Manuals / SMC Networks / Computer Equipment / Network Router

SMC Networks SMC7904BRB2 manual 4-49, Intrusion Detection Intrusion Detection Feature

Models: SMC7904BRB2

1 126

Download 126 pages 37.06 Kb

Page 87

Image 87

CONFIGURATION PARAMETERS

Intrusion Detection

•Intrusion Detection Feature

Stateful Packet Inspection (SPI) and Anti-DoS firewall protection (Default: Enabled) — The Intrusion Detection Feature of the Barricade Router limits access for incoming traffic at the WAN port. When the SPI feature is turned on, all incoming packets will be blocked except for those types marked in the Stateful Packet Inspection section.

RIP Defect (Default: Enabled) — If an RIP request packet is not acknowledged to by the router, it will stay in the input queue and not be released. Accumulated packets could cause the input queue to fill, causing severe problems for all protocols. Enabling this feature prevents the packets from accumulating.

Discard Ping to WAN (Default: Disabled) — Prevent a ping on the Barricade’s WAN port from being routed to the network.

Scroll down to view more information.

4-49

Page 87

Image 87

SMC Networks SMC7904BRB2 manual 4-49, Intrusion Detection Intrusion Detection Feature

Contents

Page Page August From SMC’s line of award-winning connectivity solutionsRouter with built-in ADSL2/2+ Modem 38 TeslaTrademarks LIMITED WARRANTY LIMITED WARRANTY Increase the separation between the equipment and receiver COMPLIANCESFederal Communication Commission Interference Statement Reorient or relocate the receiving antennaCOMPLIANCES EC Conformance DeclarationCOMPLIANCES Safety Compliance Wichtige Sicherheitshinweise GermanyCOMPLIANCES Introduction TABLE OF CONTENTSInstallation Configuring Client PCTABLE OF CONTENTS Configuring the BarricadeTMTroubleshooting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A-1 Cables . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . B-1 TABLE OF CONTENTS viiiFeatures and Benefits CHAPTER INTRODUCTIONAbout the Barricade Shared IP Address ApplicationsWired LAN Internet AccessVirtual Private Network VPN Virtual ServerDMZ Host Support SecurityPoint-to-Point Tunneling Protocol - Provides a secure tunnel for remote client access to a PPTP security gateway. PPTP includes provisions for call origination and flow control required by ISPs Package Contents CHAPTER INSTALLATIONHardware Description System RequirementsSMC7904BRA2 contains the following ports on the rear panel Figure 2-1. SMC7904BRA2 Rear PanelDescription SMC7904BRB2 contains the following ports on the rear panel Figure 2-2. SMC7904BRB2 Rear PanelDescription Description LED Indicators SMC7904BRA2Figure 2-3. SMC7904BRA2 Front Panel StatusDescription LED Indicators SMC7904BRB2Figure 2-4. SMC7904BRB2 Front Panel StatusISP Settings Connect the SystemConnect the ADSL Line Connect the Power Adapter Attach to Your Network Using Ethernet CablingThe connection diagram shows how to connect the Barricade Connection IllustrationCONNECT THE SYSTEM INSTALLATION 2-10CHAPTER 3 CONFIGURING CLIENT PC TCP/IP ConfigurationWindows Dial-Up ConnectionsProperties Disable HTTP Proxy Obtain IP Settings from Your BarricadeAccessories/ Command Prompt 4. Close the Command Prompt window Your computer is now configured to connect to the BarricadeCONFIGURING CLIENT PC Windows XP Obtain IP Settings from Your Barricade System Preferences Configuring Your Macintosh ComputerInternet Explorer 3. Uncheck all check boxes and click OK CONFIGURING YOUR MACINTOSH COMPUTERCONFIGURING CLIENT PC 3-10CHAPTER CONFIGURING THE BARRICADETM CONFIGURING THE BARRICADETM Navigating the Management InterfaceNAVIGATING THE MANAGEMENT INTERFACE Making Configuration ChangesTime Zone SETUP WIZARDSETUP WIZARD Parameter SettingParameter Setting - Country or ISP Not Listed Description Click NEXT to continue to the “Confirm” settings screenPPPoE ParameterDescription Click NEXT to continue to the “Confirm” settings screenPPPoA Parameter1483 Bridging DHCP Description 4-101483 Bridging Static ParameterDescription 4-111483 Routing ParameterDescription 4-12Bridging ParameterParameter 4-13SETUP WIZARD 1483 Routing DHCPDescription 4-14Confirm ParameterParameter 4-15If the parameters are correct, click FINISH to save these settings SETUP WIZARDEach main menu item is described in the following table Configuration parameters4-16 There are 13 main menu items located on the left side of the screenDDNS 4-17Menu Description4-18 Time SettingsSYSTEM 4-19 Password SettingsCONFIGURATION PARAMETERS Remote Management 4-204-21 The following three items are configurable ATM PVC Clone MAC DNSCONFIGURATION PARAMETERS ATM PVC 4-22Click on the desired VC to configure the connection parameters VC. Encapsulation specifies how to handle multiple protocols atParameter 4-23ATM Interface 1483 BridgingParameter 4-24terminated. This setting only applies when the Connect Type PPPoADescription 4-251483 Routing ParameterDescription 4-26PPPoE ParameterDescription 4-27IP Over RFC1483 bridged Parameter4-28 CONFIGURING THE BARRICADETMClone MAC Address CONFIGURATION PARAMETERS 4-294-30 ParameterDescription VLAN 4-314-32 Configure the VLAN settings in this screenVLAN Profile CONFIGURATION PARAMETERS 4-33Address Mapping 4-344-35 The more common TCP service ports includeVirtual Server Special Application 4-364-37 CONFIGURATION PARAMETERSNAT Mapping Table 4-38 ROUTINGStatic Route 4-39 ParameterDescription Poison Reverse 4-404-41 Routing TableParameter Description FIREWALL 4-42Access Control 4-433. Click OK and then click SAVE SETTINGS to save your settings 4-44To create a new access control rule 2. Define the appropriate settings for client PC servicesMAC Filter 4-454-46 CONFIGURING THE BARRICADETMURL Blocking 4-47 CONFIGURATION PARAMETERSSchedule Rule CONFIGURING THE BARRICADETM 4-482. Define the appropriate settings for a schedule rule 3. Click OK and then click SAVE SETTINGS to save your settingsIntrusion Detection Intrusion Detection Feature 4-49CONFIGURING THE BARRICADETM 4-50Stateful Packet Inspection 4-51Parameter 4-52Defaults Connection Policy4-53 DoS Criteria and Port Scan Criteriathat will cause the software to stop deleting half CONFIGURING THE BARRICADETM 4-54SNMP 4-55Select the SNMP Operation mode from the drop down menu CONFIGURATION PARAMETERSCommunity 4-56Parameter 4-57unauthorized individuals from accessing information on your system TrapUPNP 4-584-59 Click Add traffic class to set the parameter details 4-60CONFIGURING THE BARRICADETM Traffic Mapping4-61 CONFIGURATION PARAMETERSTraffic Statistics 4-62 ADSLADSL Parameters ADSL Status 4-63Interleaved Path FEC Correction 4-64The number of Fast Path Cyclic Redundancy Check errors Parameter DescriptionDDNS 4-654-66 TOOLSPing Utility Trace Route Utility 4-67Configuration Tools 4-68Firmware Upgrade 4-69Reset 4-70Scroll down to view more information on the Status screen 4-71CONFIGURATION PARAMETERS STATUSCONFIGURING THE BARRICADETM 4-72Description 4-73The following items are included on the Status screen ParameterMACINTOSH Finding the MAC address of a Network Card4-74 WINDOWS NT4/2000/XPAction APPENDIX A TROUBLESHOOTINGTroubleshooting Chart SymptomAction Troubleshooting ChartSymptom TROUBLESHOOTINGTroubleshooting Chart SymptomAction TROUBLESHOOTING Ethernet Cable APPENDIX B CABLESRJ-45 Port Connection Figure B-1. RJ-45 Ethernet Connector Pin NumbersPin Assignments Straight-Through WiringCrossover Cable Pin Assignments Crossover WiringADSL Cable Figure B-2. RJ-11 Connector Pin NumbersADSL CABLE Signal Name Wire ColorFigure B-3. RJ-11 Pinouts ATM Features APPENDIX C SPECIFICATIONSPhysical Characteristics Ports ADSL FeaturesWeight 500 g Input Power 12 V 1 A IEEE Standards Security FeaturesLAN Features Temperature IEC