NetComm NB8WVPN, User Manual

Page 1: ...NB8WVPN User Guide...

Page 2: ...his manual is presumed to have a basic understanding of telecommunications terminology and concepts If you find the product to be broken or malfunctioning please contact technical support for immediat...

Page 3: ...nd no heavy items should be placed on the cord In addition do not walk on step on or mistreat the cord Use only the power cord and adapter that are shipped with this device To safeguard the equipment...

Page 4: ...y any means without prior written consent of NetComm Corporation NOTE This document is subject to change without notice Save Our Environment The cardboard box the plastic contained in the packaging an...

Page 5: ...ablishing your Wireless Connection 20 6 BASIC 25 6 1 Basic Home 25 6 2 Basic ADSL Quick Setup 26 7 WIRELESS 27 7 1 Wireless Setup 27 7 2 Wireless Security Quick Setup 28 7 3 Wireless Security in Detai...

Page 6: ...69 9 6 Advanced Configuring IPSec VPN Tunnels 71 10 STATUS 76 10 1 Status Diagnostics 76 10 2 Status System Log 77 10 3 Status WAN 78 10 4 Status Statistics 79 10 5 Status LAN Statistics 79 10 6 Stat...

Page 7: ...t s look at some of the capabilities offered by the NB8WVPN in brief ADSL Broadband The NB8WVPN offers the next generation of broadband ADSL technology with ADSL2 2 which boosts ADSL s performance sig...

Page 8: ...comm com au Your NB8WVPN contains the following items NB8WVPN Broadband Communications Gateway 18VDC 1A Power Supply RJ11 ADSL Line Connection Cable RJ45 Cat 5 Ethernet cable Installation CD Quick Sta...

Page 9: ...ts the NB8WVPN to a POTS line may be referred to as a pass through line RJ11 Telephone cables may be referred to as RJ11 which is the format of the connection plug used for telephones Ethernet Local a...

Page 10: ...thernet or Wireless Network card CD ROM drive Web browser e g Internet Explorer 5 1 or better Netscape Navigator Mozilla FireFox 1 0 4 or better ADSL Requirement ADSL broadband connection to an ISP In...

Page 11: ...your Service Provider if required A central splitter may be installed with your ADSL service or when your current phone line is upgraded to ADSL If your telephone line is already split you will not ne...

Page 12: ...a moment to acquaint yourself with the indicator lights ports and default settings of the NB8WVPN prior to commencing with installation LED Indicators LED Colour Mode Function POWER Green On The rout...

Page 13: ...ds to return your NB8WVPN to its default settings Antenna Wireless LAN antenna Power Connect the power adaptor that comes with your NB8WVPN Power Button Press to power on off your NB8WVPN 4 x LAN 4 x...

Page 14: ...ork settings LAN Management Static IP Address 192 168 1 1 Subnet Mask 255 255 255 0 Default Gateway blank WAN Internet Empty Once you have run through ADSL Quick Setup you will have a saved WAN connec...

Page 15: ...d to perform a factory reset by NetComm Support staff In order to restore your NB8WVPN to its factory default settings please follow these steps Ensure that your NB8WVPN is powered on for at least 10...

Page 16: ...s required to get the NB8WVPN up and running 1 Connecting the cables between NB8WVPN PC and telephone s and power on 2 Establish ADSL connection 3 Set up Wireless Computer with Network Card Installed...

Page 17: ...o either a computer directly or a network hub or switch using CAT5 ethernet cables 2 Connect the power pack to the ADSL Router and switch on the power button 3 Ensure that there is a LAN link light on...

Page 18: ...type e g PPPoA Static Bridge etc If unsure follow the steps in this section rst At this point you must have your NB8WVPN connected according to Section 1 above with your PC connected to the NB8WVPN v...

Page 19: ...your PPPoE User ID and PPPoE Password and click the Save Reboot button Do not adjust the VPI or VCI elds unless your ISP has instructed you to do so The NB8WVPN will apply all of the settings in appr...

Page 20: ...eed with Establishing an ADSL link via PPPoE above Computer Hardware Configuration This section provides instructions for con guring the TCP IP Network settings on your computer to work with your Mode...

Page 21: ...matically Also click the radio button labelled Obtain DNS server address automatically 7 Click OK twice to con rm your changes and close the Control Panel Windows 2000 PCs First check for the IP proto...

Page 22: ...ociated with your network card or adapter 11 In the TCP IP Settings dialog box click the radio button labelled Obtain an IP address automatically 12 Click OK twice to con rm and save your changes and...

Page 23: ...e multiple TCP IP listings select the listing associated with your network card or adapter 11 In the TCP IP Properties dialog box click the IP Address tab 12 Click the radio button labelled Obtain an...

Page 24: ...to use in the future Let s start by taking a look at the menus in the web interface 1 Login to the NB8WVPN web interface http 192 168 1 1 2 Enter your username password default is admin admin The NB8W...

Page 25: ...Bootloader CPE Version The version of the bootloader Wireless Driver Version The version of the wireless driver ADSL Version The version of the ADSL chip Line Rate Upstream The upstream line rate in K...

Page 26: ...oot This button saves your settings reboots the NB8WVPN and connects to the Internet Once completed you will be returned to the Basic Home page Click on Save Reboot close the browser window and wait s...

Page 27: ...int is unchecked the SSID will be broadcast to any wireless client in range SSID Station Set Identi er or network name replace with name of your choice All stations must be con gured with the correct...

Page 28: ...up explains how to implement basic security on your NB8WVPN wireless network Quick Security Setup 1 WEP Security Your NB8WVPN has WEP Wired Equivalent Privacy encryption enabled by default Your networ...

Page 29: ...Security Setup 2 WPA PSK If a stronger network security setting is required go to Wireless Security and select WPA PSK from the Network Authentication drop down menu Enter a Network Key of your own c...

Page 30: ...twork key is often used in the context of wireless networking The Network Key can be a text string although in some systems network keys are generated from a pass phrase which is entered in one eld fr...

Page 31: ...to deploy strict security methods and policies for their employees Accordingly these technologies will exceed the requirements of home users An important element of WPA security is a RADIUS server sta...

Page 32: ...method also requires speci cation of the IP address of a RADIUS server the port on which to connect to the RADIUS server and the shared key used to authenticate with the RADIUS server WPA PSK WPA PSK...

Page 33: ...and lowercase letters numbers and punctuation at least 20 characters long or hexadecimal digits numbers 0 9 and letters A F at least 24 hexadecimal digits long Note The less obvious longer and more ra...

Page 34: ...re than one second Time sensitive applications like Citrix or video will all break without fast roaming Network Re Auth Interval is the interval speci ed seconds that the wireless client need store au...

Page 35: ...ge your channel accordingly Auto Channel Timer Rate Default rate is Auto and operates at the 54 Mbps data rate when possible but drops to lower rates when necessary dependent on signal strength and th...

Page 36: ...he entered value is represented in ms Default is 100 Acceptable entry range is 1 to 0xffff 65535 XpressTM Technology Select enable to activate in built XpressTM Technology 1 54gTM Mode Select the mode...

Page 37: ...and restore your details MAC ltering is enabled for a list of speci c MAC addresses and can be set to Deny or Allow Field Name Comment MAC Restrict Mode Off disables MAC ltering Allow permits access...

Page 38: ...con gure the NB8WVPN in bridge mode To access the Wireless Bridge feature click on Wireless Wireless Bridge Above default setting for NB8WVPN to act as Access Point Field Name Comment AP Mode Allows y...

Page 39: ...au 39 ADSL2 VPN Router 7 6 Wireless Station Info This page shows the MAC address of authenticated wireless stations that are connected to the NB8WVPN and their status In the example below there is one...

Page 40: ...device to its factory defaults The default le name is back up settings conf or give it an explanatory name e g NB8WVPNHome conf and save it to somewhere safe on your computer 8 2 Management Device Se...

Page 41: ...pport the reset to default button If the reset button is continuously pushed for more than 5 seconds the boot loader will erase the entire con guration data saved on the ash memory Note 2 Restoring sy...

Page 42: ...agent in this case the NB8WVPN if SNMP enabled An SNMP community performs the function of authenticating SNMP traf c A community name acts as a password that is typically shared among SNMP agents and...

Page 43: ...Management SNTP The SNTP option under Management menu con gures the NB8WVPN s time automatically by synchronizing with Internet time servers Note The NB8WVPN is con gured to Australian EST by default...

Page 44: ...WAN access for HTTP and click Save and Apply Then enter the address http WAN_IP_NB8WVPN in the browser address bar of the remote machine EXAMPLE 2 Assume that you already have a web server on your LA...

Page 45: ...IP addresses can access the NB8WVPN for the speci ed services Before the service is enabled specify the IP addresses by clicking the Add button and entering the address details Enter the IP address an...

Page 46: ...urrent con guration and reboots the NB8WVPN Close the NB8WVPN s Con guration window and wait for 2minutes before reopening your web browser If necessary recon gure your PC s IP address to match your n...

Page 47: ...et of steps which establishes connection parameters covering the following Field Means VPI VCI Always 8 35 in Australia Con ID Sequence number of connection e g 1 2 Category ATM Service Category leave...

Page 48: ...able to cycle through connection pro les in the Status Diagnostics window if more than one WAN pro le exists a button will displayed for Next Connection in the sequence Alternative Connection Types I...

Page 49: ...oot button saves the LAN con guration data and reboots the NB8WVPN to make the new con guration effective Field Means LAN IP Address Default 192 168 1 1 The LAN IP address of your NB8WVPN LAN Subnet M...

Page 50: ...DHCP server Only to be done if Static IP address is set up Enable DHCP Server Default Enabled Start IP Address Default 192 168 1 2 The rst IP address that will be issued to the rst DHCP client connect...

Page 51: ...have been elicited by an outgoing request other packets are discarded However this causes connectivity problems as any requests originating from applications on the other side of the NAT device such...

Page 52: ...ows you to direct incoming traf c from WAN side identi ed by Protocol and External port to the Internal server with private IP address on the LAN side The Internal port is required only if the externa...

Page 53: ...y con gure the necessary ports Enter the Server s IP address e g 192 168 1 110 Click Save Apply Let s take a look at the elds on this page Field Means Select a Service Select a type of service you wis...

Page 54: ...orts to be open you would enter the last port in the range here Protocol Select the protocol from the dropdown list e g if you were hosting a video service you would select UDP Internal Port Start The...

Page 55: ...he out going request which then opens the ports speci ed in the Open Port Start End range to enable the application to reply For this to work you need to know the Outgoing Port s which the application...

Page 56: ...a speci ed and isolated zone on your network It is most commonly used to provide access to a Web server or Game server without exposing the rest of your computers to the Internet Enter the IP address...

Page 57: ...iteria Field Name Comment Filter Name Enter name for this lter rule Protocol Choose UDP TCP or both Source IP address Enter source IP address Source Subnet Mask Enter source Subnet Mask Source Port Ei...

Page 58: ...s of the day Enter target machine s MAC address and create a Rule Name called User Name and a time range If you wish to restrict access from say 10 00pm until 6 30 in the morning create two rules to c...

Page 59: ...de www netcomm com au 59 ADSL2 VPN Router 9 3 Advanced QoS To display the QoS function you need to enable the QoS feature in the WAN Setup Choose Add to configure network traffic classes The following...

Page 60: ...Service the corresponding TOS byte in the IP header of the upstream packet is overwritten by the selected value Note If Differentiated Service Configuration checkbox is selected you will only need to...

Page 61: ...NET 1 4 USB Wireless or Wireless_Guest Protocol User can select from TCP TCP UDP UDP or ICMP Source IP Address Enter the source IP address Source Subnet Mask Enter the subnet mask for the source IP ad...

Page 62: ...acket belongs to SET 1 if a binary AND of its source MAC address with the Source MAC Mask is equal to the binary AND of the Source MAC Mask and this field Source MAC Mask This is the mask used to deci...

Page 63: ...way Default Gateway is checked by default and ensures that the NB8WVPN will accept the rst received IP address assigned to it by the DHCP server to which it connects This will generally be the ISP s s...

Page 64: ...r LAN segment which are connected to the NB8WVPN via another router See diagram below for example setup Image may vary from product To set a static route click add and enter the relevant details in th...

Page 65: ...vanced Routing Dynamic Route Dynamic routing makes use of the RIP protocol to allow the NB8WVPN to adapt to changes in the network RIP enables the device to determine the best route for each packet ba...

Page 66: ...establishment If the checkbox is not selected enter the primary and optional secondary DNS server IP addresses Click Save button to save the new configuration You must reboot the router to make the n...

Page 67: ...Add button The following screen will be displayed D DNS provider Select a dynamic DNS provider from the list Hostname Enter the name for the dynamic DNS server Interface Select the interface from the...

Page 68: ...lite if you want the system to use either G Dmt or G lite mode T1 413 Sets the T1 413 if you want the system to use only T1 413 mode ADSL2 Enabled The device can support the functions of the ADSL2 An...

Page 69: ...ll perform as an independent network To support this feature you must create mapping groups with appropriate LAN and WAN interfaces using the Add button The Remove button will remove the grouping and...

Page 70: ...rs are for IP setup box video The Lan interfaces are ETH1 ETH2 ETH3 ETH4 Wireless and USB Port mapping configuration are 1 Default ENET1 ENET2 ENET3 ENET4 Wireless Wireless_Guest and USB 2 Video nas_0...

Page 71: ...ollowing protocols Encapsulating Security Payload ESP Provides confidentiality authentication and integrity Authentication Header AH Provides authentication and integrity Internet Key Exchange IKE Pro...

Page 72: ...e two IPSec gateway addresses The gateways perform the encapsulation decapsulation on behalf of the hosts Tunnel mode ESP prevents an attacker from analyzing the data and deciphering it as well as kno...

Page 73: ...ss and domain name Tunnel access from local IP addresses It chooses methods that specify the acceptable host IP on the local side It has single and subnet IP Address for VPN If you choose single pleas...

Page 74: ...acceptable host IP on the local side It has single and subnet IP Address for VPN If you choose single it displays the numeric address If you choose subnet it displays two fields of numeric address and...

Page 75: ...49 Remote IPSec Gateway Address 211 21 189 53 210 241 239 77 IPSec Connection Name Tunnel 1 Tunnel 1 Tunnel access from local IP addresses IP Address for VPN 192 168 1 0 192 168 2 0 IP Subnetmask 255...

Page 76: ...ries of indicators about various parameters of your broadband connection Use to troubleshoot connection problems in event of a fail signi er click on fail and follow troubleshooting instructions Note...

Page 77: ...em Log to view entries or on Con gure to set parameters for log entries Applicable to network or device engineers and administrators Field Description Configure Log Level Select level of application e...

Page 78: ...NB8WVPN User Guide YML8WVPN 78 www netcomm com au 10 3 Status WAN Displays summary of current WAN connection including your Public WAN IP last cell in display...

Page 79: ...ATM ADSL and VDSL All statistics screens are updated every 15 seconds 10 5 Status LAN Statistics The Network Statistics screen shows the interface statistics for the ATM AAL5 interface and Ethernet in...

Page 80: ...the values of the ATM VPI VCI Protocol Shows the connection type such as PPPoE PPPoA etc Interface Shows connection interfaces Received Transmitted Bytes Rx TX receive transmit packet in Bytes Pkts Rx...

Page 81: ...lls with invalid cell header patterns If cells with undefined PTI values are discarded they are also counted here In Hec Errors Number of cells received with an ATM Cell Header HEC error In Invalid Vp...

Page 82: ...errors In Discards Number of received AAL5 AAL0 CPCS PDUs discarded due to an input buffer overflow condition Out Discards This field is not currently used ATM AAL5 Layer Statistics for each VCC over...

Page 83: ...3 ADSL2 VPN Router 10 8 Status ADSL Statistics The following figure shows the ADSL Network Statistics screen Within the ADSL Statistics window a bit Error Rate Test can be started using the ADSL BER T...

Page 84: ...ould obtain Rate Kbps Current sync rate Super Frames Total number of super frames Super Frame Errors Number of super frames received with errors RS Words Total number of Reed Solomon code errors RS Co...

Page 85: ...YML 8WVPN NB8WVPN User Guide www netcomm com au 85 ADSL2 VPN Router 10 9 Status Route Summarises parameters of IP route for device 10 10 Status ARP...

Page 86: ...NB8WVPN User Guide YML8WVPN 86 www netcomm com au 10 11 Status DHCP Provides summary of DHCP leases provisioned by NB8WVPN Useful source to ndclientmachine MAC addresses...

Page 87: ...h meets the requirements of the ACA TS008 Standard 2 This equipment has been tested and found to comply with the Standards for C Tick and or A Tick as set by the ACA These standards are designed to pr...

Page 88: ...apply to software programs batteries power supplies cables or other accessories supplied in or with the product 3 The customer complies with all of the terms of any relevant agreement with NetComm an...

Page 89: ...l number plate has been removed Limitations of Warranty The Trade Practices Act 1974 and corresponding State and Territory Fair Trading Acts or legalisation of another Government the relevant acts in...

Page 90: ...NB8WVPN User Guide YML8WVPN 90 www netcomm com au...

Page 91: ...YML 8WVPN NB8WVPN User Guide www netcomm com au 91 ADSL2 VPN Router...

Page 92: ...ined in the Quick Start Guide For further information regarding the advanced features of this product please refer to the configuring sections in the User Guide or contact a Network Specialist NETCOMM...