Speciﬁcation, Routing, Bridging, Security | NetComm NB712 manual

1.3 Speciﬁcation

Routing

•Supports IP/TCP/UDP/ARP/ICMP/IGMP protocols

•IP routing with static routing and RIPv1/RIPv2 (RFC1058/2453)

•IP multicast and IGMP proxy (RFC1112/2236)

•Network address translation (NAT/PAT) (RFC1631)

•NAT ALGs for ICQ/Netmeeting/MSN/Yahoo Messenger

•DNS relay and caching (RFC1034/1035)

•DHCP server, client and relay (RFC2131/2132)

Bridging

•IEEE 802.1D transparent learning bridge

•IEEE 802.1q VLAN

•Port-based VLAN

•Spanning tree protocol

Security

•DMZ host/Multi-DMZ/Multi-NAT function

•Virtual server mapping (RFC1631)

•VPN pass-through for PPTP/L2TP/IPSec tunnelling

•Natural NAT ﬁrewall

•Advanced Stateful packet inspection (SPI) ﬁrewall

•Application level gateway for URL and keyword blocking

•User access control: deny certain PCs access to Internet service

Management

•Easy-to-use web-based GUI for quick setup, conﬁguration and management

•Menu-driven interface/Command-line interface (CLI) for local console and Telnet access

•Password protected management and access control list for administration

•SNMP management with SNMPv1/SNMPv2 (RFC1157/1901/1905) agent and MIB II (RFC1213/ 1493)

•Software upgrade via web-browser/TFTP server

ATM

•Up to 8 PVCs

•OAM F5 AIS/RDI and loopback

•AAL5

NB712 /	NB714 User Guide	5
YML829	Rev1

Image 5

NetComm NB712 manual Speciﬁcation, Routing, Bridging, Security, Management

Contents

Page Contents NB714 User Guide Introduction FeaturesPackage Contents Routing SpeciﬁcationBridging Security ATM QoS IndicatorsAAL5 Encapsulation WAN Interface Physical/Electrical ApplicationMemory Product Information Firewall There are three types of ﬁrewall Types of FirewallPacket Filtering Application Gateway Denial of Service AttackCircuit Gateway SYN Flood Ping of deathIcmp Flood UDP Flood Frame Speciﬁcation Vlan Virtual Local Area Network VID uniquely identiﬁes the Vlan to which the frame belongs Applications LED status Getting to know the routerFront Panel LAN 1,2,3,4 Rear Panel Check the Terminal Access Program Connecting your G.SHDSL Modem RouterDetermine Connection Setting Check the Ethernet Adapter in PC Bridge EoA Route EoA IPoA PPPoA PPPoE Install the Shdsl RouterCross-over Ethernet cables can be used Port router with network topology Conﬁguration via Web Browser Router, which will lose any previous conﬁguration Click Basic for basic installation Basic SetupSystem error or disconnection Enter Host Name Bridge ModeLAN Parameters Enter VPI Enter VCI Click LLC Click Next WAN1 Parameters Routing Mode LAN IP Type Click Next to setup WAN1 parametersDhcp Client IP type Dhcp ServerIP Address Subnet Mask DNS Server Trigger Dhcp Service Relay Dhcp relay AAL5 Encap PPPoE or PPPoAProtocol For more information, refer to the section on NAT/DMZ Password Conﬁrm PasswordUsername Idle Time Eprom Gateway IPoA or EoA Eprom Advanced Setup Link Type Annex TypeData rate Data Rate Margin range is from 0 to Shdsl SNR marginMargin, the better the line connection Reconnect for better line connection WAN UBR Unspeciﬁed Bit Rate QoS Quality of ServiceCBR Constant Bit Rate PCR Peak Cell Rate in kbps Bridge Eprom Vlan Packets Pvid Route RIP ModeAuto RIP Summary Press Modify Poison Reverse Authentication requiredRIP Version NAT/DMZ Multi-NAT Multi-DMZVirtual Start IP Address Count Global Start IP Address Virtual Server Basic Firewall Security Firewall Automatic Firewall Security Click Advanced Firewall Security and then press Finish Advanced Firewall SecuritySYN Attack Connections and will be unresponsive Ping of death attack attempts to crash your system by Addresses originating from your network Description DirectionSrc. IP Address Dest. IP Address Filtering rule will be conﬁgured as follow Filtering Rule for Smtp connection Filtering Result Update Filtering Rule 10.0.0.0 172.16.6.0 Permit 10.1.99.0 172.16.0.0 Deny Any When the rule is ordered as ABCRule Order IP QoS NB714 User Guide Administration Security NB712 / NB714 User Guide MIB Snmp Community Snmp status Version Community Click on Time Sync Time Sync Time Zone Sntp serviceTime Server Utility System Info Backup Conﬁguration Restore Conﬁguration10.2 Conﬁg Tool Lose all the conﬁgured parameters Upgrade To logout the router, press logout Logout Restart You can monitor the following Status LAN Parameters LAN-to-LAN connection with bridge ModeCO side Enter IP 192.168.1.1 Enter Subnet Mask WAN1 ParametersEnter Gateway 192.168.1.1 Enter Host Name Enter VPI Enter VCI Encap VCI32 EncapLLC CPE SideHost Name Enter Soho Dhcp Service LAN to LAN Connection with Routing ModeClick Route and CO Side then press Next IP Address 192.168.20.1 Subnet Mask 255.255.255.0 Host Name WAN Parameters Click Next to setup the IP parameters IP Address 192.168.10.1 Subnet Mask 255.255.255.0 Host Name Click Route and CPE Side then press Next 192.168.30.2 Serial Console Useradmin PasswordTelnet Baudrate 9600 Data Bits Parity Check Stop Bits Flow-control Operation Interface Window structure Ctrl + C To quit the conﬁguring item Ctrl + Q For help Menu Driven Interface CommandsTo choose another parameters Menu Tree 14.7 Conﬁguration Done via utility command Ping Packet internet groper command AdminUtility Exit Quit system Status System ShowConﬁg Script Administration RebootWrite Ping User Proﬁle Edit Community Entry List Show Snmp Supervisor Password and ID Sntp Move the cursor to service and press enterMove the cursor to sntp and press enter Move the cursor to timeserver1 and press enter Move the cursor to list and review the setting Utility SetupExit Mode Shdsl 14.16.3 WAN After enter add menu, the screen will prompt as follow Bridge Move the cursor to vlan and press enter Vlan For each VLAN, Vlan ID is a unique number among 1~4095 14.16.6 802.11Q VlanFollow the following steps to conﬁgure 802.11q Vlan You can review the list of RIP parameters via list command Generic command can setup RIP mode and auto summery modeRoute Screen will display the following IP share 14.16.8 LAN You can conﬁgure NAT parameters in nat menu 14.16.10 NAT Mapping After key in enter, the screen will prompt as below 14.16.11 PAT ﬁrewall security level can conﬁgure via level command You can enable the demilitarized zone via active command14.16.12 DMZ Firewall Active DoS Protection IPQoS Dhcp You can view the Dhcp conﬁguration via list command Host name DefaultDNS proxy RJ-45 Network Ports Appendix a Cable Information10Mbps 100Mbps Cross-Over Cabling Straight and crossover cable conﬁgurationStraight-Through Cabling No connection Shdsl Line Connector Console CableRxD O TxD Contact Information Appendix B Registration and Warranty Information Product Warranty