Barricade Broadband Router Wireless Broadband Router N Internet access via – • 10 Mbps WAN port connection to xDSL/Cable modem, or • RS-232 console port connection to ISDN/PSTN modem N Home networking via – • Three 10/100 Mbps Ethernet switch ports, or •...
Page 3
Barricade Wireless Broadband Router User Guide From SMC’s Barricade line of Broadband Routers 6 Hughes Irvine, CA 92618 Phone: (949) 707-2400 ™ Part Number: 01-111234-001 R02 August 2001...
Page 4
6 Hughes Irvine, CA 92618 All rights reserved. Printed in Taiwan Trademarks: SMC is a registered trademark; and Barricade is a trademark of SMC Networks, Inc. Other product and company names are trademarks or registered trademarks of their respective holders.
IMITED ARRANTY Limited Warranty Statement: SMC Networks, Inc. (“SMC”) warrants its products to be free from defects in workmanship and materials, under normal use and service, for the applicable warranty term. All SMC products carry a standard 90-day limited warranty from the date of purchase from SMC or its Authorized Reseller.
Page 6
* SMC will provide warranty service for one year following discontinuance from the active SMC price list. Under the limited lifetime warranty, internal and external power supplies, fans, and cables are covered by a standard one-year warranty from date of purchase. SMC Networks, Inc. 6 Hughes Irvine, CA 92618...
Page 7
• Consult the dealer or an experienced radio/TV technician for help EC Conformance Declaration - Class B SMC contact for these products in Europe is: SMC Networks Europe, Edificio Conata II, Calle Fructuós Gelabert 6-8, 2 08970 - Sant Joan Despí, Barcelona, Spain.
* Electrostatic Discharge according to EN 61000-4-2:1995 (Contact Discharge: ±4 kV, Air Discharge: ±8 kV) * Radio-frequency electromagnetic field according to EN 61000-4-3: 1996 (80 - 1000MHz with 1kHz AM 80% Modulation: 3V/m) * Electrical fast transient/burst according to EN 61000-4-4:1995(AC/DC power supply: ±1kV, Data/Signal lines: ±0.5kV) * Surge immunity test according to EN 61000-4-5:1995 (AC/DC Line to Line: ±1kV, AC/DC Line to Earth: ±2kV )
Safety Compliance Underwriters Laboratories Compliance Statement Important! Before making connections, make sure you have the correct cord set. Check it (read the label on the cable) against the following: Operating Voltage 120 Volts 240 Volts (Europe only) The unit automatically matches the connected input voltage. Therefore, no additional adjustments are necessary when connecting it to any input voltage within the range marked on the rear panel.
Page 10
OMPLIANCES 11. Wird das Gerät über einen längeren Zeitraum nicht benutzt, sollten Sie es vom Stromnetz trennen. Somit wird im Falle einer Überspannung eine Beschädigung vermieden. 12. Durch die Lüftungsöffnungen dürfen niemals Gegenstände oder Flüssigkeiten in das Gerät gelangen. Dies könnte einen Brand bzw. elektrischen Schlag aus- lösen.
HAPTER NTRODUCTION Congratulations on your purchase of the Barricade Wireless ™ Broadband Router. SMC is proud to provide you with a powerful yet simple communication device for connecting your local area network (wired or wireless LAN) to the Internet. For those who want to surf the Internet at the lowest possible cost, this Broadband Router provides a convenient and powerful solution.
EATURES AND ENEFITS Features and Benefits • Internet connection to xDSL or Cable modem via a 10 Mbps WAN port • Internet connection to ISDN TA or PSTN modem via an RS-232 console port • Local network connection via 10/100 Mbps Ethernet ports or 11 Mbps wireless interface (supporting up to 128 mobile users) •...
• Supports PPP dial-in connection using standard dial-up program • Easy setup through a Web browser on any operating system that supports TCP/IP • Compatible with all popular Internet applications Applications Many advanced applications are provided by the Wireless Barricade, such as: •...
Page 18
PPLICATIONS • Virtual Server If you have a fixed IP address, you can set up the Wireless Barricade to act as a virtual host for network address translation. Remote users access various services at your site using a constant IP address. Then, depending on the requested service (or port number), the Wireless Barricade can route the request to the appropriate server (at another internal IP address).
Page 19
• Virtual Private Network The Wireless Barricade supports three of the most commonly used VPN protocols – PPTP, L2TP and IPSec. These protocols allow remote users to establish a secure connection to their corporate network. If your service provider supports VPNs, then any of these protocols can be used to create an authenticated and encrypted tunnel for passing secure data over the Internet (i.e., a traditionally shared data network).
Before installing the Barricade that you have all the items listed under “Package Contents.” If any of the items are missing or damaged, contact your local SMC distributor. Also be sure that you have all the necessary cabling before installing the Wireless Barricade. After installing the Wireless Barricade, refer to the Web-based configuration program in Chapter 4 for information on configuring the router.
NSTALLATION Please fill out and return the Warranty Registration Card to SMC or register on SMC’s Web site at www.smc.com. The Barricade Wireless Broadband Router is covered by a limited lifetime warranty. Description of Hardware The Barricade Wireless Broadband Router can be connected to the Internet or to a remote site using its RJ-45 WAN port or RS-232 serial port.
Page 23
• Three RJ-45 ports for connection to a 10BASE-T/100BASE-TX Ethernet Local Area Network (LAN). These ports can auto- negotiate the operating speed to 10/100 Mbps, the mode to half/full duplex, and the pin signals to MDI/MDI-X (i.e., allowing these ports to be connected to any network device with straight-through cable).
Page 24
NSTALLATION The following figure shows the components of the Wireless Barricade: RESET Figure 2-1. Front and Rear Panels Item Description LEDs Power, WLAN, WAN and LAN port status indicators. (See Verify Port Status on page 2-11.) Wireless Dual antennas provide optimal reception by dynamically Antennas choosing the best antenna for each client.
Item Description Power Connect the included power adapter to this inlet. Inlet Warning: The included power adapter is DC 5V/2A. Using the wrong type of power adapter may cause damage. System Requirements You must have an Internet Service Provider (ISP) that meets the following minimum requirements: •...
NSTALLATION Connect the System The Wireless Barricade can be positioned at any convenient location in your office or home. No special wiring or cooling requirements are needed. You should, however comply with the following guidelines: • Keep the Wireless Barricade away from any heating devices. •...
3. Connect your printer: Use standard parallel printer cable to connect your printer to the printer port on the Wireless Barricade. 4. Power on: Connect the power adapter to the Wireless Barricade. Internet Figure 2-2. Connecting the Wireless Barricade Attach to Your Network Using Ethernet Cabling The three LAN ports on the Wireless Barricade can auto-negotiate the connection speed to 10 Mbps Ethernet or 100 Mbps Fast Ethernet, as well as the transmission mode to half-duplex or...
NSTALLATION Warning: Do not plug a phone jack connector into any RJ-45 port. This may damage the Wireless Barricade. Instead, use only twisted-pair cables with RJ-45 connectors that conform with FCC standards. Notes: 1. Use 100-ohm shielded or unshielded twisted-pair cable with RJ-45 connectors for all connections.
Page 29
Computers equipped with a wireless adapter can communicate with each other as an independent wireless LAN by configuring each computer to the same radio channel. However, the Wireless Barricade can provide access to your wired/wireless LAN or to the Internet for all wireless workstations. Each wireless PC in this network infrastructure can talk to any computer in the wireless group via a radio link, or access other computers or network resources in the wired LAN infrastructure or over the Internet via...
NSTALLATION Attach the Wireless Barricade to the Internet If Internet services are provided through an xDSL or Cable modem, use unshielded or shielded twisted-pair Ethernet cable (Category 3 or greater) with RJ-45 plugs to connect the broadband modem directly to the WAN port on the Wireless Barricade. Use either straight-through or crossover cable depending on the port type provided by the modem (see Appendix B).
Connecting the Power Adapter Plug the power adapter into the power socket on the Wireless Barricade, and the other end into a power outlet. Check the indicator marked Power on the front panel to be sure it is on. If the Power indicator does not light up, refer to Troubleshooting in Appendix A.
ONFIGURING TCP/IP Configuration To access the Internet through the Barricade Router, you must configure the network settings of the computers on your LAN to use the same IP subnet as the Wireless Barricade. The default network settings for the Wireless Barricade are: IP Address: 192.168.2.1 Subnet Mask: 255.255.255.0 Note: These settings can be changed to fit your network...
RINTER LIENT NSTALLATION Printer Client Installation If you need to provide print services for devices attached to the Wireless Barricade, then install the Port Monitor program from the CD (for Windows 95/98/NT), and configure the print server on each network station. The Wireless Barricade print server supports Windows 95/98/ME/NT/2000 and Unix platforms.
HAPTER ONFIGURING THE ARRICADE After you have configured TCP/IP on a client computer, you can use a Web browser to configure the Barricade Wireless ™ Broadband Router. The Wireless Barricade can be configured by any Java-supported browser including Internet Explorer 4.0 or above, or Netscape Navigator 4.0 or above.
AVIGATING THE Navigating the Web Browser Interface The Wireless Barricade’s management interface includes four key menus – Status, Help, Tools, and Setup. The Status and Help menus provide general information on the current settings and how to configure the Wireless Barricade. The Setup menu is used to configure the LAN, WAN and wireless interface, as well as other advanced functions.
Main Menu Using the Web management interface, you can define system parameters, manage and control the Wireless Barricade and its ports, or monitor network conditions. The following table briefly describes the selections available from this program. Menu Setup Menu Change Password Set Time Zone Wireless Advanced Settings...
Page 38
Menu Status Menu INTERNET GATEWAY INFORMATION Security Log DHCP Client Log Tools Menu Reset Barricade Restore Factory Defaults Restores all configuration settings to the Update Firmware Help Menu Description Displays connection status, key interface settings, as well as the firmware and hardware version numbers.
ONFIGURING THE ARRICADE Networking and Client Services Use the Setup menu to configure the LAN interface (including TCP/IP parameters for the Wireless Barricade’s gateway address, DHCP address pool for dynamic client address allocation), the WAN connection options, DNS domain name mapping, the wireless interface, and other advanced services.
ETWORKING AND LIENT Change Password Use this menu to restrict management access based on a specific password. You must enter a password to access the configuration options provided by the menus. By default, there is no password. So, please assign a password to the Administrator as soon as possible, and store it in a safe place.
Set Time Zone Set the time zone for the Wireless Barricade. This information is used for log entries and client filtering. LAN Gateway and DHCP Settings Configure the gateway address of the Wireless Barricade. To dynamically assign the IP address for client PCs, enable the DHCP Server, set the lease time, and then specify the address range.
ETWORKING AND LIENT from 0–255, while the last field is the host portion and can be from 1–254. However, remember not to include the gateway address of the Wireless Barricade in the client address pool. The Domain Name is optional, but this information may be specified so that it can be passed to the client PCs.
ONFIGURING THE ARRICADE Dynamic IP Address – DHCP The Host Name is optional, but may be required by some ISPs. The default MAC address is set to the WAN’s physical interface on the Wireless Barricade. Use this address when registering for Internet service, and do not change it unless required by your ISP.
ETWORKING AND LIENT Note: You may need a fixed address if you want to provide Internet services, such as a Web server or FTP server. PPP over Ethernet – PPPoE Enter the PPPoE user name and password assigned by your ISP. The Service Name is normally optional, but may be required by some providers.
ONFIGURING THE ARRICADE Dial-up on Demand – Modem If you are accessing the Internet via an ISDN TA or PSTN modem attached to the serial port on the Wireless Barricade, then you must specify your account information on this screen as described below. Check if you only use a dial-up modem to connect to the Internet.
ETWORKING AND LIENT IP address for you to use, mark “Yes” for this item and enter the IP address and subnet mask. Note: If your ISP has given you a secondary phone number, or if you have a secondary Internet service account, then fill in the relevant fields under “Secondary Dial-up.”...
ONFIGURING THE ARRICADE Wireless Configuration To configure the Wireless Barricade as a wireless access point for wireless clients (either stationary or roaming), all you need to do is define the radio channel, the domain identifier, and encryption options. You can use the Setup Wizard by clicking the “Enter” button at the bottom of the page and changing the required settings, or you can select “Channel and SSID”...
ETWORKING AND LIENT Encryption If you are transmitting sensitive data across wireless channels, you should enable encryption. Encryption requires you to use the same set of encryption/decryption keys for the Wireless Barricade and all of your wireless clients. You can choose between standard 64-bit or the more robust 128-bit encryption keys.
Page 49
ONFIGURING THE ARRICADE You can automatically generate encryption keys or you can manually enter the keys. For automatic 64-bit security, you enter a passphrase that is used to create four keys (as shown below). The automatic 128-bit security generates a single key by entering a passphrase.
ETWORKING AND LIENT Configuring Client Services The Wireless Barricade includes a broad range of client services, including firewall protection, network address translation, virtual server, connection support for special applications, and restricted Internet access for specified clients. You can configure these functions using the Setup Wizard by clicking “Enter”...
ONFIGURING THE ARRICADE Virtual Server If you configure the Wireless Barricade as a virtual server, remote users accessing services such as Web or FTP at your local site via public IP addresses can be automatically redirected to local servers configured with private IP addresses. In other words, depending on the requested service (TCP/UDP port number), the Wireless Barricade redirects the external service request to the appropriate server (located at another internal IP address).
ETWORKING AND LIENT HTTP request from outside users will be transferred to 192.168.2.2. Therefore, by just entering the IP Address provided by the ISP, Internet users can access the service they need at the local address to which you redirect them. Some of the more common TCP service ports include: HTTP: 80, FTP: 21, Telnet: 23 and POP3: 110.
Specify the port normally associated with an application in the “Trigger Port” field, select the protocol type as TCP or UDP, then enter the public ports associated with the trigger port to open them for inbound traffic. Note: If an application still cannot function correctly after enabling multiple ports via the Special Application screen, you may have to open the client PC for full Internet access using the DMZ Host option on the “Misc”...
ETWORKING AND LIENT MAC Filtering You can filter Internet access for local wired and wireless clients based on MAC address. MAC Address Control: Every client that connects to the network has a unique MAC (Media Access Control) address on his or her Ethernet adapter.
Page 55
When a wired client is allowed to “Connect” to the Wireless Barricade, it means that it has full access to the Internet and network resources. When a wired client is not allowed to “Connect” to the Wireless Barricade, it means that it CAN communicate with the other clients on the wired LAN, but CANNOT: •...
Page 56
ETWORKING AND LIENT When a wireless client is NOT allowed to “Associate” to the wireless LAN, it means that it CANNOT: • Communicate with any others clients on the LAN (neither wired nor wireless) • Connect to the Internet • Use the Print Server function •...
ONFIGURING THE ARRICADE Miscellaneous Settings – Misc The Wireless Barricade also allows you set a timeout for administrator access, prevent external PINGs from causing security problems, set up remote management, and configure a Virtual DMZ Host. Administrator Time-out – Enter a time-out setting in minutes for administrator access protection.
Page 58
ETWORKING AND LIENT Enter the IP address of a DMZ host to this screen. Adding a client to the DMZ (Demilitarized Zone) may expose your local network to a variety of security risks, so only use this option as a last resort. 4-24 ERVICES...
Viewing Network and Device Status You can use the following screen to display WAN/WLAN/LAN interfaces, firmware and hardware version numbers, any illegal attempts to access your network, as well as information on all DHCP clients connected to your network. The following items are included in this screen: Field INTERNET Release...
SING YSTEM OOLS Field Security Log Save Clear DHCP Client Log Using System Tools You can use the “Tools” menu to reboot the Wireless Barricade, restore factory settings, or update firmware. Note: If you use the Reset button on the front panel, the Wireless Barricade performs a power reset and restores the factory settings.
ONFIGURING If you have not previously installed the TCP/IP protocol on your client PCs, refer to the following section. If you need information on how to configure a TCP/IP address on a PC, refer to “Setting TCP/IP to Work with the Barricade” on page 5-3. Installing TCP/IP Protocol in Your PC 1.
Page 62
TCP/IP P NSTALLING 5. Select the Microsoft item in the manufacturers list. And choose TCP/IP in the Network Protocols. Click the OK button to return to the Network window. 6. The TCP/IP protocol will be listed in the Network window. Click OK to complete the install procedure and restart your PC to enable the TCP/IP protocol.
Setting TCP/IP to Work with the Barricade 1. Click the Start button and choose Settings, then click Control Panel. 2. Double click the Network icon. Select the TCP/IP line that has been assigned to your network card in the Configuration tab of the Network window.
TCP/IP ETTING Dynamic IP Allocation via a DHCP Server Select Obtain an IP address automatically in the IP Address tab. Do not input any values under the Gateway tab, and choose Disable DNS in the DNS Configuration tab. These settings will be automatically configured by the DHCP server.
Manual IP Configuration 1. Select Specify an IP address in the IP Address tab. Select an IP address based on the default network 192.168.2.X (where X is between 1 and 254), and use 255.255.255.0 for the subnet mask. 2. In the Gateway tab, add the IP address of the Wireless Barricade (default: 192.168.2.1) in the New gateway field and click Add.
TCP/IP ETTING 4. After finishing TCP/IP setup, click OK, and then reboot the computer. After that, set up other PCs on the LAN according to the procedures described above. Verifying Your TCP/IP Connection After installing the TCP/IP communication protocol and configuring an IP address in the same network with the Barricade, you can use the Ping command to check if your computer is successfully connected to the Wireless Barricade.
Page 67
TCP/IP ONFIGURING LIENT If you can successfully Ping the Wireless Barricade, then you are now ready to connect to the Internet!
ONFIGURING If you want to use the print server built into the Wireless Barricade, then you must first install the Port Monitor program as described in the following section for Windows 95/98/ME/NT/ 2000. To configure the Wireless Barricade Print Server for Windows 95/98/ME/NT/2000 or Unix, see “Configure the Print Server”...
Page 70
NSTALL THE RINTER 2. The next screen indicates that the print client uses TCP/IP network protocol to monitor print requests. Click Next. 3. Select the destination folder and click on the Next button. The setup program will then begin to install the programs into the destination folder.
Page 71
4. Select the Program Folder that will contain the program icon for uninstalling the port monitor, and then click Next. 5. Enter the printer port name that will be used to identify the port monitor in your system, and press Next. 6.
ONFIGURE THE RINT Configure the Print Server The Wireless Barricade’s print server supports Microsoft Windows 95/98/ME/NT/2000 and Unix. If you are using Windows 95/98/ ME/NT/2000, first install the port monitor as described in the previous section before adding the Wireless Barricade’s print server to your operating system.
Page 73
3. Specify the printer type attached to the Wireless Barricade. 4. Select the monitored port. The default port name is “SMC100” and then click the Configure Port button. 5. Enter the IP address of the Wireless Barricade and click OK, and then click Next in the Add Printer Wizard dialog box.
ONFIGURE THE RINT Configure the Network Printer in Windows NT 1. On a Windows NT platform, open the Printers window in the My Computer menu, and double-click the Add Printer icon. 2. Follow the prompts to add a local printer to your system. ERVER...
Page 75
3. Select the monitored port. The default port name is “SMC100.” Then click the Configure Port button. 4. Enter the IP address of the Wireless Barricade and click OK, and then click Next in the Add Printer Wizard dialog box. 5.
ONFIGURE THE RINT Configure the Network Printer in Unix Systems Follow the traditional configuration procedure on Unix platforms to set up the Wireless Barricade print server. The printer name is “lpt1.” ERVER...
This appendix describes common problems you may encounter and possible solutions. The Wireless Barricade can be easily monitored through panel indicators to identify problems. If you cannot resolve any connection problems after checking the indicators, then refer to the other sections in the following table. Symptom LED Indicators Power LED is Off...
Page 78
ROUBLESHOOTING Symptom LED Indicators Link LED is Off Network Connection Problems Cannot Ping the Wireless Barricade from the attached LAN, or the Wireless Barricade cannot Ping any device on the attached LAN Troubleshooting Chart Action • Verify that the Wireless Barricade and attached device are powered on.
Page 79
Symptom Mobile users cannot access the Wireless Barricade Management Problems Cannot connect using the Web browser Forgot or lost the password Printer Server The printer cannot print or prints garbage Troubleshooting Chart Action • Make sure that the Wireless Barricade and all mobile users are configured to use the same radio channel, wireless domain (SSID), and encryption keys.
Ethernet Cable Specifications Cable 10BASE-T 100BASE-TX Twisted-pair Cable Caution: DO-NOT plug a phone jack connector into any RJ-45 port. Use only twisted-pair cables with RJ-45 connectors that conform with FCC standards. For 10BASE-T/100BASE-TX connections, a twisted-pair cable must have two pairs of wires. Each wire pair is identified by two different colors.
ABLES Figure B-1 illustrates how the pins on the RJ-45 connector are numbered. Be sure to hold the connectors in the same orientation when attaching the wires to the pins. Figure B-1. RJ-45 Connector Pin Numbers Straight-through Cable Straight-Through RJ-45 Pin Assignments End 1 1 (TD+) 2 (TD-)
RJ-45 Port Pin Assignments All LAN ports on the Wireless Barricade support automatic MDI/ MDI-X configuration. This means that the pin signals in use will depend on whether the LAN port is operating in MDI or MDI-X mode. However, the WAN port is configured only for MDI-X mode. MDI Signal Name* Transmit Data (TD+) Transmit Data (TD-)
ABLES Serial Port Pin Assignments The DB-9 serial port on the rear panel is used to connect the Wireless Barricade to an ISDN TA or PSTN modem. The pin assignments used to connect to this port are provided in the following tables.
Serial Port to 9-Pin COM Port on PC Barricade’s 9-Pin Serial Port 1 DCD 2 RXD 3 TXD 4 DTR 5 SGND 6 DSR 7 RTS 8 CTS 9 RI Serial Port to 25-Pin DCE Port on Modem Barricade’s 9-Pin Serial Port Serial Port to 25-Pin DTE Port on PC Barricade’s 9-Pin...
ABLES Printer Port Pin Assignments The DB-25 parallel port on the Wireless Barricade’s rear panel is used to connect the Wireless Barricade to a printer. When a printer is attached to this port, any PCs attached to the Wireless Barricade’s LAN ports can pass files to the printer. The pin assignments used to connect to the printer port are provided in the following table.
WAN Interface 10BASE-T, 1 RJ-45 port Serial, 1 RS-232 DB-9 connector LAN Interface 10BASE-T/100BASE-TX 3 RJ-45 ports WLAN Interface Standard: IEEE 802.11b, Direct Sequence Spread Spectrum (DSSS) Transmission Rate: 11 Mbps, automatic fallback to 5.5, 2 or 1 Mbps Maximum Channels: US/Canada: 11, Europe (ETSI): 13 Range: Up to 1000 ft (304.8m) Frequency: (US/Canada/Europe) 2.400-2.4835 GHz Sensitivity: 1, 2, 5.5 Mbps: -80 dBm;...
Page 88
PECIFICATIONS Management Web management Advanced Features Dynamic IP Address Configuration – DHCP, DNS Firewall – Client privileges, hacker prevention and logging, NAT Virtual Private Network – PPTP, L2TP, IPSec pass-through Backup Internet Connection – Dial-on-demand via secondary WAN port Print server Internet Standards ARP (RFC 826), IP (RFC 791), ICMP (RFC 792), UDP (RFC 768), TCP (RFC 793), Telnet (RFC 854-859), MD5 (RFC 1321), BOOTP...
Page 89
Temperature Operating 32 to 104°F (0 to 40°C) Storage -40 to 158°F (-40 to 70°C) Humidity 5% to 95% (noncondensing) Compliances CE Mark Emissions FCC Class B VCCI Class B Industry Canada Class B EN55022 (CISPR 22) Class B C-Tick - AS/NZS 3548 (1995) Class B ETS 300 328 MPT RCR STD-33 EN 61000-3-2/3...
Page 94
FOR TECHNICAL SUPPORT, CALL: From U.S.A. and Canada (24 hours, 7 days a week) (800) SMC-4-YOU; (949) 707-2400; (949) 707-2460 (Fax) From Europe (8:00 AM - 5:30 PM UK Greenwich Mean Time) 44 (0) 1188 748740; 44 (0) 1189 748741 (Fax) INTERNET E-mail addresses: techsupport@smc.com...
Need help?
Do you have a question about the Barricade SMC7004AWBR and is the answer not in the manual?
Questions and answers