Netopia 4752 Uživatelský manuál

Netopia ™ 4752 SDSL Integrated Access Device Administration Guide

x Administration Guide Appendix F — Technical Specifications and Safety Information... F-1 Description...

10-18 Administration GuideConfiguring the IP Address Server optionsTo access the enhanced DHCP server functions, from the Main Menu navigate to Statis

IP Setup 10-19You can select the entries in the Served IP Addresses screen. Use the up and down arrow keys to move the selection to one of the entri

10-20 Administration Guide Details… is displayed if the entry is associated with both a host name and a client identifier. Selecting Details… display

IP Setup 10-21 Include is displayed if the entry is either excluded or declined. An IP address is marked declined when a client to whom the DHCP se

10-22 Administration GuideThe router’s Ethernet IP address(es) will be automatically excluded from the address serving pool(s) on startup. Entries in

IP Setup 10-23DDDDHHHHCCCCPPPP RRRReeeellllaaaayyyy AAAAggggeeeennnnttttThe Netopia 4752 offers DHCP Relay Agent functionality, as defined in R

10-24 Administration GuideSelect IP Address Serving and press Return. The IP Address Serving screen appears.Select IP Address Serving Mode. The pop-u

IP Setup 10-25Note: The remote DHCP server(s) to which the Netopia Router is relaying DHCP requests must be capable of servicing relayed requests. N

10-26 Administration Guide1. Select Profile Name and enter a name for this connection profile. It can be any name you wish. For example: the name of yo

IP Setup 10-275. Select ADD PROFILE NOW and press Return. Your new connection profile will be added.If you want to view the connection profiles in you

PPPPaaaarrrrtttt IIII:::: GGGGeeeettttttttiiiinnnngggg SSSSttttaaaarrrrtttteeeedddd

10-28 Administration Guide

Multiple Network Address Translation 11-1CCCChhhhaaaapppptttteeeerrrr 11111111MMMMuuuullllttttiiiipppplllleeee NNNNeeeettttwwwwoooorrrrkkkk

11-2 Administration GuideThe following is a general description of these features:Port Address TranslationThe simplest form of classic Network Addres

Multiple Network Address Translation 11-3When addresses are returned to the group of available addresses, they are returned to the head of the group

11-4 Administration GuideExterior addresses are allocated to internal hosts on a demand, or as-needed, basis and then made available when traffic from

Multiple Network Address Translation 11-5In order to support this type of mapping, you define two address ranges. First, you define a public range whi

11-6 Administration GuideMultiNAT ConfigurationYou configure the MultiNAT features through the console menu: For a simple 1-to-many NAT configuration (

Multiple Network Address Translation 11-71. Define the public range of addresses that external computers should use to get to the NAT internal machin

11-8 Administration GuideThe Network Address Translation screen appears.Public Range defines an external address range and indicates what type of mapp

Multiple Network Address Translation 11-9The Add NAT Public Range screen appears. Select Range Name and give a descriptive name to this range. Sel

Administration Guide

11-10 Administration Guide Select Map List Name and enter a descriptive name for this map list. A new menu item, Add Map, appears. Select Add Map a

Multiple Network Address Translation 11-11 From the list of public ranges you defined, select the one that you want to map to the interior range for

11-12 Administration GuideModifying map listsYou can make changes to an existing map list after you have created it. Since there may be more than one

Multiple Network Address Translation 11-13 Add Map allows you to add a new map to the map list. Show/Change Maps allows you to modify the individu

11-14 Administration GuideMake any modifications you need and then select CHANGE NAT MAP and press Return. Your changes will become effective and you

Multiple Network Address Translation 11-15 You can press Escape at any time in the pop-up menu to abort the move and restore the map list to its or

11-16 Administration GuideAdding Server ListsServer lists, also known as Exports, are handled similarly to map lists. If you want to make a particula

Multiple Network Address Translation 11-17 Select Add Server and press Return. The Add NAT Server screen appears. Select Service and press Return.

11-18 Administration Guide Enter the First and Last Port Number between ports 1 and 65535. Select OK and press Return. You will be returned to the A

Multiple Network Address Translation 11-19Modifying server listsOnce a server list exists, you can select it for modification or deletion. Select Sh

Introduction 1-1CCCChhhhaaaapppptttteeeerrrr 1111IIIInnnnttttrrrroooodddduuuuccccttttiiiioooonnnn OOOOvvvveeeerrrrvvvviiiieeeewwww The Netopia

11-20 Administration Guide Selecting Show/Change Server or Delete Server displays the same pop-up menu.Select any server from the list and press Ret

Multiple Network Address Translation 11-21Deleting a serverTo delete a server from the list, select Delete Server from the Show/Change NAT Server Li

11-22 Administration GuideBinding Map Lists and Server ListsOnce you have created your map lists and server lists, for most Netopia Router models you

Multiple Network Address Translation 11-23 Select NAT Map List and press Return. A pop-up menu displays a list of your defined map lists. Select th

11-24 Administration GuideIP Parameters (WAN Default Profile)The Netopia 4752 in HDLC (Copper Mountain) Operation Mode supports a WAN default profile t

Multiple Network Address Translation 11-25 Select NAT Map List and press Return. A pop-up menu displays a list of your defined map lists. Select th

11-26 Administration GuideNAT AssociationsConfiguration of map and server lists alone is not sufficient to enable NAT for a WAN connection because map

Multiple Network Address Translation 11-27keys. Select the item by pressing Return to display a pop-up menu of all of your configured lists. Select

11-28 Administration GuideMultiNAT Configuration ExampleTo help you understand a typical MultiNAT configuration, this section describes an example of t

Multiple Network Address Translation 11-29Enter your ISP-supplied values as shown below.Select NEXT SCREEN and press Return.Your IP values are shown

1-2 Administration Guide An IAD combines the voice telephony features of a telephone PBX system with the data routing features of an IP data router.

11-30 Administration GuideSelect Show/Change Public Range, then Easy-PAT Range, and press Return. Enter the value your ISP assigned for your public a

Multiple Network Address Translation 11-31Select ADD NAT PUBLIC RANGE and press Return. You are returned to the Network Address Translation screen.N

11-32 Administration GuideTo make these changes, first limit the range of remapped addresses on the Static Map and then edit the default server list c

Virtual Private Networks (VPNs) 12-1CCCChhhhaaaapppptttteeeerrrr 11112222VVVViiiirrrrttttuuuuaaaallll PPPPrrrriiiivvvvaaaatttteeee NNNNeeee

12-2 Administration GuideTunneling is a process of creating a private path between a remote user or private network and another private network over

Virtual Private Networks (VPNs) 12-3the receiving side, an IPsec-compliant device decrypts each packet. The Netopia 4752 supports the more secure Tu

12-4 Administration GuidePPTP configurationTo set up the router as a PPTP Network Server (PNS) capable of answering PPTP tunnel requests you must also

Virtual Private Networks (VPNs) 12-5When you define a Connection Profile as using PPTP by selecting PPTP as the datalink encapsulation method, and the

12-6 Administration Guideitself a compression protocol. Note: The Netopia 4752 supports 128-bit (“strong”) encryption. Unlike MS-CHAP version 1, whic

Virtual Private Networks (VPNs) 12-7The IP Profile Parameters screen appears. Enter the Remote IP Address and Remote IP Mask for the host to which y

Setting Up Internet Services 2-1CCCChhhhaaaapppptttteeeerrrr 2222SSSSeeeettttttttiiiinnnngggg UUUUpppp IIIInnnntttteeeerrrrnnnneeeetttt

12-8 Administration GuideThe Add Connection Profile screen appears. From the Data Link Encapsulation pop-up menu select IPsec. Then select Data Link

Virtual Private Networks (VPNs) 12-9 You must enter an Encryption Key if the Encryption Transform is DES. The key for DES must be a hexadecimal str

12-10 Administration GuideIP Profile ParametersThe following IP Profile Options screen is displayed for an IPsec Connection Profile. You must specify a

Virtual Private Networks (VPNs) 12-11 You can remove a Filter Set. You can choose to configure Advanced IP Profile Options (see “Advanced IP Profile

12-12 Administration GuideInteroperation with other features Address serving is not supported through IPsec Tunnels. AH is not supported through an

Virtual Private Networks (VPNs) 12-13ATMP/PPTP Default Answer ProfileThe WAN Configuration menu offers a ATMP/PPTP Default Answer Profile option. Use t

12-14 Administration Guidedefault) if you do not. This applies to both ATMP and PPTP connections. For PPTP tunnel connections only, you must define w

Virtual Private Networks (VPNs) 12-15Dial-Up Networking for VPNMicrosoft Windows Dial-Up Networking software permits a remote standalone workstation

12-16 Administration GuideThe Communications window appears.5. In the Communications window, select Dial-Up Networking and click the OK button.This r

Virtual Private Networks (VPNs) 12-17Configuring a Dial-Up Networking profileOnce you have created your Dial-Up Networking profile, you configure it for

2-2 Administration Guide Custom domain name Multiple e-mail addresses Web site hosting PPPPrrrriiiicccciiiinnnngggg aaaannnndddd ssssuu

12-18 Administration Guide4. Click the TCP/IP Settings button. If your ISP uses dynamic IP addressing (DHCP), select the Server assigned IP address

Virtual Private Networks (VPNs) 12-19This displays a list of possible selections for the communications option. Active components will have a check

12-20 Administration GuideConnecting using Dial-Up NetworkingA Dial-Up Networking connection will be automatically launched whenever you run a TCP/IP

Virtual Private Networks (VPNs) 12-21When you define a Connection Profile as using ATMP by selecting ATMP as the datalink encapsulation method, and th

12-22 Administration Guidegateway can not initiate tunnels (i.e., act as a foreign agent) for this profile; it can only accept tunnel requests as a ho

Virtual Private Networks (VPNs) 12-23 Select IP Profile Parameters and press Return. The IP Profile Parameters screen appears. Enter the Remote IP A

12-24 Administration GuidePPTP exampleTo enable a firewall to allow PPTP traffic, you must provision the firewall to allow inbound and outbound TCP pack

Virtual Private Networks (VPNs) 12-25For Input Filter 2 set the Protocol Type to allow GRE as shown below.In the Display/Change IP Filter Set screen

12-26 Administration GuideFor Output Filter 2 set the Protocol Type to allow GRE as shown below. Change Output Filter 2

Virtual Private Networks (VPNs) 12-27ATMP exampleTo enable a firewall to allow ATMP traffic, you must provision the firewall to allow inbound and outbo

Setting Up Internet Services 2-3 OOOObbbbttttaaaaiiiinnnniiiinnnngggg IIIInnnnffffoooorrrrmmmmaaaattttiiiioooonnnn ffffrrrroooommmm tttth

12-28 Administration GuideFor Input Filter 2 set the Protocol Type to allow GRE as shown below.In the Display/Change IP Filter Set screen select Disp

Virtual Private Networks (VPNs) 12-29For Output Filter 2 set the Protocol Type to allow GRE as shown below. Change Output

12-30 Administration Guide

Security 13-1CCCChhhhaaaapppptttteeeerrrr 11113333SSSSeeeeccccuuuurrrriiiittttyyyyThe Netopia 4752 provides a number of security features to help

13-2 Administration GuideCAUTION! You are strongly encouraged to add protection to the configuration screens. Unprotected screens could allow an unaut

Security 13-3To add a new user account, select Add User in the Security Options screen and press Return. The Add Name With Write Access screen appea

13-4 Administration Guideit to No. (See “SNMP traps” on page 14-15.) To restrict Telnet access to all of the configuration screens, select Enable Tel

Security 13-5Filter priorityContinuing the customs inspectors analogy, imagine the inspectors lined up to examine a package. If the package matches

13-6 Administration GuideHow individual filters workAs described above, a filter applies criteria to an IP packet and then takes one of three actions:

Security 13-7Port number comparisonsA filter can also use a comparison option to evaluate a packet’s source or destination port number. The compariso

2-4 Administration Guide

13-8 Administration GuideOther filter attributesThere are three other attributes to each filter: The filter’s order (i.e., priority) in the filter set

Security 13-9Src. Port: The source port to match. This is the port on the sending host that originated the packet.D. Port: The destination port to m

13-10 Administration GuideFiltering example #2Suppose a filter is configured to block all incoming IP packets with the source IP address of 200.233.14.

Security 13-11option in the answer profile, PAP or CHAP in connection profiles, callback, and general awareness of how your network may be vulnerable.

13-12 Administration Guide1. Add a new filter set.2. Create the filters for the new filter set.3. View, change, or delete individual filters and filter se

Security 13-13Input and output filters—source and destinationThere are two kinds of filters you can add to a filter set: input and output. Input filters

13-14 Administration Guide1. To make the filter active in the filter set, select Enabled and toggle it to Yes. If Enabled is toggled to No, the filter c

Security 13-1510. When you are finished configuring the filter, select ADD THIS FILTER NOW to save the filter in the filter set. Select CANCEL to discard

13-16 Administration GuideModifying filter setsTo modify a filter set, select Display/Change IP Filter Set in the IP Filter Sets screen to display a li

Security 13-17The five input filters and one output filter that make up Basic Firewall are shown in the table below. Basic Firewall’s filters play the f

Making the Physical Connections 3-1CCCChhhhaaaapppptttteeeerrrr 3333MMMMaaaakkkkiiiinnnngggg tttthhhheeee PPPPhhhhyyyyssssiiiiccccaaaallll

13-18 Administration GuideBasic Firewall is suitable for a LAN containing only client hosts that want to access servers on the WAN, but not for a LAN

Security 13-19FTP sessions. To allow WAN-originated FTP sessions to a LAN-based FTP server with the IP address a.b.c.d (corresponding to a numbered

13-20 Administration GuideBasic IP packet componentsAll IP packets contain the same basic header information, as follows:This header information is w

Security 13-21Firewall design rulesThere are two basic rules to firewall design: “What is not explicitly allowed is denied.”and “What is not explic

13-22 Administration GuideLogical AND functionWhen a packet is compared (in most cases) a logical AND function is performed. First the IP addresses a

Security 13-23Example IP filter set screenThis is an example of the Netopia IP filter set screen:Filter basicsIn the source or destination IP address

13-24 Administration GuideExample networkExample filtersExample 1 Incoming packet has the source address of 200.1.1.28This incoming IP packet has a so

Security 13-25Example 2 Incoming packet has the source address of 200.1.1.184.This incoming IP packet (10000000) has a source IP address that does n

13-26 Administration GuideExample 4Incoming packet has the source address of 200.1.1.104.Since the Source IP Network Address in the Netopia 4752 is 0

Security 13-27LAN IP FiltersetsThe Netopia 4752 offers LAN-side filtering on the Ethernet hub. This permits multiple IP addresses or subnets on the E

Copyright ©2001 Netopia, Inc., v.051601All rights reserved. Printed in the U.S.A.This manual and any associated artwork, software, and product design

3-2 Administration GuideWhat You NeedLocate all items that you need for the installation.Included in your package are: The Netopia 4752 SDSL Integra

13-28 Administration GuideAny customized filter set you create can be associated with the Ethernet hub as shown below:Select LAN (EN Hub) IP Filter Se

Security 13-29To remove the filter set from the Ethernet hub interface, select Remove Filter Set and press Return. The filter set will be disconnected

13-30 Administration GuideRRRRAAAADDDDIIIIUUUUSSSS CCCClllliiiieeeennnntttt SSSSuuuuppppppppoooorrrrttttThe Netopia 4752 implements a Remote Au

Security 13-31 You select your desired mode by using the Security Databases pop-up menu. Choosing Local Only, the default, selects the pre-4.8 aut

13-32 Administration Guidehostname to be resolved using the Domain Name System (DNS) information configured in the router or by using an IP address in

Security 13-33Attempting to delete the last non-URG username/password pair from the local authentication database when the Security Databases pop-up

13-34 Administration Guide

Monitoring Tools 14-1CCCChhhhaaaapppptttteeeerrrr 11114444MMMMoooonnnniiiittttoooorrrriiiinnnngggg TTTToooooooollllssssThis chapter discusses

14-2 Administration GuideGeneral statusCurrent Date: The current date; this can be set with the Date and Time utility (see “Date and time” on page 9-

Monitoring Tools 14-3Current statusThe current status section is a table showing the current status of the WAN. For example:Profile Name: Lists the n

Making the Physical Connections 3-3Identify the Connectors and Attach the CablesIdentify the connectors on the back panel and attach the necessary N

14-4 Administration GuideStatistics & LogsWhen you are troubleshooting your Netopia 4752, the Statistics & Logs screens provide insight into

Monitoring Tools 14-5WAN Event HistoryThe WAN Event History screen lists a total of 128 events on the WAN. The most recent events appear at the top.

14-6 Administration GuideDevice Event HistoryThe Device Event History screen lists a total of 128 port and system events, giving the time and date fo

Monitoring Tools 14-7Voice LogsVoice LogThe Voice Log screen lists a total of 128 voice-related events, giving the time and date for each event, as

14-8 Administration GuideIf the log exceeds the size of the screen, you can scroll through it by using SCROLL UP and SCROLL DOWN.To scroll up, select

Monitoring Tools 14-9IP Routing TableIn the Statistics & Logs screen, select IP Routing Table and press Return.The IP routing table displays all

14-10 Administration GuideServed IP AddressesYou can view all of the IP addresses currently being served by the Netopia 4752 SDSL Integrated Access D

Monitoring Tools 14-11This screen has three options: Reset All Leases: Resets all current IP addresses leased through DHCP without waiting for the

14-12 Administration GuidePhysical InterfaceThe top left side of the screen lists total packets received and total packets transmitted for the follow

Monitoring Tools 14-13System InformationThe System Information screen gives a summary view of the general system level values in the Netopia 4752 SD

3-4 Administration GuideNetopia 4752 Status LightsThe figure below represents the Netopia 4752 status light (LED) panel.Netopia 4752 LED front panelTh

14-14 Administration GuideThe SNMP Setup screenFrom the Main Menu, select SNMP in the System Configuration screen and press Return. The SNMP Setup scr

Monitoring Tools 14-15By default, the read-only and read/write community strings are set to public and private, respectively. You should change both

14-16 Administration GuideSetting the IP trap receivers1. Select Add IP Trap Receiver.2. Select Receiver IP Address or Domain Name. Enter the IP addr

Utilities and Diagnostics 15-1CCCChhhhaaaapppptttteeeerrrr 11115555UUUUttttiiiilllliiiittttiiiieeeessss aaaannnndddd DDDDiiiiaaaaggggnnnnoo

15-2 Administration GuidePingThe Netopia 4752 includes a standard Ping test utility. A Ping test generates IP packets destined for a particular (Ping

Utilities and Diagnostics 15-3Status: The current status of the Ping test. This item can display the status messages shown in the able below:Packets

15-4 Administration GuidePackets Lost: The number of packets unaccounted for, shown in total and as a percentage of total packets sent. This statist

Utilities and Diagnostics 15-54. Select Use Reverse DNS to learn the names of the routers between the Netopia Router and the destination router. The

15-6 Administration GuideDisconnect Telnet Console SessionIf you want to close your Telnet console session, select Disconnect Telnet Console Session

Utilities and Diagnostics 15-7Transferring Configuration and Firmware Files with TFTPTrivial File Transfer Protocol (TFTP) is a method of transferrin

Sharing the Connection 4-1CCCChhhhaaaapppptttteeeerrrr 4444SSSShhhhaaaarrrriiiinnnngggg tttthhhheeee CCCCoooonnnnnnnneeeeccccttttiiiioooonn

15-8 Administration Guide Select GET ROUTER FIRMWARE FROM SERVER and press Return. You will see the following dialog box: Select CANCEL to exit wit

Utilities and Diagnostics 15-9 Select GET CONFIG FROM SERVER and press Return. You will see the following dialog box: Select CANCEL to exit withou

15-10 Administration GuideTransferring Configuration and Firmware Files with XMODEMYou can transfer configuration and firmware files with XMODEM through

Utilities and Diagnostics 15-113. Select CANCEL to exit without downloading the file, or select CONTINUE to download the file. If you choose CONTINUE,

15-12 Administration GuideIf you choose CONTINUE, you will have ten seconds to use your terminal emulation software to initiate an XMODEM transfer of

PPPPaaaarrrrtttt IIIIIIIIIIII:::: AAAAppppppppeeeennnnddddiiiixxxxeeeessss

Administration Guide

Troubleshooting A-1AAAAppppppppeeeennnnddddiiiixxxx AAAATTTTrrrroooouuuubbbblllleeeesssshhhhoooooooottttiiiinnnnggggThis appendix is intended to h

A-2 Administration GuideNote: If you are attempting to modify the IP address or subnet mask from a previous, successful configuration attempt, you wil

Troubleshooting A-3How to Reset the Netopia 4752 to Factory DefaultsLose your password? This section shows how to reset the Netopia 4752 so that you

4-2 Administration GuideConfiguring TCP/IP on Windows-based ComputersConfiguring TCP/IP on a Windows computer requires the following: An Ethernet card

A-4 Administration GuideTechnical SupportNetopia, Inc. is committed to providing its customers with reliable products and documentation, backed by ex

Troubleshooting A-5Online product informationProduct information can be found in the following:Netopia World Wide Web server via http://www.netopia.c

A-6 Administration Guide

About SDSL B-1AAAAppppppppeeeennnnddddiiiixxxx BBBBAAAAbbbboooouuuutttt SSSSDDDDSSSSLLLLThe Netopia 4752 SDSL Integrated Access Device (Symmetr

B-2 Administration GuideBecause over 300,000 lines are already deployed using HDSL, service providers feel comfortable with SDSL since it uses the sa

Understanding IP Addressing C-1AAAAppppppppeeeennnnddddiiiixxxx CCCCUUUUnnnnddddeeeerrrrssssttttaaaannnnddddiiiinnnngggg IIIIPPPP AAAAdddddd

C-2 Administration GuideIP addresses are maintained and assigned by the InterNIC, a quasi-governmental organization now increasingly under the auspic

Understanding IP Addressing C-3Subnet masksTo create subnets, the network manager must define a subnet mask, a 32-bit number that indicates which bits

C-4 Administration GuideNetwork configurationBelow is a diagram of a simple network configuration. The ISP is providing a Class C address to the custom

Understanding IP Addressing C-5BackgroundThe IP addresses and routing configurations for the devices shown in the diagram are outlined below. In addit

Sharing the Connection 4-3Static configuration (optional)If you are manually configuring for a fixed or static IP address, perform the following:1. Go

C-6 Administration GuideThere are two schemes for distributing the remaining IP addresses: Manually give each computer an address Let the Netopia

Understanding IP Addressing C-7ConfigurationThis section describes the specific IP address lease, renew, and release mechanisms for both the Mac and PC

C-8 Administration Guide The Netopia 4752 releases the DHCP address back to the available DHCP address pool exactly one hour after the last-heard le

Understanding IP Addressing C-9In any situation where a device is dialing into a Netopia router, the router may need to be configured to serve IP via

C-10 Administration GuideThe figure above shows an example of a block of IP addresses being distributed correctly.The example follows these rules: An

Understanding IP Addressing C-11Nested IP SubnetsUnder certain circumstances, you may want to create remote subnets from the limited number of IP add

C-12 Administration GuideRouters B and C (which could also be Netopia 4752s) serve the two remote networks that are subnets of a.b.c.0. The subnettin

Understanding IP Addressing C-13The following diagram illustrates the IP address space taken up by the two remote IP subnets. You can see from the di

C-14 Administration Guide

Binary Conversion Table D-1AAAAppppppppeeeennnnddddiiiixxxx DDDDBBBBiiiinnnnaaaarrrryyyy CCCCoooonnnnvvvveeeerrrrssssiiiioooonnnn TTTTaaaabb

4-4 Administration Guide4. Click OK in this window and the next window. When prompted, reboot the computer.Note: You can also use these instructions

D-2 Administration GuideDecimal Binary Decimal Binary Decimal Binary Decimal Binary128 10000000 160 10100000 192 11000000 224 11100000129 10000001 16

Further Reading E-1AAAAppppppppeeeennnnddddiiiixxxx EEEEFFFFuuuurrrrtttthhhheeeerrrr RRRReeeeaaaaddddiiiinnnnggggAlexander, S. and R. Droms, DH

E-2 Administration GuideLaQuey, Tracy, The Internet Companion: A Beginner's Guide to Global Networking, Addison-Wesley Publishing Company, Readi

Further Reading E-3Stallings, W. Local Networks, 3rd ed., Macmillan Publishing Company, New York, NY, 1990.Stevens, W.R., TCP/IP Illustrated, Vol 1,

E-4 Administration Guide

Technical Specifications and Safety Information F-1AAAAppppppppeeeennnnddddiiiixxxx FFFFTTTTeeeecccchhhhnnnniiiiccccaaaallll SSSSppppeeeecccciii

F-2 Administration GuideAgency ApprovalsNorth AmericaSafety Approvals: United States – UL Standard for Information Technology Equipment, UL 60950, T

Technical Specifications and Safety Information F-3ImportantThis product was tested for FCC compliance under conditions that included the use of shiel

F-4 Administration GuideImportant Safety instructionsCAUTIONSCAUTION: Depending on the power supply provided with the product, either the direct plug

Technical Specifications and Safety Information F-5Netopia 4752 SpecificationsPhysical interfaceWAN interface SDSL port with support for symmetric con

Sharing the Connection 4-5Configuring TCP/IP on Macintosh ComputersThe following is a quick guide to configuring TCP/IP for MacOS computers. Configurin

F-6 Administration GuideProtocols ATM Protocols: ATM Multiprotocol Encapsulation over ATM Adaption Layer 5 (RFC 1483): Logical Link Control (LLC) en

Technical Specifications and Safety Information F-7a syslog server SNMPv1: (RFC 1157) and MIB II (RFC 1213), Ethernet MIB and enterprise MIB for remo

F-8 Administration Guide Speed Dialing by dialing a feature code Three Way Calling Custom Ringing Distinctive Ringing

Glossary 1GGGGlllloooossssssssaaaarrrryyyyaccess line: A telephone line reaching from the telephone company central office to a point usually on your

2 Administration GuideClass A, B, and C networks: The values assigned to the first few bits in an IP network address determine which class designatio

Glossary 3header: In packets, a header is part of the envelope information that surrounds the actual data being transmitted. In e-mail, a header is u

4 Administration GuideNAT (Network Address Translation): A feature that allows communication between the LAN connected to the Netopia ISDN Router and

Glossary 5router: A device that supports network communications. A router can connect identical network types, such as LocalTalk-to-LocalTalk, or di

6 Administration Guidewall jack: A small hardware component used to tap into telephone wall cable. An RJ-11 wall jack usually has four pins; an RJ-4

Index-1IIIInnnnddddeeeexxxxNumerics10Base-T, connecting 5-3Aadd static route 10-8advanced configurationfeatures 9-18application software 5-2ATMP 12-12t

4-6 Administration GuideStatic configuration (optional)3. In the TCP/IP window or in the MacTCP/More window, select or type information into the fields

Index-2EEasy Setupconnection profile 7-9IP setup 7-10IPX setup 7-10navigating 6-5overview 7-1quick connection path 7-3encryption 12-2, 12-7, 12-12Ether

Index-3MMIBs supported 14-13MPPE 12-12MS-CHAPv2 12-12multiple subnets 10-4NNATadding server lists 11-16defined 10-1Easy Setup Profile 11-6IP profile para

Index-4SNMPcommunity strings 14-14MIBs supported 14-13setup screen 14-14traps 14-15src. port 13-9static IP addresses C-8static routerules of installat

Limited Warranty and Limitation of Remedies 1LLLLiiiimmmmiiiitttteeeedddd WWWWaaaarrrrrrrraaaannnnttttyyyy aaaannnndddd LLLLiiiimmmmiiiitttta

2 Administration Guide

Sharing the Connection 4-7Note: You can also use these instructions to configure other computers on your network with manual or static IP addresses.

Contents iii GPart I: Getting Started Chapter 1 — Introduction...1-1 Overview ...

4-8 Administration Guide

Connecting to Your Local Network 5-1CCCChhhhaaaapppptttteeeerrrr 5555CCCCoooonnnnnnnneeeeccccttttiiiinnnngggg ttttoooo YYYYoooouuuurrrr

5-2 Administration GuideReadying Computers on Your Local NetworkPC and Macintosh computers must have certain components installed before they can com

Connecting to Your Local Network 5-3Connecting to an IP and Telephone NetworkThe Netopia 4752 supports Ethernet connections through its Ethernet por

5-4 Administration Guide

Console-Based Management 6-1CCCChhhhaaaapppptttteeeerrrr 6666CCCCoooonnnnssssoooolllleeee----BBBBaaaasssseeeedddd MMMMaaaannnnaaaaggggeeeemmmm

6-2 Administration Guidemay be using the router to connect to more than one service provider or remote site. The System Configuration menus display a

Console-Based Management 6-3from the Start menu. If you connect a Macintosh computer, you can use the NCSA Telnet program supplied on the Netopia 4

6-4 Administration GuideLaunch your terminal emulation software and configure the communications software for the values shown in the table below. The

Console-Based Management 6-5Navigating through the Console ScreensUse your keyboard to navigate the Netopia 4752’s configuration screens, enter and e

iv Administration Guide Chapter 6 — Console-Based Management ...6-1 Connecting through a Telnet Session...

6-6 Administration Guide

Easy Setup 7-1CCCChhhhaaaapppptttteeeerrrr 7777EEEEaaaassssyyyy SSSSeeeettttuuuuppppThis chapter describes how to use the Easy Setup console s

7-2 Administration GuideA screen similar to the following Main Menu appears:If you do not see the Main Menu, verify that: If you are using a serial

Easy Setup 7-3Quick Easy Setup Connection PathThis section may be all you need to do to configure your Netopia 4752 SDSL Integrated Access Device to

7-4 Administration Guide(If you want to record these values, you can print these pages and use the spaces above.)If your ISP assigns your Router a St

Easy Setup 7-5The Main Menu appears.2. Select the first item on the Main Menu list, Easy Setup. Press Return to bring up the SDSL Line Configuration m

7-6 Administration GuideThe Operation Mode selection will reset a number of default values that pertain to that particular DSLAM. If the changes are

Easy Setup 7-7If you are using an ATM-based Mode, the SDSL Line Configuration screen offers additional parameters. Select Data Link Encapsulation an

7-8 Administration GuideVoice Easy Setup1. Select Voice Gateway and press Return. The pop-up menu will offer you the choice of popular voice gateway

Easy Setup 7-9Easy Setup ProfileThe Easy Setup Profile screen is where you configure the parameters that control the Netopia 4752’s connection to a spe

Contents v G The ATMP/PPTP Default Profile ... 9-17System Configuration Screens ...

7-10 Administration GuideIP Easy SetupThe IP Easy Setup screen is where you enter information about your Netopia Router’s: Ethernet IP address Eth

Easy Setup 7-115. Type the Primary Domain Name Server address your ISP gave you. Press Return. A new field Secondary Domain Name Server will appear.

7-12 Administration GuideThe final step in configuring the Easy Setup console screens is to restart the Netopia 4752, so that the configuration settings

Voice Configuration 8-1CCCChhhhaaaapppptttteeeerrrr 8888VVVVooooiiiicccceeee CCCCoooonnnnffffiiiigggguuuurrrraaaattttiiiioooonnnnThis chapter d

8-2 Administration Guidedistance or local calls.Toll Restriction Operation - PBX/Local Switching Mode: When you pick up the phone, you receive local

Voice Configuration 8-3 Select Voice Gateway and from the pop-up menu, choose the type of voice gateway device to which you will be connected. The c

8-4 Administration GuideOnce you have set echo cancellation, press Escape to return to the Voice Configuration screen. You can enable or disable echo

PPPPaaaarrrrtttt IIIIIIII:::: AAAAddddvvvvaaaannnncccceeeedddd CCCCoooonnnnffffiiiigggguuuurrrraaaattttiiiioooonnnn

Administration Guide

WAN and System Configuration 9-1CCCChhhhaaaapppptttteeeerrrr 9999WWWWAAAANNNN aaaannnndddd SSSSyyyysssstttteeeemmmm CCCCoooonnnnffffiiiig

vi Administration Guide Server Lists and Dynamic NAT configuration... 11-6IP setup ...

9-2 Administration GuideWAN ConfigurationTo configure your Wide Area Network (WAN) connection, navigate to the WAN Configuration screen from the Main Me

WAN and System Configuration 9-3 Select Operation Mode and from the pop-up menu choose the type of DSLAM to which you will be connecting.Each access

9-4 Administration GuideFor example, for the ATM-based DSLAM mode Nokia Fixed, the following screen displays. For all except the (HDLC) Copper Mount

WAN and System Configuration 9-5MMMMuuuullllttttiiiipppplllleeee AAAATTTTMMMM PPPPeeeerrrrmmmmaaaannnneeeennnntttt VVVViiiirrrrttttuuuuaaaal

9-6 Administration GuideMMMMuuuullllttttiiiipppplllleeee AAAATTTTMMMM PPPPVVVVCCCC ccccoooonnnnffffiiiigggguuuurrrraaaattttiiiioooonnnnYou c

WAN and System Configuration 9-7Choosing Display/Change Circuit (or Delete Circuit) displays a pop-up menu that allows you to select the circuit to b

9-8 Administration Guide Circuit Enabled allows you to enable or disable the circuit, using the Tab key. The default is enabled. Traffic Type allows

WAN and System Configuration 9-9AAAAddddddddiiiinnnngggg aaaa cccciiiirrrrccccuuuuiiiittttChoosing Add Circuit displays the Add Circuit screen.

9-10 Administration GuideMMMMoooonnnniiiittttoooorrrriiiinnnngggg mmmmuuuullllttttiiiipppplllleeee vvvviiiirrrrttttuuuuaaaallll cccciiiirrrr

WAN and System Configuration 9-11The ATM VC Statistics screen appears. To display more information about each circuit associated with the selected W

Contents vii G About ATMP Tunnels... 12-20ATMP configuration ...

9-12 Administration GuideCreating a New Connection ProfileFor a Netopia 4752, connection profiles are useful for configuring the connection and authenti

WAN and System Configuration 9-133. Select Data Link Encapsulation and press Return. The pop-up menu offers the possible data link encapsulation meth

9-14 Administration Guide7. Toggle or enter any IP Parameters you require and return to the Add Connection Profile screen by pressing Escape. For more

WAN and System Configuration 9-15The WAN Default ProfileIf you are using RFC1483 datalink encapsulation, the WAN Default Profile screen controls whethe

9-16 Administration GuideIP Parameters (Default Profile) screenIf you are using RFC1483 datalink encapsulation, the IP Parameters (Default Profile) scr

WAN and System Configuration 9-17The ATMP/PPTP Default ProfileThe ATMP/PPTP Default Profile screen controls whether or not your device will answer VPN

9-18 Administration GuideThis particular path guide shows how to get to the Network Protocols Setup screens. The path guide represents these steps:1.

WAN and System Configuration 9-19The System Configuration menu screen appears:IP setupThese screens allow you to configure your network’s use of the st

9-20 Administration GuideFollow these steps to set the system’s date and time:1. Select Current Date and enter the date in the appropriate format. Us

WAN and System Configuration 9-21To go to the Console Configuration screen, select Console Configuration in the System Configuration screen.Follow these

viii Administration Guide Chapter 14 — Monitoring Tools ...14-1 Quick View Status Overview...

9-22 Administration GuideLoggingYou can configure a UNIX-compatible syslog client to report a number of subsets of the events entered in the device’s

WAN and System Configuration 9-23The following screen shows a sample syslog dump of WAN events:May 5 10:14:06 tsnext.netopia.com Link 1 down: PPP

9-24 Administration Guide

IP Setup 10-1CCCChhhhaaaapppptttteeeerrrr 11110000IIIIPPPP SSSSeeeettttuuuuppppThe Netopia 4752 uses Internet Protocol (IP) to communicate bot

10-2 Administration GuideIP SetupThe IP Setup options screen is where you configure the Ethernet side of the Netopia 4752. The information you enter h

IP Setup 10-3The Netopia 4752 SDSL Integrated Access Device supports multiple IP subnets on the Ethernet interface. You may want to configure multipl

10-4 Administration GuideIP subnetsThe IP Subnets screen allows you to configure up to eight Ethernet IP subnets on unlimited-user models, one “primar

IP Setup 10-5For example: To delete a configured subnet, set both the IP address and subnet mask values to 0.0.0.0, either explicitly or by clearing

10-6 Administration GuideIf you have configured multiple Ethernet IP subnets, the IP Setup screen changes slightly:The IP address and Subnet mask item

IP Setup 10-7The Static Routes screen will appear.Viewing static routesTo display a view-only table of static routes, select Display/Change Static R

Contents ix G Downloading configuration files ... 15-11Uploading configuration files ... 15-12Restarting

10-8 Administration GuideSubnet Mask: The subnet mask associated with the destination network.Next Gateway: The IP address of the router that will be

IP Setup 10-9information; Low means that the RIP information takes precedence over the static route. If the static route conflicts with a connection

10-10 Administration GuideIP Address ServingIn addition to being a router, the Netopia 4752 is also an IP address server. There are three protocols i

IP Setup 10-11Follow these steps to configure IP Address Serving: If you enabled IP Address Serving, then DHCP, BootP clients and Dynamic WAN client

10-12 Administration GuideIf you have configured multiple Ethernet IP subnets, the appearance of the IP Address Serving screen is altered slightly:The

IP Setup 10-13IP Address PoolsThe IP Address Pools screen allows you to configure a separate IP address serving pool for each of up to eight configure

10-14 Administration GuideNumerous factors influence the choice of served address. It is difficult to specify the address that will be served to a part

IP Setup 10-15DHCP NetBIOS OptionsIf your network uses NetBIOS, you can enable the Netopia 4752 to use DHCP to distribute NetBIOS information.NetBIO

10-16 Administration Guide From the NetBios Type pop-up menu, select the type of NetBIOS used on your network. To serve DHCP clients with the NetB

IP Setup 10-17Select Release BootP Leases and press Return.More Address Serving OptionsThe Netopia 4752 includes a number of enhancements in the bui