3Com SUPERSTACK 3CR16110-95 User manual

SUPERSTACK®3F
IREWALL
QUICK REFERENCE GUIDE
Introduction
This guide contains the following:
■Updating the Firewall Encryption
■Hardware Features
■Firewall Zones
■Firewall Menu
■Web References
Updating the Firewall Encryption
The SuperStack®3 Firewall is shipped with DES
encryption as standard and can be upgraded to
higher levels of encryption including 3DES. See
“Downloading the Encryption Method” below for
details.
If you are using Virtual Private Networking (VPN) to
connect your sites together then all your Firewalls
must be set to the same level of encryption.
Downloading the Encryption Method
To upgrade you Firewall’s firmware, enter the Web
address http://www.3com.com/ssfirewall
into your Web browser and click on the firmware
you want to download.
Depending on your location and the laws in your
country you may have to provide details about your-
self and your business. If this is the case, the form
shown in Figure 1 displays.
Figure 1 Firmware Download Screen
Fill in the fields of the form and click the Submit
button. Further instructions will be provided if
required.
Part Number: DQA1611-0AAA01
Published: August 2001
DQA1611-0AAA01.fm Page 1 Thursday, August 2, 2001 4:15 PM

Hardware Features
1LAN Port - Uses Category 5 cable with RJ-45 con-
nectors. Connect this port to any workstation or
network device that has a 10BASE-T or 100BASE-TX
port.
2DMZ Port - Uses Category 5 cable with RJ-45 con-
nectors. Use this port to connect the Firewall to any
workstation, server, or network device that has a
10BASE-T or 100BASE-TX port.
3WAN Port - Uses Category 5 cable with RJ-45 con-
nectors. Connect this port to any internet access
device that has a 10BASE-T or 100BASE-TX port.
4Normal/Uplink Switch -Thesettingofthisswitch
determines the operation of the port. Set the switch
to Normal to connect to an Ethernet MDI device
e.g. a PC. Set to Uplink to connect to an Ethernet
MDIX device such as a hub or switch.
5Status LEDs - WAN, LAN, and DMZ ports have
LEDs that indicate the following:
■Green indicates that the link between port and
the next network device is operational at
100 Mbps.
■Yellow indicates that the link between the port
and the next network device is operational at
10 Mbps.
■Off indicates that nothing is operational or that
the link to the port has failed.
6Packet LEDs - WAN, LAN and DMZ ports have
LED’s that indicate the following:
■Green indicates that data is being transmit-
ted/received on this port in full-duplex mode.
■Yellow indicates that data is being transmit-
ted/received on this port in half-duplex mode.
■Off indicates that no traffic is being passed.
7Alert LED - This LED shows orange to alert you of
the following:
■A failure in the self-test the Firewall runs when
switched on.
■No operational firmware is currently loaded.
■Potential attacks on your network.
■An attempt to access a restricted site.
■A hacker attack or access to a restricted service.
8Power/Self Test LED - This LED shows green to
indicate that the unit is switched on. This LED
flashes for about 90 seconds while self-test is run-
ning, and also when restarting.
9Power socket - Only use the power cord supplied
with the Firewall.
10 Redundant Power Supply socket -Usethiscon-
nector to attach a Redundant Power Supply to the
Firewall.
11 Reset Switch (recessed) - Use to reset the Firewall.
910 11
LAN
Normal
Uplink
DMZ
Normal
Uplink
WAN
Normal
Uplink
Firewall
3CR16110-95
SuperStack 3
®
Power/Self Test
Alert
Packet LAN/DMZ/WAN
green = full duplex
yellow = half duplex
green = 100 Mbps
yellow = 10 Mbps
Status LAN/DMZ/WAN
Packet
Status
Status
123
4
6
5
78
DQA1611-0AAA01.fm Page 2 Thursday, August 2, 2001 4:15 PM

Firewall Zones
LAN DMZ WAN
N
R
F
G
GS
S
CSLB
W
STOP DoS Attacks Blocked
Web Access Allowed
Unauthorised External Access Blocked
Authorised External Access using VPN (Encrypted)
STOP
STOP
STOP
Internet Access Filtered (optional)
W
N
R
Key:
W
N
eb and
etwork
Servers
Client PC
SLB
S
C
G
F
SuperStack 3
irewallF
100/1000
Mbps
igabit SwitchG
10/100 Mbps
witch with
Gigabit port
S
Router
S
L
B
erver
oad
alancer
Web achec
C
DQA1611-0AAA01.fm Page 3 Thursday, August 2, 2001 4:15 PM

Firewall Menu
Web References
For information on 3Com and its products see:
http://www.3com.com/
To Register your Firewall or to download a new ver-
sion of the firmware see:
http://www.3com.com/ssfirewall/
To find support information for you Firewall see:
http://knowledgebase.3com.com/
To find out more about the Web SIte Filter see:
http://www.cyberpatrol.com/cybernot/
To find out more about IP port numbers see:
http://www.ietf.org/rfc/rfc1700.txt
http://www.iana.org/
To find out more about Network Address Transla-
tion (NAT) see:
http://www.ietf.org/rfc/rfc2663.txt
To give feedback on this guide please send an
e-mail to:
[email protected]
General
Unit Status Set Password Set Time
Network
Filter
Log
Tools
Policy
Advanced
VPN
High Availability
Settings
Settings
View Log
Restart
Services
Proxy Relay
VPN Summary
Configure
DMZ Address
Custom List
Log Settings
Configuration
Add Service
Intranet
VPN Configure
DHCP Server
Filter Update
Reports
Upgrade
Policy Rules
Static Routes
RADIUS
DHCP Setup
Keywords
User Privileges
One-to-One NAT
Diagnostics
Consent
Management
Copyright © 2001, 3Com Technologies. All rights reserved.
Unless otherwise indicated, 3Com registered trademarks are registered in the United
States and may or may not be registered in other countries.
3Com and SuperStack are registered trademarks of 3Com Corporation. The 3Com logo
is a trademark of 3Com Corporation.
W
indows and Windows NT are registered trademarks of Microsoft Corporation. Other
brand and product names may be registered trademarks or trademarks of their
respective holders.
DQA1611-0AAA01.fm Page 4 Thursday, August 2, 2001 4:15 PM