Multitech PROXYSERVER MTPSR1-120 User manual

Dual Ethernet ProxyServer
Model MTPSR1-120
User Guide

User Guide
S0000011 Revision C
Dual Ethernet ProxyServer (Model MTPSR1-120)
This publication may not be reproduced, in whole or in part, without prior expressed written permission from
Multi-Tech Systems, Inc.All rights reserved.
Copyright © 2000, by Multi-Tech Systems, Inc.
Multi-Tech Systems, Inc. makes no representations or warranties with respect to the contents hereof and
specifically disclaims any implied warranties of merchantability or fitness for any particular purpose.
Furthermore, Multi-Tech Systems, Inc. reserves the right to revise this publication and to make changes from
time to time in the content hereof without obligation of Multi-Tech Systems, Inc. to notify any person or
organization of such revisions or changes. Record of Revisions
Revision Description
A Manual released.All pages at revisionA.
(9/4/98)
B Manual revised for software version 2.00.All pages at Revision B.
(2/19/99)
C Manual revised for software version 3.00.All pages at Revision C.
(2/15/2000) Patents
This Product is covered by one or more of the following U.S. Patent Numbers: 5.301.274; 5.309.562;
5.355.365; 5.355.653; 5.452.289; 5.453.986. Other Patents Pending.
TRADEMARK
Trademark of Multi-Tech Systems, Inc. is the Multi-Tech logo.
Windows is a registered trademark of Microsoft.
Multi-Tech Systems, Inc.
2205 Woodale Drive
Mounds View, Minnesota 55112
[phone] or [phone]
Fax [phone]
Tech Support [phone]
InternetAddress:http://www.multitech.com

iii
Contents
Chapter 1 - Introduction and Description
Introduction ................................................................................................................................................ 6
Preview of this Guide ................................................................................................................................. 6
Front Panel Description.............................................................................................................................. 8
Back Panel Description .............................................................................................................................. 9
RS232/V.35 Connector ........................................................................................................................ 9
Ethernet 1 and 2 10Base-T Connectors .............................................................................................. 9
Command Connector........................................................................................................................... 9
Power Connector ................................................................................................................................. 9
TypicalApplications.................................................................................................................................. 10
Configuration 1 - Cable/DSL Modem ................................................................................................. 10
Configuration 2 - Existing Dual-LAN with Router ................................................................................11
Configuration 3 - New Dual-LAN with T1 DSU................................................................................... 12
Specifications ........................................................................................................................................... 13
Ethernet Ports.................................................................................................................................... 13
Command Port................................................................................................................................... 13
WAN Link ........................................................................................................................................... 13
Electrical/Physical.............................................................................................................................. 13
Chapter 2 - Installation
Safety Warnings ....................................................................................................................................... 16
Unpacking Your Firewall........................................................................................................................... 16
V.35 Shunt Procedure .............................................................................................................................. 17
Cabling Your Firewall................................................................................................................................ 18
Chapter 3 - Software Loading and Configuration
Loading your Software ............................................................................................................................ 22
Wizard Setup ..................................................................................................................................... 24
IP Wizard Setup................................................................................................................................. 25
Default WAN Link Configuration............................................................................................................... 27
Chapter 4 - Firewall Software
Introduction .............................................................................................................................................. 30
Before You Begin ............................................................................................................................... 30
Firewall Setup .......................................................................................................................................... 31
Changing IP Parameters .......................................................................................................................... 32
Changing PPP/SLIP Parameters ............................................................................................................. 35
Changing WAN Port Parameters ............................................................................................................. 35
Enabling the DHCP Server....................................................................................................................... 37
Adding ProxyApplications........................................................................................................................ 38
Adding Virtual Servers ............................................................................................................................. 40
Managing VariousApplications ................................................................................................................ 43
Running Statistics .................................................................................................................................... 44
User - Filter Management......................................................................................................................... 45
User Management ............................................................................................................................. 46
Access Rights .................................................................................................................................... 47
User Monitoring........................................................................................................................................ 48

iv
Chapter 5 - Client Setup
Introduction .............................................................................................................................................. 50
Before you Begin...................................................................................................................................... 50
Configuring in Windows 98/95.................................................................................................................. 51
Installing TCP/IP (Win98/95) ................................................................................................................... 58
Configuring in Windows NT...................................................................................................................... 59
Installing TCP/IP (WinNT) ....................................................................................................................... 65
Chapter 6 - Remote Configuration
Introduction .............................................................................................................................................. 68
Remote Configuration .............................................................................................................................. 68
Modem-based.................................................................................................................................... 68
LAN-based......................................................................................................................................... 70
Chapter 7 - Firewall Management
Introduction .............................................................................................................................................. 74
Firewall Management Menu ..................................................................................................................... 75
Web Browser Management...................................................................................................................... 76
Chapter 8 - Warranty, Service and Tech Support
Introduction .............................................................................................................................................. 80
Limited Warranty ...................................................................................................................................... 80
On-line Warranty Registration............................................................................................................ 80
Tech Support ............................................................................................................................................ 81
Recording Firewall Information .......................................................................................................... 81
Service ..................................................................................................................................................... 82
About the Internet..................................................................................................................................... 83
Ordering Accessories ............................................................................................................................... 83
Appendixes
AppendixA- TCP/IP (Transmission Control Protocol/Internet Protocol) Description............................... 86
Appendix B - Cabling Diagrams ............................................................................................................... 89
Appendix C - Script Commands ............................................................................................................... 91
Appendix C - Regulatory Information ....................................................................................................... 93
FCC Declaration ................................................................................................................................ 93
Glossary of Terms
Index

Chapter 1 - Introduction and Description

6 MTPSR1-120
Firewall User Guide
Introduction
Welcome to Multi-Tech's new Dual Ethernet ProxyServer, model MTPSR1-120, (hereafter, Firewall) a
high speed Internet access device that provides firewall protection to your corporate (secured) LAN
and allows Internet access to the Internet Services Network (public LAN) that resides outside the
firewall. Internet access can be provided through new technologies, such as cable or DSL modems,
connecting to an existing high speed public LAN, or connecting the RS232 WAN port on the back of
the unit that allows Internet access up to T1/E1 access speeds. The Firewall provides two Ethernet
connections that implement firewall protection and gateway security for your LAN resources and
provides megabit data transfer rates (up to 20 times faster than a 56K modem) for your Internet
access.
The Firewall provides two Ethernet 10Base-T ports which connect your private secured LAN (on the
Ethernet 1 jack) to the Internet Services Network resources (public LAN, on the Ethernet 2 jack),
and a Command port for configuration.An additional RS232/V.35 port is provided for an alternate
connection to an external WAN for connecting your secure corporate LAN directly to an ISP.
System management is provided through the command port using bundled Windows® software
which provides easy-to-use configuration menus.
Figure 1-1. Firewall (MTPSR1-120)
Preview of this Guide
This guide describes the Firewall and tells you how to install and configure the unit. The information
contained in each chapter is as follows:
Chapter 1 - Introduction and Description
Chapter 1 describes the Firewall’s front panel indicators and back panel connectors and switch, and
includes a list of relevant specifications.
Chapter 2 - Installation
Chapter 2 provides information on unpacking and cabling your Firewall. The installation procedure
describes each cable connection.
Cabling considerations involve deciding how you are going to connect your PC to the Firewall to
configure it for proper operation in your system. One option is to connect a PC COM port (1 thru 4)
through the supplied command cable to the COMMAND port on the Firewall. The other option is to
connect your PC’s network interface card (NIC) to a hub on your Private LAN and connect the
ETHERNET 1 jack of the Firewall to your Private LAN and then assign the Firewall an IP address on
your Private LAN. During software installation, the Firewall will detect automatically all Firewalls and
ProxyServers on the LAN and will let you select which one to configure.
Your final cabling consideration involves deciding which back panel connector you will use to connect
your Private (secured) LAN to the Internet. Your options include the ETHERNET 2 LAN jack or the
RS233/V.35 WAN connector; only one Ethernet connection method can be used.

MTPSR1-120 7
Chapter 1 - Introduction and Description
Chapter 3 - Software Loading and Configuration
Chapter 3 provides instructions for software loading and initial configuration. The Firewall CD ROM is
Windows® based. Later chapters, as well as the included on-line Helps, describe the Firewall
software in greater detail.
Chapter 4 - Firewall Software
Chapter 4 describes the Firewall software package designed for the Windows ® environment. The
Firewall Version 3.00 program group includes icons for performing such functions as Wizard Setup,
downloading firmware, Configuration port setup, WAN Device Configuration, etc. Fields on dialog
boxes are explained in detail and when fields relate to each other, that relationship is explained.
Chapter 5 - Client Setup
Chapter 5 provides information for enabling and configuring multiple Windows 98/95 or NT®PC users
for Internet access via the Firewall.
Chapter 6 - Remote Configuration
Chapter 6 provides procedures for changing the configuration of a remote Firewall. Using remote
configuration, you can change the configuration of a remote unit by simply connecting two modems
between the Firewalls (with a special remote configuration cable between the remote modem and the
remote Firewall’s command port) and remotely controlling the remote unit.
Chapter 7 - Firewall Management
Chapter 7 discusses remote management utilities such as Telnet and Web-based management of the
Firewall.
Chapter 8 - Warranty, Service and Tech Support
Chapter 8 provides instructions on getting service for your Firewall at the factory, a statement of the
limited warranty, information about our Internet presence, and space for recording information about
your Firewall prior to calling Multi-Tech’s Technical Support.
Appendixes
AppendixA- TCP/IP (Transmission Control Protocol/Internet Protocol) Description
Appendix B - Cabling Diagrams
Appendix C - Regulatory Information

8 MTPSR1-120
Firewall User Guide
Front Panel Description
The front panel, shown in Figure 1-2, contains four groups of LEDs that provide the status of the
Ethernet connections, WAN link activity, and general status of the Firewall. The Ethernet 1 and
Ethernet 2 LEDs display the activity of the public and private LANs, and show if the Firewall is
connected to the LAN and transmitting or receiving packets. The WAN Link LEDs display the status
of the RS232/V.35 WAN link, that can optionally be connected to an external DCE device, and show if
a carrier signal is detected, if the link is ready to transmit or receive serial data, and if an external
communications device with a V.35 interface is connected to the Firewall. The last group of LEDs
indicates whether the self test passed or failed and shows if the power On/Off switch on the back of
the Firewall is turned On.
Figure 1-2. Front Panel
ETHERNET 1 and 2
RCV Receive Data indicator blinks when packets are being received from the private
(Ethernet 1) or public (Ethernet 2) LANs.
XMT Transmit Data indicator blinks when packets are being transmitted to the private
(Ethernet 1) or public (Ethernet 2) LANs.
LNK Link indicator lights when the Ethernet link senses voltage from a concentrator or
external device.
WAN Link
RCV Receive Data indicator blinks when packets are being sent to the local area network.
XMT Transmit Data indicator blinks when packets are being transmitted from the local
area network.
CD Carrier Detect indicator lights when a carrier signal is detected on the WAN link.
V35 V.35 indicator lights when internal shunt is set for V.35 operation.
Fail
ERR Error indicator lights when the Firewall is booting or downloading setup.
Power
PWR Power indicator lights when power is applied to the Firewall.

MTPSR1-120 9
Chapter 1 - Introduction and Description
Back Panel Description
All the cable connections for the Firewall are made at the back panel. In addition to the Power
connector, three other categories of connectors are used on the Firewall: the Command Port,
Ethernet 1 & 2 (10BASET), and RS232/V.35. The back panel connectors are shown in Figure 1-3 and
defined in the following writeups.
2
ETHERNET COMMAND
10BASET 10BASET
ON
OFF
1
RS232/V.35 POWER
Figure 1-3. Back Panel
RS232/V.35 Connector
The RS232/V.35 (DB-25) connector is used to connect the Firewall to an external modem, DSU, or
other Data Communications Equipment (DCE). This connection can be either RS232C (default) or
V.35. If the connection is V.35, then the shunt must be moved from the default RS232 position to the
V.35 position (for details on this procedure, refer to Chapter 2 - V.35 Shunt Procedure).
Ethernet 1 and 2 10Base-T Connectors
The Ethernet 10Base-T connectors are used to connect the Firewall to a 10 MB LAN using
unshielded twisted cable. Ethernet 1 connects the private LAN, and Ethernet 2 connects the public
LAN. These connectors are RJ-45 jacks.
Command Connector
The Command connector is used to configure the Firewall using a PC with a serial port and running
Windows® software. The Command connector is an RJ-45 jack and a short adapter cable is provided
to convert to a standard serial port DB-9 female connector.
Power Connector
The Power connector is used to connect the external power supply to the Firewall. The Power
connector is a 6-pin circular DIN connector.Aseparate power cord is connected between the power
supply and a liveAC grounded outlet.

10 MTPSR1-120
Firewall User Guide
Typical Applications
This section describes three typical applications and assumes that the Firewall will be configured for
a particular application during the initial installation. Each example includes a detailed system-type
diagram.
In the first of these applications, the Firewall connects a private LAN to the Internet through a cable
modem or a Digital Subscriber Line (DSL) modem, thus providing high speed Internet access. The
second application ties a private LAN and public Internet Services Network (e.g., an existing public
LAN) through its router to the Internet. The third application is similar to the second, but uses a Data
Communications Equipment (DCE) device—in this example, a T1 DSU—connected to the RS232
port on the back panel of the Firewall to connect to the Internet.
Configuration 1 - Cable/DSL Modem
In Figure 1-1, a private LAN is connected to the ETHERNET 1 jack on the back panel of the Firewall.
Internet access is provided through a cable modem or DSL modem that is connected to the
ETHERNET 2 jack on the Firewall.
MTPSR1-120 Firewall
IP Address 192.168.0.101
Mask 255.255.255.0
Internet
Novell Server
IP Address
192.168.0.102
Windows NT Server
IP Address
192.168.0.103
Mail Server
IP Address
192.168.0.104
Workstation
IP Address
192.168.0.105
Workstation
IP Address
192.168.0.106
Workstation
IP Address
192.168.0.107
HUB
TM
TM
LAN 1
Private
LAN 2
Public
Private LAN
Cable/DSL
Modem
Figure 1-1. Cable/DSL Modem Configuration
When the Firewall software is loaded, the Secured LAN Port Parameters are configured to include an
unregistered IP Address and associated Net Mask for the private LAN (on ETHERNET 1). Then, the
Internet LAN Port Parameters are configured with the DHCP Client option active. This enables the
Internet Services Provider (ISP) to dynamically provide the registered Internet IP addresses at each
login. (If a static IP addressing scheme is provided by the ISP, then the assigned static IP address is
used instead.)

MTPSR1-120 11
Chapter 1 - Introduction and Description
Configuration 2 - Existing Dual-LAN with Router
Another typical configuration, shown in Figure 1-2, ties a private LAN (on ETHERNET 1) to an
existing Internet Services Network already providing Internet services. This configuration provides
firewall and gateway security for the LAN users, and supports Internet access restrictions based on
IP addresses, domain names, applications, client protocols, or lists of forbidden (or allowed) sites.
Internet Services
Network
MTPSR1-120 Firewall
IP Address 192.168.0.101
Mask 255.255.255.0
Internet
Novell Server
IP Address
192.168.0.102
Windows NT Server
IP Address
192.168.0.103
Mail Server
IP Address
192.168.0.104
Workstation
IP Address
192.168.0.105
Workstation
IP Address
192.168.0.106
Workstation
IP Address
192.168.0.107
HUB
TM
TM
LAN 1
Private LAN 2
Public
Video Server
IP Address
204.26.12.40
Web Server
IP Address
204.26.12.20
FTP Server
IP Address
204.26.12.30
HUB
Private LAN
Router
IP address
204.26.12.10
Internet LAN
IP Address 204.26.12.9
Mask 255.255.255.0
Figure 1-2. Existing Dual-LAN with Router Configuration
In Figure 1-2, the private LAN is again connected to the ETHERNET 1 jack on the back panel of the
Firewall. The Internet Services Network, or public LAN, is connected to the ETHERNET 2 jack.
Access to the Internet is provided by the existing router connected to the Internet Services Network.

12 MTPSR1-120
Firewall User Guide
Configuration 3 - New Dual-LAN with T1 DSU
The final typical configuration, shown in Figure 1-3, brings Internet access to existing LAN users.
With this configuration, the private LAN (on ETHERNET 1) is secured by the firewall while the
Internet Services Network is outside the firewall enabling Internet users to access (through
ETHERNET 2) the public LAN resources, such as the Web, FTP, etc. servers. In this arrangement,
the Internet connection is provided through a T1 DSU connected to the RS232/V.35 connector on the
back panel of the Firewall.
MTPSR1-120 Firewall
IP Address 192.168.0.101
Mask 255.255.255.0
Internet
Novell Server
IP Address
192.168.0.102
Windows NT Server
IP Address
192.168.0.103
Mail Server
IP Address
192.168.0.104
Workstation
IP Address
192.168.0.105
Workstation
IP Address
192.168.0.106
Workstation
IP Address
192.168.0.107
HUB
TM
TM
LAN 1
Private LAN 2
Public
Video Server
IP Address
204.26.12.40
Web Server
IP Address
204.26.12.20 FTP Server
IP Address
204.26.12.30
HUB
Private LAN Internet Services
Network
Internet LAN
IP address
204.26.12.10
WAN Port
T1 DSU
Figure 1-3. New Dual-LAN with T1 DSU Configuration
In addition to setting up the Secured LAN Port and Internet LAN Port parameters (as above), the user
must also enable the WAN port and enter the phone number for the ISP and the user name and
password agreed upon with the ISP.

MTPSR1-120 13
Chapter 1 - Introduction and Description
Specifications
• Protocols - Point-To-Point Protocol (PPP), and Serial Line Internet Protocol (SLIP)
Ethernet Ports
• Two Ethernet Interfaces - 10Base-T (twisted pair) RJ-45 jacks
Command Port
• Single 19.2K bps asynchronous Command Port using an RJ-45 to DB-9 (female) cable
WAN Link
• One RS232/V.35 port connector (DB-25 female)
Electrical/Physical
• Voltage - 115 VAC (Standard), 240 Volts AC (Optional)
• Frequency - 47 to 63 Hz
• Power Consumption - 10 Watts
• Dimensions - 1.625" high x 6" wide x 9" deep
5.63 cm high x 22.34 cm wide x 22.34 cm deep
• Weight - 2 pounds (.92 kg)

14 MTPSR1-120
Firewall User Guide

Chapter 2 - Installation

16 MTPSR1-120
Firewall User Guide
Safety Warnings
1. Never install phone wiring during a lightning storm.
2. Never install phone jacks in wet locations unless the jack is specifically designed for wet locations.
3. This product is to be used with UL and cUL listed computers.
4. Never touch uninsulated phone wires or terminals unless the phone line has been disconnected at the
network interface.
5. Use caution when installing or modifying phone lines.
6. Avoid using a phone (other than a cordless type) during an electrical storm. There may be a remote
risk of electrical shock from lightning.
7. Do not use the phone to report a gas leak in the vicinity of the leak.
8. To reduce the risk of fire, use only No. 26 AWG or larger Telecommunication line cord.
Unpacking Your Firewall
The shipping box contains the Firewall, external power supply, power cord, Command Port (RJ-45 to
DB-9) cable, your Quick Start Guide, and a CD ROM with the Firewall Software and the Firewall User
Guide. Inspect the contents for signs of any shipping damage. If damage is observed, do not power
up the unit, contact Multi-Tech’s Technical Support for advice (refer to Chapter 8). If no damage is
observed, place the Firewall in its final location and continue with the next section.
MADE IN U.S.A
MADE IN U.S.A
Figure 2-1. Unpacking Your Firewall

MTPSR1-120 17
Chapter 1 - Introduction and Description
V.35 Shunt Procedure
If you are using an external DCE device on the WAN RS232/V.35 port, and the connection will be a
V.35 connection, the internal shunt must be moved from the RS232C (default) position prior to
cabling and power-up. The following steps detail the procedures for switching the shunt.
1. Ensure that the external power supply is disconnected from the Firewall.
2. Turn the Firewall over and remove the cabinet mounting screw from the chassis.
Front Panel Back Panel
Cabinet Mounting Screw
Figure 2-2. Cabinet Mounting Screw
3. While supporting the back panel, turn the Firewall right side up, tilt the back panel down, and slide the
circuit board assembly out of the chassis.
4. Place the circuit board assembly on a flat, grounded surface.
5. Carefully remove the shunt from the RS232 position, and insert it in the V.35 position (Figure 2-3).
5678
V.35 Shunt Position
S232C Shunt Position
Back Panel Connectors
AM Sockets
LEDs
Figure 2-3. Shunt Positions
6. Align the board with the guide slots on the inside of the chassis and carefully slide the board back
into the chassis.
7. While supporting the back panel, turn the Firewall over again, and replace the cabinet mounting
screw.
8. Turn the Firewall right side up again and proceed to the next section to connect the cables.

18
Dual Ethernet ProxyServer User Guide
Cabling Your Firewall
Cabling your Firewall involves making the proper Power, Command Port, and two Ethernet
connections.An optional WAN connection is provided to connect to an external WAN device.
Before connecting cables to your Firewall, consider the following cabling alternatives:
1. Will you be configuring the Firewall from your PC via the command cable as shown in Figure
2-4, or will you use an existing network connection over your Private (secure) LAN?
Note: Initial configuration of the Firewall cannot be done over The Web; however, the initial
configuration can be “edited” (reconfigured) later over The Web.
2. How will you connect your Firewall to your Private (secure) LAN?
3. Will you connect to the Internet over an existing Public LAN, or will you use the RS232/V.35
WAN connection on the back panel of the Firewall?
Figure 2-4 shows the back panel connectors and the associated cable connections, and the
procedure that follows details the steps for connecting the cables to your Firewall.
Power
Connection
Secure LAN
Internet LAN
WAN
Connection
2
ETHERNET COMMAND
10BASET 10BASET
ON
OFF
1
RS232/V.35 POWER
Command Cable
(supplied)
Figure 2-4. Cable Connections
1. With the ON/OFF switch set to OFF, connect one end of the power supply to a liveAC outlet and
connect the other end to the Firewall as shown in Figure 2-4. The power connector is a 6-pin circular
DIN connector.
2. To configure the Firewall through the Command port, use the special RJ-45 to DB-9 (female)
command cable packed with your unit. Plug the RJ-45 end of the cable into the Command port of the
Firewall and the other end into the PC COM port you are using. See Figure 2-4.
Alternate: You can configure your Firewall from a PC connected to your Secure LAN.
3. To connect your secure (private) LAN, connect one end of an RJ-45 (UTP) cable to the ETHERNET
1 jack on the back panel of the Firewall. Connect the other end of the cable to a hub on your private
LAN.
Note: Your Internet connection can be made through either the ETHERNET 2 port (step 4) or the
RS232/V.35 connector (step 5); however, only one of these ports can be used at a time.

19
Chapter 2 - Installation
4. To connect a cable modem, DSL modem, or your Internet (public) LAN, connect one end of an RJ-45
(UTP) cable to the ETHERNET 2 jack on the back of the Firewall; then connect the other end to your
modem or Internet LAN. Proceed to step 6.
5. If you connected a cable modem, DSL modem, or your Internet LAN in the previous step, do not
connect anything to the RS232/V.35 connector on the back of the Firewall. However, if the RS232/
V.35 connector on the Firewall is going to be connected to a WAN device (i.e., connecting your
secure (private) LAN to an ISP, connect one end of an RS232 or V.35 interface cable to the RS232/
V.35 connector on the back of the Firewall. Connect the other end of this cable to the WAN device.
6. Apply power to the Firewall by setting the ON/OFF switch on the back panel to the ON position. Wait
for the Fail LED on the Firewall to go Off before proceeding. This may take a couple of minutes to go
Off.
At this time your Firewall is completely cabled and powered. Proceed to Chapter 3 to load the
Firewall software.

20
Dual Ethernet ProxyServer User Guide