NetComm NB724 User manual

Table of Contents i
T
Ta ab bl le e o of f C Co on nt te en nt ts s
CHAPTER 1: INTRODUCTION .............................................................................................................. 3
INTRODUCTION TO YOUR ROUTER ............................................................................................................. 3
FEATURES.................................................................................................................................................. 3
CHAPTER 2: INSTALLING THE ROUTER .......................................................................................... 6
IMPORTANT NOTE FOR USING THIS ROUTER................................................................................................ 6
PACKAGE CONTENTS ................................................................................................................................. 6
THE FRONT LEDS OF THE NB724 ............................................................................................................. 7
THE REAR PORTS OF THE NB724............................................................................................................... 8
CABLING.................................................................................................................................................... 9
CHAPTER 3: BASIC INSTALLATION................................................................................................. 10
CONNECTING YOUR ROUTER................................................................................................................... 10
FACTORY DEFAULT SETTINGS .................................................................................................................. 15
Web Interface (Username and Password).......................................................................................... 15
Device LAN IP settings: ..................................................................................................................... 15
ISP setting in WAN site:...................................................................................................................... 15
DHCP server ...................................................................................................................................... 15
LAN and WAN Port Addresses............................................................................................................ 15
INFORMATION FROM YOUR ISP................................................................................................................ 16
CONFIGURING WITH YOUR WEB BROWSER.............................................................................................. 17
CHAPTER 4: CONFIGURATION.......................................................................................................... 18
STATUS .................................................................................................................................................... 19
ARP Table........................................................................................................................................... 19
Routing Table...................................................................................................................................... 19
DHCP Table........................................................................................................................................ 20
PPTP Status........................................................................................................................................ 21
IPSec Status........................................................................................................................................ 21
L2TP Status......................................................................................................................................... 22
Email Status........................................................................................................................................ 22
Event Log............................................................................................................................................ 23
Error Log............................................................................................................................................ 23
NAT Sessions ...................................................................................................................................... 24
Diagnostic........................................................................................................................................... 24
UPnP Portmap ................................................................................................................................... 25
QUICK START........................................................................................................................................... 26
CONFIGURATION...................................................................................................................................... 28
LAN (Local Area Network)................................................................................................................. 28
Bridge Interface.............................................................................................................................. 28
Ethernet........................................................................................................................................... 29
IPAlias............................................................................................................................................ 30
Ethernet Client Filter...................................................................................................................... 31
Port Setting..................................................................................................................................... 33
DHCP Server.................................................................................................................................. 34
WAN - Wide Area Network.................................................................................................................. 35
ISP .................................................................................................................................................. 35
DNS................................................................................................................................................ 45
SHDSL ........................................................................................................................................... 46
System................................................................................................................................................. 47

Time Zone....................................................................................................................................... 47
Remote Access................................................................................................................................ 48
Firmware Upgrade.......................................................................................................................... 49
Backup / Restore............................................................................................................................. 50
Restart Router................................................................................................................................. 51
User Management........................................................................................................................... 52
Firewall and Access Control .............................................................................................................. 53
General Settings.............................................................................................................................. 54
Packet Filter.................................................................................................................................... 55
Intrusion Detection......................................................................................................................... 63
URL Filter....................................................................................................................................... 65
IM / P2P Blocking.......................................................................................................................... 67
Firewall Log ................................................................................................................................... 68
VPN - Virtual Private Networks ......................................................................................................... 69
PPTP (Point-to-Point Tunneling Protocol)..................................................................................... 69
IPSec (IP Security Protocol)........................................................................................................... 77
L2TP (Layer Two Tunneling Protocol) .......................................................................................... 87
QoS (Quality of Service)................................................................................................................... 100
Prioritization................................................................................................................................. 100
Outbound IP Throttling (LAN to WAN)....................................................................................... 102
Inbound IP Throttling (WAN to LAN)......................................................................................... 103
Virtual Server (“Port Forwarding”)................................................................................................ 107
Add Virtual Server........................................................................................................................ 108
Edit DMZ Host............................................................................................................................. 109
Edit DMZ Host..............................................................................................................................110
Edit One-to-One NAT (Network Address Translation).................................................................111
Time Schedule....................................................................................................................................114
Configuration of Time Schedule ...................................................................................................115
Advanced ...........................................................................................................................................116
Static Route....................................................................................................................................116
Dynamic DNS ...............................................................................................................................117
Check Email ..................................................................................................................................118
Device Management......................................................................................................................119
IGMP............................................................................................................................................ 122
VLAN Bridge............................................................................................................................... 122
SAVE CONFIGURATION TO FLASH........................................................................................................... 126
LOGOUT................................................................................................................................................. 127
CHAPTER 5: TROUBLESHOOTING ................................................................................................ 128
PROBLEMS STARTING UP THE ROUTER.................................................................................................... 128
PROBLEMS WITH THE WAN INTERFACE................................................................................................. 128
PROBLEMS WITH THE LAN INTERFACE.................................................................................................. 128
APPENDIX: LEGAL & REGULATORY INFORMATION ................................................................ 128

SHDSL VPN Router
Chapter 1: Introduction 3
Chapter 1: Introduction
Introduction to your Router
Thank you for purchasing the NetComm NB724 SHDSL Router. Your NetComm SHDSL router is an
“all-in-one” unit, combining an SHDSL modem, SHDSL router and Ethernet network switch, providing
everything you need to get the machines on your network connected to the Internet over your SHDSL
broadband connection. With features such as an SHDSL Quick-Start wizard and DHCP Server, you can
be online in no time at all and with a minimum of fuss and configuration, catering for all users from
first-time users to experienced users requiring advanced features and control over their Internet
connection and network.
Features
SHDSL Multi-Mode Standard
The NB724 SHDSL router supports downstream and upstream transmission rates of up to 4.6Mbps.
It also supports rate management that allows SHDSL subscribers to select an Internet access
speed suiting their needs and budgets. The NB724 follows ITU standard PAM16 Line Code and
complies with G.991.2 and G.994.1 standards. It also supports Annex A and B operating mode.
Fast Ethernet Switch
A 4-port 10/100Mbps fast Ethernet switch is built in with automatic switching between MDI and
MDI-X for 10Base-T and 100Base-TX ports. An Ethernet straight or crossover cable can be used
directly for auto detection.
Multi-Protocol to establish a connection
It supports PPPoA (RFC 2364 - PPP over ATM Adaptation Layer 5), RFC 1483 encapsulation over
ATM (bridged or routed), PPP over Ethernet (RFC 2516), and IPoA (RFC1577) to establish a
connection with the ISP. The product also supports VC-based and LLC-based multiplexing.
Quick Installation Wizard
It supports a WEB GUI page to install this device quickly. With this wizard, end users can enter the
information easily which they get from their ISP, then surf the Internet immediately.
Universal Plug and Play (UPnP) and UPnP NAT Traversal
This protocol is used to enable simple and robust connectivity among stand-alone devices and PCs
from many different vendors. It makes networking simple and affordable for users. UPnP
architecture leverages TCP/IP and the Web to enable seamless proximity networking in addition to
control and data transfer among networked devices. With this feature enabled, users can now
connect to Net meeting or MSN Messenger seamlessly.
Network Address Translation (NAT)
Allows multi-users to access outside resources such as the Internet simultaneously with one IP
address/one Internet access account. Many application layer gateway (ALG) are supported such as
web browser, ICQ, FTP, Telnet, E-mail, News, Net2phone, Ping, NetMeeting, IP phone and others.
SOHO Firewall Security with DoS and SPI
Along with the built-in NAT natural firewall feature, the router also provides advanced hacker
pattern-filtering protection. It can automatically detect and block Denial of Service (DoS) attacks.
The router is built with Stateful Packet Inspection (SPI) to determine if a data packet is allowed
through the firewall to the private LAN.
Domain Name System (DNS) relay

SHDSL VPN Router
Chapter 1: Introduction 4
It provides an easy way to map the domain name (a friendly name for users such as
www.yahoo.com) and IP address. When a local machine sets its DNS server with this router’s IP
address, every DNS conversion request packet from the PC to this router will be forwarded to the
real DNS in the outside network.
Dynamic Domain Name System (DDNS)
The Dynamic DNS service allows you to alias a dynamic IP address to a static hostname. This
dynamic IP address is the WAN IP address. For example, to use the service, you must first apply for
an account from a DDNS service like http://www.dyndns.org/. More than 5 DDNS servers are
supported.
Quality of Service (QoS) QoS gives you full control over which types of outgoing data traffic
should be given priority by the router, ensuring important data like gaming packets, customer
information, or management information move through the router at lightning speed, even under
heavy load. The QoS features are configurable by source IP address, destination IP address,
protocol, and port. You can throttle the speed at which different types of outgoing data pass through
the router, to ensure P2P users don’t saturate upload bandwidth, or office browsing doesn’t bring
client web serving to a halt. In addition, or alternatively, you can simply change the priority of
different types of upload data and let the router sort out the actual speeds.
Virtual Private Network (VPN)
It allows users to make a tunnel with a remote site directly to secure the data transmission among
the connection. User can use embedded PPTP and L2TP client/server, IKE and IPSec which are
supported by this router to make a VPN connection or users can run the PPTP client in PC and the
router already provides IPSec and PPTP pass through function to establish a VPN connection if the
user likes to run the PPTP client in his local computer.
Virtual Server (“port forwarding”)
Users can specify some services to be visible from outside users. The router can detect incoming
service requests and forward either a single port or a range of ports to the specific local computer to
handle it. For example, a user can assign a PC in the LAN acting as a WEB server inside and
expose it to the outside network. Outside users can browse inside web servers directly while it is
protected by NAT. A DMZ host setting is also provided to a local computer exposed to the outside
network, Internet.
Rich Packet Filtering
Not only filters the packet based on IP address, but also based on Port numbers. It will filter packets
from and to the Internet, and also provides a higher level of security control.
Dynamic Host Configuration Protocol (DHCP) client and server
In the WAN site, the DHCP client can get an IP address from the Internet Service Provider (ISP)
automatically. In the LAN site, the DHCP server can allocate a range of client IP addresses and
distribute them including IP address, subnet mask as well as DNS IP address to local computers. It
provides an easy way to manage the local IP network.
Static and RIP1/2 Routing
It has routing capability and supports easy static routing table or RIP1/2 routing protocol.
Simple Network Management Protocol (SNMP)
It is an easy way to remotely manage the router via SNMP.
Web based GUI
It supports web based GUI for configuration and management. It is user-friendly and comes with
on-line help. It also supports remote management capability for remote users to configure and
manage this product.
Firmware Upgradeable
Device can be upgraded to the latest firmware through the WEB based GUI.

SHDSL VPN Router
Chapter 1: Introduction 5
Rich Management Interfaces
It supports flexible management interfaces with local console port, LAN port, and WAN port. Users
can use terminal applications through the console port to configure and manage the device, or
Telnet, WEB GUI, and SNMP through LAN or WAN ports to configure and manage the device.

SHDSL VPN Router
Chapter 2: Installing the Router 6
Chapter 2: Installing the Router
Important note for using this router
Package Contents
SHDSL Router
CD-ROM containing the online manual
RJ-11 SHDSL / telephone Cable
Ethernet (CAT-5 LAN) Cable
Console (PS2-RS232) Cable
AC-DC power adapter (12V DC, 1A)
9Do not use this router in high humidity or high temperatures.
9Do not use the same power source for this router as other
equipment.
9Do not open or repair the case yourself. If this router is too hot,
turn off the power immediately and have it repaired at a qualified
service center.
9Avoid using this product and all accessories outdoors.
Warnin
g
9Place this router on a stable surface.
9Only use the power adapter that comes with the package. Using
a different voltage rating power adaptor may damage this router.
A
ttention

SHDSL VPN Router
7
The Front LEDs of the NB724
LED Meaning
1
2
LINE 1 & 2 Lit when successfully connected to the SHDSL line and it is
synchronized.
3
LAN Port
1X — 4X
(RJ-45 connector)
Lit when connected to an Ethernet device.
Green for 100Mbps; Orange for 10Mbps.
Blinking when data is Transmitted / Received.
4 SYS Lit when the system is ready.
5 PWR Lit when power is ON.
1
23
4
5

SHDSL VPN Router
8
The Rear Ports of the NB724
Port Meaning
1 Power Switch Power ON/OFF switch
2 PWR Connect the supplied power adapter to this jack.
3 RESET
To be sure the device is being turned on Æpress RESET button for:
1-3 seconds: quick reset the device.
6 seconds above, and power off, power on the device: restore to
factory default settings. (Cannot login to the router or forgot your
Username/Password. Press the button for more than 6 seconds).
Caution: After pressing the RESET button for more than 6 seconds, to be sure
you power cycle the device again.
4
LAN
1X — 4X
(RJ-45 connector)
Connect an Ethernet cable (Cat-5 or Cat-5e) to one of the four LAN
ports when connecting to a PC or an office/home network of 10Mbps or
100Mbps.
5 CONSOLE Connect a PS2/RS-232 cable to this port when connecting to a PC’s
RS-232 port (9-pin serial port).
6
LINE
1X — 2X
(RJ-11
connector
Connect the supplied RJ-11 (“telephone”) cable to this port when
connecting to SHDSL line.
1
23
4
*6 5

SHDSL VPN Router
Chapter 2: Installing the Router 9
Cabling
One of the most common causes of problems is bad cabling or SHDSL line(s). Make sure that all
connected devices are turned on. On the front of the product is a bank of LEDs. Verify that the LAN Link
and SHDSL line LEDs are lit. If they are not, verify that you are using the proper cables.

SHDSL VPN Router
Chapter 3: Basic Installation 10
Any TCP/IP capable workstation can be used to communicate with or through
the router. To configure other types of workstations, please consult the
manufacturer’s documentation.
Chapter 3: Basic Installation
The router can be configured with your web browser. A web browser is included as a standard application
in the following operating systems: Linux, Mac OS, Windows 98/NT/2000/XP/Me, etc. The product
provides an easy and user-friendly interface for configuration.
Please check your PC’s network components. The TCP/IP protocol stack and Ethernet network adapter
must be installed. If not, please refer to your Windows-related or other operating system manuals.
`
There are ways to connect with the router, either through an external repeater hub to the router or directly
connecting with PCs. You have to configure your PCs to obtain an IP address through a DHCP server or
a fixed IP address that must be in the same subnet as the router. The default IP address of the router is
192.168.1.254 and the subnet mask is 255.255.255.0 (i.e. any attached PC must be in the same subnet,
and have an IP address in the range of 192.168.1.1 to 192.168.1.253). The best and easiest way is to
configure the PC to get an IP address automatically from the router using DHCP. If you encounter any
problem accessing the router’s web interface it may also be advisable to uninstall any kind of software
firewall on your PCs, as they can cause problems accessing the 192.168.1.254 IP address of the router.
Users should make their own decisions on how to best protect their network.
Please follow the steps below for your PC’s network environment installation.
Connecting Your Router
1. Connect the Router to a LAN (Local Area Network) and the SHDSL LINE.
2. Power on the device.
3. Make sure the PWR and SYS LEDs are lit steadily and that the relevant LAN and LINE LED are lit.

SHDSL VPN Router
Chapter 3: Basic Installation 11
Configuring PCs in Window XP
1. Go to Start / Control Panel (in Classic View). In the Control
Panel, double-click Network Connections.
2. Double-click Local Area Connection. (See Figure 3.1)
3. In the LAN Area Connection Status window, click
Properties. (See Figure 3.2)
4. Select Internet Protocol (TCP/IP) and click Properties.
(See Figure 3.3)
5. Select the Obtain an IP address automatically and Obtain
DNS server address automatically radio buttons. (See
Figure 3.4)
6. Click OK to finish the configuration.
Figure 3.1: LAN Area Connection
Figure 3.2: LAN Connection Status
Figure 3.3: TCP / IP
Figure 3.4: IP Address & DNS
Configuration

SHDSL VPN Router
Chapter 3: Basic Installation 12
Configuring PCs in Windows 2000
1. Go to Start / Settings / Control Panel. In the Control Panel,
double-click Network and Dial-up Connections.
2. Double-click Local Area (“LAN”) Connection.(See Figure
3.5)
3. In the LAN Area Connection Status window, click
Properties. (See Figure 3.6)
4. Select Internet Protocol (TCP/IP) and click Properties.
(See Figure 3.7)
5. Select the Obtain an IP address automatically and Obtain
DNS server address automatically radio buttons. (See
Figure 3.8)
6. Click OK to finish the configuration.
Figure 3.5: LAN Area Connection
Figure 3.6: LAN Connection Status
Figure 3.7: TCP / IP
Figure 3.8: IP Address & DNS
Configuration

SHDSL VPN Router
Chapter 3: Basic Installation 13
Configuring PC in Windows 95/98/ME
1. Go to Start / Settings / Control Panel. In the Control Panel,
double-click Network and choose the Configuration tab.
2. Select TCP / IP -> NE2000 Compatible, or the name of any
Network Interface Card (NIC) in your PC. (See Figure 3.9)
3. Click Properties.
4. Select the IP Address tab. In this page, click the Obtain an IP
address automatically radio button. (See Figure 3.10)
5. Then select the DNS Configuration tab. (See Figure 3.11)
6. Select the Disable DNS radio button and click OK to finish
the configuration.
Figure 3.9: TCP / IP
Figure 3.10: IP Address
Figure 3.11: DNS Configuration

SHDSL VPN Router
Chapter 3: Basic Installation 14
Configuring PC in Windows NT4.0
1. Go to Start / Settings / Control Panel. In the Control
Panel, double-click Network and choose the Protocols tab.
2. Select TCP/IP Protocol and click Properties. (See Figure
3.12)
3. Select the Obtain an IP address from a DHCP server radio
button and click OK. (See Figure 3.13)
Figure 3.12: TCP / IP
Figure 3.13: IP Address

SHDSL VPN Router
Chapter 3: Basic Installation 15
Factory Default Settings
Before configuring your NB724, you need to know the following default settings.
Web Interface (Username and Password)
Username: admin
Password: admin
The default username and password are “admin” and “admin” respectively.
Device LAN IP settings:
IP Address: 192.168.1.254
Subnet Mask: 255.255.255.0
ISP setting in WAN site:
PPPoE
DHCP server
DHCP server is enabled.
Start IP Address: 192.168.1.100
IP pool counts: 100
LAN and WAN Port Addresses
The parameters of LAN and WAN ports are pre-set in the factory. The default values are shown below.
LAN Port WAN Port
IP address 192.168.1.254
Subnet Mask 255.255.255.0
DHCP server function Enabled
IP addresses for
distribution to PCs
100 IP addresses continuing from
192.168.1.100 through 192.168.1.199
The PPPoE function is enabled
to automatically get the WAN
port configuration from the ISP.
A
ttention
If you ever forget the username/password to login to the router, you may
press the RESET button up to 6 seconds to restore the factory default
settings.
Caution: After pressing the RESET button for more than 6 seconds, to be sure you power
cycle the device again.
A
ttention

SHDSL VPN Router
Chapter 3: Basic Installation 16
Information from your ISP
Before configuring this device, you have to check with your ISP (Internet Service Provider) to find out
what kind of service is provided such as DHCP (Obtain an IP Address Automatically, Static IP (Fixed IP
Address) and PPPoE.
Gather the information as illustrated in the following table and keep it for reference.
PPPoE
VPI/VCI, VC / LLC-based multiplexing, Username, Password, Service Name,
and Domain Name System (DNS) IP address (it can be automatically
assigned by your ISP when you connect or be set manually).
PPPoE / PPPoE
with Pass-through
VPI/VCI, VC / LLC-based multiplexing, Username, Password, Service Name,
and Domain Name System (DNS) IP address (it can be automatically
assigned by your ISP when you connect or be set manually). In addition,
additional WAN address can be assigned using PPPoE dialer.
PPPoA
VPI/VCI, VC / LLC-based multiplexing, Username, Password and Domain
Name System (DNS) IP address (it can be automatically assigned by your ISP
when you connect or be set manually).
RFC 1483 Bridged VPI/VCI, VC / LLC-based multiplexing to use Bridged Mode.
RFC 1483 Routed
VPI/VCI, VC / LLC-based multiplexing, IP address, Subnet mask, Gateway
address, and Domain Name System (DNS) IP address (it is a fixed IP
address).
IPoA Routed
(IP over ATM)
VPI/VCI, VC / LLC-based multiplexing, IP address, Subnet mask, Gateway
address, and Domain Name System (DNS) IP address (it is a fixed IP
address).

SHDSL VPN Router
Chapter 3: Basic Installation 17
Configuring with your Web Browser
Open your web browser, enter the IP address of your router, which by default is 192.168.1.254, and click
“Enter”, a user name and password window prompt will appear. The default username and
password are “admin” and “admin” respectively. (See Figure 3.14)
Figure 3.14: User name & Password Prompt Window
Congratulations! You are now successfully logged on to the SHDSL Router!

SHDSL VPN Router
Chapter 4: Configuration 18
Chapter 4: Configuration
At the configuration homepage, the left navigation pane where bookmarks are provided links you directly
to the desired setup page, including:
Status
- ARP Table
- Routing Table
- DHCP Table
- PPTP Status
- IPSec Status
- L2TP Status
- Email Status
- Event Log
- Error Log
- NAT Sessions
- Diagnostic
- UPnP Portmap
Quick Start
Configuration
- LAN
- WAN
- System
- Firewall
- VPN
- QoS
- Virtual Server
- Time Schedule
- Advanced
Save Config to FLASH
Language (provides user interface in English and French languages).
Logout
Please click the links to see the relevant sections of this manual for detailed instructions on how to
configure the SHDSL VPN Router.

SHDSL VPN Router
Chapter 4: Configuration 19
Status
ARP Table
This section displays the router’s ARP (Address Resolution Protocol) Table, which shows the mapping of
Internet (IP) addresses to Ethernet (MAC) addresses. This is useful as a quick way of determining the
MAC address of the network interface of your PCs to use with the router’s Firewall – MAC Address
Filter function. See the Firewall section of this manual for more information on this feature.
IP Address: A list of IP addresses of devices on your LAN (Local Area Network).
MAC Address: The MAC (Media Access Control) addresses for each device on your LAN.
Interface: The interface name (on the router) that this IP Address connects to.
Static: Static status of the ARP table entry:
~“no” for dynamically-generated ARP table entries
~“yes” for static ARP table entries added by the user
Routing Table
Routing Table
Valid: It indicates a successful routing status.
Destination: The IP address of the destination network.
Netmask: The destination netmask address.
Gateway/Interface: The IP address of the gateway or existing interface that this route will use.
Cost: The number of hops counted as the cost of the route.
RIP Routing Table
Destination: The IP address of the destination network.
Netmask: The destination netmask address.
Gateway: The IP address of the gateway that this route will use.
Cost: The number of hops counted as the cost of the route.

SHDSL VPN Router
Chapter 4: Configuration 20
DHCP Table
Leased: The DHCP assigned IP addresses information.
IP Address: A list of IP addresses of devices on your LAN (Local Area Network).
Expired: The expired IP addresses information.
Permanent: The fixed host mapping information
Leased Table
IP Address: The IP address that assigned to client.
MAC Address: The MAC address of client.
Client Host Name: The Host Name (Computer Name) of client.
Expiry: The current lease time of client.
Expired Table
Please refer the Leased Table.
Permanent Table
Name: The name you assigned to the Permanent configuration.
IP Address: The fixed IP address for the specify client.
MAC Address: The MAC Address that you want to assign the fixed IP address
Maximum Lease Time: The maximum lease time interval you allow to clients.