for example... Allow WWW access;...
Page 270 TCP packets with the ACK bit set, since these packets had to be originated from the local network. Example IP ﬁlter set screen This is an example of the Netopia IP ﬁlter set screen: Enabled: Forward:...
Page 271: Filter Basics
In the source or destination IP address ﬁelds, the IP address that is entered must be the network address of the subnet. A host address can be entered, but the applied subnet mask must be 32 bits (255.255.255.255). The Netopia R6000 Series has the ability to compare source and destination TCP or UDP ports. These options are as follows:...
Page 272: Example Filters
200.1.1.28 255.255.255.128 This incoming IP packet has a source IP address that matches the network address in the Source IP Address ﬁeld (00000000) in the Netopia R6000 Series. This will not forward this packet. Example 2 Filter Rule: Incoming packet has the source address of 200.1.1.184.
Page 273 IP Address 200.1.1.184 255.255.255.240 Since the Source IP Network Address in the Netopia R6000 Series is 01100000, and the source IP address after the logical AND is 1011000, this rule does not match and this packet will be forwarded. Example 4 Filter Rule: Incoming packet has the source address of 200.1.1.104.
Page 274 16-42 User’s Reference Guide Since the Source IP Network Address in the Netopia R6000 Series is 01100000, and the source IP address after the logical AND is 01100000, this rule does match and this packet will not be forwarded. Example 5 Filter Rule: Incoming packet has the source address of 200.1.1.96.
Page 275: Filtering On The Lan Interface
Filtering on the LAN Interface The Netopia R6000 Series offers LAN-side ﬁltering on the Ethernet hub. This permits multiple subnets on the Ethernet LAN to be kept separate from one another and operate as virtual independent networks sharing a single Internet connection. Small- to medium-sized ofﬁces can beneﬁt by using a single router to connect to the Internet, with multiple businesses within the ofﬁce using independent subnets on the network.
Page 276 16-44 User’s Reference Guide Ethernet IP Address: Ethernet Subnet Mask: Define Additional Subnets... Default IP Gateway: Backup IP Gateway: Primary Domain Name Server: Secondary Domain +-----------------------------------+ Domain Name: Receive RIP... Transmit RIP... LAN (EN Hub) Filt| Remove Filter Set| Static Routes... Network Address Tran+-----------------------------------+ The ﬁlter set you select will be applied to the Ethernet hub interface.
Page 277: Chapter 17 — Utilities And Diagnostics
A number of utilities and tests are available for system diagnostic and control purposes. This section covers the following topics: “Ping” on page 17-2 “Trace Route” on page 17-4 “Telnet client” on page 17-5 “Disconnect Telnet console session” on page 17-7 “Factory defaults”...
Page 278: Ping
17-2 User’s Reference Guide Ping The Netopia R6000 Series includes a standard Ping test utility. A Ping test generates IP packets destined for a particular (Ping-capable) IP host. Each time the target host receives a Ping packet, it returns a packet to the original sender.
Page 279 Ping packets. Note that the second return Ping packet is considered to be late because it is not received by the Netopia R6000 Series before the third Ping packet is sent. The ﬁrst and third return Ping packets are on time.
Page 280: Trace Route
SNMP MIB-II ip group’s ipDefaultTTL object. Trace Route You can count the number of routers between your Netopia Router and a given destination with the Trace Route utility. In the Statistics & Diagnostics screen, select Trace Route and press Return. The Trace Route screen appears.
Page 281: Telnet Client
Select Timeout (seconds) to set when the trace will timeout for each hop, up to 10 seconds. The default is 3 seconds. Select Use Reverse DNS to learn the names of the routers between the Netopia Router and the destination router. The default is Yes.
Page 282 17-6 User’s Reference Guide The Telnet client screen appears. Host Name or IP Address: Control Character to Suspend: Enter the IP Address/Domain Name of a host. Enter the host name or the IP address in dotted decimal format of the machine you want to Telnet into and press Return.
Page 283: Disconnect Telnet Console Session
If you select Continue, you will immediately terminate your session. Factory defaults You can reset the Netopia R6000 Series to its factory default settings. In the Utilities & Diagnostics screen, select Revert to Factory Defaults and press Return. Select CONTINUE in the dialog box and press Return. The Netopia R6000 Series will reboot and its settings will return to the factory defaults, deleting your conﬁgura-...
Page 284: Transferring Conﬁguration And Firmware Files With Tftp
Trivial File Transfer Protocol (TFTP) is a method of transferring data over an IP network. TFTP is a client-server application, with the router as the client. To use the Netopia R6000 Series as a TFTP client, a TFTP server must be available.
Page 285: Downloading Conﬁguration Files
Some models do not support all ﬁrmware versions. Loading an incorrect ﬁrmware version can permanently damage the unit. Do not manually power down or reset the Netopia R6000 Series while it is automatically resetting or it could be damaged. If you choose to download the ﬁrmware, the TFTP Transfer State item will change from Idle to Reading Firmware.
Page 286: Uploading Conﬁguration Files
Using TFTP, you can send a ﬁle containing a snapshot of the router’s current conﬁguration to a TFTP server. The ﬁle can then be downloaded by a different Netopia R6000 Series unit to conﬁgure its parameters (see “Downloading conﬁguration ﬁles” on page parameters or just for creating conﬁguration backup ﬁles.
Page 287: Updating Firmware
Send Firmware to Netopia WAN module... WAN module Firmware Status: Updating ﬁrmware Firmware updates may be available periodically from Netopia or from a site maintained by your organization’s network administration. The procedure below applies whether you are using the console or the WAN interface module.
Page 288: Downloading Conﬁguration Files
Uploading conﬁguration ﬁles A ﬁle containing a snapshot of the Netopia R6000 Series’s current conﬁguration can be uploaded from the router to disk. The ﬁle can then be downloaded by a different Netopia R6000 Series to conﬁgure its parameters (see “Downloading conﬁguration ﬁles,”...
Page 289: Restarting The System
You can restart the system by selecting the Restart System item in the Utilities & Diagnostics screen. You must restart the system whenever you reconﬁgure the Netopia R6000 Series and want the new parameter values to take effect. Under certain circumstances, restarting the system may also clear up system or network malfunctions.
Page 290 17-14 User’s Reference Guide...
Page 292 User’s Reference Guide...
Page 293: Appendix A - Troubleshooting
ﬁnd the application as “c:\windows\telnet.exe”.) Your PC or Macintosh is properly conﬁgured for TCP/IP. Your PC or Macintosh has an IP address. Your PC or Macintosh has a subnet mask that matches or is compatible with the Netopia R6000 Series’s subnet mask. Troubleshooting A-1...
Page 294: Console Connection Problems
Note: If you are attempting to modify the IP address or subnet mask from a previous, successful conﬁguration attempt, you will need to clear the IP address or reset your Netopia R6000 Series to the factory default before reinitiating the conﬁguration process. For further information on resetting your Netopia R6000 Series to factory default, see “Factory defaults”...
Page 295: How To Telnet Or Console To Your Router From A Windows 9X Workstation
Once you are connected to the conﬁguration menu of your router, using either Step II or Step III, then Step IV will explain how to check the conﬁguration of your router. You may use Step IV to ﬁnd out if your router is conﬁgured as a DHCP server, and/or conﬁrm the conﬁguration your service provider entered.
Page 296 Step II: Conﬁgure a Windows PC and telnet to the router Note: By default, all Netopia R-Series routers have an Ethernet IP Address of 192.168.1.1, and also have DHCP (IP Address Serving) enabled. A limited or 12 user model router will serve all IP addresses from 192.168.1.3 - 192.168.1.14, and an unlimited user model will serve 100 IP addresses starting at...
Page 297 In the Network window, select the Conﬁguration tab. Scroll down the list of network components provided, highlight TCP/IP bound to your Ethernet Adapter and click on Properties. Your selection will be something similar the one illustrated in Figure 1 below: Figure 1 From the TCP/IP window, select the tab labeled IP Address, and enter the same parameters that appear below in Figure 2.
Page 298 A-6 User’s Reference Guide Note: If you have an limited (12 user) Netopia router, enter either a Subnet Mask of 255.255.255.240, or the subnet mask given by your service provider. Figure 2...
Page 299 Secondary Domain Name Server IP addresses your service provider instructed you to use. Again, if your router has been pre-conﬁgured, but you do not have any information on the conﬁguration, skip to Step III to conﬁrm how your router is conﬁgured.
Page 300 ﬁrmware version listed at the top of the screen. The Main Menu of a Netopia router's menu interface will appear like the following Figure 6 below in Step III.
Page 301 Steps II or III) keep in mind that pressing the Return/Enter key takes you into a page, pressing the Escape key takes you out, and pressing the tab key acts as a toggle on router settings. You also must press Return/Enter to save any new setting you enter.
Page 302 Step II and conﬁgure the TCP/IP properties of your workstation appropriately. Note: The Ethernet IP Address in the IP Setup of your router will be the Gateway IP address you conﬁgure on your PC. The Ethernet Subnet Mask of your router will be the same Subnet Mask you specify in your PC.
Page 303: How To Reset The Router To Factory Defaults
Keep in mind that all of your connection proﬁles and settings will need to be reconﬁgured. If you don't have a password, the only way to get back into the Netopia R6000 Series is the following: Turn the router upside down.
Page 304: Technical Support
If you contact us by telephone, please be ready to supply Netopia Technical Support with the information you used to conﬁgure the Netopia R6000 Series. Also, please be at the site of the problem and prepared to reproduce it and to try some troubleshooting steps.
Page 305 Netopia Bulletin Board Service: 1 510-865-1321 Online product information Product information can be found in the following: Netopia World Wide Web server via http://www.netopia.com Internet via anonymous FTP to ftp.netopia.com/pub FAX-Back This service provides technical notes that answer the most commonly asked questions and offers solutions for many common problems encountered with Netopia products.
Page 306 A-14 User’s Reference Guide...
Page 307: Appendix B - Understanding Ip Addressing
This appendix is a brief general introduction to IP addressing. A basic understanding of IP will help you in conﬁguring the Netopia R6000 Series and using some of its powerful features, such as static routes and packet ﬁltering. This section covers the following topics: “What is IP?”...
Page 308: Subnets And Subnet Masks
B-2 User’s Reference Guide IP addresses are maintained and assigned by the InterNIC, a quasi-governmental organization now increasingly under the auspices of private industry. Note: It’s very common for an organization to obtain an IP address from a third party, usually an Internet service provider (ISP).
Page 309: Example: Using Subnets On A Class C Ip Internet
When setting up IP routing with a Class A address, or even with multiple Class C addresses, subnetting is fairly straightforward. Subnetting a single Class C address between two networks, however, is more complex. This section describes the general procedures for subnetting a single Class C network between two Netopia Routers so that each can have Internet access.
Page 310 Below is a diagram of a simple network conﬁguration. The ISP is providing a Class C address to the customer site, and both networks A and B want to gain Internet access through this address. Netopia R6000 Series B connects to Netopia R6000 Series A and is provided Internet access through Routers A and B.
Page 311: Example: Working With A Class C Subnet
ISP's equipment. The most important item in this conﬁguration is the static route deﬁned on Router B. This tells Router B what path to take to get to the network deﬁned by Netopia R6000 Series B. Without this information, Customer Site B will be able to access Customer Site A, but not the Internet.
Page 312: Distributing Ip Addresses
Let the Netopia R6000 Series automatically distribute the addresses These two methods are not mutually exclusive; you can manually issue some of the addresses while the rest are distributed by the Netopia R6000 Series. Using the router in this way allows it to function as an address server.
Page 313: Technical Note On Subnet Masking
Technical note on subnet masking Note: The IP address supplied by the Netopia R6000 Series will be a unique number. You may want to replace this number with a number that your ISP supplies if you are conﬁguring the router for a static IP address.
Page 314: Manually Distributing Ip Addresses
DHCP address lease for one hour. The number of devices a Netopia R6000 Series can serve DHCP to is 512. This is imposed by global limits on the size of the address serving database, which is shared by all address serving functions active in the router.
Page 315: Using Address Serving
Auxiliary port on any router including leased line Netopia Routers. In any situation where a device is dialing into a Netopia Router, the router may need to be conﬁgured to serve IP via the WAN interface. This is only a requirement if the calling device has not been conﬁgured locally to know what its address(es) are.
Page 316 See below for a further explanation and an example. The network address issued by an ISP cannot be used as a host address. Distributed to the (Ethernet IP address) Pool of addresses distributed Netopia R6000 Series Manually distributed (static) by MacIP and DHCP...
Page 317: Nested Ip Subnets
The ﬁgure shows a possible network conﬁguration following this scheme. The main network is set up with the Class C address a.b.c.0, and contains Router A (which could be a Netopia R6000 Series), a Netopia R6000 Series, and a number of other hosts. Router A maintains a link to the Internet and can be used as the default...
Page 318 B-12 User’s Reference Guide Routers B and C (which could also be Netopia R6000 Series Routers) serve the two remote networks that are subnets of a.b.c.0. The subnetting is accomplished by conﬁguring the Netopia R6000 Series with connection proﬁles for Routers B and C (see the following table).
Page 319 Netopia R6000 Series, which examines its destination IP address. The Netopia R6000 Series compares the packet’s destination IP address with the routes in its IP routing table. It begins with the route at the bottom of the list and works up until there’s a match or the route to the default gateway is reached.
Page 320: Broadcasts
These two protocols specify two different ways to organize the very ﬁrst signals in the sequence of electrical signals that make up an IP packet travelling over Ethernet. By default, the Netopia R6000 Series uses Ethernet packet headers for IP trafﬁc. If your network requires 802.3 IP framing, you must conﬁgure this through SNMP.
Page 321: Appendix C - Binary Conversion Table
This table is provided to help you choose subnet numbers and host numbers for IP and MacIP networks that use subnetting for IP addresses. Decimal Binary 1000 1001 1010 1011 1100 1101 1110 1111 10000 10001 10010 10011 10100 10101 10110 10111 11000...
Page 322 C-2 User’s Reference Guide Decimal Binary 10000000 10000001 10000010 10000011 10000100 10000101 10000110 10000111 10001000 10001001 10001010 10001011 10001100 10001101 10001110 10001111 10010000 10010001 10010010 10010011 10010100 10010101 10010110 10010111 10011000 10011001 10011010 10011011 10011100 10011101 10011110 10011111 Decimal Binary Decimal 10100000 10100001...
Page 323: Appendix D - Further Reading
Further Reading D-1 Alexander, S. and R. Droms, DHCP Options and BOOTP Vendor Extensions, RFC 2131, Silicon Graphics, Inc., Bucknell University, PA, 1997. Angell, David, ISDN for Dummies, IDG Books Worldwide, Foster City, CA, 1995. Thorough introduction to ISDN for beginners. Apple Computer, Inc., AppleTalk Network System Overview, Addison-Wesley Publishing Company, Inc., Reading, MA, 1989.
Page 324 D-2 User’s Reference Guide Garcia-Luna-Aceves, J.J., Loop-Free Routing Using Diffusing Computations, IEEE/ACM Transactions on Networking, Vol. 1, No. 1, 1993. Garﬁnkel, Simson., PGP: Pretty Good Privacy, O’Reilly & Associates, Sebastopol, CA, 1991. A guide to the free data encryption program PGP and the issues surrounding encryption. Green, J.K., Telecommunications, 2nd ed., Business One Irwin, Homewood, IL, 1992.
Page 325 Further Reading D-3 Sidhu, G.S., R.F. Andrews, and A.B. Oppenheimer, Inside AppleTalk, 2nd ed., Addison-Wesley Publishing Company, Reading, MA, 1990. Siyan, Karanjit, Internet Firewall and Network Security, New Riders Publishing, Indianapolis, IN, 1995. Similar to the Chapman and Zwicky book. Smith, Philip, Frame Relay Principles and Applications, Addison-Wesley Publishing Company, Reading, MA, 1996.
Page 326 D-4 User’s Reference Guide...
Page 327: Appendix E - Technical Speciﬁcations And Safety Information
Pinouts for Auxiliary port modem cable HD-15 Pin 1 Ground Pin 2 Pin 3 Pin 4 Pin 5 Pin 6 (not used) Pin 7 Pin 8 Technical Speciﬁcations and Safety Information E-1 DB-25 Pin 1 (not used) Pin 2 Pin 3 Pin 4 Pin 5 Pin 6...
Page 328: Description
9.4” (w) x 7.9” (d) x 2.1” (h) Communications interfaces: The Netopia R6000 Series ADSL Router has an RJ-45 jack for ADSL line connections; an 8–port 10Base-T Ethernet hub for your LAN connection; a DB-9 Console port; and an HD-15 Auxiliary port that can be used as either a serial or LocalTalk port.
Page 329: Software And Protocols
Security: IP/IPX ﬁrewalls, UI password security, PAP, CHAP SNMP network management: SNMPv1, MIB-II (RFC 1213), Interface MIB (RFC 1229), Ethernet MIB (RFC 1643), AppleTalk MIB-I (1243), Netopia R6000 Series MIB Management/conﬁguration methods: HTTP (Web server), serial console, remote modem console, Telnet,...
Page 330: Agency Approvals
E-4 User’s Reference Guide Agency approvals North America Safety Approvals: United States – UL: 1950 Third Edition Canada – CSA: CAN/CSA-C22.2 No. 950-95 Network Safety: FCC Part 68 EMC: FCC Part 15 Class B International Safety Approvals: TS 001 (Australia) AS 3260 (Australia) Low Voltage (European directive) 72/23 EN60950 (Europe)
Page 331 It is the responsibility of users requiring service to report the need for service to our Company or to one of our authorized agents. Service can be obtained at Netopia, Inc., 2470 Mariner Square Loop, Alameda, California, 94501. Important This product was tested for FCC compliance under conditions that included the use of shielded cables and connectors between system components.
Page 332 E-6 User’s Reference Guide Repairs to the certiﬁed equipment should be made by an authorized Canadian maintenance facility designated by the supplier. Any repairs or alterations made by the user to this equipment or equipment malfunctions may give the telecommunications company cause to request the user to disconnect the equipment. Users should ensure for their own protection that the electrical ground connections of the power utility, telephone lines, and internal metallic water pipe system, if present, are connected together.
Page 333: Important Safety Instructions
Do not use the telephone to report a gas leak in the vicinity of the leak. Battery The Netopia R6000 Series’s lithium battery is designed to last for the life of the product. The battery is not user-serviceable. Caution! Danger of explosion if battery is incorrectly replaced.
Page 334 E-8 User’s Reference Guide...
Page 335: Appendix F - About Adsl
About ADSL F-1 The Netopia R6000 Series ADSL Router (Asymmetric Digital Subscriber Line) technology uses standard copper phone lines to send a digital signal between two points. Because the signal stays digital and does not go through the public switched telephone network. ADSL allows a much faster data connection. The ADSL Router provides the bandwidth needed for business applications such as e-mail, ﬁle transfer, Web browsing, corporate...
Page 336 F-2 User’s Reference Guide Like all ﬂavors of DSL, ADSL is distance sensitive. As the distance between the customer premises and the central ofﬁce increases, the available bandwidth decreases: Connection speeds for DSL typically range from 384 Kbps to 1.544 Mbps downstream and 128 Kbps upstream.
Page 337: Glossary 1
An AppleTalk address always includes a network number wherever two or more AppleTalk networks are connected together by routers. AURP (Apple Update-based Router Protocol): An enhanced AppleTalk routing protocol. AURP provides improved support for AppleTalk over wide area networks (WANs) and tunneling through non-AppleTalk (IP) networks.
Page 338 CNA (Calling Number Authentication): A security feature that will reject an incoming call if it does not match the Calling Number ﬁeld in one of the Netopia ISDN Router’s connection proﬁles. CND (Calling Number Delivery): Also known as caller ID, a feature that allows the called customer premises equipment (CPE) to receive a calling party’s directory number during the call establishment phase.
Page 339 LocalTalk networks are compatible with Phase II but are not extended because a single LocalTalk network cannot have multiple network numbers or multiple zone names. ﬁrmware: System software stored in a device’s memory that controls the device. The Netopia ISDN Router’s ﬁrmware can be updated.
Page 340 (not ISDN) telephone lines. Modem is a contraction of modulator-demodulator. NAT (Network Address Translation): A feature that allows communication between the LAN connected to the Netopia ISDN Router and the Internet using a single IP address, instead of having a separate IP address for each computer on the network.
Page 341 Resolves network number conﬂicts when two or more AppleTalk networks that may have duplicate network numbers are connected together. The Netopia ISDN Router lets you set up a range of network numbers into which remote AppleTalk network numbers are remapped.
Page 342 A physical or logical connection between a router and a network. Where a network only allows the use of one protocol, each physical connection corresponds to one logical router port. An example is the Netopia ISDN Router’s LocalTalk port. Where a network allows the use of several protocols, each physical connection may correspond to several logical router ports—one for each protocol used.
Page 343 WANs can span a state, a country, or even the world. WAN IP: In addition to being a router, the Netopia ISDN Router is also an IP address server. There are four protocols it can use to distribute IP addresses over the WAN which include: DHCP, BootP, IPCP, and MacIP. WAN IP is a feature for both the Small Ofﬁce and Corporate Netopia ISDN Router models.
Page 344 8 User’s Reference Guide...
Page 345: Index
10Base-T, connecting 4-3 add static route 10-9 ADSL deﬁned F-1 advanced conﬁguration features 8-23 AppleTalk 1-2 conﬁguring LocalTalk 13-7 routing table 14-9 setup 13-1 tunneling (AURP) 13-3 13-8 zones 13-6 13-7 AppleTalk Update-Based Routing Protocol, see AURP application software 4-2 ATMP 15-7 tunnel options 15-20 AURP...
Page 346 console conﬁguration 8-25 console-based management conﬁguring with 6-1 D. port 16-14 Data Encryption Standard (DES) 15-7 date and time setting 8-24 deciding on an ISP account 2-2 default proﬁle 8-20 default terminal emulation software settings 6- delayed conﬁguration 8-9 delete static route 10-10 DES 15-2 15-8 designing a new ﬁlter set 16-16...
Page 347 FTP sessions 16-26 further reading D-1 general statistics 14-4 Glossary GL-1 hard seeding 13-3 hops 14-9 how to reach us A-12 input ﬁlter 3 16-24 input ﬁlters 1 and 2 16-24 input ﬁlters 4 and 5 16-24 Internet addresses, see IP addresses Internet Protocol (IP) 10-1 Internetwork Packet Exchange (IPX) 12-1 IP address serving 10-11...
Page 348 Quick View 14-1 RADIUS 16-5 restarting the system 17-13 restricting telnet access 16-9 RIP 8-17 10-3 router to serve IP addresses to hosts 10-1 Routing Information Protocol (RIP) 12-2 routing tables AppleTalk 14-9 IP 10-7 SAP ﬁlter sets viewing and modifying 16-34...
Page 349 ATMP 15-20 PPTP 15-4 tunneling 13-3 15-2 updating ﬁrmware with TFTP 17-8 with XMODEM 17-11 updating Netopia’s ﬁrmware 17-8 uploading conﬁguration ﬁles 17-10 with TFTP 17-10 with XMODEM 17-12 user accounts 16-1 utilities and diagnostics 17-1 Virtual Private Networks (VPN) 15-1 VPN 15-1 allowing through a ﬁrewall 15-24...
Page 350 WAN event history 14-6 web-based management system information 14-16 XMODEM 17-10 XMODEM ﬁle transfers downloading conﬁguration ﬁles 17-12 updating ﬁrmware 17-11 uploading conﬁguration ﬁles 17-12 zone name 14-9...
Page 351: Limited Warranty And Limitation Of Remedies
Netopia warrants to you, the end user, that the Netopia R6000 Series ADSL Router (the “Product”) will be free from defects in materials and workmanship under normal use for a period of one (1) year from date of purchase. Netopia’s entire liability and your sole remedy under this warranty during the warranty period is that Netopia shall, at its option, either repair or replace the Product.
Page 352 User’s Reference Guide...

This manual is also suitable for:

R6131 R6120 R6161 R6000 series

Netopia R6100 Reference Manual

Chapter 1 - Introduction

Chapter 2 - Setting up Internet Services

Chapter 3 - Making the Physical Connections

Chapter 4 - Connecting to Your Local Area Network

Chapter 5 - Sharing the Connection

Chapter 6 - Console-Based Management

Chapter 7 - Easy Setup

Chapter 8 — WAN and System Conﬁguration

Chapter 9 — Dial Backup

Chapter 10 - IP Setup

Chapter 11 - Multiple Network Address Translation (Multinat)

Chapter 12 - IPX Setup

Chapter 13 - Appletalk Setup

Chapter 14 - Monitoring Tools

Chapter 15 — Virtual Private Networks (VPN)

Chapter 16 — Security

Chapter 17 — Utilities and Diagnostics

Appendix A - Troubleshooting

Appendix B - Understanding IP Addressing

Appendix C - Binary Conversion Table

Appendix D - Further Reading

Appendix E - Technical Specifications and Safety Information

Appendix E - Technical Speciﬁcations and Safety Information

Appendix F - about ADSL

Quick Links

Related Manuals for Netopia R6100

Summary of Contents for Netopia R6100