SMC Networks BR14VPN - annexe 1 User manual

i

Copyright
Information furnished by SMC Networks, Inc. (SMC) is believed to be accurate and reliable.
However, no responsibility is assumed by SMC for its use, nor for any infringements of
patents or other rights of third parties which may result from its use. No license is granted
by implication or otherwise under any patent or patent rights of SMC. SMC reserves the right
to change specifications at any time without notice.
The products and programs described in this User Guide are licensed products of SMC. This
User Guide contains proprietary information protected by copyright, and this User Guide and
all accompanying hardware and documentation are copyrighted.
SMC does not warrant that the hardware will work properly in all environments and
applications, and makes no warranty and representation, either implied or expressed, with
respect to the quality, performance, merchantability, or fitness for a particular purpose.
Information in this User Guide is subject to change without notice and does not represent a
commitment on the part of SMC. SMC assumes no responsibility for any inaccuracies that
may be contained in this User Guide.
SMC makes no commitment to update or keep current the information in this User Guide,
and reserves the right to make changes to this User Guide and/or product without notice.
No part of this manual may be reproduced or transmitted in any form or by any means,
electronic or mechanical, including photocopying, recording, or information storage and
retrieval systems, for any purpose other than the purchaser's personal use, without the
express written permission of SMC.
Copyright © 2004 by
SMC Networks, Inc.
38 Tesla
Irvine, California 92618
All rights reserved.
Trademarks
SMC® is a registered trademark; and EZ-Stream, EZ Connect, Barricade and EZ Hub are
trademarks of SMC Networks, Inc. Other product and company names are trademarks or
registered trademarks of their respective holders.
ii

Compliances
FCC - Class B
This equipment has been tested and found to comply with the limits for a Class B digital
device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide
reasonable protection against harmful interference in a residential installation. This
equipment generates, uses and can radiate radio frequency energy and, if not installed and
used in accordance with instructions, may cause harmful interference to radio
communications. However, there is no guarantee that the interference will not occur in a
particular installation. If this equipment does cause harmful interference to radio or
television reception, which can be determined by turning the equipment off and on, the user
is encouraged to try to correct the interference by one or more of the following measures:
• Reorient the receiving antenna
• Increase the separation between the equipment and receiver
• Connect the equipment into an outlet on a circuit different from that to which
the receiver is connected
• Consult the dealer or an experienced radio/TV technician for help
FCC Caution: To assure continued compliance, (for example - use only shielded interface
cables when connecting to computer or peripheral devices). Any changes or modifications
not expressly approved by the party responsible for compliance could void the user’s
authority to operate this equipment.
This device complies with Part 15 of the FCC Rules. Operation is subject to the following two
conditions: (1) This device may not cause harmful interference, and (2) this device must
accept any interference received, including interference that may cause undesired
operation.
CAUTION STATEMENT:
FCC Radiation Exposure Statement
This equipment complies with FCC radiation exposure limits set forth for an uncontrolled
environment. This equipment should be installed and operated with a minimum distance of 5
centimeters between the radiator and your body. This transmitter must not be co-located or
operating in conjunction with any other antenna or transmitter. Note: In order to maintain
compliance with the limits of a Class B digital device, SMC requires that you use a quality
interface cable when connecting to this device. Changes or modifications not expressly
approved by SMC could void the user’s authority to operate this equipment.
Attach unshielded twisted-pair cable (UTP) to the RJ-45 port and shielded USB cable to the
USB port.
iii

EC Conformance Declaration – Class B
SMC contact for these products in Europe is:
SMC Networks Europe,
Edificio Conata II
Calle Fructuos Gelabert 6-8, 2o, 4a
08970 – Sant Joan Despi
Barcelona, Spain
This equipment complies with the requirements relating to electromagnetic compatibility,
EN 55022/A1 Class B, and EN 50082-1. This meets the essential protection requirements of
the European Council Directive 89/336/EEC on the approximation of the laws of the member
states relation to electromagnetic compatibility.
Important Safety Notices
•Unplug this product from the AC power before cleaning. Do not use liquid cleaners or
aerosol cleaners. Use a dry cloth for cleaning.
•Route the power supply cords so that they are not likely to be walked on or pinched
by items placed upon or against them. Pay particular attention to cords at plugs,
convenience receptacles, and the point where they exit from the product.
•Situate the product away from heat sources such as radiators, heat registers,
stoves, and other products that produce heat.
•To prevent fire or shock hazard, do not expose this unit to rain or moisture. Do not
allow water or any foreign objects to enter the interior. This may cause a fire or
electric shock. In the event that water or other foreign objects get into the product,
immediately unplug the AC adapter from the electrical outlet and contact Customer
Service for inspection and/or repair/replacement options.
•Do not take apart the equipment. This may cause fire, electric shock or other
injuries.
•Do not overload wall outlets and extension cords as this can result in a fire or
electric shock.
•This product is for use with the AC adapter that comes with it. Use with any other AC
power is strongly discouraged as it may cause fire, electric shock, or damage to the
equipment.
iv

1 | SYSTEM REQUIREMENTS 1
2 | EQUIPMENT CHECKLIST 1
3 | FUNCTIONS AND FEATURES 2
4 | PANEL LAYOUT 3
5 | HARDWARE INSTALLATION 4
6 | NETWORK SETTINGS AND SOFTWARE INSTALLATION 4
6.1 | Installing TCP/IP 5
6.2 | Setting up TCP/IP 5
6.3 | Obtaining an IP Address 6
6.4 | Configuring a Macintosh Computer 7
6.5 | Verifying Your TCP/IP Connection 7
7 | CONFIGURING YOUR BROADBAND VPN ROUTER 8
7.1 | Browser Configuration 8
7.2 | Web Management 8
7.3 | Setup Wizard 9
7.4 | Advanced Setup – SYSTEM 16
7.5 | Advanced Setup - WAN 19
7.6 | Advanced Setup - LAN 24
7.7 | Advanced Setup - NAT 26
7.7.1 | Virtual Server 26
7.7.2 | Special Applications 27
7.7.3 | Virtual Computer 28
7.8 | Advanced Setup - FIREWALL 28
7.8.1 | Network Filters 28
7.8.2 | URL Blocking 29
7.8.3 | MAC Filter 30
7.8.4 | Schedule Rule 31
7.8.5 | Advanced 32
7.8.6 | DMZ 33
v

7.9 | Advanced Setup - VPN 33
7.9.1 | IPSec Tunnel 33
7.9.2 | IKE Proposal 35
7.9.3 | IPSec Proposal 36
7.9.4 | Dynamic VPN 38
7.9.5 | PPTP/L2TP Server 39
7.10 | Advanced Setup - SNMP 40
7.11 | Advanced Setup - ROUTING 41
7.12 | Advanced Setup - MISCELLANEOUS 42
7.13 | Advanced Setup – DISPLAY STATUS 43
7.14 | DDNS (Dynamic DNS) 43
7.15 | UPnP (Universal Plug-and-Play) 44
7.16 | Tools 44
7.17 | Status 45
8 | IPSEC SETTINGS GUIDE (FOR REFERENCE/EXAMPLE ONLY) 47
8.1 | Tunnel between two SMCBR14VPN 47
8.1.1 | Settings for Router 1 47
8.1.2 | Settings for router 2 49
8.1.3 | Common Settings for both routers 52
8.2 | Tunnel between a SMCBR14VPN and standalone client. 53
8.3 | PPTP/ L2TP configuration example 54
9 | TROUBLESHOOTING 56
9.1 | Questions and Awnsers 59
10 | TECHNICAL SPECIFICATIONS 60
11 | TERMINOLOGY 62
vi

1 | System Requirements
•Internet access from your local telephone company or Internet Service Provider
(ISP) using a DSL modem, cable modem, Dial-Up modem, or ISDN modem
•A PC using a fixed IP address or dynamic IP address assigned via DHCP, as well as a
Gateway server address and DNS server address from your service provider
•A computer equipped with a 10 Mbps, 100 Mbps, or 10/100 Mbps Fast Ethernet card,
or a USB-to-Ethernet converter
•TCP/IP network protocol installed on each PC that needs to access the internet
•A Java-enabled web browser, such as Microsoft Internet Explorer 5.0 or above, or
Netscape Communicator 4.0 or above installed on one PC at your site for configuring
the router.
2 | Equipment Checklist
After unpacking the Barricade™ VPN Cable/DSL Broadband Router, check the contents of
the box to be sure you have received the following components:
•1 Barricade™ VPN Cable/DSL Broadband Router
•1 EZ Installation Wizard and Documentation CD
•1 Ethernet (CAT5-UTP/Straight-Through) Cable
•1 Power Adapter
•1 Quick Installation Guide
Immediately inform your dealer in the event of any incorrect, missing or damaged parts. If
possible, please retain the carton and original packing materials in case there is a need to
return the product.
Please register this product and upgrade the product warranty at SMC's Web site:
http://www.smc.com
1

3 | Functions and Features
Broadband Modem and NAT
Router
Connects multiple computers to a broadband (cable or
DSL) modem, and/or Ethernet router to access the
Internet.
10/100 Mbps Ethernet Interface Provides a 10/100 Base-TX interface to connect to a DSL
or cable modem for broadband Internet access.
Auto-sensing Ethernet Switch Equipped with a 4/8-port auto-sensing Ethernet switch.
VPN Supported Supports multiple IPSec sessions and has built-in PPTP
and L2TP VPN servers.
Firewall All unwanted packets from outside sources are blocked
to protect your intranet.
DHCP Server Supported All networked computers can retrieve TCP/IP settings
automatically from this device.
Web-based Configuration Configurable by any networked computer’s Web browser
using Netscape or Internet Explorer.
Network Filter Supported The Packet Filter lets you control access to a network by
analyzing the incoming and outgoing packets; this lets
you either letting them pass or halt based on the IP
address or the source and destination.
Universal Plug and Play (UPnP)
Supported
Enables devices such as PCs, routers and printers to be
plugged into a network and ensure automatic recognition.
Virtual Server Supported Lets you make your Website, FTP site, and other services
on your LAN accessible to Internet users.
User Defined Application Sensing
Tunnel
Lets you define the attributes to support special
applications that require multiple connections like
Internet gaming, video conferencing, Internet telephony,
and so on. This device can sense the application type and
opens a multi-port tunnel for it.
DMZ Host Supported Enables a computer to be fully accessible to the Internet.
This function is used when the special application sensing
tunnel feature is insufficient to allow an application to
function correctly.
SNMP Supported SNMP (Simple Network Management Protocol) is a
protocol that lets users remotely manage a computer
network by polling and setting terminal values, and
monitoring network events.
System Time Supported Lets you synchronize system time with the network time
server.
Virtual Computers Supported The virtual computer lets you use the original NAT
feature, which lets you setup the one-to-one mapping of
multiple global and local IP addresses.
URL Blocking Supported Lets you block hundreds of Website connections by
simply entering a keyword.
Schedule Rule Lets you set a time schedule for different services.
Routing Table Supported Allows you to determine which physical interface address
to use for outgoing IP data grams. If you have more than
one router and subnet, enable the routing table to allow
packets to find the proper routing path and the different
subnets to communicate with each other.
2

4 | Panel Layout
The following figure shows the front panel layout, which is followed by a table describing in
detail the status and function of each LED.
SMCBR14VPN Front Panel
SMCBR18VPN Front Panel
LED Function Color Status Description
Power Power
indicator
Green Steady Power is being applied to this
device
M1 System
status
indicator
Orange Blinking M1 is flashing once every second to
indicate that the system has power
Steady The WAN port is connectedWAN Wan port
activity
Green
Blinking The WAN port is sending or
receiving data
Steady An active station is connected to
the LAN port
Link/Act.
1–4/8
Link status Green
Blinking The corresponding LAN port is
sending or receiving data
Speed
10/100
Data rate Green Steady Data is transmitted at 100 Mbps
SMCBR14VPN Rear Panel: 4 LAN, 1 WAN, and 1 COM port
3

SMCBR18VPN Front Panel: 8 LAN, 1 WAN, and 1 COM port
Port Type Description
5 VDC Receptor for power adapter:
5 VDC, 2 A (minimum)
WAN This is the connection for the Ethernet cable to
the Ethernet port on the cable or DSL modem
Port 1–4/8 These are the connections for Ethernet cables to
your Ethernet enabled computers
COM Serial port (connection for an analog modem or
console cable)
5 | Hardware Installation
The router can be placed anywhere in your office or home. No special wiring or cooling
requirements are necessary. However, you should comply with the following guidelines:
•Place your router on a flat, horizontal surface
•Be sure to place your router away from any heating devices
•Avoid dusty and/or humid areas
1) Setup LAN Connection: Connect an Ethernet cable from your computer’s Ethernet
port to one of the LAN ports of the router.
2) Step WAN Connection: Insert one end of the Ethernet cable into the WAN port on
the back panel of your router, and the other end to the cable/DSL modem. You may
connect an analog modem (optional) to function as a backup connection.
3) Power Up: The router automatically enters the self-testing phase once the power
cord is plugged into a wall outlet. When in self-testing phase, the M1 indicator LED
illuminates for about five seconds to indicate proper connection. The M1 LED flashes
twice as soon as the self-testing phase is completed. After the completion of the
self-testing phase, the M1 LED should flash once per second to indicate that the
router is functioning properly.
6 | Network Settings and Software Installation
Default Settings
IP Address 192.168.2.1
Subnet Mask 255.255.255.0
Administrator Password smcadmin
User Password password
4