SMC Networks SMC Barricade SMC7804WBRA User Manual

54mbps wireless 4-port router with built-in adsl modem
Hide thumbs Also See for SMC Barricade SMC7804WBRA:
Table of Contents

Advertisement

Quick Links

Advertisement

Table of Contents
loading

Summary of Contents for SMC Networks SMC Barricade SMC7804WBRA

  • Page 2 0ESV :LUHOHVV SRUW 5RXWHU ZLWK EXLOWLQ $'6/ 0RGHP )URP 60&¶V OLQH RI DZDUGZLQQLQJ FRQQHFWLYLW\ VROXWLRQV  7HVOD ,UYLQH &$  3KRQH   'HFHPEHU  5 )...
  • Page 3 SMC Networks, Inc. 38 Tesla Irvine, CA 92618 All rights reserved. Trademarks: SMC is a registered trademark; and Barricade is a trademark of SMC Networks, Inc. Other product and company names are trademarks or registered trademarks of their respective holders.
  • Page 4 Limited Warranty Statement: SMC Networks, Inc. (“SMC”) warrants its products to be free from defects in workmanship and materials, under normal use and service, for the applicable warranty term. All SMC products carry a standard 90-day limited warranty from the date of purchase from SMC or its Authorized Reseller. SMC may, at its own discretion, repair or replace any product not operating as warranted with a similar or functionally equivalent product, during the applicable warranty term.
  • Page 5 * SMC will provide warranty service for one year following discontinuance from the active SMC price list. Under the limited lifetime warranty, internal and external power supplies, fans, and cables are covered by a standard one-year warranty from date of purchase. SMC Networks, Inc. 38 Tesla Irvine, CA 92618...
  • Page 6: Federal Communication Commission Interference Statement

    Federal Communication Commission Interference Statement This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses and can radiate radio frequency energy and, if not installed and used in accordance with instructions, may cause harmful interference to radio communications.
  • Page 7 OMPLIANCES The REN is used to determine the quantity of devices that may be connected to the telephone line. Excessive RENs on the telephone line may result in the devices not ringing in response to an incoming call. In most, but not all areas, the sum of the RENs should not exceed five (5.0).
  • Page 8: Ec Conformance Declaration

    North Ryde, NSW Australia Phone: 61-2-88757887 Fax: 61-2-88757777 EC Conformance Declaration SMC contact for these products in Europe is: SMC Networks Europe, Edificio Conata II, Calle Fructuós Gelabert 6-8, 2o, 4a, 08970 - Sant Joan Despí, Barcelona, Spain. Marking by the above symbol indicates compliance with the Essential Requirements of the R&TTE Directive of the European Union (1999/5/EC).
  • Page 9: Safety Compliance

    OMPLIANCES Safety Compliance Wichtige Sicherheitshinweise (Germany) 1. Bitte lesen Sie diese Hinweise sorgfältig durch. 2. Heben Sie diese Anleitung für den späteren Gebrauch auf. 3. Vor jedem Reinigen ist das Gerät vom Stromnetz zu trennen. Verwenden Sie keine Flüssigoder Aerosolreiniger. Am besten eignet sich ein angefeuchtetes Tuch zur Reinigung.
  • Page 10: Table Of Contents

    Introduction ........1-1 About the Barricade ......... 1-1 Features and Benefits .
  • Page 11 ABLE OF ONTENTS Configuring the Barricade ..... . 4-1 Navigating the Management Interface ......4-2 Making Configuration Changes .
  • Page 12 Troubleshooting ......A-1 Cables ........B-1 Ethernet Cable .
  • Page 13 ABLE OF ONTENTS...
  • Page 14: Introduction

    Congratulations on your purchase of the ADSL Barricade TM g, hereafter referred to as the "Barricade". We are proud to provide you with a powerful yet simple communication device for connecting your local area network (LAN) to the Internet. For those who want to surf the Internet in the most secure way, this router provides a convenient and powerful solution.
  • Page 15: Applications

    NTRODUCTION • Firewall with Stateful Packet Inspection, client privileges, intrusion detection, and NAT • NAT also enables multi-user Internet access via a single user account, and virtual server functionality (providing protected access to Internet services such as web, FTP, e-mail, and Telnet) •...
  • Page 16 • Shared IP Address The Barricade provides Internet access for up to 253 users via a single shared IP address. Using only one ISP account, multiple users on your network can browse the web at the same time. • Virtual Server If you have a fixed IP address, you can set the Barricade to act as a virtual host for network address translation.
  • Page 17 NTRODUCTION • Virtual Private Network (VPN) The Barricade supports three of the most commonly used VPN protocols — PPTP, L2TP, and IPSec. These protocols allow remote users to establish a secure connection to their corporate network. If your service provider supports VPNs, then these protocols can be used to create an authenticated and encrypted tunnel for passing secure data over the Internet (i.e., a traditionally shared data network).
  • Page 18: Installation

    Before installing the ADSL Barricade TM g, verify that you have all the items listed under the Package Contents list. If any of the items are missing or damaged, contact your local distributor. Also be sure that you have all the necessary cabling before installing the Barricade.
  • Page 19: System Requirements

    NSTALLATION System Requirements You must meet the following minimum requirements: • ADSL line installed by your Internet Service Provider. • A PC using a fixed IP address or dynamic IP address assigned via DHCP, as well as a gateway server address and DNS server address from your service provider.
  • Page 20 The Barricade includes an LED display on the front panel for system power and port indications that simplifies installation and network troubleshooting. It also provides the following ports on the rear panel: LAN Ports Figure 2-1. Rear Panel Item Description LAN Ports Fast Ethernet ports (RJ-45).
  • Page 21: Led Indicators

    NSTALLATION LED Indicators The power and port LED indicators on the front panel are illustrated by the following figure and table. Figure 2-2. Front Panel Status ADSL Flashing ADSL Flashing DATA WLAN Flashing (4 LEDs) Flashing ADSL BARRICADE Description The Barricade is receiving power. Normal operation. Power off or failure.
  • Page 22: Isp Settings

    ISP Settings Please collect the following information from your ISP before setting up the Barricade: • ISP account user name and password • Protocol, encapsulation and VPI/VCI circuit numbers • DNS server address • IP address, subnet mask and default gateway (for fixed IP users only) Connect the System The Barricade can be positioned at any convenient location in your office or home.
  • Page 23: Phone Line Configuration

    NSTALLATION Phone Line Configuration Installing a Full-Rate Connection If you are using a full-rate (G.dmt) connection, your service provider will attach the outside ADSL line to a data/voice splitter. In this case you can connect your phones and computer directly to the splitter as shown below: Plain Old Telephone System (POTS)
  • Page 24: Installing A Splitterless Connection

    Installing a Splitterless Connection If you are using a splitterless (G.lite) connection, then your service provider will attach the outside ADSL line directly to your phone system. In this case you can connect your phones and computer directly to the incoming ADSL line, but you will have to add low-pass filters to your phones as shown below: Plain Old...
  • Page 25: Connect The Power Adapter

    NSTALLATION Attach to Your Network Using Ethernet Cabling The four LAN ports on the Barricade auto-negotiate the connection speed to 10 Mbps Ethernet or 100 Mbps Fast Ethernet, as well as the transmission mode to half duplex or full duplex. Use RJ-45 cables to connect any of the four LAN ports on the Barricade to an Ethernet adapter on your PC.
  • Page 26 HAPTER ONFIGURING LIENT After completing hardware setup by connecting all your network devices, you need to configure your computer to connect to the Barricade. See: “Windows 98/Me” on page 3-2 “Windows NT 4.0” on page 3-7 “Windows 2000” on page 3-11 “Windows XP”...
  • Page 27: Configuring Client Pc

    ONFIGURING LIENT TCP/IP Configuration To access the Internet through the Barricade, you must configure the network settings of the computers on your LAN to use the same IP subnet as the Barricade. The default IP settings for the Barricade are: IP Address: 192.168.2.1 Subnet Mask: 255.255.255.0 Note: These settings can be changed to fit your network requirements,...
  • Page 28 2. In Control Panel, double-click the Network icon. 3. In the Network window, under the Configuration tab, double-click the TCP/IP item listed for your network card. 4. In the TCP/IP window, select the IP Address tab. If “Obtain an IP address automatically”...
  • Page 29: Disable Http Proxy

    ONFIGURING LIENT 5. Windows may need your Windows 95/98/Me CD to copy some files. After it finishes copying, it will prompt you to restart your system. Click Yes and your computer will restart. TCP/IP Configuration Setting Primary DNS Server Secondary DNS Server Default Gateway Host Name Disable HTTP Proxy...
  • Page 30 3. In the Internet Options window, click the Connections tab. Next, click the LAN Settings... button. 4. Clear all the check boxes. 5. Click OK, and then click OK again to close the Internet Options window. 98/M INDOWS...
  • Page 31: Obtain Ip Settings From Your Adsl Router

    ONFIGURING LIENT Obtain IP Settings from Your ADSL Router Now that you have configured your computer to connect to your Barricade, it needs to obtain new network settings. By releasing old DHCP IP settings and renewing them with settings from your Barricade, you can also verify that you have configured your computer correctly.
  • Page 32: Windows Nt 4.0

    Windows NT 4.0 1. On the Windows desktop, click Start/Settings/Control Panel. 2. Double-click the Network icon. NT 4.0 INDOWS...
  • Page 33 ONFIGURING LIENT 3. In the Network window, Select the Protocols tab. Double-click TCP/IP Protocol. 4. When the Microsoft TCP/IP Properties window open, select the IP Address tab. 5. In the Adapter drop-down list, be sure your Ethernet adapter is selected. 6.
  • Page 34: Disable Http Proxy

    8. Windows may copy some files, and will then prompt you to restart your system. Click Yes and your computer will shut down and restart. TCP/IP Configuration Setting Default Gateway Primary DNS Server Secondary DNS Server Host Name Disable HTTP Proxy You need to verify that the “HTTP Proxy”...
  • Page 35 ONFIGURING LIENT 2. In the Command Prompt window, type “IPCONFIG /RELEASE” and press the ENTER key. 3. Type “IPCONFIG /RENEW” and press the ENTER key. Verify that your IP Address is now 192.168.2.xxx, your Subnet Mask is 255.255.255.0 and your Default Gateway is 192.168.254. These values confirm that your Barricade is functioning.
  • Page 36: Windows 2000

    Windows 2000 1. On the Windows desktop, click Start/Settings/Network and Dial-Up Connections. 2. Click the icon that corresponds to the connection to your Barricade. 3. The connection status screen will open. Click Properties. 4. Double-click Internet Protocol (TCP/IP). 5. If “Obtain an IP address automatically”...
  • Page 37: Disable Http Proxy

    ONFIGURING LIENT Disable HTTP Proxy You need to verify that the “HTTP Proxy” feature of your web browser is disabled. This is so that your browser can view the Barricade’s HTML configuration pages. Determine which browser you use and refer to “Internet Explorer”...
  • Page 38 3. Type “IPCONFIG /RENEW” and press the ENTER key. Verify that your IP Address is now 192.168.2.xxx, your Subnet Mask is 255.255.255.0 and your Default Gateway is 192.168.2.254. These values confirm that your ADSL Router is functioning. 4. Type “EXIT” and press the ENTER key to close the Command Prompt window.
  • Page 39: Windows Xp

    ONFIGURING LIENT Windows XP 1. On the Windows desktop, click Start/Control Panel. 2. In the Control Panel window, click Network and Internet Connections. 3. The Network Connections window will open. Double-click the connection for this device. 4. On the connection status screen, click Properties. 5.
  • Page 40 2. In the Command Prompt window, type “IPCONFIG/RELEASE” and press the ENTER key. 3. Type “IPCONFIG /RENEW” and press the ENTER key. Verify that your IP Address is now 192.168.2.xxx, your Subnet Mask is 255.255.255.0 and your Default Gateway is 192.168.2.254. These values confirm that your ADSL router is functioning.
  • Page 41: Configuring Your Macintosh Computer

    ONFIGURING LIENT Configuring Your Macintosh Computer You may find that the instructions here do not exactly match your operating system. This is because these steps and screenshots were created using Mac OS 10.2. Mac OS 7.x and above are similar, but may not be identical to Mac OS 10.2.
  • Page 42: Disable Http Proxy

    3. If “Using DHCP Server” is already selected in the Configure field, your computer is already configured for DHCP. If not, select this Option. 4. Your new settings are shown on the TCP/IP tab. Verify that your IP Address is now 192.168.2.xxx, your Subnet Mask is 255.255.255.0 and your Default Gateway is 192.168.2.1.
  • Page 43 ONFIGURING LIENT 3. Uncheck all check boxes and click OK. 3-18...
  • Page 44: Configuring The Barricade

    HAPTER ONFIGURING THE ARRICADE After you have configured TCP/IP on a client computer, you can configure the Barricade using Internet Explorer 5.0 or above. To access the Barricade’s management interface, enter the default IP address of the Barricade in your web browser: http://192.168.2.1. Enter the default password: “smcadmin”, and click “LOGIN”.
  • Page 45: Navigating The Management Interface

    ONFIGURING THE ARRICADE Navigating the Management Interface The Barricade’s management interface consists of a Setup Wizard and an Advanced Setup section. Setup Wizard: Use the Setup Wizard if you want to quickly set up the Barricade. Go to “Setup Wizard” on page 4-3. Advanced Setup: Advanced Setup supports more advanced functions like hacker attack detection, IP and MAC address filtering, virtual server setup, virtual DMZ host, as well as other functions.
  • Page 46: Setup Wizard

    Setup Wizard Time Zone Click on “Setup Wizard”. The first item in the Setup Wizard is Time Zone. For accurate timing of log entries and system events, you need to set the time zone. Select your time zone from the drop-down list. If your area requires it, check to enable the clock for daylight saving changes, and enter the Daylight Savings Time start and end dates for your location.
  • Page 47: Parameter Setting

    ONFIGURING THE ARRICADE Parameter Setting Select your Country and Internet Service Provider. This will automatically configure the Barricade with the correct Protocol, Encapsulation and VPI/VCI settings for your ISP. If your Country or Internet Service Provider is not listed you will need to manually enter settings.
  • Page 48: Confirm

    Confirm The Confirm page shows a summary of the configuration parameters. Check ADSL operation mode (WAN), Network Layer Parameters (WAN) and ISP parameters are correct. Parameter ADSL Operation Mode (WAN) Protocol VPI/VCI AAL5 Encapsulation Shows the packet encapsulation type. Go to page 4-20 for Network Layer Parameters (WAN) IP Address...
  • Page 49 ONFIGURING THE ARRICADE Parameter DHCP Parameters Function Default Gateway Subnet Mask Name Server 1 Name Server 2 Start IP Address Number of IP If the parameters are correct, click “APPLY” to save these settings. Your Barricade is now set up. Go to “Troubleshooting” on page A-1 if you cannot make a connection to the Internet.
  • Page 50: Parameter Setting - Country Or Isp Not Listed

    ETUP IZARD Parameter Setting - Country or ISP Not Listed If your Country or Internet Service Provider is not listed select “Others”. This will allow you to manually configure your ISP settings. For manual configuration you will need to know the Protocol, DNS Server, Encapsulation and VPI/VCI settings used by your ISP.
  • Page 51: Isp Use Rfc1483 Bridging - Parameter Setting

    ONFIGURING THE ARRICADE ISP use RFC1483 Bridging - Parameter Setting Enter the RFC1483 Bridging settings provided by your ISP. Note: You have three different bridging modes to select from: RFC1483 Bridging - Select this option if you want the Barricade to be transparent and pass the public IP address to a single PC, Server or Firewall.
  • Page 52 Parameter VPI/VCI Encapsulation Click “NEXT” to continue to the “Confirm” settings page. Go to “Confirm” on page 4-5 in the manual for details about the “Confirm” settings page. Description Enter the Virtual Path Identifier (VPI) and Virtual Circuit Identifier (VCI) supplied by your ISP. Select the encapsulation used by ISP from the drop down list.
  • Page 53: Isp Use Pppoe - Parameter Setting

    ONFIGURING THE ARRICADE ISP use PPPoE - Parameter Setting Enter the PPPoE (Point-to-Point Protocol over Ethernet) settings provided by your ISP. Parameter DNS Server VPI/VCI Encapsulation Username Password Confirm Password Click “NEXT” to continue to the “Confirm” settings page. Go to “Confirm” on page 4-5 in the manual for details about the “Confirm”...
  • Page 54: Isp Use Pppoa - Parameter Setting

    ISP use PPPoA - Parameter Setting Enter the PPPoA (Point-to-Point Protocol over ATM) settings provided by your ISP. Parameter DNS Server VPI/VCI Encapsulation Username Password Confirm Password Click “NEXT” to continue to the “Confirm” settings page. Go to “Confirm” on page 4-5 in the manual for details about the “Confirm”...
  • Page 55: Isp Use Rfc1483 Routing - Parameter Setting

    ONFIGURING THE ARRICADE ISP use RFC1483 Routing - Parameter Setting Enter the RFC1483 Routing settings provided by your ISP. Parameter IP Address Subnet Mask Default Gateway DNS Server VPI/VCI Encapsulation Click “NEXT” to continue to the “Confirm” settings page. Go to “Confirm” on page 4-5 in the manual for details about the “Confirm”...
  • Page 56: Advanced Setup

    Advanced Setup Click on the Advanced Setup picture. The left-hand side displays the main menu and the right-hand side shows descriptive information. The advanced management interface contains 13 main menu items as described in the following table. Menu Description System Sets the local time zone, the password for administrator access, and the IP address of a PC that will be allowed to manage the Barricade remotely.
  • Page 57 ONFIGURING THE ARRICADE Menu Description DDNS Dynamic DNS provides users on the Internet with a method to tie their domain name(s) to a Dynamic or Static IP address. UPnP Allows you to enable or disable the Universal Plug and Play function. Tools Contains options to backup &...
  • Page 58: System

    DVANCED ETUP System Time Settings Select your local time zone from the drop down list. This information is used for log entries and client filtering. For accurate timing of log entries and system events, you need to set the time zone. Select your time zone from the drop down list. If you want to automatically synchronize the ADSL router with a public time server, check the box to Enable Automatic Time Server Maintenance.
  • Page 59 ONFIGURING THE ARRICADE Password Settings Use this page to change the password for accessing the management interface of the Barricade. Passwords can contain from 3~12 alphanumeric characters and are case sensitive. Note: If you lost the password, or you cannot gain access to the user interface, press the blue reset button on the rear panel, holding it down for at least five seconds to restore the factory defaults.
  • Page 60: Remote Management

    DVANCED ETUP Remote Management By default, management access is only available to users on your local network. However, you can also manage the Barricade from a remote host by entering the IP address of a remote computer on this screen. Check the Enabled check box, and enter the IP address of the Host Address and click “APPLY”.
  • Page 61 ONFIGURING THE ARRICADE Domain Name Servers (DNS) are used to map a domain name (e.g., www.smc.com) with the IP address (e.g., 64.147.25.20). Your ISP should provide the IP address of one or more Domain Name Servers. Enter those addresses on this page, and click “APPLY”. 4-18...
  • Page 62: Wan

    DVANCED ETUP Specify the WAN connection parameters provided by your Internet Service Provider (ISP). The Barricade can be connected to your ISP in one of the following ways: PPPoE Clone MAC 4-19...
  • Page 63 ONFIGURING THE ARRICADE PPPoE Enter the PPPoE (Point-to-Point over Ethernet) parameters here. Parameter Enable/Disable IP Address Subnet Mask VPI/VCI Encapsulation Dial on demand 4-20 Description Enables/disables the PPPoE function. If your IP address is assigned by the ISP each time you connect, leave this field all zeros.
  • Page 64 Parameter Description Idle Time (Minute) Enter the maximum idle time for the Internet connection. After this time has been exceeded the connection will be terminated. ISP Name Choose the ISP to whom this connection will apply. Enter ATM (Asynchronous Transfer Mode) function parameters here. Parameter Description Protocol...
  • Page 65 ONFIGURING THE ARRICADE Parameter Encapsulation DHCP Client Clone MAC Address Some ISPs require you to register your MAC address with them. If this is the case, the MAC address of the Barricade must be changed to the MAC address that you have registered with your ISP. 4-22 Description Specifies how to handle multiple protocols at the ATM transport...
  • Page 66 DVANCED ETUP Enter the Internet Service Provider (ISP) name, user name, and password for each ISP connection you have. You can enter up to four sets of information here. 4-23...
  • Page 67: Lan

    ONFIGURING THE ARRICADE Use the LAN menu to configure the LAN IP address and to enable the DHCP server for dynamic client address allocation. Parameter LAN IP IP Address IP Subnet Mask The subnet mask of the network. DHCP Server Lease Time IP Address Pool Start IP Address Specify the start IP address of the DHCP pool.
  • Page 68: Wireless

    DVANCED ETUP Wireless The Barricade also operates as a wireless access point, allowing wireless computers to communicate with each other. To configure this function, all you need to do is enable the wireless function, define the radio channel, the domain identifier, and the security options. Check Enable and click “APPLY”.
  • Page 69: Channel And Ssid

    ONFIGURING THE ARRICADE Channel and SSID You must specify a common radio channel and SSID (Service Set ID) to be used by the Barricade Wireless Router and all of its wireless clients. Be sure you configure all of its clients to the same values. Parameter ESSID ESSID Broadcast Enable or disable the broadcasting of the SSID.
  • Page 70 DVANCED ETUP Security To make your wireless network safe, you should turn on the security function. The Barricade supports WEP (Wired Equivalent Privacy) and WPA (Wi-Fi Protected) security mechanisms. 4-27...
  • Page 71 ONFIGURING THE ARRICADE If you want to use WEP to protect your wireless network, you need to set the same parameters for the Barricade and all your wireless clients. Parameter WEP Mode Key Provisioning You may automatically generate encryption keys or manually enter the keys.
  • Page 72 Wi-Fi Protected Access (WPA) combines temporal key integrity protocol (TKIP) and 802.1X mechanisms. It provides dynamic key encryption and 802.1X authentication service. Parameter Cypher suite The security mechanism used in WPA for encryption. Authentication Choose 802.1X or Pre-shared Key to use as the authentication method.
  • Page 73 ONFIGURING THE ARRICADE 802.1X If 802.1X is used in your network, then you should enable this function for the Barricade. Parameter 802.1X Authentication Session Idle timeout Re-Authentication Period Quiet Period Server Type RADIUS Server Parameters Server IP Server Port Secret Key NAS-ID 4-30 Description...
  • Page 74: Nat

    DVANCED ETUP Network Address Translation allows multiple users to access the Internet sharing one public IP. 4-31...
  • Page 75: Address Mapping

    ONFIGURING THE ARRICADE Address Mapping Allows one or more public IP addresses to be shared by multiple internal users. This also hides the internal network for increased privacy and security. Enter the Public IP address you wish to share into the Global IP field.
  • Page 76 Virtual Server If you configure the Barricade as a virtual server, remote users accessing services such as web or FTP at your local site via public IP addresses can be automatically redirected to local servers configured with private IP addresses. In other words, depending on the requested service (TCP/UDP port number), the Barricade redirects the external service request to the appropriate server (located at another internal IP address).
  • Page 77 ONFIGURING THE ARRICADE Special Application Some applications require multiple connections, such as Internet gaming, video-conferencing, and Internet telephony. These applications may not work when Network Address Translation (NAT) is enabled. If you need to run applications that require multiple connections, use these pages to specify the additional public ports to be opened for each application.
  • Page 78: Routing

    DVANCED ETUP Routing These pages define routing related parameters, including static routes and RIP (Routing Information Protocol) parameters. 4-35...
  • Page 79: Static Route

    ONFIGURING THE ARRICADE Static Route Parameter Index Network Address Subnet Mask Gateway Click “Add” to add a new static route to the list, or check the box of an already entered route and click “Modify”. Clicking “Delete” will remove an entry from the list.
  • Page 80 Parameter General RIP Parameters RIP mode Auto summary Table of current Interface RIP parameter Interface Operation Mode Version Poison Reverse Description Globally enables or disables RIP. If Auto summary is disabled, then RIP packets will include sub-network information from all sub- networks connected to the router.
  • Page 81 ONFIGURING THE ARRICADE Parameter Authentication Required Authentication Code RIP sends routing-update messages at regular intervals and when the network topology changes. When a router receives a routing update that includes changes to an entry, it updates its routing table to reflect the new route.
  • Page 82: Routing Table

    Routing Table Parameter Description Flags Indicates the route status: C = Direct connection on the same subnet. S = Static route. R = RIP (Routing Information Protocol) assigned route. I = ICMP (Internet Control Message Protocol) Redirect route. Network Destination IP address. Address Netmask The subnetwork associated with the destination.
  • Page 83: Firewall

    ONFIGURING THE ARRICADE Firewall The Barricade Router’s firewall inspects packets at the application layer, maintains TCP and UDP session information including time-outs and the number of active sessions, and provides the ability to detect and prevent certain types of network attacks. Network attacks that deny access to a network device are called Denial-of- Service (DoS) attacks.
  • Page 84 Access Control Access Control allows users to define the outgoing traffic permitted or not-permitted through the WAN interface. The default is to permit all outgoing traffic. The following items are on the Access Control screen: Parameter Enable Filtering Function Normal Filtering Table Displays the IP address (or an IP address range) filtering Description Click Yes to turn on the filtering function.
  • Page 85 ONFIGURING THE ARRICADE To add the PC to the filtering table: 1. Click “Add PC” on the Access Control screen. 2. Define the appropriate settings for client PC services. 3. Click “OK” and then click “APPLY” to save your settings. 4-42...
  • Page 86: Mac Filter

    DVANCED ETUP MAC Filter The Barricade can also limit the access of hosts within the local area network (LAN). The MAC Filtering Table allows the Barricade to enter up to 32 MAC addresses that are not allowed access to the WAN port. Click Yes to enable, or No to disable this function.
  • Page 87: Url Blocking

    ONFIGURING THE ARRICADE URL Blocking The Barricade allows the user to block access to web sites from a particular PC by entering either a full URL address or just a keyword. This feature can be used to protect children from accessing violent or pornographic web sites.
  • Page 88: Schedule Rule

    Schedule Rule You may filter Internet access for local clients based on rules. Each access control rule may be activated at a scheduled time. Define the schedule on the Schedule Rule page, and apply the rule on the Access Control page. Follow these steps to add a schedule rule: 1.
  • Page 89: Intrusion Detection

    ONFIGURING THE ARRICADE Intrusion Detection • Intrusion Detection Feature Stateful Packet Inspection (SPI) and Anti-DoS firewall protection (Default: Enabled) — The Intrusion Detection Feature of the Barricade Router limits access for incoming traffic at the WAN port. When the SPI feature is turned on, all incoming packets will be blocked except for those types marked in the Stateful Packet Inspection section.
  • Page 90 DVANCED ETUP Scroll down to view more information. • Stateful Packet Inspection This is called a “stateful” packet inspection because it examines the contents of the packet to determine the state of the communications; i.e., it ensures that the stated destination computer has previously requested the current communication.
  • Page 91 ONFIGURING THE ARRICADE “Enable SPI and Anti-DoS firewall protection” field and then check the inspection type that you need, such as Packet Fragmentation, TCP Connection, UDP Session, FTP Service, H.323 Service, or TFTP Service. • When hackers attempt to enter your network, we can alert you by e-mail Enter your email address.
  • Page 92 • DoS Criteria and Port Scan Criteria Set up DoS and port scan criteria in the spaces provided (as shown below). Parameter Defaults Total incomplete TCP/UDP sessions sessions HIGH Total incomplete sessions TCP/UDP sessions Incomplete sessions TCP/UDP sessions (per min) HIGH Incomplete sessions TCP/UDP sessions...
  • Page 93 ONFIGURING THE ARRICADE If you have a client PC that cannot run an Internet application properly from behind the firewall, you can open the client up to unrestricted two- way Internet access. Enter the IP address of a DMZ (Demilitarized Zone) host on this screen.
  • Page 94: Snmp

    SNMP Use the SNMP configuration screen to display and modify parameters for the Simple Network Management Protocol (SNMP). Community A computer attached to the network, called a Network Management Station (NMS), can be used to access this information. Access rights to the agent are controlled by community strings.
  • Page 95 ONFIGURING THE ARRICADE Trap Specify the IP address of the NMS to notify when a significant event is detected by the agent. When a trap condition occurs, the SNMP agent sends an SNMP trap message to any NMS specified as a trap receiver. Parameter Description IP Address Traps are sent to this address when errors or specific events occur on...
  • Page 96: Adsl

    ADSL ADSL (Asymmetric Digital Subscriber Line) is designed to deliver more bandwidth downstream (from the central office to the customer site) than upstream. This section is used to configure the ADSL operation type and shows the ADSL status. Parameters Parameter Operation Mode Address C3, etc.
  • Page 97 ONFIGURING THE ARRICADE Status The Status screen displays information on connection line status, data rate, operation data and defect indication, and statistics. Scroll down to view more information. 4-54...
  • Page 98 The following items are included on this information page: Parameter Description Status Line Status Shows the current status of the ADSL line connection. Data Rate Upstream Maximum upstream data rate. Downstream Maximum downstream data rate. Operation Data/Defect Indication Noise Margin Maximum upstream and downstream noise margin.
  • Page 99 ONFIGURING THE ARRICADE Parameter Statistics Received Superframes Interleaved Transmitted Superframes Interleaved Received Superframes Fast Transmitted Superframes Fast 4-56 Description (Superframes represent the highest level of data presentation. Each superframe contains regular ADSL frames, one of which is used to provide superframe synchronization, identifying the start of a superframe.
  • Page 100: Ddns

    DVANCED ETUP DDNS Dynamic Domain Name Service (DDNS) provides users on the Internet with a method to tie their domain name to a computer or server. DDNS allows your domain name to follow your IP address automatically by having your DNS records changed when your IP address changes. This DNS feature is powered by TZO.com.
  • Page 101: Upnp

    ONFIGURING THE ARRICADE UPnP Click Enable to turn on the Universal Plug and Play function of the Barricade. This function allows the device to automatically: • dynamically join a network • obtain an IP address 4-58...
  • Page 102: Tools

    DVANCED ETUP Tools Use the Tools menu to backup the current configuration, restore a previously saved configuration, restore factory settings, update firmware, and reset the Barricade. Configuration Tools Choose a function and click Next. Backup allows you to save the Barricade Router’s configuration to a file. Restore can be used to restore the saved backup configuration file.
  • Page 103 ONFIGURING THE ARRICADE Firmware Upgrade Use this screen to update the firmware or user interface to the latest versions. Download the upgrade file from the SMC web site, and save it to your hard drive. In the Upgrade Target field, choose Firmware. Then click “Browse...”...
  • Page 104 Reset Click “APPLY” to reset the Barricade. The reset will be complete when the power LED stops blinking. If you perform a reset from this page, the configurations will not be changed back to the factory default settings. Note: If you use the Reset button on the front panel, the Barricade performs a power reset.
  • Page 105: Status

    ONFIGURING THE ARRICADE Status The Status page displays WAN/LAN connection status, firmware, and hardware version numbers, illegal attempts to access your network, as well as information on DHCP clients connected to your network. The security log may be saved to a file by clicking “Save” and choosing a location.
  • Page 106 The following items are included on the Status page: Item Description INTERNET Displays WAN connection type and status. Click the Connect button to connect to your ISP. GATEWAY Displays system IP settings, as well as DHCP Server and Firewall status. INFORMATION Displays the number of attached clients, the firmware versions, the physical MAC address for each media interface,...
  • Page 107: Finding The Mac Address Of A Network Card

    ONFIGURING THE ARRICADE Finding the MAC address of a Network Card Windows 98/ME Click Start/Run. Type “winipcfg” and press “ENTER”. The MAC address is in the “Adapter Address” section. Windows NT4/2000/XP Click Start/Programs/Command Prompt. Type “ipconfig /all” and press “ENTER”. The MAC address is listed as the “Physical Address.”...
  • Page 108 This section describes common problems you may encounter and possible solutions to them. The Barricade can be easily monitored through panel indicators to identify problems. Troubleshooting Chart Symptom Action LED Indicators Power LED is • • PPENDIX ROUBLESHOOTING Check connections between the Barricade, the external power supply, and the wall outlet.
  • Page 109: Troubleshooting

    ROUBLESHOOTING Troubleshooting Chart Symptom LED Indicators Link LED is Off Network Connection Problems Cannot ping the Barricade from the attached Action • Verify that the Barricade and attached device are powered on. • Be sure the cable is plugged into both the Barricade and the corresponding device.
  • Page 110 Troubleshooting Chart Symptom Action Management Problems Cannot connect • using the web browser • • Forgot or lost • the password Be sure to have configured the Barricade with a valid IP address, subnet mask, and default gateway. Check that you have a valid network connection to the Barricade and that the port you are using has not been disabled.
  • Page 111 ROUBLESHOOTING Troubleshooting Chart Symptom Wireless Problems A wireless PC cannot associate with the Barricade. The wireless network is often interrupted. The Barricade cannot be detected by a wireless client. Action • Make sure the wireless PC has the same SSID settings as the Barricade.
  • Page 112: Wiring Conventions

    Ethernet Cable Caution: DO NOT plug a phone jack connector into any RJ-45 port. Use only twisted-pair cables with RJ-45 connectors that conform with FCC standards. Specifications Cable 10BASE-T 100BASE-TX Cat. 5 100-ohm UTP Wiring Conventions For Ethernet connections, a twisted-pair cable must have two pairs of wires.
  • Page 113: B Cables

    ABLES Each wire pair must be attached to the RJ-45 connectors in a specific orientation. The following figure illustrates how the pins on an Ethernet RJ-45 connector are numbered. Be sure to hold the connectors in the same orientation when attaching the wires to the pins. Figure B-1.
  • Page 114: Ethernet Cable

    Pin Assignments With 100BASE-TX/10BASE-T cable, pins 1 and 2 are used for transmitting data, and pins 3 and 6 for receiving data. RJ-45 Pin Assignments Pin Number 1: The “+” and “-” signs represent the polarity of the wires that make up each wire pair. Straight-Through Wiring If the port on the attached device has internal crossover wiring (MDI-X), then use straight-through cable.
  • Page 115 ABLES Crossover Wiring If the port on the attached device has straight-through wiring (MDI), use crossover cable. Crossover Cable Pin Assignments End 1 1 (Tx+) 2 (Tx-) 3 (Rx+) 6 (Rx-) End 2 3 (Rx+) 6 (Rx-) 1 (Tx+) 2 (Tx-)
  • Page 116: Adsl Cable

    ADSL Cable Use standard telephone cable to connect the RJ-11 telephone wall outlet to the RJ-45 ADSL port on the ADSL Router. Caution: Do not plug a phone jack connector into an RJ-45 port. Specifications Cable ADSL Line Wiring Conventions For ADSL connections, a cable requires one pair of wires.
  • Page 117 ABLES R1 T1 1 2 3 4 5 6 6x2 Jack Signal Name Not used Line 2 Tip Line 1 Ring Line 1 Tip Line 2 Ring Not used Figure B-3. RJ-11 Pinouts R1 T1 R2 1 2 3 4 5 6 1 2 3 4 5 6 6x4 Jack T = Tip...
  • Page 118: Specifications

    Physical Characteristics Ports Four 10/100Mbps RJ45 Ports One ADSL RJ11 Two external dipole antennas ADSL Features Supports DMT line modulation Supports Annex A Full-Rate ADSL: up to 8 Mbps downstream, up to 1 Mbps upstream (G.992.1 &T1.413, Issue 2) Supports G.Lite ADSL: up to 1.5 Mbps downstream, up to 512 Kbps upstream Dying GASP support ATM Features...
  • Page 119 PECIFICATIONS Security Features Password protected configuration access User authentication (PAP/CHAP) with PPP Firewall NAT NAPT VPN pass through (IPSec-ESP Tunnel mode,L2TP, PPTP) LAN Features IEEE 802.1D (self-learning transparent Bridging) DHCP Server DNS Proxy Static Routing, RIPv1 and RIP Applications Netmeeting, ICQ, Real Player, QuickTime, DialPad, PC Anywhere, Telnet, SNTP, NNTP Radio Features Wireless RF module Frequency Band...
  • Page 120 PECIFICATIONS 13 channels (ETSI) 2 Channels (Spain) 4 Channels (France) 14 channels (Japan) Operating Channels IEEE 802.11g compliant: 13 channels (US, Canada, Europe, Japan) RF Output Power Modulation Rate-Output Power (dBm) 802.11b - 1Mbps 16 802.11b - 2Mbps 16 802.11b - 5.5Mbps 16 802.11b - 11Mbps 16 Modulation Rate-Output Power (dBm) 802.11g - 6Mbps 15...
  • Page 121 PECIFICATIONS Modulation Rate-Receiver Sensitivity Typical (dBm) 802.11g - 6Mbps -88 802.11g - 9Mbps -87 802.11g - 12Mbps -84 802.11g - 18Mbps -82 802.11g - 24Mbps -79 802.11g - 36Mbps -75 802.11g - 48Mbps -68 802.11g - 54Mbps -68 Environmental SMC7804WBRA complies with the following standards: Temperature: IEC 68-2-14 0 to 50 degrees C (Standard Operating) -40 to 70 degree C (Non-operation)
  • Page 122 PECIFICATIONS Standards Conformance Electromagnetic Compatibility CE, ETSI, R&TTE, FCC part 15 class B & FCC part 68, ETS 300 328, ETS 300 826 Safety CSA/NRTL (UL1950, CSA 22.2.950) GS (EN60950), CB (IEC60950) Internet Standards RFC 826 ARP RFC 791 IP RFC 792 ICMP RFC 768 UDP RFC 793 TCP...
  • Page 123 PECIFICATIONS...
  • Page 124 FOR TECHNICAL SUPPORT, CALL: From U.S.A. and Canada (24 hours a day, 7 days a week) (800) SMC-4-YOU; Phn: (949) 679-8000; Fax: (949) 679-1481 From Europe : Contact details can be found on www.smc-europe.com or www.smc.com INTERNET E-mail addresses: techsupport@smc.com european.techsupport@smc-europe.com Driver updates: http://www.smc.com/index.cfm?action=tech_support_...

This manual is also suitable for:

7804wbra

Table of Contents