TRADEMARKS SOHOware is a trademark of SOHOware Inc. All other names mentioned in this document are trademarks/registered trademarks of their respective owners. SOHOware provides this document “as is,” without warranty of any kind, neither expressed nor implied, including, but not limited to, the particular purpose. We may make improvements and/or changes in this manual or in the product(s) and/or the program(s) described in this manual at any time.
Page 3
Packing List Check the contents of your package to ensure that they match the packing list below. If anything is missing or damaged, contact the store where you purchased the product. The BroadGuard pack comes with the following: One BroadGuard Device One Power Adapter One User’s Guide and Quick Guide Two Color-coded RJ-45 UTP cables...
Chapter 1: Introduction The SOHOware BroadGuard Secure cable/DSL Router provides convenient Internet access to office/family users by sharing a single Broadband Service Provider (BSP) account. The BroadGuard functions with cable/DSL modems and allows up to 253 computers to share secure broadband Internet access simultaneously.
algorithm (Denial of Service & Stateful Packet Inspection) protect your PCs from hacker attacks. Access Control – Provides management/control of Internet application use. The feature allows parents/employers to monitor what their children are doing or to see how the network connection is being used. Flexible and Expandable –...
LED Indicators Color Function Green Lit: Power ON Power Unlit: Power OFF Status Blinking: On power-up the BroadGuard checks for proper operation. The checking procedure takes only a few seconds Lit: If this LED is always lit, the device is not working properly.
Page 12
port of a cable/DSL modem Reset Re-start the BroadGuard by pressing the Reset button for longer than 5 seconds. If you forget the password for the Setup Wizard, restore the default settings by pressing the reset button for longer than 13 seconds.
Chapter 2: Installation What You Need Before installing the SOHOware BroadGuard you need the following: Any Network Operating System with: TCP/IP installed Internet browser installed 10Mbps/100Mbps or 10/100Mbps Ethernet network adapters installed Broadband Internet Account You should be subscribed to a broadband Internet service and have a cable/DSL modem with a 10Base-T interface.
If you have a fixed public IP address, obtain the following information from your ISP The assigned Gateway IP address Domain Name Server’s IP address Subnet Mask Making a Connection All the connection ports are on the rear panel of the BroadGuard. Follow the steps below to complete the hardware installation.
Some BSPs use an Ethernet adapter’s MAC address as an identifier to provide Internet service. In these cases you need to clone the Ethernet adapters MAC address to the BroadGuard. At the BroadGuard, disconnect the Ethernet cables from the other PCs on the network, leaving only the PC with the Ethernet adapter that you wish to register connected.
Wireless LAN Extension This section describes how to extend your BroadGuard LAN to a CableFREE NetBlaster II Wireless hub. Just connect any normal port of the BroadGuard to the CableFREE NetBlaster II with standard RJ-45 Ethernet cable (for more SOHOware NetBlaster II information, visit www.sohoware.com). Figure 6.
Network Configuration If your local network will access the Internet through a single IP, you need to configure the TCP/IP settings. For Windows 95/98/Me, see the following section, for Windows NT 4.0 go to page 13, and for Windows 2000 go to page 15.
step3. If TCP/IP is already shown in the list, go to Step 6. If not, click Add. The Select Network Component Type dialog box will open (Figure 9) Figure 9. Select Network Component Type step4. Double-click Protocol. The Select Network Protocol dialog box will open (Figure 10) Figure 10.
Figure 11. Network step6. On the Configuration card (Figure 11), select TCP/IP and click Properties. The TCP/IP Properties dialog box will open (Figure 12) Figure 12. TCP/IP Properties-1 step7. On the IP Address page (Figure 12), select Obtain an IP address automatically.
step8. On the IP Address page (Figure 12), select Specify an IP address and assign an IP to your PC in the IP Address field. If the PC is to be used as a DMZ Host, or controlled by Access Control, assign an IP to the PC from the range 192.168.1.2~192.168.1.11.
Windows NT 4.0 step1. Click Start/Settings/Control Panel Figure 14. Control Panel step2. Double-click the Network icon (Figure 14). The Network dialog box will open (Figure 15) Figure 15. Network step3. On the Protocols card, select TCP/IP Protocol and click Properties (Figure 15) SOHOware ®...
Figure 16. Microsoft TCP/IP Properties-1 step4. On the IP Address page (Figure 16), select Obtain an IP address from a DHCP server and click OK and go to step 6. If you want to assign a static IP to a PC, go to step 5 Note: The BroadGuard operates as a DHCP server (it automatically assigns an IP address to connecting computers) and must be the only DHCP server on the network...
Figure 17. Microsoft TCP/IP Properties-2 step7. The system will ask you to restart the computer. Click Yes to complete the installation Windows 2000 step1. Click Start/Settings/Control Panel Figure 18. Control Panel SOHOware ® Secure Cable/DSL Router 15...
step2. Double-click the Network and Dial-up Connections icon (Figure 18). The Network and Dial-up Connections window will open (Figure 19) Figure 19. Network and Dial-up Connections step3. Double-click Local Area Connection. The Local Area Connection Status dialog box will open (Figure 20) Figure 20.
Figure 21. Local Area Connection Properties step5. Select Internet Protocol (TCP/IP), and click Properties (Figure 21). The Internet Protocol (TCP/IP) Properties window will open (Figure 22) Figure 22. Internet Protocol (TCP/IP) Properties-1 SOHOware ® Secure Cable/DSL Router 17...
step6. Select Obtain an IP address automatically and Obtain DNS server address automatically. Click OK and go to step 9. If you want to assign a static IP to a PC, go to step 7 Note: The BroadGuard operates as a DHCP server (it automatically assigns an IP address to connecting computers) and must be the only DHCP server on the network step7.
Mac OS Using the DHCP server to assign an IP address step1. Click the Apple icon in the upper left corner of the screen and select Control Panel/TCP/IP. The TCP/IP (Setup Ethernet) dialog box will appear as shown in Figure 24 Figure 24.
Figure 25. Manual Configuration of IP Addresses step2. From the Connect Via list box, choose Ethernet step3. From the Configure list box, choose Manually step4. In the IP Address field, type an IP address: 192.168.1.2 (or 192.168.1.3, 192.168.1.4, or 192.168.1.5) step5.
Chapter 3: Network Configuration BroadGuard Network Configuration Network Configuration is easy to setup on the BroadGuard using a standard web browser (Netscape Communicator 4.0/Microsoft Internet Explorer 3.0 or above). Entering the BroadGuard Setup Home Page step1. Start the web browser and type 192.168.1.1 in the address field (Figure 27).
Setup Home Page There are three sections on the home page: Broadband Use when your BSP (Broadband Service Setup Connection Provider) requests you to enter specific settings, (Basic) e.g. MAC address authentication, PPPoE, host name/domain name, or specifies an IP address to make an Internet connection.
Hacker Alert Sends a test Hacker Alert E-mail Test View Current The PCs in the list have been denied access to Access Control the services shown. Settings Access Monitor Shows the current Internet activities of monitored users. Download Download the latest BroadGuard firmware. Firmware After clicking OK you will enter the setup home page.
Basic Broadband Connection Figure 30. Broadband Connection Select the type of Broadband service that you are subscribed to. Click either Cable Modem or DSL to set up the network properties. There is no need to enter any information in Broadband Connection (Figure 30) unless your BSP has assigned you specific Internet connection information (Host Name, Domain Name, MAC address authentication, PPPoE, or a static IP Address).
Page 33
MAC Address Clone: Some BSPs use an Ethernet adapter’s MAC address as an identifier to provide Internet service. In these cases, you need to clone the Ethernet adapter’s MAC address to the BroadGuard. At the BroadGuard, disconnect the Ethernet cables from the other PCs on the network, leaving only the PC with the Ethernet adapter that you wish to register connected.
Figure 32. Network step2. Click on the Identification tab and write down the information contained in the Computer Name field – this is your Host Name Windows NT 4.0 step1. Right-click Network Neighborhood. Click Properties. The Network dialog box will open Figure 33.
step2. Write down the information contained in the Computer Name field – this is your Host Name Windows 2000 step1. Right-click My Computer. Click Properties. The System Properties dialog box will open Figure 34. System Properties step2. Click on the Identification tab and write down the information contained in the Computer Name field –...
Figure 35. Cable Broadband Connection Click Save and Restart to start sharing your broadband connection. DSL Setup Figure 36. Broadband Connection Check Yes to enable PPPoE service. Several parameters are required to establish a DSL connection via PPPoE (User Name, Login Password, some broadband service providers also require a Service Name).
Connect-on-demand --- This setting allows the BroadGuard to automatically make a connection to your BSP whenever you launch an Internet application. The default setting is “Yes”. Maximum Idle Time Before Disconnecting --- If there is no activity on the connection longer than the time set here, the connection will automatically be dropped.
Hacker Attack E-mail Alerts Figure 38. Hacker Attack E-mail Alerts An anti-attack algorithm is built in to the BroadGuard so that it can protect client PCs from conventional attacks. With BroadGuard, you have a professional firewall but without any specialized setup/configuration. BroadGuard gives your network the capability to prevent many kinds of hackers’...
Change Password Figure 39. Change Password For security reasons you should change the default administrator password (1234) to a password of your choice. step1. Enter the current password, the new password, and then retype it for verification. Click Save. Click Restart to initialize the BroadGuard with the new password step2.
Advanced Access Control Figure 40. Access Control This feature prevents users (or children) from running disallowed Internet applications or accessing unsuitable websites (maximum 10 websites). In order to achieve this functionality, a static IP should be assigned to users who will be restricted.
Figure 41. Globally Disallowed Websites/Keywords This list will be applied to all restricted users. Enter the full domain name of the website or just enter a keyword. Click Save to save the new list. Access Control may be used to restrict use of the following Internet applications: E-mail File Downloading Checking File downloading stops use of the FTP protocol and...
DMZ Host Figure 42. DMZ Host Usually all PCs connected to the BroadGuard are protected from Internet intruders by a built-in firewall. For some kinds of Internet applications, for example, Internet interactive games, video-conferencing, VPN (Virtual Private Networks), or as an e-mail server etc., computers must be exposed to the Internet. The DMZ Host function assigns one of the client computers to be exposed.
DHCP Settings Figure 43. DHCP Settings Under normal operation, all client PCs’ IP addresses are automatically assigned by the BroadGuard’s DHCP server. The IP address range runs from 192.168.1.1 to 192.168.1.254. Up to 253 IP addresses may be assigned to client PCs. The IP address 192.168.1.1 is reserved for the BroadGuard.
Each time the BroadGuard is powered-off, the DHCP IP Address Assignments information will be cleared, even though your computer may still be switched on. To prevent this problem: step1. Shut down your PC step2. Power your BroadGuard on step3. Turn your PCs on Status The Status section contains;...
BroadGuard IP Address: The IP address of the NGB800 Subnet Mask: 255.255.255.0 is the default setting MAC Address: The MAC address of the BroadGuard Firewall: The NGB800 firewall status Tools Five useful tools are provided: PPPoE Check, Hacker Alert Test, View Current Access Control Settings, Access Monitor, and Download Firmware.
Figure 47. PPPoE Service Running Figure 48. PPPoE Check Successful If you see a screen similar to the following ( ), it means that your BSP’s Figure 49 server may not be operating, or something could be wrong with your DSL modem, e.g.
Figure 49. PPPoE Check Unsuccessful A screen such as that shown in Figure 50 indicates that you entered a wrong username, login password, or service name. Go to the DSL broadband connection setup page to check them again. Figure 50. Authentication Failed SOHOware ®...
Hacker Alert Test Figure 51. Hacker Alert Test Click the Alert Test button to automatically generate an email sent to the address specified in Hacker Attack E-mail Alerts, page 30. The subject line will read “NBG800 Hacker Alert Test”. View Current Access Control Settings Figure 52.
Access Monitor Figure 53. Access Monitor Access Monitor shows the current Internet activities of monitored users. The table shows the PC’s IP address, and its Internet activities. Easily monitor Internet activity flow through the BroadGuard to see whether there is any improper Internet activity on your home/office network.
Page 50
Windows Users Download the firmware from the SOHOware web site and save the file on your local hard drive. Double-click the file and follow the on-screen instructions to run the firmware upgrade. After the upgrade process is complete, you must turn off and turn on your BroadGuard to make your new firmware effective.
Chapter 4: Troubleshooting If you cannot find your problem listed below, see Chapter 5: FAQs, page 49, or see the BroadGuard FAQ at the SOHOware website. 1. I can’t connect to the BroadGuard. The BroadGuard is properly installed, LAN connections are OK, and it is powered ON. Ensure that your PC and the BroadGuard are on the same network segment.
Figure 55. Status Check that the PC got an IP address assigned to it automatically (for Windows 95/98/Me see Figure 12, page 11. For Windows NT 4.0, see Figure 16, page 14. For Windows 2000 see Figure 22, page 17. For Mac users, see Figure 24, page 19.
Figure 57. IP Configuration step3. Select the network adapter you use to connect to the BroadGuard. Click Release step4. Click Renew to retrieve new information (IP address, subnet mask, and default gateway address) from the BroadGuard. Click OK to save the changes and exit the program step5.
Figure 59. Command Prompt-2 step4. Type Exit step6. Go to DHCP IP Address Assignments (see Figure 44, page 35). Click Refresh Windows 2000 step1. Click Start/Programs/Accessories/Command Prompt Figure 60. Command Prompt-3 step2. Type “ipconfig /release” (Figure 60) and press Enter step3.
Figure 61. Command Prompt-4 step4. Type Exit. step5. Go to DHCP IP Address Assignments (see Figure 44, page 35). Click Refresh 4. Entering a URL or IP address results in a timeout error. Follow the steps below to solve this problem: step1.
Page 56
5. You can’t view a PC’s name or its IP address in the DHCP IP Address Assignments page, though it can still access the Internet. Each time the BroadGuard is powered-off, the DHCP IP Address Assignments information will be cleared, even though your computer may still be switched on. To prevent this problem: step1.
Chapter 5: FAQs How many PCs simultaneously accessing the Internet can be supported by the BroadGuard? 253 PCs may simultaneously access the Internet via the BroadGuard. Where should we install the BroadGuard on our network? In a typical environment, the BroadGuard is installed between a cable/DSL modem and LAN.
Page 58
www.sohoware.com, where they can be downloaded for free. Does the BroadGuard pass PPTP packets? Yes. Does the BroadGuard support IPSec? This function will be supported in later firmware upgrades. What is the recommended maximum number of VPN sessions I can run on the BroadGuard? We recommend the number of sessions is five or less to prevent influencing the throughput of the BroadGuard.
Page 59
from the Internet only if it is part of a session that was initiated by one of the users on the secure Local Area Network (LAN), but will block all communications that are initiated from the Internet. SPI has the added benefit of being easy to manage, making it ideal for those who don't have MIS people for networking maintenance.
Appendix A: VPN R EMOTE CCESS Thanks to advanced technology, you can use the BroadGuard to remotely access your office VPN server from your home office and you also can build a VPN server for mobile sales to access for urgent purposes. BroadGuard supports all PPTP packet based VPN software BroadGuard VPN Server Configuration To run a VPN server, you will find using a static IP will greatly simplify your...
step2. In Control Panel, double-click the Network icon. The Network dialog box will open (Figure 64) Figure 64. Network step3. Click Add. The Select Network Component Type dialog box will open (Figure 65) Figure 65. Select Network Component Type step4. Double-click Adapter.
step5. In the left window, choose Microsoft. In the right, select Microsoft Virtual Private Networking Adapter. After the Microsoft Virtual Private Networking Adapter component is completely installed, click OK. You will be returned to the Network menu (Figure 67). The Microsoft Virtual Private Networking Adapter item in the Network box indicates that it has been successfully installed.
Figure 68. Welcome to Dial-Up Networking step9. Click Next. The Make New Connection dialog box will open (Figure Figure 69. Make New Connection-1 step10. Type a descriptive name for the connection. Choose Microsoft VPN Adapter from the Select a device dropdown list. Click Next SOHOware ®...
Figure 70. Make New Connection-2 step11. Enter the Internet IP Address of the VPN server you want to connect to and click Next Figure 71. Make New Connection-3 step12. Click Finish to complete the settings. The system may ask you to install Microsoft Dial-Up adapter.
Figure 72. Dial-Up Networking step15. Double-click the newly-created icon. The Connect To dialog box will open (Figure 73) Figure 73. Connect To step16. Enter your User name, Password, and the Internet IP address of the VPN server. Click Connect Note: Connecting to the VPN server may take several attempts before a connection is established.
Figure 74. Connection Established Windows 2000 VPN Server Setup Note: You must have two Network Interface Cards installed in your Windows 2000 server. step1. Click Start/Programs/Administrative Tools/Routing and Remote Access Figure 75. Routing and Remote Access step2. In the Routing and Remote Access box (Figure 75), right-click the server name and choose Configure and Enable Routing and Remote Access.
Figure 76. Common Configurations step3. Check Virtual private network (VPN) server and click Next. The Remote Client Protocols dialog box will open (Figure 77) Figure 77. Remote Client Protocols step4. Make sure TCP/IP is in the Protocols list, then check Yes, all of the available protocols are on this list.
Figure 78. Internet Connection step5. Highlight the Local Area Connection with the IP address in the 192.168.1.2 ~192.168.1.254 range. Click Next. The IP Address Assignment box will open (Figure 79) Figure 79. IP Address Assignment step6. Check From a specified range of addresses. Click Next. The Address Range Assignment box will open (Figure 80) 60 SOHOware ®...
Figure 80. Address Range Assignment step7. Click Next. The New Address Range box will open (Figure 81) Figure 81. New Address Range step8. In the Start IP address field, enter a start IP address in the range 192.168.1.2 ~ 192.168.1.254. Enter an end IP address in the same range.
Figure 82. Address Range Assignment step9. Click Next. The Managing Multiple Remote Access Servers dialog box will open (Figure 83) Figure 83. Managing Multiple Remote Access Servers step10. Check No, I don’t want… then click Next step11. Click Finish. A Routing and Remote Access warning screen will open (Figure 84) Figure 84.
step12. Click OK to return to the Routing and Remote Access main screen (Figure 85) Figure 85. Routing and Remote Access step13. In the left pane, double-click the server and double-click IP Routing. In the right, double-click the Local Area Connection with the IP address in the 192.168.1.2 ~192.168.1.254 range.
Figure 86. Local Area connection Properties step14. On the General card, check Enable IP Router Manager. Click Input Filters. Remove all filters from the list, then click OK. Click Output Filters. Once again, remove all filters from the list, then click OK. Click OK to close the window and return to the Routing and Remote Access window.
Figure 87. Administrative Tools step2. Double-click Computer Management. Expand System Tools/Local Users and Groups. Click Users to show all users lists in Computer Management (Figure 88) Figure 88. Computer Management step3. Double-click the name of the user you want to set permissions for. The Properties box will open (Figure 89) SOHOware ®...
Figure 89. User Properties step4. On the Dial-in card, check either Allow access or Control access through Remote Access Policy (which one you use depends on your security policy). Click OK to save and complete the setting. An icon will appear in the Network and Dial-Up Connections folder (Figure 90) Figure 90.
Page 75
step5. When there is a live connection from a remote user, the icon will show activity (Figure 90) Note: Connections to the VPN server may take several attempts before a connection is established. SOHOware ® Secure Cable/DSL Router 67...
Appendix B: G LOSSARY Ethernet One of the most common Local Area Network (LAN) protocols. Ethernet uses a bus topology that supports a data transfer rate of 10Mbps. Fast Ethernet Much the same as Ethernet but 10 times faster; requires upgraded network cards and hubs.
Page 77
PPPoE supports reliable and straightforward end-user authentication with no security risk and can provide a range of operational benefits to both the subscriber as well as the service provider. Among these are network management and diagnostic capabilities that can identify operational problems and automatically offer resolutions.
Page 78
TCP/IP protocols are used for Internet communications and consist of: TCP (Transmission Control Protocol), which uses a set of rules to exchange messages with other Internet points IP (Internet Protocol), which uses a set of rules to identify Internet addresses on the Internet.
Technical Support Support from Your Network Supplier If additional assistance is required, call your supplier for help. Have the following information ready before you make the call. LED status A list of the product hardware (including revision levels), and if possible, a brief description of the network structure Details of recent configuration changes, if applicable Support from SOHOware...
SOHOware Limited Warranty Hardware SOHOware, Inc. warrants its products to be free of defects in workmanship and materials, under normal use and service, from the date of purchase from SOHOware or its Authorized Reseller and for the period of time specified in the documentation supplied with each product.
Inform the distributor or retailer Ship the product back to the distributor/retailer with prepaid freight. The purchaser must pay the shipping freight from the distributor/retailer to SOHOware. Any package sent C.O.D. (Cash On Delivery) will be refused Charges: Usually RMA (Returned Material Authorization) items will be returned to the purchaser via Airmail, prepaid by SOHOware.
Page 83
EC DECLARATION OF CONFORMITY For the following equipment Product Name : BroadGuard™ - Secure Cable/DSL Router Model Number : NBG800 Produced by: Manufacturer’s : NATIONAL DATACOMM CORPORATION Name Manufacturer’s : 4F, NO. 24-2, INDUSTRY EAST 4TH ROAD Address SCIENCE PARK, HSIN-CHU TAIWAN, R.O.C.
Need help?
Do you have a question about the BroadGuard NBG800 and is the answer not in the manual?
Questions and answers