SMC Networks Barricade SMC7908VoWBRA User Manual

54mbps wireless voip router with built-in adsl modem
Hide thumbs Also See for Barricade SMC7908VoWBRA:

Advertisement

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the Barricade SMC7908VoWBRA and is the answer not in the manual?

Questions and answers

Summary of Contents for SMC Networks Barricade SMC7908VoWBRA

  • Page 2: Adsl Modem

    54Mbps Wireless Voip Router with built-in ADSL Modem From SMC’s line of award-winning connectivity solutions 38 Tesla Irvine, CA 92618 Phone: (949) 679-8000 September 2004 R.01 F 0.33.7...
  • Page 3 SMC Networks, Inc. 38 Tesla Irvine, CA 92618 All rights reserved. Trademarks: SMC is a registered trademark; and Barricade is a trademark of SMC Networks, Inc. Other product and company names are trademarks or registered trademarks of their respective holders.
  • Page 4: Limited Warranty

    IMITED ARRANTY Limited Warranty Statement: SMC Networks, Inc. (“SMC”) warrants its products to be free from defects in workmanship and materials, under normal use and service, for the applicable warranty term. All SMC products carry a standard 90-day limited warranty from the date of purchase from SMC or its Authorized Reseller.
  • Page 5 * SMC will provide warranty service for one year following discontinuance from the active SMC price list. Under the limited lifetime warranty, internal and external power supplies, fans, and cables are covered by a standard one-year warranty from date of purchase. SMC Networks, Inc. 38 Tesla Irvine, CA 92618...
  • Page 6: Federal Communication Commission Interference Statement

    Federal Communication Commission Interference Statement This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses and can radiate radio frequency energy and, if not installed and used in accordance with instructions, may cause harmful interference to radio communications.
  • Page 7 OMPLIANCES The REN is used to determine the quantity of devices that may be connected to the telephone line. Excessive RENs on the telephone line may result in the devices not ringing in response to an incoming call. In most, but not all areas, the sum of the RENs should not exceed five (5.0).
  • Page 8: Ec Conformance Declaration

    EC Conformance Declaration SMC contact for these products in Europe is: SMC Networks Europe, Edificio Conata II, Calle Fructuós Gelabert 6-8, 2o, 4a, 08970 - Sant Joan Despí, Barcelona, Spain. Marking by the above symbol indicates compliance with the Essential Requirements of the R&TTE Directive of the European Union (1999/5/EC).
  • Page 9: Safety Compliance

    OMPLIANCES Safety Compliance Wichtige Sicherheitshinweise (Germany) 1. Bitte lesen Sie diese Hinweise sorgfältig durch. 2. Heben Sie diese Anleitung für den späteren Gebrauch auf. 3. Vor jedem Reinigen ist das Gerät vom Stromnetz zu trennen. Verwenden Sie keine Flüssigoder Aerosolreiniger. Am besten eignet sich ein angefeuchtetes Tuch zur Reinigung.
  • Page 10: Table Of Contents

    Introduction ....... . . 1-1 About the Barricade ......... 1-1 VoIP (Voice over IP) .
  • Page 11 ABLE OF ONTENTS Configuring the Voice ADSL Router ....4-1 Navigating the Management Interface ......4-2 Making Configuration Changes .
  • Page 12 Cables ........B-1 Ethernet Cable .
  • Page 13: Introduction

    Congratulations on your purchase of the Barricade Router, hereafter referred to as the “Barricade”. We are proud to provide you with a powerful yet simple communication device for connecting your local area network (LAN) to the Internet. For those who want to surf the Internet in the most secure way, this router provides a convenient and powerful solution.
  • Page 14: Features And Benefits

    NTRODUCTION digital, the encoding and then compression of the signal into Internet Protocol (IP) packets. The VoIP Router is equipped with a digital signal processor (DSP), which segments the voice signal into frames and stores them in voice packets. Using the industry standard CODECs, G.711, G.723.3 and G.729, these packets are encoded.
  • Page 15: Applications

    Applications Many advanced networking features are provided by the Barricade: • Wireless and Wired LAN The Barricade provides connectivity to 10/100 Mbps devices, and wireless IEEE 802.11g compatible devices, making it easy to create a network in small offices or homes. •...
  • Page 16: Virtual Private Network (Vpn)

    NTRODUCTION • DMZ Host Support Allows a networked computer to be fully exposed to the Internet. This function is used when NAT and firewall security prevent an Internet application from functioning correctly. • Security The Barricade supports security features that deny Internet access to specified users, or filter all requests for specific services that the administrator does not want to serve.
  • Page 17: Installation

    Barricade, refer to “Configuring the Voice ADSL Router” on page 4-1. Package Contents After unpacking the Barricade, check the contents of the box to be sure you have received the following components: • Barricade Voice ADSL Router (SMC7908VoWBRA) • Power adapter • One CAT-5 Ethernet cable (RJ-45) •...
  • Page 18: System Requirements

    NSTALLATION System Requirements You must meet the following minimum requirements: • ADSL line installed by your Internet Service Provider. • A PC using a dynamic or fixed IP address, as well as a gateway server address and DNS server address from your service provider. •...
  • Page 19 The Barricade includes an LED display on the front panel for system power and port indications that simplifies installation and network troubleshooting. It also provides the following ports on the rear panel: Figure 2-1. Rear Panel Item Description Line Connect the telephone line directly to this port. Phone Connect your regular telephone to this port.
  • Page 20: Led Indicators

    NSTALLATION LED Indicators The power and port LED indicators on the front panel are illustrated by the following figure and table. Figure 2-2. Front Panel Status ADSL SYNC Flashing WLAN Flashing (4 LEDs) Flashing VoIP Line Phone Description The Barricade is receiving power. Normal operation. Power off or failure.
  • Page 21: Isp Settings

    ISP Settings Please collect the following information from your ISP before setting up the Barricade: • ISP account user name and password • VoIP setting details • Protocol, encapsulation and VPI/VCI circuit numbers • DNS server address • IP address, subnet mask and default gateway (for fixed IP users only) Connect the System The Barricade can be positioned at any convenient location in your office or home.
  • Page 22: Connect The Adsl Line

    NSTALLATION Connect the ADSL Line Connect the supplied RJ-11 cable from the ADSL Microfilter/Splitter to the ADSL port on your Barricade. When inserting an ADSL RJ-11 plug, be sure the tab on the plug clicks into position to ensure that it is properly seated.
  • Page 23: Installing A Splitterless Connection

    Installing a Splitterless Connection If you are using a splitterless (G.lite) connection, then your service provider will attach the outside ADSL line directly to your phone system. In this case you can connect your phones and computer directly to the incoming ADSL line, but you will have to add low-pass filters to your phones as shown below: Plain Old...
  • Page 24: Attach To Your Network Using Ethernet Cabling

    NSTALLATION Attach to Your Network Using Ethernet Cabling The four LAN ports on the Barricade auto-negotiate the connection speed to 10 Mbps Ethernet or 100 Mbps Fast Ethernet, as well as the transmission mode to half duplex or full duplex. Use RJ-45 cables to connect any of the four LAN ports on the Barricade to an Ethernet adapter on your PC.
  • Page 25: Configuring Client Pc

    HAPTER ONFIGURING LIENT After completing hardware setup by connecting all your network devices, you need to configure your computer to connect to the Barricade. See: “Windows 2000” on page 3-3 “Windows XP” on page 3-6 “Configuring Your Macintosh Computer” on page 3-8 depending on your operating system.
  • Page 26: Tcp/Ip Configuration

    ONFIGURING LIENT TCP/IP Configuration To access the Internet through the Barricade, you must configure the network settings of the computers on your LAN to use the same IP subnet as the Barricade. The default IP settings for the Barricade are: IP Address: 192.168.2.1 Subnet Mask: 255.255.255.0 Note: These settings can be changed to fit your network requirements,...
  • Page 27: Windows 2000

    Windows 2000 1. On the Windows desktop, click Start/Settings/Network and Dial-Up Connections. 2. Click the icon that corresponds to the connection to your Barricade. 3. The connection status screen will open. Click Properties. 4. Double-click Internet Protocol (TCP/IP). 5. If “Obtain an IP address automatically”...
  • Page 28: Disable Http Proxy

    ONFIGURING LIENT Disable HTTP Proxy You need to verify that the “HTTP Proxy” feature of your web browser is disabled. This is so that your browser can view the Barricade’s HTML configuration pages. Determine which browser you use and refer to “Internet Explorer”...
  • Page 29 3. Type “IPCONFIG /RENEW” and press the ENTER key. Verify that your IP Address is now 192.168.2.xxx, your Subnet Mask is 255.255.255.0 and your Default Gateway is 192.168.2.254. These values confirm that your ADSL Router is functioning. 4. Type “EXIT” and press the ENTER key to close the Command Prompt window.
  • Page 30: Windows Xp

    ONFIGURING LIENT Windows XP 1. On the Windows desktop, click Start/Control Panel. 2. In the Control Panel window, click Network and Internet Connections. 3. The Network Connections window will open. Double-click the connection for this device. 4. On the connection status screen, click Properties. 5.
  • Page 31 1. On the Windows desktop, click Start/Programs/Accessories/ Command Prompt. 2. In the Command Prompt window, type “IPCONFIG /RELEASE” and press the ENTER key. 3. Type “IPCONFIG /RENEW” and press the ENTER key. Verify that your IP Address is now 192.168.2.xxx, your Subnet Mask is 255.255.255.0 and your Default Gateway is 192.168.2.254.
  • Page 32: Configuring Your Macintosh Computer

    ONFIGURING LIENT Configuring Your Macintosh Computer You may find that the instructions here do not exactly match your operating system. This is because these steps and screenshots were created using Mac OS 10.2. Mac OS 7.x and above are similar, but may not be identical to Mac OS 10.2.
  • Page 33: Disable Http Proxy

    3. If “Using DHCP Server” is already selected in the Configure field, your computer is already configured for DHCP. If not, select this Option. 4. Your new settings are shown on the TCP/IP tab. Verify that your IP Address is now 192.168.2.xxx, your Subnet Mask is 255.255.255.0 and your Default Gateway is 192.168.2.1.
  • Page 34 ONFIGURING LIENT 3. Uncheck all check boxes and click OK. 3-10...
  • Page 35: Adsl R Outer

    HAPTER ONFIGURING THE ADSL R OICE OUTER After you have configured TCP/IP on a client computer, you can configure the Barricade using Internet Explorer 5.5 or above. To access the Barricade’s management interface, enter the default IP address of the Barricade in your web browser: http://192.168.2.1. Enter the default password: “smcadmin”, and click “LOGIN”.
  • Page 36: Configuring The Voice Adsl Router

    ONFIGURING THE OICE Navigating the Management Interface The first page of the web management is Country Selection. You need to select your country before accessing the management interface. ADSL R OUTER...
  • Page 37: Making Configuration Changes

    The Barricade’s management interface consists of a Setup Wizard and an Advanced Setup section. Setup Wizard: Use the Setup Wizard if you want to quickly set up the Barricade. Go to “SETUP WIZARD” on page 4. Advanced Setup: Advanced Setup supports more advanced functions like VoIP, Firewall, IP and MAC address filtering, virtual server setup, virtual DMZ host, as well as other functions.
  • Page 38: Setup Wizard

    ONFIGURING THE OICE SETUP WIZARD Channel and SSID Click on “SETUP WIZARD” and “NEXT”, then you will see the Channel and SSID page. Parameter ESSID ESSID Broadcast Enable or disable the broadcasting of the SSID. Wireless Mode Channel Click “NEXT” to continue. ADSL R OUTER Description...
  • Page 39: Time Zone

    ETUP IZARD Time Zone Select your local time zone from the drop down list. This information is used for log entries and client filtering. For accurate timing of log entries and system events, you need to set the time zone. Select your time zone from the drop down list. If you want to automatically synchronize the Voice ADSL router with a public time server, check the box to Enable Automatic Time Server Maintenance.
  • Page 40: Parameter Setting

    ONFIGURING THE OICE Parameter Setting Select your Country and Internet Service Provider. This will automatically configure the Barricade with the correct Protocol, Encapsulation and VPI/VCI settings for your ISP. If your Country or Internet Service Provider is not listed in this page, you will need to manually enter settings.
  • Page 41: Confirm

    Confirm The Confirm page shows a summary of the configuration parameters. Check ADSL operation mode (WAN), Network Layer Parameters (WAN) and ISP parameters are correct. Parameter ADSL Operation Mode (WAN) Protocol VPI/VCI AAL5 Encapsulation Shows the packet encapsulation type. Go to page 4-23 for Network Layer Parameters (WAN) IP Address...
  • Page 42 ONFIGURING THE OICE Parameter DNS Server ISP Parameters Username Password DHCP Parameters Function Default Gateway Subnet Mask Name Server 1 Name Server 2 Start IP Address Number of IP If the parameters are correct, click “NEXT” to save these settings. Your Barricade is now set up.
  • Page 43: Parameter Setting - Country Or Isp Not Listed

    ETUP IZARD Parameter Setting - Country or ISP Not Listed If your Country or Internet Service Provider is not listed select “Others”. This will allow you to manually configure your ISP settings. For manual configuration you will need to know the Protocol, DNS Server, Encapsulation and VPI/VCI settings used by your ISP.
  • Page 44 ONFIGURING THE OICE ISP use Bridging Enter the Bridging settings provided by your ISP. Parameter Management IP Address VPI/VCI Encapsulation Click “NEXT” to continue to the “Confirm” settings page. Go to “Confirm” on page 4-7 in the manual for details about the “Confirm”...
  • Page 45 ISP use 1483Bridging-DHCP Parameter DNS Server VPI/VCI Encapsulation Click “NEXT” to continue to the “Confirm” settings page. Go to “Confirm” on page 4-7 in the manual for details about the “Confirm” settings page. Description Domain Name Servers are used to map a domain name (e.g., www.somesite.com) to the equivalent numerical IP address.
  • Page 46 ONFIGURING THE OICE ISP use 1483Bridging-FixIP Parameter IP Address Subnet Mask Default Gateway DNS Server VPI/VCI Encapsulation Click “NEXT” to continue to the “Confirm” settings page. Go to “Confirm” on page 4-7 in the manual for details about the “Confirm” settings page. 4-12 ADSL R OUTER...
  • Page 47 ISP use PPPoE Parameter DNS Server VPI/VCI Encapsulation Username Password Confirm Password Click “NEXT” to continue to the “Confirm” settings page. Go to “Confirm” on page 4-7 in the manual for details about the “Confirm” settings page. Description Enter the Domain Name Server address. Enter the Virtual Path Identifier (VPI) and Virtual Circuit Identifier (VCI) supplied by your ISP.
  • Page 48 ONFIGURING THE OICE ISP use PPPoA Parameter DNS Server VPI/VCI Encapsulation Username Password Confirm Password Click “NEXT” to continue to the “Confirm” settings page. Go to “Confirm” on page 4-7 in the manual for details about the “Confirm” settings page. 4-14 ADSL R OUTER...
  • Page 49 ISP use 1483Routing Parameter IP Address Subnet Mask Default Gateway DNS Server VPI/VCI Encapsulation Click “NEXT” to continue to the “Confirm” settings page. Go to “Confirm” on page 4-7 in the manual for details about the “Confirm” settings page. Description Enter the IP address provided by your ISP.
  • Page 50: Advanced Setup

    ONFIGURING THE OICE Advanced Setup The left-hand side displays the main menu and the right-hand side shows descriptive information. The advanced management interface contains 15 main menu items as described in the following table. Menu Description System Sets the local time zone, the password for administrator access, and the IP address of a PC that will be allowed to manage the Barricade remotely.
  • Page 51 Menu Description SNMP Community string and trap server settings. UPnP Enables the Universal Plug and Play function. ADSL Sets the ADSL operation type and shows the ADSL status. DDNS Configures Dynamic DNS function. VoIP Configures VoIP settings for the VoIP Router, and view VoIP status log.
  • Page 52: System

    ONFIGURING THE OICE SYSTEM Time Settings Select your local time zone from the drop down list. This information is used for log entries and client filtering. For accurate timing of log entries and system events, you need to set the time zone.
  • Page 53: Password Settings

    Password Settings Use this page to change the password for accessing the management interface. Passwords can contain from 3~12 alphanumeric characters and are case sensitive. Note: If you lost the password, or you cannot gain access to the user interface, press the blue reset button on the rear panel, holding it down for at least five seconds to restore the factory defaults.
  • Page 54: Remote Management

    ONFIGURING THE OICE Remote Management By default, management access is only available to users on your local network. However, you can also manage the Barricade from a remote host by entering the IP address of a remote computer on this screen. Check the Enabled check box, and enter the IP address of the Host Address and click “APPLY”.
  • Page 55 DVANCED ETUP Domain Name Servers (DNS) are used to map a domain name (e.g., www.smc.com) with the IP address (e.g., 64.147.25.20). Your ISP should provide the IP address of one or more Domain Name Servers. Enter those addresses on this page, and click “APPLY”. 4-21...
  • Page 56: Wan

    ONFIGURING THE OICE Specify the WAN connection parameters provided by your Internet Service Provider (ISP). The Barricade can be connected to your ISP in one of the following ways: • ATM PVC • Clone MAC 4-22 ADSL R OUTER...
  • Page 57: Atm Pvc

    ATM PVC Enter the ATM (Asynchronous Transfer Mode) virtual connection parameters here. Parameter Description Description Click on the VC to set the values for the connection. VPI/VCI Virtual Path Identifier (VPI) and Virtual Circuit Identifier (VCI). Encapsulation Specifies how to handle multiple protocols at the ATM transport layer.
  • Page 58: Atm Interface

    ONFIGURING THE OICE ATM Interface 1483 Bridging Enter the Bridging settings provided by your ISP. Parameter VPI/VCI Encapsulation QoS Class PCR/SCR/MBS 4-24 ADSL R OUTER Description Data flows are broken up into fixed length cells, each of which contains a Virtual Path Identifier (VPI) that identifies the path between two nodes, and a Virtual Circuit Identifier (VCI) that identifies the data channel within that virtual path.
  • Page 59 PPPoA Parameter VPI/VCI Encapsulation QoS Class PCR/SCR/MBS IP assigned by ISP IP Address Subnet Mask Connect Type Idle Time (Minute) Username Password Confirm Password Description Enter the Virtual Path Identifier (VPI) and Virtual Circuit Identifier (VCI) supplied by your ISP. Select the encapsulation used by ISP from the drop down list.
  • Page 60 ONFIGURING THE OICE 1483 Routing Parameter IP Address Subnet Mask Default Gateway VPI/VCI Encapsulation QoS Class PCR/SCR/MBS DHCP Client 4-26 ADSL R OUTER Description Enter the IP address provided by your ISP. Enter the subnet mask address provided by your ISP. Enter the gateway address provided by your ISP.
  • Page 61 PPPoE Parameter IP Address Subnet Mask VPI/VCI Encapsulation QoS Class PCR/SCR/MBS Connect Type Idle Time (Minute) Username Password Confirm Password Description Enter the IP address provided by your ISP. Enter the subnet mask address provided by your ISP. Enter the Virtual Path Identifier (VPI) and Virtual Circuit Identifier (VCI) supplied by your ISP.
  • Page 62 ONFIGURING THE OICE MAC Encapsulated Routing Parameter IP Address Subnet Mask Default Gateway VPI/VCI Encapsulation QoS Class PCR/SCR/MBS DHCP Client 4-28 ADSL R OUTER Description Enter the IP address provided by your ISP. Enter the subnet mask address provided by your ISP. Enter the gateway address provided by your ISP.
  • Page 63: Clone Mac Address

    DVANCED ETUP Clone MAC Address Some ISPs require you to register your MAC address with them. If this is the case, the MAC address of the Barricade must be changed to the MAC address that you have registered with your ISP. 4-29...
  • Page 64: Lan

    ONFIGURING THE OICE Use the LAN menu to configure the LAN IP address and to enable the DHCP server for dynamic client address allocation. Parameter LAN IP IP Address IP Subnet Mask The subnet mask of the network. DHCP Server Lease Time IP Address Pool Start IP Address Specify the start IP address of the DHCP pool.
  • Page 65: Wireless

    DVANCED ETUP WIRELESS The Barricade also operates as a wireless access point, allowing wireless computers to communicate with each other. To configure this function, all you need to do is enable the wireless function, define the radio channel, the domain identifier, and the security options. Check Enable and click “SAVE SETTINGS”.
  • Page 66 ONFIGURING THE OICE Channel and SSID You must specify a common radio channel and SSID (Service Set ID) to be used by the Barricade and all of its wireless clients. Be sure you configure all of its clients to the same values. Parameter ESSID ESSID Broadcast Enable or disable the broadcasting of the SSID.
  • Page 67: Access Control

    DVANCED ETUP Access Control restrict access based on MAC address 4-33...
  • Page 68 ONFIGURING THE OICE Security To make your wireless network safe, you should turn on the security function. The Barricade supports WEP (Wired Equivalent Privacy) and WPA (Wi-Fi Protected) security mechanisms. 4-34 ADSL R OUTER...
  • Page 69 If you want to use WEP to protect your wireless network, you need to set the same parameters for the Barricade and all your wireless clients. Parameter WEP Mode Select 64 bit or 128 bit key to use for encryption. Key Entry Method Select Hex or ASCII to use for encryption key Key Provisioning Select Static if there is only one fixed key for encryption.
  • Page 70 ONFIGURING THE OICE To manually configure the encryption key, enter five hexadecimal pairs of digits for each 64-bit key, or enter 13 pairs for the single 128-bit key. (A hexadecimal digit is a number or letter in the range 0-9 or A-F.) Note that WEP protects data transmitted between wireless nodes, but does not protect any transmissions over your wired network or over the Internet.
  • Page 71 Parameter Pre-shared Key Type in the key here. Group Key The period of renewing broadcast/multicast key. Re_Keying 802.1X If 802.1X is used in your network, then you should enable this function for the Barricade. Parameter Description 802.1X Enable or disable this authentication function. Authentication Session Idle Defines a maximum period of time for which the connection is...
  • Page 72 ONFIGURING THE OICE Parameter Quiet Period Server Type RADIUS Server Parameters Server IP Server Port Secret Key NAS-ID 4-38 ADSL R OUTER Description Defines a maximum period of time for which the Barricade will wait between failed authentications. Select TINY or RADIUS as the authentication server. The IP address of your authentication server.
  • Page 73: Nat

    DVANCED ETUP Network Address Translation allows multiple users to access the Internet sharing one public IP. 4-39...
  • Page 74: Address Mapping

    ONFIGURING THE OICE Address Mapping Allows one or more public IP addresses to be shared by multiple internal users. This also hides the internal network for increased privacy and security. Enter the Public IP address you wish to share into the Global IP field.
  • Page 75: Virtual Server

    DVANCED ETUP Virtual Server If you configure the Barricade as a virtual server, remote users accessing services such as web or FTP at your local site via public IP addresses can be automatically redirected to local servers configured with private IP addresses.
  • Page 76: Special Application

    ONFIGURING THE OICE Special Application Some applications require multiple connections, such as Internet gaming, video-conferencing, and Internet telephony. These applications may not work when Network Address Translation (NAT) is enabled. If you need to run applications that require multiple connections, use these pages to specify the additional public ports to be opened for each application.
  • Page 77: Nat Mapping Table

    DVANCED ETUP NAT Mapping Table This page displays the current NAPT (Network Address Port Translation) address mappings. 4-43...
  • Page 78: Routing

    ONFIGURING THE OICE ROUTING These pages define routing related parameters, including static routes and RIP (Routing Information Protocol) parameters. Static Route Parameter Index Network Address Subnet Mask Gateway Click “Add” to add a new static route to the list, or check the box of an already entered route and click “Modify”.
  • Page 79 Parameter General RIP Parameters RIP mode Auto summary Table of current Interface RIP parameter Interface Operation Mode Version Description Globally enables or disables RIP. If Auto summary is disabled, then RIP packets will include sub-network information from all sub- networks connected to the router. If enabled, this sub-network information will be summarized to one piece of information covering all sub- networks.
  • Page 80 ONFIGURING THE OICE Parameter Poison Reverse Authentication Required Authentication Code RIP sends routing-update messages at regular intervals and when the network topology changes. When a router receives a routing update that includes changes to an entry, it updates its routing table to reflect the new route.
  • Page 81: Routing Table

    Routing Table Parameter Description Flags Indicates the route status: C = Direct connection on the same subnet. S = Static route. R = RIP (Routing Information Protocol) assigned route. I = ICMP (Internet Control Message Protocol) Redirect route. Network Destination IP address. Address Netmask The subnetwork associated with the destination.
  • Page 82: Firewall

    ONFIGURING THE OICE FIREWALL The Barricade Router’s firewall inspects packets at the application layer, maintains TCP and UDP session information including time-outs and the number of active sessions, and provides the ability to detect and prevent certain types of network attacks. Network attacks that deny access to a network device are called Denial-of-Service (DoS) attacks.
  • Page 83: Access Control

    Access Control Access Control allows users to define the outgoing traffic permitted or not-permitted through the WAN interface. The default is to permit all outgoing traffic. The following items are on the Access Control screen: Parameter Enable Filtering Function Normal Filtering Table Displays the IP address (or an IP address range) filtering Description Click Yes to turn on the filtering function.
  • Page 84 ONFIGURING THE OICE To add the PC to the filtering table: 1. Click “Add PC” on the Access Control screen. 2. Define the appropriate settings for client PC services. 3. Click “OK” and then click “SAVE SETTINGS” to save your settings. 4-50 ADSL R OUTER...
  • Page 85: Mac Filter

    DVANCED ETUP MAC Filter The Barricade can also limit the access of hosts within the local area network (LAN). The MAC Filtering Table allows the Barricade to enter up to 32 MAC addresses that are not allowed access to the WAN port. Click Yes to enable, or No to disable this function.
  • Page 86: Url Blocking

    ONFIGURING THE OICE URL Blocking The Barricade allows the user to block access to web sites by entering either a full URL address or just a keyword. This feature can be used to protect children from accessing violent or pornographic web sites. You can define up to 30 sites here.
  • Page 87: Schedule Rule

    DVANCED ETUP Schedule Rule You may filter Internet access for local clients based on rules. Each access control rule may be activated at a scheduled time. Define the schedule on the Schedule Rule page, and apply the rule on the Access Control page. 4-53...
  • Page 88 ONFIGURING THE OICE Follow these steps to add a schedule rule: 1. Click “Add Schedule Rule”. 2. Define the appropriate settings for a schedule rule. 3. Click “OK” and then click “SAVE SETTINGS” to save your settings. 4-54 ADSL R OUTER...
  • Page 89: Intrusion Detection

    DVANCED ETUP Intrusion Detection • Intrusion Detection Feature Stateful Packet Inspection (SPI) and Anti-DoS firewall protection (Default: Enabled) — The Intrusion Detection Feature of the Barricade Router limits access for incoming traffic at the WAN port. When the SPI feature is turned on, all incoming packets will be blocked except for those types marked in the Stateful Packet Inspection section.
  • Page 90 ADSL R ONFIGURING THE OICE OUTER 4-56...
  • Page 91: Stateful Packet Inspection

    • Stateful Packet Inspection This is called a “stateful” packet inspection because it examines the contents of the packet to determine the state of the communications; i.e., it ensures that the stated destination computer has previously requested the current communication. This is a way of ensuring that all communications are initiated by the recipient computer and are taking place only with sources that are known and trusted from previous interactions.
  • Page 92 ONFIGURING THE OICE • Connection Policy Enter the appropriate values for TCP/UDP sessions as described in the following table. Parameter Fragmentation half-open wait TCP SYN wait TCP FIN wait TCP connection idle timeout UDP session idle timeout H.323 data channel idle timeout 4-58 ADSL R...
  • Page 93 • DoS Criteria and Port Scan Criteria Set up DoS and port scan criteria in the spaces provided (as shown below). Parameter Defaults Description Total incomplete TCP/UDP sessions sessions HIGH Total incomplete sessions TCP/UDP sessions Incomplete sessions TCP/UDP sessions (per min) HIGH Incomplete sessions TCP/UDP sessions...
  • Page 94 ONFIGURING THE OICE If you have a client PC that cannot run an Internet application properly from behind the firewall, you can open the client up to unrestricted two- way Internet access. Enter the IP address of a DMZ (Demilitarized Zone) host on this screen.
  • Page 95: Snmp

    SNMP Use the SNMP configuration screen to display and modify parameters for the Simple Network Management Protocol (SNMP). Community A computer attached to the network, called a Network Management Station (NMS), can be used to access this information. Access rights to the agent are controlled by community strings.
  • Page 96 ONFIGURING THE OICE Trap Specify the IP address of the NMS to notify when a significant event is detected by the agent. When a trap condition occurs, the SNMP agent sends an SNMP trap message to any NMS specified as a trap receiver. Parameter Description IP Address Traps are sent to this address when errors or specific events occur on...
  • Page 97: Upnp

    DVANCED ETUP UPNP The Universal Plug and Play architecture offers pervasive peer-to-peer network connectivity of PCs of all form factors, intelligent appliances, and wireless devices. UPnP enables seamless proximity network in addition to control and data transfer among networked devices in the office, home and everywhere within your network.
  • Page 98: Adsl

    ONFIGURING THE OICE ADSL ADSL (Asymmetric Digital Subscriber Line) is designed to deliver more bandwidth downstream (from the central office to the customer site) than upstream. This section is used to configure the ADSL operation type and shows the ADSL status. ADSL Parameters Parameter Operation Mode...
  • Page 99 DVANCED ETUP ADSL Status The Status screen displays information on connection line status, data rate, operation data and defect indication, and statistics. Scroll down to view more information. 4-65...
  • Page 100 ONFIGURING THE OICE The following items are included on this information page: Parameter Status Line Status Data Rate Upstream Downstream Operation Data/Defect Indication Noise Margin Output Power Attenuation Fast Path FEC Correction Interleaved Path FEC Correction Fast Path CRC Error Interleaved Path CRC Error Loss of Signal...
  • Page 101 Parameter Description Statistics (Superframes represent the highest level of data presentation. Each superframe contains regular ADSL frames, one of which is used to provide superframe synchronization, identifying the start of a superframe. Some of the remaining frames are also used for special functions.) Received Number of interleaved superframes received.
  • Page 102: Ddns

    ONFIGURING THE OICE DDNS Dynamic Domain Name Service (DDNS) provides users on the Internet with a method to tie their domain name to a computer or server. DDNS allows your domain name to follow your IP address automatically by having your DNS records changed when your IP address changes. This DNS feature is powered by DynDNS.org or TZO.com.
  • Page 103: Voip

    VOIP Dial Setting Parameter Prefix setting International Long Distance Local Information Country Code Area Code Group ID Use Group ID Use Group ID for PSTN Number Group ID Tone Style As Tone in Area Description Enter the prefix for dialing international calls. Enter the prefix for dialing long distance calls.
  • Page 104 ONFIGURING THE OICE Port Setting_for Phone You can configure the port settings for your phone in this page. Parameter Port General Setting Port Status Port Type Extension Number FAX Support Security Setting Allows to Make VOIP Authentication Advanced Setting 4-70 ADSL R OUTER Description...
  • Page 105 Port Setting_for Line You can configure the port settings for your phone line in this page. Parameter Port General Setting Port Status Port Type Security Setting Allows to Make VOIP Authentication Advanced setting Click the “Adv Setting” button to set detailed parameters. Description Check this box to enable the function.
  • Page 106 ADSL R ONFIGURING THE OICE OUTER 4-72...
  • Page 107 DVANCED ETUP Outgoing Mode Select the outgoing mode to find the peer gateway, two modes are supported: enterprise mode and ITSP mode. Click “Next” to proceed with the detailed configurations. Enterprise Mode 4-73...
  • Page 108 ADSL R ONFIGURING THE OICE OUTER ITSP mode 4-74...
  • Page 109 H.323 Setting Parameter H.323 H.323 Version H.245Mode Time to Live Endpoint Type Q.931 Port Other Options Alias H.323 ID URL ID Email ID Description This is the version of the H.323 protocol. Select the mode for H.245. Set the TTL time in seconds. Choose the endpoint type: terminal or gateway.
  • Page 110: Numbering Plan

    ONFIGURING THE OICE The device supports the following codecs, use the left and right arrows to select the Codes to use, and use the up and down buttons to arrange the priority. Numbering Plan An alias address in RAS or Q.931 may represent an endpoint or it may represent conferences that an endpoint is hosting.
  • Page 111 Parameter Category Alias Address Choice Number Policy Click the “additional numbering” button to add an additional number. Parameter Additional Numbering Plan Check to enable or disable this function. Manipulating Rules Add New Rule Description Select the category that you want to configure. Select the name that you want to use as the Alias.
  • Page 112 ONFIGURING THE OICE PBX ID/Prefix The current Prefix (PBX ID or E.164 Number Prefix) is listed in this table. Click the “Add” button to add a new entry, or click “Delete” or “Modify” to change the selected entry. Peer Gateway The current incoming peer gateway entries information is listed in this table.
  • Page 113: User Management

    DVANCED ETUP User Management The current Phone User Information is listed in this table. Click the “Add” button to add a new entry, or click “Delete” or “Modify” to change the selected entry. VOIP Status This page displays the phone port status and the Gatekeeper status. 4-79...
  • Page 114: Qos

    ONFIGURING THE OICE The QoS (Quality of Service) function allows you to differentiate VoIP traffic and provide it with high-priority forwarding service. In addition, you can specify the outgoing VC of VoIP packets to further guarantee the voice quality. Parameter Enable or disable QoS module function Direct VoIP to VC...
  • Page 115: Tools

    DVANCED ETUP TOOLS Use the Tools menu to backup the current configuration, restore a previously saved configuration, restore factory settings, update firmware, and reset the Barricade. Configuration Tools Choose a function and click Next. Backup allows you to save the Barricade’s configuration to a file. Restore can be used to restore the saved backup configuration file.
  • Page 116: Firmware Upgrade

    ONFIGURING THE OICE Firmware Upgrade Use this screen to update the firmware or user interface to the latest versions. Download the upgrade file from the SMC web site first, and save it to your hard drive. In the Upgrade Target field, choose Firmware. Then click “Browse...”...
  • Page 117 Reset Click “REBOOT ROUTER” to reset the Barricade. The reset will be complete when the power LED stops blinking. If you perform a reset from this page, the configurations will not be changed back to the factory default settings. Note: If you use the Reset button on the back panel, the Barricade performs a power reset.
  • Page 118: Status

    ONFIGURING THE OICE STATUS The Status page displays WAN/LAN connection status, firmware, and hardware version numbers, illegal attempts to access your network, as well as information on DHCP clients connected to your network. The security log may be saved to a file by clicking “Save” and choosing a location. Scroll down to view more information on the Status page.
  • Page 119 DVANCED ETUP 4-85...
  • Page 120 ONFIGURING THE OICE The following items are included on the Status page: Parameter INTERNET Release Renew GATEWAY INFORMATION Displays the number of attached clients, the firmware versions, ATM PVC Disabled Connect Security Log Save Clear Refresh DHCP Client Log Displays information on DHCP clients on your network. 4-86 ADSL R OUTER...
  • Page 121: Finding The Mac Address Of A Network Card

    Finding the MAC address of a Network Card WINDOWS NT4/2000/XP Click Start/Programs/Command Prompt. Type “ipconfig /all” and press “ENTER”. The MAC address is listed as the “Physical Address.” MACINTOSH Click System Preferences/Network. The MAC address is listed as the “Ethernet Address” on the TCP/IP tab. LINUX Run the command “/sbin/ifconfig.”...
  • Page 122: Troubleshooting

    This section describes common problems you may encounter and possible solutions to them. The Barricade can be easily monitored through panel indicators to identify problems. Troubleshooting Chart Symptom Action LED Indicators Power LED is • • PPENDIX ROUBLESHOOTING Check connections between the Barricade, the external power supply, and the wall outlet.
  • Page 123 ROUBLESHOOTING Troubleshooting Chart Symptom LED Indicators Link LED is Off Network Connection Problems Cannot ping the Barricade from the attached Action • Verify that the Barricade and attached device are powered on. • Be sure the cable is plugged into both the Barricade and the corresponding device.
  • Page 124 Troubleshooting Chart Symptom Action Management Problems Cannot connect • using the web browser • • Forgot or lost • the password Be sure to have configured the Barricade with a valid IP address, subnet mask, and default gateway. Check that you have a valid network connection to the Barricade and that the port you are using has not been disabled.
  • Page 125 ROUBLESHOOTING Troubleshooting Chart Symptom Wireless Problems A wireless PC cannot associate with the Barricade. The wireless network is often interrupted. The Barricade cannot be detected by a wireless client. Action • Make sure the wireless PC has the same SSID settings as the Barricade.
  • Page 126: Ethernet Cable

    Ethernet Cable Caution: DO NOT plug a phone jack connector into any RJ-45 port. Use only twisted-pair cables with RJ-45 connectors that conform with FCC standards. Specifications Cable 10BASE-T 100BASE-TX Cat. 5 100-ohm UTP Wiring Conventions For Ethernet connections, a twisted-pair cable must have two pairs of wires.
  • Page 127: Cables

    ABLES Each wire pair must be attached to the RJ-45 connectors in a specific orientation. The following figure illustrates how the pins on an Ethernet RJ-45 connector are numbered. Be sure to hold the connectors in the same orientation when attaching the wires to the pins. Figure B-1.
  • Page 128: Ethernet Cable

    Pin Assignments With 100BASE-TX/10BASE-T cable, pins 1 and 2 are used for transmitting data, and pins 3 and 6 for receiving data. RJ-45 Pin Assignments Pin Number 1: The “+” and “-” signs represent the polarity of the wires that make up each wire pair. Straight-Through Wiring If the port on the attached device has internal crossover wiring (MDI-X), then use straight-through cable.
  • Page 129: Crossover Wiring

    ABLES Crossover Wiring If the port on the attached device has straight-through wiring (MDI), use crossover cable. Crossover Cable Pin Assignments End 1 1 (Tx+) 2 (Tx-) 3 (Rx+) 6 (Rx-) End 2 3 (Rx+) 6 (Rx-) 1 (Tx+) 2 (Tx-)
  • Page 130: Specifications

    ADSL Cable Use standard telephone cable to connect the RJ-11 telephone wall outlet to the RJ-45 ADSL port on the ADSL Router. Caution: Do not plug a phone jack connector into an RJ-45 port. Specifications Cable ADSL Line Wiring Conventions For ADSL connections, a cable requires one pair of wires.
  • Page 131 ABLES R1 T1 1 2 3 4 5 6 6x2 Jack Signal Name Not used Line 2 Tip Line 1 Ring Line 1 Tip Line 2 Ring Not used Figure B-3. RJ-11 Pinouts R1 T1 R2 1 2 3 4 5 6 1 2 3 4 5 6 6x4 Jack T = Tip...
  • Page 132 Physical Characteristics Ports Four 10/100Mbps RJ-45 ports One ADSL RJ-11 port One Phone port One Line port ADSL Features Supports DMT line modulation Supports Annex A Full-Rate ADSL: up to 8 Mbps downstream, up to 1 Mbps upstream (G.992.1 &T1.413, Issue 2) Supports G.Lite ADSL: up to 1.5 Mbps downstream, up to 512 Kbps upstream Dying GASP support...
  • Page 133: Security Features

    PECIFICATIONS Security Features Password protected configuration access User authentication (PAP/CHAP) with PPP Firewall NAT NAPT VPN pass through (IPSec-ESP Tunnel mode,L2TP, PPTP) LAN Features IEEE 802.1D (self-learning transparent Bridging) DHCP Server DNS Proxy Static Routing, RIPv1 and RIP VoIP Features H.323 Codec - G.711, G.723, G.729a, G.168 Modulation Type...
  • Page 134 PECIFICATIONS Operating Channels IEEE 802.11b compliant: 11 channels (US, Canada) 13 channels (ETSI) 2 Channels (Spain) 4 Channels (France) 14 channels (Japan) Operating Channels IEEE 802.11g compliant: 13 channels (US, Canada, Europe, Japan) RF Output Power Modulation Rate-Output Power (dBm) 802.11b - 1Mbps 16 802.11b - 2Mbps 16 802.11b - 5.5Mbps 16...
  • Page 135 802.11g - 24Mbps -79 802.11g - 36Mbps -75 802.11g - 48Mbps -68 802.11g - 54Mbps -68 Environmental SMC7908VoWBRA complies with the following standards: Temperature: IEC 68-2-14 0 to 50 degrees C (Standard Operating) -40 to 70 degree C (Non-operation) Humidity...
  • Page 136: Specifications

    PECIFICATIONS Standards Conformance Electromagnetic Compatibility CE, ETSI, R&TTE, FCC part 15 class B & FCC part 68, ETS 300 328, ETS 300 826 Safety CSA/NRTL (UL1950, CSA 22.2.950) GS (EN60950), CB (IEC60950)

This manual is also suitable for:

7908vowbra

Table of Contents