NETGEAR RO318 User manual

SM-RO318NA-0
March 2001
NETGEAR, Inc.
4500 Great America Parkway
Santa Clara, CA 95054 USA
Phone 1-888-NETGEAR
Reference Guide for the
Model RO318 Cable/DSL
Security Router

ii
© 2001 by NETGEAR, Inc. All rights reserved.
Trademarks
NETGEAR and FirstGear are trademarks Netgear, Inc.
Microsoft, Windows, and Windows NT are registered trademarks of Microsoft Corporation.
Other brand and product names are registered trademarks or trademarks of their respective holders.
Statement of Conditions
In the interest of improving internal design, operational function, and/or reliability, NETGEAR reserves the right to
make changes to the products described in this document without notice.
NETGEAR does not assume any liability that may occur due to the use or application of the product(s) or circuit
layout(s) described herein.
Federal Communications Commission (FCC) Compliance Notice: Radio Frequency Notice
This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to
part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a
residential installation. This equipment generates, uses, and can radiate radio frequency energy and, if not installed and
used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no
guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to
radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try
to correct the interference by one or more of the following measures:
• Reorient or relocate the receiving antenna.
• Increase the separation between the equipment and receiver.
• Connect the equipment into an outlet on a circuit different from that to which the receiver is connected.
• Consult the dealer or an experienced radio/TV technician for help.
EN 55 022 Declaration of Conformance
This is to certify that the Model RO318 Cable/DSL Security Router is shielded against the generation of radio
interference in accordance with the application of Council Directive 89/336/EEC, Article 4a. Conformity is declared by
the application of EN 55 022 Class B (CISPR 22).

iii
Bestätigung des Herstellers/Importeurs
Es wird hiermit bestätigt, daß das Model RO318 Cable/DSL Security Router gemäß der im BMPT-AmtsblVfg 243/1991
und Vfg 46/1992 aufgeführten Bestimmungen entstört ist. Das vorschriftsmäßige Betreiben einiger Geräte (z.B.
Testsender) kann jedoch gewissen Beschränkungen unterliegen. Lesen Sie dazu bitte die Anmerkungen in der
Betriebsanleitung.
Das Bundesamt für Zulassungen in der Telekommunikation wurde davon unterrichtet, daß dieses Gerät auf den Markt
gebracht wurde und es ist berechtigt, die Serie auf die Erfüllung der Vorschriften hin zu überprüfen.
Certificate of the Manufacturer/Importer
It is hereby certified that the Model RO318 Cable/DSL Security Router has been suppressed in accordance with the
conditions set out in the BMPT-AmtsblVfg 243/1991 and Vfg 46/1992. The operation of some equipment (for example,
test transmitters) in accordance with the regulations may, however, be subject to certain restrictions. Please refer to the
notes in the operating instructions.
Federal Office for Telecommunications Approvals has been notified of the placing of this equipment on the market
and has been granted the right to test the series for compliance with the regulations.
Voluntary Control Council for Interference (VCCI) Statement
This equipment is in the second category (information equipment to be used in a residential area or an adjacent area
thereto) and conforms to the standards set by the Voluntary Control Council for Interference by Data Processing
Equipment and Electronic Office Machines aimed at preventing radio interference in such residential areas.
When used near a radio or TV receiver, it may become the cause of radio interference.
Read instructions for correct handling.
Customer Support
Refer to the Support Information Card that shipped with your Model RO318 Cable/DSL Security Router.
World Wide Web
NETGEAR maintains a World Wide Web home page that you can access at the universal resource locator (URL)
http://www.netgear.com. A direct connection to the Internet and a Web browser such as Internet Explorer
or Netscape are required.

iv

Contents v
Contents
About This Guide
Technical Support ............................................................................................................xiii
Related Publications ........................................................................................................xiii
Typographical Conventions ............................................................................................. xv
Special Message Formats ............................................................................................... xv
Chapter 1
Introduction
About the Router ............................................................................................................1-1
Key Features ..................................................................................................................1-1
Security ....................................................................................................................1-3
Content Filtering .......................................................................................................1-3
Autosensing 10/100 Ethernet ...................................................................................1-4
TCP/IP ......................................................................................................................1-4
Easy Installation and Management ..........................................................................1-5
Maintenance and Support ........................................................................................1-5
Chapter 2
Setting Up the Hardware
Package Contents ..........................................................................................................2-1
Local Network Hardware Requirements .........................................................................2-2
PC Requirements ..............................................................................................2-2
Access Device Requirement .............................................................................2-2
The Router’s Front Panel ...............................................................................................2-3
The Router’s Rear Panel ................................................................................................2-4
Connecting the Router ....................................................................................................2-4
Connecting to your Local Ethernet Network .............................................................2-5
Connecting to Your Internet Access Device .............................................................2-5
Connecting the Power Adapter ................................................................................2-6
Verifying Power ........................................................................................................2-6

vi Contents
Chapter 3
Preparing Your Network
Preparing Your Personal Computers for IP Networking .................................................3-1
Configuring Windows 95 or later for IP Networking ........................................................3-2
Configuring TCP/IP Properties .................................................................................3-4
Verifying TCP/IP Properties (Windows) ...................................................................3-4
Configuring the Macintosh for IP Networking .................................................................3-5
Verifying TCP/IP Properties (Macintosh) ..................................................................3-6
Your Internet Account .....................................................................................................3-7
Login Protocols ........................................................................................................3-7
Account Information .................................................................................................3-7
Obtaining ISP Configuration Information (Windows) .........................................3-8
Obtaining ISP Configuration Information (Macintosh) .......................................3-9
Ready for Configuration ..................................................................................................3-9
Chapter 4
Basic Configuration of the Router
Configuring for Internet Access ......................................................................................4-1
Configuring Security Features ........................................................................................4-8
E-Mail .......................................................................................................................4-8
Keyword ...................................................................................................................4-9
Schedule ................................................................................................................4-10
Trusted ...................................................................................................................4-11
Logs .......................................................................................................................4-12
Chapter 5
Advanced Configuration of the Router
System Settings ..............................................................................................................5-1
System Tab ..............................................................................................................5-1
Dynamic DNS ...........................................................................................................5-2
Password .................................................................................................................5-2
LAN Setup ......................................................................................................................5-3
DHCP .......................................................................................................................5-3
LAN TCP/IP ..............................................................................................................5-4
Configuring for Port Forwarding to Local Servers ..........................................................5-6
Local Web and FTP Server Example .................................................................5-7
Local Game Host or Videoconference Example ................................................5-8

Contents vii
Static Routes ..................................................................................................................5-8
Static Route Example .............................................................................................5-10
Chapter 6
Maintenance
System Status ................................................................................................................6-1
DHCP Table ....................................................................................................................6-4
Software Upgrade ...........................................................................................................6-4
Configuration File Management .....................................................................................6-5
Restore and Backup the Configuration ....................................................................6-5
Erase the Configuration ...........................................................................................6-5
Loading Software and Configuration Files Using FTP ....................................................6-6
Updating Router Software Using FTP ................................................................6-6
Backing Up and Restoring the Configuration Using FTP ...................................6-6
Using FTP from the WAN ..................................................................................6-7
Restoring the Default Configuration and Password ........................................................6-7
Using the Default Reset button ................................................................................6-7
Chapter 7
Troubleshooting
Basic Functioning ...........................................................................................................7-1
PWR LED Not On ....................................................................................................7-1
Test LED Never Blinks or LED Stays On .................................................................7-2
LNK/ACT LEDs Not On ............................................................................................7-2
Troubleshooting the Web Configuration Interface ..........................................................7-2
Troubleshooting the ISP Connection ..............................................................................7-3
Troubleshooting a TCP/IP Network Using a Ping Utility .................................................7-5
Testing the LAN Path to Your Router .......................................................................7-5
Testing the Path from Your PC to a Remote Device ................................................7-6
Appendix A
Technical Specifications
General Specifications ................................................................................................... A-1
Appendix B
Networks, Routing, and Firewall Basics
Basic Router Concepts .................................................................................................. B-1
What is a Router? ................................................................................................... B-1
Routing Information Protocol ................................................................................... B-2
IP Addresses and the Internet ................................................................................. B-2

viii Contents
Netmask .................................................................................................................. B-4
Subnet Addressing .................................................................................................. B-5
Private IP Addresses ............................................................................................... B-7
Single IP Address Operation Using NAT ................................................................. B-8
MAC Addresses and Address Resolution Protocol ................................................. B-9
Domain Name Server .............................................................................................. B-9
IP Configuration by DHCP .................................................................................... B-10
Internet Security and Firewalls .................................................................................... B-10
What is a Firewall? ................................................................................................ B-10
Stateful Packet Inspection ......................................................................................B-11
Denial of Service Attack .........................................................................................B-11
Ethernet Cabling .......................................................................................................... B-12
Uplink Switches, Crossover Cables, and MDI/MDIX Switching ............................ B-12
Cable Quality ......................................................................................................... B-13
Glossary
Index

ix
Figure 2-1. RO318 Front Panel ..................................................................................2-3
Figure 2-2. RO318 Rear Panel ...................................................................................2-4
Figure 4-1. Login window ...........................................................................................4-2
Figure 4-2. Browser-based configuration main menu ................................................4-3
Figure 4-3. Browser-based Setup Wizard, first screen ...............................................4-4
Figure 4-4. Browser-based Setup Wizard, second screen .........................................4-5
Figure 4-5. Browser-based Setup Wizard, third screen .............................................4-6
Figure 5-1. LAN Setup Menu ......................................................................................5-3
Figure 5-2. Port Forwarding Menu .............................................................................5-6
Figure 5-3. Static Route Summary Table ...................................................................5-8
Figure 5-4. Static Route Entry and Edit Menu ............................................................5-9
Figure 5-5. Static Route Example ............................................................................5-11
Figure 6-1. System Status screen ..............................................................................6-1
Figure 6-2. Router Statistics screen ...........................................................................6-3
Figure 6-3. DHCP Table .............................................................................................6-4
Figure B-1. Three Main Address Classes .................................................................. B-3
Figure B-2. Example of Subnetting a Class B Address ............................................. B-5
Figure B-3. Single IP Address Operation Using NAT ................................................ B-8

x

xi
Table 2-1. LED Descriptions .....................................................................................2-3
Table 4-1. Content Filter Log entry descriptions .....................................................4-12
Table 4-2. Security Event Log entry descriptions ....................................................4-13
Table 4-3. Log display buttons ................................................................................4-13
Table 5-1. Dynamic DNS configuration fields ...........................................................5-2
Table 5-2. DHCP Setup Fields .................................................................................5-4
Table 5-3. LAN TCP/IP Setup Fields .......................................................................5-4
Table 5-4. Port Table Entries (Example) ...................................................................5-7
Table 5-5. Edit IP Static Route Fields ......................................................................5-9
Table 6-1. System Status fields ................................................................................6-2
Table 6-2. Router Statistics Fields ...........................................................................6-3
Table B-1. Netmask Notation Translation Table for One Octet ................................ B-6
Table B-2. Netmask Formats .................................................................................... B-6
Table B-3. UTP Ethernet cable wiring, straight-through ......................................... B-12

xii

About This Guide xiii
About This Guide
Congratulations on your purchase of the NETGEAR™Model RO318 Cable/DSL Security Router.
The Model RO318 router provides a secure connection for multiple personal computers (PCs) to
the Internet through an external broadband access device (such as a cable modem or DSL modem)
that is normally intended for use by a single PC.
Technical Support
For help with any technical issues, contact Customer Support at 1-888-NETGEAR, or visit us on
the Web at www.NETGEAR.com. The NETGEAR Web site includes an extensive knowledge
base, answers to frequently asked questions, and a means for submitting technical questions
online.
Related Publications
As you read this document, you may be directed to various RFC documents for further
information. An RFC is a Request For Comment (RFC) published by the Internet Engineering
Task Force (IETF), an open organization that defines the architecture and operation of the Internet.
The RFC documents outline and define the standard protocols and procedures for the Internet. The
documents are listed on the World Wide Web at www.ietf.org and are mirrored and indexed at
many other sites worldwide.
For more information about address assignment, refer to the IETF documents RFC 1597, Address
Allocation for Private Internets, and RFC 1466, Guidelines for Management of IP Address Space.
Note: If you are unfamiliar with networking and routing, refer to Appendix B,
“Networks, Routing, and Firewall Basics,” to become more familiar with the terms and
procedures used in this manual.

Reference Guide for the Model RO318 Cable/DSL Security Router
xiv About This Guide
For more information about IP address translation, refer to RFC 1631, The IP Network Address
Translator (NAT).

Reference Guide for the Model RO318 Cable/DSL Security Router
About This Guide xv
Typographical Conventions
This guide uses the following typographical conventions:
italics Book titles and UNIX file, command, and directory names.
courier font Screen text, user-typed command-line entries.
Initial Caps Menu titles and window and button names.
[Enter] Named keys in text are shown enclosed in square brackets. The notation
[Enter] is used for the Enter key and the Return key.
[Ctrl]+C Two or more keys that must be pressed simultaneously are shown in text
linked with a plus (+) sign.
ALL CAPS DOS file and directory names.
Special Message Formats
This guide uses the following formats to highlight special messages:
Note: This format is used to highlight information of importance or special interest.
Caution: This format is used to highlight information that will help you prevent
equipment failure or loss of data.
Warning: This format is used to highlight information about the possibility of injury or
equipment damage.
Danger: This format is used to alert you that there is the potential for incurring an
electrical shock if you mishandle the equipment.

Introduction 1-1
Chapter 1
Introduction
This chapter describes the features of the NETGEAR Model RO318 Cable/DSL Security Router
and discusses planning considerations for installation.
About the Router
The Model RO318 Cable/DSL Security Router with 8-port switch connects your local area
network (LAN) to the Internet through an external single-user access device such as a cable
modem or DSL modem.
The Model RO318 router provides you with hacker attack protection, multiple Web content
filtering options, plus browsing activity reporting and instant alerts via e-mail. Parents and
network administrators can establish restricted access policies based on time-of-day, URL and
URL keywords, and share secure high-speed cable/DSL Internet access for up to 253 personal
computers.
With minimum setup, you can install and use the router within minutes.
Key Features
The Model RO318 router provides the following features:
•Security
– Stateful Packet Inspection for true firewall protection against hacker attacks
– E-mail reporting of security incidents and attacks
– Parental control of web browsing using Web Address (URL) keyword blocking
– Auditing and e-mail reporting of web browsing activities

Reference Guide for the Model RO318 Cable/DSL Security Router
1-2 Introduction
– Incoming port forwarding and DMZ for specific services
• Built in 8-port 10/100 Mbps Switch
– Allows LAN connections at 10 megabits per second (Mbps) or 100 Mbps
– Autosensing for Ethernet (10BASE-T) or Fast Ethernet (100BASE-Tx) transmissions
– Autosensing MDI/MDIX configures each port for normal or uplink connection
– Half-duplex or full-duplex operation
• Ethernet connection to a wide area network (WAN) device, such as a cable modem or DSL
modem
– RJ-45 interface allowing connection to a 10BASE-T device
• Protocol Support
–IProuting
– Dynamic extended Network Address Translation (NAT+) with port forwarding for
operation with a single static or dynamic IP address
– Dynamic Host Configuration Protocol (DHCP) server for dynamically assigning
network configuration information to PCs on the LAN
– DHCP client for dynamically obtaining configuration information from the Internet
Service Provider (ISP)
– DNS Proxy for simplified configuration
– PPP over Ethernet (PPPoE) support
• Login capability
– Automatically executes user login for RoadRunner cable modem service or PPP over
Ethernet accounts
• Easy, web-based setup for configuration
• Front panel LEDs for easy monitoring of status and activity
• Flash EPROM for firmware upgrade
• Five-year warranty, one year on power adapter
• Free technical support seven days a week, twenty-four hours a day

Reference Guide for the Model RO318 Cable/DSL Security Router
Introduction 1-3
Security
The Model RO318 router is equipped with several features designed to maintain security, as
described in this section.
• Stateful Packet Inspection for True Firewall Protection
Unlike simple Internet sharing routers, a firewall uses a process called stateful packet
inspection to ensure secure firewall filtering to protect your network from attacks and
intrusions.
• Logging of security incidents
You can configure the Model RO318 router to log suspicious access requests from the Internet
and to e-mail the log to you. You can also configure the router to send an immediate alert
e-mail message to you whenever such an incident occurs.
• PCs Hidden by NAT
Network address translation (NAT) opens a temporary path to the Internet for requests
originating from the local network. Requests originating from outside the LAN are discarded,
preventing users outside the LAN from finding and directly accessing the PCs on the LAN.
• Port Forwarding with NAT
Although NAT prevents Internet locations from directly accessing the PCs on the LAN, the
router allows you to direct incoming traffic to specific PCs based on the service port number
of the incoming request, or to one designated “DMZ” host computer.
Content Filtering
With its content filtering features, the Model RO318 router prevents objectionable content from
reaching your PCs. Its content filtering features include:
• Content filtering by domain or keyword
The Model RO318 router uses content filtering to enforce your network’s Internet access
policies. The router allows you to control access to Internet content by screening for keywords
within Web URLs.
• Logging of inappropriate use
You can configure the Model RO318 router to log access to Web sites and to e-mail the log to
you. You can also configure the router to send an immediate alert e-mail message to you
whenever a local user attempts to access a blocked Web site.

Reference Guide for the Model RO318 Cable/DSL Security Router
1-4 Introduction
Autosensing 10/100 Ethernet
With its internal, 8-port 10/100 switch, the Model RO318 router can connect to either a 10 Mbps
standard Ethernet network or a 100 Mbps Fast Ethernet network. The local LAN interface is
autosensing and is capable of full-duplex or half-duplex operation. In addition, the LAN interface
ports automatically sense whether a connection is a normal or uplink connection (MDI/MDI-X),
eliminating the need for uplink switches or crossover cables.
TCP/IP
The Model RO318 router supports the Transmission Control Protocol/Internet Protocol (TCP/IP)
and Routing Information Protocol (RIP).
For further information about TCP/IP, refer to Appendix B, “Networks, Routing, and Firewall
Basics.”
• IP Address Masquerading by Dynamic NAT+
The Model RO318 router allows several networked PCs to share an Internet account using
only a single IP address, which may be statically or dynamically assigned by your Internet
service provider (ISP). This technique, an extension of Network Address Translation (NAT), is
also known as IP address masquerading and allows the use of an inexpensive single-user ISP
account.
• Automatic Configuration of Attached PCs by DHCP
The Model RO318 router dynamically assigns network configuration information, including
IP, gateway, and domain name server (DNS) addresses, to attached PCs on the LAN using the
Dynamic Host Configuration Protocol (DHCP). This feature greatly simplifies configuration
of LAN-attached PCs.
• DNS Proxy
When DHCP is enabled and no DNS addresses are specified, the router provides its own
address as a DNS server to the attached PCs. The router obtains actual DNS addresses from
the ISP during connection setup and forwards DNS requests from the LAN.
• PPP over Ethernet (PPPoE)
PPP over Ethernet is a protocol for connecting remote hosts to the Internet over an always-on
connection by simulating a dial-up connection.