SMC Networks BR14VPN - annexe 1 User manual

Copyright
Information furnished by SMC Networks, Inc. (SMC) is believed to be accurate and reliable.
However, no responsibility is assumed by SMC for its use, nor for any infringements of patents or
other rights of third parties which may result from its use. No license is granted by implication or
otherwise under any patent or patent rights of SMC. SMC reserves the right to change
specifications at any time without notice.
The products and programs described in this User Guide are licensed products of SMC. This User
Guide contains proprietary information protected by copyright, and this User Guide and all
accompanying hardware and documentation are copyrighted.
SMC does not warrant that the hardware will work properly in all environments and applications,
and makes no warranty and representation, either implied or expressed, with respect to the
quality, performance, merchantability, or fitness for a particular purpose.
Information in this User Guide is subject to change without notice and does not represent a
commitment on the part of SMC. SMC assumes no responsibility for any inaccuracies that may be
contained in this User Guide.
SMC makes no commitment to update or keep current the information in this User Guide, and
reserves the right to make changes to this User Guide and/or product without notice.
No part of this manual may be reproduced or transmitted in any form or by any means,
electronic or mechanical, including photocopying, recording, or information storage and retrieval
systems, for any purpose other than the purchaser's personal use, without the express written
permission of SMC.
Copyright © 2004 by
SMC Networks, Inc.
38 Tesla
Irvine, California 92618
All rights reserved.
Trademarks
SMC® is a registered trademark; and EZ-Stream, EZ Connect, Barricade and EZ Hub are
trademarks of SMC Networks, Inc. Other product and company names are trademarks or
registered trademarks of their respective holders.
i

Compliances
FCC - Class B
This equipment has been tested and found to comply with the limits for a Class B digital device,
pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection
against harmful interference in a residential installation. This equipment generates, uses and can
radiate radio frequency energy and, if not installed and used in accordance with instructions, may
cause harmful interference to radio communications. However, there is no guarantee that the
interference will not occur in a particular installation. If this equipment does cause harmful
interference to radio or television reception, which can be determined by turning the equipment
off and on, the user is encouraged to try to correct the interference by one or more of the
following measures:
• Reorient the receiving antenna
• Increase the separation between the equipment and receiver
• Connect the equipment into an outlet on a circuit different from that to which
the receiver is connected
• Consult the dealer or an experienced radio/TV technician for help
FCC Caution: To assure continued compliance, (for example - use only shielded interface cables
when connecting to computer or peripheral devices). Any changes or modifications not expressly
approved by the party responsible for compliance could void the user’s authority to operate this
equipment.
This device complies with Part 15 of the FCC Rules. Operation is subject to the following two
conditions: (1) This device may not cause harmful interference, and (2) this device must accept
any interference received, including interference that may cause undesired operation.
CAUTION STATEMENT:
FCC Radiation Exposure Statement
This equipment complies with FCC radiation exposure limits set forth for an uncontrolled
environment. This equipment should be installed and operated with a minimum distance of 5
centimeters between the radiator and your body. This transmitter must not be co-located or
operating in conjunction with any other antenna or transmitter. Note: In order to maintain
compliance with the limits of a Class B digital device, SMC requires that you use a quality
interface cable when connecting to this device. Changes or modifications not expressly approved
by SMC could void the user’s authority to operate this equipment.
Attach unshielded twisted-pair cable (UTP) to the RJ-45 port and shielded USB cable to the USB
port.
ii

EC Conformance Declaration – Class B
SMC contact for these products in Europe is:
SMC Networks Europe,
Edificio Conata II
Calle Fructuos Gelabert 6-8, 2o, 4a
08970 – Sant Joan Despi
Barcelona, Spain
This equipment complies with the requirements relating to electromagnetic compatibility, EN
55022/A1 Class B, and EN 50082-1. This meets the essential protection requirements of the
European Council Directive 89/336/EEC on the approximation of the laws of the member states
relation to electromagnetic compatibility.
Important Safety Notices
•Unplug this product from the AC power before cleaning. Do not use liquid cleaners or
aerosol cleaners. Use a dry cloth for cleaning.
•Route the power supply cords so that they are not likely to be walked on or pinched by
items placed upon or against them. Pay particular attention to cords at plugs,
convenience receptacles, and the point where they exit from the product.
•Situate the product away from heat sources such as radiators, heat registers, stoves, and
other products that produce heat.
•To prevent fire or shock hazard, do not expose this unit to rain or moisture. Do not allow
water or any foreign objects to enter the interior. This may cause a fire or electric shock.
In the event that water or other foreign objects get into the product, immediately unplug
the AC adapter from the electrical outlet and contact Customer Service for inspection
and/or repair/replacement options.
•Do not take apart the equipment. This may cause fire, electric shock or other injuries.
•Do not overload wall outlets and extension cords as this can result in a fire or electric
shock.
•This product is for use with the AC adapter that comes with it. Use with any other AC
power is strongly discouraged as it may cause fire, electric shock, or damage to the
equipment.
iii

1 | SYSTEM REQUIREMENTS 1
2 | EQUIPMENT CHECKLIST 1
3 | FUNCTIONS AND FEATURES 2
4 | PANEL LAYOUT 3
5 | HARDWARE INSTALLATION 4
6 | NETWORK SETTINGS AND SOFTWARE INSTALLATION 4
6.1 | Installing TCP/IP 5
6.2 | Setting up TCP/IP 5
6.3 | Obtaining an IP Address 6
6.4 | Configuring a Macintosh Computer 7
6.5 | Verifying Your TCP/IP Connection 7
7 | CONFIGURING YOUR BROADBAND VPN ROUTER 8
7.1 | Browser Configuration 8
7.2 | Web Management 8
7.3 | Setup Wizard 9
7.4 | Advanced Setup – SYSTEM 16
7.5 | Advanced Setup - WAN 19
7.6 | Advanced Setup - LAN 24
7.7 | Advanced Setup - NAT 26
7.7.1 | Virtual Server 26
7.7.2 | Special Applications 27
7.7.3 | Virtual Computer 28
7.8 | Advanced Setup - FIREWALL 28
7.8.1 | Network Filters 28
7.8.2 | URL Blocking 29
7.8.3 | MAC Filter 30
7.8.4 | Schedule Rule 31
iv

7.8.5 | Advanced 32
7.8.6 | DMZ 33
7.9 | Advanced Setup - VPN 33
7.9.1 | IPSec Tunnel 33
7.9.2 | IKE Proposal 35
7.9.3 | IPSec Proposal 36
7.9.4 | Dynamic VPN 38
7.9.5 | PPTP/L2TP Server 39
7.10 | Advanced Setup - SNMP 40
7.11 | Advanced Setup - ROUTING 41
7.12 | Advanced Setup - MISCELLANEOUS 42
7.13 | Advanced Setup – DISPLAY STATUS 43
7.14 | DDNS (Dynamic DNS) 43
7.15 | UPnP (Universal Plug-and-Play) 44
7.16 | Tools 44
7.17 | Status 45
8 | IPSEC SETTINGS GUIDE (FOR REFERENCE/EXAMPLE ONLY) 47
8.1 | Tunnel between two SMCBR14VPN 47
8.1.1 | Settings for Router 1 47
8.1.2 | Settings for router 2 49
8.1.3 | Common Settings for both routers 52
8.2 | Tunnel between a SMCBR14VPN and standalone client. 53
8.3 | PPTP/ L2TP configuration example 54
8.4 | Changes in 1.04 releases 55
9 | TROUBLESHOOTING 59
9.1 | Questions and Awnsers 62
10 | TECHNICAL SPECIFICATIONS 64
11 | TERMINOLOGY 66
v

1 | System Requirements
•Internet access from your local telephone company or Internet Service Provider (ISP)
using a DSL modem, cable modem, Dial-Up modem, or ISDN modem
•A PC using a fixed IP address or dynamic IP address assigned via DHCP, as well as a
Gateway server address and DNS server address from your service provider
•A computer equipped with a 10 Mbps, 100 Mbps, or 10/100 Mbps Fast Ethernet card, or
a USB-to-Ethernet converter
•TCP/IP network protocol installed on each PC that needs to access the internet
•A Java-enabled web browser, such as Microsoft Internet Explorer 5.0 or above, or
Netscape Communicator 4.0 or above installed on one PC at your site for configuring the
router.
2 | Equipment Checklist
After unpacking the Barricade™ VPN Cable/DSL Broadband Router, check the contents of the box
to be sure you have received the following components:
•1 Barricade™ VPN Cable/DSL Broadband Router
•1 EZ Installation Wizard and Documentation CD
•1 Ethernet (CAT5-UTP/Straight-Through) Cable
•1 Power Adapter
•1 Quick Installation Guide
Immediately inform your dealer in the event of any incorrect, missing or damaged parts. If
possible, please retain the carton and original packing materials in case there is a need to return
the product.
Please register this product and upgrade the product warranty at SMC's Web site:
http://www.smc.com
1

3 | Functions and Features
Broadband Modem and NAT
Router Connects multiple computers to a broadband (cable or DSL) modem, and/or Ethernet router to access the Internet.
10/100 Mbps Ethernet Interface Provides a 10/100 Base-TX interface to connect to a DSL or
cable modem for broadband Internet access.
Auto-sensing Ethernet Switch Equipped with a 4/8-port auto-sensing Ethernet switch.
VPN Supported Supports multiple IPSec sessions and has built-in PPTP and
L2TP VPN servers.
Firewall All unwanted packets from outside sources are blocked to
protect your intranet.
DHCP Server Supported All networked computers can retrieve TCP/IP settings
automatically from this device.
Web-based Configuration Configurable by any networked computer’s Web browser
using Netscape or Internet Explorer.
Network Filter Supported The Packet Filter lets you control access to a network by
analyzing the incoming and outgoing packets; this lets you
either letting them pass or halt based on the IP address or
the source and destination.
Universal Plug and Play (UPnP)
Supported Enables devices such as PCs, routers and printers to be plugged into a network and ensure automatic recognition.
Virtual Server Supported Lets you make your Website, FTP site, and other services on
your LAN accessible to Internet users.
User Defined Application
Sensing Tunnel Lets you define the attributes to support special applications that require multiple connections like Internet gaming, video
conferencing, Internet telephony, and so on. This device
can sense the application type and opens a multi-port tunnel
for it.
DMZ Host Supported Enables a computer to be fully accessible to the Internet.
This function is used when the special application sensing
tunnel feature is insufficient to allow an application to
function correctly.
SNMP Supported SNMP (Simple Network Management Protocol) is a protocol
that lets users remotely manage a computer network by
polling and setting terminal values, and monitoring network
events.
System Time Supported Lets you synchronize system time with the network time
server.
Virtual Computers Supported The virtual computer lets you use the original NAT feature,
which lets you setup the one-to-one mapping of multiple
global and local IP addresses.
URL Blocking Supported Lets you block hundreds of Website connections by simply
entering a keyword.
Schedule Rule Lets you set a time schedule for different services.
Routing Table Supported Allows you to determine which physical interface address to
use for outgoing IP data grams. If you have more than one
router and subnet, enable the routing table to allow packets
to find the proper routing path and the different subnets to
communicate with each other.
2

4 | Panel Layout
The following figure shows the front panel layout, which is followed by a table describing in detail
the status and function of each LED.
SMCBR14VPN Front Panel
SMCBR18VPN Front Panel
LED Function Color Status Description
Power Power
indicator Green Steady Power is being applied to this device
M1 System
status
indicator
Orange Blinking M1 is flashing once every second to
indicate that the system has power
Steady The WAN port is connectedWAN Wan port
activity Green
Blinking The WAN port is sending or receiving
data
Steady An active station is connected to the
LAN port
Link/Act.
1–4/8 Link status Green
Blinking The corresponding LAN port is
sending or receiving data
Speed
10/100 Data rate Green Steady Data is transmitted at 100 Mbps
SMCBR14VPN Rear Panel: 4 LAN, 1 WAN, and 1 COM port
3

SMCBR18VPN Front Panel: 8 LAN, 1 WAN, and 1 COM port
Port Type Description
5 VDC Receptor for power adapter:
5 VDC, 2 A (minimum)
WAN This is the connection for the Ethernet cable to the
Ethernet port on the cable or DSL modem
Port 1–4/8 These are the connections for Ethernet cables to
your Ethernet enabled computers
COM Serial port (connection for an analog modem or
console cable)
5 | Hardware Installation
The router can be placed anywhere in your office or home. No special wiring or cooling
requirements are necessary. However, you should comply with the following guidelines:
•Place your router on a flat, horizontal surface
•Be sure to place your router away from any heating devices
•Avoid dusty and/or humid areas
1) Setup LAN Connection: Connect an Ethernet cable from your computer’s Ethernet port
to one of the LAN ports of the router.
2) Step WAN Connection: Insert one end of the Ethernet cable into the WAN port on the
back panel of your router, and the other end to the cable/DSL modem. You may connect
an analog modem (optional) to function as a backup connection.
3) Power Up: The router automatically enters the self-testing phase once the power cord
is plugged into a wall outlet. When in self-testing phase, the M1 indicator LED illuminates
for about five seconds to indicate proper connection. The M1 LED flashes twice as soon
as the self-testing phase is completed. After the completion of the self-testing phase, the
M1 LED should flash once per second to indicate that the router is functioning properly.
6 | Network Settings and Software Installation
Default Settings
IP Address 192.168.2.1
Subnet Mask 255.255.255.0
Administrator Password smcadmin
User Password password
4

You must first verify that the TCP/IP communication protocol is properly installed and the
computer is configured to get its IP address via the DHCP Server that is built-into this router. If
you have not previously installed TCP/IP protocols on your client PCs, refer to the following
section.
6.1 | Installing TCP/IP
Windows 95/98/Me
1. Click Start/Settings/Control Panel.
2. Double-click the Network icon and select the Configuration tab in the Network window.
3. Click the Add button.
4. Double-click Protocol.
5. Select Microsoft in the manufacturers list. Select TCP/IP in the Network Protocols list.
Click the OK button to return to the Network window.
6. The TCP/IP protocol will be listed in the Network window.
7. Click OK. The operating system may prompt you to restart your system. Click Yes and
the computer will shut down and restart.
Windows 2000/XP
1. Click the Start button and choose Settings, then click the Network and Dial-up
Connections icon.
2. Double-click the Local Area Connection icon, and click the Properties button on the
General tab.
3. Click the install button.
4. Double-click Protocol.
5. Choose Internet Protocol (TCP/IP). Click the OK button to return to the Network window.
6. The TCP/IP protocol will be listed in the Network window. Click OK to complete the
installation procedure.
6.2 | Setting up TCP/IP
Windows 95/98/Me
You may find that the instructions here do not exactly match your version of Windows. This is
because these steps and screenshots were created in Windows 98. Windows 95 and Windows
Millennium Edition are very similar, but not identical, to Windows 98.
1. From the Windows desktop, click Start/Settings/Control Panel.
2. In the Control Panel, locate and double-click the Network icon.
3. On the Network window Configuration tab, double-click the TCP/IP entry for your
network card.
4. Click the IP Address tab.
5. Click the “Obtain an IP address” option.
6. Next click on the Gateway tab and verify the Gateway field is blank. If there are IP
addresses listed in the Gateway section, highlight each one and click Remove until the
section is empty.
7. Click the OK button to close the TCP/IP Properties window.
8. On the Network Properties Window, click the OK button to save these new settings.
Note: Windows may ask you for the original Windows installation disk or additional files.
Check for the files at c:\windows\options\cabs, or insert your Windows CD-ROM into your
CDROM drive and check the correct file location, e.g., D:\win98, D:\win9x. (if D is the
letter of your CD-ROM drive).
5