User’s Reference Guide
Netopia R910 Ethernet Router for DSL and Cable Modems
Printed Copies
Copyright
Part Number
Features and capabilities
Contents
How to use this guide
Chapter 2 - Setting Up Internet Services
Chapter 7 - Easy Setup
Connecting a console cable to your router
Easy Setup console screens
Accessing the Easy Setup console screens
VPN Default Answer Profile
DHCP NetBIOS Options
Installing Dial-Up Networking
Installing the VPN Client
Telnet access
The SNMP Setup screen
Chapter 12 - Monitoring Tools
12-109
Factory defaults
Chapter 14 - Utilities and Diagnostics
Appendix A - Troubleshooting
Configuration problems
Exported services
Using address serving
Appendix F - Technical Specifications and Safety
Power requirements
“Features and capabilities” on page “How to use this guide” on page
Features and capabilities
Chapter Introduction
Overview
1-10 User’s Reference Guide
How to use this guide
Setting Up Internet Services
Chapter Setting Up Internet Services
Deciding on an ISP account
DSL and cable modems
2-12 User’s Reference Guide
Local LAN IP address information to obtain
With Network Address Translation
Without Network Address Translation
Chapter Making the Physical Connections
“Identify the connectors and attach the cables” on page
Find a location
Making the Physical Connections
3-14 User’s Reference Guide
Identify the connectors and attach the cables
What you need
Making the Physical Connections
Netopia R910 Ethernet Router back panel ports
your router” on page
8 9 10 12 13 14 15 16
Netopia R910 Ethernet Router status lights
3-16 User’s Reference Guide
Connecting to Your Local Area Network
Chapter Connecting to Your Local Area Network
“Connecting to an Ethernet network” on page
Network Model
After
Readying computers on your local network
4-18 User’s Reference Guide
Application software TCP/IP stack Ethernet/EtherTalk Driver Your PC
Connecting to Your Local Area Network
4-20 User’s Reference Guide
Connecting to an Ethernet network
10Base-T
The Netopia R910 in a 10Base-T network with a hub
Connecting to Your Local Area Network
The Netopia R910 in a 10Base-T network
4-22 User’s Reference Guide
Hardware and operating system requirements
Chapter Configuring TCP/IP
Configuring TCP/IP
“Hardware and operating system requirements” on page
Dynamic configuration recommended
Configuring TCP/IP on Windows 95 or
5-24 User’s Reference Guide
Configuring TCP/IP
Static configuration optional
Dynamic configuration recommended
Configuring TCP/IP on a Macintosh Computer
5-26 User’s Reference Guide
1. Go to the Apple menu. Select
Configuring TCP/IP
Static configuration optional
5-28 User’s Reference Guide
Dynamic configuration using MacIP optional
Configuring TCP/IP
5-30 User’s Reference Guide
“Connecting a console cable to your router” on page
“Connecting through a Telnet session” on page
Chapter Console-Based Management
Console-Based Management
Upgrade feature set. See “Upgrade feature set” on page
Connecting through a Telnet session
6-32 User’s Reference Guide
Filter sets firewalls. See “About filters and filter sets” on page
Console-Based Management
Connecting a console cable to your router
Configuring Telnet software
6-34 User’s Reference Guide
Navigating through the console screens
Easy Setup console screens
Chapter Easy Setup
Accessing the Easy Setup console screens
Easy Setup
7-36 User’s Reference Guide
See Appendix A, “Troubleshooting,” for more suggestions
If your ISP supports DHCP
Quick Easy Setup connection path
If your ISP doesn’t support DHCP
Easy Setup
7-38 User’s Reference Guide
For more Easy Setup options see “More Easy Setup options” on page
Easy Setup
More Easy Setup options
WAN Ethernet Configuration
7-40 User’s Reference Guide
IP Easy Setup
Easy Setup
Easy Setup Security Configuration
1. Select RESTART DEVICE. A prompt asks you to confirm your choice
7-42 User’s Reference Guide
Easy Setup is now complete
“System configuration features” on page
Chapter WAN and System Configuration
WAN configuration
WAN and System Configuration
8-44 User’s Reference Guide
System configuration screens
WAN and System Configuration
Navigating through the system configuration screens
8-46 User’s Reference Guide
System configuration features
Filter sets firewalls
IP setup
IP address serving
Date and time
Console configuration
Upgrade feature set
SNMP Simple Network Management Protocol
Security
WAN and System Configuration
Logging
8-50 User’s Reference Guide
Installing the Syslog client
Network Address Translation features
Chapter IP Setup and Network Address Translation
IP Setup and Network Address Translation
“Network Address Translation features” on page
HOW NAT WORKS With NAT ISP 163.167.132.1 Without NAT
9-52 User’s Reference Guide
or corporate intranet router
192.168.1.100 192.168.1.102 192.168.1.103 192.168.1.104 192.168.1.105
IP Setup and Network Address Translation
Using Network Address Translation
Note See “Associating port numbers with nodes” on page
9-54 User’s Reference Guide
IP Setup and Network Address Translation
Associating port numbers with nodes
Network Address Translation guideline
IP setup
9-56 User’s Reference Guide
IP Setup and Network Address Translation
Select Add Export. The Add Exported Service screen appears
9-58 User’s Reference Guide
CANCEL
Exports, Add Export, and Delete Export
Select Service. A pop-up menu of services and ports appears
IP Setup and Network Address Translation
9-60 User’s Reference Guide
IP subnets
For example
IP Setup and Network Address Translation
page
Static routes
9-62 User’s Reference Guide
IP Setup and Network Address Translation
Viewing static routes
Adding a static route
9-64 User’s Reference Guide
Modifying a static route
Rules of static route installation
Deleting a static route
IP Setup and Network Address Translation
IP address serving
9-66 User’s Reference Guide
Serve DHCP Clients Serve BootP Clients Serve Dynamic WAN Clients
Follow these steps to configure IP Address Serving
IP Setup and Network Address Translation
9-68 User’s Reference Guide
IP Address Pools
Numerous factors influence the choice of served address. It is difficult to specify the address that will be served to a particular client in all circumstances. However, when the address server has been configured, and the clients involved have no prior address serving interactions, the Netopia R910 will generally serve the first unused address from the first address pool with an available address. The Netopia R910 starts from the pool on the first row and continues to the pool on the last row of this screen
IP Setup and Network Address Translation
9-70 User’s Reference Guide
DHCP NetBIOS Options
IP Setup and Network Address Translation
You have finished your IP setup
9-72 User’s Reference Guide
Select Release BootP Leases and press Return
“Installing the VPN Client” on page “About ATMP Tunnels” on page
“VPN Default Answer Profile” on page “VPN QuickView” on page
Chapter Virtual Private Networks VPN
Virtual Private Networks VPN
Transi t In t ern etwor k
10-74 User’s Reference Guide
“About ATMP Tunnels” on page
“About PPTP Tunnels” on page “About IPsec Tunnels” on page
Summary
Virtual Private Networks VPN
10-76 User’s Reference Guide
PPTP configuration
About PPTP Tunnels
Virtual Private Networks VPN
Note Profiles using PPTP do not offer a Telco Options screen
10-78 User’s Reference Guide
Virtual Private Networks VPN
Encryption Support
MS-CHAP V2 and strong encryption
10-80 User’s Reference Guide
Configuration
About IPsec Tunnels
The Add Connection Profile screen appears
Virtual Private Networks VPN
10-82 User’s Reference Guide
Virtual Private Networks VPN
IP Profile Parameters
10-84 User’s Reference Guide
Advanced IP Profile Options
Virtual Private Networks VPN
VPN Default Answer Profile
10-86 User’s Reference Guide
Interoperation with other features
VPN QuickView
Profile Name Lists the name of the Connection Profile being used, if any
Virtual Private Networks VPN
10-88 User’s Reference Guide
Installing Dial-Up Networking
Dial-Up Networking for VPN
Virtual Private Networks VPN
Creating a new Dial-Up Networking profile
10-90 User’s Reference Guide
Configuring a Dial-Up Networking profile
Virtual Private Networks VPN
4. Click the TCP/IP Settings button
Windows 95 VPN installation
Installing the VPN Client
Windows 98 VPN installation
10-92 User’s Reference Guide
Virtual Private Networks VPN
Connecting using Dial-Up Networking
10-94 User’s Reference Guide
ATMP configuration
About ATMP Tunnels
Virtual Private Networks VPN
Note Profiles using ATMP do not offer a Telco Options screen
10-96 User’s Reference Guide
Virtual Private Networks VPN
“PPTP example” on page “ATMP example” on page
Allowing VPNs through a Firewall
10-98 User’s Reference Guide
Display/Change Input Filter screen
PPTP example
Virtual Private Networks VPN
10-100 User’s Reference Guide
0.0.0.0
Virtual Private Networks VPN
0.0.0.0
0.0.0.0
10-102 User’s Reference Guide
ATMP example
Virtual Private Networks VPN
0.0.0.0
10-104 User’s Reference Guide
0.0.0.0
0.0.0.0
PPP over Ethernet
Chapter PPP over Ethernet
11-106 User’s Reference Guide
Configuration
PPP Ethernet LAN Reconfiguration
The Netopia R910 offers the ability for PPP to reconfigure the router’s Ethernet LAN when establishing an unnumbered, non-NAT connection
PPP over Ethernet
11-108 User’s Reference Guide
Quick View
Quick View status overview
Chapter Monitoring Tools
Monitoring Tools
“Quick View status overview” on page “Statistics & Logs” on page
12-110 User’s Reference Guide
General status
Status lights
Monitoring Tools
Statistics & Logs
General Statistics
12-112 User’s Reference Guide
Event histories
Physical Interface
Network Interface
Monitoring Tools
WAN Event History
Device Event History
12-114 User’s Reference Guide
Routing tables
Monitoring Tools
IP routing table
12-116 User’s Reference Guide
Served IP Addresses
Monitoring Tools
System Information
12-118 User’s Reference Guide
The SNMP Setup screen
SNMP
Monitoring Tools
SNMP traps
Community strings
12-120 User’s Reference Guide
Setting the IP trap receivers
Viewing IP trap receivers
Modifying IP trap receivers
Monitoring Tools
Deleting IP trap receivers
12-122 User’s Reference Guide
Chapter Security
“Telnet access” on page “About filters and filter sets” on page
Suggested security measures
User accounts
Protecting the configuration screens
13-124 User’s Reference Guide
Protecting the Security Options screen
Security
Telnet access
What’s a filter and what’s a filter set?
About filters and filter sets
How filter sets work
13-126 User’s Reference Guide
Security
Filter priority
packet first filter match?
send to next filter yes pass or discard? discard delete pass
13-128 User’s Reference Guide
How individual filters work
A filter’s actions
A filtering rule
Port numbers
Parts of a filter
Port number comparisons
Security
Putting the parts together
13-130 User’s Reference Guide
Other filter attributes
Security
Filtering example #1
Filtering example #2
Design guidelines
13-132 User’s Reference Guide
Working with IP filters and filter sets
An approach to using filters
Disadvantages of filters
Security
13-134 User’s Reference Guide
Adding a filter set
Security
Naming a new filter set
Adding filters to a filter set
13-136 User’s Reference Guide
Input and output filters-source and destination
Security
1. To make the filter active in the filter set, select Enabled and toggle it to Yes. If Enabled is toggled to No, the filter can still exist in the filter set, but it will have no effect
13-138 User’s Reference Guide
Viewing filter sets
Viewing filters
Modifying filters
Deleting a filter set
Modifying filter sets
A sample IP filter set
Security
13-140 User’s Reference Guide
Security
Possible modifications
13-142 User’s Reference Guide
Basic IP packet components
Firewall tutorial General firewall terms
Basic protocol types
Security
13-144 User’s Reference Guide
Firewall design rules
Example TCP/UDP Ports
Firewall Logic
Logical AND function
Binary representation
Implied rules
Security
13-146 User’s Reference Guide
Filter basics
Established connections
Example IP filter set screen
Incoming Packet Filter
Example filters
Netopia
Internet
Example
13-148 User’s Reference Guide
Example
Example
Security
Example
13-150 User’s Reference Guide
Security
RADIUS client configuration
RADIUS Client Support
RADIUS Server Authentication Port
13-152 User’s Reference Guide
RADIUS then Local
Local then RADIUS
Advanced Security Options
be unable to configure this device unless a Radius Server is
Security
13-154 User’s Reference Guide
Utilities and Diagnostics
Chapter Utilities and Diagnostics
“Factory defaults” on page
“Ping” on page “Trace Route” on page “Telnet client” on page
14-156 User’s Reference Guide
Ping
Utilities and Diagnostics
14-158 User’s Reference Guide
Trace Route
Utilities and Diagnostics
Telnet client
Disconnect Telnet console session
Factory defaults
Transferring configuration and firmware files with TFTP
14-160 User’s Reference Guide
Utilities and Diagnostics
Updating firmware
GET WAN MODULE FIRMWARE FROM SERVER Config File Name
GET CONFIG FROM SERVER SEND CONFIG TO SERVER
14-162 User’s Reference Guide
Downloading configuration files
Utilities and Diagnostics
Uploading configuration files
Transferring configuration and firmware files with XMODEM
Updating firmware
14-164 User’s Reference Guide
Uploading configuration files
Utilities and Diagnostics
Downloading configuration files
14-166 User’s Reference Guide
Restarting the system
Configuration problems
Appendix A Troubleshooting
Troubleshooting A-167
“Configuration problems” on page A-167
Network problems
Console connection problems
Problems communicating with remote IP hosts
Local routing problems
Power outages
How to reset the router to factory defaults
Reset Switch Slot
Troubleshooting A-169
Technical support
How to reach us
A-170 User’s Reference Guide
Before contacting Netopia
Online Technical Support
Troubleshooting A-171
Online product information
A-172 User’s Reference Guide
“What is IP?” on page B-173 “About IP addressing” on page B-173
What is IP?
Appendix B Understanding IP Addressing
About IP addressing
B-174 User’s Reference Guide
Subnets and subnet masks
Subnet masks
Example Using subnets on a Class C IP internet
Understanding IP Addressing B-175
Network configuration
B-176 User’s Reference Guide
Customer Site A
ISP Network
Distributing IP addresses
Example Working with a Class C subnet
Understanding IP Addressing B-177
Background
B-178 User’s Reference Guide
Technical note on subnet masking
Configuration
Netopia R910 DHCP server characteristics
Understanding IP Addressing B-179
DHCP address serving
Manually distributing IP addresses
Using address serving
Tips and rules for distributing IP addresses
B-180 User’s Reference Guide
Understanding IP Addressing B-181
A DHCP example
Nested IP subnets
B-182 User’s Reference Guide
Internet
Understanding IP Addressing B-183
B-184 User’s Reference Guide
Understanding IP Addressing B-185
Broadcasts
Packet header types
B-186 User’s Reference Guide
Network configuration
Appendix C Understanding Netopia NAT Behavior
Background
ISP Network
C-188 User’s Reference Guide
Workstation A
Understanding Netopia NAT Behavior C-189
Workstations
C-190 User’s Reference Guide
Understanding Netopia NAT Behavior C-191
Exported services
C-192 User’s Reference Guide
Important notes
Configuration
Understanding Netopia NAT Behavior C-193
C-194 User’s Reference Guide
Summary
Binary Conversion Table D-195
Appendix D Binary Conversion Table
Decimal
D-196 User’s Reference Guide
Binary
Decimal
Further Reading E-197
Appendix E Further Reading
E-198 User’s Reference Guide
Further Reading E-199
E-200 User’s Reference Guide
Power requirements
Appendix F Technical Specifications and Safety Information
Technical Specifications and Safety Information F-201
Description
Declaration for Canadian users
Regulatory notices
F-202 User’s Reference Guide
Technical Specifications and Safety Information F-203
Important safety instructions
Telecommunication installation cautions
Battery
F-204 User’s Reference Guide
Index-205
Index
Numerics
Index-206
Index-207
Index-208
13-131
Index-209