Page 1
Reference Guide for the Model RO318 Cable/DSL Security Router NETGEAR, Inc. 4500 Great America Parkway Santa Clara, CA 95054 USA Phone 1-888-NETGEAR SM-RO318NA-0 March 2001...
Page 2
In the interest of improving internal design, operational function, and/or reliability, NETGEAR reserves the right to make changes to the products described in this document without notice. NETGEAR does not assume any liability that may occur due to the use or application of the product(s) or circuit layout(s) described herein.
Serie auf die Erfüllung der Vorschriften hin zu überprüfen. Certificate of the Manufacturer/Importer It is hereby certified that the Model RO318 Cable/DSL Security Router has been suppressed in accordance with the conditions set out in the BMPT-AmtsblVfg 243/1991 and Vfg 46/1992. The operation of some equipment (for example, test transmitters) in accordance with the regulations may, however, be subject to certain restrictions.
Package Contents ...2-1 Local Network Hardware Requirements ...2-2 PC Requirements ...2-2 Access Device Requirement ...2-2 The Router’s Front Panel ...2-3 The Router’s Rear Panel ...2-4 Connecting the Router ...2-4 Connecting to your Local Ethernet Network ...2-5 Connecting to Your Internet Access Device ...2-5 Connecting the Power Adapter ...2-6...
Page 6
Account Information ...3-7 Obtaining ISP Configuration Information (Windows) ...3-8 Obtaining ISP Configuration Information (Macintosh) ...3-9 Ready for Configuration ...3-9 Chapter 4 Basic Configuration of the Router Configuring for Internet Access ...4-1 Configuring Security Features ...4-8 E-Mail ...4-8 Keyword ...4-9 Schedule ...4-10 Trusted ...
Page 7
Troubleshooting the Web Configuration Interface ...7-2 Troubleshooting the ISP Connection ...7-3 Troubleshooting a TCP/IP Network Using a Ping Utility ...7-5 Testing the LAN Path to Your Router ...7-5 Testing the Path from Your PC to a Remote Device ...7-6 Appendix A Technical Specifications General Specifications ...
Page 8
Netmask ... B-4 Subnet Addressing ... B-5 Private IP Addresses ... B-7 Single IP Address Operation Using NAT ... B-8 MAC Addresses and Address Resolution Protocol ... B-9 Domain Name Server ... B-9 IP Configuration by DHCP ... B-10 Internet Security and Firewalls ... B-10 What is a Firewall? ...
Page 9
Figure 2-1. RO318 Front Panel ...2-3 Figure 2-2. RO318 Rear Panel ...2-4 Figure 4-1. Login window ...4-2 Figure 4-2. Browser-based configuration main menu ...4-3 Figure 4-3. Browser-based Setup Wizard, first screen ...4-4 Figure 4-4. Browser-based Setup Wizard, second screen ...4-5 Figure 4-5.
Page 11
Port Table Entries (Example) ...5-7 Table 5-5. Edit IP Static Route Fields ...5-9 Table 6-1. System Status fields ...6-2 Table 6-2. Router Statistics Fields ...6-3 Table B-1. Netmask Notation Translation Table for One Octet ... B-6 Table B-2. Netmask Formats ... B-6 Table B-3.
Congratulations on your purchase of the NETGEAR The Model RO318 router provides a secure connection for multiple personal computers (PCs) to the Internet through an external broadband access device (such as a cable modem or DSL modem) that is normally intended for use by a single PC.
Page 14
Reference Guide for the Model RO318 Cable/DSL Security Router For more information about IP address translation, refer to RFC 1631, The IP Network Address Translator (NAT). About This Guide...
Typographical Conventions This guide uses the following typographical conventions: italics Book titles and UNIX file, command, and directory names. Screen text, user-typed command-line entries. courier font Initial Caps Menu titles and window and button names. [Enter] Named keys in text are shown enclosed in square brackets. The notation [Enter] is used for the Enter key and the Return key.
This chapter describes the features of the NETGEAR Model RO318 Cable/DSL Security Router and discusses planning considerations for installation. About the Router The Model RO318 Cable/DSL Security Router with 8-port switch connects your local area network (LAN) to the Internet through an external single-user access device such as a cable modem or DSL modem.
Page 18
– Incoming port forwarding and DMZ for specific services • Built in 8-port 10/100 Mbps Switch – Allows LAN connections at 10 megabits per second (Mbps) or 100 Mbps – Autosensing for Ethernet (10BASE-T) or Fast Ethernet (100BASE-Tx) transmissions – Autosensing MDI/MDIX configures each port for normal or uplink connection –...
• Logging of inappropriate use You can configure the Model RO318 router to log access to Web sites and to e-mail the log to you. You can also configure the router to send an immediate alert e-mail message to you whenever a local user attempts to access a blocked Web site.
Autosensing 10/100 Ethernet With its internal, 8-port 10/100 switch, the Model RO318 router can connect to either a 10 Mbps standard Ethernet network or a 100 Mbps Fast Ethernet network. The local LAN interface is autosensing and is capable of full-duplex or half-duplex operation. In addition, the LAN interface ports automatically sense whether a connection is a normal or uplink connection (MDI/MDI-X), eliminating the need for uplink switches or crossover cables.
Web Management Interface. • Visual monitoring The Model RO318 router’s front panel LEDs provide an easy way to monitor its status and activity. Maintenance and Support NETGEAR offers the following features to help you maximize your use of the Model RO318 router: •...
Page 22
Reference Guide for the Model RO318 Cable/DSL Security Router Introduction...
• Support Information Card If any of the parts are incorrect, missing, or damaged, contact your NETGEAR dealer. Keep the carton, including the original packing materials, in case you need to return the router for repair. Setting Up the Hardware...
The Model RO318 Cable/DSL Security Router is intended for use in a network of personal computers (PCs) that are interconnected by twisted-pair Ethernet cables. PC Requirements To install and run the Model RO318 router over your network of PCs, each PC must have the following: •...
The front panel of the Model RO318 router Figure 2-1. RO318 Front Panel You can use some of the LEDs to verify connections. the front panel of the Model RO318 router. These LEDs are green when lit. Table 2-1. LED Descriptions Label...
The Router’s Rear Panel The rear panel of the Model RO318 router switch. Figure 2-2. RO318 Rear Panel The rear panel contains the following features: • Power switch • 12 VDC power adapter outlet • Internet Ethernet port for connecting the router to a cable or DSL modem •...
• Connect any LOCAL port of your Model RO318 router to any port of an Ethernet hub or switch using a standard or crossover Ethernet cable. Because the Model RO318 router is capable of automatically sensing the polarity of the Ethernet connection, you can connect to the other hub’s normal or uplink port, using a...
Verify that the PWR LED on the router is lit. Verifying Power After applying power to the router, complete the following steps to verify that power is correctly applied: When power is first applied, verify that the PWR LED is on.
This chapter describes how to prepare your PC network to connect to the Internet through the Model RO318 Cable/DSL Security Router and how to order broadband Internet service from an Internet service provider (ISP). Preparing Your Personal Computers for IP Networking The Model RO318 Cable/DSL Security Router uses the Transmission Control Protocol/Internet Protocol (TCP/IP).
“Appendix B, “Networks, Routing, and Firewall The Model RO318 router is shipped preconfigured as a DHCP server. The router assigns the following TCP/IP configuration information automatically when the PCs are rebooted: •...
Page 31
You must have an Ethernet adapter, the TCP/IP protocol, and Client for Microsoft Networks. Note: It is not necessary to remove any other network components shown in the Network window in order to install the adapter, TCP/IP, or Client for Microsoft Networks.
Install TCP/IP on each PC, leaving the PC configured to obtain configuration settings automatically (by DHCP). Physically connect the PCs and the router using a hub or a direct connection. Restart the router and allow it to boot. Restart each PC.
Select your Ethernet adapter. The window is updated to show your settings, which should match the values below if you are using the default TCP/IP settings that NETGEAR recommends: • The IP address is between 192.168.0.2 and 192.168.0.31 •...
TCP/IP Control Panel. From the Apple menu, select Control Panels, then TCP/IP. The panel is updated to show your settings, which should match the values below if you are using the default TCP/IP settings that NETGEAR recommends: •...
When the router’s WAN port is connected to the broadband modem, the router appears to be a single PC to the ISP. The router then allows the PCs on the local network to masquerade as the single PC to access the Internet through the broadband modem. The method used by the router to accomplish this is called Network Address Translation (NAT) or IP masquerading.
As mentioned above, you may need to collect configuration information from your PC so that you can use this information when you configure the Model RO318 router. Following this procedure is only necessary when your ISP does not dynamically supply the account information.
Ready for Configuration After configuring all of your PCs for TCP/IP networking and connecting them to the LOCAL network of your Model RO318 router, you are ready to access and configure the router. Proceed to the next chapter. Preparing Your Network...
Page 38
Reference Guide for the Model RO318 Cable/DSL Security Router 3-10 Preparing Your Network...
This chapter describes how to perform the basic configuration of your Model RO318 Cable/DSL Security Router using the Setup Wizard, which walks you through the configuration process for your Internet connection. This chapter also describes the configuration for content filtering and reporting.
This screen may have a different appearance in other browsers. Type in the User Name box, admin If your router password was previously changed, enter the current password. Figure 4-1 below:. in the Password box, and then click OK. 1234...
Reference Guide for the Model RO318 Cable/DSL Security Router In the opening screen, shown in Figure 4-2, select WIZARD SETUP. Figure 4-2. Browser-based configuration main menu Basic Configuration of the Router...
These parameters may be necessary to access your ISP’s services such as mail or news servers. If you leave the Domain Name field blank, the router will attempt to learn the domain automatically from the ISP. If this is not successful, you will need to enter it manually.
Enter the PPTP login user name and password provided by your ISP. These fields are case sensitive. • If you wish to change the login timeout, enter a new value in seconds. Basic Configuration of the Router Figure 4-4 below:...
Service Type as Standard. Click on Next to go to the final Wizard screen shown in Figure 4-5. Browser-based Setup Wizard, third screen This screen provides setup for the following parameters: Figure 4-5 below. Basic Configuration of the Router...
Page 45
IP addresses. Typically your ISP transfers the IP addresses of one or two DNS servers to your router during login. If the ISP does not transfer an address, you must obtain it from the ISP and enter it manually here. If you enter an address here, you should reboot your PCs after configuring the router.
Configuring Security Features The Model RO318 Cable/DSL Security Router provides you with Web content filtering options, plus activity reporting and instant e-mail alerts of browsing destinations and security incidents. Parents and network administrators can establish restricted browsing policies based on time-of-day, web addresses and web address keywords.
In this case, the router overwrites the log and discards its contents. Keyword The Model RO318 router allows you to restrict access based on web addresses and web address keywords. Up to 255 entries are supported in the Keyword list. The Keyword tab is shown below:...
If you wish to block all Internet browsing access during a scheduled period, enter the keyword “.” and set the schedule in the Schedule menu. Schedule The Model RO318 router allows you to specify when blocking will be enforced. The Schedule tab is shown below: •...
Reference Guide for the Model RO318 Cable/DSL Security Router Trusted The Model RO318 router allows you to specify one Trusted Host, which is a PC that will be exempt from blocking and logging. Since the Trusted Host will be identified by an IP address, you should configure that PC with a fixed IP address.
Logs The Model RO318 router maintains two activity logs, one for browsing destinations and another for security incidents. The Content Filter Log is a detailed record of what websites you have accessed or attempted to access. Content Filter Log entries will only appear when keyword blocking is enabled, and no log entries will be made for the Trusted Host.
Page 51
Click this button to view the previous log page. Refresh Click this button to refresh the log screen. Clear Click this button to clear the log entries. Click this button to view the next log page. Next Page Basic Configuration of the Router Table 4-2 Table 4-3 4-13...
Page 52
Reference Guide for the Model RO318 Cable/DSL Security Router 4-14 Basic Configuration of the Router...
Advanced Configuration of the Router This chapter describes how to configure the advanced features of your Model RO318 Cable/DSL Security Router. These features can be found by clicking on the Advanced heading in the Main Menu of the browser interface.
To utilize this service, you must register with the Dynamic DNS service provider, who will give you a password or key. At this time, the Model RO318 router only supports DynDNS service. For more information, visit www.dyndns.org.
LAN Setup Menu DHCP The Model RO318 router have the capability to act as a DHCP server, allowing them to assign IP, DNS, and default gateway addresses to attached PCs. The assigned default gateway address is the LAN address of the router. IP addresses will be assigned to the attached PCs from a pool of addresses specified in this menu.
The number of sequential addresses available for assignment to attached hosts. The maximum is 32. If you want the router to provide the Primary DNS Server address to attached hosts, enter the DNS address in this field. If this field is 0.0.0.0, the router assigns its own address as DNS Server, and performs a DNS Proxy if it can obtain a DNS address from the ISP.
Page 57
RIP Version Multicast Note: If you change the LAN IP address of the router while connected through the browser or Telnet, you will be disconnected. You must then open a new connection to the new IP address and log in again.
Requested services are identified by port numbers in an incoming IP packet. For example, a packet that is sent to the external IP address of your router and destined for port number 80 is an HTTP (Web server) request, and port 21 is an FTP request. Examples of port numbers are shown at the top of the PORTS menu, although you are not limited to these choices.
Use the PORTS menu to configure the router to forward incoming protocols to IP addresses on your local network based on the port number. In addition to servers for specific protocols, you can also specify a Default (also called DMZ) Server to which all other incoming protocols are forwarded.
Some online games and videoconferencing applications are incompatible with NAT. The Model RO318 router is programmed to recognize some of these applications and to work properly with them, but there are other applications that may not function well. In some cases, one local PC can run the application properly if that PC’s IP address is entered as the default in...
On the LAN, the gateway must be a router on the same segment as the router. Over the WAN, the gateway will be the IP address of the router at your ISP.
• Your company’s network is 134.177.0.0. When you first configured your router, two implicit static routes were created. A default route was created with your ISP as the gateway, and a second static route was created to your local network for all 192.168.x.x addresses.
In this case you must define a static route, telling your router that 134.177.0.0 should be accessed through the ISDN router at 192.168.100. The static route would look like Figure 5-5. Static Route Example In this example: • The Destination IP Address and IP Subnet Mask fields specify that this static route applies to all 134.177.x.x addresses.
Page 64
Reference Guide for the Model RO318 Cable/DSL Security Router 5-12 Advanced Configuration of the Router...
Chapter 6 Maintenance This chapter describes how to use the maintenance features of your Model RO318 Cable/DSL Security Router. These features can be found by clicking on the Maintenance heading in the Main Menu of the browser interface. System Status The System Status menu provides a limited amount of status and usage information.
Page 66
This field displays the IP Subnet Mask being used by the Internet (WAN) port of the router. If set to None, the router is configured to use a fixed IP address on the WAN or to use PPPoE. If set to Client, the router is configured to obtain an IP address dynamically from the ISP.
Click on the “Show Statistics” button to display router usage statistics, as shown in below: Figure 6-2. Router Statistics screen This screen shows the following statistics:. Table 6-2. Router Statistics Fields Field Description Port The statistics for the WAN (Internet) and LAN (local) ports. For each port, the screen...
Software Upgrade The routing software of the Model RO318 router is stored in FLASH memory, and can be upgraded as new software is released by NETGEAR. Upgrade files can be downloaded from Netgear's website. If the upgrade file is compressed (.ZIP file), you must first extract the binary (.BIN) file before sending it to the router.
Note: When uploading software to the Model RO318 router, it is important not to interrupt the Web browser by closing the window, clicking a link, or loading a new page. If the browser is interrupted, it may corrupt the software. When the upload is complete, your router will automatically restart.
To back up or restore the configuration file over the LAN using an FTP client program, follow these steps If you are sending a configuration file to the router, first rename it to rom-0, with no extension. Use your FTP client to establish an FTP connection to the router at the LAN address, 192.168.0.1.
• Upload the default config file romfile0.318, which can be found on the Model RO318 Resource CD. This config file is also available on the NETGEAR Web site. The config file can be uploaded through the Web Manager (see 6-5), or by ftp (see “Backing Up and Restoring the Configuration Using FTP“...
Page 72
Continue to hold the Default Reset button. The TEST LED will begin to blink, then will flicker very quickly after about 10 or 15 seconds. This indicates that the defaults have been restored and the router is now rebooting. Release the Default Reset button and wait for the router to reboot. Maintenance...
• Check that you are using the 12 V DC power adapter supplied by NETGEAR for this product. If the error persists, you have a hardware problem and should contact technical support.
Test LED Never Blinks or LED Stays On When the router is turned on, the Test LED blinks for about 30 seconds at a rate of approximately 0.5 Hz and then turns off. If the Test LED does not blink, or if it stops blinking and stays on, there is a fault within the router.
• Make sure your PC’s IP address is on the same subnet as the router. If you are using the recommended addressing scheme, your PC’s address should be in the range of 192.168.0.2 to 192.168.0.32. Refer to “Verifying TCP/IP Properties (Windows)“ on page 3-4 TCP/IP Properties (Macintosh)“...
Page 76
If 0.0.0.0 is shown, your router has not obtained an IP address from your ISP. If your router is unable to obtain an IP address from the ISP, you may need to force your cable or DSL modem to recognize your new router by performing the following procedure: Turn off power to the cable or DSL modem.
Testing the LAN Path to Your Router You can ping the router from your PC to verify that the LAN path to your router is set up correctly. To ping the router from a PC running Windows 95 or later: From the Windows toolbar, click on the Start button and select Run.
— Check that your cable or DSL modem is connected and functioning. — If your ISP assigned a host name to your PC, enter that host name as the router name in the Wizard Setup.
This appendix provides technical specifications for the Model RO318 Cable/DSL Security Router. General Specifications Network Protocol and Standards Compatibility Data and Routing Protocols: Power Adapter North America: United Kingdom, Australia: Europe: Japan: All regions (output): Technical Specifications Technical Specifications TCP/IP, RIP-1, RIP-2, DHCP...
Page 80
Physical Specifications Dimensions: Weight: Environmental Specifications Operating temperature: Operating humidity: Electromagnetic Emissions Meets requirements of: Interface Specifications LAN: WAN: 253 by 181 by 35 mm 9.95 by 7.1 by 1.4 in. 1.1 kg 2.5 lb. 0 to 40 C 90% maximum relative humidity, noncondensing FCC Part 15 Class B VCCI Class B EN 55 022 (CISPR 22), Class B...
A router is a device that forwards traffic between networks based on network layer information in the data and on routing tables maintained by the router. In these routing tables, a router builds up a logical picture of the overall network by gathering and exchanging information with other routers in the network.
Information Protocol (RIP). Using RIP, routers periodically update one another and check for changes to add to the routing table. The Model RO318 router supports both the older RIP-1 and the newer RIP-2 protocols. Among other improvements, RIP-2 supports subnet and multicast protocols. RIP is not required for most home applications.
There are five standard classes of IP addresses. These address classes have different ways of determining the network and host sections of the address, allowing for different numbers of hosts on a network. Each address type begins with a unique bit pattern, which is used by the TCP/IP software to identify the address class.
• Class D Class D addresses are used for multicasts (messages sent to many hosts). Class D addresses are in this range: 224.0.0.0 to 239.255.255.255. • Class E Class E addresses are for experimental use. This addressing structure allows IP addresses to uniquely identify each physical network and each node on each physical network.
Reference Guide for the Model RO318 Cable/DSL Security Router Subnet Addressing By looking at the addressing structures, you can see that even with a Class C address, there are a large number of hosts per network. Such a structure is an inefficient use of addresses if each end of a routed link requires a different network number.
Page 86
Note: The number 192.68.135.127 is not assigned because it is the broadcast address of the first subnet. The number 192.68.135.128 is not assigned because it is the network address of the second subnet. The following table lists the additional subnet mask bits in dotted-decimal notation. To use the table, write down the original class netmask and replace the 0 value octets with the dotted-decimal value of the additional subnet bits.
Netmask Formats 255.255.255.252 255.255.255.254 255.255.255.255 NETGEAR strongly recommends that you configure all hosts on a LAN segment to use the same netmask for the following reasons: • So that hosts recognize local IP broadcast packets When a device broadcasts to its segment neighbors, it uses a destination address of the local network address with all ones for the host address.
The Model RO318 router employs an address-sharing method called Network Address Translation (NAT). This method allows several networked PCs to share an Internet account using only a single IP address, which may be statically or dynamically assigned by your ISP.
Many of the resources on the Internet can be addressed by simple descriptive names such as www.NETGEAR.com. This addressing is very helpful at the application level, but the descriptive name must be translated to an IP address in order for a user to actually contact the resource. Just as...
IP addresses, along with other information (such as gateway and DNS addresses) that it may assign to the other devices on the network. The Model RO318 router has the capacity to act as a DHCP server.
A more sophisticated attack may attempt to exploit some weakness in the operating system used by your router or gateway. Some operating systems can be disrupted by simply sending a packet with incorrect length information.
Ethernet Cabling Although Ethernet networks originally used thick or thin coaxial cable, most installations currently use unshielded twisted pair (UTP) cabling. The UTP cable contains eight conductors, arranged in four twisted pairs, and terminated with an RJ45 type connector. A normal "straight-through" UTP Ethernet cable follows the EIA568B standard wiring and pinout as described in Table B-3.
• Auto MDI/MDI-X switching Some Ethernet switch products, such as the Model RO318 router, are able to sense the polarity of a connection and automatically adapt to the proper mating polarity. Cable Quality...
Page 94
Reference Guide for the Model RO318 Cable/DSL Security Router B-14 Networks, Routing, and Firewall Basics...
Domain names are of the form of a registered entity name plus one of a number of predefined top level suffixes such as .com, .edu, .uk, etc. For example, in the address mail.NETGEAR.com, mail is a server name and NETGEAR.com is the domain.
Page 96
See Internet Packet Exchange. Internet service provider. Internet Packet Novell’s internetworking protocol. Exchange Internet Protocol The main internetworking protocol used in the Internet. Used in conjunction with the Transfer Control Protocol (TCP) to form TCP/IP. See local area network. local area network LAN.
Page 97
Internet. RFCs can be found at www.ietf.org. See Routing Information Protocol. router A device that forwards data between networks. An IP router forwards data based on IP source and destination addresses. Routing Information A protocol in which routers periodically exchange information with one...
Page 98
Reference Guide for the Model FR314 Cable/DSL Firewall Router Glossary...
Page 99
NAT. See Network Address Translation Encapsulation 4-5 EPROM, for firmware upgrade 1-2, 1-5 erase configuration 6-5 Ethernet cable B-12 factory settings, restoring 6-5 features 1-1 front panel 2-3 FTP, updating the router software 6-6 gateway address 3-8, 3-9 host name 4-4 Index...
Page 100
DHCP Client ID 3-6 Obtaining ISP Configuration Information 3-9 MDI/MDI-X wiring B-12 Metric, Static Route menu 5-10 Multicast 5-5 NAT. See Network Address Translation NETGEAR contacting xiii netmask translation table B-6 Network Address Translation 1-4, B-8 package contents 2-1 password...
Need help?
Do you have a question about the RO318 and is the answer not in the manual?
Questions and answers