TRENDnet TW100-BRF104 User manual

TW100-BRF104
Broadband Router + Firewall
User’s Guide
Version 1.00
November 2001

TW100-BRF104 Broadband Router+Firewall
ii Table Of Contents
Table of Contents
List of Figures............................................................................................................................................ iv
List of Tables ............................................................................................................................................. vi
1.1 About the TW100-BRF104 Broadband Router+Firewall............................................................1-1
1.2 Key Features ................................................................................................................................1-1
1.3 Features in Detail.........................................................................................................................1-2
1.4 Application ..................................................................................................................................1-6
2.1 Package Contents.........................................................................................................................2-1
2.2 System Requirements ..................................................................................................................2-1
2.3 TW100-BRF104 Broadband Router+Firewall Front Panel .........................................................2-2
2.4 TW100-BRF104 Broadband Router+Firewall Back Panel..........................................................2-2
2.5 Connecting the Broadband Router+Firewall ...............................................................................2-3
2.6 Back to Factory Defaults .............................................................................................................2-4
3.1 Introduction..................................................................................................................................3-1
3.2 Preparing Your Personal Computers for IP Networking .............................................................3-1
3.3 Configuring Windows 95 or later for IP Networking ..................................................................3-2
3.4 Configuring the Macintosh for IP Networking ............................................................................3-4
3.5 Your Internet Account .................................................................................................................3-6
3.6 Ready For TW100-BRF104 Broadband Router+Firewall Configuration....................................3-8
4.1 Web Configurator And Browsers ................................................................................................4-1
4.2 Introducing The Embedded Web Configurator............................................................................4-2
5.1 Setup ............................................................................................................................................5-1
5.2 System .........................................................................................................................................5-5
5.3 LAN Setup...................................................................................................................................5-6
5.4 Status ...........................................................................................................................................5-9
6.1 Dynamic DNS..............................................................................................................................6-1

Table Of Contents iii
6.2 Port Forwarding ...........................................................................................................................6-3
6.3 Static Route..................................................................................................................................6-6
6.4 Dynamic Route ..........................................................................................................................6-10
6.5 Upgrade and Backup..................................................................................................................6-12
6.6 Remote Management .................................................................................................................6-16
6.7 Diagnostic ..................................................................................................................................6-19
7.1 Security Management ..................................................................................................................7-1
7.2 Web Patrol ...................................................................................................................................7-4
7.3 Services........................................................................................................................................7-7
7.4 Log ...............................................................................................................................................7-9
8.1 Problem Scenarios........................................................................................................................8-1
8.2 FAQ .............................................................................................................................................8-3

TW100-BRF104 Broadband Router+Firewall
iv List of Figures
List of Figures
Figure 1-1 Broadband Router+Firewall Application ...................................................................................1-6
Figure 3-1 Configuring Windows for IP Networking..................................................................................3-2
Figure 3-2 Macintosh TCP/IP......................................................................................................................3-5
Figure 3-3 Verifying Macintosh TCP/IP .....................................................................................................3-5
Figure 4-1 Login Window ...........................................................................................................................4-2
Figure 4-2 Embedded Web Configurator Home..........................................................................................4-3
Figure 5-1 WAN Setup................................................................................................................................5-2
Figure 5-2 System Setup..............................................................................................................................5-5
Figure 5-3 LAN Setup .................................................................................................................................5-7
Figure 5-4 DHCP Client Table ..................................................................................................................5-88
Figure 5-5 Status Screen............................................................................................................................5-99
Figure 5-6 Statistics Screen .....................................................................................................................5-111
Figure 6-1 Dynamic DNS Setup..................................................................................................................6-2
Figure 6-2 Port Forwarding .........................................................................................................................6-5
Figure 6-3 Static Route................................................................................................................................6-7
Figure 6-4 Show Routing Table...................................................................................................................6-9
Figure 6-5 Dynamic Route ........................................................................................................................6-11
Figure 6-6 Upgrade and Backup................................................................................................................6-12
Figure 6-7 Upgrade System Software........................................................................................................6-13
Figure 6-8 Restore Factory Default Configurations ..................................................................................6-14
Figure 6-9 Backup Current Configurations ...............................................................................................6-15
Figure 6-10 Restore Previously Saved Configurations..............................................................................6-15
Figure 6-11 Remote Management .............................................................................................................6-17
Figure 6-12 Diagnostic ............................................................................................................................6-179
Figure 7-1 Security Management ................................................................................................................7-2

List of Figures v
Figure 7-2 Web Patrol..................................................................................................................................7-5
Figure 7-3 Services ....................................................................................................................................7-58
Figure 7-4 Security/Services Event Log ..................................................................................................7-510
Figure 7-5 Web Patrol Log ......................................................................................................................7-512

TW100-BRF104 Broadband Router+Firewall
vi List of Tables
List of Tables
Table 2-1 Front Panel LEDs ........................................................................................................................2-2
Table 2-2 Back Panel Connectors................................................................................................................2-2
Table 5-1 WAN Setup .................................................................................................................................5-3
Table 5-2 System Setup ...............................................................................................................................5-6
Table 5-3 LAN Setup...................................................................................................................................5-7
Table 5-4 DHCP Client Table .....................................................................................................................5-9
Table 5-5 Status Screen ...........................................................................................................................5-100
Table 5-6 Statistics Screen.......................................................................................................................5-111
Table 6-1 Dynamic DNS Setup ...................................................................................................................6-2
Table 6-2 Port Table Entries (Example) ......................................................................................................6-4
Table 6-3 Port Forwarding...........................................................................................................................6-6
Table 6-4 Static Route .................................................................................................................................6-8
Table 6-5 Show Static Routing Table........................................................................................................6-10
Table 6-6 Dynamic Route..........................................................................................................................6-11
Table 6-7 Upgrade and Backup .................................................................................................................6-13
Table 6-8 Remote Management.................................................................................................................6-18
Table 6-9 Diagnostic..............................................................................................................................6-1820
Table 7-1 Security Management..................................................................................................................7-3
Table 7-2 Web Patrol...................................................................................................................................7-6
Table 7-3 Services .....................................................................................................................................7-69
Table 7-4 Security/Services Event Log ...................................................................................................7-611
Table 7-5 Web Patrol Log .......................................................................................................................7-612

TW100-BRF104 Broadband Router+Firewall
Introduction 1-1
Chapter 1
Introduction
1.1 About the TW100-BRF104 Broadband Router+Firewall
The TW100-BRF104 Broadband Router+Firewall provides continuous, high-speed 11 Mbps access
between your Ethernet devices. In addition, it connects your entire network to the Internet through an
external broadband access device (such as a cable modem or DSL modem) that is normally intended for
use by a single computer.
The TW100-BRF104 Broadband Router+Firewall provides you with multiple Web Patrol options, plus
browsing activity reporting and instant alerts - both via e-mail. Parents and network administrators can
establish restricted access policies based on time-of-day, Website addresses and address keywords, and
share high-speed cable/DSL Internet access for up to 253 personal computers. Network Address
Translation (NAT) and DoS prevention protects you from hackers.
With minimum setup, you can install and use the Broadband Router+Firewall within minutes.
1.2 Key Features
 Built in 4-port LAN 10/100 Mbps Ethernet UTP Switch
• Half-duplex or full-duplex operation
• Allows LAN connections at 10 megabits per second (Mbps) or 100 Mbps
• Auto sensing Ethernet (10BASE-T) or Fast Ethernet (100BASE-Tx) transmissions
• Normal/uplink selective switch at the 4th LAN port
 One Ethernet UTP port for WAN connection
• Ethernet connection to a wide area network (WAN) device, such as a cable modem or DSL
modem
 Embedded FTP Server for firmware upgrade
 Embedded FTP Server configuration backup and restore
 Scripting and spoofing for major cable providers
 Restore Factory Defaults Button to reset to factory default IP address, password, and other
configurations

TW100-BRF104 Broadband Router+Firewall
1-2 Introduction
 Embedded Web Configurator for easy setup and management
 Security
• DoS (Denial of Service) prevention
• SPI (Stateful Packet Inspection)
• Applications Services Management
• Login capability
• Web browsing Patrol by using URL keyword blocking
• Auditing and e-mail reporting of web browsing activities
• Network Address Translation (NAT) hides local computers from the Internet
• Powerful packet filtering capabilities
• Incoming port forwarding and DMZ for specific services
 Protocol Support
• IP routing
• Dynamic extended Network Address Translation (NAT+) with port forwarding for operation
with a single static or dynamic IP address
• Dynamic Host Configuration Protocol (DHCP) server for dynamically assigning network
configuration information to computers on the LAN
• DHCP client for dynamically obtaining configuration information from the Internet Service
Provider (ISP)
• DNS Proxy for simplified configuration
• PPP over Ethernet (PPPoE) support
• PPTP support
1.3 Features in Detail
1.3.1 NAT Implementation
The implementation of NAT allows for specific ports redirection, and provides support for the following
“NAT-unfriendly” applications:
• NetMeeting

TW100-BRF104 Broadband Router+Firewall
Introduction 1-3
• CuSeeMe
• Microsoft PPTP client
• Microsoft Traceroute
• RealAudio
• VDOlive
• IRC
• ICQ
• Quake, Quake variants, and other popular games
• Port Forwarding
The Broadband Router+Firewall also allows VPN (IPSec & PPTP) packets to pass though NAT.
1.3.2 Scripting Requirements
The TW100-BRF104 Broadband Router+Firewall supports login scripting and monitoring requirements for
major cable modem deployments such as RoadRunner.
1.3.3 Security
The TW100-BRF104 Broadband Router+Firewall is equipped with several features designed to maintain
security, as described in this section.
 Password Security
PAP and CHAP support (RFC 1334 plus major vendor variations) if required in login script.
 Computers Hidden By NAT
Network address translation (NAT) opens a temporary path to the Internet for requests originating
from the local network. Requests originating from outside the LAN are discarded, preventing
users outside the LAN from finding and directly accessing the computers on the LAN.
 Port Forwarding With NAT
Although NAT prevents Internet locations from directly accessing the computers on the LAN, the
Broadband Router+Firewall allows you to direct incoming traffic to specific computers based on
the service port number of the incoming request, or to one designated “DMZ” host computer.
1.3.4 Firewall
 Access Control (Application Services Management)
Block selected application services, such as ICQ, MSN messenger, on-line games, and so on.

TW100-BRF104 Broadband Router+Firewall
1-4 Introduction
 DoS (Denial Of Service) Prevention
Protect the devices in the LAN from hacker attacks.
 Real Time Alert
While services are to access, or hacker attempt to attack, a real time alert via email will be sent
to the assigned administrator.
 Schedule
The TW100-BRF104 allows the user to specify the day and time to blocking.
 Trusted Host
The TW100-BRF104 allows the user to specify one Trusted host from blocking by the fixed IP
address.
 Periodical Reports And Logs
• The Security events and services activities will be recorded sequentially. The log will
always keep the latest 128 entries.
• The log can be sent to the assigned administrator via email by weekly, daily, or every
periodical report page.
1.3.5 Web Patrol
With its Web Patrol features, the TW100-BRF104 Broadband Router+Firewall prevents objectionable web
contents from reaching your computers. Its Web Patrol features include:
 Web Patrol By Domain Or Keyword
The TW100-BRF104 uses Web Patrol to enforce your network’s Internet access policies. The
Broadband Router+Firewall allows you to control access to Internet content by screening for
keywords within Web URLs.
 Alert Of Inappropriate Use
You can configure the Broadband Router+Firewall to send an immediate alert e-mail message to
you whenever a local user attempts to access a blocked Web site.
 Schedule
The TW100-BRF104 allows the user to specify the day and time to blocking.
 Trusted Host
The TW100-BRF104 allows the user to specify one Trusted host from blocking by the fixed IP
address.
 Periodical Reports And Logs