Netopia Firmware 4000-Series Guide de démarrage rapide

NNee

eett

ttoo

oopp

ppiiiiaa

®®

FFiiiirr

rrmm

mmww

wwaa

aarr

rree

ee UU

UUss

ssee

eerr

rr GG

GGuu

uuiiiidd

ddee

NNee

eett

ttoo

oopp

ppiiiiaa

®®

4400

0000

00--

--SS

SSee

eerr

rriiiiee

eess

ss EE

EEqq

qquu

uuiiiipp

ppmm

mmee

eenn

nntt

NNee

eett

ttoo

oopp

ppiiiiaa

aa FF

FFiiiirr

rrmm

mmww

wwaa

aarr

rree

ee VV

VVee

eerr

rrss

ssiiiioo

oonn

nn 55

55....44

belonging to Netopia, Inc., registered U.S. Patent and Trademark Ofﬁce. Broadband Without

Boundaries and 3-D Reach are trademarks belonging to Netopia, Inc. All other trademarks

Netopia, Inc.

6001 Shellmound Street

Emeryville, CA 94608

U.S.A.

Part Number

Netopia part number 6161184-00-01

Contents iii

Chapter 1 — Introduction..........................................................1-1

What’s New in Netopia Firmware Version 5.4 ................... 1-1

Console-based Management........................................... 1-2

Netopia Console Menus ................................................. 1-2

Netopia Models ............................................................. 1-3

Screen differences .............................................. 1-3

Connecting through a Telnet Session............................... 1-4

Conﬁguring Telnet software................................... 1-4

Connecting a Console Cable to your Equipment................ 1-5

Navigating through the Console Screens.......................... 1-7

Chapter 2 — WAN and System Conﬁguration .............................2-1

WAN Conﬁguration ......................................................... 2-1

ADSL Line Conﬁguration screen ............................ 2-2

SDSL/IDSL Conﬁguration screen........................... 2-3

G.SHDSL Line Conﬁguration screen....................... 2-6

T1 Line Conﬁguration screen ................................ 2-7

Frame Relay Conﬁguration .............................................. 2-9

Frame Relay DLCI conﬁguration........................... 2-11

Multiple ATM Permanent Virtual Circuits ........................ 2-16

Multiple ATM PVC overview ................................. 2-16

Multiple ATM PVC conﬁguration ........................... 2-16

Editing circuits................................................... 2-20

Changing a circuit .............................................. 2-21

Monitoring multiple virtual circuits....................... 2-22

Creating a New Connection Proﬁle................................. 2-24

The Default Proﬁle ....................................................... 2-28

IP parameters (default proﬁle) screen.................. 2-29

Scheduled Connections................................................ 2-29

Viewing scheduled connections........................... 2-30

Adding a scheduled connection........................... 2-31

Set Weekly Schedule.......................................... 2-32

Set Once-Only Schedule ..................................... 2-33

CCoo

oonn

nntt

ttee

eenn

nntt

ttss

Firmware User Guide

Modifying a scheduled connection....................... 2-34

Deleting a scheduled connection......................... 2-34

System Conﬁguration Screens ...................................... 2-35

System conﬁguration features............................. 2-35

IP Setup............................................................ 2-36

Filter Sets ......................................................... 2-36

IP Address Serving............................................. 2-36

Network Address Translation (NAT) ...................... 2-36

Stateful Inspection ﬁrewall ................................. 2-37

Date and time ................................................... 2-42

Console Conﬁguration ........................................ 2-43

SNMP (Simple Network Management Protocol)..... 2-43

Security............................................................. 2-43

Upgrade Feature Set .......................................... 2-43

RFC-1483 Transparent Bridging........................... 2-44

Logging ............................................................. 2-46

Chapter 3 — Multiple Network Address Translation ...................3-1

Overview ....................................................................... 3-1

Features ............................................................. 3-2

Supported trafﬁc ................................................. 3-5

Support for Microsoft Network (MSN) Messenger ... 3-5

Support for AOL Instant Messenger (AIM)

File Transfer ........................................................ 3-5

MultiNAT Conﬁguration ................................................... 3-6

Easy Setup Proﬁle conﬁguration ............................ 3-6

Server Lists and Dynamic NAT conﬁguration........... 3-7

IP setup .............................................................. 3-7

Modifying map lists............................................ 3-13

Adding Server Lists...................................................... 3-15

Modifying server lists ......................................... 3-18

Deleting a server ............................................... 3-20

Binding Map Lists and Server Lists ............................... 3-21

Contents v

IP proﬁle parameters.......................................... 3-21

IP Parameters (WAN Default Proﬁle) .................... 3-23

NAT Associations ......................................................... 3-25

IP Passthrough ............................................................ 3-27

MultiNAT Conﬁguration Example .................................... 3-31

Chapter 4 — Virtual Private Networks (VPNs)............................4-1

Overview ....................................................................... 4-1

About PPTP Tunnels ....................................................... 4-4

PPTP conﬁguration ............................................... 4-4

About IPsec Tunnels....................................................... 4-7

About ATMP Tunnels....................................................... 4-8

ATMP conﬁguration .............................................. 4-8

Encryption Support ...................................................... 4-10

MS-CHAP V2 and 128-bit strong encryption ......... 4-11

ATMP/PPTP Default Proﬁle............................................ 4-11

VPN QuickView ............................................................ 4-13

Dial-Up Networking for VPN ........................................... 4-14

Installing Dial-Up Networking............................... 4-14

Creating a new Dial-Up Networking proﬁle ............ 4-15

Conﬁguring a Dial-Up Networking proﬁle ............... 4-16

Installing the VPN Client ............................................... 4-17

Windows 95 VPN installation .............................. 4-17

Windows 98 VPN installation .............................. 4-18

Connecting using Dial-Up Networking................... 4-19

Allowing VPNs through a Firewall................................... 4-19

PPTP example.................................................... 4-20

ATMP example ................................................... 4-22

Windows Networking Broadcasts................................... 4-25

Chapter 5 — Internet Key Exchange (IKE) IPsec

Key Management for VPNs ...................................5-1

Overview ....................................................................... 5-1

Internet Key Exchange (IKE) Conﬁguration........................ 5-2

Firmware User Guide

Adding an IKE Phase 1 Proﬁle ............................... 5-4

Changing an IKE Phase 1 Proﬁle ........................... 5-8

Key Management........................................................... 5-9

IPsec WAN Conﬁguration Screens ................................. 5-18

IPsec Manual Key Entry................................................ 5-19

VPN Quickview................................................... 5-20

WAN Event History Error Reporting...................... 5-21

Chapter 6 — IP Setup ...............................................................6-1

IP Setup........................................................................ 6-2

IP subnets........................................................... 6-4

Static routes ....................................................... 6-6

RIP-2 MD5 Authentication............................................. 6-10

Overview ........................................................... 6-10

Authentication conﬁguration................................ 6-10

Connection Proﬁles and Default Proﬁle ................ 6-16

IP Address Serving ...................................................... 6-17

IP Address Pools................................................ 6-20

DHCP NetBIOS Options ...................................... 6-22

More Address Serving Options...................................... 6-24

Conﬁguring the IP Address Server options ........... 6-25

DHCP Relay Agent........................................................ 6-30

Connection Proﬁles ...................................................... 6-32

Multicast Forwarding.................................................... 6-34

Chapter 7 — Line Backup .........................................................7-1

External Dial Backup Support ......................................... 7-2

Conﬁguring External Dial Backup..................................... 7-2

WAN Conﬁguration ......................................................... 7-2

Backup Conﬁguration screen ................................ 7-5

Connection Proﬁles ........................................................ 7-7

Using Scheduled Connections with Backup ...................... 7-8

Management/Statistics................................................ 7-10

QuickView ................................................................... 7-12

Contents vii

Event Logs .................................................................. 7-12

SNMP Support ............................................................ 7-13

Backup Default Gateway............................................... 7-13

Backup Conﬁguration screen .............................. 7-13

IP Setup screen ................................................. 7-15

Backup Management/Statistics .......................... 7-16

QuickView ......................................................... 7-17

Chapter 8 — Voice Conﬁguration...............................................8-1

Introduction................................................................... 8-1

Explanation of terms ............................................ 8-1

Conﬁguring the Voice Features........................................ 8-2

Chapter 9 — Monitoring Tools ...................................................9-1

Quick View Status Overview............................................ 9-1

General status..................................................... 9-2

Current status ..................................................... 9-3

Status lights........................................................ 9-3

Statistics & Logs ........................................................... 9-4

Event Histories .............................................................. 9-4

IP Routing Table............................................................. 9-7

General Statistics .......................................................... 9-7

System Information........................................................ 9-9

Simple Network Management Protocol (SNMP) - V2c ...... 9-10

Enterprise-speciﬁc SNMP Changes ...................... 9-10

The SNMP Setup screen..................................... 9-11

SNMP traps....................................................... 9-12

Chapter 10 — Security ...........................................................10-1

Suggested Security Measures....................................... 10-1

Console Tiered Access – Two Password Levels .............. 10-2

UPnP Support.................................................... 10-2

Superuser conﬁguration ..................................... 10-3

Limited user conﬁguration .................................. 10-4

viii

Firmware User Guide

Advanced Security Options ................................. 10-5

User access password ....................................... 10-7

User menu differences....................................... 10-8

User Accounts ........................................................... 10-15

Telnet Access ............................................................ 10-17

About Filters and Filter Sets........................................ 10-18

What’s a ﬁlter and what’s a ﬁlter set? ............... 10-18

How ﬁlter sets work ......................................... 10-18

How individual ﬁlters work ................................ 10-20

Design guidelines ............................................ 10-25

Working with IP Filters and Filter Sets .......................... 10-26

Adding a ﬁlter set............................................. 10-27

Deleting a ﬁlter set .......................................... 10-31

A sample ﬁlter set............................................ 10-31

Policy-based Routing using Filtersets........................... 10-34

TOS ﬁeld matching........................................... 10-35

Firewall Tutorial ......................................................... 10-37

General ﬁrewall terms ...................................... 10-37

Basic IP packet components............................. 10-37

Basic protocol types......................................... 10-37

Firewall design rules ........................................ 10-38

Filter basics..................................................... 10-40

Example ﬁlters................................................. 10-41

Conﬁguration Management ......................................... 10-44

TFTP and X-Modem........................................... 10-47

Call Filtering .............................................................. 10-48

Chapter 11 — Utilities and Diagnostics ...................................11-1

Ping ............................................................................ 11-2

Trace Route................................................................. 11-4

Telnet Client ................................................................ 11-5

Factory Defaults .......................................................... 11-6

Transferring Conﬁguration and Firmware Files with TFTP.. 11-6

Contents ix

Updating ﬁrmware.............................................. 11-7

Downloading conﬁguration ﬁles ........................... 11-8

Uploading conﬁguration ﬁles ............................... 11-9

Transferring Conﬁguration and Firmware Files

with XMODEM.............................................................. 11-9

Updating ﬁrmware............................................ 11-10

Downloading conﬁguration ﬁles ......................... 11-11

Uploading conﬁguration ﬁles ............................. 11-11

Restarting the System ............................................... 11-12

T1 Line Statistics and Diagnostics .............................. 11-12

Appendix A — Troubleshooting..................................................A-1

Conﬁguration Problems .................................................. A-1

Console connection problems ............................... A-2

Network problems................................................ A-2

How to Reset the Router to Factory Defaults.................... A-3

Power Outages .............................................................. A-3

Technical Support .......................................................... A-4

How to reach us .................................................. A-4

Appendix B — Understanding IP Addressing ..............................B-1

What is IP?.................................................................... B-1

About IP Addressing ....................................................... B-1

Subnets and subnet masks .................................. B-2

Example: Using subnets on a Class C IP internet ... B-3

Example: Working with a Class C subnet................ B-5

Distributing IP Addresses ............................................... B-5

Technical note on subnet masking ........................ B-6

Conﬁguration ....................................................... B-7

Manually distributing IP addresses ........................ B-8

Using address serving.......................................... B-8

Tips and rules for distributing IP addresses ........... B-9

Nested IP Subnets....................................................... B-11

Broadcasts.................................................................. B-14

Firmware User Guide

Packet header types .......................................... B-14

Appendix C — Binary Conversion Table......................................C-1

Index

Ce manuel convient aux modèles suivants

Table des matières

Autres manuels Netopia Routeur réseau

Netopia

Netopia 3346-ENT Manuel utilisateur

Netopia

Netopia 3346N-ENT Manuel utilisateur

Netopia

Netopia Routers R-Series Manuel utilisateur

Netopia

Netopia 3300 series Manuel utilisateur

Netopia

Netopia 3341-ENT Mode d’emploi

Netopia

Netopia TP4-CU Manuel utilisateur

Netopia

Netopia 3366-ENT Manuel utilisateur

Netopia

Netopia 45413 Manuel utilisateur

Netopia

Netopia 4553 Fiche d'information produit

Netopia

Netopia 4541 Fiche d'information produit

Netopia

Netopia D3232 Manuel utilisateur

Netopia

Netopia R5100 Fiche d'information produit

Netopia

Netopia R9100 Fiche d'information produit

Netopia

Netopia R2121 Fiche d'information produit

Netopia

Netopia 4686-XL Manuel utilisateur

Netopia

Netopia R7200 Fiche d'information produit

Netopia

Netopia R310 Fiche d'information produit

Netopia

Netopia 3381-ENT Mode d’emploi

Netopia

Netopia 3346-ENT Manuel utilisateur

Netopia

Netopia Router PN Series Manuel utilisateur

Netopia

Netopia Cayman 3386-ENT Manuel utilisateur

Netopia

Netopia 3341-ENT Manuel utilisateur

Netopia

Netopia 4622-XL Manuel utilisateur

Netopia

Netopia 3387W-ENT Manuel utilisateur

Manuels Routeur réseau populaires d'autres marques

Allnet

Allnet ALL0333AU Manuel utilisateur

HomeSeer

HomeSeer HT-SEL Manuel utilisateur

Sercomm

Sercomm Genesis OC3505D Manuel utilisateur

Billion

Billion BIPAC 5102 Series Manuel utilisateur

TP-Link

TP-Link TD-8817 Manuel utilisateur

Motorola

Motorola MR1900 Manuel utilisateur

Digi

Digi IX14 Manuel utilisateur

Cisco

Cisco NCS 540 Manuel

XAVi

XAVi X8821e Manuel utilisateur

BEC

BEC 6200WZL Manuel utilisateur

MikroTik

MikroTik hAP ac3 Series Manuel utilisateur

Korenix

Korenix JetNet 5428G Series Manuel utilisateur

NETGEAR

NETGEAR FS526T - Switch Manuel utilisateur

Korenix

Korenix JetNet 5710G Series Manuel utilisateur

Automated Logic

Automated Logic ZN551 Manuel du propriétaire

Cisco

Cisco ASR 1000 Series Manuel de l'opérateur

EnGenius

EnGenius ESR-9710 Manuel utilisateur

Cisco

Cisco 805 Series Instructions d'utilisation et de sécurité