Netopia 3341-ENT User manual

NN
NNee eett ttoo oopp ppiiiiaa aa
®®
®®
FF
FFiiiirr rrmm mmww wwaa aarr rree ee UU UUss ssee eerr rr GG GGuu uuiiiidd ddee ee
33
3333 3300 0000 00-- --EE EENN NNTT TT EE EEnn nntt ttee eerr rrpp pprr rriiiiss ssee ee-- --SS SSee eerr rriiiiee eess s
s
NN
NNee eett ttoo oopp ppiiiiaa aa FF FFiiiirr rrmm mmww wwaa aarr rree ee VV VVee eerr rrss ssiiiioo oonn nn 88 88....77 77

Copyright
Copyright© 2006, Netopia, Inc. Netopia, the Netopia logo, Broadband Without Boundaries,
and 3-D Reach are registered trademarks belonging to Netopia, Inc., registered U.S. Patent
and Trademark Office. All other trademarks are the property of their respective owners. All
rights reserved.
Netopia, Inc.
6001 Shellmound Street
Emeryville, CA 94608
U.S.A.
Part Number
Netopia part number 6161236-00-01

Contents iii
G
Chapter 1 — Introduction..........................................................1-1
What’s New in 8.7 ......................................................... 1-1
Telnet-based Management.............................................. 1-2
Netopia Telnet Menus .................................................... 1-2
Netopia Models ............................................................. 1-3
Screen differences .............................................. 1-3
Connecting through a Telnet Session............................... 1-4
Configuring Telnet software................................... 1-4
Navigating through the Telnet Screens............................. 1-5
Chapter 2 — WAN Configuration................................................2-1
WAN Configuration ......................................................... 2-1
WAN Ethernet Configuration screen ....................... 2-2
ADSL Line Configuration screen ............................ 2-4
Creating a New Connection Profile................................... 2-9
Advanced Connection Options....................................... 2-15
Configuration Changes Reset WAN Connection..... 2-15
Scheduled Connections...................................... 2-16
Backup Configuration ......................................... 2-21
Diffserv Options ................................................ 2-22
Priority Queuing (TOS bit).................................... 2-25
VRRP Options (WAN Link Failure Detection).......... 2-26
Chapter 3 — System Configuration............................................3-1
System Configuration Features ....................................... 3-1
IP Setup........................................................................ 3-2
Filter Sets ..................................................................... 3-2
IP Address Serving ........................................................ 3-2
Network Address Translation (NAT) .................................. 3-2
Stateful Inspection......................................................... 3-3
Add Exposed Address List .................................... 3-4
Exposed Address Associations ............................. 3-8
VLAN Configuration ...................................................... 3-11
Adding a RADIUS Profile ..................................... 3-13
CC
CCoo oonn nntt ttee ee nn nntt ttss ss

iv Firmware User Guide
Adding Port interfaces ....................................... 3-16
Changing or Deleting a VLAN............................... 3-18
Changing or Deleting an Authentication Server
Configuration ..................................................... 3-18
Configuring additional Authentication Servers....... 3-20
Date and time ............................................................. 3-22
Wireless configuration .................................................. 3-23
Wireless Multimedia (WMM) ............................... 3-25
Enable Privacy ................................................... 3-26
Multiple SSIDs................................................... 3-30
MAC Address Authentication............................... 3-33
Console Configuration .................................................. 3-35
SNMP (Simple Network Management Protocol)............... 3-36
Security ...................................................................... 3-36
Upgrade Feature Set .................................................... 3-36
Router/Bridge Set........................................................ 3-37
IGMP (Internet Group Management Protocol) ................. 3-39
Logging ....................................................................... 3-42
Log event dispositions ....................................... 3-43
Procedure for Default Installation for ICSA firewall certification
of Small/Medium Business Category Module
(ADSL Routers) ............................................................ 3-48
Chapter 4 — Multiple Network Address Translation ...................4-1
Overview ....................................................................... 4-1
Features ............................................................. 4-2
Supported traffic ................................................. 4-5
Support for AOL Instant Messenger (AIM)
File Transfer ........................................................ 4-5
Support for Yahoo Messenger............................... 4-6
MultiNAT Configuration ................................................... 4-6
Easy Setup Profile configuration ............................ 4-6
Server Lists and Dynamic NAT configuration........... 4-7
System Configuration ........................................... 4-7

Contents v
G
Modifying map lists............................................ 4-12
Adding Server Lists...................................................... 4-15
Modifying server lists ......................................... 4-18
Deleting a server ............................................... 4-20
Binding Map Lists and Server Lists ............................... 4-22
IP profile parameters.......................................... 4-22
IP Parameters (WAN Default Profile) .................... 4-24
NAT Associations ......................................................... 4-26
IP Passthrough ............................................................ 4-28
MultiNAT Configuration Example .................................... 4-32
Chapter 5 — Virtual Private Networks (VPNs)............................5-1
Overview ....................................................................... 5-1
About PPTP Tunnels ....................................................... 5-4
PPTP configuration ............................................... 5-4
About IPsec Tunnels....................................................... 5-7
About L2TP Tunnels ....................................................... 5-8
L2TP configuration ............................................... 5-8
About GRE Tunnels ...................................................... 5-11
VPN force-all...................................................... 5-14
About ATMP Tunnels..................................................... 5-15
ATMP configuration ............................................ 5-15
Encryption Support ...................................................... 5-17
MS-CHAP V2 and 128-bit strong encryption ......... 5-18
ATMP/PPTP Default Profile............................................ 5-18
VPN QuickView ............................................................ 5-20
Dial-Up Networking for VPN ........................................... 5-21
Installing Dial-Up Networking............................... 5-21
Creating a new Dial-Up Networking profile ............ 5-22
Configuring a Dial-Up Networking profile ............... 5-23
Windows XP Client Configuration ......................... 5-24
Connecting using Dial-Up Networking................... 5-25
Allowing VPNs through a Firewall................................... 5-25

vi Firmware User Guide
PPTP example.................................................... 5-25
ATMP example ................................................... 5-28
Windows Networking Broadcasts................................... 5-32
Chapter 6 — Internet Key Exchange (IKE) IPsec
Key Management for VPNs ...................................6-1
Overview ....................................................................... 6-1
Internet Key Exchange (IKE) Configuration........................ 6-2
Adding an IKE Phase 1 Profile ............................... 6-4
Changing an IKE Phase 1 Profile ........................... 6-9
Key Management......................................................... 6-11
Advanced IPsec Options ..................................... 6-14
IPsec WAN Configuration Screens ................................. 6-21
IPsec Manual Key Entry................................................ 6-22
VPN Quickview................................................... 6-23
WAN Event History Error Reporting ...................... 6-24
Chapter 7 — IP Setup ...............................................................7-1
IP Setup........................................................................ 7-2
IP subnets........................................................... 7-4
Static routes ....................................................... 7-6
RIP Options ................................................................. 7-10
Overview ........................................................... 7-10
Authentication configuration................................ 7-10
Connection Profiles and Default Profile ................ 7-16
IP Address Serving ...................................................... 7-17
IP Address Pools................................................ 7-20
DHCP NetBIOS Options ...................................... 7-21
More Address Serving Options...................................... 7-23
Configuring the IP Address Server options ........... 7-24
DHCP Relay Agent........................................................ 7-28
Connection Profiles ...................................................... 7-30
Multicast Forwarding.................................................... 7-33
Virtual Router Redundancy (VRRP) ...................... 7-34

Contents vii
G
Additional LANs ................................................. 7-37
Chapter 8 — Line Backup .........................................................8-1
Configuring Backup ........................................................ 8-1
Connection Profiles ........................................................ 8-2
IP Setup.............................................................. 8-7
WAN Configuration ......................................................... 8-8
Backup Configuration screen ................................ 8-9
Using Scheduled Connections with Backup .................... 8-12
Backup Default Gateway............................................... 8-14
Backup Configuration screen .............................. 8-14
IP Setup screen ................................................. 8-16
Backup Management/Statistics.................................... 8-17
QuickView ................................................................... 8-18
Chapter 9 — Monitoring Tools ...................................................9-1
Quick View Status Overview............................................ 9-1
General status..................................................... 9-2
Current status ..................................................... 9-2
Status lights........................................................ 9-3
Statistics & Logs ........................................................... 9-3
Event Histories .............................................................. 9-4
IP Routing Table............................................................. 9-6
General Statistics .......................................................... 9-6
System Information........................................................ 9-8
Simple Network Management Protocol (SNMP)................. 9-9
The SNMP Setup screen....................................... 9-9
SNMP traps....................................................... 9-11
Chapter 10 — Security ...........................................................10-1
Suggested Security Measures....................................... 10-1
Telnet Tiered Access – Two Password Levels ................. 10-2
UPnP Support.................................................... 10-2
Superuser configuration ..................................... 10-3

viii Firmware User Guide
Limited user configuration .................................. 10-4
Advanced Security Options ........................................... 10-6
RADIUS server authentication ............................. 10-7
TACACS+ server authentication........................... 10-8
Warning alerts ................................................... 10-9
User access password ..................................... 10-12
User menu differences..................................... 10-13
Telnet Access ............................................................ 10-20
About Filters and Filter Sets........................................ 10-21
What’s a filter and what’s a filter set? ............... 10-21
How filter sets work ......................................... 10-21
How individual filters work ................................ 10-22
Design guidelines ............................................ 10-27
Working with IP Filters and Filter Sets .......................... 10-28
Adding a filter set............................................. 10-29
Deleting a filter set .......................................... 10-33
A sample filter set............................................ 10-33
Policy-based Routing using Filtersets........................... 10-36
TOS field matching........................................... 10-37
Firewall Tutorial ......................................................... 10-39
General firewall terms ...................................... 10-39
Basic IP packet components............................. 10-39
Basic protocol types......................................... 10-39
Firewall design rules ........................................ 10-40
Filter basics..................................................... 10-42
Example filters................................................. 10-43
Configuration Management ......................................... 10-46
TFTP ............................................................... 10-49
Chapter 11 — Utilities and Diagnostics ...................................11-1
Ping ............................................................................ 11-2
Trace Route................................................................. 11-4
Telnet Client ................................................................ 11-5

Contents ix
G
Factory Defaults .......................................................... 11-6
Transferring Configuration and Firmware Files with TFTP.. 11-6
Updating firmware.............................................. 11-7
Downloading configuration files ........................... 11-7
Uploading configuration files ............................... 11-8
Restarting the System ................................................. 11-8
Appendix A — Troubleshooting..................................................A-1
Configuration Problems .................................................. A-1
Network problems................................................ A-2
How to Reset the Router to Factory Defaults.................... A-3
Power Outages .............................................................. A-3
Technical Support .......................................................... A-3
How to reach us .................................................. A-4
Index

x Firmware User Guide