Motorola Netopia Embedded Software User manual

Administrator’s
Handbook
Motorola Netopia
®
Embedded Seftware
Version 8.7.4
Enterprise Series Routers

Administrator’s Handbook
Copyright
Copyright © 2007 by Motorola, Inc.
All rights reserved. No part of this publication may be reproduced in any form or by any means or used to
make any derivative work (such as translation, transformation or adaptation) without written permission
from Motorola, Inc.
Motorola reserves the right to revise this publication and to make changes in content from time to time
without obligation on the part of Motorola to provide notification of such revision or change. Motorola
provides this guide without warranty of any kind, either implied or expressed, including, but not limited to,
the implied warranties of merchantability and fitness for a particular purpose. Motorola may make
improvements or changes in the product(s) described in this manual at any time. MOTOROLA and the
Stylized M Logo are registered in the US Patent & Trademark Office. Microsoft, Windows, Windows Me,
and Windows NT are either trademarks or registered trademarks of Microsoft Corporation in the U.S and/or
other countries. Macintosh is a registered trademark of Apple, Inc. Firefox is a registered trademark of the
Mozilla Foundation. All other product or service names are the property of their respective owners.
Motorola, Inc.
1303 East Algonquin Road
Schaumburg, Illinois 60196
USA
Version 8.7.4
Part Number
6161252-00-01

Contents iii
G
Chapter 1 — Introduction..........................................................1-1
What’s New in 8.7.4 ...................................................... 1-1
Telnet-based Management.............................................. 1-2
Motorola Netopia® Telnet Menus.................................... 1-2
Motorola Netopia® Models............................................. 1-3
Screen differences .............................................. 1-3
Connecting through a Telnet Session............................... 1-4
Configuring Telnet software................................... 1-4
Navigating through the Telnet Screens............................. 1-5
Chapter 2 — WAN Configuration................................................2-1
WAN Configuration ......................................................... 2-1
WAN Ethernet Configuration screen ....................... 2-1
ADSL Line Configuration screen ............................ 2-4
Creating a New Connection Profile................................... 2-8
Advanced Connection Options....................................... 2-15
Configuration Changes Reset WAN Connection..... 2-15
Scheduled Connections...................................... 2-16
Backup Configuration ......................................... 2-21
Diffserv Options ................................................ 2-22
Priority Queuing (TOS bit).................................... 2-25
VRRP Options (WAN Link Failure Detection).......... 2-26
Chapter 3 — System Configuration............................................3-1
System Configuration Features ....................................... 3-1
IP Setup........................................................................ 3-2
Filter Sets ..................................................................... 3-2
IP Address Serving ........................................................ 3-2
Network Address Translation (NAT) .................................. 3-2
Stateful Inspection......................................................... 3-3
Add Exposed Address List .................................... 3-3
Exposed Address Associations ............................. 3-7
VLAN Configuration ...................................................... 3-11
Overview ........................................................... 3-11
Contents

iv Administrator’s Handbook
Ethernet Switching/Policy Setup ......................... 3-12
Associating Inter-VLAN Routing Groups ................ 3-17
Adding a RADIUS Profile ..................................... 3-18
Adding Port interfaces ....................................... 3-20
Changing or Deleting a VLAN............................... 3-23
Changing or Deleting an Authentication Server
Configuration ..................................................... 3-24
Configuring additional Authentication Servers....... 3-25
VLAN Example ................................................... 3-27
Date and time ............................................................. 3-37
Wireless configuration .................................................. 3-38
Wireless Multimedia (WMM) ............................... 3-40
Enable Privacy ................................................... 3-41
Multiple SSIDs................................................... 3-45
MAC Address Authentication............................... 3-47
Console Configuration .................................................. 3-49
SNMP (Simple Network Management Protocol)............... 3-50
Security ...................................................................... 3-50
Upgrade Feature Set .................................................... 3-50
Router/Bridge Set........................................................ 3-51
IGMP (Internet Group Management Protocol) ................. 3-52
Logging ....................................................................... 3-55
Log event dispositions ....................................... 3-56
Procedure for Default Installation for ICSA firewall certification
of Small/Medium Business Category Module
(ADSL Routers) ............................................................ 3-60
Chapter 4 — Multi-NAT .............................................................4-1
Overview ....................................................................... 4-1
Features ............................................................. 4-2
Supported traffic ................................................. 4-5
Support for AOL Instant Messenger (AIM)
File Transfer ........................................................ 4-5
Support for Yahoo Messenger............................... 4-5

Contents v
G
MultiNAT Configuration ................................................... 4-6
Easy Setup Profile configuration ............................ 4-6
Server Lists and Dynamic NAT configuration........... 4-7
System Configuration ........................................... 4-7
Modifying map lists............................................ 4-12
Adding Server Lists...................................................... 4-15
Modifying server lists ......................................... 4-18
Deleting a server ............................................... 4-20
Binding Map Lists and Server Lists ............................... 4-21
IP profile parameters.......................................... 4-21
IP Parameters (WAN Default Profile) .................... 4-23
NAT Associations ......................................................... 4-25
IP Passthrough ............................................................ 4-27
MultiNAT Configuration Example.................................... 4-30
Chapter 5 — Virtual Private Networks (VPNs)............................5-1
Overview ....................................................................... 5-1
About PPTP Tunnels ....................................................... 5-4
PPTP configuration ............................................... 5-4
About IPsec Tunnels....................................................... 5-7
About L2TP Tunnels ....................................................... 5-7
L2TP configuration ............................................... 5-8
About GRE Tunnels ...................................................... 5-10
VPN force-all...................................................... 5-12
About ATMP Tunnels..................................................... 5-14
ATMP configuration ............................................ 5-14
Encryption Support ...................................................... 5-16
MS-CHAP V2 and 128-bit strong encryption ......... 5-17
ATMP/PPTP Default Profile............................................ 5-17
VPN QuickView ............................................................ 5-18
Dial-Up Networking for VPN ........................................... 5-19
Installing Dial-Up Networking............................... 5-20
Creating a new Dial-Up Networking profile ............ 5-21

vi Administrator’s Handbook
Configuring a Dial-Up Networking profile ............... 5-21
Windows XP Client Configuration ......................... 5-23
Connecting using Dial-Up Networking................... 5-23
Allowing VPNs through a Firewall ................................... 5-23
PPTP example.................................................... 5-24
ATMP example ................................................... 5-27
Windows Networking Broadcasts................................... 5-30
Chapter 6 — Internet Key Exchange for VPNs ............................6-1
Overview ....................................................................... 6-1
Internet Key Exchange (IKE) Configuration........................ 6-2
Adding an IKE Phase 1 Profile ............................... 6-4
Changing an IKE Phase 1 Profile ........................... 6-9
Key Management......................................................... 6-11
Advanced IPsec Options ..................................... 6-14
IPsec WAN Configuration Screens ................................. 6-21
IPsec Manual Key Entry................................................ 6-22
VPN Quickview................................................... 6-23
WAN Event History Error Reporting ...................... 6-24
Chapter 7 — IP Setup ...............................................................7-1
IP Setup........................................................................ 7-1
IP subnets........................................................... 7-3
Static routes ....................................................... 7-6
RIP Options ................................................................... 7-9
Overview ............................................................. 7-9
Authentication configuration................................ 7-10
Connection Profiles and Default Profile ................ 7-15
IP Address Serving ...................................................... 7-17
IP Address Pools................................................ 7-19
DHCP NetBIOS Options ...................................... 7-21
More Address Serving Options...................................... 7-23
Configuring the IP Address Server options ........... 7-24
DHCP Relay Agent........................................................ 7-28

Contents vii
G
Connection Profiles ...................................................... 7-30
Multicast Forwarding.................................................... 7-32
Virtual Router Redundancy (VRRP) ...................... 7-34
Additional LANs ................................................. 7-38
Chapter 8 — Line Backup .........................................................8-1
Configuring Backup ........................................................ 8-1
Connection Profiles ........................................................ 8-2
IP Setup.............................................................. 8-6
WAN Configuration ......................................................... 8-7
Backup Configuration screen ................................ 8-9
Using Scheduled Connections with Backup .................... 8-12
Backup Default Gateway............................................... 8-14
Backup Configuration screen .............................. 8-14
IP Setup screen ................................................. 8-16
Backup Management/Statistics.................................... 8-16
QuickView ................................................................... 8-18
Chapter 9 — Monitoring Tools ...................................................9-1
Quick View Status Overview............................................ 9-1
General status..................................................... 9-2
Current status ..................................................... 9-2
Status lights........................................................ 9-3
Statistics & Logs ........................................................... 9-3
Event Histories .............................................................. 9-4
IP Routing Table............................................................. 9-6
General Statistics .......................................................... 9-6
System Information........................................................ 9-8
Simple Network Management Protocol (SNMP)................. 9-8
The SNMP Setup screen....................................... 9-9
SNMP traps....................................................... 9-11
Chapter 10 — Security ...........................................................10-1
Suggested Security Measures....................................... 10-1

viii Administrator’s Handbook
Telnet Tiered Access – Two Password Levels ................. 10-1
UPnP Support.................................................... 10-2
Superuser configuration ..................................... 10-3
Limited user configuration .................................. 10-3
Advanced Security Options ........................................... 10-5
RADIUS server authentication ............................. 10-6
TACACS+ server authentication........................... 10-7
Warning alerts ................................................... 10-8
User access password ..................................... 10-11
User menu differences..................................... 10-12
Telnet Access ............................................................ 10-19
About Filters and Filter Sets........................................ 10-20
What’s a filter and what’s a filter set? ............... 10-20
How filter sets work ......................................... 10-20
How individual filters work ................................ 10-21
Design guidelines ............................................ 10-26
Working with IP Filters and Filter Sets .......................... 10-27
Adding a filter set............................................. 10-27
Deleting a filter set .......................................... 10-32
A sample filter set............................................ 10-32
Policy-based Routing using Filtersets........................... 10-35
TOS field matching........................................... 10-37
Firewall Tutorial ......................................................... 10-38
General firewall terms ...................................... 10-38
Basic IP packet components............................. 10-38
Basic protocol types......................................... 10-38
Firewall design rules ........................................ 10-39
Filter basics..................................................... 10-41
Example filters................................................. 10-42
Configuration Management ......................................... 10-45
TFTP ............................................................... 10-48

Contents ix
G
Chapter 11 — Utilities and Diagnostics ...................................11-1
Ping ............................................................................ 11-2
Trace Route................................................................. 11-4
Telnet Client ................................................................ 11-5
Factory Defaults .......................................................... 11-6
Transferring Configuration and Software Files with TFTP .. 11-6
Updating software.............................................. 11-7
Downloading configuration files ........................... 11-7
Uploading configuration files ............................... 11-8
Restarting the System ................................................. 11-8
Appendix A — Troubleshooting..................................................A-1
Configuration Problems .................................................. A-1
Network problems................................................ A-2
How to Reset the Router to Factory Defaults.................... A-2
Power Outages .............................................................. A-3
Technical Support .......................................................... A-3
Before contacting Motorola................................... A-3
Environment profile .............................................. A-3
How to reach us .................................................. A-4
Online product information ................................... A-4
Index

x Administrator’s Handbook