Manuals / SMC Networks / Computer Equipment / Network Router

SMC Networks SMCWBR14T-G manual 4-35, Intrusion Detection, Security

Models: SMCWBR14T-G

1 132

Download 132 pages 38.1 Kb

Page 83

Intrusion Detection

SECURITY

Intrusion Detection

The Barricade’s firewall inspects packets at the application layer, maintains TCP and UDP session information including timeouts and number of active sessions, and provides the ability to detect and prevent certain types of network attacks such as Denial-of-Service (DoS) attacks.

4-35

Image 83

SMC Networks SMCWBR14T-G manual 4-35, Intrusion Detection, Security

Contents

Page Page Irvine, CA Wireless Broadband RouterFrom SMC’s line of award-winning connectivity solutions 38 TeslaTrademarks LIMITED WARRANTY LIMITED WARRANTY COMPLIANCES Federal Communication Commission Interference StatementIMPORTANT NOTE COMPLIANCES Industry Canada StatementEC Declaration of Conformity COMPLIANCES Countries of Operation & Conditions of Use in the European CommunityCOMPLIANCES Declaration of Conformity in Languages of the European CommunityUnderwriters Laboratories Compliance Statement Safety ComplianceInformation for Power Source Cord Set SpecificationsCOMPLIANCES viiiWichtige Sicherheitshinweise Germany 4 Configuring the Barricade TABLE OF CONTENTS2 Installation 3 Configuring The Client PCTABLE OF CONTENTS Maintenance Configuration Tools Firmware Upgrade Reset System TABLE OF CONTENTS About the Barricade CHAPTER INTRODUCTIONFeatures and Benefits Shared IP Address ApplicationsWired and Wireless LAN Internet AccessAPPLICATIONS DMZ Host SupportSecurity Virtual Private Network VPN Pass-throughPackage Contents CHAPTER INSTALLATIONHardware Description System RequirementsDescription Figure 2-1. Front LED indicatorsStatus Description The following figure and table shows the rear panel of the BarricadeNote Antenna not shown Figure 2-2. Rear PanelConnect the ADSL/Cable Modem Line ISP SettingsConnect the System Figure 2-3. Installing with a Splitter Phone Line ConfigurationInstalling a Full-Rate Connection CONNECT THE SYSTEM Installing a Splitterless ConnectionFigure 2-4. Installing without a Splitter Connecting the Barricade to your LAN Connect the Power Adapter INSTALLATION 2-10CHAPTER CONFIGURING THE CLIENT PC TCP/IP Configuration Network and Dial-Up Connections DHCP IP ConfigurationCONFIGURING THE CLIENT PC Windows5. If Obtain an IP address automatically and Obtain TCP/IP CONFIGURATION4. Double-click Internet Protocol TCP/IP Obtain IP Settings From Your Barricade 3. Type “IPCONFIG /RENEW” and press the Enter key. Verify that your IP Address is now 192.168.2.xxx, your Subnet Mask is 255.255.255.0 and your Default Gateway is 192.168.2.1. These values confirm that your Barricade is functioning correctly 3. Select Use the following DNS server addresses Manual IP ConfigurationDisable HTTP Proxy 1. On the Windows desktop, click Start/Control Panel DHCP IP ConfigurationCONFIGURING THE CLIENT PC Windows XP6. If Obtain an IP address automatically and Obtain 3-10TCP/IP CONFIGURATION 5. Double-click Internet Protocol TCP/IPCONFIGURING THE CLIENT PC 3-11Obtain IP Settings from Your Barricade TCP/IP CONFIGURATION 3-12Your computer is now configured to connect to the Barricade 4. Select Use the following DNS server addresses 3-13Manual IP Configuration 2. Select Use the following IP AddressDisable HTTP Proxy 3-143-15 Configuring Your Macintosh Computer5. Close the Network window 3-16Internet Explorer 3-17CONFIGURING YOUR MACINTOSH COMPUTER 3-18CHAPTER CONFIGURING THE BARRICADE CONFIGURING THE BARRICADE Navigating the Web Browser InterfaceNAVIGATING THE WEB BROWSER INTERFACE Making Configuration ChangesCONFIGURING THE BARRICADE Login ScreenThe Login screen automatically appears first Enter the default password “smcadmin” and then click LOGINGetting Started Setup WizardDescription Wireless SettingsParameter Super G Super G Feature SummaryFeature CharacteristicsInternet Settings SETUP WIZARD Cable Modem SettingsClick NEXT to proceed, or BACK to change your settings CONFIGURING THE BARRICADE 4-10ADSL Settings - Fixed-IP xDSL Click NEXT to proceed, or BACK to change your settingsADSL Settings - PPPoE 4-11ADSL Settings - PPTP 4-12HOME NETWORK SETTINGS Home Network Settings4-13 4-14 Making Configuration ChangesStatus 4-15MAKING CONFIGURATION CHANGES Parameter 4-16Displays system IP settings, as well as DHCP Server, Firewall The following items are included on the Status screenLAN Settings 4-17Description 4-18Parameter Address 4-19WAN Settings MAKING CONFIGURATION CHANGESDynamic IP 4-20PPPoE 4-21PPTP 4-22Static IP 4-23Click Save Settings to proceed, or Cancel to change your settings MAKING CONFIGURATION CHANGESWireless 4-24Description 4-25Channel and SSID Parameter4-26 SECURITY Security4-27 Firewall 4-28Schedule Rule 4-29Edit Schedule Rule 4-30CONFIGURING THE BARRICADE Access Control 4-31Access Control Add PC 4-32MAC Filter 4-33Parental Control 4-34SECURITY 4-35Intrusion Detection Network attacks that deny access to a network device are called DoS attacks. DoS attacks are aimed at devices and networks with a connection to the Internet. Their goal is not to steal information, but to disable a device or network so users no longer have access to network resources 4-36Parameter 4-37Defaults Description input queue to fill, causing severe problems for alluser only checks FTP Service in the Stateful Packet 4-38Defaults Description Yes radio button in the “Enable SPI and Anti-DoSDescription 4-39Defaults ParameterDefaults 4-40Note We do not recommend modifying the default parameters shown above Click Save Settings to proceed, or Cancel to change your settingsSECURITY 4-41CONFIGURING THE BARRICADE 4-42Wireless Wireless Encryption 4-43CONFIGURING THE BARRICADE 4-44Access Control By default, this MAC filtering feature is disabledDescription 4-45Parameter ASCII Keys 4-46Hexadecimal Keys WPA/WPA2 4-47WPA2 4-48WPA and WPA2 Mode Types WPA2Description 4-49802.1X Authentication Parameter802.1X 4-50Click Save Settings to proceed, or Cancel to change your settings 4-51 Advanced Settings4-52 Address Mapping 4-53Virtual Server 4-54Special Applications 4-55Popular applications requiring multiple ports are listed in the Popular Applications field. From the drop-down list, choose the application and then choose a row number to copy this data into 4-56NAT Mapping Table 4-57Configuration Tools Maintenance4-58 MAINTENANCE 4-59Firmware Upgrade Use this screen to update the firmware to the latest versionReset 4-60Time Settings System4-61 Password Settings 4-62Remote Management 4-63Community SNMP4-64 Parameter 4-65SNMP Trap4-66 UPnPStatic Route Routing4-67 Description 4-68Silent Listens for route broadcasts and updates its route table ParameterAuthentication Required 4-69Parameter 4-70Routing Table Click Routing Table to view the screen belowAction APPENDIX A TROUBLESHOOTINGTroubleshooting Chart SymptomAction Troubleshooting ChartSymptom TROUBLESHOOTINGAction Troubleshooting ChartSymptom Action Troubleshooting ChartSymptom Ethernet Cable APPENDIX B CABLESFigure B-1. RJ-45 Ethernet Connector Pin Numbers RJ-45 Port Ethernet ConnectionPin Assignments Straight-Through WiringCABLES Crossover WiringCrossover Cable Pin Assignments Weight APPENDIX C SPECIFICATIONSIndicator Panel DimensionsModulation Type Advanced FeaturesRadio Features Wireless RF module Frequency Band 802.11g Radio 2.4GHz Internet StandardsModulation Rate-Receiver Sensitivity Typical dBm 802.11g - 6Mbps RF Output Power Modulation Rate-Output Power dBm 802.11b - 1MbpsHumidity TemperatureSPECIFICATIONS Environmental