Netopia R910 Product information sheet

Netopia
™
R910 Ethernet Router
for DSL and Cable Modems
User’s Reference Guide

Copyright
©2000, Netopia, Inc., v.0800
All rights reserved. Printed in the U.S.A.
This manual and any associated artwork, software, and product designs are copyrighted with
all rights reserved. Under the copyright laws such materials may not be copied, in whole or
part, without the prior written consent of Netopia, Inc. Under the law, copying includes
translation to another language or format.
Netopia, Inc.
2470 Mariner Square Loop
Alameda, CA 94501-1010
U.S.A.
Part Number
For additional copies of this electronic manual, order Netopia part number 6161087-PF-01
Printed Copies
For printed copies of this manual, order Netopia part number TER910/Doc
(P/N 6161087-00-01)

G
B
Chapter 1 — Introduction..........................................................1-9
Overview ........................................................................ 1-9
Features and capabilities ................................................ 1-9
How to use this guide ................................................... 1-10
Chapter 2 — Setting Up Internet Services ...............................2-11
Deciding on an ISP account ...........................................2-11
DSL and cable modems.......................................2-11
Obtaining information from the ISP.................................2-11
Local LAN IP address information to obtain ...........2-12
Chapter 3 — Making the Physical Connections........................3-13
Find a location..............................................................3-13
What you need .............................................................3-14
Identify the connectors and attach the cables .................3-14
Netopia R910 Ethernet Router back panel ports .............3-15
Netopia R910 Ethernet Router status lights....................3-16
Chapter 4 — Connecting to Your Local Area Network ...............4-17
Overview ...................................................................... 4-17
Network Model....................................................4-17
Readying computers on your local network...................... 4-18
Connecting to an Ethernet network.................................4-20
10Base-T............................................................ 4-20
Chapter 5 — Configuring TCP/IP.............................................5-23
Hardware and operating system requirements ................5-23
Configuring TCP/IP on Windows 95 or 98 .......................5-24
Configuring TCP/IP on a Macintosh Computer ................. 5-26
Chapter 6 — Console-Based Managment ................................. 6-31
Connecting through a Telnet session ..............................6-32
Configuring Telnet software .................................. 6-33
CC
CCoo oonn nntt ttee eenn nntt ttss ss

iv User’s Reference Guide
Connecting a console cable to your router ......................6-33
Navigating through the console screens .........................6-34
Chapter 7 — Easy Setup .........................................................7-35
Easy Setup console screens.......................................... 7-35
Accessing the Easy Setup console screens ...........7-35
Quick Easy Setup connection path ................................. 7-37
If your ISP supports DHCP ................................... 7-37
If your ISP doesn’t support DHCP ......................... 7-37
More Easy Setup options .............................................. 7-39
WAN Ethernet Configuration .................................7-39
IP Easy Setup ..................................................... 7-40
Easy Setup Security Configuration ........................7-41
Chapter 8 — WAN and System Configuration ...........................8-43
WAN configuration......................................................... 8-43
System configuration screens ........................................ 8-44
Navigating through the system configuration screens....... 8-45
System configuration features .............................. 8-46
IP setup..............................................................8-47
Filter sets (firewalls) ............................................8-47
IP address serving ..............................................8-47
Date and time.....................................................8-47
Console configuration ..........................................8-48
SNMP (Simple Network Management Protocol) ......8-48
Security.............................................................. 8-48
Upgrade feature set ............................................8-48
Logging ..............................................................8-49
Installing the Syslog client ................................... 8-50
Chapter 9 — IP Setup and Network Address Translation ..........9-51
Network Address Translation features ............................9-51
Using Network Address Translation ................................ 9-53
Associating port numbers with nodes ...................9-55
Network Address Translation guideline.................. 9-55
IP setup .......................................................................9-56
IP subnets ..........................................................9-60

Contents v
G
Static routes.......................................................9-62
IP address serving ........................................................9-66
IP Address Pools ................................................. 9-68
DHCP NetBIOS Options........................................ 9-70
Chapter 10 — Virtual Private Networks (VPN) .......................10-73
Overview .................................................................... 10-73
About PPTP Tunnels ....................................................10-76
PPTP configuration.............................................10-76
Encryption Support ..................................................... 10-79
About IPsec Tunnels.................................................... 10-80
Configuration ....................................................10-80
IP Profile Parameters .........................................10-83
Advanced IP Profile Options................................ 10-84
VPN Default Answer Profile .......................................... 10-85
VPN QuickView ...........................................................10-86
Dial-Up Networking for VPN .......................................... 10-88
Installing Dial-Up Networking ..............................10-88
Creating a new Dial-Up Networking profile ........... 10-89
Configuring a Dial-Up Networking profile ..............10-90
Installing the VPN Client ..............................................10-92
Windows 95 VPN installation.............................. 10-92
Windows 98 VPN installation.............................. 10-92
Connecting using Dial-Up Networking ..................10-93
About ATMP Tunnels.................................................... 10-94
ATMP configuration............................................ 10-94
Allowing VPNs through a Firewall..................................10-98
PPTP example ...................................................10-99
ATMP example ................................................10-102
Chapter 11 — PPP over Ethernet ........................................11-105
PPP Ethernet LAN Reconfiguration.............................. 11-107
Configuration ..................................................11-107
Quick View......................................................11-108

vi User’s Reference Guide
Chapter 12 — Monitoring Tools ...........................................12-109
Quick View status overview ....................................... 12-109
General status ................................................12-110
Status lights ...................................................12-110
Statistics & Logs ......................................................12-111
General Statistics ........................................... 12-111
Event histories ......................................................... 12-112
Routing tables ..........................................................12-114
Served IP Addresses.................................................12-116
System Information................................................... 12-117
SNMP ......................................................................12-118
The SNMP Setup screen ..................................12-118
SNMP traps ....................................................12-119
Chapter 13 — Security .......................................................13-123
Suggested security measures .................................... 13-123
User accounts ..........................................................13-123
Telnet access ........................................................... 13-125
About filters and filter sets ........................................13-126
What’s a filter and what’s a filter set?...............13-126
How filter sets work.........................................13-126
How individual filters work................................13-128
Design guidelines............................................ 13-132
Working with IP filters and filter sets........................... 13-133
Adding a filter set ............................................ 13-134
Viewing filter sets............................................ 13-138
Modifying filter sets ......................................... 13-139
Deleting a filter set..........................................13-139
A sample IP filter set ....................................... 13-139
Firewall tutorial ......................................................... 13-143
General firewall terms ..................................... 13-143
Basic IP packet components ............................ 13-143
Basic protocol types ........................................ 13-143
Firewall design rules........................................13-144
Filter basics.................................................... 13-146

Contents vii
G
Example filters ................................................13-147
RADIUS Client Support.............................................. 13-151
RADIUS client configuration..............................13-151
Chapter 14 — Utilities and Diagnostics ...............................14-155
Ping ......................................................................... 14-156
Trace Route.............................................................. 14-158
Telnet client.............................................................. 14-159
Disconnect Telnet console session ............................14-160
Factory defaults........................................................ 14-160
Transferring configuration and firmware files
with TFTP .................................................................14-160
Updating firmware ........................................... 14-161
Downloading configuration files ........................ 14-162
Uploading configuration files ............................14-163
Transferring configuration and firmware files
with XMODEM........................................................... 14-163
Updating firmware ........................................... 14-164
Downloading configuration files ........................ 14-165
Uploading configuration files ............................14-165
Restarting the system............................................... 14-166
Appendix A — Troubleshooting..............................................A-167
Configuration problems ............................................... A-167
Console connection problems ............................ A-168
Network problems ............................................. A-168
How to reset the router to factory defaults ................... A-169
Power outages............................................................ A-169
Technical support ....................................................... A-170
How to reach us................................................ A-170
Appendix B — Understanding IP Addressing ..........................B-173
What is IP?.................................................................B-173
About IP addressing ....................................................B-173
Subnets and subnet masks ...............................B-174
Example: Using subnets on a Class C
IP internet ........................................................B-175

viii User’s Reference Guide
Example: Working with a Class C subnet.............B-177
Distributing IP addresses ............................................B-177
Technical note on subnet masking......................B-178
Configuration ....................................................B-179
Manually distributing IP addresses .....................B-180
Using address serving .......................................B-180
Tips and rules for distributing IP addresses.........B-180
Nested IP subnets ......................................................B-182
Broadcasts.................................................................B-185
Packet header types..........................................B-185
Appendix C — Understanding Netopia NAT Behavior...............C-187
Network configuration..................................................C-187
Background ................................................................C-187
Exported services .............................................C-191
Important notes ................................................C-192
Configuration ..............................................................C-193
Summary ...................................................................C-194
Appendix D — Binary Conversion Table..................................D-195
Appendix E — Further Reading.............................................. E-197
Appendix F — Technical Specifications and Safety
Information ........................................................................... F-201
Description................................................................. F-201
Power requirements .......................................... F-201
Environment ..................................................... F-201
Software and protocols...................................... F-201
Agency approvals........................................................ F-201
Regulatory notices ............................................ F-202
Important safety instructions ............................. F-203
Index

Introduction 1-9
CC
CChh hhaa aapp pptt ttee eerr rr 11 11
IIIInn
nntt ttrr rroo oodd dduu uucc cctt ttiiiioo oonn nn
Overview
The Netopia R910 Ethernet Router is a stand-alone, multiprotocol broadband router for connecting diverse local
area networks (LANs) to the Internet and other remote networks. Combining the Netopia R910 with a cable or
DSL modem provides businesses with a low-cost connection to the Internet while retaining the power of a
router. Once your Netopia R910 Ethernet Router is connected to your LAN and an Internet connection device
such as a cable or a DSL modem, and your account is activated by your network service provider, you will have
a high-speed connection between your LAN and the telephone company’s network of high-speed digital
facilities.
This section covers the following topics:
■
“Features and capabilities” on page 1-9
■
“How to use this guide” on page 1-10
Features and capabilities
The Netopia R910 Ethernet Router provides the following features:
■
Always-on connection eliminates dialing and provides lower, more predictable transmission costs.
■ Interconnects with cable modems or DSL modems or bridges that have an Ethernet port.
■
Connectivity to support Ethernet LANs via built-in 4-port 10Base-T hub.
■
Support for Network Address Translation (NAT) and MultiNAT, allowing all computers and IP hosts on the
LAN to appear as one or more IP addresses to the ISP on the WAN link.
■ Support for DHCP, allowing automatic assignment of IP addresses on the LAN or WAM and simplyfying
configuration and management.
■
Support for VPN client and server, supporting remote VPN clients as well as providing a single connection
for all or select VPN clients on the LAN. Supports PPTP-based VPN for interoperability with Windows Dial-Up
Networking and IPSec for secure public key encryption.
■ Status lights (LEDs) for easy monitoring and troubleshooting.
■
Support for IP routing for Internet and intranet connectivity.
■
Support for console-based management over Telnet or serial cable connection.
■
Support for remote configuration by your reseller, your network administrator, or technicians at Netopia,
Inc., via IP network.
■
Wall-mountable, bookshelf (side-stackable), or desktop-stackable design for effective space usage.

1-10 User’s Reference Guide
How to use this guide
This guide is designed to be your single source for information about your Netopia R910 Ethernet Router. It is
intended to be viewed on-line, using the powerful features of the Adobe Acrobat Reader. The information display
has been deliberately designed to present the maximum information in the minimum space on your screen. You
can keep this document open while you perform any of the procedures described, and find useful information
about the procedure you are performing.
If you prefer to work from hard copy rather than on-line documentation, you can also print out all of the manual,
or individual sections. The pages are formatted to print on standard 8 1/2 by 11 inch paper. We recommend
that you print on three-hole punched paper, so you can put the pages in a binder for future reference. For your
convenience, a printed copy can be purchased from Netopia. Order part number TER910/Doc.
This guide is organized into chapters describing the Netopia R910’s advanced features. You may want to read
each chapter’s introductory section to familiarize yourself with the various features available.
Use the guide’s table of contents and index to locate informational topics.

Setting Up Internet Services 2-11
CC
CChh hhaa aapp pptt ttee eerr rr 22 22
SS
SSee eett tttt ttiiiinn nngg gg UU UUpp pp IIIInn nntt ttee eerr rrnn nnee eett tt SS SSee eerr rrvv vviiiicc ccee eess ss
This chapter describes how to obtain and set up Internet services.
This section covers the following topics:
■
“Deciding on an ISP account” on page -11
■ “Obtaining information from the ISP” on page -11
Deciding on an ISP account
Your ISP may offer various Internet access account plans. Typically, these plans vary by usage charges and the
number of host IP addresses supplied. Evaluate your networking needs and discuss them with your ISP before
deciding on a plan for your network.
DSL and cable modems
Many ISPs offer economical service plans that connect to the DSL or cable network using a DSL or cable
modem. Unlike V.90 or V.32 analog modems, which typically were installed directly into your computer or were
connected serially, DSL and cable modems typically connect over Ethernet. With Ethernet, your ISP can offer
you a service connecting one or more computers. Using NAT and MultiNAT features, you can configure your
Netopia router to give all computers, printers, and other IP hosts access to the Internet using one or a limited
number of IP addresses. This means that you have more flexibility in selecting ISP account types. The most
affordable single IP account may be sufficient for your needs. With the router configured for NAT all users on
the LAN have access to the Internet, yet you’re using just the one IP address assigned by your ISP.
The Netopia router offers another benefit to DSL and cable modem users. Because a DSL or cable modem
connects your computers directly to the Internet with a static IP address, you are more vulnerable to hackers or
would-be intruders. The Netopia R910 Ethernet Router is installed between the DSL or cable modem and the
computer, printer, and other IP hosts on the LAN, and induces a firewall to deflect hackers and intruders.
Obtaining information from the ISP
After your account is set up, the ISP should send you the IP parameter information that will help you configure
the Netopia R910.

2-12 User’s Reference Guide
Local LAN IP address information to obtain
Your ISP will need to provide you with the following information:
■ The default gateway IP address
■
Remote IP address
■
Local IP address or addresses and subnet mask
Note: In a single IP address service, your ISP will refer to your computer’s IP address. However, when your
connection is configured with a router, this becomes the router’s WAN IP address.
■
Primary and secondary domain name server (DNS) IP addresses
■ Domain name (usually the same as the ISP’s domain name unless you have registered for your own
individual domain name)
Note: The default gateway, WAN address and mask, DNS, and domain name are all obtainable via WAN DHCP,
if your ISP supports it.
With Network Address Translation
If you are using NAT, you should obtain the following:
■
If you are connecting to a remote site using Network Address Translation on your router, your provider will
not define the IP address information on your local LAN. You can define this information based on an IP
configuration that may already be in place for the existing network. Alternatively, you can use the default IP
address range used by the router, where 192.168.1.1 is the default IP address of the router.
Without Network Address Translation
If you are not using Network Address Translation, you will need to obtain all of the local LAN IP address
information from your ISP and you will need to pay for an IP address for each device on the network.
If you are not using NAT, you should obtain:
■ The Ethernet IP address for your Netopia R910
■
The Ethernet IP subnet mask for your Netopia R910
■
An IP address for each device on your network, in the same network range as the Netopia R910.

Making the Physical Connections 3-13
CC
CChh hhaa aapp pptt ttee eerr rr 33 33
MM
MMaa aakk kkiiiinn nngg gg tt tthh hhee ee PP PPhh hhyy yyss ssiiiicc ccaa aallll CC CCoo oonn nnnn nnee eecc cctt ttiiiioo oonn nnss ss
This section tells you how to make the physical connections to your Netopia R910 Ethernet Router. This section
covers the following topics:
■
“Find a location” on page 3-13
■
“What you need” on page 3-14
■
“Identify the connectors and attach the cables” on page 3-14
■
“Netopia R910 Ethernet Router back panel ports” on page 3-15
■
“Netopia R910 Ethernet Router status lights” on page 3-16
Find a location
When choosing a location for the Netopia Router, consider:
■ Available space and ease of installation
■
Physical layout of the building and how to best use the physical space available for connecting your Netopia
Router to the LAN
■
Available wiring and jacks
■ Distance from the point of installation to the next device (length of cable or wall wiring)
■
Ease of access to the front of the unit for configuration and monitoring
■
Ease of access to the back of the unit for checking and changing cables
■
Cable length and network size limitations when expanding networks
For small networks, install the Netopia R910 near one of the LANs. For large networks, you can install the
Netopia R910 in a wiring closet or a central network administration site. In most cases the router will be near
the cable or DSL modem which is near the cable or DSL wall outlet. You could pull a line from the wall outlet to
a wiring closet if you store the modem and router there.

3-14 User’s Reference Guide
What you need
Locate all items that you need for the installation.
Included in your router package are:
■
The Netopia R910 Ethernet Router
■
A power adapter and cord with a mini-DIN8 connector
■
Two RJ-45 cables (one for the Ethernet port on your PC; one for the Line port on the router)
■
A DB-9 console cable
■
A cross-over cable
■
The Netopia CD containing an Internet browser, Adobe Acrobat Reader for Windows and Macintosh, ZTerm
terminal emulator software and NCSA Telnet for Macintosh, and documentation
You will need:
■
A Windows 95, 98, 2000, or NT–based PC or a Macintosh computer with Ethernet connectivity for
configuring the Netopia R910. This may be built-in Ethernet or an add-on card, with TCP/IP installed and
configured. See “Hardware and operating system requirements” on page 5-23.
■
An Internet modem such as a cable modem or DSL bridge connected to the appropriate wall outlet for your
Internet service source. Your Internet connection device must have a 10Base-T Ethernet port for
connecting it to the router’s Line port.
Identify the connectors and attach the cables
Identify the connectors and switches on the back panel and attach the necessary Netopia Router cables.
The figure below displays the back of the Netopia R910 Ethernet Router.
Netopia R910 Ethernet Router back panel
1. Connect the mini-DIN8 connector from the power adapter to the power port, and plug the other end into an
electrical outlet.
Ethernet Console Power
Line 1
4 port Ethernet hub
Line 1 port
Console port
Power port

Making the Physical Connections 3-15
2. Connect one end of one of the RJ-45 cables to the Line 1 port and the other end to your Internet modem’s
Ethernet port. DO NOT CONNECT IT DIRECTLY TO A TELCO LINE OUTLET.
3. Connect one end of one of the RJ-45 cables to any of the Ethernet hub ports on the router, and the other
end to the Ethernet port of your PC.
If you are connecting the router to an existing Ethernet hub, use a cross-over cable.
You should now have: the power adapter plugged in; the Ethernet cable connected between the router and
your computer; and the Line cable connected between the router and your Internet modem.
Netopia R910 Ethernet Router back panel ports
The following table describes all the Netopia R910 Ethernet Router back panel ports.
Port Description
Power port A mini-DIN8 power adapter cable connection.
Line port The dedicated Ethernet port for your connection to your Internet connection
device’s Ethernet port.
Console port A DB-9 console port for a direct serial connection to the console screens. You
can use this if you are an experienced user. See “Connecting a console cable to
your router” on page 6-33.
4-port Ethernet hub Four Ethernet jacks. You will use one of these to configure the Netopia R910.
For a new installation, use the Ethernet connection. Alternatively, you can use
the console connection to run console-based management using a direct serial
connection. You can either connect your computer directly to any of the Ethernet
ports on the router, or connect both your computer and the router to an existing
Ethernet hub on your LAN.

3-16 User’s Reference Guide
Netopia R910 Ethernet Router status lights
The figure below represents the Netopia R910 status light (LED) panel.
Netopia R910 LED front panel
The following table summarizes the meaning of the various LED states and colors:
When this happens... the LEDs...
Power is on 1 is green.
Data is transmitted or received 8 flashes orange.
The WAN interface is operational 9 is green.
The WAN interface is inactive 9 is off.
The WAN interface detects a failure after line activation 9 flashes red.
Calls are setting up 10 flashes green.
Data calls connect 10 is green.
The line is carrying data traffic 10 flashes orange.
The Ethernet port is connected to the LAN 14, 15, 16, and 17 are green.
There is activity on the respective Ethernet ports 14, 15, 16, and 17 flash green.
Note: The Channel 2 LED and the unlabeled LEDs are not used.
8 9 10 12 13 14 15 1617
Management
Ready
Channel 1
Link/
Receive
Collision
Traffic
WAN Ethernet
Power
1

Connecting to Your Local Area Network 4-17
CC
CChh hhaa aapp pptt ttee eerr rr 44 44
CC
CCoo oonn nnnn nnee eecc cctt ttiiiinn nngg gg tt ttoo oo YY YYoo oouu uurr rr LL LLoo oocc ccaa aallll rr rree eeaa aa NN NNee eett ttww wwoo oorr rrkk kk
This chapter describes how to physically connect the Netopia R910 to your local area network (LAN). Before you
proceed, make sure the Netopia R910 is properly configured. You can customize the router’s configuration for
your particular LAN requirements using console-based management (see “Console-Based Management” on
page 6-31).
This section covers the following topics:
■“Overview” on page 4-17
■“Readying computers on your local network” on page 4-18
■“Connecting to an Ethernet network” on page 4-20
Overview
You can connect the Netopia R910 to an IP network that uses Ethernet.
Network Model
The following diagrams illustrate network models for typical deployments of the Netopia R910 Ethernet Router
as an Internet access device.
Before
With a DSL or cable modem, you can connect a single computer to the Internet.
using a DSL modem
using a cable modem

4-18 User’s Reference Guide
After
Using the Netopia R910 Ethernet Router, you can connect multiple computers to the Internet with a single user
account.
using a DSL modem with a Netopia R910
using a cable modem with a Netopia R910
While this network model is typical, other network models are possible. For example, you may choose to attach
the Ethernet WAN port to an external Ethernet hub connected to a number of workstations.
Readying computers on your local network
PC and Macintosh computers must have certain components installed before they can communicate through
the Netopia R910. The following illustration shows the minimal requirements for a typical PC or Macintosh
computer.

Connecting to Your Local Area Network 4-19
Application software: This is the software you use to send e-mail, browse the World Wide Web, read
newsgroups, etc. These applications may require some configuration. Examples include the Eudora e-mail client
and the Web browsers Microsoft Internet Explorer and Netscape Navigator.
TCP/IP stack: This is the software that lets your PC or Macintosh communicate using Internet protocols.
TCP/IP stacks must be configured with some of the same information you used to configure the Netopia R910.
There are a number of TCP/IP stacks available for PC computers. Windows 95 includes a built-in TCP/IP stack.
See “Configuring TCP/IP on Windows 95 or 98” on page 5-24. Macintosh computers use either MacTCP or
Open Transport. See “Configuring TCP/IP on a Macintosh Computer” on page 5-26.
Ethernet: Ethernet hardware and software drivers enable your PC or Macintosh computer to communicate on
the LAN.
EtherTalk: This is an AppleTalk protocol used over Ethernet.
Once the Netopia R910 is properly configured and connected to your LAN, PC and Macintosh computers that
have their required components in place will be able to connect to the Internet or other remote IP networks.
Ethernet/EtherTalk Driver
TCP/IP stack
Application software
Your PC
or Macintosh
computer
To the Netopia R910

4-20 User’s Reference Guide
Connecting to an Ethernet network
The Netopia R910 supports Ethernet connections through its four Ethernet ports. The router automatically
detects which Ethernet port is in use.
You can connect 10Base-T networks to the Netopia R910. The following table displays some important
attributes of these connections.
10Base-T
You can connect a standard 10Base-T Ethernet network to the Netopia R910 using any of its available Ethernet
ports.
Netopia R910 Ethernet Router back panel
Attribute 10Base-T
Max. length of backbone,
branch, or end to end (cable
length)
330 feet
(100 meters)
Cable type Twisted pair
(10Base-T)
Netopia R910 port used Ethernet
Other restrictions No daisy
chain
Ethernet Console Power
Line 1
4 port Ethernet hub
Line 1 port
Console port
Power port