Manuals / Netopia / Computer Equipment / Network Router

Netopia 2200 manual Copyright

Models: 2200

1 351

Download 351 pages 59.91 Kb

Page 2

Image 2

Copyright

Copyright © 2006 Netopia, Inc.

Netopia, the Netopia logo, and 3-D Reach are registered trademarks belonging to Netopia, Inc., registered U.S. Patent and Trademark Ofﬁce. Broadband Without Boundaries is a trademark belonging to Netopia, Inc. All other trademarks are the property of their respec- tive owners. All rights reserved.

Netopia, Inc. Part Number: 6161227-00-01

Page 2

Image 2

Contents

Netopia Software User Guide Copyright Table of Contents Expert Mode Security 146 Basic Troubleshooting Command Line Interface 221 Table of Contents Glossary Overview of Major Capabilities Index Introduction What’s NewAbout Netopia Documentation Intended AudienceGeneral Command Line InterfaceDocumentation Conventions Internal Web InterfaceBold terminal type User-entered text face Organization Word About Example ScreensPage Basic Mode Setup Important Safety Instructions Power Supply InstallationBewahren Sie diese Anweisungen auf Wichtige SicherheitshinweiseAchtung Setting up the Netopia Gateway Microsoft WindowsThen go to Step Macintosh MacOS 8 or higher or Mac OS Proceed to Conﬁguring the Netopia Gateway on Conﬁguring the Netopia Gateway MiAVo Vdsl and Ethernet WAN models Quickstart Click the Connect to the Internet buttonPPPoE Quickstart Configuring the Netopia Gateway Netopia Gateway Status Indicator Lights Home Page Basic Mode DNS Link Manage My Account Link Status Details Link Enable Remote Management Link Expert Mode Link Update Firmware Link Factory Reset Accessing the Expert Web Interface Open the Web ConnectionPage Home Page Expert Mode Field Status and/or Description Home Page InformationSummary Information Dhcp Link Breadcrumb Trail ToolbarNavigating the Web Interface Restart Button RestartLink Alert Symbol Help Button HelpLink Quickstart ConﬁgureButton Conﬁgure Click Connect to the Internet Link LAN Configure Page Wireless supported models Privacy Configure Page Advanced Page About Closed System Mode Page Examples WPA Version AllowedMultiple SSIDs Wireless MAC Authorization Page Configure Use Radius Server Advanced Network Conﬁguration page appears Other WAN Options WAN IP InterfacesIP Gateway Available Encapsulation types Available Multiplexing typesSustained Cell Rate SCR Class Transmit Priority CommentsLink Advanced Link IP Static Routes IP Static Route Entry page appearsPage Link IP Static ARP Link PinholesTCP Tips for making Pinhole Entries Gateway Pinhole Conﬁguration Procedure. Use the following steps Page Configure Link IPMaps Ple static 192.168.1.1 IPMaps Block DiagramNetopia Gateway WAN Interface LAN Interface 192.168.1.2Link Default Server Internet Gateway NAT LAN STN #2Configure Page Link Differentiated Services Page QoS Setting TOS Bit Value Behavior Link DNS Link Dhcp ServerConfigure Link Radius Server Link Snmp Page Link Igmp Internet Group Management Protocol Page Configure Link UPnP 100Link LAN Management 101Link Advanced Ethernet Bridge 102Conﬁguring for Bridge Mode 103Enable Concurrent Bridging/Routing checkbox 104105 Link Vlan 106107 Vlan Port Conﬁguration screen appears Enable Multiple Wireless IDs on108 109 110 Link Syslog Parameters 111112 113 Administration Related Log MessagesLog Event Messages System Log MessagesDSL Log Messages most common Access-related Log Messages114 115 Mented packet116 Link Internal ServersLink Software Hosting 117 List of Supported Games and Software118 FTPRename a UserPC 119Link Clear Options 120Link Time Zone 121122 SecurityButton Security Link Passwords 123124 125 Conﬁguring for a BreakWater SettingLink Firewall Use a Netopia Firewall126 Basic Firewall Background 127Tips for making your BreakWater Basic Firewall Selection BreakWater Setting ClearSailing SilentRunning LANdLocked 128129 Link IPSec 130SafeHarbour IPSec VPN 131132 Conﬁguring a SafeHarbour VPNIPSec Tunnel Details Parameter Setup Worksheet 133134 Parameter Descriptions on page 136 as required135 Make the Tunnel Details entriesField Description 136Parameter Descriptions 137 PAT Address138 Soft MBytes139 140 Stateful Inspection Firewall installation procedureLink Stateful Inspection Exposed Addresses 141142 143 Stateful Inspection Options 144Port Protocol Description LAN Private WAN Public Interface Open Ports in Default Stateful Inspection Installation145 Basic IP packet components Firewall TutorialGeneral ﬁrewall terms 146Basic protocol types 147148 Example TCP/UDP Ports TCP Port ServiceFirewall design rules Firewall Logic149 Implied rules150 Example ﬁlter setWhat it means Filter basics151 Example networkExample Example ﬁlters152 153 Link Packet Filter 154155 What’s a ﬁlter and what’s a ﬁlter set?How ﬁlter sets work Filter priority How individual ﬁlters work156 Parts of a ﬁlter 157ﬁltering rule Port number comparisons 158Port numbers Putting the parts together 159Other ﬁlter attributes 160 Filtering example #1161 162 Filtering example #2163 An approach to using ﬁltersDesign guidelines 164 Working with IP Filters and Filter SetsAdding a ﬁlter set Adding ﬁlters to a ﬁlter set 165166 Netopia Router167 168 Enter the Source Mask for the source IP address169 Viewing ﬁltersModifying ﬁlters Deleting a ﬁlter set170 Deleting ﬁltersAssociating a Filter Set with an Interface 171172 173 Policy-based Routing using FiltersetsTOS ﬁeld matching 174 175 176 Using the Security Monitoring LogLink Security Log 177 178 Timestamp Background179 InstallButton Install Link Install Software 180181 Required FilesNetopia ﬁrmware Image File Click the Install Software button 182183 Verify the Netopia Firmware ReleaseObtaining Software Feature Keys Link Install KeysUse Netopia Software Feature Keys Procedure Install a New Feature Key File185 To check your installed features 186187 Link Install Certiﬁcate 188189 190 Basic Troubleshooting 191Action Status Indicator Lights192 Ethernet193 Ethernet 1, 2, 3Wireless 194195 DSL Sync196 197 Special patterns198 LAN 1, 2, 3199 DSL SyncFront View 200LED Function Summary Matrix 201Active 202EN Link Unlit LinkFactory Reset Switch 2033347W/3357W 3397GP2247NWG 2240NAdvanced Troubleshooting 205Home 206207 Status of Connection208 Expert ModeButton Troubleshoot Link System Status 209Link Ports Ethernet 210Link Ports DSL 211Link IP Interfaces 212Link DSL Circuit Conﬁguration 213Link System Log Entire 214Link Diagnostics 215Link Network Tools 216217 218 If Ping is not successful, possible causes are219 220 Command Line Interface 221Overview 222Keywords Command Verbs Status and/or Description223 Ending a CLI Session Starting and Ending a CLI SessionLogging 224Saving Settings Using the CLI Help FacilityAbout Shell Commands Shell Command ShortcutsShell Commands Common CommandsDownload -cert serveraddress ﬁlename conﬁrm DiagnoseDownload serveraddress ﬁlename conﬁrm 227Loglevel level Install serveraddress ﬁlename conﬁrmLicense key 228229 NetstatNetstat -r Reset crash Reset arpReset atm Reset dhcp serverReset security-log Reset ipmapReset log Reset wan-users all ip-addressShow crash Show featuresShow conﬁg Show dhcp agentShow ip ipsec Show ip igmpShow ip interfaces Show ip ﬁrewallShow log Show wireless allShow wireless clients MACaddress Show memory allWho Upload serveraddress ﬁlename conﬁrmView conﬁg 235WAN Commands Navigating the Config Hierarchy About Config CommandsConfig Mode Prompt Netopia-3000/9437188 top quit 238Set ip ethernet a Entering Commands in Config ModeSet ip ethernet a ipaddress 239Step Mode a CLI Conﬁguration Technique Guidelines Config CommandsDisplaying Current Gateway Settings 240Validating Your Conﬁguration 241Config Commands DSL CommandsSet atm vcc n vpi 0 Set atm vcc n qos sustained-cell-rate 1 ...nSet atm vcc n qos max-burst-size 1 ...n Set atm vcc n vci 0Set bridge sys-bridge on off Bridging SettingsSet atm vccn pppoe-sessions 1 Set bridge concurrent-bridging-routing on offSet bridge ethernet option on off Set bridge table-timeout 30Dhcp Settings Set bridge dsl vccn option on offSet dhcp lease-time lease-time Set dhcp start-address ipaddressSet dhcp end-address ipaddress Set dhcp server-address ipaddressSet dmt metallic-termination auto disabled alwayson DMT SettingsSet dmt wiringMode auto tipring AA1 Set dmt autoConﬁg off onSet dns domain-name domain-name Domain Name System SettingsSet dns proxy-enable Set dns primary-address ipaddressSet igmp robustness value Igmp SettingsSet igmp snooping off on Set igmp query-intvl valueSet ip option on off IP SettingsSet ip arp-timeout 60 Set ip dsl vccn address ipaddressSet ip dsl vccn addr-mapping on off Set ip dsl vccn restriction admin-disabled noneSet ip dsl vccn netmask netmask Set ip dsl vccn rip-send off v1 v2 v1-compat v2-MD5Set ip ethernet a address ipaddress Set ip dsl vccn rip-receive Off v1 v2 v1-compat v2-MD5Set ip ethernet a option on off Set ip ethernet a broadcast broadcastaddressSet ip ethernet a rip-send Off v1 v2 v1-compat v2-MD5 Set ip ethernet a restrictions none admin-disabledSet ip ethernet a netmask netmask 253Set ip gateway interface ip-address ppp-vccn Set ip ethernet a rip-receive off v1 v2 v1-compat v2-MD5Set ip gateway option on off Set ip ip-ppp vccn option on offSet ip ip-ppp vccn peer-address ipaddress Set ip ip-ppp vccn restriction admin-disabled noneSet ip ip-ppp vccn address ipaddress Set ip ip-ppp vccn addr-mapping on off256 Set ip ip-ppp vccn rip-send off v1 v2 v1-compat v2-MD5Set ip ip-ppp vccn rip-receive off v1 v2 v1-compat v2-MD5 Set ip ipsec-passthrough off on Set ip static-arp ip-addressipaddressSet ip igmp-forwarding off on 257Set diffserv lohi-ratio 60 100 percent Set ip prioritize off onSet diffserv option off on 258259 260 Set ip sip-passthrough on offSet ip static-routes destination-networknetaddress Delete ip static-routes destination-network netaddress 261IPMaps Settings Network Address Translation NAT Default SettingsSet pinhole name name Set nat-default host-hardware-address MACaddressNetwork Address Translation NAT Pinhole Settings Set pinhole name name protocol-select tcp udpPPPoE /PPPoA Settings Set ppp module vccn protocol-compression on off Set ppp module vccn mru integerSet ppp module vccn magic-number on off Set ppp module vccn lcp-echo-requests on offSet ppp module vccn terminate-max integer Set ppp module vccn restart-timer integerSet ppp module vccn conﬁgure-max integer Set ppp module vccn connection-type instant-on always-onEthernet Port Settings Set ppp module vccn port-authentication username usernameSet ppp module vccn port-authentication password password Command Line Interface Preference SettingsSet preference more lines 268Set servers telnet-tcp 1 Port Renumbering SettingsSet servers web-http 1 269Set security ipsec tunnels name Security SettingsSet security ipsec option off on off 270Set security ipsec tunnels name 123 tun-enable on on off 271Set security ipsec tunnels name 123 IKE-mode DH-group 1 1 2 272Set security ipsec tunnels name 123 nat-enable on off Set security ipsec tunnels name 123 xauth enable off onSet security ipsec tunnels name 123 xauth password password Set security ipsec tunnels name 123 xauth username username274 Set security ipsec tunnels name 123 local-id idvalueSet security ipsec tunnels name 123 remote-id idvalue 275 Set security state-insp tcp-timeout 30 276277 Set security state-insp udp-timeout 30Set security state-insp xposed-addr exposed-address# n Packet Filtering Settings 278279 280 281 Snmp Settings Set system name name System SettingsSet snmp notify type v1-trap v2-trap inform 283Set system log-size 10240 Set system idle-timeout telnet 1...120 http 1Set system username administrator name user name Set system persistent-log off on285 Set system password admin userSleep Contact-email string@domainname location string 286 287 Set system zerotouch option on offSet system zerotouch redirect-url redirection-URL Syslog 289 Set security state-insp eth B option onWireless Settings supported models 291 Set wireless mode both-b-and-g b-only g-onlySet wireless multi-ssid option on off 292 293 Set wireless no-bridging off onSet wireless tx-power full medium fair low minimal 294 Set wireless network-id privacy pre-shared-key stringSet wireless network-id privacy default-keyid Example 256bit key 295Example 40bit key 02468ACE02 Set radius radius-secret sharedsecret Set wireless mac-auth option on offSet radius radius-name servernamestring Set radius alt-radius-name servernamestring297 Set radius radius-port portnumberSet vlan name string 298 To make the Vlan vlan1 routable add the port lan-uplink299 Set upnp option on offSet dslf-lanmgmt option off on 300 301 Vdsl Settings 302Vdsl Parameter Defaults 303304 Vdsl Parameters Accepted Values305 Parameter306 Etsi M2 CAB307 308 309 310 Glossary 311312 313 314 315 316 Ethernet crossover cable. See crossover cable317 318 319 320 321 322 323 324 325 326 Description 327328 Software and protocolsNorth America Agency approvals329 InternationalManufacturer’s Declaration of Conformance 330331 Declaration for Canadian usersTelecommunication installation cautions Important Safety InstructionsAustralian Safety Information 332CFR Part 68 Information 333Electrical Safety Advisory 334Overview of Major Capabilities 335Instant-On PPP Wide Area Network TerminationPPPoE/PPPoA Point-to-Point Protocol over Ethernet/ATM 336DNS Proxy Simpliﬁed Local Area Network SetupDhcp Dynamic Host Conﬁguration Protocol Server 337Embedded Web Server DiagnosticsManagement 338339 Remote Access ControlPassword Protection Network Address Translation NATNetopia Gateway 340Internal Servers Netopia Advanced Features for NAT341 PinholesCombination NAT Bypass Conﬁguration Default Server342 VPN IPSec Pass Through 343IP-Passthrough Stateful Inspection Firewall 344VPN IPSec Tunnel Termination SSL Certiﬁcate SupportIndex 345346 NAT 255, 262 347NTP 348349 350