SMC Networks BR21VPN - annexe 1 User manual

Barricade™
Dual WAN Port Load Balancing VPN Router
SMCBR21VPN

Copyright
Information furnished by SMC Networks, Inc. (SMC) is believed to be accurate
and reliable. However, no responsibility is assumed by SMC for its use, nor for
any infringements of patents or other rights of third parties which may result from
its use. No license is granted by implication or otherwise under any patent or
patent rights of SMC. SMC reserves the right to change specifications at any
time without notice.
Copyright © 2008 by
SMC Networks, Inc.
20 Mason
Irvine, CA 92618
All rights reserved. Printed in Taiwan
Trademarks:
SMC is a registered trademark; and EZ Connect is a trademark of SMC Networks,
Inc. Other product and company names are trademarks or registered trademarks of
their respective holders.

2
LIMITED WARRANTY
Limited Warranty Statement: SMC Networks, Inc. (“SMC”) warrants its products to be free
from defects in workmanship and materials, under normal use and service, for the
applicable warranty term. All SMC products carry a standard 90-day limited warranty from
the date of purchase from SMC or itsAuthorized Reseller. SMC may, at its own discretion,
repair or replace any product not operating as warranted with a similar or functionally
equivalent product, during the applicable warranty term. SMC will endeavor to repair or
replace any product returned under warranty within 30 days of receipt of the product. The
standard limited warranty can be upgraded to a Limited Lifetime* warranty by registering
new products within 30 days of purchase from SMC or its Authorized Reseller. Registration
can be accomplished via the enclosed product registration card or online via the SMC
website. Failure to register will not affect the standard limited warranty. The Limited
Lifetime warranty covers a product during the Life of that Product, which is defined as the
period of time during which the product is an “Active” SMC product. A product is
considered to be “Active” while it is listed on the current SMC price list. As new
technologies emerge, older technologies become obsolete and SMC will, at its discretion,
replace an older product in its product line with one that incorporates these newer
technologies. At that point, the obsolete product is discontinued and is no longer an
“Active” SMC product. A list of discontinued products with their respective dates of
discontinuance can be found at:
http://www.smc.com/index.cfm?action=customer_service_warranty.
All products that are replaced become the property of SMC. Replacement products may
be either new or reconditioned. Any replaced or repaired product carries either a 30-day
limited warranty or the remainder of the initial warranty, whichever is longer. SMC is not
responsible for any custom software or firmware, configuration information, or memory
data of Customer contained in, stored on, or integrated with any products returned to SMC
pursuant to any warranty. Products returned to SMC should have any customer-installed
accessory or add-on components, such as expansion modules, removed prior to returning
the product for replacement. SMC is not responsible for these items if they are returned
with the product. Customers must contact SMC for a Return Material Authorization number
prior to returning any product to SMC. Proof of purchase may be required. Any product
returned to SMC without a valid Return Material Authorization (RMA) number clearly

3
marked on the outside of the package will be returned to customer at customer’s expense.
For warranty claims within North America, please call our toll-free customer support
number at [phone]. Customers are responsible for all shipping charges from their
facility to SMC. SMC is responsible for return shipping charges from SMC to customer.
WARRANTIES EXCLUSIVE: IF AN SMC PRODUCT DOES NOT OPERATEAS
WARRANTED ABOVE, CUSTOMER’S SOLE REMEDY SHALL BE REPAIR OR
REPLACEMENT OF THE PRODUCT IN QUESTION, AT SMC’S OPTION. THE
FOREGOING WARRANTIES AND REMEDIES ARE EXCLUSIVE AND ARE IN LIEU OF
ALL OTHER WARRANTIES OR CONDITIONS, EXPRESS OR IMPLIED, EITHER IN
FACT OR BY OPERATION OF LAW, STATUTORY OR OTHERWISE, INCLUDING
WARRANTIES OR CONDITIONS OF MERCHANTABILITYAND FITNESS FORA
PARTICULAR PURPOSE. SMC NEITHER ASSUMES NOR AUTHORIZES ANY OTHER
PERSON TO ASSUME FOR ITANY OTHER LIABILITY IN CONNECTION WITH THE
SALE, INSTALLATION, MAINTENANCE OR USE OF ITS PRODUCTS. SMC SHALL
NOT BE LIABLE UNDER THIS WARRANTY IF ITS TESTING AND EXAMINATION
DISCLOSE THE ALLEGED DEFECT IN THE PRODUCT DOES NOT EXIST OR WAS
CAUSED BY
CUSTOMER’S OR ANY THIRD PERSON’S MISUSE, NEGLECT, IMPROPER
INSTALLATION OR TESTING, UNAUTHORIZED ATTEMPTS TO REPAIR, OR ANY
OTHER CAUSE BEYOND THE RANGE OF THE INTENDED USE, OR BYACCIDENT,
FIRE, LIGHTNING, OR OTHER HAZARD.
LIMITATION OF LIABILITY: IN NO EVENT, WHETHER BASEDIN CONTRACT OR TORT
(INCLUDING NEGLIGENCE), SHALL SMC BE LIABLE FOR INCIDENTAL,
CONSEQUENTIAL, INDIRECT, SPECIAL, OR PUNITIVE DAMAGES OF ANY KIND, OR
FOR LOSS OF REVENUE, LOSS OF BUSINESS, OR OTHER FINANCIAL LOSS
ARISING OUT OF OR IN CONNECTION WITH THE SALE, INSTALLATION,
MAINTENANCE, USE, PERFORMANCE, FAILURE, OR INTERRUPTION OF ITS
PRODUCTS, EVEN IF SMC OR ITSAUTHORIZED RESELLER HAS BEENADVISED
OF THE POSSIBILITY OF SUCH DAMAGES. SOME STATES DO NOTALLOW THE
EXCLUSION OF IMPLIED WARRANTIES OR THE LIMITATION OF INCIDENTAL OR

4
CONSEQUENTIAL DAMAGES FOR CONSUMER PRODUCTS, SO THE ABOVE
LIMITATIONS AND EXCLUSIONS MAY NOTAPPLY TO YOU. THIS WARRANTY GIVES
YOU SPECIFIC LEGAL
RIGHTS, WHICH MAY VARY FROM STATE TO STATE. NOTHING IN THIS WARRANTY
SHALL BE TAKEN TOAFFECT YOUR STATUTORY RIGHTS.
* SMC will provide warranty service for one year following discontinuance from the active
SMC price list. Under the limited lifetime warranty, internal and external power supplies,
fans, and cables are covered by a standard one-year warranty from date of purchase.
SMC Networks, Inc.
20 Mason
Irvine, CA 92618

5
COMPLIANCES
FCC - Class A
This equipment has been tested and found to comply with the limits for a Class A digital
device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide
reasonable protection against harmful interference in a residential installation. This
equipment generates, uses and can radiate radio frequency energy and, if not installed
and used in accordance with instructions, may cause harmful interference to radio
communications. However, there is no guarantee that the interference will not occur in a
particular installation. If this equipment does cause harmful interference to radio or
television reception, which can be determined by turning the equipment off and on, the
user is encouraged to try to correct the interference by one or more of the following
measures:
•Reorient the receiving antenna
•Increase the separation between the equipment and receiver
•Connect the equipment into an outlet on a circuit different from that to which the
receiver is connected
•Consult the dealer or an experienced radio/TV technician for help
EC Conformance Declaration - Class A
SMC contact for these products in Europe is:
SMC Networks Europe,
Edificio Conata II,
Calle Fructuós Gelabert 6-8, 2o, 4a,
08970 - Sant Joan Despí,
Barcelona, Spain.
This information technology equipment complies with the requirements of the Council
Directive 89/336/EEC on the Approximation of the laws of the Member States relating to
Electromagnetic Compatibility and 73/23/EEC for electrical equipment used within
certain
voltage limits and the Amendment Directive 93/68/EEC. For the evaluation of the
compliance with these Directives, the following standards were applied:

6
RFI Emission:
•Limit class A according to EN 55022:1998, IEC 60601-1-2 (EMC,medical)
•Limit class A for harmonic current emission according toEN 61000-3-2/1995
•Limitation of voltage fluctuation and flicker in low-voltage supply system
according to EN 61000-3-3/1995
Immunity:
•Product family standard according to EN 55024:1998
•Electrostatic Discharge according to EN 61000-4-2:1995
(Contact Discharge: ±4 kV, Air Discharge: ±8 kV)
•Radio-frequency electromagnetic field according to EN 61000-4-3:1996
(80 - 1000 MHz with 1 kHz AM 80% Modulation: 3 V/m)
•Electrical fast transient/burst according to EN 61000-4-4:1995 (AC/DC
power supply: ±1 kV, Data/Signal lines: ±0.5 kV)
•Surge immunity test according to EN 61000-4-5:1995
(AC/DC Line to Line: ±1 kV, AC/DC Line to Earth: ±2 kV)
•Immunity to conducted disturbances, Induced by radio-frequency fields:
EN 61000-4-6:1996 (0.15 - 80 MHz with
1 kHz AM 80% Modulation: 3 V/m)
•Power frequency magnetic field immunity test according to
EN 61000-4-8:1993 (1 A/m at frequency 50 Hz)
•Voltage dips, short interruptions and voltage variations immunity test
according to EN 61000-4-11:1994 (>95% Reduction @10 ms, 30%
Reduction @500 ms, >95% Reduction @5000 ms)
LVD:
•EN 60950-1:2001

7
Please read the following safety information carefully
before installing the device:
WARNING: Installation and removal of the unit must be carried out by
qualified personnel only.
•This guide is intended for use by network administrators who are
responsible for setting up and installing network equipment;
consequently it assumes a basic working knowledge of LANs (Local Area
Networks).
•The unit must be connected to an earthed (grounded) outlet to comply with
international safety standards.
•Do not connect the unit to an A.C. outlet (power supply) without an
earth (ground) connection.
•The appliance coupler (the connector to the unit and not the wall plug)
must have a configuration for mating with an EN 60320/IEC 320
appliance inlet.
•The socket outlet must be near to the unit and easily accessible. You can only
remove power from the unit by disconnecting the power cord from the outlet.
•This unit operates under SELV (Safety Extra Low Voltage) conditions
according to IEC 60950. The conditions are only maintained if the
equipment to which it is connected also operates under SELV
conditions.

8
Veuillez lire à fond l’information de la sécurité suivante avant d’installer le Device:
AVERTISSEMENT: L.installation et la dépose de ce groupe doivent être
confiés à un personnel qualifié.
•Ne branchez pas votre appareil sur une prise secteur (alimentation
électrique) lorsqu’il n’y a pas de connexion de mise à la terre (mise à la
masse).
•Vous devez raccorder ce groupe à une sortie mise à la terre (mise à la masse)
afin de respecter les normes internationales de sécurité.
•Le coupleur d.appareil (le connecteur du groupe et non pas la prise
murale) doit respecter une configuration qui permet un branchement sur une
entrée d.appareil EN 60320/IEC 320.
•La prise secteur doit se trouver à proximité de l.appareil et son accès doit être
facile. Vous ne pouvez mettre l.appareil hors circuit qu.en
débranchant son cordon électrique au niveau de cette prise.
•L.appareil fonctionne à une tension extrêmement basse de sécurité qui
est conforme à la norme IEC 60950. Ces conditions ne sont maintenues que si
l.équipement auquel il est raccordé fonctionne dans les mêmes conditions.
Bitte unbedingt vor dem Einbauen des RPU die
folgenden Sicherheitsanweisungen durchlesen:
WARNUNG: Die Installation und derAusbau des Geräts darf nur durch
Fachpersonal erfolgen.
•Diese Anleitung ist fr die Benutzung durch Netzwerkadministratoren
vorgesehen, die fr die Installation und das einstellen von
Netzwerkkomponenten verantwortlich sind; sie setzt Erfahrung bei derArbeit mit
LANs (Local Area Networks) voraus.
•Das Gerät sollte nicht an eine ungeerdete Wechselstromsteckdose
angeschlossen werden.

9
•Das Gerät muß an eine geerdete Steckdose angeschlossen werden,
welche die internationalen Sicherheitsnormen erfüllt.
•Der Gerätestecker (der Anschluß an das Gerät, nicht der
Wandsteckdosenstecker) muß einen gemäß EN 60320/IEC 320
konfigurierten Geräteeingang haben.
•Die Netzsteckdose muß in der Nähe des Geräts und leicht zugänglich
sein. Die Stromversorgung des Geräts kann nur durch Herausziehen des
Gerätenetzkabels aus der Netzsteckdose unterbrochen werden.
•Der Betrieb dieses Geräts erfolgt unter den SELV-Bedingungen
(Sicherheitskleinstspannung) gemäß IEC 60950. Diese Bedingungen sind
nur gegeben, wenn auch die an das Gerät angeschlossenen Geräte unter
SELV-Bedingungen betrieben werden
Stromkabel. Dies muss von dem Land, in dem es
benutzt wird geprüft werden:
Schweiz Dieser Stromstecker muß die SEV/ASE
1011Bestimmungen ein- halten.
Europe Das Netzkabel muß vom Typ
HO3VVF3GO.75 (Mindestan-
forderung) sein und die Aufschrift <HAR>
oder <BASEC> tragen
Der Netzstecker muß die Norm CEE 7/7
erfüllen (.SCHUKO.).

10
Warnings and Cautionary Messages
Warning: This product does not contain any serviceable user parts.
Warning: Installation and removal of the unit must be carried out by qualified personnel
only.
Warning: When connecting this device to a power outlet, connect the field ground lead
on the tri-pole power plug to a valid earth ground line to prevent electrical
hazards.
Caution: Wear an anti-static wrist strap or take other suitable measures to prevent
electrostatic discharge when handling this equipment.
Caution: Do not plug a phone jack connector in the RJ-45 port. This may damage this
device. Les raccordeurs ne sont pas utilisé pour le système téléphonique!
Caution: Use only twisted-pair cables with RJ-45 connectors that conform to FCC
standards.
Warnings (in German)
Achtung: Dieses Produkt enthält keine Teile, die eine Wartung vom Benutzer
benötigen.
Achtung: Installation und Deinstallation des Gerätes müssen von qualifiziertem
Servicepersonal durchgeführt werden.
Achtung: Wenn das Gerät an eine Steckdose angeschlossen wird, muß der
Masseanschluß
n Netzstecker mit Schutzerde verbunden werden, um elektrische
Gefahren zu vermeiden.

11
Environmental Statement
The manufacturer of this product endeavours to sustain an environmentally-friendly
policy throughout the entire production process. This is achieved though the following
means:
•Adherence to national legislation and regulations on environmental production
standards.
•Conservation of operational resources.
•Waste reduction and safe disposal of all harmful un-recyclable by-products.
•Recycling of all reusable waste content.
•Design of products to maximize recyclables at the end of the product.s life span.
•Continual monitoring of safety standards.
End of Product Life Span
This product is manufactured in such a way as to allow for the recovery and disposal of
all included electrical components once the product has reached the end of its life.
Manufacturing Materials
There are no hazardous nor ozone-depleting materials in this product.
Documentation
All printed documentation for this product uses biodegradable paper that originates from
sustained and managed forests. The inks used in the printing process are non-toxic.
Purpose
This guide details the hardware features of the product, including Its physical and
performance-related characteristics, and how to install the product.

12
Audience
The guide is intended for use by network administrators who are responsible for
installing and setting up network equipment; consequently, it assumes a basic working
knowledge of LANs (Local Area Networks).
Diese Anleitung ist für die Benutzung durch Netzwerkadministratoren vorgesehen, die
für die Installation und das einstellen von Netzwerkkomponenten verantwortlich sind;
sie setzt Erfahrung bei der Arbeit mit LANs (Local Area Networks) voraus.

13
Contents
CHAPTER 1ADMINISTRATOR...........................................................................................................16
ADMIN....................................................................................................................................................18
LOGOUT..................................................................................................................................................21
SOFTWARE UPDATE.................................................................................................................................22
CHAPTER 2 CONFIGURE ....................................................................................................................23
SETTING..................................................................................................................................................28
DATE /TIME............................................................................................................................................34
MULTIPLE SUBNET..................................................................................................................................35
ROUTE TABLE .........................................................................................................................................38
DDNS ....................................................................................................................................................44
HOST TABLE ...........................................................................................................................................46
LANGUAGE .............................................................................................................................................47
CHAPTER 3 INTERFACE......................................................................................................................48
LAN.......................................................................................................................................................53
WAN......................................................................................................................................................54
DMZ ......................................................................................................................................................62
CHAPTER 4ADDRESS ..........................................................................................................................64
EXAMPLE................................................................................................................................................67
CHAPTER 5 SERVICE...........................................................................................................................74
CUSTOM..................................................................................................................................................78
GROUP....................................................................................................................................................82
CHAPTER 6 SCHEDULE.......................................................................................................................85
EXAMPLE................................................................................................................................................86
CHAPTER 7 QOS....................................................................................................................................88
EXAMPLE................................................................................................................................................92

14
CHAPTER 8AUTHENTICATION........................................................................................................94
EXAMPLE..............................................................................................................................................100
CHAPTER 9 CONTENT BLOCKING................................................................................................104
URL .....................................................................................................................................................108
SCRIPT................................................................................................................................................111
DOWNLOAD..........................................................................................................................................113
P2P/IM ...............................................................................................................................................115
CHAPTER 10 VIRTUAL SERVER......................................................................................................118
EXAMPLE..............................................................................................................................................122
CHAPTER 11 VPN.................................................................................................................................137
EXAMPLE..............................................................................................................................................145
CHAPTER 12 POLICY.........................................................................................................................169
EXAMPLE..............................................................................................................................................175
CHAPTER 13 ALERT SETTING......................................................................................................193
INTERNETALERT ..................................................................................................................................198
CHAPTER 14 ATTACK ALARM......................................................................................................202
INTERNALALARM.................................................................................................................................204
EXTERNALALARM ...............................................................................................................................205
CHAPTER 15 LOG.............................................................................................................................207
TRAFFIC LOG........................................................................................................................................209
EVENT LOG...........................................................................................................................................214
CONNECTION LOG ................................................................................................................................217
LOG BACKUP........................................................................................................................................220
CHAPTER 16 ACCOUNTING REPORT.........................................................................................222
OUTBOUND...........................................................................................................................................225
INBOUND ..............................................................................................................................................232

15
CHAPTER 17 STATISTICS...............................................................................................................238
WAN STATISTICS ..................................................................................................................................240
POLICY STATISTICS ...............................................................................................................................242
CHAPTER 18 STATUS.......................................................................................................................244
INTERFACE............................................................................................................................................245
AUTHENTICATION.................................................................................................................................247
ARPTABLE...........................................................................................................................................248
DHCPCLIENTS ....................................................................................................................................249

16
Chapter 1 Administrator
Administration
“System” is the managing of settings such as the privileges of packets that pass
through the SMC BR21VPN and monitoring controls. The System Administrators
can manage, monitor, and configure SMC BR21VPN settings. But all
configurations are “read-only” for all users other than the System Administrator;
those users are not able to change any setting of the SMC BR21VPN.

17
Define the required fields of Administrator
Administrator Name:
The username of Administrators and Sub Administrator for the SMC
BR21VPN. The admin user name cannot be removed; and the sub-admin
user can be removed or configure.
The default Account: admin; Password: smcadmin
Privilege:
The privileges of Administrators (Admin or Sub Admin). The username of
the main Administrator is Administrator with reading / writing privilege.
Administrator also can change the system setting, log system status, and to
increase or delete sub-administrator. Sub-Admin may be created by the
Admin by clicking New Sub Admin. Sub Admin have only read and
monitor privilege and cannot change any system setting value.
Configure:
Click Modify to change the “Sub-Administrator’s” password or click
Remove to delete a “Sub Administrator.”

18
Admin
Adding a new Sub Administrator
STEP 1﹒In the Admin WebUI, click the New Sub Admin button to create a
new Sub Administrator.
STEP 2﹒In the Add New Sub Administrator WebUI (Figure 1-1) and enter the
following setting:
Sub Admin Name: sub_admin
Password: 12345
Confirm Password: 12345
STEP 3﹒Click OK to add the user or click Cancel to cancel it.
Figure1-1 Add New Sub Admin

19
Modify the Administrator’s Password
STEP 1﹒In the Admin WebUI, locate the Administrator name you want to edit,
and click on Modify in the Configure field.
STEP 2﹒The Modify Administrator Password WebUI will appear. Enter the
following information:
Password: admin
New Password: 52364
Confirm Password: 52364 (Figure1-2)
STEP 3﹒Click OK to confirm password change.
Figure1-2 Modify Admin Password