Netopia 3341-ENT Manuale utente

NNee

eett

ttoo

oopp

ppiiiiaa

®®

FFiiiirr

rrmm

mmww

wwaa

aarr

rree

ee UU

UUss

ssee

eerr

rr GG

GGuu

uuiiiidd

ddee

3333

3300

0000

00--

--EE

EENN

NNTT

TT EE

EEnn

nntt

ttee

eerr

rrpp

pprr

rriiiiss

ssee

ee--

--SS

SSee

eerr

rriiiiee

eess

NNee

eett

ttoo

oopp

ppiiiiaa

aa FF

FFiiiirr

rrmm

mmww

wwaa

aarr

rree

ee VV

VVee

eerr

rrss

ssiiiioo

oonn

nn 88

88....77

and 3-D Reach are registered trademarks belonging to Netopia, Inc., registered U.S. Patent

and Trademark Ofﬁce. All other trademarks are the property of their respective owners. All

rights reserved.

Netopia, Inc.

6001 Shellmound Street

Emeryville, CA 94608

U.S.A.

Part Number

Netopia part number 6161236-00-01

Contents iii

Chapter 1 — Introduction..........................................................1-1

What’s New in 8.7 ......................................................... 1-1

Telnet-based Management.............................................. 1-2

Netopia Telnet Menus .................................................... 1-2

Netopia Models ............................................................. 1-3

Screen differences .............................................. 1-3

Connecting through a Telnet Session............................... 1-4

Conﬁguring Telnet software................................... 1-4

Navigating through the Telnet Screens............................. 1-5

Chapter 2 — WAN Conﬁguration................................................2-1

WAN Conﬁguration ......................................................... 2-1

WAN Ethernet Conﬁguration screen ....................... 2-2

ADSL Line Conﬁguration screen ............................ 2-4

Creating a New Connection Proﬁle................................... 2-9

Advanced Connection Options....................................... 2-15

Conﬁguration Changes Reset WAN Connection..... 2-15

Scheduled Connections...................................... 2-16

Backup Conﬁguration ......................................... 2-21

Diffserv Options ................................................ 2-22

Priority Queuing (TOS bit).................................... 2-25

VRRP Options (WAN Link Failure Detection).......... 2-26

Chapter 3 — System Conﬁguration............................................3-1

System Conﬁguration Features ....................................... 3-1

IP Setup........................................................................ 3-2

Filter Sets ..................................................................... 3-2

IP Address Serving ........................................................ 3-2

Network Address Translation (NAT) .................................. 3-2

Stateful Inspection......................................................... 3-3

Add Exposed Address List .................................... 3-4

Exposed Address Associations ............................. 3-8

VLAN Conﬁguration ...................................................... 3-11

Adding a RADIUS Proﬁle ..................................... 3-13

CCoo

oonn

nntt

ttee

ee nn

nntt

ttss

Firmware User Guide

Adding Port interfaces ....................................... 3-16

Changing or Deleting a VLAN............................... 3-18

Changing or Deleting an Authentication Server

Conﬁguration ..................................................... 3-18

Conﬁguring additional Authentication Servers....... 3-20

Date and time ............................................................. 3-22

Wireless conﬁguration .................................................. 3-23

Wireless Multimedia (WMM) ............................... 3-25

Enable Privacy ................................................... 3-26

Multiple SSIDs................................................... 3-30

MAC Address Authentication............................... 3-33

Console Conﬁguration .................................................. 3-35

SNMP (Simple Network Management Protocol)............... 3-36

Security ...................................................................... 3-36

Upgrade Feature Set .................................................... 3-36

Router/Bridge Set........................................................ 3-37

IGMP (Internet Group Management Protocol) ................. 3-39

Logging ....................................................................... 3-42

Log event dispositions ....................................... 3-43

Procedure for Default Installation for ICSA ﬁrewall certiﬁcation

of Small/Medium Business Category Module

(ADSL Routers) ............................................................ 3-48

Chapter 4 — Multiple Network Address Translation ...................4-1

Overview ....................................................................... 4-1

Features ............................................................. 4-2

Supported trafﬁc ................................................. 4-5

Support for AOL Instant Messenger (AIM)

File Transfer ........................................................ 4-5

Support for Yahoo Messenger............................... 4-6

MultiNAT Conﬁguration ................................................... 4-6

Easy Setup Proﬁle conﬁguration ............................ 4-6

Server Lists and Dynamic NAT conﬁguration........... 4-7

System Conﬁguration ........................................... 4-7

Contents v

Modifying map lists............................................ 4-12

Adding Server Lists...................................................... 4-15

Modifying server lists ......................................... 4-18

Deleting a server ............................................... 4-20

Binding Map Lists and Server Lists ............................... 4-22

IP proﬁle parameters.......................................... 4-22

IP Parameters (WAN Default Proﬁle) .................... 4-24

NAT Associations ......................................................... 4-26

IP Passthrough ............................................................ 4-28

MultiNAT Conﬁguration Example .................................... 4-32

Chapter 5 — Virtual Private Networks (VPNs)............................5-1

Overview ....................................................................... 5-1

About PPTP Tunnels ....................................................... 5-4

PPTP conﬁguration ............................................... 5-4

About IPsec Tunnels....................................................... 5-7

About L2TP Tunnels ....................................................... 5-8

L2TP conﬁguration ............................................... 5-8

About GRE Tunnels ...................................................... 5-11

VPN force-all...................................................... 5-14

About ATMP Tunnels..................................................... 5-15

ATMP conﬁguration ............................................ 5-15

Encryption Support ...................................................... 5-17

MS-CHAP V2 and 128-bit strong encryption ......... 5-18

ATMP/PPTP Default Proﬁle............................................ 5-18

VPN QuickView ............................................................ 5-20

Dial-Up Networking for VPN ........................................... 5-21

Installing Dial-Up Networking............................... 5-21

Creating a new Dial-Up Networking proﬁle ............ 5-22

Conﬁguring a Dial-Up Networking proﬁle ............... 5-23

Windows XP Client Conﬁguration ......................... 5-24

Connecting using Dial-Up Networking................... 5-25

Allowing VPNs through a Firewall................................... 5-25

Firmware User Guide

PPTP example.................................................... 5-25

ATMP example ................................................... 5-28

Windows Networking Broadcasts................................... 5-32

Chapter 6 — Internet Key Exchange (IKE) IPsec

Key Management for VPNs ...................................6-1

Overview ....................................................................... 6-1

Internet Key Exchange (IKE) Conﬁguration........................ 6-2

Adding an IKE Phase 1 Proﬁle ............................... 6-4

Changing an IKE Phase 1 Proﬁle ........................... 6-9

Key Management......................................................... 6-11

Advanced IPsec Options ..................................... 6-14

IPsec WAN Conﬁguration Screens ................................. 6-21

IPsec Manual Key Entry................................................ 6-22

VPN Quickview................................................... 6-23

WAN Event History Error Reporting ...................... 6-24

Chapter 7 — IP Setup ...............................................................7-1

IP Setup........................................................................ 7-2

IP subnets........................................................... 7-4

Static routes ....................................................... 7-6

RIP Options ................................................................. 7-10

Overview ........................................................... 7-10

Authentication conﬁguration................................ 7-10

Connection Proﬁles and Default Proﬁle ................ 7-16

IP Address Serving ...................................................... 7-17

IP Address Pools................................................ 7-20

DHCP NetBIOS Options ...................................... 7-21

More Address Serving Options...................................... 7-23

Conﬁguring the IP Address Server options ........... 7-24

DHCP Relay Agent........................................................ 7-28

Connection Proﬁles ...................................................... 7-30

Multicast Forwarding.................................................... 7-33

Virtual Router Redundancy (VRRP) ...................... 7-34

Contents vii

Additional LANs ................................................. 7-37

Chapter 8 — Line Backup .........................................................8-1

Conﬁguring Backup ........................................................ 8-1

Connection Proﬁles ........................................................ 8-2

IP Setup.............................................................. 8-7

WAN Conﬁguration ......................................................... 8-8

Backup Conﬁguration screen ................................ 8-9

Using Scheduled Connections with Backup .................... 8-12

Backup Default Gateway............................................... 8-14

Backup Conﬁguration screen .............................. 8-14

IP Setup screen ................................................. 8-16

Backup Management/Statistics.................................... 8-17

QuickView ................................................................... 8-18

Chapter 9 — Monitoring Tools ...................................................9-1

Quick View Status Overview............................................ 9-1

General status..................................................... 9-2

Current status ..................................................... 9-2

Status lights........................................................ 9-3

Statistics & Logs ........................................................... 9-3

Event Histories .............................................................. 9-4

IP Routing Table............................................................. 9-6

General Statistics .......................................................... 9-6

System Information........................................................ 9-8

Simple Network Management Protocol (SNMP)................. 9-9

The SNMP Setup screen....................................... 9-9

SNMP traps....................................................... 9-11

Chapter 10 — Security ...........................................................10-1

Suggested Security Measures....................................... 10-1

Telnet Tiered Access – Two Password Levels ................. 10-2

UPnP Support.................................................... 10-2

Superuser conﬁguration ..................................... 10-3

viii

Firmware User Guide

Limited user conﬁguration .................................. 10-4

Advanced Security Options ........................................... 10-6

RADIUS server authentication ............................. 10-7

TACACS+ server authentication........................... 10-8

Warning alerts ................................................... 10-9

User access password ..................................... 10-12

User menu differences..................................... 10-13

Telnet Access ............................................................ 10-20

About Filters and Filter Sets........................................ 10-21

What’s a ﬁlter and what’s a ﬁlter set? ............... 10-21

How ﬁlter sets work ......................................... 10-21

How individual ﬁlters work ................................ 10-22

Design guidelines ............................................ 10-27

Working with IP Filters and Filter Sets .......................... 10-28

Adding a ﬁlter set............................................. 10-29

Deleting a ﬁlter set .......................................... 10-33

A sample ﬁlter set............................................ 10-33

Policy-based Routing using Filtersets........................... 10-36

TOS ﬁeld matching........................................... 10-37

Firewall Tutorial ......................................................... 10-39

General ﬁrewall terms ...................................... 10-39

Basic IP packet components............................. 10-39

Basic protocol types......................................... 10-39

Firewall design rules ........................................ 10-40

Filter basics..................................................... 10-42

Example ﬁlters................................................. 10-43

Conﬁguration Management ......................................... 10-46

TFTP ............................................................... 10-49

Chapter 11 — Utilities and Diagnostics ...................................11-1

Ping ............................................................................ 11-2

Trace Route................................................................. 11-4

Telnet Client ................................................................ 11-5

Contents ix

Factory Defaults .......................................................... 11-6

Transferring Conﬁguration and Firmware Files with TFTP.. 11-6

Updating ﬁrmware.............................................. 11-7

Downloading conﬁguration ﬁles ........................... 11-7

Uploading conﬁguration ﬁles ............................... 11-8

Restarting the System ................................................. 11-8

Appendix A — Troubleshooting..................................................A-1

Conﬁguration Problems .................................................. A-1

Network problems................................................ A-2

How to Reset the Router to Factory Defaults.................... A-3

Power Outages .............................................................. A-3

Technical Support .......................................................... A-3

How to reach us .................................................. A-4

Index

Firmware User Guide

Altri manuali per 3341-ENT

Questo manuale è adatto per i seguenti modelli

Indice

Altri manuali Netopia Router di rete

Netopia

Netopia 3347W Manuale utente

Netopia

Netopia CLI 874 Manuale utente

Netopia

Netopia R6100 Manuale utente

Netopia

Netopia 4553 Scheda informativa del prodotto

Netopia

Netopia 4686-XL Manuale utente

Netopia

Netopia 4622-XL Manuale utente

Netopia

Netopia R5000 Scheda informativa del prodotto

Netopia

Netopia Routers R-Series Manuale utente

Netopia

Netopia R2121 Scheda informativa del prodotto

Netopia

Netopia 4741 2A4NA Manuale utente

Netopia

Netopia 3346N-ENT Manuale utente

Netopia

Netopia R5100 Scheda informativa del prodotto

Netopia

Netopia Firmware 4000-Series Guida rapida

Netopia

Netopia TP4-CU Manuale utente

Netopia

Netopia 3341-ENT Manuale di istruzioni

Netopia

Netopia 3381-ENT Manuale utente

Netopia

Netopia 3366-ENT Manuale utente

Netopia

Netopia 3341-ENT Manuale utente

Netopia

Netopia 3300 series Manuale utente

Netopia

Netopia Router PN Series Manuale utente

Netopia

Netopia Cayman 3386-ENT Manuale utente

Netopia

Netopia R2020 Scheda informativa del prodotto

Netopia

Netopia 4752 2A4NA Manuale di istruzioni

Netopia

Netopia Cayman 3386-ENT Manuale utente

Manuali Router di rete popolari di altre marche

Allnet

Allnet ALL0333AU Manuale utente

HomeSeer

HomeSeer HT-SEL Manuale utente

Sercomm

Sercomm Genesis OC3505D Manuale utente

Billion

Billion BIPAC 5102 Series Manuale utente

TP-Link

TP-Link TD-8817 Manuale utente

Motorola

Motorola MR1900 Manuale utente

Digi

Digi IX14 Manuale utente

Cisco

Cisco NCS 540 Manuale

XAVi

XAVi X8821e Manuale utente

BEC

BEC 6200WZL Manuale utente

MikroTik

MikroTik hAP ac3 Series Manuale utente

Korenix

Korenix JetNet 5428G Series Manuale utente

NETGEAR

NETGEAR FS526T - Switch Manuale utente

Korenix

Korenix JetNet 5710G Series Manuale utente

Automated Logic

Automated Logic ZN551 Manuale del proprietario

Cisco

Cisco ASR 1000 Series Manuale dell'operatore

EnGenius

EnGenius ESR-9710 Manuale utente

Cisco

Cisco 805 Series Istruzioni operative e di sicurezza