Netopia Firmware 4000-Series Quick start guide

NN
NNee eett ttoo oopp ppiiiiaa aa
®®
®®
FF
FFiiiirr rrmm mmww wwaa aarr rree ee UU UUss ssee eerr rr GG GGuu uuiiiidd ddee ee
NN
NNee eett ttoo oopp ppiiiiaa aa
®®
®®
44
4400 0000 0000 00-- --SS SSee eerr rriiiiee eess ss EE EEqq qquu uuiiiipp ppmm mmee eenn nntt tt
NN
NNee eett ttoo oopp
ppiiiiaa aa FF FFiiiirr rrmm mmww wwaa aarr rree ee VV VVee eerr rrss ssiiiioo oonn nn 55 55....44 44

Copyright
Copyright© 2004, Netopia, Inc. Netopia and the Netopia logo are registered trademarks
belonging to Netopia, Inc., registered U.S. Patent and Trademark Office. Broadband Without
Boundaries and 3-D Reach are trademarks belonging to Netopia, Inc. All other trademarks
are the property of their respective owners. All rights reserved.
Netopia, Inc.
6001 Shellmound Street
Emeryville, CA 94608
U.S.A.
Part Number
Netopia part number 6161184-00-01

Contents iii
G
Chapter 1 — Introduction..........................................................1-1
What’s New in Netopia Firmware Version 5.4 ................... 1-1
Console-based Management........................................... 1-2
Netopia Console Menus ................................................. 1-2
Netopia Models ............................................................. 1-3
Screen differences .............................................. 1-3
Connecting through a Telnet Session............................... 1-4
Configuring Telnet software................................... 1-4
Connecting a Console Cable to your Equipment................ 1-5
Navigating through the Console Screens.......................... 1-7
Chapter 2 — WAN and System Configuration .............................2-1
WAN Configuration ......................................................... 2-1
ADSL Line Configuration screen ............................ 2-2
SDSL/IDSL Configuration screen........................... 2-3
G.SHDSL Line Configuration screen....................... 2-6
T1 Line Configuration screen ................................ 2-7
Frame Relay Configuration .............................................. 2-9
Frame Relay DLCI configuration........................... 2-11
Multiple ATM Permanent Virtual Circuits ........................ 2-16
Multiple ATM PVC overview ................................. 2-16
Multiple ATM PVC configuration ........................... 2-16
Editing circuits................................................... 2-20
Changing a circuit .............................................. 2-21
Monitoring multiple virtual circuits....................... 2-22
Creating a New Connection Profile................................. 2-24
The Default Profile ....................................................... 2-28
IP parameters (default profile) screen.................. 2-29
Scheduled Connections................................................ 2-29
Viewing scheduled connections........................... 2-30
Adding a scheduled connection........................... 2-31
Set Weekly Schedule.......................................... 2-32
Set Once-Only Schedule ..................................... 2-33
CC
CCoo oonn nntt ttee eenn nntt ttss ss

iv Firmware User Guide
Modifying a scheduled connection....................... 2-34
Deleting a scheduled connection......................... 2-34
System Configuration Screens ...................................... 2-35
System configuration features............................. 2-35
IP Setup............................................................ 2-36
Filter Sets ......................................................... 2-36
IP Address Serving............................................. 2-36
Network Address Translation (NAT) ...................... 2-36
Stateful Inspection firewall ................................. 2-37
Date and time ................................................... 2-42
Console Configuration ........................................ 2-43
SNMP (Simple Network Management Protocol)..... 2-43
Security............................................................. 2-43
Upgrade Feature Set .......................................... 2-43
RFC-1483 Transparent Bridging........................... 2-44
Logging ............................................................. 2-46
Chapter 3 — Multiple Network Address Translation ...................3-1
Overview ....................................................................... 3-1
Features ............................................................. 3-2
Supported traffic ................................................. 3-5
Support for Microsoft Network (MSN) Messenger ... 3-5
Support for AOL Instant Messenger (AIM)
File Transfer ........................................................ 3-5
MultiNAT Configuration ................................................... 3-6
Easy Setup Profile configuration ............................ 3-6
Server Lists and Dynamic NAT configuration........... 3-7
IP setup .............................................................. 3-7
Modifying map lists............................................ 3-13
Adding Server Lists...................................................... 3-15
Modifying server lists ......................................... 3-18
Deleting a server ............................................... 3-20
Binding Map Lists and Server Lists ............................... 3-21

Contents v
G
IP profile parameters.......................................... 3-21
IP Parameters (WAN Default Profile) .................... 3-23
NAT Associations ......................................................... 3-25
IP Passthrough ............................................................ 3-27
MultiNAT Configuration Example .................................... 3-31
Chapter 4 — Virtual Private Networks (VPNs)............................4-1
Overview ....................................................................... 4-1
About PPTP Tunnels ....................................................... 4-4
PPTP configuration ............................................... 4-4
About IPsec Tunnels....................................................... 4-7
About ATMP Tunnels....................................................... 4-8
ATMP configuration .............................................. 4-8
Encryption Support ...................................................... 4-10
MS-CHAP V2 and 128-bit strong encryption ......... 4-11
ATMP/PPTP Default Profile............................................ 4-11
VPN QuickView ............................................................ 4-13
Dial-Up Networking for VPN ........................................... 4-14
Installing Dial-Up Networking............................... 4-14
Creating a new Dial-Up Networking profile ............ 4-15
Configuring a Dial-Up Networking profile ............... 4-16
Installing the VPN Client ............................................... 4-17
Windows 95 VPN installation .............................. 4-17
Windows 98 VPN installation .............................. 4-18
Connecting using Dial-Up Networking................... 4-19
Allowing VPNs through a Firewall................................... 4-19
PPTP example.................................................... 4-20
ATMP example ................................................... 4-22
Windows Networking Broadcasts................................... 4-25
Chapter 5 — Internet Key Exchange (IKE) IPsec
Key Management for VPNs ...................................5-1
Overview ....................................................................... 5-1
Internet Key Exchange (IKE) Configuration........................ 5-2

vi Firmware User Guide
Adding an IKE Phase 1 Profile ............................... 5-4
Changing an IKE Phase 1 Profile ........................... 5-8
Key Management........................................................... 5-9
IPsec WAN Configuration Screens ................................. 5-18
IPsec Manual Key Entry................................................ 5-19
VPN Quickview................................................... 5-20
WAN Event History Error Reporting...................... 5-21
Chapter 6 — IP Setup ...............................................................6-1
IP Setup........................................................................ 6-2
IP subnets........................................................... 6-4
Static routes ....................................................... 6-6
RIP-2 MD5 Authentication............................................. 6-10
Overview ........................................................... 6-10
Authentication configuration................................ 6-10
Connection Profiles and Default Profile ................ 6-16
IP Address Serving ...................................................... 6-17
IP Address Pools................................................ 6-20
DHCP NetBIOS Options ...................................... 6-22
More Address Serving Options...................................... 6-24
Configuring the IP Address Server options ........... 6-25
DHCP Relay Agent........................................................ 6-30
Connection Profiles ...................................................... 6-32
Multicast Forwarding.................................................... 6-34
Chapter 7 — Line Backup .........................................................7-1
External Dial Backup Support ......................................... 7-2
Configuring External Dial Backup..................................... 7-2
WAN Configuration ......................................................... 7-2
Backup Configuration screen ................................ 7-5
Connection Profiles ........................................................ 7-7
Using Scheduled Connections with Backup ...................... 7-8
Management/Statistics................................................ 7-10
QuickView ................................................................... 7-12

Contents vii
G
Event Logs .................................................................. 7-12
SNMP Support ............................................................ 7-13
Backup Default Gateway............................................... 7-13
Backup Configuration screen .............................. 7-13
IP Setup screen ................................................. 7-15
Backup Management/Statistics .......................... 7-16
QuickView ......................................................... 7-17
Chapter 8 — Voice Configuration...............................................8-1
Introduction................................................................... 8-1
Explanation of terms ............................................ 8-1
Configuring the Voice Features........................................ 8-2
Chapter 9 — Monitoring Tools ...................................................9-1
Quick View Status Overview............................................ 9-1
General status..................................................... 9-2
Current status ..................................................... 9-3
Status lights........................................................ 9-3
Statistics & Logs ........................................................... 9-4
Event Histories .............................................................. 9-4
IP Routing Table............................................................. 9-7
General Statistics .......................................................... 9-7
System Information........................................................ 9-9
Simple Network Management Protocol (SNMP) - V2c ...... 9-10
Enterprise-specific SNMP Changes ...................... 9-10
The SNMP Setup screen..................................... 9-11
SNMP traps....................................................... 9-12
Chapter 10 — Security ...........................................................10-1
Suggested Security Measures....................................... 10-1
Console Tiered Access – Two Password Levels .............. 10-2
UPnP Support.................................................... 10-2
Superuser configuration ..................................... 10-3
Limited user configuration .................................. 10-4

viii Firmware User Guide
Advanced Security Options ................................. 10-5
User access password ....................................... 10-7
User menu differences....................................... 10-8
User Accounts ........................................................... 10-15
Telnet Access ............................................................ 10-17
About Filters and Filter Sets........................................ 10-18
What’s a filter and what’s a filter set? ............... 10-18
How filter sets work ......................................... 10-18
How individual filters work ................................ 10-20
Design guidelines ............................................ 10-25
Working with IP Filters and Filter Sets .......................... 10-26
Adding a filter set............................................. 10-27
Deleting a filter set .......................................... 10-31
A sample filter set............................................ 10-31
Policy-based Routing using Filtersets........................... 10-34
TOS field matching........................................... 10-35
Firewall Tutorial ......................................................... 10-37
General firewall terms ...................................... 10-37
Basic IP packet components............................. 10-37
Basic protocol types......................................... 10-37
Firewall design rules ........................................ 10-38
Filter basics..................................................... 10-40
Example filters................................................. 10-41
Configuration Management ......................................... 10-44
TFTP and X-Modem........................................... 10-47
Call Filtering .............................................................. 10-48
Chapter 11 — Utilities and Diagnostics ...................................11-1
Ping ............................................................................ 11-2
Trace Route................................................................. 11-4
Telnet Client ................................................................ 11-5
Factory Defaults .......................................................... 11-6
Transferring Configuration and Firmware Files with TFTP.. 11-6

Contents ix
G
Updating firmware.............................................. 11-7
Downloading configuration files ........................... 11-8
Uploading configuration files ............................... 11-9
Transferring Configuration and Firmware Files
with XMODEM.............................................................. 11-9
Updating firmware............................................ 11-10
Downloading configuration files ......................... 11-11
Uploading configuration files ............................. 11-11
Restarting the System ............................................... 11-12
T1 Line Statistics and Diagnostics .............................. 11-12
Appendix A — Troubleshooting..................................................A-1
Configuration Problems .................................................. A-1
Console connection problems ............................... A-2
Network problems................................................ A-2
How to Reset the Router to Factory Defaults.................... A-3
Power Outages .............................................................. A-3
Technical Support .......................................................... A-4
How to reach us .................................................. A-4
Appendix B — Understanding IP Addressing ..............................B-1
What is IP?.................................................................... B-1
About IP Addressing ....................................................... B-1
Subnets and subnet masks .................................. B-2
Example: Using subnets on a Class C IP internet ... B-3
Example: Working with a Class C subnet................ B-5
Distributing IP Addresses ............................................... B-5
Technical note on subnet masking ........................ B-6
Configuration ....................................................... B-7
Manually distributing IP addresses ........................ B-8
Using address serving.......................................... B-8
Tips and rules for distributing IP addresses ........... B-9
Nested IP Subnets....................................................... B-11
Broadcasts.................................................................. B-14

x Firmware User Guide
Packet header types .......................................... B-14
Appendix C — Binary Conversion Table......................................C-1
Index

Introduction 1-1
CC
CChh hhaa aapp pptt ttee eerr rr 11 11
IIIInn
nntt ttrr rroo oodd dduu uucc cctt ttiiiioo oonn nn
This Firmware User Guide covers the advanced features of the Netopia 4000-Series Router and IAD families.
Your Netopia equipment offers advanced configuration features in addition to Easy Setup. The advanced feature
screens are accessed through the Main Menu of the console configuration screen. This Firmware User Guide
documents the advanced features, including advanced testing, security, monitoring, and configuration features.
This Firmware User Guide should be used as a companion to the Easy Setup configuration instructions in the
Netopia Router Getting Started guide or the applicable User’s Reference Guide . You should read the Getting
Started guide before reading this Firmware User Guide .
Note:
This Guide also includes descriptions of new features and changes to the functionality of the firmware
for the current release, Netopia Firmware Version 5.4. Such descriptions supersede the descriptions of the
corresponding features given in the original User’s Reference Guide , if any, accompanying your product.
What’s New in Netopia Firmware Version 5.4
New in Netopia Firmware Version 5.4 are the following features:
■
Multiple Data Link Encapsulation support on ATM-based WAN interfaces
See “Multiple Data Link Encapsulation Settings” on page 2-25.
■
Stateful Inspection Firewall
See “Stateful Inspection firewall” on page 2-37.
■ IP Passthrough support
See “IP Passthrough” on page 3-27.
■
Universal Plug-and-Play support (UPnP™)
See “UPnP Support” on page 10-2.

1-2 Firmware User Guide
Console-based Management
Console-based management is a fast menu-driven interface for the capabilities built into the Netopia Firmware
Version 5.4. Console-based management provides access to a wide variety of features that the router supports.
You can customize these features for your individual setup. This chapter describes how to access the
console-based management screens.
This section covers the following topics:
■
“Netopia Console Menus” on page 1-2
■
“Netopia Models” on page 1-3
■
“Connecting through a Telnet Session” on page 1-4
■
“Connecting a Console Cable to your Equipment” on page 1-5
■ “Navigating through the Console Screens” on page 1-7
Netopia Console Menus
Console-based management screens contain the main entry points to the Netopia Firmware Version 5.4
configuration and monitoring features. The entry points are displayed in the Main Menu shown below:
■
The Easy Setup menus display and permit changing the values contained in the default connection profile.
You can use Easy Setup to initially configure the router directly through a console session.
Easy Setup menus contain up to five descendant screens for viewing or altering these values. The number
of screens depends on whether you have optional features installed.
The Getting Started manual describes the Easy Setup menus to get you up and running quickly.
■
The WAN Configuration menu displays and permits changing your connection profile(s), Virtual Private
Networks (VPNs) and default profile, creating or deleting additional connection profiles, and configuring or
Netopia Router
Easy Setup...
WAN Configuration...
System Configuration...
Utilities & Diagnostics...
Statistics & Logs...
Quick Menus...
Quick View...
Return/Enter goes to Easy Setup -- minimal configuration.
You always start from this main screen.
Netopia IAD
Easy Setup...
WAN Configuration...
System Configuration...
Voice Configuration...
Utilities & Diagnostics...
Statistics & Logs...
Quick Menus...
Quick View...
Return/Enter goes to Easy Setup -- minimal configuration.
You always start from this main screen.
Netopia Data Router Netopia IAD

Introduction 1-3
reconfiguring the manner in which you may be using the router to connect to more than one service
provider or remote site. See “WAN Configuration,” beginning on page 2-1. See also Chapter 4, “Virtual
Private Networks (VPNs).”
■
The System Configuration menus display and permit changing:
See “System Configuration Screens,” beginning on page 2-35.
■
For IADs, the Voice Configuration menus provide the tools for configuring the voice telephone features
available in Netopia Firmware Version 5.4. See Chapter 8, “Voice Configuration.”
■
The Utilities & Diagnostics menus provide a selection of seven tools for monitoring and diagnosing the
router's behavior, as well as for updating the firmware and rebooting the system. See Chapter 11, “Utilities
and Diagnostics.”
■
The Statistics & Logs menus display nine sets of tables and device logs that show information about your
router, your network, and their history. See “Statistics & Logs,” beginning on page 9-4.
■
The Quick Menus screen is a shortcut entry point to the most commonly used configuration menus that
are accessed through the other menu entry points.
■
The Quick View menu displays at a glance current real-time operating information about your router. See
“Quick View Status Overview” on page 9-1.
Netopia Models
This Firmware User Guide covers all of the Netopia 4000-Series Router and IAD models. However some
information in this guide will only apply to a specific model.
Screen differences
Because different Netopia 4000-Series models offer many different features and interfaces, the options shown
on some screens in this Firmware User Guide may not appear on your own particular model’s console screen.
These differences are noted throughout the manual.
• IP Setup • Filter Sets • IP Address Serving
• Network Address Translation (NAT) • Stateful Inspection • Date and Time
• Console Configuration • SNMP (Simple Network
Management Protocol)
• Security
• Upgrade Feature Set • Change Device to a Bridge • Logging

1-4 Firmware User Guide
Connecting through a Telnet Session
Features of the Netopia Firmware Version 5.4 can be configured through the console screens.
Before you can access the console screens through Telnet, you must have:
■
A network connection locally to the router or IP access to the router.
Note:
Alternatively, you may have a direct serial console cable connection using a provided console cable and
the Console port on the back of the router. Some models do not have a console port. For more information on
attaching the console cable, see “Connecting a Console Cable to your Equipment” on page 1-5.
■
Telnet software installed on the computer you will use to configure the router
Configuring Telnet software
If you are configuring your device using a Telnet session, your computer must be running a Telnet software
program.
■
If you connect a PC with Microsoft Windows, you can use a Windows Telnet application or simply run Telnet
from the Start menu.
■
If you connect a Macintosh computer, you can use the NCSA Telnet program supplied on the Netopia CD.
You install NCSA Telnet by simply dragging the application from the CD to your hard disk. Mac OS X users
can run Telnet in the Terminal application, found in the Mac OS X Utilities folder.

Introduction 1-5
Connecting a Console Cable to your Equipment
Many Netopia models include a serial console port labeled “Console” on the back panel. You can perform all of
the system configuration activities for your Netopia equipment through a local serial console connection, if
available, using terminal emulation software, such as HyperTerminal provided with Windows 95, 98, 2000, or
NT on the PC, or ZTerm, included on the Netopia CD, for Macintosh computers.
You attach the Netopia device to either a PC or Macintosh computer via the serial port on the computer. (On a
Macintosh computer, the serial port is called the Modem port or Printer port. Since Macintosh computers have
different serial bus connectors, you may need a USB-to-DB-9 or USB-to-serial adapter. These are available from
a variety of third-party manufacturers.) This connection lets you use the computer to configure and monitor the
Router via the console screens.
Example back panel
To connect to your computer for serial console communication, use a console cable appropriate to your
platform:
■
A DB-9 connector end attaches to a PC.
■ A DB-9 end of the Console cable attaches to the Console port.
■
If you connect a PC with Microsoft Windows 95, 98, 2000, or NT, you can use the HyperTerminal
application bundled with the operating system.
■
If you connect a Macintosh computer, you can use the ZTerm terminal emulation program on the supplied
Netopia CD.
DSL
Ethernet
4321 Console Power
Console connection port
DB-9 (male)

1-6 Firmware User Guide
Launch your terminal emulation software and configure the communications software for the values shown in
the table below. These are the default communication parameters that the Netopia Firmware Version 5.4 uses.
Parameter Suggested Value
Terminal type PC : ANSI-BBS
Mac : ANSI, VT-100, or VT-200
Data bits 8
Parity None
Stop bits 1
Speed 9600 - 57600 bits per second
Flow Control None
Note: The router firmware contains an autobaud detection feature. If you are at any screen on the
serial console, you can change your baud rate and press Return (HyperTerminal for the PC
requires a disconnect). The new baud rate is displayed at the bottom of the screen.

Introduction 1-7
Navigating through the Console Screens
Use your keyboard to navigate the Netopia Firmware Version 5.4’s configuration screens, enter and edit
information, and make choices. The following table lists the keys to use to navigate through the console
screens.
To help you find your way to particular screens, some sections in this guide begin with a graphical path guide
similar to the following example:
This particular path guide shows how to get to the Network Protocols Setup screens. The path guide represents
these steps:
1. Beginning in the Main Menu, select System Configuration and press Return. The System Configuration
screen appears.
2. Select IP Setup and press Return. The IP Setup screen appears.
To go back in this sequence of screens, use the Escape key.
To... Use These Keys...
Move through selectable items in a screen or pop-up menu Up, Down, Left, and Right Arrow
Set a change to a selected item or open a pop-up menu of
options for a selected item like entering an upgrade key
Return or Enter
Change a toggle value (Yes/No, On/Off) Tab
Restore an entry or toggle value to its previous value Esc
Move one item up Up arrow or Control + K
Move one item down Down arrow or Control + O
Display a dump of the device event log Control + E
Display a dump of the WAN event log Control + F
Refresh the screen Control + L
Main
Menu IP Setup
System
Configuration

1-8 Firmware User Guide

WAN and System Configuration 2-1
CC
CChh hhaa aapp pptt ttee eerr rr 22 22
WW
WWAA AANN NN aa aann nndd dd SS SSyy yyss sstt ttee eemm mm CC CCoo oon
n
nnff ffiiiigg gguu uurr rraa aatt ttiiiioo oonn nn
This chapter describes how to use the console-based management screens to access and configure advanced
features of your equipment. You can customize these features for your individual setup. These menus provide a
powerful method for experienced users to set up their router’s connection profiles and system configuration.
This section covers the following topics:
■“WAN Configuration” on page 2-1
■“ADSL Line Configuration screen” on page 2-2
■“SDSL/IDSL Configuration screen” on page 2-3
■“G.SHDSL Line Configuration screen” on page 2-6
■“T1 Line Configuration screen” on page 2-7
■“Frame Relay Configuration” on page 2-9
■“Multiple ATM Permanent Virtual Circuits” on page 2-16
■“Creating a New Connection Profile” on page 2-24
■“The Default Profile” on page 2-28
■“Scheduled Connections” on page 2-29
■“System Configuration Screens” on page 2-35
WAN Configuration
To configure your Wide Area Network (WAN) connection, navigate to the WAN Configuration screen from the Main
Menu and select WAN (Wide Area Network) Setup.
The Line Configuration screen appears. The Line Configuration screen will be appropriate to the type of WAN
interface supported by your particular router model.
Main
Menu
WAN
Configuration
WAN
Setup

2-2 Firmware User Guide
ADSL Line Configuration screen
The ADSL Line Configuration screen is shown below:
1. Select Circuit Type and from the pop-up menu choose the type of circuit to which you will be connecting:
Multimode, T1.413, G.dmt/G.lite, or ADI.
2. Select Trellis Coding Enabled. Toggle it to On (the default) or Off.
3. Select Signaling Mode and choose Echo Cancellation or FDM (the default).
4. If you selected Multimode Circuit Type, the Fast Retrain Enabled field appears. Toggle it to On (the default)
or Off.
5. Select Data Link Encapsulation and press Return. The pop-up menu will offer you the choice of PPP or
RFC1483.
6. Press Escape to return to the WAN Configuration screen.
For multiple permanent virtual circuit (PVC) configurations, see “Multiple ATM Permanent Virtual Circuits” on
page 2-16.
ADSL Line Configuration
Circuit Type... Multimode
Trellis Coding Enabled: On
Signaling Mode... FDM
Fast Retrain Enabled: On
Data Link Encapsulation... RFC1483