Netopia R910 Bedienungsanleitung

Netopia ™ R910 Ethernet Routerfor DSL and Cable Modems User’s Reference Guide

1-10 User’s Reference Guide How to use this guide This guide is designed to be your single source for information about your Netopia R910 Ethernet R

10-100 User’s Reference GuideFor Input Filter 2 set the Protocol Type to allow GRE as shown below.In the Display/Change IP Filter Set screen select D

Virtual Private Networks (VPN) 10-101For Output Filter 2 set the Protocol Type to allow GRE as shown below. Change Output

10-102 User’s Reference GuideAAAATTTTMMMMPPPP eeeexxxxaaaammmmpppplllleeeeTo enable a firewall to allow ATMP traffic, you must provision the firewall

Virtual Private Networks (VPN) 10-103For Input Filter 2 set the Protocol Type to allow GRE as shown below.In the Display/Change IP Filter Set screen

10-104 User’s Reference GuideFor Output Filter 2 set the Protocol Type to allow GRE as shown below. Change Output Filter 2

PPP over Ethernet 11-105CCCChhhhaaaapppptttteeeerrrr 11111111PPPPPPPPPPPP oooovvvveeeerrrr EEEEtttthhhheeeerrrrnnnneeeettttThe Netopia R910

11-106 User’s Reference GuideFrom the Data Link Encapsulation pop-up menu, select PPP.Select Data Link Options and press Return.The Datalink (PPP/MP)

PPP over Ethernet 11-107PPPPPPPPPPPP EEEEtttthhhheeeerrrrnnnneeeetttt LLLLAAAANNNN RRRReeeeccccoooonnnnffffiiiigggguuuurrrraaaattttiiiioooo

11-108 User’s Reference GuideQQQQuuuuiiiicccckkkk VVVViiiieeeewwwwThe Quick View screen (as shown below) displays both Primary and Secondary DNS S

Monitoring Tools 12-109CCCChhhhaaaapppptttteeeerrrr 11112222MMMMoooonnnniiiittttoooorrrriiiinnnngggg TTTToooooooollllssssThis chapter discusse

Setting Up Internet Services 2-11 CCCChhhhaaaapppptttteeeerrrr 2222SSSSeeeettttttttiiiinnnngggg UUUUpppp IIIInnnntttteeeerrrrnnnneeeetttt

12-110 User’s Reference GuideGeneral statusCurrent Date: The current date; this can be set with the Date and Time utility (see “Date and time” on pag

Monitoring Tools 12-111Each LED representation can report one of four states:–: A dash means the LED is off.R: The letter “R” means the LED is red.G

12-112 User’s Reference GuidePhysical InterfaceThe top left side of the screen lists total packets received and total packets transmitted for the fol

Monitoring Tools 12-113WAN Event HistoryThe WAN Event History screen lists a total of 128 events on the WAN. The most recent events appear at the to

12-114 User’s Reference GuideIf the event history exceeds the size of the screen, you can scroll through it by using SCROLL UP and SCROLL DOWN.To scr

Monitoring Tools 12-115IP routing tableIn the Statistics & Logs screen, select IP Routing Table and press Return.The IP routing table displays a

12-116 User’s Reference GuideServed IP AddressesYou can view all of the IP addresses currently being served by the Netopia R910 Ethernet Router from

Monitoring Tools 12-117This screen has three options: Reset All Leases: Resets all current IP addresses leased through DHCP without waiting for the

12-118 User’s Reference GuideSNMPThe Netopia R910 includes a Simple Network Management Protocol (SNMP) agent, allowing monitoring and configuration by

Monitoring Tools 12-1192. Select System Location and enter the router’s physical location (room, floor, building, etc.). 3. Select System Contact and

2-12 User’s Reference Guide Local LAN IP address information to obtain Your ISP will need to provide you with the following information: The defau

12-120 User’s Reference Guide A cold start trap is generated after the router is reset. An interface down trap (ifDown) is generated when one of th

Monitoring Tools 12-1212. Select an IP trap receiver from the table and press Return.3. In the Change IP Trap Receiver screen, edit the information

12-122 User’s Reference Guide

Security 13-123CCCChhhhaaaapppptttteeeerrrr 11113333SSSSeeeeccccuuuurrrriiiittttyyyyThe Netopia R910 provides a number of security features to he

13-124 User’s Reference GuideOnce user accounts are created, users who attempt to access protected screens will be challenged. Users who enter an inc

Security 13-125To add a new user account, select Add User in the Security Options screen and press Return. The Add Name With Write Access screen app

13-126 User’s Reference GuideTo restrict Telnet access to the SNMP screens, select Enable Telnet Access to SNMP Screens and toggle it to No. (See “SN

Security 13-127Each inspector has a specific task. One inspector’s task may be to examine the destination address of all outgoing packages. That insp

13-128 User’s Reference GuideIf the package does not match the first inspector’s criteria, it goes to the second inspector, and so on. You can see tha

Security 13-129Parts of a filterA filter consists of criteria based on packet attributes. A typical filter can match a packet on any one of the followi

Making the Physical Connections 3-13 CCCChhhhaaaapppptttteeeerrrr 3333MMMMaaaakkkkiiiinnnngggg tttthhhheeee PPPPhhhhyyyyssssiiiiccccaaaal

13-130 User’s Reference GuideLess Than: For the filter to match, the packet’s port number must be less than the port number specified in the filter.Less

Security 13-131Proto: The protocol to match. This can be entered as a number (see the table below) or as TCP or UDP if those protocols are used.Src.

13-132 User’s Reference Guide4. The filter should be enabled and instructed to block the Telnet packets containing the source address shown in step 2:

Security 13-133 Discarded if all the filters are configured to pass (forward) Discarded if the set contains a combination of pass and discard filters

13-134 User’s Reference GuideThe procedure for creating and maintaining filter sets is as follows:1. Add a new filter set.2. Create the filters for the

Security 13-135Naming a new filter setAll new filter sets have a default name. The first filter set you add will be called Filter Set 1, the next filter

13-136 User’s Reference GuideInput and output filters—source and destinationThere are two kinds of filters you can add to a filter set: input and output

Security 13-1371. To make the filter active in the filter set, select Enabled and toggle it to Yes . If Enabled is toggled to No, the filter can still

13-138 User’s Reference Guide10. When you are finished configuring the filter, select ADD THIS FILTER NOW to save the filter in the filter set. Select CAN

Security 13-139Modifying filter setsTo modify a filter set, select Display/Change IP Filter Set in the IP Filter Sets screen to display a list of filte

3-14 User’s Reference Guide What you need Locate all items that you need for the installation.Included in your router package are: The Netopia R91

13-140 User’s Reference GuideThe five input filters and one output filter that make up Basic Firewall are shown in the table below. Basic Firewall’s filt

Security 13-141Basic Firewall is suitable for a LAN containing only client hosts that want to access servers on the WAN, but not for a LAN containin

13-142 User’s Reference GuideFTP sessions. To allow WAN-originated FTP sessions to a LAN-based FTP server with the IP address a.b.c.d (corresponding

Security 13-143Firewall tutorialGeneral firewall termsFilter rule: A filter set is comprised of individual filter rules.Filter set: A grouping of indiv

13-144 User’s Reference GuideExample TCP/UDP PortsFirewall design rulesThere are two basic rules to firewall design: “What is not explicitly allowed

Security 13-145and a packet goes through these rules destined for FTP, the packet would pass through the first filter rule (WWW), match the second rul

13-146 User’s Reference GuideEstablished connectionsThe TCP header contains one bit called the ACK bit (or TCP Ack bit). This ACK bit appears only wi

Security 13-147Example networkExample filtersExample 1 Incoming packet has the source address of 200.1.1.28Less Than or Equal Any port less than or e

13-148 User’s Reference GuideThis incoming IP packet has a source IP address that matches the network address in the Source IP Address field (00000000

Security 13-149Since the Source IP Network Address in the Netopia R910 is 01100000, and the source IP address after the logical AND is 1011000, this

Making the Physical Connections 3-15 2. Connect one end of one of the RJ-45 cables to the Line 1 port and the other end to your Internet modem’s Et

13-150 User’s Reference GuideSince the Source IP Network Address in the Netopia R910 is 01100000, and the source IP address after the logical AND is

Security 13-151RRRRAAAADDDDIIIIUUUUSSSS CCCClllliiiieeeennnntttt SSSSuuuuppppppppoooorrrrttttTheNetopia R910 implements a Remote Authenticatio

13-152 User’s Reference GuideIf you select Advanced Security Options and press Return, the Advanced Security Options screen appears. You select your

Security 13-153hostname to be resolved using the Domain Name System (DNS) information configured in the router, or by using an IP address in dotted-q

13-154 User’s Reference Guide Security Options +-------------------------------------------------------------+

Utilities and Diagnostics 14-155CCCChhhhaaaapppptttteeeerrrr 11114444UUUUttttiiiilllliiiittttiiiieeeessss aaaannnndddd DDDDiiiiaaaaggggnnnn

14-156 User’s Reference GuidePingThe Netopia R910 includes a standard Ping test utility. A Ping test generates IP packets destined for a particular (

Utilities and Diagnostics 14-157Status: The current status of the Ping test. This item can display the status messages shown in the able below:Packe

14-158 User’s Reference GuidePackets Lost: The number of packets unaccounted for, shown in total and as a percentage of total packets sent. This sta

Utilities and Diagnostics 14-1594. Select Use Reverse DNS to learn the names of the routers between the Netopia Router and the destination router. T

3-16 User’s Reference Guide Netopia R910 Ethernet Router status lights The figure below represents the Netopia R910 status light (LED) panel. Netopia

14-160 User’s Reference GuideDisconnect Telnet console sessionIf you want to close your Telnet Console session, select Disconnect Telnet Console Sess

Utilities and Diagnostics 14-161The sections below describe how to update the Netopia R910’s firmware and how to download and upload configuration file

14-162 User’s Reference Guidepress Return. You will see the following dialog box: Select CANCEL to exit without downloading the file, or select CONTI

Utilities and Diagnostics 14-163 Select GET CONFIG FROM SERVER and press Return. You will see the following dialog box: Select CANCEL to exit with

14-164 User’s Reference GuideUpdating firmwareFirmware updates may be available periodically from Netopia or from a site maintained by your organizati

Utilities and Diagnostics 14-165The system will reset at the end of a successful file transfer to put the new firmware into effect. While the system r

14-166 User’s Reference GuideThe procedure below applies whether you are using the console or the WAN interface. To upload a configuration file:1. Deci

Troubleshooting A-167AAAAppppppppeeeennnnddddiiiixxxx AAAATTTTrrrroooouuuubbbblllleeeesssshhhhoooooooottttiiiinnnnggggThis appendix is intended to

A-168 User’s Reference GuideConsole connection problemsCan’t see the configuration screens (nothing appears) Make sure the cable connection from the

Troubleshooting A-169How to reset the router to factory defaultsLose your password? This section shows how to reset the router so that you can access

Connecting to Your Local Area Network 4-17CCCChhhhaaaapppptttteeeerrrr 4444CCCCoooonnnnnnnneeeeccccttttiiiinnnngggg ttttoooo YYYYoooouuuurr

A-170 User’s Reference GuideTechnical supportNetopia, Inc. is committed to providing its customers with reliable products and documentation, backed b

Troubleshooting A-171Online product informationProduct information can be found in the following:Netopia World Wide Web server via http://www.netopia

A-172 User’s Reference Guide

Understanding IP Addressing B-173AAAAppppppppeeeennnnddddiiiixxxx BBBBUUUUnnnnddddeeeerrrrssssttttaaaannnnddddiiiinnnngggg IIIIPPPP AAAAdddd

B-174 User’s Reference GuideIP addresses indicate both the identity of the network and the identity of the individual host on the network. The number

Understanding IP Addressing B-175Subnet masksTo create subnets, the network manager must define a subnet mask, a 32-bit number that indicates which bi

B-176 User’s Reference GuideNetwork configurationBelow is a diagram of a simple network configuration. The ISP is providing a Class C address to the cu

Understanding IP Addressing B-177BackgroundThe IP addresses and routing configurations for the devices shown in the diagram are outlined below. In add

B-178 User’s Reference GuideThere are two schemes for distributing the remaining IP addresses: Manually give each computer an address Let the Net

Understanding IP Addressing B-179ConfigurationThis section describes the specific IP address lease, renew, and release mechanisms for both the Mac and

4-18 User’s Reference GuideAfterUsing the Netopia R910 Ethernet Router, you can connect multiple computers to the Internet with a single user account

B-180 User’s Reference Guide The Netopia R910 does release the DHCP address back to the available DHCP address pool precisely one hour after the las

Understanding IP Addressing B-181addresses. Note any planned and currently used static addresses before you use DHCP and MacIP. Avoid fragmenting

B-182 User’s Reference GuideA DHCP exampleSuppose, for example, that your ISP gave your network the IP address 199.1.1.32 and a 4-bit subnet mask. Ad

Understanding IP Addressing B-183Routers B and C (which could also be Netopia R910s) serve the two remote networks that are subnets of a.b.c.0. The s

B-184 User’s Reference GuideLet’s see how a packet from the Internet gets routed to the host with IP address a.b.c.249, which is served by Router C.

Understanding IP Addressing B-185The following diagram illustrates the IP address space taken up by the two remote IP subnets. You can see from the d

B-186 User’s Reference Guide

Understanding Netopia NAT Behavior C-187AAAAppppppppeeeennnnddddiiiixxxx CCCCUUUUnnnnddddeeeerrrrssssttttaaaannnnddddiiiinnnngggg NNNNeeeetttto

C-188 User’s Reference GuideWhen the Netopia R910 establishes a connection over its WAN interface with another router it uses the Point-to-Point Prot

Understanding Netopia NAT Behavior C-189When the Netopia R910 receives this IP packet, it cannot simply forward it to the WAN interface and the Inter

Connecting to Your Local Area Network 4-19Application software: This is the software you use to send e-mail, browse the World Wide Web, read newsgro

C-190 User’s Reference GuideThe reasons for the IP address changes are obvious from the preceding diagram, but what is not so obvious is why the TCP

Understanding Netopia NAT Behavior C-191Now both IP packets have the exact same source IP address (200.1.1.40) and source ports (400). The Netopia R9

C-192 User’s Reference GuideIf the WWW server on the Internet then tries to open a connection to the IP address of 200.1.1.40 with the appropriate Ex

Understanding Netopia NAT Behavior C-193ConfigurationYou can toggle Address Translation Enabled to No or Yes in the WAN Ethernet Configuration screen

C-194 User’s Reference GuideExported services are configured under IP Setup in System Configuration. This is where a par ticular type of TCP or UDP ser

Binary Conversion Table D-195AAAAppppppppeeeennnnddddiiiixxxx DDDDBBBBiiiinnnnaaaarrrryyyy CCCCoooonnnnvvvveeeerrrrssssiiiioooonnnn TTTTaaaa

D-196 User’s Reference GuideDecimal Binary Decimal Binary Decimal Binary Decimal Binary128 10000000 160 10100000 192 11000000 224 11100000129 1000000

Further Reading E-197AAAAppppppppeeeennnnddddiiiixxxx EEEEFFFFuuuurrrrtttthhhheeeerrrr RRRReeeeaaaaddddiiiinnnnggggAlexander, S. & R. Droms

E-198 User’s Reference GuideGarcia-Luna-Aceves, J.J. "Loop-Free Routing Using Diffusing Computations." Publication pending in IEEE/ACM Tran

Further Reading E-199Sidhu, G.S., R.F. Andrews, and A.B. Oppenheimer. Inside AppleTalk, 2nd ed. Reading, MA: Addison-Wesley Publishing Company, 1990.

Copyright ©2000, Netopia, Inc., v.0800All rights reserved. Printed in the U.S.A.This manual and any associated artwork, software, and product designs

4-20 User’s Reference GuideConnecting to an Ethernet networkThe Netopia R910 supports Ethernet connections through its four Ethernet ports. The route

E-200 User’s Reference Guide

Technical Specifications and Safety Information F-201AAAAppppppppeeeennnnddddiiiixxxx FFFFTTTTeeeecccchhhhnnnniiiiccccaaaallll SSSSppppeeeecccci

F-202 User’s Reference GuideThe Netopia R910 Ethernet Router has met the safety standards (per UL-1950) of the Underwriters Laboratories for the Unit

Technical Specifications and Safety Information F-203Repairs to the certified equipment should be made by an authorized Canadian maintenance facility d

F-204 User’s Reference Guide

Index-205IIIInnnnddddeeeexxxxNumerics10Base-T 4-2010Base-T, connecting 4-20Aadd static route 9-64advanced configurationfeatures 8-46application softwar

Index-206DHCP NetBIOS options 9-70display static routes 9-63distributing IP addresses B-177downloading configuration files 14-162, 14-165with TFTP 14-16

Index-207IP setup 9-56IP trap receiversdeleting 12-121modifying 12-120setting 12-120viewing 12-120IPsec 10-74, 10-80ISPaccount types 2-11information t

Index-208Sscreens, connecting to 8-44securityfilters 13-126–142measures to increase 13-123telnet 13-125user accounts (passwords) 13-123security options

Index-209VVirtual Private Networks (VPN) 10-73VPN 10-73allowing through a firewall 10-98ATMP tunnel options 10-94default answer profile 10-85encryption

Connecting to Your Local Area Network 4-21The Netopia R910 in a 10Base-T network To connect your 10Base-T network to the Netopia R910 through an Eth

4-22 User’s Reference Guide

Configuring TCP/IP 5-23CCCChhhhaaaapppptttteeeerrrr 5555CCCCoooonnnnffffiiiigggguuuurrrriiiinnnngggg TTTTCCCCPPPP////IIIIPPPPBe sure the comput

5-24 User’s Reference GuideConfiguring TCP/IP on Windows 95 or 98Be sure TCP/IP is installed and configured on your Windows computer. The following is

Configuring TCP/IP 5-25Static configuration (optional)If you are manually configuring from a fixed or static IP address, perform the following:Note: Mor

5-26 User’s Reference GuideConfiguring TCP/IP on a Macintosh ComputerThe following is a quick guide to configuring TCP/IP for MacOS computers. Configuri

Configuring TCP/IP 5-27Static configuration (optional)If you are manually configuring from a fixed or static IP address, then perform the following:1. G

5-28 User’s Reference GuideDynamic configuration using MacIP (optional)If you want to use MacIP to dynamically assign IP addresses to the Macintosh co

Configuring TCP/IP 5-29Using Classic Networking (MacTCP)1. Go to the Apple Menu. Select Control Panels and then Network.2. In the Network window, sel

GB Chapter 1 — Introduction...1-9 Overview ...

5-30 User’s Reference Guide

Console-Based Management 6-31CCCChhhhaaaapppptttteeeerrrr 6666CCCCoooonnnnssssoooolllleeee----BBBBaaaasssseeeedddd MMMMaaaannnnaaaaggggeeeemmm

6-32 User’s Reference Guidemore than one service provider or remote site. The System Configuration menus display and permit changing: Network protoc

Console-Based Management 6-33Configuring Telnet softwareIf you are configuring your router using a Telnet session, your computer must be running a Tel

6-34 User’s Reference GuideLaunch your terminal emulation software and configure the communications software for the values shown in the table below.

Easy Setup 7-35CCCChhhhaaaapppptttteeeerrrr 7777EEEEaaaassssyyyy SSSSeeeettttuuuuppppThis chapter describes how to use the Easy Setup console

7-36 User’s Reference GuideA screen similar to the following Main Menu appears:If you do not see the Main Menu, verify that: The computer used to vi

Easy Setup 7-37Quick Easy Setup connection pathThis section may be all you need to do to configure your Netopia R910 Ethernet Router to connect to th

7-38 User’s Reference GuideThe Main Menu appears.2. Select the first item on the Main Menu list, Easy Setup. Press Return to bring up the Easy Setup m

Easy Setup 7-39More Easy Setup optionsYou always begin Easy Setup by selecting Easy Setup in the Main Menu, then pressing Return.The WAN Ethernet Co

iv User’s Reference Guide Connecting a console cable to your router ...6-33Navigating through the console screens ...

7-40 User’s Reference GuideIP Easy SetupThe IP Easy Setup screen is where you enter information about your Netopia Router’s: Ethernet IP address E

Easy Setup 7-41Note: If the Netopia R910’s WAN inter face is acting as a DHCP client, do not change the default settings for Steps 3, 4, and 5.4. Se

7-42 User’s Reference Guide1. Select RESTART DEVICE. A prompt asks you to confirm your choice.2. Select CONTINUE to restart the Netopia Router and hav

WAN and System Configuration 8-43CCCChhhhaaaapppptttteeeerrrr 8888WWWWAAAANNNN aaaannnndddd SSSSyyyysssstttteeeemmmm CCCCoooonnnnffffiiii

8-44 User’s Reference Guide Address Translation Enabled allows you to specify whether or not the router performs Network Address Translation (NAT) o

WAN and System Configuration 8-45The console screen will open to the Main Menu, similar to the screen shown below: Navigating through the system confi

8-46 User’s Reference GuideSystem configuration featuresThe Netopia R910 Ethernet Router’s default settings may be all you need to configure your Netop

WAN and System Configuration 8-47IP setupThese screens allow you to configure your network’s use of IP. Details are given in Chapter 9, “IP Setup and

8-48 User’s Reference Guide3. Select AM or PM and choose AM or PM.Console configurationYou can change the default terminal communications parameters t

WAN and System Configuration 8-49See the release notes that came with your router or feature set upgrade, or visit the Netopia Web site at www.netopi

Contents v G Static routes...9-62IP address serving ...

8-50 User’s Reference GuideInstalling the Syslog clientThe Goodies folder on the Netopia CD contains a Syslog client daemon program that can be config

IP Setup and Network Address Translation 9-51CCCChhhhaaaapppptttteeeerrrr 9999IIIIPPPP SSSSeeeettttuuuupppp aaaannnndddd NNNNeeeettttwww

9-52 User’s Reference GuideNetwork Address Translation works by remapping the source IP address of traffic from the LAN to a single static or dynamica

IP Setup and Network Address Translation 9-53Using Network Address TranslationThe following procedure describes how to use Network Address Translati

9-54 User’s Reference GuideOr, from the Main Menu, select Easy Setup. The Easy Setup WAN Ethernet Configuration screen appears.Toggle Address Translat

IP Setup and Network Address Translation 9-55Associating port numbers with nodesWhen an IP client such as a Netscape Navigator or Microsoft Internet

9-56 User’s Reference GuideIP setupThe IP Setup options screen is where you configure the Ethernet side of the Netopia R910. The information you enter

IP Setup and Network Address Translation 9-57The Netopia R910 Router supports multiple IP subnets on the Ethernet interface. You may want to configur

9-58 User’s Reference GuideExports, Add Export, and Delete Export. Select Add Export. The Add Exported Service screen appears.

IP Setup and Network Address Translation 9-59 Select Service. A pop-up menu of services and ports appears.5. Select any of the services/ports and p

vi User’s Reference Guide Chapter 12 — Monitoring Tools ...12-109 Quick View status overview ...

9-60 User’s Reference GuidePress Escape when you are finished configuring exported services. You are returned to the IP Setup screen. If you select Fi

IP Setup and Network Address Translation 9-61Note: You need not use this screen if you have only a single Ethernet IP subnet. In that case, you can

9-62 User’s Reference GuideIf you have configured multiple Ethernet IP subnets, the IP Setup screen changes slightly:The IP address and Subnet mask it

IP Setup and Network Address Translation 9-63The Static Routes screen will appear.Viewing static routesTo display a view-only table of static routes

9-64 User’s Reference GuideSubnet Mask: The subnet mask associated with the destination network.Next Gateway: The IP address of the router that will

IP Setup and Network Address Translation 9-65Via RIP and toggle it to Ye s. When Advertise Route Via RIP is toggled to Yes, a new item called RIP Me

9-66 User’s Reference GuideIP address servingIn addition to being a router, the Netopia R910 is also an IP address server. There are three protocols

IP Setup and Network Address Translation 9-67Follow these steps to configure IP Address Serving: If you enabled IP Address Serving, DHCP, BootP clie

9-68 User’s Reference GuideIP Address PoolsThe IP Address Pools screen allows you to configure a separate IP address serving pool for each of up to ei

IP Setup and Network Address Translation 9-69Numerous factors influence the choice of served address. It is difficult to specify the address that will

Contents vii G Example filters ... 13-147RADIUS Client Support...

9-70 User’s Reference GuideDHCP NetBIOS OptionsIf your network uses NetBIOS, you can enable the Netopia R910 to use DHCP to distribute NetBIOS inform

IP Setup and Network Address Translation 9-71 From the NetBios Type pop-up menu, select the type of NetBIOS used on your network. To serve DHCP c

9-72 User’s Reference GuideSelect Release BootP Leases and press Return.You have finished your IP setup. IP Address Lease Mana

Virtual Private Networks (VPN) 10-73CCCChhhhaaaapppptttteeeerrrr 11110000VVVViiiirrrrttttuuuuaaaallll PPPPrrrriiiivvvvaaaatttteeee NNNNeeee

10-74 User’s Reference GuideTunneling is a process of creating a private path between a remote user or private network and another private network ov

Virtual Private Networks (VPN) 10-75When used to initiate the tunnelled connection, the Netopia Router is called a PPTP Access Concentrator (PAC, in

10-76 User’s Reference GuideAAAAbbbboooouuuutttt PPPPPPPPTTTTPPPP TTTTuuuunnnnnnnneeeellllssssTo set up a PPTP tunnel, you create a Connection

Virtual Private Networks (VPN) 10-77When you define a Connection Profile as using PPTP by selecting PPTP as the datalink encapsulation method, and the

10-78 User’s Reference GuideNote: The Netopia R910 Router supports 128-bit (“strong”) encryption and MS-CHAP Version 2. Unlike MS-CHAP version 1, whi

Virtual Private Networks (VPN) 10-79The IP Profile Parameters screen appears. Enter the Remote IP Address and Remote IP Mask for the host to which y

viii User’s Reference Guide Example: Working with a Class C subnet...B-177Distributing IP addresses ...

10-80 User’s Reference Guide The Netopia R910 Router supports 128-bit (“strong”) encryption. If the router you are connecting to does not support 1

Virtual Private Networks (VPN) 10-81The Add Connection Profile screen appears. From the Data Link Encapsulation pop-up menu select IPsec. Then sele

10-82 User’s Reference Guide You must enter an Encryption Key or keys if the Encryption Transform is DES. The key must be a hexadecimal entry of eig

Virtual Private Networks (VPN) 10-83IIIIPPPP PPPPrrrrooooffffiiiilllleeee PPPPaaaarrrraaaammmmeeeetttteeeerrrrssssThe following IP Profile Opti

10-84 User’s Reference Guidefollowing section).Note: The SPI title field above changes to SPI (Security Parameters Index) -- Use Advanced IP Profile Op

Virtual Private Networks (VPN) 10-85VVVVPPPPNNNN DDDDeeeeffffaaaauuuulllltttt AAAAnnnnsssswwwweeeerrrr PPPPrrrrooooffffiiiilllleeeeThe WAN

10-86 User’s Reference Guide For PPTP tunnel connections only, you must define what type of authentication these connections will use. Select Receive

Virtual Private Networks (VPN) 10-87Profile Name: Lists the name of the Connection Profile being used, if any.Type: Shows the data link encapsulation

10-88 User’s Reference GuideDDDDiiiiaaaallll----UUUUpppp NNNNeeeettttwwwwoooorrrrkkkkiiiinnnngggg ffffoooorrrr VVVVPPPPNNNNMicrosoft Windows

Virtual Private Networks (VPN) 10-89The Communications window appears.5. In the Communications window, select Dial-Up Networking and click the OK bu

Introduction 1-9 CCCChhhhaaaapppptttteeeerrrr 1111IIIInnnnttttrrrroooodddduuuuccccttttiiiioooonnnn Overview The Netopia R910 Ethernet Router is

10-90 User’s Reference GuideCCCCoooonnnnffffiiiigggguuuurrrriiiinnnngggg aaaa DDDDiiiiaaaallll----UUUUpppp NNNNeeeettttwwwwoooorrrrkkkkiiiin

Virtual Private Networks (VPN) 10-914. Click the TCP/IP Settings button. If your ISP uses dynamic IP addressing (DHCP), select the Server assigned

10-92 User’s Reference GuideIIIInnnnssssttttaaaalllllllliiiinnnngggg tttthhhheeee VVVVPPPPNNNN CCCClllliiiieeeennnnttttBefore installing the

Virtual Private Networks (VPN) 10-933. Click the Windows Setup tab.The Windows Setup screen will be displayed within the top center box.4. Double-cl

10-94 User’s Reference GuideAAAAbbbboooouuuutttt AAAATTTTMMMMPPPP TTTTuuuunnnnnnnneeeellllssssTo set up an ATMP tunnel, you create a Connection

Virtual Private Networks (VPN) 10-95When you define a Connection Profile as using ATMP by selecting ATMP as the datalink encapsulation method, and the

10-96 User’s Reference Guide When you specify the ATMP Partner IP Address, and the address is in the same subnet as the Remote IP Address you specifi

Virtual Private Networks (VPN) 10-97 Enter the Remote IP Address and Remote IP Mask for the host to which you want to tunnel.Note: A peculiarity as

10-98 User’s Reference GuideAAAAlllllllloooowwwwiiiinnnngggg VVVVPPPPNNNNssss tttthhhhrrrroooouuuugggghhhh aaaa FFFFiiiirrrreeeewwwwaaaal

Virtual Private Networks (VPN) 10-99PPPPPPPPTTTTPPPP eeeexxxxaaaammmmpppplllleeeeTo enable a firewall to allow PPTP traffic, you must provision the