Option Audio GlobeSurfer 3G User manual

GlobeSurfer 3G
version 3.15.4 R2H
Reference Manual

Copyright © 2005, Option
All information about Option GlobeSurfer 3G may change without prior notice.
Information published in this user guide is accurate at the time of publication.
Although all security precautions were taken during the creation of this user guide
Option is not liable toward persons or organizations for losses or damages caused
either directly or indirectly due to instructions contained in this user guide.
All brands and registered brands are property of their respective owners. Services may
be changed, added, or deleted. For the newest firmware version of your Globesurfer
3G, visit www.option.com
Questions and answers regarding the GlobeSurfer 3G can be found on our Support
website:
http://support.option.com/support/faq.php
Technical questions can be posted after registering through our online Support Web
Form:
http://support.option.com/support/newticket.php
For registering please go to:
http://support.option.com/support/register.php
DOC-UM--12-2005
December, 2005
i

Contents
Table of Contents ii
1 Introduction to GlobeSurfer 3G 1
1.1 AboutThisManual.......................... 2
1.2 BasicSetup............................... 3
1.3 Step 1 - Setting up LAN and WAN Connections . . . . . . . . . 3
1.3.1 LANConnection ....................... 3
1.3.2 WANConnection....................... 4
1.4 Step 2 - PC Network Configuration . . . . . . . . . . . . . . . . . 4
1.4.1 WindowsXP ......................... 5
1.4.2 Windows 2000/98/Me . . . . . . . . . . . . . . . . . . . . 5
1.5 Step 3 - GlobeSurfer 3G Quick Setup . . . . . . . . . . . . . . . . 6
1.5.1 UMTSSetup.......................... 7
1.5.2 WirelessSetup......................... 8
1.5.2.1 Encryption ..................... 8
1.5.3 FirewallSetup......................... 9
1.6 Additional Network Configuration . . . . . . . . . . . . . . . . . 9
1.7 Adding Computers to Your Network . . . . . . . . . . . . . . . . 10
2 GlobeSurfer 3G Management Console 11
2.1 Accessing the GlobeSurfer 3G Management Console . . . . . . . 11
2.2 LeftSidebar .............................. 12
2.3 UMTS Connection Status . . . . . . . . . . . . . . . . . . . . . . . 13
2.4 GettingHelp.............................. 14
2.5 ManagingTables ........................... 14
3 SMS Manager 15
3.1 ReadinganSMS............................ 15
3.2 CreatinganSMS............................ 16
3.2.1 Sentfolder........................... 17
3.3 ArchivinganSMS........................... 17
3.4 SMSTemplates ............................ 17
3.5 SMSSettings.............................. 18
4 Network Connections 19
4.1 WAN UMTS Connection . . . . . . . . . . . . . . . . . . . . . . . 21
4.1.1 General Network Connection Parameters . . . . . . . . . 22
4.1.2 UMTS ............................. 22
4.1.3 PPP Authentication . . . . . . . . . . . . . . . . . . . . . . 23
4.1.4 Internet Protocol Settings . . . . . . . . . . . . . . . . . . 24
ii

4.1.5 DNSServer .......................... 24
4.1.6 Routing ............................ 25
4.1.7 Additional Network Connection Settings . . . . . . . . . 26
4.2 LAN Ethernet Connection . . . . . . . . . . . . . . . . . . . . . . 27
4.2.1 General Network Connection Parameters . . . . . . . . . 27
4.2.2 Internet Protocol . . . . . . . . . . . . . . . . . . . . . . . 28
4.2.3 DNSServer .......................... 29
4.2.4 DHCP ............................. 29
4.2.5 Routing ............................ 31
4.2.6 Additional Network Connection Settings . . . . . . . . . 32
4.3 LAN Wireless Connection . . . . . . . . . . . . . . . . . . . . . . 33
4.3.1 Configuring Your Wireless Network . . . . . . . . . . . . 33
4.3.1.1 Configuring your GlobeSurfer 3G Wireless Con-
nection ....................... 33
4.3.1.2 Configuring Your Wireless Windows XP Client 34
4.3.2 Securing Your Wireless Network . . . . . . . . . . . . . . 39
4.3.2.1 Securing Your Wireless Network with WPA . . 39
4.3.2.2 Connecting a Wireless Windows XP Client to
the Secured Wireless Network . . . . . . . . . . 41
4.3.3 Advanced Wireless Connection Settings . . . . . . . . . . 47
4.3.3.1 General Network Connection Parameters . . . 47
4.3.3.2 Wireless Access Point . . . . . . . . . . . . . . . 47
4.3.3.3 MAC filtering settings . . . . . . . . . . . . . . . 48
4.3.3.4 Advanced Wireless Options . . . . . . . . . . . 48
4.3.3.5 Wireless Security . . . . . . . . . . . . . . . . . 49
4.3.3.6 Internet Protocol . . . . . . . . . . . . . . . . . . 50
4.3.3.7 Additional Network Connection Settings . . . . 51
4.4 LAN Bridge Connection . . . . . . . . . . . . . . . . . . . . . . . 52
4.4.1 General Network Connection Parameters . . . . . . . . . 52
4.4.2 Internet Protocol . . . . . . . . . . . . . . . . . . . . . . . 53
4.4.3 BridgeSettings ........................ 54
4.4.4 DNSServer .......................... 54
4.4.5 DHCP ............................. 55
4.4.6 Routing ............................ 57
4.4.7 Additional Network Connection Settings . . . . . . . . . 57
4.5 VPNPPTP............................... 59
4.5.1 Creating a PPTP Client Connection . . . . . . . . . . . . 59
4.5.2 Creating a PPTP Server Connection . . . . . . . . . . . . 61
4.5.3 Configuring a PPTP Connection . . . . . . . . . . . . . . 64
4.5.3.1 General ....................... 64
4.5.3.2 PPP Settings . . . . . . . . . . . . . . . . . . . . 65
4.5.3.3 PPP Authentication . . . . . . . . . . . . . . . . 65
4.5.3.4 PPP Encryption . . . . . . . . . . . . . . . . . . 66
4.5.3.5 Internet Protocol . . . . . . . . . . . . . . . . . . 66
4.5.3.6 DNSServer..................... 67
4.5.3.7 Routing....................... 68
4.5.3.8 Internet Connection Firewall . . . . . . . . . . . 69
4.6 VPNL2TP ............................... 70
4.6.1 Creating an L2TP Connection . . . . . . . . . . . . . . . . 70
4.6.2 Configuring an L2TP Connection . . . . . . . . . . . . . . 72
iii

4.6.2.1 General ....................... 72
4.6.2.2 PPP Settings . . . . . . . . . . . . . . . . . . . . 73
4.6.2.3 PPP Authentication . . . . . . . . . . . . . . . . 74
4.6.2.4 PPP Encryption . . . . . . . . . . . . . . . . . . 74
4.6.2.5 PPP Compression . . . . . . . . . . . . . . . . . 75
4.6.2.6 Internet Protocol . . . . . . . . . . . . . . . . . . 75
4.6.2.7 DNSServer..................... 76
4.6.2.8 Routing....................... 77
4.6.2.9 Internet Connection Firewall . . . . . . . . . . . 78
4.7 VPNIPsec ............................... 79
4.7.1 IPsec Network-to-Host Scenario Connection . . . . . . . 79
4.7.1.1 Configuring IPsec on GlobeSurfer 3G . . . . . . 79
4.7.1.2 Configuring IPsec on the Windows Host . . . . 82
4.7.2 IPsec Network-to-Network Scenario Connection . . . . . 95
4.7.2.1 Network Configuration . . . . . . . . . . . . . . 95
4.7.2.1.1 LAN Interface Settings . . . . . . . . . 95
4.7.2.2 Network-to-Network with Pre-shared Secrets . 97
5 Security 102
5.1 General Security Level Settings . . . . . . . . . . . . . . . . . . . 104
5.2 AccessControl............................. 107
5.3 Local Servers (Port Forwarding) . . . . . . . . . . . . . . . . . . . 110
5.4 DMZHost ............................... 113
5.5 PortTriggering ............................ 114
5.6 Remote Administration . . . . . . . . . . . . . . . . . . . . . . . 117
5.7 IP-Hostname Filtering . . . . . . . . . . . . . . . . . . . . . . . . 119
5.8 AdvancedFiltering .......................... 122
5.8.1 Adding an Advanced Filtering Rule . . . . . . . . . . . . 123
5.9 SecurityLog .............................. 126
5.9.1 Security Log Settings . . . . . . . . . . . . . . . . . . . . . 130
5.10 User-defined Services . . . . . . . . . . . . . . . . . . . . . . . . . 132
5.11 Applying Corporate-Grade Security . . . . . . . . . . . . . . . . 134
6 Advanced 136
6.1 SystemSettings ............................ 139
6.1.1 System............................. 139
6.1.2 GlobeSurfer 3G Management Console Settings . . . . . . 139
6.1.3 Management Application Ports Settings . . . . . . . . . . 139
6.1.4 System Logging Settings . . . . . . . . . . . . . . . . . . . 140
6.1.5 Security Logging Settings . . . . . . . . . . . . . . . . . . 140
6.1.6 Outgoing Mail Server Settings . . . . . . . . . . . . . . . 140
6.1.7 HTTP interception . . . . . . . . . . . . . . . . . . . . . . 140
6.2 DNSServer .............................. 141
6.2.1 Viewing and Modifying the DNS Table . . . . . . . . . . 141
6.3 DynamicDNS............................. 143
6.3.1 Using Dynamic DNS . . . . . . . . . . . . . . . . . . . . . 143
6.4 NetworkMap ............................. 144
6.5 DHCP.................................. 146
6.5.1 DHCP Server Summary . . . . . . . . . . . . . . . . . . . 146
6.5.2 DHCP Server Settings . . . . . . . . . . . . . . . . . . . . 147
iv

6.5.3 DHCP Server Relay Settings . . . . . . . . . . . . . . . . 148
6.5.4 DHCP Connections . . . . . . . . . . . . . . . . . . . . . . 148
6.6 NetworkObjects ........................... 151
6.7 Routing................................. 153
6.7.1 Managing Routing Table Rules . . . . . . . . . . . . . . . 153
6.7.2 Multicasting.......................... 154
6.8 ManagingUsers............................ 155
6.9 Certificates............................... 157
6.9.1 Digital Certificates . . . . . . . . . . . . . . . . . . . . . . 157
6.9.2 X.509 Certificate Format . . . . . . . . . . . . . . . . . . . 157
6.9.3 Obtaining an X.509 Certificate . . . . . . . . . . . . . . . 158
6.9.4 Registering a CA’s Certificate . . . . . . . . . . . . . . . . 162
6.10DateandTime............................. 163
6.11SchedulerRules............................ 164
6.12FirmwareUpgrade .......................... 166
6.12.1 Upgrading From a Local Computer . . . . . . . . . . . . 166
6.13 Point-to-Point Tunneling Protocol (PPTP) . . . . . . . . . . . . . 168
6.13.1 Managing Remote Users . . . . . . . . . . . . . . . . . . . 168
6.13.2 Advanced PPTP Server Settings . . . . . . . . . . . . . . 170
6.13.3 Advanced PPTP Client Settings . . . . . . . . . . . . . . . 170
6.14IPSecurity(IPsec)........................... 172
6.14.1 Technical Specifications . . . . . . . . . . . . . . . . . . . 172
6.14.2 Basic IPsec Connection Settings . . . . . . . . . . . . . . . 172
6.14.2.1 Key Management . . . . . . . . . . . . . . . . . 173
6.14.2.2 Log Settings . . . . . . . . . . . . . . . . . . . . 174
6.14.3 Advanced IPsec Connection Settings . . . . . . . . . . . . 174
6.15 Universal Plug and Play (UPnP) . . . . . . . . . . . . . . . . . . 177
6.16 Simple Network Management Protocol (SNMP) . . . . . . . . . 178
6.16.1 Configuring GlobeSurfer 3G’s SNMP Agent . . . . . . . 178
6.17Diagnostics............................... 179
6.17.1 Diagnosing Network Connectivity . . . . . . . . . . . . . 179
6.18 Advanced Remote Administration . . . . . . . . . . . . . . . . . 180
6.19SIMSetup ............................... 182
6.20UnlockDevice............................. 183
6.21 Restoring Default Settings . . . . . . . . . . . . . . . . . . . . . . 184
6.22Restart ................................. 185
6.23 Technical Information . . . . . . . . . . . . . . . . . . . . . . . . 186
7 System Monitoring 187
7.1 Monitoring Connections . . . . . . . . . . . . . . . . . . . . . . . 188
7.2 TrafficStatistics ............................ 189
7.3 SystemLog............................... 190
7.4 SystemUpTime............................ 191
A Glossary 192
v

List of Acronyms
3G Third Generation (mobile network)
ALG Application-Level Gateway
API Application Programming Interface
APN Access Point Name
CA Certificate Authority
DHCP Dynamic Host Configuration Protocol
DMZ Demilitarized Zone
DNS Domain Name System
DSL Digital Subscriber Line
FTP File Transfer Protocol
HTTP HyperText Transport Protocol
IAD Integrated Access Device
ICMP Internet Control Message Protocol
IGMP Internet Group Multicast Protocol
IP Internet Protocol
IPsec IP Security
LAN Local Area Network
MAC Media Access Control
MTU Maximum Transmission Unit
NAPT Network Address Port Translation
OAM Operations and Maintenance
OEM Original Equipment Manufacturer
PDA Personal Digital Assistant
POP3 Post Office Protocol 3
PPP Point-to-Point Protocol
PPTP Point-to-Point Tunneling Protocol
PUK Pin Unlocking Key
RG Residential Gateway
RIP Routing Information Protocol
SMS Short Message Service
SMSC Short Message Service Center
SIM Security Identity Module
SNMP Simple Network Management Protocol
SPI Stateful Packet Inspection
TCP Transmission Control Protocol
TFTP Trivial File Transfer Protocol
UDP User Datagram Protocol
UMTS Universal Mobile Telephony System
UPnP Universal Plug and Play
vi

URL Universal Resource Locator
VPN Virtual Private Network
WAN Wide Area Network
WEP Wireless Encryption Protocol
WLAN Wireless Local Area Network
WPA Wireless Protected Access
vii

1
Introduction to GlobeSurfer 3G
Welcome to the third generation wireless network. By combining a wireless
router following the 802.11 b/g WLAN standard with a 3G UMTS Gateway
the GlobeSurfer 3G presents a new style of wireless freedom.
The GlobeSurfer 3G is a 802.11b/g wireless router and Internet gateway that
provides Internet access for homes and small offices over the 3G UMTS net-
work. By connecting laptops and stationary computers with either WLAN or
Ethernet to the GlobeSurfer 3G you will get Internet access with a speed similar
to a fixed DSL connection. And while sharing the wireless Internet connection
you will also be able to share the resources of the local computers connected to
the GlobeSurfer 3G.
GlobeSurfer 3G is easy to install and use. Yet it provides advanced network-
ing functions and security functions that can be configured with a web-based
management interface. Its small attractive design and powerful built-in func-
tionality makes your Internet surfing easy and secure in any location with 3G
access and a power outlet.
Some of the attractive features of the GlobeSurfer 3G:
• WAN - UMTS uplink and downlink
• Small attractive design with informative display
• Sends and receives SMS
• WLAN according to 802.11 b/g for maximum compatibility
• Ethernet connection for stationary computers
• Built-in firewall to protect against hacker attacks
• Wireless LAN Security: WEP, WPA, 802.1x
• VPN (Virtual Private Network): IPsec, PPTP, L2TP
1

Figure 1.1: The GlobeSurfer 3G
• Web-based management console makes configuration intuitive
• System statistics and monitoring for the advanced users
• Remote upgrade to stay in touch with the future
1.1 About This Manual
This manual describes configuration and operation of the GlobeSurfer 3G. It
is intended as a complement to the GlobeSurfer 3G User Guide to provide ref-
erence information for the advanced user of the GlobeSurfer 3G. It is assumed
that the hardware installation of the GlobeSurfer 3G has been done when the
Reference Manual is read.
This version of the manual is valid for GlobeSurfer 3G version 3.15.4 R2H.
Other product versions with customer specific functions not described in this
manual, may be available.
2