Netopia R910 Ethernet Router for DSL and Cable Modems
User’s Reference Guide
Copyright
Part Number
Printed Copies
How to use this guide
Contents
Features and capabilities
Chapter 2 - Setting Up Internet Services
Easy Setup console screens
Connecting a console cable to your router
Chapter 7 - Easy Setup
Accessing the Easy Setup console screens
Installing Dial-Up Networking
DHCP NetBIOS Options
VPN Default Answer Profile
Installing the VPN Client
Chapter 12 - Monitoring Tools
The SNMP Setup screen
Telnet access
12-109
Appendix A - Troubleshooting
Chapter 14 - Utilities and Diagnostics
Factory defaults
Configuration problems
Appendix F - Technical Specifications and Safety
Using address serving
Exported services
Power requirements
Chapter Introduction
Features and capabilities
“Features and capabilities” on page “How to use this guide” on page
Overview
How to use this guide
1-10 User’s Reference Guide
Deciding on an ISP account
Chapter Setting Up Internet Services
Setting Up Internet Services
DSL and cable modems
With Network Address Translation
Local LAN IP address information to obtain
2-12 User’s Reference Guide
Without Network Address Translation
Find a location
“Identify the connectors and attach the cables” on page
Chapter Making the Physical Connections
Making the Physical Connections
Identify the connectors and attach the cables
What you need
3-14 User’s Reference Guide
Netopia R910 Ethernet Router back panel ports
your router” on page
Making the Physical Connections
Netopia R910 Ethernet Router status lights
3-16 User’s Reference Guide
8 9 10 12 13 14 15 16
“Connecting to an Ethernet network” on page
Chapter Connecting to Your Local Area Network
Connecting to Your Local Area Network
Network Model
Readying computers on your local network
4-18 User’s Reference Guide
After
Connecting to Your Local Area Network
Application software TCP/IP stack Ethernet/EtherTalk Driver Your PC
Connecting to an Ethernet network
10Base-T
4-20 User’s Reference Guide
Connecting to Your Local Area Network
The Netopia R910 in a 10Base-T network
The Netopia R910 in a 10Base-T network with a hub
4-22 User’s Reference Guide
Configuring TCP/IP
Chapter Configuring TCP/IP
Hardware and operating system requirements
“Hardware and operating system requirements” on page
Configuring TCP/IP on Windows 95 or
5-24 User’s Reference Guide
Dynamic configuration recommended
Static configuration optional
Configuring TCP/IP
Configuring TCP/IP on a Macintosh Computer
5-26 User’s Reference Guide
Dynamic configuration recommended
Configuring TCP/IP
Static configuration optional
1. Go to the Apple menu. Select
Dynamic configuration using MacIP optional
5-28 User’s Reference Guide
Configuring TCP/IP
5-30 User’s Reference Guide
Chapter Console-Based Management
“Connecting through a Telnet session” on page
“Connecting a console cable to your router” on page
Console-Based Management
6-32 User’s Reference Guide
Connecting through a Telnet session
Upgrade feature set. See “Upgrade feature set” on page
Filter sets firewalls. See “About filters and filter sets” on page
Connecting a console cable to your router
Configuring Telnet software
Console-Based Management
Navigating through the console screens
6-34 User’s Reference Guide
Accessing the Easy Setup console screens
Chapter Easy Setup
Easy Setup console screens
Easy Setup
See Appendix A, “Troubleshooting,” for more suggestions
7-36 User’s Reference Guide
If your ISP doesn’t support DHCP
Quick Easy Setup connection path
If your ISP supports DHCP
Easy Setup
For more Easy Setup options see “More Easy Setup options” on page
7-38 User’s Reference Guide
More Easy Setup options
WAN Ethernet Configuration
Easy Setup
IP Easy Setup
7-40 User’s Reference Guide
Easy Setup Security Configuration
Easy Setup
7-42 User’s Reference Guide
Easy Setup is now complete
1. Select RESTART DEVICE. A prompt asks you to confirm your choice
WAN configuration
Chapter WAN and System Configuration
“System configuration features” on page
WAN and System Configuration
System configuration screens
8-44 User’s Reference Guide
Navigating through the system configuration screens
WAN and System Configuration
System configuration features
8-46 User’s Reference Guide
IP address serving
IP setup
Filter sets firewalls
Date and time
SNMP Simple Network Management Protocol
Upgrade feature set
Console configuration
Security
Logging
WAN and System Configuration
Installing the Syslog client
8-50 User’s Reference Guide
IP Setup and Network Address Translation
Chapter IP Setup and Network Address Translation
Network Address Translation features
“Network Address Translation features” on page
or corporate intranet router
9-52 User’s Reference Guide
HOW NAT WORKS With NAT ISP 163.167.132.1 Without NAT
192.168.1.100 192.168.1.102 192.168.1.103 192.168.1.104 192.168.1.105
Using Network Address Translation
Note See “Associating port numbers with nodes” on page
IP Setup and Network Address Translation
9-54 User’s Reference Guide
Associating port numbers with nodes
Network Address Translation guideline
IP Setup and Network Address Translation
9-56 User’s Reference Guide
IP setup
IP Setup and Network Address Translation
CANCEL
9-58 User’s Reference Guide
Select Add Export. The Add Exported Service screen appears
Exports, Add Export, and Delete Export
IP Setup and Network Address Translation
Select Service. A pop-up menu of services and ports appears
IP subnets
9-60 User’s Reference Guide
IP Setup and Network Address Translation
For example
Static routes
9-62 User’s Reference Guide
page
Viewing static routes
IP Setup and Network Address Translation
9-64 User’s Reference Guide
Adding a static route
Deleting a static route
Rules of static route installation
Modifying a static route
IP Setup and Network Address Translation
9-66 User’s Reference Guide
Serve DHCP Clients Serve BootP Clients Serve Dynamic WAN Clients
IP address serving
IP Setup and Network Address Translation
Follow these steps to configure IP Address Serving
IP Address Pools
9-68 User’s Reference Guide
IP Setup and Network Address Translation
Numerous factors influence the choice of served address. It is difficult to specify the address that will be served to a particular client in all circumstances. However, when the address server has been configured, and the clients involved have no prior address serving interactions, the Netopia R910 will generally serve the first unused address from the first address pool with an available address. The Netopia R910 starts from the pool on the first row and continues to the pool on the last row of this screen
DHCP NetBIOS Options
9-70 User’s Reference Guide
IP Setup and Network Address Translation
9-72 User’s Reference Guide
Select Release BootP Leases and press Return
You have finished your IP setup
Chapter Virtual Private Networks VPN
“VPN Default Answer Profile” on page “VPN QuickView” on page
“Installing the VPN Client” on page “About ATMP Tunnels” on page
Virtual Private Networks VPN
10-74 User’s Reference Guide
Transi t In t ern etwor k
Summary
“About PPTP Tunnels” on page “About IPsec Tunnels” on page
“About ATMP Tunnels” on page
Virtual Private Networks VPN
PPTP configuration
About PPTP Tunnels
10-76 User’s Reference Guide
Note Profiles using PPTP do not offer a Telco Options screen
Virtual Private Networks VPN
10-78 User’s Reference Guide
Encryption Support
MS-CHAP V2 and strong encryption
Virtual Private Networks VPN
Configuration
About IPsec Tunnels
10-80 User’s Reference Guide
Virtual Private Networks VPN
The Add Connection Profile screen appears
10-82 User’s Reference Guide
IP Profile Parameters
Virtual Private Networks VPN
Advanced IP Profile Options
10-84 User’s Reference Guide
VPN Default Answer Profile
Virtual Private Networks VPN
Interoperation with other features
VPN QuickView
10-86 User’s Reference Guide
Virtual Private Networks VPN
Profile Name Lists the name of the Connection Profile being used, if any
Installing Dial-Up Networking
Dial-Up Networking for VPN
10-88 User’s Reference Guide
Creating a new Dial-Up Networking profile
Virtual Private Networks VPN
Configuring a Dial-Up Networking profile
10-90 User’s Reference Guide
4. Click the TCP/IP Settings button
Virtual Private Networks VPN
Windows 98 VPN installation
Installing the VPN Client
Windows 95 VPN installation
10-92 User’s Reference Guide
Connecting using Dial-Up Networking
Virtual Private Networks VPN
ATMP configuration
About ATMP Tunnels
10-94 User’s Reference Guide
Note Profiles using ATMP do not offer a Telco Options screen
Virtual Private Networks VPN
10-96 User’s Reference Guide
Virtual Private Networks VPN
Allowing VPNs through a Firewall
10-98 User’s Reference Guide
“PPTP example” on page “ATMP example” on page
PPTP example
Virtual Private Networks VPN
Display/Change Input Filter screen
10-100 User’s Reference Guide
0.0.0.0
Virtual Private Networks VPN
0.0.0.0
0.0.0.0
ATMP example
10-102 User’s Reference Guide
Virtual Private Networks VPN
0.0.0.0
10-104 User’s Reference Guide
0.0.0.0
0.0.0.0
Chapter PPP over Ethernet
PPP over Ethernet
11-106 User’s Reference Guide
The Netopia R910 offers the ability for PPP to reconfigure the router’s Ethernet LAN when establishing an unnumbered, non-NAT connection
PPP Ethernet LAN Reconfiguration
Configuration
PPP over Ethernet
Quick View
11-108 User’s Reference Guide
Monitoring Tools
Chapter Monitoring Tools
Quick View status overview
“Quick View status overview” on page “Statistics & Logs” on page
General status
Status lights
12-110 User’s Reference Guide
Statistics & Logs
General Statistics
Monitoring Tools
Physical Interface
Event histories
12-112 User’s Reference Guide
Network Interface
WAN Event History
Device Event History
Monitoring Tools
Routing tables
12-114 User’s Reference Guide
IP routing table
Monitoring Tools
Served IP Addresses
12-116 User’s Reference Guide
System Information
Monitoring Tools
The SNMP Setup screen
SNMP
12-118 User’s Reference Guide
SNMP traps
Community strings
Monitoring Tools
Viewing IP trap receivers
Setting the IP trap receivers
12-120 User’s Reference Guide
Modifying IP trap receivers
Deleting IP trap receivers
Monitoring Tools
12-122 User’s Reference Guide
Suggested security measures
“Telnet access” on page “About filters and filter sets” on page
Chapter Security
User accounts
13-124 User’s Reference Guide
Protecting the Security Options screen
Protecting the configuration screens
Telnet access
Security
How filter sets work
About filters and filter sets
What’s a filter and what’s a filter set?
13-126 User’s Reference Guide
packet first filter match?
Filter priority
Security
send to next filter yes pass or discard? discard delete pass
A filter’s actions
How individual filters work
13-128 User’s Reference Guide
A filtering rule
Port number comparisons
Parts of a filter
Port numbers
Security
13-130 User’s Reference Guide
Other filter attributes
Putting the parts together
Filtering example #1
Security
Design guidelines
13-132 User’s Reference Guide
Filtering example #2
Disadvantages of filters
An approach to using filters
Working with IP filters and filter sets
Security
Adding a filter set
13-134 User’s Reference Guide
Naming a new filter set
Security
13-136 User’s Reference Guide
Input and output filters-source and destination
Adding filters to a filter set
1. To make the filter active in the filter set, select Enabled and toggle it to Yes. If Enabled is toggled to No, the filter can still exist in the filter set, but it will have no effect
Security
Viewing filters
Viewing filter sets
13-138 User’s Reference Guide
Modifying filters
A sample IP filter set
Modifying filter sets
Deleting a filter set
Security
13-140 User’s Reference Guide
Possible modifications
Security
13-142 User’s Reference Guide
Basic protocol types
Firewall tutorial General firewall terms
Basic IP packet components
Security
Example TCP/UDP Ports
Firewall design rules
13-144 User’s Reference Guide
Firewall Logic
Implied rules
Binary representation
Logical AND function
Security
Established connections
Filter basics
13-146 User’s Reference Guide
Example IP filter set screen
Netopia
Example filters
Incoming Packet Filter
Internet
13-148 User’s Reference Guide
Example
Example
Security
Example
Example
13-150 User’s Reference Guide
RADIUS client configuration
RADIUS Client Support
Security
RADIUS then Local
13-152 User’s Reference Guide
RADIUS Server Authentication Port
Local then RADIUS
be unable to configure this device unless a Radius Server is
Security
Advanced Security Options
13-154 User’s Reference Guide
“Factory defaults” on page
Chapter Utilities and Diagnostics
Utilities and Diagnostics
“Ping” on page “Trace Route” on page “Telnet client” on page
Ping
14-156 User’s Reference Guide
Utilities and Diagnostics
Trace Route
14-158 User’s Reference Guide
Telnet client
Utilities and Diagnostics
Transferring configuration and firmware files with TFTP
Factory defaults
Disconnect Telnet console session
14-160 User’s Reference Guide
GET WAN MODULE FIRMWARE FROM SERVER Config File Name
Updating firmware
Utilities and Diagnostics
GET CONFIG FROM SERVER SEND CONFIG TO SERVER
Downloading configuration files
14-162 User’s Reference Guide
Uploading configuration files
Transferring configuration and firmware files with XMODEM
Utilities and Diagnostics
14-164 User’s Reference Guide
Updating firmware
Utilities and Diagnostics
Downloading configuration files
Uploading configuration files
Restarting the system
14-166 User’s Reference Guide
Troubleshooting A-167
Appendix A Troubleshooting
Configuration problems
“Configuration problems” on page A-167
Problems communicating with remote IP hosts
Console connection problems
Network problems
Local routing problems
Reset Switch Slot
How to reset the router to factory defaults
Power outages
Troubleshooting A-169
A-170 User’s Reference Guide
How to reach us
Technical support
Before contacting Netopia
Troubleshooting A-171
Online product information
Online Technical Support
A-172 User’s Reference Guide
Appendix B Understanding IP Addressing
What is IP?
“What is IP?” on page B-173 “About IP addressing” on page B-173
About IP addressing
Subnets and subnet masks
B-174 User’s Reference Guide
Example Using subnets on a Class C IP internet
Understanding IP Addressing B-175
Subnet masks
Customer Site A
B-176 User’s Reference Guide
Network configuration
ISP Network
Understanding IP Addressing B-177
Example Working with a Class C subnet
Distributing IP addresses
Background
Technical note on subnet masking
B-178 User’s Reference Guide
Understanding IP Addressing B-179
Netopia R910 DHCP server characteristics
Configuration
DHCP address serving
Tips and rules for distributing IP addresses
Using address serving
Manually distributing IP addresses
B-180 User’s Reference Guide
Understanding IP Addressing B-181
Nested IP subnets
B-182 User’s Reference Guide
A DHCP example
Understanding IP Addressing B-183
Internet
B-184 User’s Reference Guide
Broadcasts
Packet header types
Understanding IP Addressing B-185
B-186 User’s Reference Guide
Background
Appendix C Understanding Netopia NAT Behavior
Network configuration
ISP Network
C-188 User’s Reference Guide
Understanding Netopia NAT Behavior C-189
Workstation A
C-190 User’s Reference Guide
Workstations
Exported services
Understanding Netopia NAT Behavior C-191
Important notes
C-192 User’s Reference Guide
Understanding Netopia NAT Behavior C-193
Configuration
Summary
C-194 User’s Reference Guide
Appendix D Binary Conversion Table
Binary Conversion Table D-195
Binary
D-196 User’s Reference Guide
Decimal
Decimal
Appendix E Further Reading
Further Reading E-197
E-198 User’s Reference Guide
Further Reading E-199
E-200 User’s Reference Guide
Technical Specifications and Safety Information F-201
Appendix F Technical Specifications and Safety Information
Power requirements
Description
Regulatory notices
F-202 User’s Reference Guide
Declaration for Canadian users
Telecommunication installation cautions
Important safety instructions
Technical Specifications and Safety Information F-203
Battery
F-204 User’s Reference Guide
Index
Numerics
Index-205
Index-206
Index-207
13-131
Index-208
Index-209