Netopia 3341-ENT Manuel utilisateur
NN
NNee
eett
ttoo
oopp
ppiiiiaa
aa
®®
®®
FF
FFiiiirr
rrmm
mmww
wwaa
aarr
rree
ee UU
UUss
ssee
eerr
rr GG
GGuu
uuiiiidd
ddee
ee
33
3333
3300
0000
00--
--EE
EENN
NNTT
TT EE
EEnn
nntt
ttee
eerr
rrpp
pprr
rriiiiss
ssee
ee--
--SS
SSee
eerr
rriiiiee
eess
s
s
NN
NNee
eett
ttoo
oopp
ppiiiiaa
aa FF
FFiiiirr
rrmm
mmww
wwaa
aarr
rree
ee VV
VVee
eerr
rrss
ssiiiioo
oonn
nn 88
88....77
77
Copyright
Copyright© 2006, Netopia, Inc. Netopia, the Netopia logo, Broadband Without Boundaries,
and 3-D Reach are registered trademarks belonging to Netopia, Inc., registered U.S. Patent
and Trademark Office. All other trademarks are the property of their respective owners. All
rights reserved.
Netopia, Inc.
6001 Shellmound Street
Emeryville, CA 94608
U.S.A.
Part Number
Netopia part number 6161236-00-01
Contents iii
G
Chapter 1 — Introduction..........................................................1-1
What’s New in 8.7 ......................................................... 1-1
Telnet-based Management.............................................. 1-2
Netopia Telnet Menus .................................................... 1-2
Netopia Models ............................................................. 1-3
Screen differences .............................................. 1-3
Connecting through a Telnet Session............................... 1-4
Configuring Telnet software................................... 1-4
Navigating through the Telnet Screens............................. 1-5
Chapter 2 — WAN Configuration................................................2-1
WAN Configuration ......................................................... 2-1
WAN Ethernet Configuration screen ....................... 2-2
ADSL Line Configuration screen ............................ 2-4
Creating a New Connection Profile................................... 2-9
Advanced Connection Options....................................... 2-15
Configuration Changes Reset WAN Connection..... 2-15
Scheduled Connections...................................... 2-16
Backup Configuration ......................................... 2-21
Diffserv Options ................................................ 2-22
Priority Queuing (TOS bit).................................... 2-25
VRRP Options (WAN Link Failure Detection).......... 2-26
Chapter 3 — System Configuration............................................3-1
System Configuration Features ....................................... 3-1
IP Setup........................................................................ 3-2
Filter Sets ..................................................................... 3-2
IP Address Serving ........................................................ 3-2
Network Address Translation (NAT) .................................. 3-2
Stateful Inspection......................................................... 3-3
Add Exposed Address List .................................... 3-4
Exposed Address Associations ............................. 3-8
VLAN Configuration ...................................................... 3-11
Adding a RADIUS Profile ..................................... 3-13
CC
CCoo
oonn
nntt
ttee
ee nn
nntt
ttss
ss
iv
Firmware User Guide
Adding Port interfaces ....................................... 3-16
Changing or Deleting a VLAN............................... 3-18
Changing or Deleting an Authentication Server
Configuration ..................................................... 3-18
Configuring additional Authentication Servers....... 3-20
Date and time ............................................................. 3-22
Wireless configuration .................................................. 3-23
Wireless Multimedia (WMM) ............................... 3-25
Enable Privacy ................................................... 3-26
Multiple SSIDs................................................... 3-30
MAC Address Authentication............................... 3-33
Console Configuration .................................................. 3-35
SNMP (Simple Network Management Protocol)............... 3-36
Security ...................................................................... 3-36
Upgrade Feature Set .................................................... 3-36
Router/Bridge Set........................................................ 3-37
IGMP (Internet Group Management Protocol) ................. 3-39
Logging ....................................................................... 3-42
Log event dispositions ....................................... 3-43
Procedure for Default Installation for ICSA firewall certification
of Small/Medium Business Category Module
(ADSL Routers) ............................................................ 3-48
Chapter 4 — Multiple Network Address Translation ...................4-1
Overview ....................................................................... 4-1
Features ............................................................. 4-2
Supported traffic ................................................. 4-5
Support for AOL Instant Messenger (AIM)
File Transfer ........................................................ 4-5
Support for Yahoo Messenger............................... 4-6
MultiNAT Configuration ................................................... 4-6
Easy Setup Profile configuration ............................ 4-6
Server Lists and Dynamic NAT configuration........... 4-7
System Configuration ........................................... 4-7
Contents v
G
Modifying map lists............................................ 4-12
Adding Server Lists...................................................... 4-15
Modifying server lists ......................................... 4-18
Deleting a server ............................................... 4-20
Binding Map Lists and Server Lists ............................... 4-22
IP profile parameters.......................................... 4-22
IP Parameters (WAN Default Profile) .................... 4-24
NAT Associations ......................................................... 4-26
IP Passthrough ............................................................ 4-28
MultiNAT Configuration Example .................................... 4-32
Chapter 5 — Virtual Private Networks (VPNs)............................5-1
Overview ....................................................................... 5-1
About PPTP Tunnels ....................................................... 5-4
PPTP configuration ............................................... 5-4
About IPsec Tunnels....................................................... 5-7
About L2TP Tunnels ....................................................... 5-8
L2TP configuration ............................................... 5-8
About GRE Tunnels ...................................................... 5-11
VPN force-all...................................................... 5-14
About ATMP Tunnels..................................................... 5-15
ATMP configuration ............................................ 5-15
Encryption Support ...................................................... 5-17
MS-CHAP V2 and 128-bit strong encryption ......... 5-18
ATMP/PPTP Default Profile............................................ 5-18
VPN QuickView ............................................................ 5-20
Dial-Up Networking for VPN ........................................... 5-21
Installing Dial-Up Networking............................... 5-21
Creating a new Dial-Up Networking profile ............ 5-22
Configuring a Dial-Up Networking profile ............... 5-23
Windows XP Client Configuration ......................... 5-24
Connecting using Dial-Up Networking................... 5-25
Allowing VPNs through a Firewall................................... 5-25
vi
Firmware User Guide
PPTP example.................................................... 5-25
ATMP example ................................................... 5-28
Windows Networking Broadcasts................................... 5-32
Chapter 6 — Internet Key Exchange (IKE) IPsec
Key Management for VPNs ...................................6-1
Overview ....................................................................... 6-1
Internet Key Exchange (IKE) Configuration........................ 6-2
Adding an IKE Phase 1 Profile ............................... 6-4
Changing an IKE Phase 1 Profile ........................... 6-9
Key Management......................................................... 6-11
Advanced IPsec Options ..................................... 6-14
IPsec WAN Configuration Screens ................................. 6-21
IPsec Manual Key Entry................................................ 6-22
VPN Quickview................................................... 6-23
WAN Event History Error Reporting ...................... 6-24
Chapter 7 — IP Setup ...............................................................7-1
IP Setup........................................................................ 7-2
IP subnets........................................................... 7-4
Static routes ....................................................... 7-6
RIP Options ................................................................. 7-10
Overview ........................................................... 7-10
Authentication configuration................................ 7-10
Connection Profiles and Default Profile ................ 7-16
IP Address Serving ...................................................... 7-17
IP Address Pools................................................ 7-20
DHCP NetBIOS Options ...................................... 7-21
More Address Serving Options...................................... 7-23
Configuring the IP Address Server options ........... 7-24
DHCP Relay Agent........................................................ 7-28
Connection Profiles ...................................................... 7-30
Multicast Forwarding.................................................... 7-33
Virtual Router Redundancy (VRRP) ...................... 7-34
Contents vii
G
Additional LANs ................................................. 7-37
Chapter 8 — Line Backup .........................................................8-1
Configuring Backup ........................................................ 8-1
Connection Profiles ........................................................ 8-2
IP Setup.............................................................. 8-7
WAN Configuration ......................................................... 8-8
Backup Configuration screen ................................ 8-9
Using Scheduled Connections with Backup .................... 8-12
Backup Default Gateway............................................... 8-14
Backup Configuration screen .............................. 8-14
IP Setup screen ................................................. 8-16
Backup Management/Statistics.................................... 8-17
QuickView ................................................................... 8-18
Chapter 9 — Monitoring Tools ...................................................9-1
Quick View Status Overview............................................ 9-1
General status..................................................... 9-2
Current status ..................................................... 9-2
Status lights........................................................ 9-3
Statistics & Logs ........................................................... 9-3
Event Histories .............................................................. 9-4
IP Routing Table............................................................. 9-6
General Statistics .......................................................... 9-6
System Information........................................................ 9-8
Simple Network Management Protocol (SNMP)................. 9-9
The SNMP Setup screen....................................... 9-9
SNMP traps....................................................... 9-11
Chapter 10 — Security ...........................................................10-1
Suggested Security Measures....................................... 10-1
Telnet Tiered Access – Two Password Levels ................. 10-2
UPnP Support.................................................... 10-2
Superuser configuration ..................................... 10-3
viii
Firmware User Guide
Limited user configuration .................................. 10-4
Advanced Security Options ........................................... 10-6
RADIUS server authentication ............................. 10-7
TACACS+ server authentication........................... 10-8
Warning alerts ................................................... 10-9
User access password ..................................... 10-12
User menu differences..................................... 10-13
Telnet Access ............................................................ 10-20
About Filters and Filter Sets........................................ 10-21
What’s a filter and what’s a filter set? ............... 10-21
How filter sets work ......................................... 10-21
How individual filters work ................................ 10-22
Design guidelines ............................................ 10-27
Working with IP Filters and Filter Sets .......................... 10-28
Adding a filter set............................................. 10-29
Deleting a filter set .......................................... 10-33
A sample filter set............................................ 10-33
Policy-based Routing using Filtersets........................... 10-36
TOS field matching........................................... 10-37
Firewall Tutorial ......................................................... 10-39
General firewall terms ...................................... 10-39
Basic IP packet components............................. 10-39
Basic protocol types......................................... 10-39
Firewall design rules ........................................ 10-40
Filter basics..................................................... 10-42
Example filters................................................. 10-43
Configuration Management ......................................... 10-46
TFTP ............................................................... 10-49
Chapter 11 — Utilities and Diagnostics ...................................11-1
Ping ............................................................................ 11-2
Trace Route................................................................. 11-4
Telnet Client ................................................................ 11-5
Contents ix
G
Factory Defaults .......................................................... 11-6
Transferring Configuration and Firmware Files with TFTP.. 11-6
Updating firmware.............................................. 11-7
Downloading configuration files ........................... 11-7
Uploading configuration files ............................... 11-8
Restarting the System ................................................. 11-8
Appendix A — Troubleshooting..................................................A-1
Configuration Problems .................................................. A-1
Network problems................................................ A-2
How to Reset the Router to Factory Defaults.................... A-3
Power Outages .............................................................. A-3
Technical Support .......................................................... A-3
How to reach us .................................................. A-4
Index
x
Firmware User Guide
Autres manuels pour 3341-ENT
3
Ce manuel convient aux modèles suivants
6
Table des matières
Autres manuels Netopia Routeur réseau
Netopia
Netopia 4753 2A4NA Mode d’emploi
Netopia
Netopia D3232 Manuel utilisateur
Netopia
Netopia Firmware 4000-Series Guide de démarrage rapide
Netopia
Netopia Extreme 3347-02 Manuel utilisateur
Netopia
Netopia 4686-XL Manuel utilisateur
Netopia
Netopia D3000-I Manuel utilisateur
Netopia
Netopia 4553 Fiche d'information produit
Netopia
Netopia Cayman 3386-ENT Manuel utilisateur
Netopia
Netopia Cayman 3386-ENT Manuel utilisateur
Netopia
Netopia 3341-ENT Manuel utilisateur
Netopia
Netopia 3347W Manuel utilisateur
Netopia
Netopia R5000 Fiche d'information produit
Netopia
Netopia 4522 Mode d’emploi
Netopia
Netopia 4741 2A4NA Manuel utilisateur
Netopia
Netopia 435 Manuel utilisateur
Netopia
Netopia Router PN Series Manuel utilisateur
Netopia
Netopia R910 Fiche d'information produit
Netopia
Netopia 3381-ENT Mode d’emploi
Netopia
Netopia 3341-ENT Mode d’emploi
Netopia
Netopia 4741 2A4NA Mode d’emploi
Manuels Routeur réseau populaires d'autres marques
NETGEAR
NETGEAR FS526T - Switch Manuel utilisateur
Korenix
Korenix JetNet 5710G Series Manuel utilisateur
Automated Logic
Automated Logic ZN551 Manuel du propriétaire
Cisco
Cisco ASR 1000 Series Manuel de l'opérateur
EnGenius
EnGenius ESR-9710 Manuel utilisateur
Cisco
Cisco 805 Series Instructions d'utilisation et de sécurité