Nexland ISB SOHO, User Manual

Page 1: ...digital device pursuant to Part 15 of the FCC Rules These limits are designed to provide a reasonable protection against harmful interference in a residential installation This equipment generates uses and can radiate radio frequency energy and if not installed and used according to the instructions may cause harmful interference to radio communications However there is no guarantee that interfere...

Page 2: ...perfect solution for sharing your high speed broadband Internet connection with more than one computer You ll be pleasantly surprised at how fast all your computers will now be able access the Internet The firewall feature of the ISB SOHO makes your network invisible from the outside It turns away all unauthorized external requests for information from your network To a hacker your network is a de...

Page 3: ... flash if there is a collision state on the network Collisions happen when packets are being dropped or misdirected This is most often caused by duplicate IP addresses gateways or extremely heavy traffic that s overloading the network 3 LAN Switch with 4 10 100BaseT auto sense Ports Plug your computers or additional hubs into here Use only CAT5 Ethernet cables for best performance If plugging in a...

Page 4: ... software for this very reason Nexland ISB SOHO Introduction 5 Safety First Make sure you follow these precautions and your ISB SOHO will last you a very very very long time Follow all warnings notes and instructions marked on the ISB To protect the unit from overheating make sure it is not blocked or covered Do not use or store the ISB in an environment that exceeds temperature and humidity speci...

Page 5: ... information from your ISP or see Finding Server Names in the Appendix must be done before installing If it isn t already connect your modem to your DSL or Cable line as instructed in your modem directions You should install the ISB with only one computer directly connected to it before connecting additional hubs or computers as this will simplify any troubleshooting during installation The follow...

Page 6: ...P Confirm that Using DHCP Server is set Now Reboot Your Computer You must follow the procedure on this page the first time for each additional computer you connect to the ISB SOHO Nexland ISB SOHO Installation 9 If you have proxy settings in your browser clear them now Internet Explorer 5 or higher Click Tools Internet Options Connections LAN Settings Remove all checks from all the boxes and click...

Page 7: ...Type ipconfig all at a DOS prompt Your MAC is the Physical Address On Macintosh OS9 In the Apple Menu click Apple System Profiler Under the System Profile Tab Click the Down Arrow for Network Overview Click the Down Arrow for AppleTalk The Hardware Address should be listed This is the MAC address Nexland ISB SOHO Installation 11 For PPPoE Internet Accounts most large DSL ISPs have adopted this met...

Page 8: ...ad Runner ISPs in rare cases usually in New England require a login procedure You ll need to give your unit a Host Name of rrlogin and make a Special Application with TCP Ports 60000 to 60001 for both incoming and outgoing traffic Try following these steps Step 1 Open a DOS prompt and type ping 192 168 0 1 A Reply Yes go to next step No Check power cables you should have Link lights on your Networ...

Page 9: ...nd transfer data IPsec is the most secure form of VPN encryption currently in use The VPN capability of the ISB SOHO is automatic It will recognize an IPsec session for example and pass it through the firewall The ISB SOHO should work with most VPNs and has been tested to work with all of the major types Symantec Axent Power VPN Checkpoint Nortel Cisco not Concentrator among others To use your VPN...

Page 10: ... or uninstall it The ISB will dial for you PPPoE is now very popular and most broadband ISP accounts are now PPPoE User Name Enter the User Name given to you by the ISP Password Enter the password given to you by the ISP and type it again in the Verify field Then click Save Nexland ISB SOHO Interface Screens 17 You should connect in a moment You might have to reboot your computer update its IP inf...

Page 11: ...where to send WAN packets Domain Name Servers Up to three Domain Name Servers can be entered These are needed for Static accounts Entries are not needed for standard dynamic Internet accounts or accounts where a DHCP server gives out the information But you can override and enter your own settings for any Internet account Click Save after entering all information Nexland ISB SOHO Interface Screens...

Page 12: ...default unless static DNS s are set This is normal as the ISB SOHO will take care of DNS requests sent to the ISP DHCP Server You can disable the DHCP server in the ISB also by DIP Switch see Dip Switches This is useful if you already have a DHCP server on your network or if your computers on your LAN have Static IPs entered into their network properties DHCP Range The range of IP addresses you wa...

Page 13: ... have Connect on Demand Enabled to redial automatically when needed Static IP Address If you have a Static IP PPPoE Internet account enter the IP address here otherwise leave at zero This is for PPPoE only Nexland ISB SOHO Interface Screens 23 Choose Service Some ISPs have different services available from their PPPoE accounts Click Query Services then select the service from the drop down menu th...

Page 14: ...ously can t say this enough Nexland ISB SOHO Interface Screens 25 Routing The ISB SOHO was designed for home and small business use It does have the capability to perform as a router and maintains all the features required to operate in this network configuration Routing like its name implies directs traffic to the correct computer based on its IP address This is done in the normal configuration o...

Page 15: ...s The 4th last field can be left at 0 Subnet Mask The Subnet Mask used on the remote network segment For class C networks the standard Subnet Mask is 255 255 255 0 Gateway IP Address The IP Address of the Router on the network segment to which this device is attached NOT the router on the remote network segment Interface Select the appropriate interface Internal LAN or External WAN from the drop d...

Page 16: ...P conflicts when their cards sleep and printers connected directly to the LAN Select Host If you have previously made an entry to this screen and you want to Update or Delete or it you must first select it from the drop down menu and then click Update Fields Below to access it s settings Otherwise if adding a new entry don t select from the menu or click Clear Form before adding new entry Host Nam...

Page 17: ...nterface Screens 31 Access Filters This screen lets you control the types of information allowed into your LAN For example to prevent the use of Real Audio on the LAN you can block its protocol here or block all Internet access Most standard protocols are predefined or you can define custom filters There are 5 security groups that you can define so you can have different levels of access for diffe...

Page 18: ...nd protocols your application needs for operation it s best to consult the application s support section and search for Firewall or NAT usage Some applications might need more than one entry defined and enabled This is the case when they have multiple port ranges in use Existing Special Apps Some of the predefined Special Application entries are available from this menu since they are all disabled...

Page 19: ...y type of standard server Web FTP DNS WhoIs POP3 Finger SMTP VPN News Gopher and Telnet using the ISB This lets you setup a Web server for instance behind the firewall External users can use a domain assigned by the Dynamic DNS feature or the Modem port IP address to access a virtual server The ISB automatically routes the traffic to the appropriate Host IP on the LAN IP Address seen by Internet U...

Page 20: ... Existing Custom Virtual Servers If you have previously made an entry to this screen and you want to Update or Delete it you must first select it from the Select Entry drop down menu and then click Update Fields Below to access it s settings Else if adding a new entry don t select from the menu or click Clear Form before adding new entry Virtual Server Data Name Give your Virtual Server any short ...

Page 21: ...you have changed the entry shown Click Clear Form before Adding a new entry Nexland ISB SOHO Interface Screens 39 Exposed Host Exposed Host or DMZ is available for a single computer on the LAN It exposes all ports on the specified Host to the outside For security you should keep this disabled unless it s being used If you are having trouble with an application that uses the Internet you can try th...

Page 22: ...bridge or pure router This is useful if you already have a NAT device on your network and are using the ISB as a PPPoE dial up device only You must have routing entries made on the routing table or be using RIP2 for proper communication with NAT disabled Log Level Choosing Debug will give more verbose status log useful for Nexland support It also throws all WAN side packets into the LAN for easy p...

Page 23: ...hooting 43 Problem 3 Some applications do not run properly when using the ISB Solution The ISB processes the data passing through it so it is not transparent Use the Special Applications screen to allow the use of special Internet applications The application may require the release of TCP and UDP ports that would otherwise not function correctly Please refer to the software manufacturer s web sit...

Page 24: ...as an Adapter If not confirm that it installed successfully 4 Click the Add button 5 Double Click Protocol Nexland ISB SOHO Appendix 45 6 The window below should appear select Microsoft under the list of Manufacturers 7 Scroll down the list of Network Protocols select TCP IP and click OK 8 After a moment the Network window should reappear with TCP IP listed Click OK 9 Your computer may ask for a W...

Page 25: ... and click OK 3 At the DOS prompt type ping mail replace mail for the abbreviation you re trying to find an address for and press Enter You should see something similar to below this is just a sample Nexland ISB SOHO Appendix 47 Second find the server s Internet Domain Name The IP address retrieved above will work for your server but sometimes server IP addresses are changed by your ISP It is bett...

Page 26: ...ly use slow smooth movements Practice Step 4 with the power off before trying for the first time The unit should now have its IP network mask defaults and password cleared 1 2 3 4 Nexland ISB SOHO Appendix 49 Backing Up Your Configuration Settings The ISB SOHO lets you back up the configuration settings you made through its interface should something happen to the unit This procedure results in a ...

Page 27: ... add a feature or to fix a problem These firmware upgrades are free and available from Nexland s home page www nexland com under the Support section Your current firmware version number is available from the Status interface screen If it is older than the firmware on the website you can download that firmware to update your ISB SOHO The following procedure assumes you have the unit on its default ...

Page 28: ...to an analog signal for transmission over standard telephone lines A modem at the other end of the connection converts the analog signal back to a digital signal NAPT A combination of the NAT PAT acronyms Network Address and Port Translation The ISB product line uses NAPT for firewall protection Nexland ISB SOHO Appendix 53 NAT Network Address Translation The method of converting IP addresses from...

Page 29: ...Bi Directional SDSL Compatible VPN Pass through Single Session IPsec L2TP Multi Session PPTP Cabling UTP STP Category 5 recommended LEDS 12 LAN Link 100 10 Duplex Collision LEDs 1 WAN Link LED 1 LAN TX RX LED firmware driven 1 WAN TX RX Diagnostic LED firmware driven Power 9v DC 1000mA Physical Dimension 161 mm x 196 6mm max x 33 7mm Operating temperature 0 C to 40 C Storage temperature 10 C to 70...

Page 30: ...w w w n e x l a n d c o m 2001 Nexland Inc All Right Reserved ...