User’s Reference Guide
Netopia R910 Ethernet Router for DSL and Cable Modems
Part Number
Copyright
Printed Copies
Chapter 2 - Setting Up Internet Services
Contents
Features and capabilities
How to use this guide
Accessing the Easy Setup console screens
Connecting a console cable to your router
Chapter 7 - Easy Setup
Easy Setup console screens
Installing the VPN Client
DHCP NetBIOS Options
VPN Default Answer Profile
Installing Dial-Up Networking
12-109
The SNMP Setup screen
Telnet access
Chapter 12 - Monitoring Tools
Configuration problems
Chapter 14 - Utilities and Diagnostics
Factory defaults
Appendix A - Troubleshooting
Power requirements
Using address serving
Exported services
Appendix F - Technical Specifications and Safety
Overview
Features and capabilities
“Features and capabilities” on page “How to use this guide” on page
Chapter Introduction
1-10 User’s Reference Guide
How to use this guide
DSL and cable modems
Chapter Setting Up Internet Services
Setting Up Internet Services
Deciding on an ISP account
Without Network Address Translation
Local LAN IP address information to obtain
2-12 User’s Reference Guide
With Network Address Translation
Making the Physical Connections
“Identify the connectors and attach the cables” on page
Chapter Making the Physical Connections
Find a location
What you need
Identify the connectors and attach the cables
3-14 User’s Reference Guide
your router” on page
Netopia R910 Ethernet Router back panel ports
Making the Physical Connections
3-16 User’s Reference Guide
Netopia R910 Ethernet Router status lights
8 9 10 12 13 14 15 16
Network Model
Chapter Connecting to Your Local Area Network
Connecting to Your Local Area Network
“Connecting to an Ethernet network” on page
4-18 User’s Reference Guide
Readying computers on your local network
After
Application software TCP/IP stack Ethernet/EtherTalk Driver Your PC
Connecting to Your Local Area Network
10Base-T
Connecting to an Ethernet network
4-20 User’s Reference Guide
The Netopia R910 in a 10Base-T network
Connecting to Your Local Area Network
The Netopia R910 in a 10Base-T network with a hub
4-22 User’s Reference Guide
“Hardware and operating system requirements” on page
Chapter Configuring TCP/IP
Hardware and operating system requirements
Configuring TCP/IP
5-24 User’s Reference Guide
Configuring TCP/IP on Windows 95 or
Dynamic configuration recommended
Configuring TCP/IP
Static configuration optional
5-26 User’s Reference Guide
Configuring TCP/IP on a Macintosh Computer
Dynamic configuration recommended
Static configuration optional
Configuring TCP/IP
1. Go to the Apple menu. Select
5-28 User’s Reference Guide
Dynamic configuration using MacIP optional
Configuring TCP/IP
5-30 User’s Reference Guide
Console-Based Management
“Connecting through a Telnet session” on page
“Connecting a console cable to your router” on page
Chapter Console-Based Management
Filter sets firewalls. See “About filters and filter sets” on page
Connecting through a Telnet session
Upgrade feature set. See “Upgrade feature set” on page
6-32 User’s Reference Guide
Configuring Telnet software
Connecting a console cable to your router
Console-Based Management
6-34 User’s Reference Guide
Navigating through the console screens
Easy Setup
Chapter Easy Setup
Easy Setup console screens
Accessing the Easy Setup console screens
7-36 User’s Reference Guide
See Appendix A, “Troubleshooting,” for more suggestions
Easy Setup
Quick Easy Setup connection path
If your ISP supports DHCP
If your ISP doesn’t support DHCP
7-38 User’s Reference Guide
For more Easy Setup options see “More Easy Setup options” on page
WAN Ethernet Configuration
More Easy Setup options
Easy Setup
7-40 User’s Reference Guide
IP Easy Setup
Easy Setup
Easy Setup Security Configuration
Easy Setup is now complete
7-42 User’s Reference Guide
1. Select RESTART DEVICE. A prompt asks you to confirm your choice
WAN and System Configuration
Chapter WAN and System Configuration
“System configuration features” on page
WAN configuration
8-44 User’s Reference Guide
System configuration screens
WAN and System Configuration
Navigating through the system configuration screens
8-46 User’s Reference Guide
System configuration features
Date and time
IP setup
Filter sets firewalls
IP address serving
Security
Upgrade feature set
Console configuration
SNMP Simple Network Management Protocol
WAN and System Configuration
Logging
8-50 User’s Reference Guide
Installing the Syslog client
“Network Address Translation features” on page
Chapter IP Setup and Network Address Translation
Network Address Translation features
IP Setup and Network Address Translation
192.168.1.100 192.168.1.102 192.168.1.103 192.168.1.104 192.168.1.105
9-52 User’s Reference Guide
HOW NAT WORKS With NAT ISP 163.167.132.1 Without NAT
or corporate intranet router
Note See “Associating port numbers with nodes” on page
Using Network Address Translation
IP Setup and Network Address Translation
9-54 User’s Reference Guide
Network Address Translation guideline
Associating port numbers with nodes
IP Setup and Network Address Translation
IP setup
9-56 User’s Reference Guide
IP Setup and Network Address Translation
Exports, Add Export, and Delete Export
9-58 User’s Reference Guide
Select Add Export. The Add Exported Service screen appears
CANCEL
Select Service. A pop-up menu of services and ports appears
IP Setup and Network Address Translation
9-60 User’s Reference Guide
IP subnets
For example
IP Setup and Network Address Translation
9-62 User’s Reference Guide
Static routes
page
IP Setup and Network Address Translation
Viewing static routes
Adding a static route
9-64 User’s Reference Guide
IP Setup and Network Address Translation
Rules of static route installation
Modifying a static route
Deleting a static route
Serve DHCP Clients Serve BootP Clients Serve Dynamic WAN Clients
9-66 User’s Reference Guide
IP address serving
Follow these steps to configure IP Address Serving
IP Setup and Network Address Translation
9-68 User’s Reference Guide
IP Address Pools
Numerous factors influence the choice of served address. It is difficult to specify the address that will be served to a particular client in all circumstances. However, when the address server has been configured, and the clients involved have no prior address serving interactions, the Netopia R910 will generally serve the first unused address from the first address pool with an available address. The Netopia R910 starts from the pool on the first row and continues to the pool on the last row of this screen
IP Setup and Network Address Translation
9-70 User’s Reference Guide
DHCP NetBIOS Options
IP Setup and Network Address Translation
Select Release BootP Leases and press Return
9-72 User’s Reference Guide
You have finished your IP setup
Virtual Private Networks VPN
“VPN Default Answer Profile” on page “VPN QuickView” on page
“Installing the VPN Client” on page “About ATMP Tunnels” on page
Chapter Virtual Private Networks VPN
Transi t In t ern etwor k
10-74 User’s Reference Guide
Virtual Private Networks VPN
“About PPTP Tunnels” on page “About IPsec Tunnels” on page
“About ATMP Tunnels” on page
Summary
About PPTP Tunnels
PPTP configuration
10-76 User’s Reference Guide
Virtual Private Networks VPN
Note Profiles using PPTP do not offer a Telco Options screen
10-78 User’s Reference Guide
MS-CHAP V2 and strong encryption
Encryption Support
Virtual Private Networks VPN
About IPsec Tunnels
Configuration
10-80 User’s Reference Guide
The Add Connection Profile screen appears
Virtual Private Networks VPN
10-82 User’s Reference Guide
Virtual Private Networks VPN
IP Profile Parameters
10-84 User’s Reference Guide
Advanced IP Profile Options
Virtual Private Networks VPN
VPN Default Answer Profile
VPN QuickView
Interoperation with other features
10-86 User’s Reference Guide
Profile Name Lists the name of the Connection Profile being used, if any
Virtual Private Networks VPN
Dial-Up Networking for VPN
Installing Dial-Up Networking
10-88 User’s Reference Guide
Virtual Private Networks VPN
Creating a new Dial-Up Networking profile
10-90 User’s Reference Guide
Configuring a Dial-Up Networking profile
Virtual Private Networks VPN
4. Click the TCP/IP Settings button
10-92 User’s Reference Guide
Installing the VPN Client
Windows 95 VPN installation
Windows 98 VPN installation
Virtual Private Networks VPN
Connecting using Dial-Up Networking
About ATMP Tunnels
ATMP configuration
10-94 User’s Reference Guide
Virtual Private Networks VPN
Note Profiles using ATMP do not offer a Telco Options screen
10-96 User’s Reference Guide
Virtual Private Networks VPN
10-98 User’s Reference Guide
Allowing VPNs through a Firewall
“PPTP example” on page “ATMP example” on page
Virtual Private Networks VPN
PPTP example
Display/Change Input Filter screen
10-100 User’s Reference Guide
0.0.0.0
Virtual Private Networks VPN
0.0.0.0
0.0.0.0
10-102 User’s Reference Guide
ATMP example
Virtual Private Networks VPN
0.0.0.0
10-104 User’s Reference Guide
0.0.0.0
0.0.0.0
PPP over Ethernet
Chapter PPP over Ethernet
11-106 User’s Reference Guide
PPP over Ethernet
PPP Ethernet LAN Reconfiguration
Configuration
The Netopia R910 offers the ability for PPP to reconfigure the router’s Ethernet LAN when establishing an unnumbered, non-NAT connection
11-108 User’s Reference Guide
Quick View
“Quick View status overview” on page “Statistics & Logs” on page
Chapter Monitoring Tools
Quick View status overview
Monitoring Tools
Status lights
General status
12-110 User’s Reference Guide
General Statistics
Statistics & Logs
Monitoring Tools
Network Interface
Event histories
12-112 User’s Reference Guide
Physical Interface
Device Event History
WAN Event History
Monitoring Tools
12-114 User’s Reference Guide
Routing tables
Monitoring Tools
IP routing table
12-116 User’s Reference Guide
Served IP Addresses
Monitoring Tools
System Information
SNMP
The SNMP Setup screen
12-118 User’s Reference Guide
Community strings
SNMP traps
Monitoring Tools
Modifying IP trap receivers
Setting the IP trap receivers
12-120 User’s Reference Guide
Viewing IP trap receivers
Monitoring Tools
Deleting IP trap receivers
12-122 User’s Reference Guide
User accounts
“Telnet access” on page “About filters and filter sets” on page
Chapter Security
Suggested security measures
Protecting the Security Options screen
13-124 User’s Reference Guide
Protecting the configuration screens
Security
Telnet access
13-126 User’s Reference Guide
About filters and filter sets
What’s a filter and what’s a filter set?
How filter sets work
send to next filter yes pass or discard? discard delete pass
Filter priority
Security
packet first filter match?
A filtering rule
How individual filters work
13-128 User’s Reference Guide
A filter’s actions
Security
Parts of a filter
Port numbers
Port number comparisons
Other filter attributes
13-130 User’s Reference Guide
Putting the parts together
Security
Filtering example #1
13-132 User’s Reference Guide
Design guidelines
Filtering example #2
Security
An approach to using filters
Working with IP filters and filter sets
Disadvantages of filters
13-134 User’s Reference Guide
Adding a filter set
Security
Naming a new filter set
Input and output filters-source and destination
13-136 User’s Reference Guide
Adding filters to a filter set
Security
1. To make the filter active in the filter set, select Enabled and toggle it to Yes. If Enabled is toggled to No, the filter can still exist in the filter set, but it will have no effect
Modifying filters
Viewing filter sets
13-138 User’s Reference Guide
Viewing filters
Security
Modifying filter sets
Deleting a filter set
A sample IP filter set
13-140 User’s Reference Guide
Security
Possible modifications
13-142 User’s Reference Guide
Security
Firewall tutorial General firewall terms
Basic IP packet components
Basic protocol types
Firewall Logic
Firewall design rules
13-144 User’s Reference Guide
Example TCP/UDP Ports
Security
Binary representation
Logical AND function
Implied rules
Example IP filter set screen
Filter basics
13-146 User’s Reference Guide
Established connections
Internet
Example filters
Incoming Packet Filter
Netopia
Example
13-148 User’s Reference Guide
Example
Example
Security
Example
13-150 User’s Reference Guide
RADIUS Client Support
RADIUS client configuration
Security
Local then RADIUS
13-152 User’s Reference Guide
RADIUS Server Authentication Port
RADIUS then Local
Security
be unable to configure this device unless a Radius Server is
Advanced Security Options
13-154 User’s Reference Guide
“Ping” on page “Trace Route” on page “Telnet client” on page
Chapter Utilities and Diagnostics
Utilities and Diagnostics
“Factory defaults” on page
14-156 User’s Reference Guide
Ping
Utilities and Diagnostics
14-158 User’s Reference Guide
Trace Route
Utilities and Diagnostics
Telnet client
14-160 User’s Reference Guide
Factory defaults
Disconnect Telnet console session
Transferring configuration and firmware files with TFTP
GET CONFIG FROM SERVER SEND CONFIG TO SERVER
Updating firmware
Utilities and Diagnostics
GET WAN MODULE FIRMWARE FROM SERVER Config File Name
14-162 User’s Reference Guide
Downloading configuration files
Transferring configuration and firmware files with XMODEM
Uploading configuration files
Utilities and Diagnostics
Updating firmware
14-164 User’s Reference Guide
Downloading configuration files
Utilities and Diagnostics
Uploading configuration files
14-166 User’s Reference Guide
Restarting the system
“Configuration problems” on page A-167
Appendix A Troubleshooting
Configuration problems
Troubleshooting A-167
Local routing problems
Console connection problems
Network problems
Problems communicating with remote IP hosts
Troubleshooting A-169
How to reset the router to factory defaults
Power outages
Reset Switch Slot
Before contacting Netopia
How to reach us
Technical support
A-170 User’s Reference Guide
Online product information
Troubleshooting A-171
Online Technical Support
A-172 User’s Reference Guide
About IP addressing
What is IP?
“What is IP?” on page B-173 “About IP addressing” on page B-173
Appendix B Understanding IP Addressing
B-174 User’s Reference Guide
Subnets and subnet masks
Understanding IP Addressing B-175
Example Using subnets on a Class C IP internet
Subnet masks
ISP Network
B-176 User’s Reference Guide
Network configuration
Customer Site A
Background
Example Working with a Class C subnet
Distributing IP addresses
Understanding IP Addressing B-177
B-178 User’s Reference Guide
Technical note on subnet masking
DHCP address serving
Netopia R910 DHCP server characteristics
Configuration
Understanding IP Addressing B-179
B-180 User’s Reference Guide
Using address serving
Manually distributing IP addresses
Tips and rules for distributing IP addresses
Understanding IP Addressing B-181
B-182 User’s Reference Guide
Nested IP subnets
A DHCP example
Internet
Understanding IP Addressing B-183
B-184 User’s Reference Guide
Packet header types
Broadcasts
Understanding IP Addressing B-185
B-186 User’s Reference Guide
ISP Network
Appendix C Understanding Netopia NAT Behavior
Network configuration
Background
C-188 User’s Reference Guide
Workstation A
Understanding Netopia NAT Behavior C-189
Workstations
C-190 User’s Reference Guide
Understanding Netopia NAT Behavior C-191
Exported services
C-192 User’s Reference Guide
Important notes
Configuration
Understanding Netopia NAT Behavior C-193
C-194 User’s Reference Guide
Summary
Binary Conversion Table D-195
Appendix D Binary Conversion Table
Decimal
D-196 User’s Reference Guide
Decimal
Binary
Further Reading E-197
Appendix E Further Reading
E-198 User’s Reference Guide
Further Reading E-199
E-200 User’s Reference Guide
Description
Appendix F Technical Specifications and Safety Information
Power requirements
Technical Specifications and Safety Information F-201
F-202 User’s Reference Guide
Regulatory notices
Declaration for Canadian users
Battery
Important safety instructions
Technical Specifications and Safety Information F-203
Telecommunication installation cautions
F-204 User’s Reference Guide
Numerics
Index
Index-205
Index-206
Index-207
Index-208
13-131
Index-209