SMC Networks BARRICADE SMC7301TA User manual

1
BARRICADETM
ISDN Router
SMC7301TA
User’s Manual

2
CHAPTER 1 INTRODUCTI ON................................ ................................ ........4
WHAT’S IN THE BOX?................................ ................................ ....................... 4
OVERVIEW OF SMC7301TA ISDN ROUTER ................................ ..................... 4
SMC7301TA APPLICATIONS................................ ................................ ............ 4
Accessing the Internet ................................ ..............................................5
Supporting Dial-in Access to Your Network ................................ .............. 5
Creating Your Own Private Wide Area Network ................................ ........6
SECURITY OVERVIEW ................................ ................................ ...................... 6
APHYSICAL LOOK AT THE SMC7301TA ................................ ........................... 7
Rear Panel:................................ ................................ ............................... 7
The LEDs on the front...............................................................................7
CHAPTER 2 INSTALLING THE SMC7301TA ................................ ................. 9
HARDWARE INSTALLATION ................................ ................................ ............... 9
SETTING UPA WINDOWS PC FOR CONFIGURING SMC7301TA ........................ 10
CHAPTER 3 INTERNET A CCESS CONFIGURATION ................................ .13
USING DIFFERENT BROWSERS FOR SMC7301TA CONFIGURATION .................. 13
Netscape Navigator 4.x: ................................ ................................ .........13
Internet Explorer 4.x and 5.x: ................................ ................................ ..14
Logging On ................................ ................................ ............................. 14
CUSTOMIZING USER INTERFACE FOR YOUR SPECIFIC NEEDS ........................... 15
BASIC INTERNET ACCESS ................................ ................................ .............. 16
INTERNET ACCESS WITH ADVANCED CONFIGURATION................................ .......16
Access to/from Remote Site (e.g., Branch Office) ................................ ..16
DIAL-IN ACCESS FOR OFF-SITE USERS................................ ........................... 17
OVERVIEW OF BROADBAND ROUTER MANAGER SCREEN ................................ .17
Menu Window ................................ ................................ ......................... 18
Configuration Window ................................ ................................ ............. 18
Message Window ................................ ................................ ................... 18
System Status Monitoring Window ................................ ......................... 18
WHAT IS A CONNECTION PROFILE?................................ ................................ .19
BASIC INTERNET ACCESS CONFIGURATION VIA WAN ................................ .......20
BASIC INTERNET ACCESS CONFIGURATION VIA ISDN................................ .......25
Advanced ISDN Configuration ................................ ................................ 27
IP CONFIGURATION FOR INTERNET ACCESS ................................ .................... 29
THE IP ROUTING TABLE................................ ................................ ................. 31

3
IP ADDRESS TRANSLATI ON CONFIGURATION ................................ ........33
Add or Edit s Set of IPAddress Translation ................................ ............ 34
Delete a Set of IPAddress Translation ................................................... 35
STATIC DHCP CONFIGURATION ................................ ................................ .....35
Add or Edit a Set of static private IP address ................................ ..........36
Delete a Set of static private IP address................................................. 37
CHAPTER 4 REMOTE OFF ICE ACCESS CONFIGURATION ..................... 38
REMOTE OFFICE ACCESS BY ISDN ................................ ................................ 38
ADVANCED OPTIONS FOR REMOTE OFFICE ACCESS PROFILES ......................... 40
DELETING REMOTE OFFICE ACCESS PROFILE ................................ ................. 43
CHAPTER 5 DIAL-IN USER ACCESS CONFI GURATION........................... 45
CONFIGURING A DIAL-IN USER PROFILE................................ .......................... 45
DELETING DIAL-IN USER PROFILES ................................ ................................ 48
CHAPTER 6 PACKET FILTERING CONFIGURATION ................................ .49
ANIP PACKET FILTERING OVERVIEW ................................ .............................. 49
ADDING/EDITING/DELETING A PACKET RULE ................................ ................... 50
CHAPTER 7 MANAGING S MC7301TA ................................ ........................ 53
HOW TO VIEW THE CONNECTION LOG................................ ............................. 53
HOW TO UPGRADE THE SMC7301TA FIRMWARE ................................ ............ 54
HOW TO SAVE OR CLEAR CONFIGURATION CHANGES ................................ ......55
HOW TO RESET SMC7301TA ................................ ................................ .......56
HOW TO CHANGE BROADBAND ROUTER MANAGER PASSWORD ........................ 56
HOW TO CONFIGURE GENERAL SYSTEM SETTINGS................................ .......... 58
USING THE COMMAND LINE INTERFACE................................ ........................... 59
Connecting to the CLI With Telnet ................................ .......................... 59
Connecting to the CLI through the Console Port ................................ ....59

4
Chapter 1 Introduction
This chapter gives an introduction to the SMC7301TA ISDN Router.
What’s in the box?
• 1 SMC7301TA ISDN Router,
• 1 AC Adapter,
• 1 ISDN Connector Cable,
• 1 RS-232 Serial Cable (null modem cable for the console port),
• 1 Cat5 Cable,
• 1 CD-ROM containing the user manual,
• 1 Quick Install Guide,
• 1 Warranty and Registration Card.
Overview of the SMC7301TA ISDN
Router
The SMC7301TA ISDN Router is a small desktop router that sits between
your local Ethernet network and a remote network (For example, the Internet
or a remote office). The SMC7301TA contains an ISDN S/T interface, a
10Mbps WAN port, a 10/100Mbps LAN port, and a conso le port for
management capability.
Data comes into the SMC7301TA from the LAN and then is “routed” to
the remote network, and vice versa. In addition to its capability to route IP
traffic, the SMC7301TA also acts as a bridge for other network protocols , such
as Appletalk or SNA.
SMC7301TAApplications
The main functions of the SMC7301TA are to support devices on your
LAN to access the Internet, to support remote users to dial -in and access
resources on your LAN, and to support communications among branch

5
offices.
Accessing the Internet
The most common use for the SMC7301TA is to provide Internet access,
so that everyone on your LAN can surf the web, send/receive e -mail, or share
files. The SMC7301TA automatically acquires the necessary IP addre ss when
the connection to the Internet is established. You don’t need to apply for or
assign an IP address to each PC or workstation on your network.
There are two alternatives in establishing the connection between the
LAN and the Internet: either thr ough ISDN or through an xDSL/cable modem.
With built-in PPPoE (Point-to-Point Protocol over Ethernet) support, the
SMC7301TA provides virtual dial -up environments and allows end users to
connect via an xDSL/cable modem to the Internet whenever they wan t.
Alternatively, end users can connect via an ISDN connection to the
Internet. In this situation, the SMC7301TA supports “bandwidth on demand”.
For example, any user’s initial intent to access the Internet will trigger a
B-channel connection to be se t up. As the traffic builds (for example, more
users try to access the Internet, or the same user generates a lot of traffic),
the SMC7301TA will establish the second connection through the other
B-channel. As traffic decreases, one B -channel will be taken down, until finally,
after a configurable period of inactivity, the remaining B -channel will also be
disconnected.
ISDN Router ADSL /Cable
Modem
ISP
LAN Internet
ISP
10 M Ethernet
ADSL / Cable
ISDN
Supporting Dial-in Access to Your Network
Under an ISDN connection you can set up your SMC7301TA to allow
users to connect to your ne twork and share resources from their homes while

6
they are traveling. The SMC7301TA’s built -in “Broadband Router Manager”
makes the necessary setup a snap. As a security feature, after a user calls in,
the SMC7301TA will hang up and call that user back at a pre-configured
telephone number.
ISDN Router
LAN Telephone
Network
Dial-in Users
ISDN ISDN
Creating Your Own Private Wide Area Network
Under an ISDN Connection you can also create your own private wide
area network with the SMC7301TA and allow two or more remote networks to
connect to one another and share resources. The remote network can use an
ISDN router from a different vendor - as long as it also supports LAN -to-LAN
communication.
ISDN Router
Your LAN 1
ISDN
ISDN
Network
ISDN
ISDN Router
Your LAN 2
Security Overview
More and more people are concerned about security of their data in this
Internet era. The SMC7301 TA provides many ways to help make your network
and your data secure:
All dial-in users and LAN-to-LAN communications require
CHAP/PAP/MS-CHAP authentication (basically, user name and

7
password).
SMC7301TA also supports call back for dial -in users so that remote
users are really who they say they are.
ISDN Caller ID may be used for incoming call authentication.
SMC7301TA uses a private IP addressing scheme to prevent devices
on your LAN from being accessed by users on the Internet.
Console and Telnet Configu ration provide password protection.
IP packet filtering may be used to enhance security requirements.
A Physical Look at the SMC7301TA
Rear Panel:
The following illustration shows the rear panel of the SMC7301TA:
ISDN S/T TERMINAL
SWITCH WAN LAN CONSOLE AC 7.5V
One RJ-45 ISDN port for connectio n to your ISDN line.
One RJ-45 10/100 Mbps LAN port for connection to a workstation, or to
another switch or hub.
One RJ-45 10 Mbps WAN port for connection to an xDSL/cable
modem.
One RS-232 DB-9 port to enable console management capability.
One 7.5V AC power connector for connection to an AC power adapter
(included as part of the product).
One DIP switch on the rear panel allows you to set the terminating
resistor conveniently if the single ISDN line supports more than one
ISDN terminal equipment at the sa me time.
The LEDs on the front

8
There are seven LEDs on the front of the SMC7301TA that show the
status of Power, LAN activity, WAN activity, and ISDN activity. You can tell at a
glance if your SMC7301TA is functioning properly, and if there is any t raffic
passing through. Note that the second, the third, and the forth LED (left to
right when you are facing the front of the SMC7301TA) are dual -colored.
Please note that the third or the forth LED will flash with orange color when
collisions occur on the LAN port or on the WAN port. The sixth or seventh
LED will flash with green color, respectively, when data is transmitted over the
corresponding B channel. The following table shows a brief description for
each LED.
LAN Interface WAN ISDN
Locatio
n
1
2
3
4
5
6
7
8
Functio
n
Powe
r
SPEED10
LAN port
SPEED10
0
LAN port
ACT
LAN port
ACT
WAN port
SYN
C
B1
B2
Color
Gree
n
Green
Green
Green
Green
Gree
n
Gree
n
Gree
n

9
Chapter 2 Installing the
SMC7301TA
Hardware Installation
Follow these steps to complete the hardware installation for the
SMC7301TA:
Connect the SMC7301TA from the WAN port to an xDSL/cable modem,
or attach an ISDN line to the ISDN port (S/T interface).
Connect your PC to the RJ -45 LAN port. Two or more PCs can be
connected via a multi-port hub or switch which you can connect to the
RJ-45 LAN port of the SMC7301TA.
Plug the power adapter into a wall outlet and the AC connector on the
back of the SMC7301TA.
The RS-232 port is only used to connect a terminal to run the
Command Line Interface using the null modem cable. (This is an

10
optional connection.)
There is a DIP switch located on the rear panel for setting the
terminating resistor.
You only need to adjust this switch if ther e are two or more external ISDN
equipment attached to the local telephone line.
Setting Up a Windows PC
This section describes the configuration required by LAN -attached PCs
which communicate with the SMC7301TA, either to configure the SMC7301TA,
or for network access. These PCs must have an Ethernet interface installed
properly, be connected to the SMC7301TA either directly or through an
external hub or switch, and have TCP/IP installed and configured to obtain an
IP address through a DHCP server.
Directly connect a Windows 95/98/2000 PC to the SMC7301TA. If TCP/IP
is not already installed, follow the steps below for its installation.
Note: Any TCP/IP capable workstation can be used to communicate with or
through the SMC7301TA. To configure oth er types of workstations, please
consult the manufacturer’s documentation.
Step 1: Connect your PC to the SMC7301TA’s LAN port or to a hub/switch
that is connected to the SMC7301TA as depicted above. .
Step 2: From the Win95/98 Start Button, select Settings, then Control Panel.
The Win95/98 Control Panel will display.
Step 3: Double-click on the Network icon.

11
Step 4: Check your list of Network Components in the Network window
Configuration table. If TCP/IP has already been installed, go to Step 8.
Otherwise, select Add to install it now.
Step 5: In the new Network Component Type window, select Protocol.
Step 6: In the new Select Network Protocol window, select Microsoft in the
Manufacturers area.
Step 7: In the Network Protocols area of the same window, select TCP/IP,
then click OK. You may need your Win95/98 CD to complete the installation.

12
After TCP/IP installation is complete, go back to the Network window shown
in Step 4.
Step 8: Select TCP/IP in the list of Network Components.
Step 9: Click Properties, and check the settings in each of the TCP/IP
Properties window:
Bindings Tab: both Client for Microsoft Networks and File and
printer sharing for Microsoft Networks should be selected.
Gateway Tab: All fields should be blank.
DNS Configuration Tab: Disable DNS should be selected
IP Address Tab: Obtain IP address automatically should be selected
Step 10: With the SMC7301TA powered on and connected to the LAN, reboot
the PC. After the PC is re -booted, you should be ready to configure the
SMC7301TA. See Chapter 3.

13
Chapter 3 Internet Access
Configuration
Once you have completed the installation stage and have configured PCs
in the way described in chapter two, you are ready to configure the
SMC7301TA for actual applications. This chapter describes how to configure
you’re SMC7301TA for basic Internet access, as well as Internet access with
advanced features.
In the following sections you will be shown how to configure the
SMC7301TA for basic Internet acce ss in less than five minutes using the
web-based “Broadband Router Manager”.
Using Different Browsers to
Configure the SMC7301TA
To configure your SMC7301TA, you can use popular browsers such as
Netscape 4.x and Internet Explorer 4.x and 5.x. The fol lowing describes how
to access the “Broadband Router Manager” through IE or Netscape
Navigator.
Netscape Navigator 4.x:
In the Location box (where you normally enter the URL address), enter

14
the default private IP address of SMC7301TA followed by hitt ing the return
key:
http://192.168.2.1
Internet Explorer 4.x and 5.x:
In the Address box (where you normally enter the URL address), enter
the default private IP address of SMC7301TA followed by hitting the return
key:
http://192.168.2.1
Logging On
A password screen will ask you to log on after you enter the default IP
address described above. If you are logging on for the first time, you should
accept the factory default password (which is “password”). The password is
always displayed as a string of asterisks (“*”). Clicking the Log On button will
begin the Configuration process for the SMC7301TA.
The next time you log in, even if you have modified the password, the
default password (“password”) will still be us ed as the default. You need to
change it to the correct password before you will be let in. No matter what
password you use, each character will always be displayed as a “*”. If you
forget the password, you need to follow the steps described later in the
chapter to be able to log on.

15
After clicking Log On, the following screen will display, and you must
select either ISDN or WAN as the interface for Internet Access. Click Next to
proceed in the configuration process. Please see the following text for de tails.
Customizing the User Interface to
Fit Your Specific Needs
When you enter into the main configuration window, click “ Customize
User Interface” in the SYSTEM TOOLS Menu on the left side of the screen,
this will allow you to customize the Broadband Router Manager to suit your
own specific needs. The selections you make determine what configuration
menus and buttons will appear in the screen. For example, if you select Basic
Internet Access only, the interface will only displa y buttons that you need for
basic Internet access.
If you subsequently use Broadband Router Manager to configure the
SMC7301TA for other applications, you can return to this screen to
“re-customize” your interface by selecting Customize User Interface from the
SYSTEM TOOLS Menu.

16
Basic Internet Access
Select this option if you need basic Internet access. This will enable you
to configure Internet Access for all of your LAN users. There are two Internet
access interface selections provided by the SMC7301TA: through ISDN or
through WAN.
Internet Access with Advanced
Configuration
Select this option if you want to configure advanced options, such as
changing the private IP address (for example, when you intend to create your
own private WAN between multiple SMC7301TA routers), or adding a public
IP address (e.g., when you want to install servers on the LAN which are
accessible from the Internet).
Access to/from Remote Site (e.g., Branch Office)
Select this option if you want to create connec tions to other LAN sites,
that is, users at each site can share resources. If you use Windows PCs, for
example, then from the Network Neighborhood facility, you can access files
from remote PCs directly. This feature is valid only when you select ISDN as

17
the interface for Internet access.
Dial-in Access for Off-Site Users
Select this option if you want to allow users on a stand -alone computer to
dial in and access resources on your network. This feature is valid only when
you select ISDN as the interfa ce for Internet access.
Click Next when you have selected the options you want. The quantity of
selections is not limited but step -by-step configuration is recommended.
Overview of Broadband Router
Manager Screen
Before you begin the configuration process, take a moment to look at the
Broadband Router Manager screen. Look for these areas:
Menu Window (in the left side of the screen)
Configuration Window (in the right -upper side of the screen)
Message Window (in the right -lower side of the screen)
System Status Monitoring Window (the separate window)

18
Menu Window
This part of the browser screen contains items you can click to display the
various screens for configuring your SMC7301TA.
Configuration Window
This is the window where the actual configuration screens appear.
Message Window
Whenever appropriate, the SMC7301TA will display system status or
error messages in this window. For example, when you try to connect to the
Internet, if you had configured your password incorrectly, the message
window will display an appropriate message.
System Status Monitoring Window
This section displays statistics and the status of all interfaces. This
window is invoked as a separate browser screen from the main Broadband
Router Manager browser screen and appears automatically each time you
start Broadband Router Manager . If you close this window, you can always
restart it by clicking System Status in the MONITORING Menu. It does not
contain any toolbars or browser menu buttons. Although the main Broadband
Router Manager screen will timeout, this screen will not, and will continue to
be operational as long as it is active.

19
The following statistics are reported for each interface:
Device: lists all interfaces, including both the physical interface as well as
logical connections that have been activated (such as connections to the
Internet or to remote offices).
Status: indicates the current state of the interface: For the LAN, Up means
that the interface is up and functioning, Down means that this interface is not
connected. For WAN or ISDN B channels, if the interface is active, the profile
name is displayed. NoCall means an ISDN B1 or B2 channel is idle.
Xmt Pkts: indicates the number of packets th at have been transmitted
through the interface.
Rcv Pkts: indicates the number of packets that the interface has received.
Err Pkts: indicates the number of error (bad) packets that have been
received.
Disconnect: if an interface has been selected (highlig hted), clicking this
button will cause the connection to be taken down. The LAN interface and the
ISDN physical line are not affected by this operation.
Clear: resets the selected statistic values to zero.
What is a Connection Profile?
To access the Internet via PPPoE, you need to apply for an account with
an ISP (Internet Service Provider), who will provide you a username and
password that the ISP will use for authentication purposes and will also

20
provide all necessary information such as WAN IP Addr ess, Netmask, ISP
Gateway IP Address, DNS IP Address. Alternatively, the SMC7301TA users
can select to access the Internet via ISDN, which you need to apply for an
account with an ISP (Internet Service Provider). The ISP will provide you with
a username and password that the ISP will use for authentication purposes,
and will also provide telephone numbers for dialing -up.
You need to enter such information into a “connection profile” in the
SMC7301TA. Likewise, a connection profile needs to be created fo r each
dial-in user, or for each remote office.
Essentially, a connection profile contains all the information that the
SMC7301TA needs to access the Internet for LAN users, or to support a
remote dial-in user, or to set up a connection with a remote o ffice. Such
information includes dial-up phone numbers, authentication information (the
local user name and password, and possibly the remote site user name and
password), plus other information that may be required for the
communication.
Basic Internet Access Configuration
via WAN
This section describes the steps to set configuration for Basic Internet
Access via WAN.
You will find that the SMC7301TA is optimized for Basic Internet Access .
You don’t need to understand, to apply for or to assign an y IP addresses in
your entire network. The SMC7301TA does these things for you automatically.
You need to configure each device on your LAN in a uniform way as
described in Chapter 2.
What is Basic Internet Access? It means accessing the Internet, surf ing
the web, accessing a remote FTP server (to send or receive files), and
sending and receiving e-mail. These are the tasks that users perform most.
When you apply for an account with your Internet Service Provider (ISP),
you will be given the userna me, password, and other necessary information.
Follow the steps below.
Step 1: When you logon, select Customize User Interface in the SYSTEM