SMC Networks 7904WBRB2, Manual

Page 1: ......

Page 2: ......

Page 3: ...38 Tesla Irvine CA 92618 Phone 949 679 8000 54 Mbps Wireless Router with built in ADSL Modem From SMC s line of award winning connectivity solutions May 2006 R 01 f w 0 07b ...

Page 4: ...nse is granted by implication or otherwise under any patent or patent rights of our company We reserve the right to change specifications at any time without notice Copyright 2006 by SMC Networks Inc 38 Tesla Irvine CA 92618 All rights reserved Trademarks SMC is a registered trademark and Barricade is a trademark of SMC Networks Inc Other product and company names are trademarks or registered trad...

Page 5: ...ncorporates these newer technologies At that point the obsolete product is discontinued and is no longer an Active SMC product A list of discontinued products with their respective dates of discontinuance can be found at http www smc com index cfm action customer_service_warranty All products that are replaced become the property of SMC Replacement products may be either new or reconditioned Any r...

Page 6: ...CIDENT FIRE LIGHTNING OR OTHER HAZARD LIMITATION OF LIABILITY IN NO EVENT WHETHER BASED IN CONTRACT OR TORT INCLUDING NEGLIGENCE SHALL SMC BE LIABLE FOR INCIDENTAL CONSEQUENTIAL INDIRECT SPECIAL OR PUNITIVE DAMAGES OF ANY KIND OR FOR LOSS OF REVENUE LOSS OF BUSINESS OR OTHER FINANCIAL LOSS ARISING OUT OF OR IN CONNECTION WITH THE SALE INSTALLATION MAINTENANCE USE PERFORMANCE FAILURE OR INTERRUPTIO...

Page 7: ...999 5 EC This equipment meets the following conformance standards EN 300 328 V1 6 1 11 2004 EN 301 489 1 V1 5 1 11 2004 EN 301 489 17 V1 2 1 08 2002 EN 60950 1 2001 CSA Statement This unit is to be used with an external power adaptor of a Class 2 or level 3 type and Approved type suitable for use in the North America of equipment installation having an output voltage rating of 12 V dc and output c...

Page 8: ... between the equipment and receiver Connect the equipment into an outlet on a circuit different from that to which the receiver is connected Consult the dealer or an experienced radio TV technician for help This device complies with Part 15 of the FCC Rules Operation is subject to the following two conditions 1 This device may not cause harmful interference and 2 this device must accept any interf...

Page 9: ...geren Zeitraum nicht benutzt sollten Sie es vom Stromnetz trennen Somit wird im Falle einer Überspannung eine Beschädigung vermieden 12 Durch die Lüftungsöffnungen dürfen niemals Gegenstände oder Flüssigkeiten in das Gerät gelangen Dies könnte einen Brand bzw elektrischen Schlag auslösen 13 Öffnen sie niemals das Gerät Das Gerät darf aus Gründen der elektrischen Sicherheit nur von authorisiertem S...

Page 10: ...COMPLIANCES x ...

Page 11: ... Connecting the Power Adapter 2 7 Wall Mounting 2 7 Configuring Client PC 3 1 TCP IP Configuration 3 2 Windows 98 Me 3 2 Disable HTTP Proxy 3 4 Obtain IP Settings from Your ADSL Router 3 6 Windows NT 4 0 3 7 Disable HTTP Proxy 3 9 Obtain IP Settings from Your Barricade 3 9 Windows 2000 3 11 Disable HTTP Proxy 3 12 Obtain IP Settings from Your Barricade 3 12 Windows XP 3 14 Disable HTTP Proxy 3 14 ...

Page 12: ... Settings 4 5 ADSL Settings 4 6 Summary 4 7 ADSL Settings Country or ISP Not Listed 4 9 Configuration Parameters 4 17 System 4 19 WAN 4 22 LAN 4 31 Wireless 4 34 NAT 4 46 Routing 4 51 Firewall 4 55 SNMP 4 68 UPnp 4 70 QOS 4 71 ADSL 4 74 DDNS 4 77 Tools 4 78 Status 4 83 Finding the MAC address of a Network Card 4 86 Windows NT4 2000 XP 4 86 Macintosh 4 86 Linux 4 86 ...

Page 13: ...TABLE OF CONTENTS xiii Troubleshooting A 1 Cables B 1 Ethernet Cable B 1 Specifications B 1 Wiring Conventions B 1 RJ 45 Port Connection B 2 Pin Assignments B 3 Specifications C 1 ...

Page 14: ...TABLE OF CONTENTS xiv ...

Page 15: ...cade provides Internet access to multiple users by sharing a single user account Support is provided for both wired and wireless devices New technology provides wireless security via Wired Equivalent Privacy WEP encryption Wi Fi Protected Access WPA and WPA2 and MAC address filtering It is simple to configure and can be up and running in minutes Features and Benefits Built in ADSL2 2 modem support...

Page 16: ... setup through a web browser on any operating system that supports TCP IP Applications Many advanced networking features are provided by the Barricade Wireless and Wired LAN The Barricade provides connectivity to 10 100 Mbps devices and wireless IEEE 802 11g compatible devices making it easy to create a network in small offices or homes Internet Access This device supports Internet access through ...

Page 17: ...anagement by allowing you to change internal IP addresses without affecting outside access to your network DMZ Host Support Allows a networked computer to be fully exposed to the Internet This function is used when NAT and firewall security prevent an Internet application from functioning correctly Security The Barricade supports security features that deny Internet access to specified users or fi...

Page 18: ...INTRODUCTION 1 4 ...

Page 19: ...he contents of the box to be sure you have received the following items SMC7904WBRB2 Barricade TM g 54Mbps ADSL2 2 router Power adapter One RJ 45 Ethernet cable Two RJ 11 cable for connecting ADSL modem to splitter phone line One Splitter for the Netherlands UK and French versions only Printed quick installation guide Documentation CD Warranty Registration Card Immediately inform your dealer in th...

Page 20: ... using its RJ 45 WAN port It can be connected directly to your PC or to a local area network using any of the four Fast Ethernet LAN ports Access speed to the Internet depends on your service type Full rate ADSL provides up to 8 Mbps downstream and 1 Mbps upstream G lite or splitterless ADSL provides up to 1 5 Mbps downstream and 512 kbps upstream ADSL2 provides up to 24 Mbps downstream and 1 Mbps...

Page 21: ...ur ADSL line to this port Power Inlet Connect the included power adapter to this inlet Warning Using the wrong type of power adapter may damage the Barricade Reset Button Use this button to reset the power and restore the default factory settings To reset without losing configuration settings see Reset on page 4 82 On Off switch Use this switch to turn the Barricade ON and OFF LAN Ports Fast Ether...

Page 22: ...SL Sync On ADSL connection is functioning correctly Flashing The Barricade is establishing an ADSL link Off ADSL connection is not established ADSL Data Flashing Indicates ADSL port is sending or receiving data Off No data is being transferred WLAN Flashing The WLAN port is sending or receiving data LAN1 to LAN4 On Ethernet connection is established Flashing The indicated LAN port is sending or re...

Page 23: ...al wiring or cooling requirements are needed You should however comply with the following guidelines Keep the Barricade away from any heating devices Do not place the Barricade in a dusty or wet environment You should also remember to turn off the power remove the power cord from the outlet and keep your hands dry when you install the Barricade Connecting the ADSL Line Connect the splitter to the ...

Page 24: ...nt high frequency ADSL signals interfering with telephone calls each phone must be connected to the same phone line through a splitter also known as an ADSL microfilter Connecting the network Using the grey RJ 45 cable provided connect LAN port of the Barricade to the network card of your computer or other network device e g hub or switch The corresponding LAN LED will illuminate green to indicate...

Page 25: ...the Barricade that can be used for wall mounting The distance between the 2 slots is 120 mm You will need 2 suitable screws of diameter 4 4 mm to wall mount the Barricade To wall mount the unit 1 Determine where you want to mount the Barricade 2 Drill two holes into the wall Make sure the holes are 120 mm apart 3 Insert a screw into each hole and leave 5 mm of each head exposed 4 Maneuver the Barr...

Page 26: ...INSTALLATION 2 8 ...

Page 27: ... all your network devices you need to configure your computer to connect to the Barricade See Windows 98 Me on page 3 2 Windows NT 4 0 on page 3 7 Windows 2000 on page 3 11 Windows XP on page 3 14 or Configuring Your Macintosh Computer on page 3 16 depending on your operating system ...

Page 28: ...equirements but you must first configure at least one computer to access the Barricade s web configuration interface in order to make the required changes See Configuring the ADSL Router on page 4 1 for instruction on configuring the Barricade Windows 98 Me You may find that the instructions in this section do not exactly match your version of Windows This is because these steps and screen shots w...

Page 29: ...Network window under the Configuration tab double click the TCP IP item listed for your network card 4 In the TCP IP window select the IP Address tab If Obtain an IP address automatically is already selected your computer is already configured for DHCP If not select this option ...

Page 30: ... Proxy feature of your web browser is disabled This is so that your browser can view the Barricade s HTML configuration pages The following steps are for Internet Explorer Internet Explorer 1 Open Internet Explorer 2 Click the Stop button then click Tools Internet Options TCP IP Configuration Setting Primary DNS Server ____ ____ ____ ____ Secondary DNS Server ____ ____ ____ ____ Default Gateway __...

Page 31: ...WS 98 ME 3 5 3 In the Internet Options window click the Connections tab Next click the LAN Settings button 4 Clear all the check boxes 5 Click OK and then click OK again to close the Internet Options window ...

Page 32: ...ed your computer correctly 1 On the Windows desktop click Start Run 2 Type WINIPCFG and click OK It may take a second or two for the IP Configuration window to appear 3 In the IP Configuration window select your network card from the drop down menu Click Release and then click Renew Verify that your IP address is now 192 168 2 xxx your Subnet Mask is 255 255 255 0 and your Default Gateway is 192 1...

Page 33: ...WINDOWS NT 4 0 3 7 Windows NT 4 0 1 On the Windows desktop click Start Settings Control Panel 2 Double click the Network icon ...

Page 34: ... IP Address tab 5 In the Adapter drop down list be sure your Ethernet adapter is selected 6 If Obtain an IP address automatically is already selected your computer is already configured for DHCP If not select this option and click Apply 7 Click the DNS tab to see the primary and secondary DNS servers Record these values and then click Remove Click Apply and then OK ...

Page 35: ... to Internet Explorer on page 3 4 Obtain IP Settings from Your Barricade Now that you have configured your computer to connect to your Barricade it needs to obtain new network settings By releasing old DHCP IP settings and renewing them with settings from your Barricade you will verify that you have configured your computer correctly 1 On the Windows desktop click Start Programs Command Prompt TCP...

Page 36: ...ONFIG RENEW and press the ENTER key Verify that your IP Address is now 192 168 2 xxx your Subnet Mask is 255 255 255 0 and your Default Gateway is 192 168 2 1 These values confirm that your Barricade is functioning 4 Close the Command Prompt window Your computer is now configured to connect to the Barricade ...

Page 37: ... that corresponds to the connection to your Barricade 3 The connection status screen will open Click Properties 4 Double click Internet Protocol TCP IP 5 If Obtain an IP address automatically and Obtain DNS server address automatically are already selected your computer is already configured for DHCP If not select this option ...

Page 38: ...er on page 3 4 Obtain IP Settings from Your Barricade Now that you have configured your computer to connect to your Barricade it needs to obtain new network settings By releasing old DHCP IP settings and renewing them with settings from your Barricade you can verify that you have configured your computer correctly 1 On the Windows desktop click Start Programs Accessories Command Prompt 2 In the Co...

Page 39: ...fy that your IP Address is now 192 168 2 xxx your Subnet Mask is 255 255 255 0 and your Default Gateway is 192 168 2 1 These values confirm that your ADSL Router is functioning 4 Close the Command Prompt window Your computer is now configured to connect to the Barricade ...

Page 40: ...nfigured for DHCP If not select this option Disable HTTP Proxy You need to verify that the HTTP Proxy feature of your web browser is disabled This is so that your browser can view the Barricade s HTML configuration pages Determine which browser you use and refer to Internet Explorer on page 3 4 Obtain IP Settings from Your Barricade Now that you have configured your computer to connect to your Bar...

Page 41: ...IG RENEW and press the ENTER key Verify that your IP Address is now 192 168 2 xxx your Subnet Mask is 255 255 255 0 and your Default Gateway is 192 168 2 1 These values confirm that your ADSL router is functioning 4 Close the Command Prompt window Your computer is now configured to connect to the Barricade ...

Page 42: ...match your operating system This is because these steps and screenshots were created using Mac OS 10 2 Mac OS 7 x and above are similar but may not be identical to Mac OS 10 2 Follow these instructions 1 Pull down the Apple Menu Click System Preferences 2 Double click the Network icon in the Systems Preferences window ...

Page 43: ...68 2 1 These values confirm that your Barricade is functioning 5 Close the Network window Now your computer is configured to connect to the Barricade Disable HTTP Proxy You need to verify that the HTTP Proxy feature of your web browser is disabled This is so that your browser can view the Barricade s HTML configuration pages The following steps are for Internet Explorer Internet Explorer 1 Open In...

Page 44: ...CONFIGURING CLIENT PC 3 18 3 Uncheck all check boxes and click OK ...

Page 45: ...wser Internet Explorer 5 5 or above Netscape Navigator Mozilla Firefox and Opera are supported To access the management interface enter the default IP address of the Barricade in your web browser http 192 168 2 1 Enter the default password smcadmin and click LOGIN Note Passwords can contain from 3 12 alphanumeric characters and are case sensitive ...

Page 46: ...n Select your country from drop down list This configures the correct channels for the wireless AP Note The Country Selection screen only appears on initial configuration or when the Barricade is reset to factory defaults You will then see the Status screen appear For details of this screen please refer to page 4 83 of the manual ...

Page 47: ...figurable parameters have a dialog box or a drop down menu Once a configuration change has been made on a screen click the APPLY SAVE SETTINGS or NEXT button on the screen to enable the new setting Note To ensure proper screen refresh after a command entry be sure that Internet Explorer 5 5 is configured as follows Under the menu Tools Internet Options General Temporary Internet Files Settings the...

Page 48: ...elect your local time zone from the drop down menu This information is used for log entries and client filtering If you want to automatically synchronize the ADSL router with a public time server check the box to Enable Automatic Time Server Maintenance Select the desired servers from the drop down menu Click NEXT to continue ...

Page 49: ...t ID The SSID must be the same on the Barricade and all of its wireless clients SSID Broadcast Enable or disable the broadcasting of the SSID Wireless Mode This device supports both 11g and 11b wireless networks Make your selection depending on the type of wireless network that you have Channel The radio channel used by the wireless router and its clients to communicate with each other This channe...

Page 50: ...e Provider is not listed in this screen you will need to manually enter the settings Go to ADSL Settings Country or ISP Not Listed on page 4 9 in the manual for details If your ISP uses Protocols PPPoA or PPPoE you will need to enter the username and password supplied by your ISP If your ISP uses Protocol RFC1483 Routed you will need to enter the IP address subnet mask default gateway and DNS serv...

Page 51: ... of your SSID is on off Wireless Mode 802 11b only 802 11g only or mixed mode Channel The radio channel used for wireless communication Time Zone Parameters Time Zone The time zone that you selected NTP Network Time Protocol is enabled disabled Primary Server The time server that you selected when Automatic Time Server Maintenance is enabled Secondary Server The time server that you selected when ...

Page 52: ...al Path Identifier VPI and Virtual Circuit Identifier VCI AAL5 Encapsulation Shows the packet encapsulation type Go to page 4 23 for a detailed description Network Layer Parameters WAN IP Address WAN IP address only displayed if you have static IP Subnet Mask WAN subnet mask only displayed if you have static IP Default Gateway WAN gateway only displayed if you have static IP DNS Server The IP addr...

Page 53: ...P settings For manual configuration you will need to know the Protocol DNS Server Encapsulation and VPI VCI settings used by your ISP If you have a Static IP address you will also need to know the IP address Subnet Mask and Gateway address Please contact your ISP for these details After selecting Others you will need to select what Protocol your ISP uses from the drop down menu ...

Page 54: ...ails about the settings Parameter Description VPI VCI Enter the Virtual Path Identifier VPI and Virtual Circuit Identifier VCI supplied by your ISP Encapsulation Select the encapsulation used by your ISP from the drop down menu Username Enter user name Password Enter password Confirm Password Confirm password ...

Page 55: ...out the settings Parameter Description VPI VCI Enter the Virtual Path Identifier VPI and Virtual Circuit Identifier VCI supplied by your ISP Encapsulation Select the encapsulation used by your ISP from the drop down menu Username Enter user name Password Enter password Confirm Password Confirm password ...

Page 56: ...r Domain Name Servers are used to map a domain name e g www somesite com to the equivalent numerical IP address Your ISP should provide the IP address of a Domain Name Server Enter the address here VPI VCI Enter the Virtual Path Identifier VPI and Virtual Circuit Identifier VCI supplied by your ISP Encapsulation Select the encapsulation used by your ISP from the drop down menu ...

Page 57: ...pplied static IP address here Subnet Mask Enter the subnet mask address provided by your ISP Default Gateway Enter the gateway address provided by your ISP DNS Server Enter the Domain Name Server address VPI VCI Enter the Virtual Path Identifier VPI and Virtual Circuit Identifier VCI supplied by your ISP Encapsulation Select the encapsulation used by your ISP from the drop down menu ...

Page 58: ...P address provided by your ISP Subnet Mask Enter the subnet mask address provided by your ISP Default Gateway Enter the gateway address provided by your ISP DNS Server Enter the Domain Name Server address VPI VCI Enter the Virtual Path Identifier VPI and Virtual Circuit Identifier VCI supplied by your ISP Encapsulation Select the encapsulation used by your ISP from the drop down menu ...

Page 59: ...ils about the settings Parameter Description Management IP Address This is the management IP address of the Barricade VPI VCI Enter the Virtual Path Identifier VPI and Virtual Circuit Identifier VCI supplied by your ISP Encapsulation Select the encapsulation used by your ISP from the drop down menu ...

Page 60: ... 7 in the manual for details about the settings Parameter Description DNS Server Enter the Domain Name Server address VPI VCI Enter the Virtual Path Identifier VPI and Virtual Circuit Identifier VCI supplied by your ISP Encapsulation Select the encapsulation used by your ISP from the drop down menu ...

Page 61: ...ternet connection settings LAN Sets the TCP IP configuration for the Barricade LAN interface and DHCP clients Wireless Configures the radio frequency SSID and security for wireless communications NAT Configures Address Mapping virtual server and special applications Routing Sets the routing parameters and displays the current routing table Firewall Configures a variety of security and specialized ...

Page 62: ...nfiguration restore all configuration settings to the factory defaults update system firmware or reset the system Status Provides WAN connection type and status firmware and hardware version numbers system IP settings as well as DHCP NAT and firewall information Displays the number of attached clients the firmware versions the physical MAC address for each media interface and the hardware version ...

Page 63: ... entries and client filtering If daylight savings is applied in your area check the box to Enable Daylight Savings Select the start end dates If you want to automatically synchronize the ADSL router with a public time server check the box to Enable Automatic Time Server Maintenance Select the desired servers from the drop down menu ...

Page 64: ...nterface press the blue reset button on the rear panel holding it down for at least five seconds to restore the factory defaults The default password is smcadmin Enter a maximum Idle Time Out in minutes to define a maximum period of time for which the login session is maintained during inactivity If the connection is inactive for longer than the maximum idle time it will perform system logout and ...

Page 65: ...the IP address of a remote computer on this screen Check the Enabled check box and enter the IP address of the remote host and click SAVE SETTINGS Note If you check Enabled and specify an IP address of 0 0 0 0 any remote host can manage the Barricade For remote management via WAN IP address you need to connect using port 8080 Simply enter WAN IP address followed by 8080 for example 211 20 16 1 808...

Page 66: ...CONFIGURING THE ADSL ROUTER 4 22 WAN Specify the WAN connection parameters provided by your Internet Service Provider ISP The following three items are configurable ATM PVC Clone MAC DNS ...

Page 67: ...fier VPI and Virtual Circuit Identifier VCI configured for corresponding VC Encapsulation Displays Encapsulation configured for corresponding VC VC MUX Point to Point Protocol over ATM Virtual Circuit Multiplexer null encapsulation allows only one protocol running per virtual circuit with less overhead LLC Point to Point Protocol over ATM Logical Link Control LLC allows multiple protocols running ...

Page 68: ...AN groups can be created from the LAN menu VPI VCI Enter the Virtual Path Identifier VPI and Virtual Circuit Identifier VCI supplied by your ISP Encapsulation Select the encapsulation used by ISP from the drop down menu QoS Class ATM QoS classes including CBR UBR and VBR PCR SCR MBS QoS Parameters PCR Peak Cell Rate SCR Sustainable Cell Rate and MBS Maximum Burst Size are configurable ...

Page 69: ...Address Enter the IP address provided by your ISP For dynamic IP leave this field blank Subnet Mask Enter the subnet mask address provided by your ISP For dynamic IP leave this field blank Connect Type Sets connection mode to Always connected Auto Triggered by traffic or Manual connection For flat rate services use Always connected Idle Time Minute Enter the maximum idle time for the Internet conn...

Page 70: ... mask address provided by your ISP Default Gateway Enter the gateway address provided by your ISP VPI VCI Enter the Virtual Path Identifier VPI and Virtual Circuit Identifier VCI supplied by your ISP Encapsulation Select the encapsulation used by ISP from the drop down menu QoS Class ATM QoS classes including CBR UBR and VBR PCR SCR MBS QoS Parameters PCR SCR and MBS are configurable DHCP Client C...

Page 71: ... a static IP address IP Address Enter the IP address provided by your ISP For dynamic IP leave this field blank Subnet Mask Enter the Subnet Mask address provided by your ISP For dynamic IP leave this field blank Connect Type Sets connection mode to Always connected Auto Triggered by traffic or Manual connection For flat rate services use Always connected Idle Time Minute Enter the maximum idle ti...

Page 72: ...P Subnet Mask Enter the subnet mask address provided by your ISP Default Gateway Enter the gateway address provided by your ISP VPI VCI Enter the Virtual Path Identifier VPI and Virtual Circuit Identifier VCI supplied by your ISP Encapsulation Select the encapsulation used by ISP from the drop down menu QoS Class ATM QoS classes including CBR UBR and VBR PCR SCR MBS QoS Parameters PCR SCR and MBS ...

Page 73: ...AMETERS 4 29 Clone MAC Address Some ISPs require you to register your MAC address with them If this is the case the MAC address of the Barricade must be changed to the MAC address that you have registered with your ISP ...

Page 74: ...omain Name Servers DNS are used to map a domain name e g www smc com with the IP address e g 64 147 25 20 Your ISP should provide the IP address of one or more Domain Name Servers Enter those addresses on this screen and click SAVE SETTINGS ...

Page 75: ...t Mask The subnet mask of the network DHCP Server Enable or Disable the DHCP server function By default the DHCP server is enabled for automatic IP address assignment to client devices VLAN Binding LAN1 to LAN4 Select VLAN group for the corresponding LAN port By default all ports members of the Default VLAN Lease Time Set the IP lease time For home networks this may be set to Forever which means t...

Page 76: ...g type ex LAN ports and 1483 Bridging PVCs can be added to a VLAN IP Address Pool Start IP Address Specify the start IP address of the DHCP pool Do not include the IP address of the Barricade in the client address pool If you change the pool range make sure the first three octets match the gateway s IP address i e 192 168 2 xxx End IP Address Specify the end IP address of the DHCP pool Domain Name...

Page 77: ...er 2 devices can listen in on IGMP conversations between hosts and routers When a switch hears a group join message from a host it notes which switch interface it heard the message on and adds that interface to the group Similarly when a Layer 2 switch hears a group leave message or a response timer expires the switch will remove that host s switch interface from the group IGMP Querier if the IGMP...

Page 78: ...rates as a wireless access point allowing wireless computers to communicate with each other To configure this function all you need to do is enable the wireless function define the radio channel the SSID and the security options Check Enable and click SAVE SETTINGS ...

Page 79: ...ess clients SSID Broadcast Enable or disable the broadcasting of the SSID Disabling broadcasting of the SSID provides added security by hiding your wireless network Wireless Mode This device supports both 11g and 11b wireless networks Make your selection depending on the type of wireless network that you have Channel The radio channel used by the wireless router and its clients to communicate with...

Page 80: ...to connect or will be denied access to the Barricade Enable MAC Filtering select to turn on off this feature Access Rule for registered MAC address select to allow deny access for the registered MAC addresses Selecting Allow means only MAC addresses registered here will be able to connect to the router Selecting Deny means only the MAC addresses registered here will be denied access to the router ...

Page 81: ...y To make your wireless network safe you should turn on the security function The Barricade supports WEP Wired Equivalent Privacy WPA Wi Fi Protected and WPA2 security mechanisms Three options are available No WEP No WPA WEP only WPA only ...

Page 82: ...d click GENERATE Select the default key from the drop down menu and click SAVE SETTINGS Note Before saving settings the key is shown in clear text If you wireless client does not have a passphrase utility make a note of the default Parameter Description WEP Mode Select 64 bit or 128 bit key to use for encryption Key Entry Method Select Hex or ASCII to use for encryption key Key Provisioning Select...

Page 83: ...ive hexadecimal pairs of digits for each 64 bit key or enter 13 pairs for the single 128 bit key A hexadecimal digit is a number or letter in the range 0 9 or A F Note that WEP protects data transmitted between wireless nodes but does not protect any transmissions over your wired network or over the Internet Note The passphrase can consist of up to 32 alphanumeric characters ...

Page 84: ...creases the level of data protection and access control for existing wireless LAN Matching authentication and encryption methods must be set up on your Barricade and wireless client devices to use WPA WPA2 To use WPA your wireless network cards must be equipped with software that supports WPA A security patch from Microsoft is available for free download for XP only Parameter Description WPA mode ...

Page 85: ...r the enterprise network with a RADIUS server Pre shared key for the SOHO network environment without an authentication server Pre shared key type Select the key type to be used in the Pre shared Key Pre shared Key Type in the key here Group Key Re_Keying The period of renewing broadcast multicast key Parameter Description ...

Page 86: ... the RADIUS Server Parameters field for the remote authentication protocol Parameter Description 802 1X Authentication Enable or disable this authentication function Session Idle Timeout Defines a maximum period of time for which the connection is maintained during inactivity Re Authentication Period Defines a maximum period of time for which the authentication server will dynamically re assign a ...

Page 87: ...refresh the list of available access points Click Rescan Available access points will show up on the AP MAC Address Table check the box to add that particular access point to the WDS RADIUS Server Parameters Server IP The IP address of your authentication server Server Port The port used for the authentication service Secret Key The secret key shared between the authentication server and its clien...

Page 88: ...red frames at the access point DTIM Interval Delivery Traffic Indication Message indicates when the DTIM occurs A DTIM interval is a count of the number of beacon frames that must occur before the access point sends the buffered multicast frames For example a DTIM interval of one means that the multicast frames are sent after each beacon frame A DTIM interval of two indicates that multicast frames...

Page 89: ...cket However the more RTS packets that are sent the quicker the system can recover from interference or collisions CTS Protection Mode CTS stands for Clear to Send If this value is set to Auto The AP will automatically use CTS Protection Mode when the 802 11g products are experiencing severe problems and are not able to transmit to the AP in an environment with heavy 802 11b traffic This function ...

Page 90: ...CONFIGURING THE ADSL ROUTER 4 46 NAT Network Address Translation allows multiple users to access the Internet sharing one public IP ...

Page 91: ...P addresses to be shared by multiple internal users This also hides the internal network for increased privacy and security Enter the public IP address you wish to share into the Global IP field Enter a range of internal IPs that will share the global IP into the from field ...

Page 92: ...equest to the appropriate server located at another internal IP address For example if you set Type Public Port to TCP 80 HTTP or web and the Private IP Port to 192 168 2 2 80 then all HTTP requests from outside users will be transferred to 192 168 2 2 on port 80 Therefore by just entering the IP address provided by the ISP Internet users can access the service they need at the local address to wh...

Page 93: ...ch as Internet gaming video conferencing and Internet telephony These applications may not work when Network Address Translation NAT is enabled If you need to run applications that require multiple connections use these screens to specify the additional public ports to be opened for each application ...

Page 94: ...CONFIGURING THE ADSL ROUTER 4 50 NAT Mapping Table This screen displays the current NAPT Network Address Port Translation address mappings ...

Page 95: ...box of an already entered route and click Modify Clicking Delete will remove an entry from the list Parameter Description Index Check the box of the route you wish to delete or modify Network Address Enter the IP address of the remote computer for which to set a static route Subnet Mask Enter the subnet mask of the remote network for which to set a static route Gateway Enter the WAN IP address of ...

Page 96: ...ing table the router immediately begins transmitting routing updates to inform other network routers of the change Parameter Description General RIP Parameters RIP mode Globally enables or disables RIP Auto summary If Auto summary is disabled then RIP packets will include sub network information from all sub networks connected to the router If enabled this sub network information will be summarize...

Page 97: ...hentication Required None No authentication Password A password authentication key is included in the packet If this does not match what is expected the packet will be discarded This method provides very little security as it is possible to learn the authentication key by watching RIP packets MD5 An algorithm that is used to verify data integrity through the creation of a 128 bit message digest fr...

Page 98: ...ifies the address bits in the destination address used for routing to specific subnets Each bit that corresponds to a 1 is part of the subnet mask number each bit that corresponds to 0 is part of the host number Gateway The IP address of the router at the next hop to which frames are forwarded Interface The local interface through which the next hop of this route is reached Metric When a router re...

Page 99: ...ed at devices and networks with a connection to the Internet Their goal is not to steal information but to disable a device or network so users no longer have access to network resources The Barricade protects against the following DoS attacks IP Spoofing Land Attack Ping of Death IP with zero length Smurf Attack UDP port loopback Snork Attack TCP null scan and TCP SYN flooding For details see pag...

Page 100: ...the outgoing traffic permitted or not permitted through the WAN interface The default is to permit all outgoing traffic Parameter Description Enable Filtering Function Click Yes to turn on the filtering function Normal Filtering Table Displays a summary of the filtering rules configured ...

Page 101: ...PARAMETERS 4 57 To add the PC to the filtering table 1 Click Add PC on the Access Control screen 2 Define the appropriate settings for client PC services 3 Click OK and then click SAVE SETTINGS to save your settings ...

Page 102: ...he local area network LAN The MAC Filtering Table allows the Barricade to enter up to 32 MAC addresses that are not allowed access to the WAN port Please note that this filter only applies to Ethernet clients Click Yes to enable or No to disable this function Enter the MAC address in the space provided ...

Page 103: ... The Barricade allows the user to block access to web sites by entering either a full URL address or just a keyword This feature can be used to protect children from accessing violent or pornographic web sites You can define up to 30 sites here ...

Page 104: ...Schedule Rule You may filter Internet access for local clients based on rules Each access control rule may be activated at a scheduled time Define the schedule on the Schedule Rule screen and apply the rule on the Access Control screen ...

Page 105: ...ETERS 4 61 Follow these steps to add a schedule rule 1 Click Add Schedule Rule on the Schedule Rule screen 2 Define the appropriate settings for a schedule rule Click OK and then click SAVE SETTINGS to save your settings ...

Page 106: ...e blocked except for those types marked in the Stateful Packet Inspection section RIP Defect Default Enabled If an RIP request packet is not acknowledged to by the router it will stay in the input queue and not be released Accumulated packets could cause the input queue to fill causing severe problems for all protocols Enabling this feature prevents the packets from accumulating Discard Ping to WA...

Page 107: ...CONFIGURATION PARAMETERS 4 63 ...

Page 108: ... types of traffic are checked only the particular type of traffic initiated from the internal LAN will be allowed For example if the user only checks FTP Service in the Stateful Packet Inspection section all incoming traffic will be blocked except for FTP connections initiated from the local LAN Stateful Packet Inspection allows you to select different application types that are using dynamic port...

Page 109: ...CP SYN wait 30 sec Defines how long the software will wait for a TCP session to synchronize before dropping the session TCP FIN wait 5 sec Specifies how long a TCP session will be maintained after the firewall detects a FIN packet TCP connection idle timeout 3600 seconds 1 hour The length of time for which a TCP session will be managed if there is no activity UDP session idle timeout 30 sec The le...

Page 110: ...plete TCP UDP sessions per min HIGH 250 sessions Maximum number of allowed incomplete TCP UDP sessions per minute Incomplete TCP UDP sessions per min LOW 200 sessions Minimum number of allowed incomplete TCP UDP sessions per minute Maximumincomplete TCP UDP sessions number from same host 10 Maximum number of incomplete TCP UDP sessions from the same host Incomplete TCP UDP sessions detect sensitiv...

Page 111: ... properly from behind the firewall you can open the client up to unrestricted two way Internet access Enter the IP address of a DMZ Demilitarized Zone host on this screen Adding a client to the DMZ may expose your local network to a variety of security risks so only use this option as a last resort ...

Page 112: ...n be used to access this information Access rights to the agent are controlled by community strings To communicate with the Barricade the NMS must first submit a valid community string for authentication Note Up to five community names may be entered Parameter Description Community A community name authorized for management access Access Management access is restricted to Read Only Read or Read Wr...

Page 113: ...A community string password specified for trap management Enter a word something other than public or private to prevent unauthorized individuals from accessing information on your system Version Sets the trap status to disabled or enabled with V1 or V2c The V2c protocol was proposed in late 1995 and includes enhancements to V1 that are universally accepted These include a get bulk command to redu...

Page 114: ...less devices UPnP enables seamless proximity network in addition to control and data transfer among networked devices in the office home and everywhere within your network UPnP allows the device to automatically join a network obtain an IP address convey its capabilities and learn about the presence and capabilities of other devices Check the Enable radio button to activate the function ...

Page 115: ...r gaming Parameter Description Enable or disable QoS module function Check to enable or disable this function Diffserv Forwarding Groups BE Best Effort forwarding set the percentage for this type of QoS AF1x AF2x AF3x AF4x Set the percentage for four different types of Assured Forwarding EF Expedited Forwarding is intended to provide low delay low jitter and low loss delivery of packets ...

Page 116: ...CONFIGURING THE ADSL ROUTER 4 72 Traffic Mapping Use this screen to classify traffic into Diffserv forwarding groups and outgoing VCs Click Add traffic class to add a new forwarding rule ...

Page 117: ...CONFIGURATION PARAMETERS 4 73 Traffic Statistics This screen shows the WAN outbound traffic statistics of all the Diffserv forwarding groups in the last 12 hours Click Refresh to renew the list ...

Page 118: ... section is used to configure the ADSL operation type and shows the ADSL status ADSL Parameters This screen allows you to specify the ADSL standards to operate with You may explicitly set a specific standard or choose Automatic to automatically negotiate with remote DSLAM Parameter Description Operation Mode Automatic T1 413 Issue 2 G 992 1 G DMT G 992 2 G Lite G 992 3 ADSL2 G 992 5 ADSL2 ...

Page 119: ...r Description Status Line Status Shows the current status of the ADSL line connection Link Type Shows the type of link Data Rate Upstream Maximum upstream data rate Downstream Maximum downstream data rate Operation Data Defect Indication Noise Margin Maximum upstream and downstream noise margin Attenuation Maximum reduction in the strength of the upstream and downstream signal ...

Page 120: ... correction techniques to handle noise Interleaving slows the data flow and may not be optimal for real time signals such as video transmission Fast Path CRC Error The number of Fast Path Cyclic Redundancy Check errors Interleaved Path CRC Error The number of Interleaved Path Cyclic Redundancy Check errors Loss of Signal Defect Momentary signal discontinuities Fast Path HEC Error Fast Path Header ...

Page 121: ...er or server DDNS allows your domain name to follow your IP address automatically by having your DNS records changed when your IP address changes This DDNS feature is powered by DynDNS org TZO com NO IP com With a DDNS connection you can host your own web site email server FTP site and more at your own location even if you have a dynamic IP address ...

Page 122: ...uration restore factory settings update firmware and reset the Barricade Ping Utility This tool allows you to test network connection status You can specify a domain name or a valid IP address of the remote host for ping test Enter the destination domain name or the IP address in the Destination Address field and click Execute ...

Page 123: ... to get to its destination It can help you determine why your connections to a given server might be poor and can often help you figure out where exactly the problem is It also shows you how systems are connected to each other Enter the domain name or IP address in the IP Address or Domain Name field and click Traceroute The Barricade keeps a log of the traceroute test click Clear Log to delete th...

Page 124: ...Backup allows you to save the Barricade s configuration to a file Restore can be used to restore the previously saved backup configuration file Restore to Factory Defaults resets the Barricade back to the original settings Choose a function and click Next ...

Page 125: ...ce to the latest versions 1 Download the upgrade file from the SMC web site first and save it to your hard drive 2 In the Firmware file field click Browse to look for the downloaded file Click BEGIN UPGRADE 3 Check the Status screen Information section to confirm that the upgrade process was successful ...

Page 126: ...linking If you perform a reset from this screen the configurations will not be changed back to the factory default settings Note If you use the Reset button on the back panel the Barricade performs a power reset If the button is pressed for over five seconds all the LEDs will illuminate and the factory default settings will be restored ...

Page 127: ...nnection status firmware and hardware version numbers illegal attempts to access your network as well as information on DHCP clients connected to your network The security log may be saved to a file by clicking Save and choosing a location Scroll down to view more information ...

Page 128: ...CONFIGURING THE ADSL ROUTER 4 84 ...

Page 129: ... media interface and for the Barricade as well as the hardware version and serial number ATM PVC Displays ATM connection type and status Disconnect Disconnect the ATM connection Connect Click on this button to establish a connection to the ATM connection Security Log Displays attempts to access your network Save Click on this button to save the security log file Clear Click on this button to delet...

Page 130: ...t Programs Command Prompt Type ipconfig all and press ENTER The MAC address is listed as the Physical Address MACINTOSH Click System Preferences Network The MAC address is listed as the Ethernet Address on the TCP IP tab LINUX Run the command sbin ifconfig The MAC address is the value after the word HWaddr ...

Page 131: ...ween the Barricade the external power supply and the wall outlet If the power indicator does not turn on when the power cord is plugged in you may have a problem with the power outlet power cord or external power supply However if the unit powers off after running for a while check for loose power connections power losses or surges at the power outlet If you still cannot isolate the problem then t...

Page 132: ...ns for possible defects Replace any defective adapter or cable if necessary Network Connection Problems Cannot ping the Barricade from the attached LAN Verify that the IP addresses are properly configured For most applications you should use the Barricade s DHCP function to dynamically assign IP addresses to hosts on the attached LAN However if you manually configure IP addresses on the LAN verify...

Page 133: ...y Check that you have a valid network connection to the Barricade and that the port you are using has not been disabled Check the network cabling between the management station and the Barricade Forgot or lost the password Press the Reset button on the rear panel holding it down for at least five seconds to restore the factory defaults Troubleshooting Chart Symptom Action ...

Page 134: ...hange the angle of the antenna There may be interference possibly caused by a microwave ovens or wireless phones Change the location of the interference sources or of the Barricade Change the wireless channel on the Barricade See Channel and SSID on page 4 35 Check that the antenna connectors and cabling are firmly connected The Barricade cannot be detected by a wireless client The distance betwee...

Page 135: ...Ethernet connections a twisted pair cable must have two pairs of wires Each wire pair is identified by two different colors For example one wire might be red and the other red with white stripes Also an RJ 45 connector must be attached to both ends of the cable Cable Types and Specifications Cable Type Max Length Connector 10BASE T Cat 3 4 5 100 ohm UTP 100 m 328 ft RJ 45 100BASE TX Cat 5 100 ohm ...

Page 136: ...me orientation when attaching the wires to the pins Figure B 1 RJ 45 Ethernet Connector Pin Numbers RJ 45 Port Connection Use the straight through CAT 5 Ethernet cable provided in the package to connect the Barricade to your PC When connecting to other network devices such as an Ethernet switch use the cable type shown in the following table AttachedDevicePortType Connecting Cable Type MDI X Strai...

Page 137: ...t Through Wiring If the port on the attached device has internal crossover wiring MDI X then use straight through cable RJ 45 Pin Assignments Pin Number Assignment1 1 Tx 2 Tx 3 Rx 6 Rx 1 The and signs represent the polarity of the wires that make up each wire pair Straight Through Cable Pin Assignments End 1 End 2 1 Tx 1 Tx 2 Tx 2 Tx 3 Rx 3 Rx 6 Rx 6 Rx ...

Page 138: ...CABLES B 4 Crossover Wiring If the port on the attached device has straight through wiring MDI use crossover cable Crossover Cable Pin Assignments End 1 End 2 1 Tx 3 Rx 2 Tx 6 Rx 3 Rx 1 Tx 6 Rx 2 Tx ...

Page 139: ...rts G Lite ADSL up to 1 5 Mbps downstream up to 512 Kbps upstream Supports ADSL2 2 up to 24 Mbps downstream up to 1 Mbps upstream Dying GASP support ATM Features RFC1483 Encapsulation IP Bridging and encapsulated routing PPP over ATM LLC VC multiplexing RFC2364 Classical IP RFC1577 Traffic shaping UBR CBR OAM F4 F5 support PPP over Ethernet Client Management Features Firmware Upgrade via Web Based...

Page 140: ...g transparent Bridging DHCP Server DNS Proxy Static Routing RIPv1 and RIP Applications NetMeeting ICQ Real Player QuickTime DialPad PC Anywhere Telnet SNTP NNTP Radio Features Wireless RF module Frequency Band 802 11g Radio 2 4 GHz 802 11b Radio 2 4 GHz USA FCC 2412 2462 MHz Ch1 Ch11 Canada IC 2412 2462 MHz Ch1 Ch11 Europe ETSI 2412 2472 MHz Ch1 Ch13 Japan STD T66 STD 33 2412 2484 MHz Ch1 Ch14 Mod...

Page 141: ...ation Rate Output Power dBm 802 11b 1 Mbps 16 802 11b 2 Mbps 16 802 11b 5 5 Mbps 16 802 11b 11 Mbps 16 Modulation Rate Output Power dBm 802 11g 6 Mbps 15 802 11g 9 Mbps 15 802 11g 12 Mbps 15 802 11g 18 Mbps 15 802 11g 24 Mbps 15 802 11g 36 Mbps 15 802 11g 48 Mbps 15 802 11g 54 Mbps 15 Sensitivity Modulation Rate Receiver 2 412 2 484 GHz Sensitivity dBm 802 11b 1 Mbps 90 802 11b 2 Mbps 88 802 11b 5...

Page 142: ...tal SMC7904WBRB2 complies with the following standards Temperature IEC 68 2 14 0 to 40 degrees C Standard Operating 20 to 70 degree C Non operation Humidity 10 to 95 Noncondensing Vibration IEC 68 2 36 IEC 68 2 6 Shock IEC 68 2 29 Drop IEC 68 2 32 Dimensions 159 3 x 133 4 x 32 1 mm Weight 290 g Input Power 12 V 1 A IEEE Standards IEEE 802 3 802 3u 802 11g 802 1D ITU G dmt ITU G Handshake ITU T 413...

Page 143: ... 15 Class B FCC part 68 RoHS Safety UL 60950 1 CSA 22 2 No 60950 1 EN 60950 1 IEC 60950 1 Internet Standards RFC 826 ARP RFC 791 IP RFC 792 ICMP RFC 768 UDP RFC 793 TCP RFC 783 TFTP RFC 1483 AAL5 Encapsulation RFC 1661 PPP RFC 1866 HTML RFC 2068 HTTP RFC 2364 PPP over ATM ...

Page 144: ...SPECIFICATIONS C 6 ...

Page 145: ......

Page 146: ......