Netopia Network Router R7200 User Manual

™

Netopia R7200 SDSL Router

Nokia Speedlink™ certified

User’s Reference Guide

Download from Www.Somanuals.com. All Manuals Search And Download.

Contents

Welcome to the Netopia R7200 SDSL Router User’s Reference Guide. This guide is designed to be

your single source for information about your Netopia R7200 SDSL Router. It is intended to be

viewed on-line, using the powerful features of the Adobe Acrobat Reader. The information display

has been designed to present the maximum information in the minimum space on your screen. You

can keep this document open while you perform any of the procedures described and ﬁnd useful

information about the procedure you are performing.

This Table of Contents page you are viewing consists of hypertext links to the chapters and

headings listed. If you are vi e w ing this on -li n e, j u st c l ick a ny l ink b e l ow to go to that heading.

Part I: G e tt i ng Started

Chapter 1 — Introduction.......................................................... 1-1

Overview....................................................................... 1-1

Features and capabilities ............................................... 1-1

How to use this guide .................................................... 1-2

Chapter 2 — Sett i ng Up In t e r net Services ................................. 2 -1

Fi n ding an I n ternet ser v ice provid e r................................. 2 -1

U n ique requirements ............................................ 2 -2

Pricing a nd support .............................................. 2 -2

Endor s ements ..................................................... 2 -2

Deciding on an ISP account ............................................ 2-2

Setting up a Netopia R7200 account ..................... 2-2

Obtaining an IP address ........................................ 2-2

Obtaining information from the ISP.................................. 2-3

Local LAN IP address information to obtain ............ 2-3

Chapter 3 — M a k i ng t he Physical Connections .......................... 3 -1

Find a location............................................................... 3-1

What you need .............................................................. 3-2

Identify the connectors and attach the cables .................. 3-2

Netopia R7200 SDSL Router back panel ports ................ 3-3

Netopia R7200 SDSL Router status lights ....................... 3-4

Chapter 4 — Connecting to Your Local Area Network ................. 4-1

Overview....................................................................... 4-1

Readying computers on your local network....................... 4-1

Connecting to an Ethernet network.................................. 4-3

10Base-T............................................................. 4-4

Download from Www.Somanuals.com. All Manuals Search And Download.

User’s Reference Guide

Adding an external modem ............................................. 4-5

Connecting to a LocalTalk network ................................. 4-6

Chapter 5 — Sett i ng up your Router with the SmartStart Wizard 5 -1

B e f ore running SmartStart ............................................. 5 -2

Setting up your Router with the SmartStart Wizard ........... 5-3

SmartStart Wizard conﬁguration screens ............... 5-3

E a sy opt i on.......................................................... 5 -4

A d v a nced opt i on .................................................. 5 -5

Sharing the Connection .................................................. 5 -6

Conﬁguring TCP/ IP on Windows 95, 98, or NT

computers ........................................................... 5-6

Conﬁguring TCP/ IP on Macintosh computers ........ 5-10

Chapter 6 — Console-Based Management ................................. 6-1

Connecting through a Telnet session ............................... 6-2

Conﬁguring Telnet software ................................... 6-3

Connecting a console cable to your router ....................... 6-3

Navigating through the console screens .......................... 6-4

Chapter 7 — E a sy Setup ........................................................... 7 -1

E a sy Setup conso l e s c reens ........................................... 7 -1

A c cess i ng the Ea s y Setup conso l e s c reens ............ 7 -1

Quick Easy Setup connection path .................................. 7-3

S D S L L i n e Conﬁguration ....................................... 7 -4

Easy Setup Proﬁle ................................................ 7-5

IP Easy Setup ...................................................... 7-6

Easy Setup Security Conﬁguration ......................... 7-7

Part II: A d vanced Configuration

Chapter 8 — WAN and System Conﬁguration ............................. 8-1

WAN conﬁguration.......................................................... 8-1

Creating a new Connection Proﬁle ................................... 8-3

The default proﬁle .......................................................... 8-6

Download from Www.Somanuals.com. All Manuals Search And Download.

Contents

IP p arameters (default pro ﬁ l e ) screen .................... 8 -8

IPX p a r a meters (d e f a u l t proﬁl e ) screen .................. 8 -9

S y s tem con ﬁ gur a t i on s c reens ........................................ 8 -9

N a v ig a t i ng through the s y s tem con ﬁ gur a t i on s c reens...... 8 -1 0

S y s tem con ﬁ gur a t i on f e atures ............................. 8 -1 1

N e t w o rk protocols s etup ..................................... 8 -1 2

Fil t er sets (ﬁr e w a l l s ) ........................................... 8 -1 2

IP a ddress ser v ing ............................................. 8 -1 2

D a te and t i me .................................................... 8 -1 2

Con s o l e conﬁguration ......................................... 8 -1 3

SNMP (Simple Network Management Protocol)..... 8-14

Security............................................................. 8-14

Upgrade feature set ........................................... 8-14

Logging ............................................................. 8-14

Installing the Syslog client .................................. 8-15

Chapter 9 — L i ne B a ckup ......................................................... 9 -1

WA N C onﬁgur a t i on ......................................................... 9 -2

B a ckup Conﬁguration s c reen................................. 9 -3

IP S etup screen ............................................................. 9 -4

Connection Proﬁles ........................................................ 9 -5

Using Scheduled Connections with Backup ...................... 9-5

Management/ Statistics .................................................. 9-7

QuickView ..................................................................... 9-9

Event Logs .................................................................... 9-9

SNMP Support .............................................................. 9-9

Chapter 10 — I P Setup and N e twork A d dress T r anslation ........ 10 -1

N e t w o rk A d dress T r a ns l a t i on f e atures ........................... 10 -1

Using Network Address Translation ............................... 10-3

Associating port numbers with nodes .................. 10-6

Advanced IP/ IPX router conﬁguration options ................. 10-7

Connection Proﬁles ...................................................... 10-8

Network Address Translation guidelines ............. 10-10

Download from Www.Somanuals.com. All Manuals Search And Download.

User’s Reference Guide

IP s etup .................................................................... 10 -1 1

IP s ubnets ....................................................... 10 -1 5

Static routes .................................................... 10-17

IP address serving..................................................... 10-21

IP Address Pools .............................................. 10-24

DHCP NetBIOS Options ..................................... 10-26

MacIP (KIP forwarding) setup ............................ 10-28

Chapter 11 — I P X Setup ......................................................... 11 -1

IPX f e atures ................................................................ 11 -1

IPX d e ﬁ n itions ............................................................. 11 -1

I n ternet w o rk Packet Exchange (I P X ) ..................... 11 -1

IPX a ddress ....................................................... 11 -2

Socket .............................................................. 11 -2

Routing Information Protocol (RIP) ....................... 11 -2

Service Advertising Protocol (SAP)....................... 11-2

NetBIOS ............................................................ 11-3

IPX spooﬁng....................................................... 11-3

IPX setup screen ......................................................... 11-3

IPX routing tables ........................................................ 11-5

Chapter 12 — A p ple T a l k Setup................................................ 12 -1

A p ple T a l k n e t w o rks ...................................................... 12 -1

A p ple T a l k protocol.............................................. 12 -1

M a c I P ................................................................ 12 -3

AUR P ................................................................. 12 -3

Routers and s eed i ng .......................................... 12 -3

Installing AppleTalk ...................................................... 12-4

Conﬁguring A p ple T a l k ................................................... 12 -6

EtherTalk setup .................................................. 12-6

LocalTalk setup ................................................. 12-7

AURP setup ....................................................... 12-8

Download from Www.Somanuals.com. All Manuals Search And Download.

Contents

vii

Chapter 13 — Monitoring T o ols ............................................... 13 -1

Q u ick V i e w status o v e r v i e w .......................................... 13 -1

G e neral status ................................................... 13 -2

Curr e nt status ................................................... 13 -3

Status l ights ...................................................... 13 -3

Stat i s t i cs & L o gs ......................................................... 13 -4

G e neral Stat i s t i cs .............................................. 13 -4

Ev e nt h i s tories ............................................................ 13 -5

Routing tables ............................................................. 13 -7

Ser v e d I P A d dresses .................................................. 13 -1 0

S y s tem I n formation.................................................... 13 -1 2

S N MP ....................................................................... 13 -1 2

The SNMP Setup screen ................................... 13-13

SNMP traps ..................................................... 13-14

Web-based management pages .................................. 13-16

System Information page .................................. 13-16

Event History pages ......................................... 13-17

Chapter 14 — Security ........................................................... 14 -1

U s er accounts ............................................................. 14 -1

Di a l -in c on s o l e a ccess.................................................. 14 -3

En a b l e S martStart/ Smart V i e w / W e b ser v e r ................... 14 -4

Te l n e t access .............................................................. 14 -4

A b out ﬁ lt e r s a nd ﬁ lt e r sets ........................................... 14 -4

W h at ’s a ﬁlt e r and w h at ’s a ﬁlt e r set?.................. 14 -4

H o w ﬁ lt e r sets w o rk............................................ 14 -5

H o w individu a l ﬁ lt e r s work................................... 14 -6

Design guidelines ............................................. 14-11

Working with IP ﬁlters and ﬁlter sets ............................ 14-12

Adding a ﬁlter set ............................................. 14-13

Viewing ﬁlter sets ............................................. 14-16

Modifying ﬁlter sets .......................................... 14-17

Download from Www.Somanuals.com. All Manuals Search And Download.

viii

User’s Reference Guide

D e l e t i ng a ﬁlt e r set........................................... 14 -1 7

A s amp l e IP ﬁl t er set ........................................ 14 -1 7

IPX ﬁlt e r s .................................................................. 14 -2 1

IPX p a cket ﬁ lt e r s .............................................. 14 -2 2

IPX p a cket ﬁ lt e r sets ........................................ 14 -2 3

IPX S A P ﬁ lt e r s .................................................. 14 -2 5

IPX S A P ﬁ lt e r sets ............................................ 14 -2 7

Fire w a l l tutorial.......................................................... 14 -2 9

G e neral ﬁ r e w a l l t e rms ...................................... 14 -2 9

Basic IP packet components ............................. 14-29

Basic protocol types ......................................... 14-29

Firewall design rules ......................................... 14-30

Filter basics ..................................................... 14-33

Example ﬁlters ................................................. 14-34

Chapter 15 — U t i li t i e s and D i a gnost i c s ................................... 15 -1

Pin g ............................................................................ 15 -2

Tr a ce R oute ................................................................. 15 -4

Te l n e t c l i e nt................................................................. 15 -5

Di s c onnect T e l n e t conso l e s ess i on ............................... 15 -6

Factory defaults ........................................................... 15-6

Transferring conﬁguration and ﬁrmware ﬁles with TFTP.... 15-7

U p dat i ng ﬁrmw a r e .............................................. 15 -7

D o w n loading conﬁguration ﬁles ........................... 15 -8

U p loading conﬁguration ﬁles ............................... 15 -9

Tr a ns f e rring conﬁguration and ﬁrmware ﬁles with

XMODEM..................................................................... 15-9

U p dat i ng ﬁrmw a r e ............................................ 15 -1 0

Downloading conﬁguration ﬁles ......................... 15-11

Uploading conﬁguration ﬁles ............................. 15-11

Restarting the system................................................ 15-12

Download from Www.Somanuals.com. All Manuals Search And Download.

Contents

Part III: A p pendixes

A p pendix A — T r oubleshootin g ..................................................A -1

Conﬁgur a t i on problems .................................................. A -1

Con s o l e connection problems ............................... A -2

Network problems ................................................ A-2

How to reset the router to factory defaults ...................... A-3

Power outages ............................................................... A-3

Technical support .......................................................... A-4

How to reach us ................................................... A-4

A p pendix B — U n derstanding IP A d dressing ..............................B -1

W h at i s IP ?.................................................................... B -1

A b out I P a ddress i n g ....................................................... B -1

Subnets and subnet masks .................................. B -2

Ex a mp l e : U s i ng s ubnets on a C l a ss C I P i n ternet.... B -3

Ex a mp l e : W o rking with a Cl a ss C subnet................ B -5

Di s t r ibuting IP a ddresses ............................................... B -5

T e chnical note on subnet mask i ng......................... B -6

Conﬁgur a t i on ....................................................... B -7

M a nua l ly di s t r ibuting IP a ddresses ........................ B -8

Using address serving.......................................... B-8

Tips and rules for distributing IP addresses ............ B-9

Nested IP subnets ....................................................... B-11

Broadcasts.................................................................. B-13

Packet header types ........................................... B-13

A p pendix C — U n derstanding N e topia N A T B e ha v ior...................C -1

N e t w o rk conﬁguration..................................................... C -1

Background ................................................................... C-1

Exported services ................................................ C-5

Important notes ................................................... C-6

Conﬁguration ................................................................. C-7

Summary ...................................................................... C-8

Download from Www.Somanuals.com. All Manuals Search And Download.

User’s Reference Guide

A p pendix D — Binary Conversion T a ble ......................................D -1

Appendix E — Further Reading.................................................. E-1

A p pendix F — T e chnical Speciﬁcations and Sa f e ty I nformatio n ... F -1

Pinouts for A u x ili a ry port modem cab l e ............................ F -1

D e sc r iption.................................................................... F -2

Pow e r r e qu i r e ments ............................................. F -2

Environment ........................................................ F-2

Software and protocols ......................................... F-3

A g e ncy appro v a l s ........................................................... F -4

R e g ul a tory not i c e s ............................................... F -4

Important safety instructions ................................ F-5

Appendix G — About SDSL........................................................G-1

Glossary.................................................................................. GL-1

Index ..................................................................................Index-1

Limited Warranty and Limitation of Remedies ................................1

Download from Www.Somanuals.com. All Manuals Search And Download.

Part I: Getting Started

Download from Www.Somanuals.com. All Manuals Search And Download.

User’s Reference Guide

Download from Www.Somanuals.com. All Manuals Search And Download.

Introduction 1-1

Chapter 1

Introduction

Overview

The Netopia R7200 SDSL Router is a full-featured, stand-alone, multiprotocol router for connecting diverse local

are a net w o rks (L AN s ) to the I n ternet and other remote net w o rk s . O n ce y o ur N e top i a R 7 200 S D S L R outer is

connected to y o ur compute r , a nd y o ur account is acti v a ted by y o ur net w o rk s ervice provider, you will have a fast

Symmetric Digital Subscriber Line (SDSL) connection between your PC or LAN and the telephone company’s

network of high-speed digital facilities.

This section covers the following topics:

“Features and capabilities” on page 1-1

“How to use this guide” on page 1-2

Features and capabilities

The Netopia R7200 SDSL Router provides the following features:

Certiﬁed for use with the Speedlink™ access concentrator from Nokia

Support for IP and IPX routing for Internet and intranet connectivity

IP address serving (over Ethernet or a WAN link) that allows local or remote network nodes to acquire an IP

address automatically and dynamically from a designated pool of available addresses

Multi-speed symmetrical transmission from 192 Kbps up to 1.5 Mbps to provide scalability without

additional equipment investment

All digital, continuous-availability networking, eliminating dialing and providing lower, more predictable

transmission costs

Connectivity to Ethernet LANs via a built-in 8-port 10Base-T hub with uplink port

Status lights (LEDs) for easy monitoring and troubleshooting

Support for console-based management over Telnet or serial cable connection

Support for remote conﬁguration by your reseller, your network administrator, or technicians at Netopia,

Inc., via external modem or via IP network

Wall-mountable, bookshelf (side-stackable), or desktop-stackable design for efﬁcient space usage

SmartIP™, making it simple and economical to connect a workgroup of users to the Internet or a remote IP

network by using Network Address Translation and a single IP address

AppleTalk support (available as a separate add-on AppleTalk kit, including a ﬁrmware feature set

enhancement and custom HD-15 dual RJ-11 PhoneNET® connector), allowing for LocalTalk-to-Ethernet

routing, assigning IP addresses to Macintosh users (MacIP), IP functionality for LocalTalk users, and AURP

Download from Www.Somanuals.com. All Manuals Search And Download.

1-2 User’s Reference Guide

tunneling for connectivity between remote AppleTalk networks

Web-based management pages aid in managing your router. Internet browsers such as Netscape Navigator

and Microsoft’s Internet Explorer can be used for the web-based management pages.

How to use this guide

This guide is designed to be your single source for information about your Netopia R7200 SDSL Router. It is

intended to be viewed on-line, using the powerful features of the Adobe Acrobat Reader. The information display

has been deliberately designed to present the maximum information in the minimum space on your screen. You

can keep this document open while you perform any of the procedures described and ﬁnd useful information

about the procedure you are performing.

If you prefer to work from hard copy rather than on-line documentation, you can also print out all of the manual,

or individual sections. The pages are formatted to print on standard 8 1/ 2 by 11 inch paper. We recommend

that you print on three-hole punched paper, so you can put the pages in a binder for future reference. For your

convenience, a printed copy can be purchased from Netopia. Order part number TER7200/ Doc.

This guide is organized into chapters describing the Netopia R7200’s advanced features. You may want to read

each chapter’s introductory section to familiarize yourself with the various features available.

Use the guide’s table of contents and index to locate informational topics.

Download from Www.Somanuals.com. All Manuals Search And Download.

Setting Up Internet Services 2-1

Chapter 2

Setting Up Internet Services

T h is chapter describes how to obtain and set up I n ternet ser v ic e s.

This section covers the following topics:

“Finding an Internet service provider” on page 2-1

“Deciding on an ISP account” on page 2-2

“Obtaining information from the ISP” on page 2-3

Note: Some companies act as their own ISP. For example, some organizations have branch ofﬁces that can

use the Netopia R7200 to access the Internet via the main ofﬁce in a point-to-point scenario. If you install the

Netopia R7200 in this type of environment, refer to the following sections for speciﬁc information you must

receive from the network administrator to conﬁgure the Netopia R7200 properly.

Finding an Internet service provider

The Netopia R7200 SDSL Router provides its high speed symmetric (two-way) digital connection to the Internet

through a Competitive Local Exchange Carrier (CLEC) -- a type of mini phone company. The CLEC uses a

compatible type of switching equipment known as a Digital Subscriber Line Access Multiplexer (DSLAM). The

DSLAM that you connect to with your Netopia Router must be capable of handling these symmetric connections.

The Netopia R7200 is certiﬁed for use with the Nokia Speedlink™ DSLAM.

If you have purchased your Netopia Router through a Netopia ISP partner, you can be sure that an account that

supports SDSL connections will be available.

If your area has more than one ISP, the following considerations will help you decide which ISP is best suited for

your requirements.

In determining which Internet service provider (ISP) to establish your account with, make sure that your ISP

supports connections via a CLEC with a compatible DSLAM, the Nokia’s Speedlink™ central ofﬁce equipment.

Use an ISP that provides Internet access through a Symmetric Digital Subscriber Line (SDSL) and that supports

the Netopia R7200 SDSL Router. If you would like to use an ISP that you already have a relationship with but

that is not familiar with the Netopia R7200, call us at 1-800-NETOPIA. Our representative can call your ISP and

introduce them to the product. If necessary, we will provide them with the technical background they need to

support the product.

Download from Www.Somanuals.com. All Manuals Search And Download.

2-2 User’s Reference Guide

Unique requirements

Make sure the ISP can meet any unique requirements you may have, such as:

Dynamic or static IP addressing

Class C IP address

Custom domain name

Multiple e-mail addresses

Web site hosting

Pricing and support

Compare pricing, service, and technical support service among various ISPs.

Endorsements

Consider recommendations from colleagues and reviews in publications. Netopia lists Netopia Certiﬁed ISPs on

our Web site at http:/ / www.netopia.com.

Deciding on an ISP account

Your ISP may offer various Internet access account plans. Typically, these plans vary by usage charges and the

number of host IP addresses supplied. Evaluate your networking needs and discuss them with your ISP before

deciding on a plan for your network.

Setting up a Netopia R7200 account

Check whether your ISP has the Netopia R7200 on its list of supported products that have been tested with a

particular conﬁguration. If the ISP does not have the Netopia R7200 on such a list, describe the Netopia R7200

in as much detail as needed, so your ISP account can be optimized. As appropriate, refer your ISP to Netopia’s

Web site www.netopia.com for more information.

Obtaining an IP address

Typically, each network computer that requires Internet access requires its own unique IP address. If some or

all network computers require simultaneous Internet access, obtain a block of IP host addresses large enough

for each computer to have its own address, plus one for the Netopia R7200.

Consider expected growth in your network when deciding on the number of addresses to obtain. Alternatively,

you can use the Network Address Translation feature of SmartIP.

SmartIP

The Netopia R7200 SDSL Router supports the SmartIP™ feature, which includes Network Address Translation.

Network Address Translation provides Internet access to the network connected to the Netopia R7200 using

only a single IP address. These routers translate between the internal or local area network (LAN) addresses

and a single external IP address, and route accordingly.

Download from Www.Somanuals.com. All Manuals Search And Download.

Setting Up Internet Services 2-3

For more information on Network Address Translation, see Chapter 10, “IP Setup and Network Address

Translation.”

Obtaining information from the ISP

After your account is set up, the ISP should send you the IP parameter information that will help you conﬁgure

the Netopia R7200.

Local LAN IP address information to obtain

Your ISP will need to provide you with the following information:

The default gateway IP address (same as remote IP address in most cases)

Local WAN IP address and subnet mask

Primary and secondary domain name server (DNS) IP addresses

Domain name (usually the same as the ISP’s domain name unless you have registered for your own

individual domain name)

Note: The default gateway, WAN address and mask, DNS, and domain name are all obtainable via WAN DHCP,

if your ISP supports it.

With Network Address Translation

If you are using SmartIP (NAT), you should obtain the following:

If you are connecting to a remote site using Network Address Translation on your router, your provider will

not deﬁne the IP address information on your local LAN. You can deﬁne this information based on an IP

conﬁguration that may already be in place for the existing network. Alternatively, you can use the default IP

address range used by the router.

Without Network Address Translation

If you are not using Network Address Translation, you will need to obtain all of the local LAN IP address

information from your ISP.

If you are not using SmartIP (NAT), you should obtain:

The number of Ethernet IP host addresses available with your account and the ﬁrst usable IP host address

in the address block

The Ethernet IP address for your Netopia R7200

The Ethernet IP subnet mask address for your Netopia R7200

Download from Www.Somanuals.com. All Manuals Search And Download.

2-4 User’s Reference Guide

Download from Www.Somanuals.com. All Manuals Search And Download.

Making the Physical Connections 3-1

Chapter 3

Making the Physical Connections

T h is s ect i on tells you how to make the ph y s i c a l connect i ons to y o ur N e top i a R 7 200 S D S L R outer. T h is s ect i on

co v e r s the following topic s :

“F i n d a location” on page 3 -1

“What you need” on page 3-2

“Identify the connectors and attach the cables” on page 3-2

“Netopia R7200 SDSL Router back panel ports” on page 3-3

“Netopia R7200 SDSL Router status lights” on page 3-4

Find a location

When choosing a location for the Netopia Router, consider:

Available space and ease of installation

Physical layout of the building and how to best use the physical space available for connecting your Netopia

Router to the LAN

Available wiring and jacks

Distance from the point of installation to the next device (length of cable or wall wiring)

Ease of access to the front of the unit for conﬁguration and monitoring

Ease of access to the back of the unit for checking and changing cables

Cable length and network size limitations when expanding networks

For small networks, install the Netopia R7200 near one of the LANs. For large networks, you can install the

Netopia R7200 in a wiring closet or a central network administration site.

Download from Www.Somanuals.com. All Manuals Search And Download.

3-2 User’s Reference Guide

What you need

Locate all items that you need for the installation.

Included in your router package are:

The Netopia R7200 SDSL Router

A power adapter and cord with a mini-DIN8 connector

One RJ-45 Ethernet cable

One RJ-11 Telco (or Line) cable

A dual DE-9 and mini-DIN8 to DE-9 console cable (for a PC or a Macintosh)

T h e N e top i a CD containing an I n ternet bro w s e r , A d obe A c robat Reader for Windows and Macintosh, ZTerm

terminal emulator software and NCSA Telnet for Macintosh, and documentation

You will need:

A Windows 95 or 98–based PC or a Macintosh computer with Ethernet connectivity for conﬁguring the

Netopia R7200. This may be built-in Ethernet or an add-on card, with TCP/ IP installed and conﬁgured. See

“Before running SmartStart” on page 5-2.

An SDSL wall outlet wired for a connection to a Competitive Local Exchange Carrier (CLEC) who supports

Symmetric Digital Subscriber Line connections.

Identify the connectors and attach the cables

Identify the connectors and switches on the back panel and attach the necessary Netopia Router cables.

The ﬁgure below displays the back of the Netopia R7200 SDSL Router.

Netopia R7200 with SDSL back panel

Line port

Ethernet

Auxiliary

Console

Power

Line

Normal

Uplink

Crossover switch

8 port Ethernet hub

Auxiliary port

Power port

Console port

1. Connect the mini-DIN8 connector from the power adapter to the power port, and plug the other end into an

electrical outlet.

2. Connect one end of the RJ-11 cable to the Line port, and the other end to your SDSL wall outlet.

Download from Www.Somanuals.com. All Manuals Search And Download.

Making the Physical Connections 3-3

3. Connect the Ethernet cable to any of the Ethernet ports on the router.

(If you are connecting the router to an existing Ethernet hub, use Ethernet port #1 on the router and set the

crossover switch to the Uplink position.)

You should now have: the power adapter plugged in; the Ethernet cable connected between the router and

your computer; and the SDSL cable connected between the router and the SDSL wall outlet.

Netopia R7200 SDSL Router back panel ports

The following table describes all the Netopia R7200 SDSL Router back panel ports.

Port

Power port

D e sc r ip t i on

A mini-DIN8 power adapter cable connection.

Line port

An RJ-11 telephone-style jack labeled Line for your SDSL connection.

Console port

A DE-9 console port for a direct serial connection to the console screens. You

can use this if you are an experienced user. See “Connecting a console cable to

your router” on page 6-3.

Auxiliary port

An HD-15 auxiliary port for attaching an external modem or the optional

AppleTalk kit.

Crossover switch

A crossover switch with Normal and Uplink positions. If you use Ethernet Port

#1 for a direct Ethernet connection between a computer and the router, set the

switch to the Normal position. If you are connecting the router to an Ethernet

hub, use Ethernet port #1 on the router and set the switch to the Uplink

position.

8-port Ethernet hub

Eight Ethernet jacks. You will use one of these to conﬁgure the Netopia R7200.

For a new installation, use the Ethernet connection. Alternatively, you can use

the console connection to run console-based management using a direct serial

connection. You can either connect your computer directly to any of the Ethernet

ports on the router, or connect both your computer and the router to an existing

Ethernet hub on your LAN.

Download from Www.Somanuals.com. All Manuals Search And Download.

3-4 User’s Reference Guide

Netopia R7200 SDSL Router status lights

The ﬁgure below represents the Netopia R7200 status light (LED) panel.

Netopia R7200 LED front panel

2 3 4 5

6 7

8 9 10 11

12 13 14 15 16171819 2021

L in k /R e c e iv e

WA N 1

WA N 2

E t h e r n e t

The following table summarizes the meaning of the various LED states and colors:

When this happens...

The WAN interface is operational

the LEDs...

3 is green.

The line is unavailable

3 ﬂashes red.

The WAN has carrier

4 is green.

Data is transmitted or received on the WAN

Carrier is asserted

4 ﬂashes yellow.

6 and 7 are green.

6 and 7 ﬂash yellow.

12 ﬂashes yellow.

13 ﬂashes red.

Data is transmitted or received

Data is transmitted or received by the ethernet controller

The Ethernet interface detects a collision

Link is detected

14 though 21 are solid green.

14 though 21 ﬂash green.

Data are received on their respective ports

Note: 5 and 8 through 11 are unused, since the SDSL link is carried only on WAN channel 1. Also, Console

carrier (6) is ignored if the console is not conﬁgured for a remote modem.

Download from Www.Somanuals.com. All Manuals Search And Download.

Connecting to Your Local Area Network 4-1

Chapter 4

Connecting to Your Local Area Network

T h is chapter describes how to ph y s i c a l ly connect the N e top i a R 7 200 to y o ur local area network (LAN). Before

you proceed, make sure the N e top i a R 7 200 i s properly conﬁgured. Y o u can custom i ze the router’s conﬁguration

for your particular LAN requirements using console-based management (see “Console-Based Management” on

page 6-1).

T h is s ect i on cov e r s the following topic s :

“Overvi e w ” o n page 4 -1

“Readying computers on your local network” on page 4-1

“Connecting to an Ethernet network” on page 4-3

“Adding an external modem” on page 4-5

“Connecting to a LocalTalk network” on page 4-6

Overview

You can connect the Netopia R7200 to an IP or IPX network that uses Ethernet.

If you have purchased the AppleTalk feature expansion kit, you can also connect the router to a LocalTalk

net w o rk that uses Phone N ET c ab l ing.

Additionally, you can connect an external modem. See “Adding an external modem” on page 4-5.

Caution!

Before connecting the Netopia R7200 to any AppleTalk LANs that contain other AppleTalk routers, you should

read “Routers and seeding” on page 12-3.

See the later sections in this chapter for details on how to connect the Netopia R7200 to different types of

networks.

Readying computers on your local network

PC and Macintosh computers must have certain components installed before they can communicate through

the Netopia R7200. The following illustration shows the minimal requirements for a typical PC or Macintosh

computer.

Download from Www.Somanuals.com. All Manuals Search And Download.

4-2 User’s Reference Guide

Application software

TCP/ IP stack

Ethernet/ EtherTalk/ LocalTalk Driver

Your PC

or Macintosh

computer

To the Netopia R7200

Application software: T h is is the s o f tw a r e you u s e to send e -m a i l, brow s e the W o rld W i d e W e b, read

newsgroups, etc. These applications may require s ome con ﬁ gur a t i on. Ex a mp l e s i nclude the Eudora e -m a i l cli e nt

and the We b bro w s e r s Microsoft Internet Explorer and Netscape Navigator.

TCP/ IP stack: This is the software that lets your PC or Macintosh computer communicate using Internet

protocols. TCP/ IP stacks must be conﬁgured with some of the same information you used to conﬁgure the

Netopia R7200. There are a number of TCP/ IP stacks available for PC computers. Windows 95 includes a

built-in TCP/ IP stack. See “Conﬁguring TCP/ IP on Windows 95, 98, or NT computers” on page 5-6. Macintosh

computers use either MacTCP or Open Transport. See “Conﬁguring TCP/ IP on Macintosh computers” on

page 5-10.

Ethernet: Ethernet hardware and software drivers enable your PC or Macintosh computer to communicate on

the LAN.

EtherTalk and LocalTalk: These are AppleTalk protocols used over Ethernet.

Once the Netopia R7200 is properly conﬁgured and connected to your LAN, PC and Macintosh computers that

have their required components in place will be able to connect to the Internet or other remote IP networks.

Download from Www.Somanuals.com. All Manuals Search And Download.

Connecting to Your Local Area Network 4-3

Connecting to an Ethernet network

The Netopia R7200 supports Ethernet connections through its eight Ethernet ports. The router automatically

detects which Ethernet port is in use.

You can connect either 10Base-T or EtherWave Ethernet networks to the Netopia R7200.

The following table displays some important attributes of these types of Ethernet.

Attribute

EtherWave

10Base-T

Max. length of backbone,

branch, or end to end (cable

length)

330 feet

(100 meters)

330 feet

(100 meters)

Twisted pair

(10Base-T)

Twisted pair

(10Base-T)

Cable type

Netopia R7200 port used

Ethernet

Maximum 8

devices (daisy

chained)

No daisy

chain

Other restrictions

Download from Www.Somanuals.com. All Manuals Search And Download.

4-4 User’s Reference Guide

10Base-T

You can connect a standard 10Base-T Ethernet network to the Netopia R7200 using any of its available

Ethernet ports.

Netopia R7200 back panel

Ethernet

Auxiliary

Console

Power

Line

Normal

Uplink

The Netopia R7200 in a 10Base-T network

To connect your 10Base-T network to the Netopia

R7200 through an Ethernet port, use a 10Base-T

cable with RJ-45 connectors.

Ethernet

If you have more than eight devices to connect,

you can attach additional devices using another

10Base-T hub.

Nor-

Download from Www.Somanuals.com. All Manuals Search And Download.

Connecting to Your Local Area Network 4-5

If you add devices connected

through a hub, connect the hub to

Ethernet port number 1 on the

Netopia R7200 SDSL Router and

set the Normal/ Uplink crossover

switch to Uplink.

Ethernet

Nor-

Macintosh

10Base-T

Hub

Adding an external modem

You may want to add an external modem to your Auxiliary port. Obtain the special DB-25 external modem cable

(TE6/ DB25) either from your reseller or directly from Netopia.

Netopia R7200 Auxiliary port for connecting an external modem

Ethernet

Auxiliary

Console

Power

Line

Normal

Uplink

Auxiliary connection port

HD-15 (female)

By default, the Auxiliary port on your Netopia R7200 is enabled for remote console conﬁguration via an external

asynchronous modem. This means that all you have to do is connect your modem to the Auxiliary port and

conﬁgure its settings in the Line Conﬁguration screens under the WAN Conﬁguration menu.

For pinout information on the HD-15 to DB-25 modem cable, see “Pinouts for Auxiliary port modem cable,” in

Appendix F, “Technical Speciﬁcations and Safety Information.”

Download from Www.Somanuals.com. All Manuals Search And Download.

4-6 User’s Reference Guide

Connecting to a LocalTalk network

If you have purchased the AppleTalk feature expansion kit, you can also connect the router to an AppleTalk

network that uses either Ethernet or LocalTalk. Refer to the sheet of optional feature set add-ons in your

Netopia R7200 documentation folio.

The AppleTalk feature expansion kit includes a dual RJ-11 PhoneNET connector that attaches to the Auxiliary

port on the Netopia R7200.

Netopia R7200 Auxiliary port for connecting to LocalTalk

Ethernet

Auxiliary

Console

Power

Line

Normal

Uplink

Auxiliary connection port

HD-15 (female)

Connect the male HD-15 end of the LocalTalk cable to the Auxiliary port on your Netopia R7200. Connect the

other end of the cable to your LocalTalk network. You can use only one connection on the Auxiliary port. You

cannot use both the PhoneNET connector and an external modem.

If your LocalTalk network is not based on standard PhoneNET cabling, use a PhoneNET-to-LocalTalk adaptor

cable available from F a r a l lon divi s i on of N e top i a . C onnect the adaptor cable’s RJ -1 1 connector to the A p ple Talk

cable’s PhoneNET connector. Connect the cable’s mini-DIN-3 connector to your LocalTalk network.

Be sure to observe the standard rules governing maximum cable lengths and limits on the number of nodes on

a PhoneNET network. The dual RJ-11 PhoneNET connector allows insertion in the LocalTalk daisy chain or at the

end. If the device is connected at the end of the daisy chain, you must install the accompanying terminator.

For detailed conﬁguration instructions see “AppleTalk Setup” on page 12-1.

Download from Www.Somanuals.com. All Manuals Search And Download.

Setting up your Router with the SmartStart Wizard 5-1

Chapter 5

Setting up your Router with the SmartStart Wizard

Once you’ve connected your router to your computer and your telecommunications line and installed a web

browser, you’re ready to run the Netopia SmartStart™ Wizard. The SmartStart Wizard will help you set up the

router and share the connection. The SmartStart Wizard walks you through a series of questions and, based on

your responses, automatically conﬁgures the router for connecting your LAN to the Internet or to your remote

corporate network.

The SmartStart Wizard will:

automatically check your Windows 95, 98, or NT PC’s TCP/ IP conﬁguration to be sure you can accept a

d y n am i c a l ly a ss i gn e d I P a ddress, and change i t for you if it is not s et f or d y n am i c a ddressing

check the ph y s i c a l connect i on from your computer to y o ur router w i t hout y o ur ha v ing to e nter an I P a ddress

ass i gn a n I P a ddress to y o ur router

This chapter covers the following topics:

“Before running SmartStart” on page 2

“Setting up your Router with the SmartStart Wizard” on page 3

“Sharing the Connection” on page 6

Download from Www.Somanuals.com. All Manuals Search And Download.

5-2 User’s Reference Guide

Before running SmartStart

Be sure you have connected the cables and power source as described in Step 1 “Connect the Router” guide

contained in your Netopia folio.

Before you launch the SmartStart application, make sure your computer meets the following requirements:

M a c i n t osh

MacOS 7.5 or later

System

software

Windows 95, 98, or NT operating system

Connectivity

software

TCP/ IP must be installed and properly

conﬁgured. See “Conﬁguring TCP/ IP on

Windows 95, 98, or NT computers” on

page 5-6

MacTCP or Open Transport TCP/ IP must be

installed and properly conﬁgured. See

“Conﬁguring TCP/ IP on Macintosh

computers” on page 5-10.

Connectivity

hardware

Ethernet card (10Base-T)

Either a built-in or third-party Ethernet card

(10Base-T)

Browser

software

Netscape Communicator™ or Microsoft Internet Explorer, included on the Netopia CD.

Required for web-based registration and web-based monitoring.

Note s :

• The computer running SmartStart must be on the same Ethernet cable segment as the Netopia R7200.

Repeaters, such as 10Base-T hubs between your computer and the Netopia R7200, are acceptable, but

devices such as switches or other routers are not.

• SmartStart for the PC will set your TCP/ IP control panel to “Obtain an IP address automatically” if it is

not already set this way. This will cause your computer to reboot. If you have a speciﬁed IP address

conﬁgured in the computer, you should make a note of it before running SmartStart, in case you do not

want to use the dynamic addressing features built in to the Netopia Router and need to restore the ﬁxed IP

address.

Download from Www.Somanuals.com. All Manuals Search And Download.

Setting up your Router with the SmartStart Wizard 5-3

Setting up your Router with the SmartStart Wizard

The SmartStart Wizard is tailored for your platform, but it works the same way on either a PC or a Macintosh.

Insert the Netopia CD, and in the desktop navigation screen that appears, launch the SmartStart Wizard

application.

SmartStart Wizard conﬁguration screens

The screens described in this section are the default screens shipped on the Netopia CD. They

derive from two initialization (.ini) ﬁles included in the same directory as the SmartStart

application ﬁle. Your reseller or your ISP may have supplied you with customized versions of these

ﬁles.

If you have received a CD or diskette that has been customized by your reseller or ISP, you

can run the SmartStart Wizard directly from the CD or diskette and follow the instructions

your reseller or ISP provides. This makes your Netopia R7200 conﬁguration even easier.

If you have received only the .ini ﬁles from your reseller or ISP, perform the following:

Copy the entire directory folder containing the SmartStart Wizard application from the

Netopia CD to your hard disk.

Copy the customized .ini ﬁles to the same directory folder that contains the SmartStart

Wizard application, allowing the copy process to overwrite the original .ini ﬁles.

Run the SmartStart Wizard from your hard disk. You can then follow the instructions your

reseller or ISP provides.

The SmartStart Wizard presents a series of screens to guide you through the preliminary conﬁguration of a

Netopia R7200. It will then create a connection proﬁle using the information you supply to it.

Welcome screen. The ﬁrst screen welcomes you to the

SmartStart Wizard conﬁguration utility.

Click the Ne xt button after you have responded to the

interactive prompts in each screen.

The He lp button will display useful information to assist

you in responding to the interactive prompts.

Download from Www.Somanuals.com. All Manuals Search And Download.

5-4 User’s Reference Guide

Setup Options screen. You can choose either Eas y or

Advance d setup.

If you choose Eas y, SmartStart a utomat i c a l ly u s es

the pre con ﬁ gur e d I P a ddressing setup built into your

router. This is the best choice if you are creating a

new network or don’t already have an IP addressing

scheme on your new network.

If y o u choo s e E a s y , y o u w ill s ee a “Connection Test

screen,” like the one shown below while SmartStart

checks the connection to your router.

If you choose Advance d, skip to page 5-5 now. The

SmartStart Wizard displays the “Router IP Address

screen” on page 5-5, in which you can choose ways

to modify your router’s IP address.

Easy option

Connection Test screen. SmartStart tests the

connection to the router. While it is testing the

connection, a progress indicator screen is displayed and

the router’s Ethernet LEDs ﬂash.

When the test succeeds, SmartStart indicates success.

If the test fails, the wizard displays an error screen. If the test fails, check the following:

Check your cable connections. Be sure you have connected the router and the computer properly, using the

correct cables. Refer to the Step 1 “Connect the Router” sheet in your Netopia R7200 documentation folio.

Make sure the router is turned on and that there is an Ethernet connection bet w e en y o ur computer and the

router.

Ch e ck the T CP/ IP c ontrol panel sett i ngs to be s ure that automatic IP Addressing (Windows) or DHCP

(Macintosh) is selected. If you are using a Windows PC, SmartStart will automatically detect a static IP

address and offer to conﬁgure the computer for automatic addressing. On a Macintosh computer, you must

manua l ly s et the T CP/ IP C o ntrol Panel to D HCP. S ee “Conﬁguring T CP/ IP o n M a c i nto s h c omputers” on

page 5-10. If you currently use a static IP address outside the 192.168.1.x network, and want to continue

using it, use the Advanced option to assign the router an IP address in your target IP range. See “Advanced

option” on page 5-5.

If all of the above steps fail to resolve the problem, reset the router to its factory default settings and rerun

SmartStart. See “Factory defaults” on page 15-6 for instructions.

Download from Www.Somanuals.com. All Manuals Search And Download.

Setting up your Router with the SmartStart Wizard 5-5

When the test is successful, SmartStart presents you with the “Additional Conﬁguration screen,” shown below.

Additional Conﬁguration screen. If you have a router that

has a permanent unswitched connection to your ISP, such

as an IDSL, SDSL, or Ethernet WAN interface router

attached to a cable modem, the Additional Conﬁguration

screen appears.

You may want to do additional conﬁguration to customize

your network environment. SmartStart lets you launch

your Telnet application by clicking the Telnet button.

Advanced conﬁguration options available via Telnet are

explained in “Console-Based Management” on page 6-1.

However, if you need no further conﬁguration options,

click Quit. Congratulations! You’re ﬁnished!

Advanced option

Router IP Address screen. If you selected the Advanced

option in the “Setup O p tions s c reen” on page 5-4,

SmartStart asks you to choose between entering the

router’s current IP address and assigning an IP address

to the router.

If the router has already been assigned an IP address,

select the ﬁrst radio button. If you do this, the “Known IP

Address screen,” appears (shown below.)

If you want to reconﬁgure the router with a new IP address

and subnet mask, select the second radio button. If you

do this, the “New IP Address screen” on page 5-6

appears.

When you have done this, click Ne xt.

Download from Www.Somanuals.com. All Manuals Search And Download.

5-6 User’s Reference Guide

Known IP Address screen. SmartStart displays a

recommended address for the router based on the IP

address of the computer.

If you know the router has an IP address diff e r e nt f rom

the default v a l u e , enter i t no w . O t her w i s e, accept the

recommended address.

When you have done this, click Ne xt.

SmartStart tests the connection to your router.

SmartStart then returns you to an “Additional

Conﬁguration screen” on page 5-5.

New IP Address screen. If you want to change the router’s

IP address, you enter the new IP address, the subnet mask,

and the router’s serial number in this screen. Remember,

the serial number is on the bottom of the router. It is also

found in your documentation folio.

Note : Forcing a new IP address may turn off the Netopia

R7200’s IP address serving capabilities, if you assign an IP

address and subnet mask outside the router’s current IP

address serving pool. The Netopia R7200 does not allow

an invalid address to be serv e d. U s e th i s option with

caution.

When you have done this, click Ne xt.

SmartStart forces the new IP address into the router, tests the connection, and then resets the

router.

SmartStart then returns you to the “Additional Conﬁguration screen” on page 5-5.

Sharing the Connection

Conﬁguring TCP/IP on Windows 95, 98, or NT computers

Conﬁguring TCP/ IP on a Windows computer requires the following:

An Ethernet card (also known as a network adapter)

The TCP/ IP protocol must be “bound” to the adapter or card

Download from Www.Somanuals.com. All Manuals Search And Download.

Setting up your Router with the SmartStart Wizard 5-7

Dynamic conﬁguration (recommended)

If you conﬁgure your Netopia R7200 using SmartStart, you can accept the dynamic IP address assigned by your

router. The Dynamic Host Conﬁguration Protocol (DHCP) server, which enables dynamic addressing, is enabled

by default in the router. If your PC is not set for dynamic addressing, SmartStart will offer to do this for you

when you launch it. In that case, you will have to restart your PC and relaunch SmartStart. If you conﬁgure your

PC for dynamic addressing in advance, SmartStart need only be launched once. To conﬁgure your PC for

dynamic addressing do the following:

1. Go to the Start

Menu/ Settings/ Control

Panels and double click

the Ne twork icon. From

the Network components

list, select the

Conﬁguration tab.

2. Select TCP/ IP-->Your Network Card. Then select

Prope rtie s . In the TCP/ IP Properties screen (shown here),

select the IP Addre s s tab. Click “Obtain an IP Address

automatically”.

3. Click on the DNS Conﬁguration tab. Click Dis able DNS.

DNS will be assigned by the router with DHCP.

4. Click OK in this window and the next window. When

prompted, reboot the computer.

Note : You can also use these instructions to conﬁgure other computers on your network to accept IP addresses

served by the Netopia R7200.

Download from Www.Somanuals.com. All Manuals Search And Download.

5-8 User’s Reference Guide

Static conﬁguration (optional)

If you are manually conﬁguring for a ﬁxed or static IP address, perform the following:

1. Go to Start Menu/ Settings/ Control Panels and double click the Ne twork icon. From the Network

components list, select the Conﬁguration tab.

2. Select TCP/ IP-->Your Network Card. Then select Properties. In the TCP/ IP Properties screen (shown

below), select the IP Addre s s tab. Click “Specify an IP Address.”

Enter the following:

IP Addre s s : 192.168.1.2

Subne t Mas k: 255.255.255.0, or for 12-user models 255.255.255.240

This address is an example of one that can be used to conﬁgure the router with the Easy option in the

SmartStart Wizard. Your ISP or network administrator may ask you to use a different IP address and

subnet mask.

Download from Www.Somanuals.com. All Manuals Search And Download.

Setting up your Router with the SmartStart Wizard 5-9

3. Click on the Gate way tab (shown below).

Under “New gateway,” enter

192.168.1.1. Click Add. This is the

Netopia R7200’s pre-assigned IP

address.

Click on the DNS Conﬁguration tab. Click Enable DNS.

Enter the following

information:

Hos t: Type the name

you want to give to

this computer.

Domain: Type your

domain name. If you

don't have a domain

name, type your ISP's

domain name; for

example,

netopia.com.

DNS Se rve r Se arch

Orde r: Type the

primary DNS IP

address given to you

by your ISP. Click

Add. Repeat this process for the secondary DNS.

Domain Sufﬁx Se arch Orde r: Enter the same domain

name you entered above.

4. Click OK in this window and the next window. When prompted, reboot the computer.

Note : You can also use these instructions to conﬁgure other computers on your network with manual or static

IP addresses. Be sure each computer on your network has its own IP address.

Download from Www.Somanuals.com. All Manuals Search And Download.

5-10 User’s Reference Guide

Conﬁguring TCP/IP on Macintosh computers

The following is a quick guide to conﬁguring TCP/ IP for MacOS computers. Conﬁguring TCP/ IP in a Macintosh

computer requires the following:

You must have either Open Transport or Classic Networking (MacTCP) installed.

Note : If you want to use the Dynamic Host Conﬁguration Protocol (DHCP) server built into your Netopia

R7200 to assign IP addresses to your Macintoshes, you must be running Open Transport, standard in

MacOS 8 and optional in earlier system versions. You can have your Netopia R7200 dynamically assign IP

addresses using MacTCP; however, to do so requires that the optional AppleTalk kit be installed which can

only be done after the router is conﬁgured.

You must have built-in Ethernet or a third-party Ethernet card and its associated drivers installed in your

Macintosh.

Dynamic conﬁguration (recommended)

If you conﬁgure your Netopia R7200 using SmartStart, you can accept the dynamic IP address assigned by your

router. The Dynamic Host Conﬁguration Protocol (DHCP), which enables dynamic addressing, is enabled by

default in the router. To conﬁgure your Macintosh computer for dynamic addressing do the following:

1. Go to the Apple menu. Select Control Pane ls and then

TCP/ IP.

2. With the TCP/ IP window open, go to the Edit menu and

select Us e r Mode . Choose Bas ic and click OK.

3. In the TCP/ IP window, select “Connect via: Ethernet” and

“Conﬁgure: Using DHCP Server.”

Note : You can also use these instructions to conﬁgure other computers on your network to accept IP addresses

served by the Netopia R7200.

Download from Www.Somanuals.com. All Manuals Search And Download.

Setting up your Router with the SmartStart Wizard 5-11

Static conﬁguration (optional)

If you are manually conﬁguring for a ﬁxed or static IP address,

perform the following:

1. Go to the Apple menu. Select Control Pane ls and then

TCP/ IP or MacTCP.

2. With the TCP/ IP window open, go to the Edit menu and

select Us e r Mode . Choose Advance d and click OK.

Or, in the MacTCP window, select Ethe rne t and click the

More button.

3. In the TCP/ IP window or in the MacTCP/ More window, select or type information into the ﬁelds as shown in

the following table.

Option:

Connect via:

Select/ Type:

Ethernet

Conﬁgure:

Manually

IP Address:

Subnet mask:

192.168.1.2

255.255.255.0, or for 12-user models

255.255.255.240

Router or Gateway address:

Name server address:

192.168.1.1

Enter the primary and secondary name server

addresses given to you by your ISP

Implicit Search Path:

Starting domain name:

Enter your domain name; if you do not have a

domain name, enter the domain name of your ISP

4. Close the TCP/ IP or MacTCP control panel and save the settings.

5. If you are using MacTCP, you must restart the computer. If you are using Open Transport, you do not need

to restart.

Note : You can also use these instructions to conﬁgure other computers on your network with manual or static

IP addresses. Be sure each computer on your network has its own IP address.

Download from Www.Somanuals.com. All Manuals Search And Download.

5-12 User’s Reference Guide

Dynamic conﬁguration using MacIP (optional)

If you want to use MacIP to dynamically assign IP addresses to the Macintosh computers on your network you

must install the optional AppleTalk feature set kit.

Note: You cannot use MacIP dynamic conﬁguration to conﬁgure your Netopia R7200 SDSL Router because you

must ﬁrst conﬁgure the router in order to enable AppleTalk.

Once the AppleTalk kit is installed, you can conﬁgure your Macintoshes for MacIP. To conﬁgure dynamically

using MacIP, perform the following:

Using Open Transport TCP/ IP

1. Go to the Apple menu. Select Control Panels and then TCP/ IP.

2. With the TCP/ IP window open, go to the Edit menu and select User Mode. Choose Advanced and click OK.

3. In the TCP/ IP window, select or type information into the ﬁelds as shown in the following table.

TCP/ IP Option:

Connect via:

Select/ Type:

AppleTalk (MacIP)

Conﬁgure:

Using MacIP server

MacIP Server zone:

Name server address:

(select available zone)

Enter the primary and secondary name server

addresses given to you by your ISP

Implicit Search Path:

Enter your domain name; if you do not have a

Starting domain name:

domain name, enter the domain name of your ISP

4. Close the TCP/ IP control panel and save the settings.

These are the only ﬁelds you need to modify in these screens.

Download from Www.Somanuals.com. All Manuals Search And Download.

Setting up your Router with the SmartStart Wizard 5-13

Using Classic Networking (MacTCP)

1. Go to the Apple Menu. Select Control Panels and then Network.

2. In the Network window, select EtherTalk.

3. Go back to the Apple menu. Select Control Panels and then MacTCP.

4. Select EtherTalk.

From the pull-down menu under EtherTalk, select an available zone; then click the More button.

In the MacTCP/ More window select the Server radio button. If necessary, ﬁll in the Domain Name Server

information given to you by your administrator.

5. Restart the computer.

Note: More information about conﬁguring your Macintosh computer for TCP/ IP connectivity through a Netopia

R7200 can be found in Technote NIR_026, “Open Transport and Netopia Routers,” located on the Netopia Web

site.

Download from Www.Somanuals.com. All Manuals Search And Download.

5-14 User’s Reference Guide

Download from Www.Somanuals.com. All Manuals Search And Download.

Console-Based Management 6-1

Chapter 6

Console-Based Management

Con s o l e -b ased management i s a m e nu -d riv e n i nterface for the capabilities built into the Netopia R7200.

Con s o l e -b ased management pro v id e s access to a w ide v a r i e ty of f e atures that the router supports. You can

customize these features for your individual setup. This chapter describes how to access the console-based

management screens.

This section covers the following topics:

“Connecting through a Telnet session” on page 6-2

“Connecting a console cable to your router” on page 6-3

“Navigating through the console screens” on page 6-4

Console-based management screens contain seven entry points to the Netopia Router conﬁguration and

monitoring features. The entry points are displayed in the Main Menu shown below:

Netopia R7200 v4.3.5

Easy Setup...

WAN Configuration...

System Configuration...

Utilities & Diagnostics...

Statistics & Logs...

Quick Menus...

Quick View...

Return/Enter goes to Easy Setup -- minimal configuration.

You always start from this main screen.

The Easy Setup menus display and permit changing the values contained in the default connection proﬁle.

Experienced users can use Easy Setup to initially conﬁgure the router directly through a console session.

Easy Setup menus contain up to ﬁve descendant screens for viewing or altering these values. The number

of screens depends on whether you have optional features installed.

The WAN Conﬁguration menu displays and permits changing your connection proﬁle(s) and default proﬁle,

creating or deleting additional connection proﬁles, and conﬁguring or reconﬁguring the manner in which you

Download from Www.Somanuals.com. All Manuals Search And Download.

6-2 User’s R e ference Guide

may be using the router to connect to more than one ser v ice provid e r or remote site.

The System Conﬁguration menus di s p l a y and perm i t changing:

Network protocols setup. See “IP S etup and N e t w o rk A d dress Translation” on page 10-1, “IPX Setup”

on page 11-1, and “AppleTa l k S etup” on page 12 -1 .

Filter sets (ﬁrewalls). See “Security” on page 14-1.

IP address serving. S e e “IP a ddress ser v ing” on p a g e 1 0 -2 1.

Date and time. See “D a te and t i m e ” on page 8 -1 2 .

Console conﬁguration. See “Connecting a console cable to your router” on page 6-3.

SNMP (Simple Network Management Protocol). See “SNMP” on page 13-12.

Security. See “Security” on page 14-1.

Upgrade feature set. See “Upgrade feature s et” on page 8 -1 4 .

The Utilities & Diagnostics menus provide a selection of seven tools for monitoring and diagnosing the

router's behavior, as well as for updating the ﬁrmware and rebooting the system. See “Utilities and

Diagnostics” on page 15-1 for detailed information.

The Stat i s t i c s & L o gs menus di s p l a y n i ne s ets of tab l e s and de v ice logs th a t show i nformation about your

router, your network, and their history. See “Statistics & Logs” on page 13-4 for detailed information.

The Quick Menus screen is a shortcut entry point to 22 of the most commonly used conﬁguration menus

that are accessed through the other menu entry points.

The Quick View menu displays at a glance current real-time operating information about your router. See

“Quick View status overview” on page 13-1 for detailed information.

Connecting through a Telnet session

Features of the Netopia R7200 can be conﬁgured through the console screens.

Before you can access the console screens through Telnet, you must have:

A network connection locally to the router or IP access to the router.

Note: Alternatively, you can have a direct serial console cable connection using the provided console cable

for your platform (PC or Macintosh) and the Console port on the back of the router. For more information on

attaching the console cable, see “Connecting a console cable to your router” on page 6-3.

Telnet software installed on the computer you will use to conﬁgure the router

Download from Www.Somanuals.com. All Manuals Search And Download.

Console-Based Management 6-3

Conﬁguring Telnet software

If you are conﬁguring your router using a Telnet session, your computer must be running a Telnet software

program.

If you connect a PC with Microsoft Windows, you can use a Windows Telnet application or simply run Telnet

from the Start menu.

If you connect a Macintosh computer, you can use the NCSA Telnet program supplied on the Netopia

R7200 CD. You install NCSA Telnet by simply dragging the application from the CD to your hard disk.

Connecting a console cable to your router

You can perform all of the system conﬁguration activities for your Netopia R7200 through a local serial console

connection using terminal emulation software, such as HyperTerminal provided with Windows 95 on the PC, or

ZTerm, included on the Netopia CD, for Macintosh computers.

The Netopia R7200 back panel has a connector labeled “Console” for attaching the Router to either a PC or

Macintosh computer via the serial port on the computer. (On a Macintosh computer, the serial port is called the

Modem port or Printer port.) This connection lets you use the computer to conﬁgure and monitor the Netopia

R7200 via the console screens.

Ethernet

Auxiliary

Console

Power

Line

Normal

Uplink

Console connection port

DB-9 (male)

To connect the Netopia R7200 to your computer for serial console communication, use the supplied dual

console cable connector end appropriate to your platform:

One DB-9 connector end attaches to a PC.

The mini-DIN8 connector end attaches to a Macintosh computer.

The DB-9 end of the Console cable attaches to the Netopia R7200’s Console port.

If you connect a PC with Microsoft Windows 95 or NT, you can use the HyperTerminal application bundled

with the operating system.

If you connect a Macintosh computer, you can use the ZTerm terminal emulation program on the supplied

Netopia R7200 CD.

Download from Www.Somanuals.com. All Manuals Search And Download.

6-4 User’s Reference Guide

Launch your terminal emulation software and conﬁgure the communications software for the values shown in

the table below. These are the default communication parameters that the Netopia R7200 uses.

Parameter

Terminal type

Suggested Value

PC: ANSI-BBS

Mac: ANSI, VT-100, or VT-200

Data bits

Parity

None

Stop bits

Speed

57600 bits per second

None

Flow Control

Note: The router ﬁrmware contains an autobaud detection feature. If you are at any

screen on the serial console, you can change your baud rate and press Return

(HyperTerminal for the PC requires a disconnect). The new baud rate is displayed at

the bottom of the screen.

Navigating through the console screens

Use your keyboard to navigate the Netopia R7200’s conﬁguration screens, enter and edit information, and

make choices. The following table lists the keys to use to navigate through the console screens.

To...

Use These Keys...

Move through selectable items in a screen or pop-up menu

Up, Down, Left, and Right Arrow

Return or Enter

Set a change to a selected item or open a pop-up menu of

options for a selected item like entering an upgrade key

Change a toggle value (Yes/ No, On/ Off)

Restore an entry or toggle value to its previous value

Move one item up

Tab

Esc

Up arrow or Control + K

Move one item down

Down arrow or Control + O

Display a dump of the device event log

Display a dump of the WAN event log

Refresh the screen

Control + E

Control + F

Control + L

Go to topmost selectable item

Go to bottom right selectable item

Download from Www.Somanuals.com. All Manuals Search And Download.

Easy Setup 7-1

Chapter 7

Easy Setup

This chapter describes how to use the Easy Setup console screens on your Netopia R7200 SDSL Router. After

completing the Easy Setup console screens, your router will be ready to connect to the Internet or another

remote site.

Easy Setup console screens

Using four Easy Setup console screens, you can:

Modify a connection proﬁle for your router for the connection to your ISP or remote location

Set up IP addresses and IP address serving

P a ss w o rd–protect con ﬁ gur a t i on a ccess to y o ur N e top i a R 7 200 S D S L R outer

Accessing the Easy Setup console screens

To access the console screens, Telnet to the Netopia Router over your Ethernet network or physically connect

with a serial console cable and access the Netopia Router with a terminal emulation program. See “Connecting

through a Telnet session” on page 6-2 or “Connecting a console cable to your router” on page 6-3.

Note: Before continuing, make sure you have the information that your telephone service provider, ISP, or

network administrator has given you for conﬁguring the Netopia Router.

The Netopia Router’s ﬁrst console screen, Main Menu, appears in the terminal emulation window of the

attached PC or Macintosh computer when:

The Netopia Router is turned on

The computer is connected to the Netopia Router

Telnet or the terminal emulation software is running and conﬁgured correctly

Download from Www.Somanuals.com. All Manuals Search And Download.

7-2 User’s Reference Guide

A screen similar to the following Main Menu appears:

Netopia R7200 v4.3.5

Easy Setup...

WAN Configuration...

System Configuration...

Utilities & Diagnostics...

Statistics & Logs...

Quick Menus...

Quick View...

Return/Enter goes to Easy Setup -- minimal configuration.

You always start from this main screen.

If you do not see the Main Menu, verify that:

The computer used to view the console screen has its serial port connected to the Netopia R7200’s

Console port or an Ethernet connection to one of its Ethernet ports. See “Connecting a console cable to

your router” on page 6-3 or “Connecting through a Telnet session” on page 6-2.

Telnet or the terminal emulation software is conﬁgured for the recommended values.

If you are connecting v ia t he Con s o l e port, y o ur computer’s s e r i a l port is not being used by another device,

such as an internal modem, or an application. Turn off all other programs (other than your terminal

emulation program) that may be interfering with your access to the port.

You have entered the correct password, if necessary. Your Netopia R7200’s console access may be

password protected from a previous conﬁguration. See your system administrator to obtain the password.

See Appendix A, “Troubleshooting,” for more suggestions.

Download from Www.Somanuals.com. All Manuals Search And Download.

Easy Setup 7-3

Quick Easy Setup connection path

This section may be all you need to do to conﬁgure your Netopia R7200 SDSL Router to connect to the Internet.

Most ISPs will supply you with several parameter values for you to enter in the router. The ISP will provide the

values shown below:

Parameter:

Your value:

Data Link Encapsulation

RFC1483 (default) or

PPP (optional)

Local WAN IP Address

Local WAN IP Mask

Default IP Gateway

Domain Name

n/ a

Primary Domain Name Server n/ a

User Name

Password

n/ a

(If you want to record these values, you can print this page and use the spaces above.)

If your ISP assigns your Router a Static IP address, do the following:

1. Open a Telnet session to 192.168.1.1 to bring up the Main Menu.

If you don't know how to do this, see “Connecting through a Telnet session” on page 6-2.

Alternatively, you can connect the console cable and open a direct serial console connection, using a

terminal emulator program. See “Connecting a console cable to your router” on page 6-3.

Download from Www.Somanuals.com. All Manuals Search And Download.

7-4 User’s Reference Guide

The Main Menu appears.

Netopia R7200 v4.3.5

Easy Setup...

WAN Configuration...

System Configuration...

Utilities & Diagnostics...

Statistics & Logs...

Quick Menus...

Quick View...

2. Select the ﬁrst item on the Main Menu list, Easy Setup. Press Return to bring up the SDSL Line

Conﬁguration menu screen.

SDSL Line Conﬁguration

SDSL Line Configuration

Data Link Encapsulation...

RFC1483

TO MAIN MENU

NEXT SCREEN

Enter Information supplied to you by your telephone company.

1. Select Data Link Encapsulation and press Return. The pop-up menu will offer you the choice of PPP or

RFC1483. Your selection depends on which type your ISP uses. The default is RFC1483.

2. Press the Down arrow key until you reach NEXT SCREEN. Press Return to bring up the next screen.

Download from Www.Somanuals.com. All Manuals Search And Download.

Easy Setup 7-5

Easy Setup Proﬁle

The Easy Setup Proﬁle screen is where you conﬁgure the parameters that control the Netopia R7200’s

connection to a speciﬁc remote destination, usually your ISP or a corporate site.

On a Netopia R7200 SDSL Router you can add up to 15 more connection proﬁles, for a total of 16, although

you can only use one at a time.

Connection Profile 1: Easy Setup Profile

Address Translation Enabled:

Local WAN IP Address:

Yes

0.0.0.0

Remote IP Address:

Remote IP Mask:

127.0.0.2

255.255.255.255

PPP Authentication...

Send User Name:

Send Password:

PAP

jarjar

binks

PREVIOUS SCREEN

NEXT SCREEN

Return accepts * ESC cancels * Left/Right moves insertion point * Del deletes.

Enter basic information about your WAN connection with this screen.

1. To enable address translation, toggle Address Translation Enabled to Yes (the default). For more

information on Network Address Translation, see Chapter 10, “IP Setup and Network Address Translation,”

on page 10-1.

If you selected RFC1483 data link encapsulation in the SDSL Line Conﬁguration screen, an IP Addressing

menu item appears allowing you to choose between Unnumbered and Numbered addressing. Numbered is

the default for SDSL. It assigns a unique IP address to the SDSL WAN interface, as required by most ISPs’

routers. Unnumbered may be used for simpler conﬁgurations such as point-to-point short haul applications.

2. Select the editable ﬁeld labeled Local WAN IP Address.

The default address is 0.0.0.0, which allows for dynamic addressing, when your ISP assigns an address

each time you connect. However, you can enter another speciﬁc address if you want to use static

addressing. In that case, enter the local WAN address your ISP gave you. Press Return.

3. If you selected PPP data link encapsulation in the SDSL Line Conﬁguration screen, a PPP Authentication

menu item appears. The authentication protocol and user name/ password combinations you enter must

be assigned or agreed to in advance between you and your ISP. Select PPP Authentication and press

Return.

From the pop-up menu that appears, select the authentication method your ISP uses: PAP (Password

Authentication Protocol), CHAP (Challenge Handshake Authentication Protocol), PAP-TOKEN, CACHE-TOKEN,

or None.

PAP is the most common, and requires you to enter a User Name and Password in the next two ﬁelds.

Download from Www.Somanuals.com. All Manuals Search And Download.

7-6 User’s Reference Guide

CHAP requires you to enter a Host Name and Secret in the next two ﬁelds.

PAP-TOKEN requires you to enter a User Name in the next ﬁeld.

CACHE-TOKEN requires you to enter a User Name and Password in the next two ﬁelds.

4. Press the Down arrow key until you reach NEXT SCREEN. Press Return to bring up the next screen.

IP Easy Setup

The IP Easy Setup screen is where you enter information about your Netopia Router’s:

Ethernet IP address

Ethernet Subnet mask

Domain Name

Domain Name Server IP address

Default gateway IP address

Consult with your network administrator to obtain the information you will need. For more information about

setting up IP, see “IP Setup and Network Address Translation” on page 10-1.

IP Easy Setup

Ethernet IP Address:

Ethernet Subnet Mask:

192.168.1.1

255.255.255.0

Domain Name:

Primary Domain Name Server:

Secondary Domain Name Server:

isp.net

209.3.224.21

209.3.224.20

Default IP Gateway:

IP Address Serving:

127.0.0.2

Number of Client IP Addresses:

1st Client Address:

100

192.168.1.100

PREVIOUS SCREEN

NEXT SCREEN

Enter an IP address in decimal and dot form (xxx.xxx.xxx.xxx).

Set up the basic IP & IPX attributes of your Netopia in this screen.

1. Select Ethernet IP Address and enter the ﬁrst IP address from the IP address range your ISP has given

you. This will be the Netopia Router’s IP address.

If Network Address Translation is enabled in the Easy Setup connection proﬁle, the Ethernet IP Address

defaults to an address (192.168.1.1) within a range reserved by the Internet address administration

authority for use within private networks.

Because this is a private network address, it should never be directly connected to the Internet. Using NAT

for all your connection proﬁles will ensure this restriction. See “IP Setup and Network Address Translation”

on page 10-1 of this guide for more information.

Download from Www.Somanuals.com. All Manuals Search And Download.

Easy Setup 7-7

2. Select Ethernet Subnet Mask and enter the subnet mask your ISP has given you. The Ethernet Subnet

Mask defaults to a standard class mask derived from the class of the Ethernet IP address you entered in

the previous step.

3. Press the Down arrow key until the editable ﬁeld labeled Domain Name is highlighted.

4. Type the Domain Name your ISP gave you. Press Return. The next ﬁeld Primary Domain Name Server will

be highlighted.

5. Type the Primary Domain Name Server address your ISP gave you. Press Return. A new ﬁeld Secondary

Domain Name Server will appear. If your ISP gave you a secondary domain name server address, enter it

here. Press Return until the next ﬁeld Default IP Gateway is highlighted.

6. If you do not enter a Default IP Gateway value, the router defaults to the remote IP address you entered in

the Easy Setup connection proﬁle. If the Netopia Router does not recognize the destination of any IP trafﬁc,

it forwards that trafﬁc to this gateway.

Do not confuse the remote IP address and the Default IP Gateway’s address with the block of local IP

addresses you receive from your ISP. You use the local IP addresses for the Netopia R7200’s Ethernet port

and for IP clients on your local network. The remote IP address and the default gateway’s IP address

should point to your ISP’s router.

7. Press the Down arrow key until you reach NEXT SCREEN. Press Return.

Easy Setup Security Conﬁguration

The Easy Setup Security Conﬁguration scre en l e ts y o u pass w o rd -p rotect y o ur N e top i a R 7 200. I n put y o ur Write

Access Name and Write Access Password with names or numbers totaling up to eleven digits.

If you password protect the console screens, you will be prompted to enter the name and password you have

speciﬁed every time you log in to the console screens. Do not forget your name and password. If you do, you

will be unable to access any of the conﬁguration screens.

Additional security features are available. See “Security” on page 14-1.

Download from Www.Somanuals.com. All Manuals Search And Download.

7-8 User’s Reference Guide

Easy Setup Security Configuration

It is strongly suggested that you password-protect configuration access to your

Netopia. By entering a Name and Password pair here, access via serial,

Telnet, SNMP and Web Server will be password-protected.

Be sure to remember what you have typed here, because you will be prompted for

it each time you configure this Netopia.

You can remove an existing Name and Password by clearing both fields below.

Write Access Name:

Write Access Password:

PREVIOUS SCREEN

TO MAIN MENU

RESTART DEVICE

Configure a Configuration Access Name and Password here.

T h e ﬁ n al step i n conﬁguring the Ea s y Setup conso l e s c reens is to restart the Netopia R7200, so that the

conﬁguration settings take effect.

1. Select RESTART DEVICE. A prompt asks you to conﬁrm your choice.

2. Select CONTINUE to restart the Netopia Router and have your selections take effect.

Note: You can also restart the system at any time by using the Restart System utility (see “Restarting the

system” on page 15-12) or by turning the Netopia Router off and on with the power switch.

The Router will restart and your conﬁguration settings will be activated. You can then Exit or Quit your Telnet

application.

Easy Setup is now complete.

Download from Www.Somanuals.com. All Manuals Search And Download.

Part II: Advanced Configuration

Download from Www.Somanuals.com. All Manuals Search And Download.

User’s Reference Guide

Download from Www.Somanuals.com. All Manuals Search And Download.

WAN and System Conﬁguration 8-1

Chapter 8

WAN and System Configuration

T h is chapter describes how to use the console -b ased management screens to access and conﬁgure advanced

feature s of y o ur N e top i a R 7 200 S D S L R outer. Y o u can custom i ze th e se f e atures for your individual setup.

These menus provide a powerful method for experienced users to set up their router’s connection proﬁles and

s y s tem con ﬁ gur a t i on.

T h is s ect i on cov e r s the following topic s :

“WA N c on ﬁ gur a t i on” on page 8 -1

“Cre at i ng a new Connection Proﬁle” on page 8 -3

“The default proﬁle” on page 8-6

“System conﬁguration screens” on page 8-9

“Navigating through the system conﬁguration screens” on page 8-10

“System conﬁguration features” on page 8-11

WAN conﬁguration

To conﬁgure your Wide Area Network (WAN) connection, navigate to the WAN Conﬁguration screen from the Main

Menu and select WAN Conﬁguration, then SDSL Line Conﬁguration.

WAN

Configuration

Main

WAN

Setup

SDSL Line

Configuration

The SDSL Line Conﬁguration screen appears.

Download from Www.Somanuals.com. All Manuals Search And Download.

8-2 User’s Reference Guide

SDSL Line Configuration

Data Rate Mode...

Data Rate...

Hunt

384

ATM VPI:

ATM VCI:

Data Link Encapsulation...

RFC1483

Aux Serial Port...

Data Rate (kbps)...

Aux Modem Init String:

Async Modem

57.6

AT&F&C1&D2E0S0=1

Enter Information supplied to you by your telephone company.

The Data Rate Mode pop-up menu offers the choice of Hunt or Locked mode.

If you select Hunt (the default) the router will attempt to connect at the data rate you specify in the

Data Rate selection, but if it cannot do so, it will then hunt through all the available data rates until it

ﬁnds one at which it can establish a connection. When it does establish a connection, it will store that

data rate and use it the next time you connect.

If you select Locked, the router will always attempt to connect at the data rate you select in the next

step.

The Data Rate pop-up menu allows you to set the initial or locked data rate for the SDSL link (and the

attached CPE device). The pop-up menu offers you a choice of connection speeds: 192, 384 (the default),

768, 1152, or 1536Kbps.

The ATM VPI (Virtual Path Identiﬁer) is used to route information from one switch to another. VCI and VPI,

below, are not addresses. They are explicitly assigned at each segment within a network. In most cases

the default value of 0 (zero) can be used, unless you are otherwise advised by your ISP or exchange carrier

(CLEC).

The ATM VCI (Virtual Channel Identiﬁer) value is used to identify a connection between two ATM switches.

In most cases the default value of 38 can be used, unless you are otherwise advised by your ISP or

exchange carrier (CLEC).

Select Data Link Encapsulation and press Return. The pop-up menu will offer you the choice of PPP or

RFC1483. Your selection depends on which type your ISP uses. The default is RFC1483.

By default, the Auxiliary Serial Port is enabled it for an asynchronous modem. If the AppleTalk feature set

is installed, then LocalTalk becomes the default option. You can also specify it to be Unused.

For modem applications, a Data Rate pop-up offers a limited set of serial data rates. 57.6 is the default

setting.

If you have attached an external modem, you can specify a Modem Init String. Consult your modem’s

documentation for the correct init string for your modem. If you have enabled the optional AppleTalk

Download from Www.Somanuals.com. All Manuals Search And Download.

WAN and System Conﬁguration 8-3

feature, the modem options are hidden.

Creating a new Connection Proﬁle

For a Netopia R7200, connection proﬁles are useful for conﬁguring the connection and authentication settings

for negotiating a PPP connection on the SDSL link or on an asynchronous modem attached to the Auxiliary port.

If you are using the PPP data link encapsulation method, you can store your authentication information in the

connection proﬁle so that your user name and password (or host name and secret) are transmitted when you

attempt to connect.

Connection proﬁles deﬁne the networking protocols necessary for the router to make a remote connection. A

connection proﬁle is like an address book entry describing how the router is to get to a remote site, or how to

recognize and authenticate a connection. To create a new connection proﬁle, you navigate to the WAN

Conﬁguration screen from the Main Menu, and select Add Connection Proﬁle.

WAN

Configuration

Main

Add Connection

Profile

The Add Connection Proﬁle screen appears.

Add Connection Profile

Profile Name:

Profile Enabled:

Profile 01

Yes

IP Enabled:

IP Profile Parameters...

Yes

IPX Enabled:

Data Link Encapsulation...

Interface Group...

RFC1483

Primary

ADD PROFILE NOW

CANCEL

Configure a new Conn. Profile. Finished? ADD or CANCEL to exit.

On a Netopia R7200 SDSL Router you can add up to 15 more connection proﬁles, for a total of 16, but you can

only use one at a time.

1. Select Proﬁle Name and enter a name for this connection proﬁle. It can be any name you wish. For

example: the name of your ISP.

2. Toggle Proﬁle Enabled to Yes or No. The default is Yes.

Download from Www.Somanuals.com. All Manuals Search And Download.

8-4 User’s Reference Guide

3. Select IP Proﬁle Parameters and press Return. The IP Proﬁle Parameters screen appears.

IP Profile Parameters

Address Translation Enabled:

Yes

Local WAN IP Address:

0.0.0.0

Remote IP Address:

Remote IP Mask:

0.0.0.0

Filter Set...

Remove Filter Set

Receive RIP:

Off

Toggle to Yes if this is a single IP address ISP account.

Configure IP requirements for a remote network connection here.

4. Toggle or enter any IP Parameters you require and return to the Add Connection Proﬁle screen by pressing

Escape. For more information, see “IP Setup and Network Address Translation” on page 10-1.

5. If you will be connecting with an IPX remote network, toggle IPX Enabled to Yes, and press Return.

Otherwise, accept the default No.

If you enable IPX routing, an IPX Proﬁle Parameters menu item becomes available. Select IPX Proﬁle

Parameters and press Return. The IPX Proﬁle Parameters screen appears.

IPX Profile Parameters

Remote IPX Network:

Path Delay:

NetBios Packet Forwarding:

00000000

Off

Incoming Packet Filter Set...

Outgoing Packet Filter Set...

<<NONE>>

Incoming SAP Filter Set...

Outgoing SAP Filter Set...

<<NONE>>

Periodic RIP Timer:

Periodic SAP Timer:

Configure IPX requirements for a remote network connection here.

Download from Www.Somanuals.com. All Manuals Search And Download.

WAN and System Conﬁguration 8-5

6. Toggle or enter any IPX Parameters you require and return to the Add Connection Proﬁle screen by pressing

Escape. For more information, see “IPX Setup” on page 11-1.

7. Select Data Link Encapsulation and press Return. From the pop-up menu select either PPP or RFC1483. If

you select PPP, the Data Link Options menu item is displayed; if you select RFC1483, the Data Link

Options item is hidden.

8. If you chose PPP as your data link encapsulation method in the previous step, select Datalink Options and

press Return. The Datalink Options screen appears.

Datalink (PPP/MP) Options

Data Compression...

Standard LZS

PAP

Send Authentication...

Send User Name:

Send Password:

Receive User Name:

Receive Password:

Maximum Packet Size:

1500

In this Screen you will configure the PPP/MP specific connection params.

Select Data Compression and press Return. The pop-up menu offers the choices of None, Ascend LZS, or

Standard LZS (the default). Unless you are otherwise speciﬁcally directed, you can accept the default.

Select Send Authentication and press Return.

From the pop-up menu that appears, select the authentication method your ISP uses, if any: PAP (Password

Authentication Protocol), CHAP (Challenge Handshake Authentication Protocol), PAP-TOKEN, CACHE-TOKEN,

or None.

PAP is the most common, and requires you to enter a User Name and Password in the next two ﬁelds.

CHAP requires you to enter a Host Name and Secret in the next two ﬁelds.

PAP-TOKEN requires you to enter a User Name in the next ﬁeld.

CACHE-TOKEN requires you to enter a User Name and Password in the next two ﬁelds.

You can specify user name and password for both outgoing and incoming calls. the Send User

Name/ Password parameters are used to specify your identity when connecting to a remote location. The

Receive User Name/ Password parameters are used when receiving dial-in clients such as via RAS

conﬁguration.

9. You can edit the Maximum Packet Size ﬁeld, if you want packets limited to a lower value than 1500.

Return to the Add Connection Proﬁle screen by pressing Escape.

Download from Www.Somanuals.com. All Manuals Search And Download.

8-6 User’s Reference Guide

10. Select Interface Group and press Return. From the pop-up menu select either Primary or Backup. If you

select Primary, the proﬁle is applied to your primary WAN interface (the SDSL link). This would be desirable

if you were creating a proﬁle to store your authentication information for a PPP connection over the SDSL

link. If you select Backup, the proﬁle is applied to your backup interface.

11. Select ADD PROFILE NOW and press Return. Your new Connection Proﬁle will be added.

If you want to view the Connection Proﬁles in your router, return to the WAN Conﬁguration screen, and

select Display/ Change Connection Proﬁle. The list of Connection Proﬁles is displayed in a scrolling pop-up

screen.

WAN Configuration

+-Profile Name---------------------IP Address----IPX Network-+

+------------------------------------------------------------+

| SmartStart Profile

127.0.0.2

0.0.0.0

| Profile 02

+------------------------------------------------------------+

Up/Down Arrow Keys to select, ESC to dismiss, Return/Enter to Edit.

The default proﬁle

If you are using RFC1483 datalink encapsulation, the Default Proﬁle screen controls whether or not the SDSL

link will come up without an explicitly conﬁgured connection proﬁle. (PPP datalink encapsulation does not

support a default proﬁle, and the corresponding menu item is unavailable.) See “Connection Proﬁles” on

page 10-8 for more information.

You access the Default Proﬁle screen from the Main Menu by selecting WAN Conﬁguration and then selecting

Default Proﬁle.

Download from Www.Somanuals.com. All Manuals Search And Download.

WAN and System Conﬁguration 8-7

WAN

Configuration

Main

Default

Profile

The Default Proﬁle screen appears.

Default Profile

Must Match a Defined Profile:

IP Enabled:

IP Parameters...

Yes

IPX Enabled:

IPX Parameters...

Yes

Return/Enter accepts * Tab toggles * ESC cancels.

Configure Default WAN Connection Parameters here.

You can set Mus t Match a De ﬁne d Proﬁle item to Ye s or No (the default). This item controls whether or

not the SDSL link will come up without an explicitly conﬁgured connection proﬁle. If your ISP is serving you

a dynamic IP Address, you need not explicitly conﬁgure a connection proﬁle, and the default behavior of the

router will be to connect automatically once it is powered on.

If Must Match a Deﬁned Proﬁle is set to No, then an IP Enable d item is visible. Toggling this item to Ye s

(the default) or No controls whether or not IP will be supported on the SDSL link. If IP Enabled is set to Yes,

an IP Parame te rs it e m becomes v i s i bl e . I f y o u se l e ct I P P a r a meters the I P P a r a meters screen appears

(see “IP parameters (default proﬁle) screen” on page 8-8). This screen allows you to conﬁgure various IP

parameters for SDSL connections established without an explicitly conﬁgured connection proﬁle.

If Must Match a Deﬁned Proﬁle is set to No, then an IPX Enable d item is visible. Toggling this item to Ye s

or No (the default) controls whether or not IPX will be supported on the SDSL link. If IPX Enabled is set to

Yes, an IPX Parame te rs item becomes visible. If you select IPX Parameters, the IPX Parameters screen

appears (see “IPX parameters (default proﬁle) screen” on page 8-9). This screen allows you to conﬁgure

various IPX parameters for SDSL connections established without an explicitly conﬁgured connection

proﬁle.

Download from Www.Somanuals.com. All Manuals Search And Download.

8-8 User’s Reference Guide

IP parameters (default proﬁle) screen

If you are using RFC1483 datalink encapsulation, the IP Parameters (Default Proﬁle) screen allows you to

conﬁgure various IP parameters for SDSL connections established without an explicitly conﬁgured connection

proﬁle:

IP Parameters (Default Profile)

Address Translation Enabled:

Filter Set (Firewall)...

Remove Filter Set

Receive RIP:

Transmit RIP:

Both

Off

Return/Enter accepts * Tab toggles * ESC cancels.

For an SDSL link, Network Address Translation (NAT) is disabled by default in the Default Proﬁle. You can enable

it by toggling to Yes. For details on setting up IP Parameters see “IP Setup and Network Address Translation” on

page 10-1.

Download from Www.Somanuals.com. All Manuals Search And Download.

WAN and System Conﬁguration 8-9

IPX parameters (default proﬁle) screen

If you are using RFC1483 datalink encapsulation, the IPX Parameters (Default Proﬁle) screen allows you to

conﬁgure various IPX parameters for SDSL connections established without an explicitly conﬁgured connection

proﬁle:

IPX Parameters (Default Profile)

NetBios Packet Forwarding:

Path Delay:

Off

Incoming Packet Filter Set...

Outgoing Packet Filter Set...

Incoming SAP Filter Set...

Outgoing SAP Filter Set...

<<NONE>>

Periodic RIP Timer:

Periodic SAP Timer:

For details on setting up IPX Parameters see “IPX Setup” on page 11-1. For details on setting up Filter Sets see

“Security” on page 14-1.

Sys t em conﬁguration screens

You can connect to the Netopia R7200’s system conﬁguration screens in either of two ways:

By using Telnet with the Router’s Ethernet port IP address

Through the console port, using a local terminal (see “Connecting a console cable to your router” on

page 6-3)

You can also retrieve the Netopia R7200’s conﬁguration information and remotely set its parameters using the

Simple Network Management Protocol (see “SNMP” on page 13-12).

Open a Telnet connection to the router’s IP address; for example, “192.168.1.1.”

Download from Www.Somanuals.com. All Manuals Search And Download.

8-10 User’s Reference Guide

The console screen will open to the Main Menu, similar to the screen shown below:

Netopia R7200 v4.3.5

Easy Setup...

WAN Configuration...

System Configuration...

Utilities & Diagnostics...

Statistics & Logs...

Quick Menus...

Quick View...

Return/Enter goes to Easy Setup -- minimal configuration.

You always start from this main screen.

Navigating through the system conﬁguration screens

To help you ﬁnd your way to particular screens, some sections in this guide begin with a graphical path guide

similar to the following example:

System

Configuration

Main

Network Protocols

Setup

IP Setup

This particular path guide shows how to get to the Network Protocols Setup screens. The path guide represents

these steps:

1. Beginning in the Main Menu, select System Conﬁguration and press Return. The System Conﬁguration

screen appears.

2. Select Network Protocols and press Return. The Network Protocols screen appears.

3. Select IP Setup and press Return. The IP Setup screen appears.

To go back in this sequence of screens, use the Escape key.

Download from Www.Somanuals.com. All Manuals Search And Download.

WAN and System Conﬁguration 8-11

System conﬁguration features

The Netopia R7200 SDSL Router’s default settings may be all you need to conﬁgure your Netopia R7200. Some

users, however, require advanced settings or prefer manual control over the default selections. For these users,

the Netopia R7200 provides system conﬁguration options.

To help you determine whether you need to use the system conﬁguration options, review the following

requirements. If you have one or more of these needs, use the system conﬁguration options described in later

chapters.

System conﬁguration of dynamic IP address distribution through DHCP, MacIP, or BootP

Greater network security through the use of ﬁlters

System conﬁguration of AppleTalk LAN settings

System conﬁguration of connections to AppleTalk networks through the Internet or any IP network, using

AURP (AppleTalk “tunneling”)

System conﬁguration of connection proﬁles

To access the system conﬁguration screens, select System Conﬁguration in the Main Menu, then press

Return.

The System Conﬁguration menu screen appears:

System Configuration

Network Protocols Setup...

Filter Sets (Firewalls)...

IP Address Serving...

Date and Time...

Console Configuration...

SNMP (Simple Network Management Protocol)...

Security...

Upgrade Feature Set...

Logging...

Return/Enter to configure Networking Protocols (such as TCP/IP).

Use this screen if you want options beyond Easy Setup.

Download from Www.Somanuals.com. All Manuals Search And Download.

8-12 User’s Reference Guide

Network protocols setup

These screens allow you to conﬁgure your network’s use of the standard networking protocols:

IP: Details are given in “IP Setup and Network Address Translation” on page 10-1.

IPX: Details are given in “IPX Setup” on page 11-1.

AppleTalk: Details are given in “AppleTalk Setup” on page 12-1.

Note: AppleTalk require s the optional A p ple T a l k f e ature e x p ans i on kit.

Filter sets (ﬁrewalls)

These screens allow you to conﬁgure security on your network by means of ﬁlter sets and a basic ﬁrewall.

Details are given in “Security” on page 14-1.

IP address serving

These screens allow you to conﬁgure IP address serving on your network by means of DHCP, WANIP, BootP, and

with the optional AppleTalk kit, MacIP.

Details are given in “IP address serving” on page 10-21.

Date and time

You can set the system’s date and time in the Set Date and Time screen.

Select Date and Time in the System Conﬁguration screen and press Return. The Set Date and Time screen

appears.

Set Date and Time

System Date Format:

Current Date (MM/DD/YY):

MM/DD/YY

3/16/1998

System Time Format:

Current Time:

AM or PM:

AM/PM

10:29

Follow these steps to set the system’s date and time:

Download from Www.Somanuals.com. All Manuals Search And Download.

WAN and System Conﬁguration 8-13

1. Select Current Date and enter the date in the appropriate format. Use one- or two-digit numbers for the

month and day, and the last two digits of the current year. The date’s numbers must be separated by

forward slashes (/ ).

2. Select Current Time and enter the time in the format HH:MM, where HH is the hour (using either the

12-hour or 24-hour clock) and MM is the minutes.

3. Select AM or PM and choose AM or PM.

Console conﬁguration

You can change the default terminal communications parameters to suit your requirements.

To go to the Console Conﬁguration screen, select Console Conﬁguration in the System Conﬁguration screen.

Console Configuration

Baud Rate...

57600

Hardware Flow Control:

SET CONFIG NOW

CANCEL

Follow these steps to change a parameter’s value:

1. Select the parameter you want to change.

2. Select a new value for the parameter. Return to step 1 if you want to conﬁgure another parameter.

3. Select SET CONFIG NOW to save the new parameter settings. Select CANCEL to leave the parameters

unchanged and exit the Console Conﬁguration screen.

Download from Www.Somanuals.com. All Manuals Search And Download.

8-14 User’s Reference Guide

SNMP (Simple Network Management Protocol)

These screens allow you to monitor and conﬁgure your network by means of a standard Simple Network

Management Protocol (SNMP) agent.

Details are given in “S N MP” on p a g e 1 3 -1 2 .

Security

These screens allow you to add users and deﬁne passwords on your network.

Details are given in “Security” on page 14-1.

Upgrade feature set

You can upgrade your Netopia R7200 by adding new feature sets through the Upgrade Feature Set utility.

See the release notes that came with your router or feature set upgrade, or visit the Netopia Web site at

www.netopia.com for informat i on on new feature s ets, how to obta i n them, and how to in s ta l l them on y o ur

Netopia R7200.

Logging

You can conﬁgure a UNIX-compatible syslog client to report a number of subsets of the events entered in the

router’s WAN Event History. See “WAN Event History” on page 13-6.

The Syslog client (for the PC only) is supplied as a .ZIP ﬁle on the Netopia CD.

Select Logging from the System Conﬁguration menu.

The Logging Conﬁguration screen appears.

Logging Configuration

WAN Event Log Options

Log Boot and Errors:

Log Line Specific:

Log Connections:

Log PPP, DHCP, CNA:

Log IP and IPX:

Yes

Syslog Parameters

Syslog Enabled:

Hostname or IP Address:

Facility...

Local 0

Return/Enter accepts * Tab toggles * ESC cancels.

Download from Www.Somanuals.com. All Manuals Search And Download.

WAN and System Conﬁguration 8-15

By default, all events are logged in the event history.

By toggling each event descriptor to either Yes or No, you can determine which ones are logged and which

are ignored.

You can enable or disable the syslog client dynamically. When enabled, it will report any appropriate and

previously unreported events.

You can specify the syslog server’s address either in dotted decimal format or as a DNS name up to 63

characters.

You can specify the UNIX syslog Facility to use by selecting the Facility pop-up.

Installing the Syslog client

The Goodies folder on the Netopia CD contains a Syslog client daemon program that can be conﬁgured to

report the WAN events you speciﬁed in the Logging Conﬁguration screen.

To install the Syslog client daemon, exit from the graphical Netopia CD program and locate the CD directory

structure through your Windows desktop or through Windows Explorer. Go to the Goodies directory on the CD

and locate the Sds15000.exe program. This is the Syslog daemon installer. Run the Sds15000.exe program

and follow the on-screen instructions for enabling the Windows Syslog daemon.

The following screen shows a sample syslog dump of WAN events:

May 5 10:14:06 tsnext.netopia.com Link 1 down: PPP PAP failure

May 5 10:14:06 tsnext.netopia.com >>Issued Speech Setup Request from our DN: 5108645534

May 5 10:14:06 tsnext.netopia.com Requested Disc. from DN: 917143652500

May 5 10:14:06 tsnext.netopia.com Received Clear Confirm for our DN: 5108645534

May 5 10:14:06 tsnext.netopia.com Link 1 down: Manual disconnect

May 5 10:14:06 tsnext.netopia.com >>Issued Speech Setup Request from our DN: 5108645534

May 5 10:14:06 tsnext.netopia.com Requested Disc. from DN: 917143652500

May 5 10:14:06 tsnext.netopia.com Received Clear Confirm for our DN: 5108645534

May 5 10:14:06 tsnext.netopia.com Link 1 down: No answer

May 5 10:14:06 tsnext.netopia.com --Device restarted-----------------------------------------

May 5 10:14:06 tsnext.netopia.com >>Received Speech Setup Ind. from DN: (not supplied)

May 5 10:14:06 tsnext.netopia.com Requested Connect to our DN: 5108645534

May 5 10:14:06 tsnext.netopia.com ASYNC: Modem carrier detected (more) Modem reports: 26400

V34

May 5 10:14:06 tsnext.netopia.com >>WAN: 56K Modem 1 activated at 115 Kbps

May 5 10:14:06 tsnext.netopia.com Connect Confirmed to our DN: 5108645534

May 5 10:14:06 tsnext.netopia.com PPP: Channel 1 up, Answer Profile name: Default Profile

May 5 10:14:06 tsnext.netopia.com

PPP: NCP up, session 1, Channel 1 Final (fallback)

negotiated auth: Local PAP , Remote NONE

May 5 10:14:06 tsnext.netopia.com PPP: PAP we accepted remote, Channel 1 Remote name: guest

May 5 10:14:06 tsnext.netopia.com

0000C5700624 0

PPP: MP negotiated, session 1 Remote EDO: 06 03

May 5 10:14:06 tsnext.netopia.com PPP: CCP negotiated, session 1, type: Ascend LZS Local

mode: 1, Remote mode: 1

May 5 10:14:06 tsnext.netopia.com PPP: BACP negotiated, session 1 Local MN: FFFFFFFF, Remote

MN: 00000001

May 5 10:14:06 tsnext.netopia.com PPP: IPCP negotiated, session 1, rem: 192.168.10.100 local:

192.168.1.1

May 5 10:14:06 tsnext.netopia.com >>WAN: 56K Modem 1 deactivated

May 5 10:14:06 tsnext.netopia.com Received Clear Ind. from DN: 5108645534, Cause: 0

May 5 10:14:06 tsnext.netopia.com Issued Clear Response to DN: 5108645534

May 5 10:14:06 tsnext.netopia.com Link 1 down: Remote clearing

May 5 10:14:06 tsnext.netopia.com PPP: IPCP down, session 1

May 5 10:14:06 tsnext.netopia.com >>Received Speech Setup Ind. from DN: (not supplied)

Download from Www.Somanuals.com. All Manuals Search And Download.

8-16 User’s Reference Guide

Download from Www.Somanuals.com. All Manuals Search And Download.

Line Backup 9-1

Chapter 9

Line Backup

The Netopia R7200 SDSL Router offers line backup functionality in the event of a line failure on your primary

WAN link.

T h is chapter co v e r s the following topic s :

“WA N C onﬁgur a t i on” on page 9 -2

“IP S etup screen” on page 9 -4

“Connection Proﬁle s ” on page 9 -5

“U s i ng Scheduled Connections w i t h B a ckup” on page 9 -5

“Management/ Statistics” on page 9-7

“QuickView” on page 9-9

“Event Logs” on page 9-9

“SNMP Support” on page 9-9

The purpose of line backup is to provide a recovery mechanism in the event that the primary connection fails. A

failure can be either line loss, for example by central site switch failure or physical cable breakage, or in the

case of Frame Relay (with LMI) or PPP, loss of end-to-end connectivity. Detection of one of these failures causes

the router to switch from using the primary WAN port to using the Auxiliary port to which a modem has been

attached or to an internal asynchronous modem WAN module if one is installed. The port used for backup is

determined by whether or not a second WAN module is installed in the router. If there is only one WAN module

installed then the Auxiliary port is the backup port. If an asynchronous modem WAN module is installed in the

second slot, then that is the backup port.

In the event of a loss of primary connectivity you have the option of switching back to the primary port

automatically once it has recovered its connection.

The supported backup ports are the Auxiliary port or an asynchronous modem WAN module in Switched

Asynchronous mode with PPP as the data link encapsulation.

Download from Www.Somanuals.com. All Manuals Search And Download.

9-2 User’s Reference Guide

WAN Conﬁguration

To conﬁgure Line Backup, from the Main Menu select WAN Conﬁguration and then Backup Conﬁguration.

Main

Backup

Configuration

WAN Configuration

WAN (Wide Area Network) Setup...

Display/Change Connection Profile...

Add Connection Profile...

Delete Connection Profile...

WAN Default Answer Profile...

Scheduled Connections...

Backup Configuration...

Establish WAN Connection...

Disconnect WAN Connection...

From here you will configure yours and the remote sites' WAN information.

The Backup Conﬁguration screen appears.

Download from Www.Somanuals.com. All Manuals Search And Download.

Line Backup 9-3

Backup Conﬁguration screen

This screen is used to conﬁgure the conditions under which backup will occur, if it will recover, and how the

auxiliary port is conﬁgured. The circuit type is Switched Asynchronous.

Backup Configuration

Backup Parameters:

Backup to Auxiliary Port...

Automatic

Requires Data Link Failure of... 30 Sec

Ping Host Name or IP Address:

Recovery to DLC SDSL...

Manual

Auxiliary Port Setup:

Data Rate (kbps)...

57.6

Modem Initialization String:

Modem Dialing Prefix:

AT&F&C1&D2E0S0=1

ATDT

Data Link Encapsulation is

Async PPP

Enter Information supplied to you by your telephone company.

Select Backup to Auxiliary Port or Backup to Internal Modem and press Return. The system automatically

senses whether you have an internal modem card installed in the second slot. If you do not, this menu

item will be Auxiliary Port; if you do, this item will be Internal Modem. A pop-up menu allows you to select

Disabled, Manual, or Automatic. You enable line backup by selecting either Manual or Automatic. If you

enable backup, the subsequent menu items become visible.

Select Requires Data Link Failure of... and press Return. A pop-up menu allows you to choose among

30s(econds), 1m(inute), 2m, 5m, 10m, or 15m to determine how long you want the system to wait before

the backup port becomes enabled in the event of primary line failure. This allows you to be sure that the

primary WAN connection is not merely brieﬂy interrupted before the router switches to backup mode.

Select Ping Host Name or IP Address and enter an IP address or resolvable DNS name that the router will

ping. Should this address become unreachable the router will treat this as a loss of connectivity and begin

the backup timer.

Select Recovery to “WAN_name” (where WAN_name is the type of WAN connection you have, e.g., SDSL)

and press Return. Choose either Manual or Automatic to determine how the system will return to the

primary WAN link when it becomes available again. If you choose Automatic, the next two menu items

become visible.

Note: Automatic recovery only works upon loss of primary WAN connectivity.

If you chose Automatic Recovery, select Requires Recovery of... and press Return. A pop-up menu

allows you to choose among 30s(econds), 1m(inute), 2m, 5m, 10m, or 15m. This allows you to be

sure that the primary WAN connection is well re-established before the router switches back to it from

the backup mode.

You can toggle Recovery on loss of Layer 2 to Yes or No (the default). This setting determines whether

Download from Www.Somanuals.com. All Manuals Search And Download.

9-4 User’s Reference Guide

the router should try to Auto-Recover when the backup is invoked because of a Layer 2 loss. (Layer 1

is still available, and this is what recovery checks.) Use this setting with caution. Setting it to Yes may

induce alternate switching back and forth between Backup and Recovery Mode. This setting also

determines the recovery behavior of a Manual backup and Ping failure backup. These two failures are

treated as Layer 2 failures.

Select Data Rate (kbps)... and choose your modem speed (19.2, 38.4, 57.6, 115.2, or 230.4) from the

pop-up menu.

The default Modem Initialization String is AT&F&C1&D2E0S0=1. You can edit it if you need to. Refer to

your modem’s documentation.

The default Modem Dialing Preﬁx is ATDT. You can edit it if you need to. Refer to your modem’s

documentation.

Data Link Encapsulation is set to Async PPP. This ﬁeld is not editable.

Note: Auxiliary port conﬁguration in the Line Conﬁguration Screen for the WAN module is hidden if backup is

enabled and no Internal modem WAN module is installed.

IP Setup screen

The IP Setup screen now permits entry of a backup IP gateway address. This ﬁeld is visible if the Default IP

Gateway ﬁeld is ﬁlled out and Backup is enabled. You must have a default gateway conﬁgured for the backup

gateway item to become visible. If you delete the default gateway the backup gateway entry moves into its

place.

IP Setup

Ethernet IP Address:

Ethernet Subnet Mask:

Define Additional Subnets...

3.3.3.3

255.0.0.0

Default IP Gateway:

1.1.1.3

x.x.x.x

0.0.0.0

Backup IP Gateway:

Primary Domain Name Server:

Domain Name:

Receive RIP:

Transmit RIP:

Static Routes...

Both

Off

IP Address Serving Setup

Network Address Translation (NAT)...

Filter Sets...

Enter an IP address in decimal and dot form (xxx.xxx.xxx.xxx).

Set up the basic IP attributes of your Netopia in this screen.

For more information on IP Setup see “IP Setup and Network Address Translation” on page 10-1.

Download from Www.Somanuals.com. All Manuals Search And Download.

Line Backup 9-5

Connection Proﬁles

The line backup feature allows you to conﬁgure a complete connection proﬁle for the backup port, just as you

do for your primary WAN connection. In this way proﬁles are associated with a particular interface. The proﬁle

should reﬂect the port it is associated with. It should have switched characteristics for the backup port.

Add Connection Profile

Profile Name:

Profile Enabled:

Backup

Yes

Data Link Encapsulation is

Data Link Options...

PPP

IP Enabled:

IP Profile Parameters...

Yes

IPX Enabled:

Interface Group...

Telco Options...

Backup

ADD PROFILE NOW

CANCEL

Return/Enter to discard changes you have made. Profile will not be added.

Configure a new Conn. Profile. Finished? ADD or CANCEL to exit.

For instructions on creating a connection proﬁle see “Creating a new Connection Proﬁle” on page 8-3.

To associate this connection proﬁle with your backup port interface, choose Backup from the Interface Group

pop-up menu and press Return.

Using Scheduled Connections with Backup

The backup link is a PPP dial-up connection and only connects to the Internet service provider when trafﬁc is

initiated from the LAN. If you want to use the backup link to provide redundancy for services, such as a web

service that you provide to the outside world, you must force the connection to stay up. You do this by creating

a scheduled connection entry that will be a permanent “forced up” connection for the backup port. The backup

port will be activated upon primary WAN link failure and remain active until primary WAN link recovery.

To conﬁgure a Scheduled Connection, from the Main Menu select WAN Conﬁguration and then Scheduled

Connections.

Main

Scheduled

Connections

WAN Configuration

Download from Www.Somanuals.com. All Manuals Search And Download.

9-6 User’s Reference Guide

The Scheduled Connections screen appears.

Scheduled Connections

Display/Change Scheduled Connection...

Add Scheduled Connection...

Delete Scheduled Connection...

Return/Enter to add a Scheduled Connection.

Navigate from here to add/modify/change/delete Scheduled Connections.

Select Add Scheduled Connection and press Return. The Add Scheduled Connection screen appears.

Add Scheduled Connection

Scheduled Connection Enable:

How Often...

Weekly

Forced Up

Schedule Type...

Set Weekly Schedule...

Use Connection Profile...

Profile 02

ADD SCHEDULED CONNECTION

CANCEL

Scheduled Connections dial remote Networks on a Weekly or Once-Only basis.

Toggle Scheduled Connection Enable to On.

From the How Often pop-up menu, select Weekly and press Return.

From the Schedule Type pop-up menu, accept the default Forced Up and press Return.

Select Set Weekly Schedule and press Return. The Set Weekly Schedule screen appears.

Download from Www.Somanuals.com. All Manuals Search And Download.

Line Backup 9-7

Set Weekly Schedule

Monday:

Yes

Tuesday:

Wednesday:

Thursday:

Friday:

Saturday:

Sunday:

Scheduled Window Start Time:

AM or PM:

11:27

Scheduled Window Duration Per Day: 24:00

Return/Enter accepts * Tab toggles * ESC cancels.

Toggle all the days of the week to Yes, and set the Scheduled Window Duration Per Day to 24:00. This

guarantees a permanent connection. Press Escape to return to the Add Scheduled Connection screen.

Select Use Connection Proﬁle and press Return. A screen displays all of your connection proﬁles. Select

the one you want to apply this scheduled connection to and press Return. Your selection becomes

effective.

Now, if your primary WAN link fails, the backup link will become active and remain active until the primary link

recovers.

Management/Statistics

The Statistics & Logs menu offers a Backup Management/ Statistics option.

To view the Backup Management/ Statistics, from the Main Menu select Statistics & Logs.

Main

Backup Management/

Statistics

Statistics & Logs

Download from Www.Somanuals.com. All Manuals Search And Download.

9-8 User’s Reference Guide

Statistics & Logs

WAN Event History...

Device Event History...

IP Routing Table...

IPX Routing Table...

IPX SAP Bindery Table...

Served IP Addresses...

Backup Management/Statistics...

General Statistics...

System Information...

Select Backup Management/ Statistics and press Return.

Note: This option is only visible if backup is not Disabled.

The Backup Management/ Statistics screen appears.

Backup Management/Statistics

Current Port:

Auxiliary Port

Backup Mode

Backup State:

Time Since Detection:

FORCE RECOVERY

Current Port is a display-only ﬁeld that shows which port is currently in operation.

Backup State is a display-only ﬁeld that shows the current state of Backup or Recovery.

Time Since Detection is a display-only ﬁeld that is only visible if backup or recovery is in progress. It

displays the elapsed time since detection of either primary WAN line failure or re-establishment of the

Download from Www.Somanuals.com. All Manuals Search And Download.

Line Backup 9-9

connection.

The FORCE BACKUP/ FORCE RECOVERY option is a selectable option that depending on the current state

of backup will force the switching of ports. If you are currently in backup mode, the option will be FORCE

RECOVERY. If you are currently in normal WAN link mode, the option will be FORCE BACKUP. Selecting

either one and pressing Return will force the link to switch to the other mode.

QuickView

QuickView now has an information element to indicate which port is in use.

Quick View

Default IP Gateway: 0.0.0.0

Domain Name Server: 0.0.0.0

Domain Name: happyinternet.com

CPU Load: 4%

Unused Memory: 387 KB

WAN Interface Group -- Auxiliary Port

Event Logs

When a backup or recovery occurs an event is logged in the WAN Event History.

WAN Event History

Current Date -- 4/17/99 10:57:12 AM

-Date-----Time-----Event------------------------------------------------------

----------------------------------SCROLL UP-----------------------------------

04/17/99 10:39:37 * Line Failure: Switching to backup port

04/17/99 10:38:51 * Line Recovery: Switching to primary port

04/17/99 10:37:42 * Line Failure: Switching to backup port

04/17/99 10:35:53 --Device restarted-----------------------------------------

04/17/99 10:04:48 --Device restarted-----------------------------------------

04/17/99 10:04:13 --Device restarted-----------------------------------------

04/17/99 08:59:01 --Device restarted-----------------------------------------

04/14/99 09:12:09 --Device restarted-----------------------------------------

04/13/99 10:31:08 --Device restarted-----------------------------------------

04/13/99 09:47:57 >>WAN: SDSL 1 deactivated

04/13/99 09:47:56 >>WAN: SDSL 1 activated at 10000 Kbps

04/13/99 09:42:07 --Device restarted-----------------------------------------

04/13/99 09:29:45 --Device restarted-----------------------------------------

04/12/99 11:29:44 --Device restarted-----------------------------------------

---------------------------------SCROLL DOWN----------------------------------

Clear History...

Return/Enter on event item for details or SCROLL [UP/DOWN] item for scrolling.

SNMP Support

The router supports objects for determining the state of backup, as well as providing traps for the backup and

recovery events. No objects support conﬁguration of backup or recovery.

Download from Www.Somanuals.com. All Manuals Search And Download.

9-10 User’s Reference Guide

Download from Www.Somanuals.com. All Manuals Search And Download.

IP Setup and Network Address Translation 10-1

Chapter 10

IP Setup and Network Address Translation

T h e N e top i a R 7 200 uses I n ternet Protocol (I P) to communicate both locally and with remote networks. This

chapter shows you how to conﬁgure the router to route IP trafﬁc. You also learn how to conﬁgure the router to

serve IP addre sses to hosts on y o ur local net w o rk.

N e top i a ’s S mart I P f e atures N e t w o rk A d dress T r a ns l a t i on a nd I P a ddress serving.

T h is s ect i on cov e r s the following topic s :

“N e t w o rk A d dress T r a ns l a t i on f e atures” on page 10 -1

“Using Network Address Translation” on page 10-3

“Connection Proﬁles” on page 10-8

“IP setup” on page 10-11

“IP address serving” on page 10-21

Network Address Translation allows communication between the LAN connected to the Netopia R7200 and the

Internet using a single IP address instead of a routed account with separate IP addresses for each computer on

the network.

N e t w o rk A d dress T r a ns l a t i on a l s o provides increased security by hiding the local IP addresses of the LAN

connected to the Netopia R7200 from the outside world.

With SmartIP, the setup is simpler, so Internet service providers typically offer internet accounts supporting

Network Address Translation at a signiﬁcant cost savings.

For a detailed discussion of Network Address Translation, see Appendix C, “Understanding Netopia NAT

Behavior.”

Network Address Translation features

Network Address Translation (NAT) offers users the following features:

NAT is selectable on a per connection basis, optionally allowing real addresses to be used for intranet

connections and proxied addresses to be used for Internet connections.

You can use any combination of proxied and unproxied addresses simultaneously on the available telco

channels. For instance, one unproxied address connection proﬁle can be used to connect to a central

ofﬁce, while another proxied address connection proﬁle can simultaneously connect the user’s Netopia

R7200 and LAN to the Internet.

The single proxy address is acquired at connection time from the answering side. The address can be

assigned by the remote router from either a dynamic pool of addresses or a ﬁxed, static address.

Static NAT security is simpler and more reliable because only one IP address needs a ﬁrewall, and because

the internal network structure is not visible from the Internet.

Download from Www.Somanuals.com. All Manuals Search And Download.

10-2 User’s Reference Guide

NAT works by remapping the source IP address of trafﬁc from the LAN to a single static or dynamically assigned

IP address shown to the remote side of the router.

HOW NAT WORKS

With NAT

192.168.1.100

ISP*

192.168.1.102

192.168.1.103

163.167.132.1

192.168.1.104

192.168.1.105

192.168.1.106

Without NAT

163.167.132.1

163.167.132.2

163.167.132.1

163.167.132.3

163.167.132.2

163.167.132.3

163.167.132.4

163.167.132.5

163.167.132.4

163.167.132.6

163.167.132.5

163.167.132.6

*or corporate intranet router

The feature can be implemented on a per–connection proﬁle basis. The network router can use two or more

connection proﬁles simultaneously to connect to two or more networks. Each proﬁle can have NAT enabled.

When NAT is enabled, the Netopia R7200 can use either a statically assigned IP address or one dynamically

assigned each time the router connects to the ISP. While a dynamically assigned IP address offers the ISP more

ﬂexibility, it does have an important limitation: the router requires a static IP address to support Web, FTP, or

other services available to the WAN. To support these services with NAT enabled, a service can be associated

with only one machine on the LAN.

When connected to the Internet or some other large network using NAT, the individual machines on your LAN are

not directly accessible from the WAN. NAT provides an inherently secure method of connection to the outside

world.

Download from Www.Somanuals.com. All Manuals Search And Download.

IP Setup and Network Address Translation 10-3

Using Network Address Translation

The following procedure describes how to use Network Address Translation.

1. Pick a network number for your local network (referred to as the internal network). This can be any IP

address range you want. The Netopia R7200 SDSL Router has a default IP address of 192.168.1.1. You

may choose to change this address to match a pre-existing addressing scheme. For this example, we will

use 10.0.0.0.

Note: The outside world (the external network) will not see this network number.

2. Using the internal network number, assign addresses to the local nodes on your LAN. For example, you

could assign

10.0.0.1 to your Netopia R7200

10.0.0.2 to a node runn i ng a s a W o rld W i d e W e b ser v e r

10.0.0.3 to an FTP server

10.0.0.4 to a Windows NT PC

10.0.0.5 to a Windows 95 PC

Note: See “Associating port numbers with nodes” on page 10-6.

3. In the connection proﬁle, toggle Address Translation Enabled to Yes or No (Yes to enable NAT) and press

Return.

The Easy Setup connection proﬁle is accessible by using either of the following two approaches:

From the Easy Setup menu in the Main Menu screen, select the next screen, Connection Proﬁle 1: Easy

Setup Proﬁle. The screen shown below appears.

Connection Profile 1: Easy Setup Profile

Address Translation Enabled:

IP Addressing...

Yes

Numbered

Local WAN IP Address:

Local WAN IP Mask:

163.176.107.2

255.255.255.0

PREVIOUS SCREEN

NEXT SCREEN

Toggle to Yes if this is a single IP address ISP account.

Enter basic information about your WAN connection with this screen.

Alternatively, from the WAN Conﬁguration menu in the Main Menu screen, select Display/ Change

Connection Proﬁle. When that screen appears, select IP Proﬁle Parameters. You can now access the

Download from Www.Somanuals.com. All Manuals Search And Download.

10-4 User’s Reference Guide

Address Translation option from the IP Proﬁle Parameters menu.

IP Profile Parameters

Address Translation Enabled:

Yes

IP Addressing...

Local WAN IP Address:

Unnumbered

0.0.0.0

Remote IP Address:

Remote IP Mask:

0.0.0.0

Filter Set...

Remove Filter Set

Receive RIP:

Both

v2 (multicast)

Transmit RIP:

Configure IP requirements for a remote network connection here.

4. Select IP Addressing and, from the pop-up menu, choose the IP routing method that your ISP or network

administrator speciﬁes (either Numbered or Unnumbered). For more information see Appendix B,

“Understanding IP Addressing,” and Appendix C, “Understanding Netopia NAT Behavior.”

Download from Www.Somanuals.com. All Manuals Search And Download.

IP Setup and Network Address Translation 10-5

5. If your ISP uses numbered (interface-based) routing, select Local WAN IP Address and enter the local WAN

address your ISP gave you. Then select Local WAN IP Mask and enter the WAN subnet mask of the remote

site you will connect to.

The default address is 0.0.0.0, which allows for dynamic addressing, meaning that your ISP assigns an

address via DHCP each time you connect. However, if you want to use static addressing, enter a speciﬁc

address.

IP Profile Parameters

Address Translation Enabled:

Yes

IP Addressing...

Local WAN IP Address:

Local WAN IP Mask:

Numbered

0.0.0.0

Filter Set...

Remove Filter Set

Receive RIP:

Off

Enter an IP address in decimal and dot form (xxx.xxx.xxx.xxx).

Configure IP requirements for a remote network connection here.

Note: The Local WAN IP Address is displayed for numbered and/ or NAT proﬁles. The Local WAN IP Mask is

displayed for numbered proﬁles. The Remote IP Address and Remote IP Mask are displayed for

unnumbered proﬁles.

IP Profile Parameters

Address Translation Enabled:

IP Addressing...

Yes

Unnumbered

Remote IP Address:

Remote IP Mask:

0.0.0.0

Filter Set...

Remove Filter Set

Receive RIP:

Transmit RIP:

Off

Return/Enter to select <among/between> ...

Configure IP requirements for a remote network connection here.

Download from Www.Somanuals.com. All Manuals Search And Download.

10-6 User’s Reference Guide

When using numbered interfaces, the Netopia Router will use its local WAN IP address and subnet mask to

send packets to the remote router. Both routers have WAN IP addresses and subnet masks associated

with the connection.

6. If your ISP uses unnumbered (system-based) routing, select Remote IP Address and enter the IP address

your ISP gave you. Then select Remote IP Mask and enter the IP subnet mask of the remote site you will

connect to.

Note: When using unnumbered interfaces, the Netopia Router will use either its local Ethernet IP address

or its NAT (Network Address Translation) address (if so conﬁgured) and subnet mask to send packets to the

remote router. Neither router has a WAN IP address or subnet mask associated with this connection. These

default addresses will request that the remote router dynamically assign an address at the time the

connection is made.

7. When your Netopia R7200 connects to the ISP, the remote router assigns your Netopia R7200 an IP

address that external users use to communicate with your network.

The following Quick View screen shows an example in which 192.168.100.6 is assigned to the Netopia

R7200. “NAT” indicates that the address was assigned dynamically by Network Address Translation.

Quick View

CPU Load: 2%

12/11/1998 12:45:44 PM

Unused Memory: 952 KB

Default IP Gateway: 0.0.0.0

Domain Name Server: 0.0.0.0

Domain Name: None Provided

LocalTalk Address: 34448:149

----------------MAC Address--------IP Address-------IPX Address---EtherTalk---

Ethernet Hub: 00-00-c5-70-03-48 192.168.1.1

34449:150

SDSL WAN1:

00-00-c5-70-03-4a 0.0.0.0

Current DSL Status

Profile Name----------Rate--%Use-Remote Address-----Est.-More Info------------

ISP

10% IP 92.163.4.1

Lcl NAT 192.168.100.6

LED Status

PWR-+-----WAN1------+--CON--AUX--+-----WAN2------+--EN--+--------LEDS---------

LNK RDY CH1 CH2 LNK LNK LNK RDY CH1 CH2 DATA | '-'= Off 'G'= Green

Internal users can access the Internet as they always do; the external Internet, however, views all trafﬁc from

the internal network as originating from 192.168.100.6 and all trafﬁc your network receives is addressed to

192.168.100.6.

Associating port numbers with nodes

When an IP client such as a Netscape Navigator or Microsoft Internet Explorer wants to establish a session with

an IP server such as a Web server, the client machine must know the IP address to use and the TCP service

port where the trafﬁc is to be directed.

For example, a Web browser locates a Web server by using a combination of the IP address and TCP port that

the client machine has set up.

Download from Www.Somanuals.com. All Manuals Search And Download.

IP Setup and Network Address Translation 10-7

Just as an IP address speciﬁes a particular computer on a network, ports are addresses that specify a

particular service in a computer. There are many universally agreed-upon ports assigned to various services.

For example:

Web servers typically use port number 80

All FTP servers use port number 21

Telnet uses port number 23

SNMP uses port number 161

To help direct incoming IP trafﬁc to the appropriate server, the Netopia R7200 lets you associate these and

other port numbers with distinct IP addresses on your internal LAN using exported services. See “IP setup” on

page 10-11 for details.

Advanced IP/IPX router conﬁguration options

Advanced users can optionally use connection proﬁles to conﬁgure the IP and IPX protocol stack interfaces on

the SDSL link. You need not explicitly deﬁne these parameters, however. The following information is provided

as reference to the possible router conﬁgurations advanced users may desire.

The IP router interface on the SDSL link:

may be numbered or unnumbered.

may or may not use Network Address Translation (NAT).

will attempt to autoconﬁgure itself without an explicitly conﬁgured connection proﬁle, if permitted to do so

by the setting of the Must Match a Deﬁned Proﬁle item in the Default Proﬁle screen. See “The default

proﬁle” on page 8-6.

The link up process at the interface between the SDSL data link encapsulation module and the IP router

functions as follows:

When the SDSL data link comes up, the router will search for a conﬁgured connection proﬁle that speciﬁes

SDSL encapsulation.

If more than one SDSL proﬁle exists, the router will use the ﬁrst such proﬁle.

If no SDSL proﬁle exists, and the Must Match a Deﬁned Proﬁle ﬁeld in the Default SDSL Proﬁle is set to No,

the router will construct a Default Proﬁle, and the link up process will continue using this constructed

proﬁle as if it were an explicitly conﬁgured one.

If no SDSL proﬁle exists, and the Must Match a Deﬁned Proﬁle ﬁeld in the Default SDSL Proﬁle is set to

Yes, IP will not come up on the SDSL link. The router will log an “IP connection refused” event in the WAN

Event History.

If an SDSL proﬁle exists (or a default one has been constructed), the router will attempt to conﬁgure its

interface on the SDSL link using the information stored in the proﬁle.

Download from Www.Somanuals.com. All Manuals Search And Download.

10-8 User’s Reference Guide

Connection Proﬁles

Since you will probably only have a single connection to your ISP over the SDSL link, you may not need to create

multiple connection proﬁles. Multiple connection proﬁles are useful on leased (unswitched) interfaces such as

SDSL only to support meshed WAN connections. If you do not intend to set up meshed WAN connections, you

do not need to create multiple connection proﬁles.

Connection proﬁles may be used to deﬁne the connection information for your WAN Auxiliary Port access.

Connection Proﬁles deﬁne the line and networking protocols necessary for the router to make a remote

connection. A connection proﬁle is like an address book entry describing how the router is to get to a remote

site, or how to recognize and authenticate a remote user dialing in to the router. For example, to create a new

Connection Proﬁle, you navigate to the WAN Conﬁguration screen from the Main Menu, and select Add

Connection Proﬁle.

WAN

Configuration

Main

Add Connection

Profile

The Add Connection Proﬁle screen appears.

Add Connection Profile

Profile Name:

Profile Enabled:

Profile 01

Yes

IP Enabled:

IP Profile Parameters...

Yes

IPX Enabled:

Data Link Encapsulation...

Data Link Options...

PPP

ADD PROFILE NOW

CANCEL

Return accepts * ESC cancels * Left/Right moves insertion point * Del deletes.

Configure a new Conn. Profile. Finished? ADD or CANCEL to exit.

On a Netopia R7200 SDSL Router you can add up to 15 more connection proﬁles, for a total of 16, although

only one can be used at a time.

1. Select Proﬁle Name and enter a name for this connection proﬁle. It can be any name you wish. For

example: the name of your ISP.

2. Toggle the Proﬁle Enabled value to Yes or No. The default is Yes.

3. Select IP Proﬁle Parameters and press Return. The IP Proﬁle Parameters screen appears.

Download from Www.Somanuals.com. All Manuals Search And Download.

IP Setup and Network Address Translation 10-9

IP Profile Parameters

Address Translation Enabled:

Yes

IP Addressing...

Local WAN IP Address:

Local WAN IP Mask:

Remote IP Address:

Remote IP Mask:

Unnumbered

0.0.0.0

Filter Set...

Remove Filter Set

Receive RIP:

Transmit RIP:

Both

v2 (multicast)

Configure IP requirements for a remote network connection here.

4. Toggle or enter any IP parameters you require and return to the Add Connection Proﬁle screen by pressing

Escape. For more information on NAT, see “Using Network Address Translation,” beginning on page 10-3.

For more information on IP addressing, see Appendix B, “Understanding IP Addressing.”

The Local WAN IP Address is displayed for numbered or NAT proﬁles. The Local WAN IP Mask is displayed

for numbered proﬁles. The Remote IP Address and Remote IP Mask are displayed for unnumbered proﬁles.

5. If you will be connecting with an IPX remote network, toggle IPX Enabled to Yes, and press Return.

Otherwise, accept the default No.

If you enable IPX routing, an IPX Proﬁle Parameters menu item becomes available. Select IPX Proﬁle

Parameters and press Return. The IPX Proﬁle Parameters screen appears.

IPX Profile Parameters

Remote IPX Network:

Path Delay:

NetBios Packet Forwarding:

00000000

Off

Incoming Packet Filter Set...

Outgoing Packet Filter Set...

<<NONE>>

Incoming SAP Filter Set...

Outgoing SAP Filter Set...

<<NONE>>

Periodic RIP Timer:

Periodic SAP Timer:

Configure IPX requirements for a remote network connection here.

6. Toggle or enter any IPX parameters you require and return to the Add Connection Proﬁle screen by pressing

Escape. For more information, see “IPX Setup” on page 11-1.

Download from Www.Somanuals.com. All Manuals Search And Download.

10-10 User’s Reference Guide

7. Select ADD PROFILE NOW and press Return. Your new connection proﬁle will be added.

If you want to view the connection proﬁles in your router, return to the WAN Conﬁguration screen, and

select Display/ Change Connection Proﬁle. The list of connection proﬁles is displayed in a scrolling pop-up

screen.

WAN Configuration

+-Profile Name---------------------IP Address----IPX Network-+

+------------------------------------------------------------+

| Easy Setup Profile

127.0.0.2

0.0.0.0

| Profile 02

+------------------------------------------------------------+

Up/Down Arrow Keys to select, ESC to dismiss, Return/Enter to Edit.

Network Address Translation guidelines

Observe the following guidelines when using Network Address Translation.

The router can export only one local IP address per UDP/ TCP port, so you can have just one machine

available for a given service, such as one FTP server. However, some services, such as Web servers

(www-http servers), allow you to change the UDP/ TCP port on both the server and client. With two different

UDP/ TCP ports exported, you can have Web servers on two different IP hosts.

If you will be using multiple connection proﬁles, deﬁne the remote IP address of the most accessible

pro ﬁ l e , such as that f or your IS P , t o the default I P g a te w a y i n the T CP/ IP s ett i ngs on u s e r s ’ w o rk s tat i on s .

That way, IP trafﬁc not intended speciﬁcally for any of the remote networks will be routed through this

“preferred” proﬁle.

Associate your primary Domain Name Server (DNS) with whichever proﬁle is more accessible. If you

choose for neither proﬁle to be “dial-on-demand,” you can associate a secondary DNS with the other

proﬁle. See “IP setup,” below, for more information on these settings.

Download from Www.Somanuals.com. All Manuals Search And Download.

IP Setup and Network Address Translation 10-11

IP setup

Network

Protocols

Setup

Main

System

Configuration

IP Setup

The IP Setup options screen is where you conﬁgure the Ethernet side of the Netopia R7200. The information

you enter here controls how the router routes IP trafﬁc.

Consult your network administrator or Internet service provider to obtain the IP setup information (such as the

Ethernet IP address, Ethernet subnet mask, default IP gateway and Primary Domain Name Server IP address)

you will need before changing any of the settings in this screen. Changes made in this screen will take effect

only after the Netopia R7200 is reset.

To go to the IP Setup options screen, from the Main Menu, select System Conﬁguration, then Network

Protocols Setup, and then IP Setup.

The IP Setup screen appears.

IP Setup

Ethernet IP Address:

Ethernet Subnet Mask:

Define Additional Subnets...

192.128.117.162

255.255.255.0

Default IP Gateway:

192.128.117.163

Primary Domain Name Server:

Secondary Domain Name Server:

Domain Name:

0.0.0.0

Receive RIP:

Transmit RIP:

Static Routes...

Both

v2 (multicast)

Address Serving Setup...

Exported Services...

Filter Sets...

Follow these steps to conﬁgure IP setup for your Netopia R7200:

Select Ethernet IP Address and enter the IP address for the Netopia R7200’s Ethernet port.

Se l e ct E t hernet Subnet Mask and enter the subnet mask for the Ethernet IP address that you entered in

the last step.

For unlimited-user models, if you desire multiple subnets select Deﬁne Additional Subnets. twelve-user

models do not offer this option. If you select this item you will be taken to the IP Subnets screen. This

screen allows you to deﬁne IP addresses and masks for additional subnets. See “IP subnets” on

page 10-15 for details.

Download from Www.Somanuals.com. All Manuals Search And Download.

10-12 User’s Reference Guide

The Netopia R7200 SDSL Router supports multiple IP subnets on the Ethernet interface. You may want to

conﬁgure multiple IP subnets to service more hosts than are possible with your primary subnet. It is not

always possible to obtain a larger subnet from your ISP. For example, if you already have a full Class C

subnet, your only option is multiple Class C subnets, since it is virtually impossible to justify a Class A or

Class B assignment. This assumes that you are not using NAT.

If you are using NAT, you can use the reserved Class A or Class B subnet.

Select Default IP Gateway and enter the IP address for a default gateway. This can be the address of any

major router accessible to the Netopia R7200.

A default gateway should be able to successfully route packets when the Netopia R7200 cannot recognize

the intended recipient’s IP address. A typical example of a default gateway is the ISP’s router.

Select Primary Domain Name Server and enter the IP address for a domain name server. The domain

name server matches the alphabetic addresses favored by people (for example, robin.hood.com) to the IP

addresses actually used by IP routers (for example, 163.7.8.202).

If a secondary DNS server is available, select Secondary Domain Name Server and enter its IP address.

The secondary DNS server is used by the Netopia R7200 when the primary DNS server is inaccessible.

Entering a secondary DNS is useful but not necessary.

Select Domain Name and enter your network’s domain name (for example, netopia.com). Netopia strongly

recommends that you enter a domain name.

Routing Information Protocol (RIP) is needed if there are IP routers on other segments of your Ethernet

network that the Netopia R7200 needs to recognize. If this is the case select Receive RIP and select v1,

v2, or Both from the pop-up menu. With Receive RIP set to v1, the Netopia R7200’s Ethernet port will

accept routing information provided by RIP packets from other routers that use the same subnet mask. Set

to v2, the Netopia R7200 will accept routing information provided by RIP packets from other routers that

use different subnet masks. Set to Both, the Netopia R7200 will accept information from either RIP v1 or

v2 routers.

If you want the Netopia R7200 to advertise its routing table to other routers via RIP, select Transmit RIP

and select v1, v2 (broadcast), or v2 (multicast) from the pop-up menu. With Tr a nsm i t RIP v1 s e l e cted, the

Netopia R7200 will generate RIP packets only to other RIP v1 routers. With Transmit RIP v2 (broadcast)

se l e cted, the N e top i a R 7 200 w ill g e nerate R IP p ackets to a l l other ho s ts on the net w o rk. W i t h Transmit RIP

v2 (multicast) selected, the Netopia R7200 will generate RIP packets only to other routers capable of

recognizing RIP v2 packets.

Select Static Routes to manually conﬁgure IP routes. See the section “Static routes,” below.

If you select Address Serving Setup you will be taken to the IP Address Serving screen (see “IP address

serving” on page 10-21.) Since no two hosts can use the same IP address at the same time, make sure

that the addresses distributed by the Netopia R7200, and those that are manually conﬁgured are not the

same. Each method of distribution must have its own exclusive range of addresses to draw from.

Select Exported Services. The Exported Services screen appears with three options: Show/ Change

Exports, Add Export, and Delete Export.

Download from Www.Somanuals.com. All Manuals Search And Download.

IP Setup and Network Address Translation 10-13

Exported Services

(Local Port to IP Address Remapping)

Show/Change Exports...

Add Export...

Delete Export...

Return/Enter to configure UDP/TCP Port-to-IP Address redirection.

Select Add Export. The Add Exported Service screen appears.

Add Exported Service

Service...

Local Server's IP Address:

0.0.0.0

ADD EXPORT NOW

CANCEL

Download from Www.Somanuals.com. All Manuals Search And Download.

10-14 User’s Reference Guide

Select Service. A pop-up menu of services and ports appears.

Add Exported Service

+-Type------Port--+

+-----------------+

Service...

| ftp

| telnet

| smtp

Local Server's IP Address:

| tftp

| gopher

| finger

| www-http 80

| pop2

| pop3

| snmp

109 |

110 |

161 |

| timbuktu 407 |

| pptp

1723 |

6667 |

| irc

| Other...

+-----------------+

ADD EXPORT NOW

CANCEL

8. Select any of the services/ ports and press Return to associate it with the address of a server on your local

area network. For example, if you select www-http 80, press Return, and type 10.0.0.2, the Netopia

R7200 redirects any incoming trafﬁc destined for a Web server to address 10.0.0.2.

Some services such as Timbuktu require the export of multiple TCP ports. When you associate Timbuktu

with a local server (or Timbuktu host) all of the major Timbuktu services are exported, i.e., Observe,

Control, Send, and Exchange.

Note: If the TCP port of a service you want to use is not listed, you can add it by selecting Other... on the

pop-up menu.

Download from Www.Somanuals.com. All Manuals Search And Download.

IP Setup and Network Address Translation 10-15

Press Escape when you are ﬁnished conﬁguring exported services. You are returned to the IP Setup

screen.

IP Setup

Ethernet IP Address:

Ethernet Subnet Mask:

Define Additional Subnets...

192.128.117.162

255.255.255.0

Default IP Gateway:

192.128.117.163

Primary Domain Name Server:

Secondary Domain Name Server:

Domain Name:

0.0.0.0

Receive RIP:

Transmit RIP:

Static Routes...

Both

v2 (multicast)

Address Serving Setup...

Exported Services...

Filter Sets...

If you select Filter Sets you will be taken directly to the screen for conﬁguring IP packet ﬁlters. For

information see “About ﬁlters and ﬁlter sets,” beginning on page 14-4.

IP subnets

The IP Subnets screen allows you to conﬁgure up to eight Ethernet IP subnets on unlimited-user models, one

“primary” subnet and up to seven secondary subnets, by entering IP address/ subnet mask pairs:

IP Subnets

IP Address

----------------

#1: 192.128.117.162

Subnet Mask

---------------

255.255.255.0

#2: 0.0.0.0

0.0.0.0

#3:

#4:

#5:

#6:

#7:

#8:

Download from Www.Somanuals.com. All Manuals Search And Download.

10-16 User’s Reference Guide

Note: You need not use this screen if you have only a single Ethernet IP subnet. In that case, you can continue

to enter or edit the IP address and subnet mask for the single subnet on the IP Setup screen.

This screen displays up to eight rows of two editable columns, preceded by a row number between one and

eight. If you have eight subnets conﬁgured, there will be eight rows on this screen. Otherwise, there will be one

more row than the number of conﬁgured subnets. The last row will have the value 0.0.0.0 in both the IP

address and subnet mask ﬁelds to indicate that you can edit the values in this row to conﬁgure an additional

subnet. All eight row labels are always visible, regardless of the number of subnets conﬁgured.

To add an IP subnet, enter the Netopia R7200’s IP address on the subnet in the IP Address ﬁeld in a

particular row and the subnet mask for the subnet in the Subnet Mask ﬁeld in that row.

For example:

IP Subnets

IP Address

----------------

#1: 192.128.117.162

Subnet Mask

---------------

255.255.255.0

#2: 192.128.152.162

255.255.0.0

0.0.0.0

#3: 0.0.0.0

#4:

#5:

#6:

#7:

#8:

To delete a conﬁgured subnet, set both the IP address and subnet mask values to 0.0.0.0, either explicitly

or by clearing each ﬁeld and pressing Return to commit the change. When a conﬁgured subnet is deleted,

the values in subsequent rows adjust up to ﬁll the vacant ﬁelds.

Note that the subnets conﬁgured on this screen are tied to the address serving pools conﬁgured on the IP

Address Pools screen, and that changes on this screen may affect the IP Address Pools screen. In particular,

deleting a subnet conﬁgured on this screen will delete the corresponding address serving pool, if any, on the IP

Address Pools screen.

Download from Www.Somanuals.com. All Manuals Search And Download.

IP Setup and Network Address Translation 10-17

If you have conﬁgured multiple Ethernet IP subnets, the IP Setup screen changes slightly:

IP Setup

Subnet Configuration...

Default IP Gateway:

192.128.117.163

Primary Domain Name Server:

Secondary Domain Name Server:

Domain Name:

0.0.0.0

Receive RIP:

Transmit RIP:

Static Routes...

Both

v2 (multicast)

Address Serving Setup...

Exported Services...

Filter Sets...

The IP address and Subnet mask items are hidden, and the Deﬁne Additional Subnets... item becomes Subnet

Conﬁguration.... If you select Subnet Conﬁguration, you will return to the IP Subnets screen that allows you to

deﬁne IP addresses and masks for additional Ethernet IP subnets.

Static routes

Static routes are IP routes that are maintained manually. Each static route acts as a pointer that tells the

Netopia R7200 how to reach a particular network. However, static routes are used only if they appear in the IP

routing table, which contains all of the routes used by the Netopia R7200 (see “IP routing table” on page 13-8).

Static routes are helpful in situations where a route to a network must be used and other means of ﬁnding the

route are unavailable. For example, static routes are useful when you cannot rely on RIP.

To go to the Static Routes screen, select Static Routes in the IP Setup screen and press Return.

Download from Www.Somanuals.com. All Manuals Search And Download.

10-18 User’s Reference Guide

The Static Routes screen will appear.

Static Routes

Display/Change Static Route...

Add Static Route...

Delete Static Route...

Configure/View/Delete Static Routes from this and the following Screens.

Viewing static routes

To display a view-only table of static routes, select Display/ Change Static Route. The table shown below will

appear.

+-Dest. Network---Subnet Mask-----Next Gateway----Priority-Enabled-+

+------------------------------------------------------------------+

| 0.0.0.0

0.0.0.0

163.176.8.1

Low

Yes

+------------------------------------------------------------------+

Select a Static Route to modify.

The table has the following columns:

Dest. Network: The network IP address of the destination network.

Download from Www.Somanuals.com. All Manuals Search And Download.

IP Setup and Network Address Translation 10-19

Subnet Mask: The subnet mask associated with the destination network.

Next Gateway: The IP address of the router that will be used to reach the destination network.

Priority: An indication of whether the Netopia R7200 will use the static route when it conﬂicts with information

received from RIP packets.

Enabled: An indication of whether the static route should be installed in the IP routing table.

To return to the Static Routes screen, press Escape.

Adding a static route

To add a new static route, select Add Static Route in the Static Routes screen. The Add Static Route screen

will appear.

Add Static Route

Static Route Enabled:

Yes

Destination Network IP Address:

0.0.0.0

Destination Network Subnet Mask: 0.0.0.0

Next Gateway IP Address:

Route Priority...

0.0.0.0

High

Advertise Route Via RIP:

ADD STATIC ROUTE NOW

CANCEL

Configure a new Static Route in this Screen.

To install the static route in the IP routing table, select Static Route Enabled and toggle it to Yes. To

remove the static route from the IP routing table, select Static Route Enabled and toggle it to No.

Be sure to read the rules on the installation of static routes in the IP routing table. See “Rules of static

route installation” on page 10-20.

Select Destination Network IP Address and enter the network IP address of the destination network.

Select Destination Network Subnet Mask and enter the subnet mask used by the destination network.

Select Next Gateway IP Address and enter the IP address for the router that the Netopia R7200 will use to

reach the destination network. This router does not necessarily have to be part of the destination network,

but it must at least know where to forward packets destined for that network.

Select Route Priority and choose High or Low. High means that the static route takes precedence over RIP

Download from Www.Somanuals.com. All Manuals Search And Download.

10-20 User’s Reference Guide

information; Low means that the RIP information takes precedence over the static route.

If the static route conﬂicts with a connection proﬁle, the connection proﬁle will always take precedence.

To make sure that the static route is known only to the Netopia R7200, select Advertise Route Via RIP

and toggle it to No. To allow other RIP-capable routers to know about the static route, select Advertise

Route Via RIP and toggle it to Yes. When Advertise Route Via RIP is toggled to Yes, a new item called RIP

Metric appears below Advertise Route Via RIP.

With RIP Metric you set the number of routers, from 1 to 15, between the sending router and the

destination router. The maximum number of routers on a packet’s route is 15. Setting RIP Metric to 1

means that a route can involve 15 routers, while setting it to 15 means a route can only involve one router.

Select ADD STATIC ROUTE NOW to save the new static route, or select CANCEL to discard it and return to

the Static Routes screen.

Up to 16 static routes can be created, but one is always reserved for the default gateway, which is

conﬁgured using either Easy Setup or the IP Setup screen in system conﬁguration.

Modifying a static route

To modify a static route, in the Static Routes screen select Display/ Change Static Route to display a table of

static routes.

Select a static route from the table and go to the Change Static Route screen. The parameters in this screen

are the same as the ones in the Add Static Route screen (see “Adding a static route” on page 10-19).

Deleting a static route

To delete a static route, in the Static Routes screen select Delete Static Route to display a table of static

routes. Select a static route from the table and press Return to delete it. To exit the table without deleting the

selected static route, press Escape.

Rules of static route installation

The Netopia R7200 applies certain rules before installing enabled static routes in the IP routing table. An

enabled static route will not be installed in the IP routing table if any of the following conditions are true:

The static route’s Next Gateway IP Address matches the IP address used by a connection proﬁle or the

Netopia R7200’s Ethernet port.

The static route’s Next Gateway IP Address matches an IP address in the range of IP addresses being

distributed by MacIP or DHCP.

The static route’s Next Gateway IP Address is determined to be unreachable by the Netopia R7200.

The static route’s route information conﬂicts with a connection proﬁle’s route information.

The connection proﬁle associated with the static route is set for dial-in connections only, and there is no

incoming call connected to that connection proﬁle.

The connection proﬁle associated with the static route has a disabled dial-on-demand setting, and there is

no current connection using that connection proﬁle.

A static route that is already installed in the IP routing table will be removed if any of the conditions listed above

become true for that static route. However, an enabled static route is automatically reinstalled once the

conditions listed above are no longer true for that static route.

Download from Www.Somanuals.com. All Manuals Search And Download.

IP Setup and Network Address Translation 10-21

IP address serving

• Serve DHCP Clients

System

Configuration

Main

IP Address

Serving

• Serve BootP Clients

• Serve Dynamic WAN Clients

• Serve MacIP/ KIP Clients

In addition to being a router, the Netopia R7200 is also an IP address server. There are four protocols it can

use to distribute IP addresses.

The ﬁrst, called Dynamic Host Conﬁguration Protocol (DHCP), is widely supported on PC networks, as well

as Apple Macintosh computers using Open Transport and computers using the UNIX operating system.

Addresses assigned via DHCP are “leased” or allocated for a short period of time; if a lease is not

renewed, the address becomes available for use by another computer. DHCP also allows most of the IP

parameters for a computer to be conﬁgured by the DHCP server, simplifying setup of each machine.

The second, called BootP (also known as Bootstrap Protocol), is the predecessor to DHCP and allows older

IP hosts to obtain most of the information that a DHCP client would obtain. However, in contrast, BootP

address assignments are “permanent” since there is no lease renewal mechanism in BootP.

The third protocol, called Dynamic WAN, is part of the PPP/ MP suite of wide area protocols used for WAN

connections. It allows remote terminal adapters and NAT-enabled routers to be assigned a temporary IP

address for the duration of their connection.

The fourth protocol, called MacIP, is used only for computers on AppleTalk networks. MacIP provides a

protocol translation (or gateway) function between IP and AppleTalk as well as an IP address assignment

mechanism. Like DHCP, MacIP address assignments are normally temporary, although you can also use

static IP addresses with MacIP.

Since no two hosts can use the same IP address at the same time, make sure that the addresses distributed

by the Netopia R7200 and those that are manually conﬁgured are not the same. Each method of distribution

must have its own exclusive range of addresses to draw from.

Download from Www.Somanuals.com. All Manuals Search And Download.

10-22 User’s Reference Guide

Go to the System Conﬁguration screen. Select IP Address Serving and press Return. The IP Address Serving

screen will appear.

IP Address Serving

Number of Client IP Addresses:

1st Client Address:

Client Default Gateway...

176.163.222.10

176.163.222.1

Serve DHCP Clients:

Yes

DHCP NetBios Options...

Serve BOOTP Clients:

Serve MacIP/KIP Clients:

MacIP/KIP Static Options...

Yes

Follow these steps to conﬁgure IP Address Serving:

If you enabled IP Address Serving, then DHCP, BootP clients, Dynamic WAN clients, and MacIP/ KIP clients

(if you have the AppleTalk kit installed) are automatically enabled.

Select Number of Client IP Addresses and enter the total number of contiguous IP addresses that the

Netopia R7200 will distribute to the client machines on your local area network. twelve-user models are

limited to twelve IP addresses.

In the screen example shown above, ﬁve Client IP addresses have been allocated.

Select 1st Client Address and enter the ﬁrst client IP address that you will allocate to your ﬁrst client

machine. For instance, on your local area network you may want to ﬁrst ﬁgure out w h ich machines are going

to be a l loc a ted spec i ﬁc s tat i c IP a ddresses so that you can determine the pool of IP addresses that you will

be serving addresses from via DHCP, BootP, Dynamic WAN, and/ or MacIP.

Example: Your ISP has given your Netopia R7200 the IP address 192.168.6.137, with a subnet mask of

255.255.255.248. The subnet mask allocated will give you six IP addresses to use when connecting to the

ISP over the Internet (for more information on IP addressing refer to Appendix B, “Understanding IP

Addressing.”). Your address range will be from .137-.143. In this example you would enter 192.168.6.138

as the 1st Client Address, since the router itself must have an IP address.

To enable DHCP, select Serve DHCP Clients and toggle it to Yes. DHCP serving is automatic when IP

Address Serving is enabled.

Download from Www.Somanuals.com. All Manuals Search And Download.

IP Setup and Network Address Translation 10-23

If you have conﬁgured multiple Ethernet IP subnets, the appearance of the IP Address Serving screen is altered

slightly:

IP Address Serving

Configure Address Pools...

Serve DHCP Clients:

DHCP NetBios Options...

Yes

Serve BOOTP Clients:

Yes

Serve Dynamic WAN Clients:

Serve MacIP/KIP Clients:

MacIP/KIP Static Options...

The ﬁrst three menu items are hidden, and Conﬁgure Address Pools... appears instead. If you select Conﬁgure

Address Pools... you will be taken to the IP Address Pools screen that allows you to conﬁgure an address

serving pool for each of the conﬁgured Ethernet IP subnets. See “IP Address Pools” on page 10-24.

Download from Www.Somanuals.com. All Manuals Search And Download.

10-24 User’s Reference Guide

IP Address Pools

The IP Address Pools screen allows you to conﬁgure a separate IP address serving pool for each of up to eight

conﬁgured Ethernet IP subnets:

IP Address Pools

Subnet (# host addrs)

---------------------

192.128.117.0 (253)

1st Client Addr Clients Client Gateway

--------------- ------- --------------

192.128.117.196 16

192.128.117.162

192.129.117.0 (253)

192.129.117.110 8

192.129.117.4

This screen consists of between two and eight rows of four columns each. There are exactly as many rows as

there are Ethernet IP subnets conﬁgured on the IP Subnets screen.

The Subnet (# host addrs) column is non-selectable and non-editable. It indicates the network address of

the Ethernet IP subnet for which an address pool is being conﬁgured and the number of host addresses

available on the subnet. The network address is equal to the router’s IP address on the subnet

bitwise-ANDed with the subnet mask. The host address count is equal to the subnet size minus three,

since one address is reserved for the network address, one for the subnet broadcast address, and one for

the router’s interface address on the subnet.

You can edit the remaining columns in each row.

The 1st Client Addr and Clients columns allow you to specify the base and extent of the address serving

pool for a particular subnet. Entering 0.0.0.0 for the ﬁrst client address or 0 for the number of clients

indicates that no addresses will be served from the corresponding Ethernet IP subnet.

The Client Gateway column allows you to specify the default gateway address that will be provided to

clients served an address from the corresponding pool. The value defaults to the Netopia R7200’s IP

address on the corre spond i ng s ubnet (or the Netopia R7200’s default gate w a y , i f that gate w a y i s loc a ted

on the subnet in question). You can override the value by entering any address that is part of the subnet.

DHCP, BootP, dynamic WAN, and dynamic MacIP clients may receive an address from any one of the

address serving pools conﬁgured on this screen. Static MacIP clients are not “served” addresses, but

must be manually conﬁgured with addresses from within the speciﬁc range of addresses reserved for that

purpose on the MacIP (KIP) Forwarding Setup screen. See “MacIP (KIP forwarding) setup” on page 10-28.

Download from Www.Somanuals.com. All Manuals Search And Download.

IP Setup and Network Address Translation 10-25

Numerous factors inﬂuence the choice of served address. It is difﬁcult to specify the address that will be

served to a particular client in all circumstances. However, when the address server has been conﬁgured, and

the clients involved have no prior address serving interactions, the Netopia R7200 will generally serve the ﬁrst

unused address from the ﬁrst address pool with an available address. The Netopia R7200 starts from the pool

on the ﬁrst row and continues to the pool on the last row of this screen.

Once the address server and/ or the clients have participated in address serving transactions, different rules

apply:

When requesting an address, a client will often suggest an address to be assigned, such as the one it was

last served. The Netopia R7200 will attempt to honor this request if the address is available. The client

stores this address in non-volatile storage, for example, on disk, and the speciﬁc storage method/ location

differs depending on the client operating system.

When requesting an address, a client may provide a client identiﬁer, or, if it does not, the Netopia R7200

may construct a pseudo-client identiﬁer for the client. When the client subsequently requests an address,

the Netopia R7200 will attempt to serve the address previously associated with the pseudo-client

identiﬁer. This is normally the last address served to the client.

Otherwise, the Netopia will select the least-recently used available address, starting from the ﬁrst address

in the ﬁrst pool and ending with the last address in the last pool.

Note: The address serving pools on this screen are tied to the IP subnets conﬁgured on the IP Subnets screen.

Changes to the IP Subnets screen may affect this screen. In particular, deleting a subnet on the IP Subnets

screen will delete the corresponding address serving pool, if any, on this screen.

Download from Www.Somanuals.com. All Manuals Search And Download.

10-26 User’s Reference Guide

DHCP NetBIOS Options

If your network uses NetBIOS, you can enable the Netopia R7200 to use DHCP to distribute NetBIOS

information.

NetBIOS stands for Network Basic Input/ Output System. It is a layer of software originally developed by IBM

and Sytek to link a network operating system with speciﬁc hardware. NetBIOS has been adopted as an industry

standard. It offers LAN applications a variety of “hooks” to carry out inter-application communications and data

transfer. Essentially, NetBIOS is a way for application programs to talk to the network. To run an application that

works with NetBIOS, a non-IBM network operating system or network interface card must offer a NetBIOS

emulator. Many vendors either provide a version of NetBIOS to interface with their hardware or emulate its

transport layer communications services in their network products. A NetBIOS emulator is a program provided

by NetWare clients that allow workstations to run applications that support IBM’s NetBIOS calls.

Select DHCP NetBios Options and press Return. The DHCP NetBIOS Options screen appears.

DHCP NetBios Options

Serve NetBios Type:

NetBios Type...

Yes

Type B

Serve NetBios Scope:

NetBios Scope:

Serve NetBios Name Server:

NetBios Name Server IP Addr:

0.0.0.0

Configure DHCP-served NetBIOS options here.

To serve DHCP clients with the type of NetBIOS used on your network, select Serve NetBios Type and

toggle it to Yes.

Download from Www.Somanuals.com. All Manuals Search And Download.

IP Setup and Network Address Translation 10-27

From the NetBios Type pop-up menu, select the type of NetBIOS used on your network.

DHCP NetBios Options

+--------+

Serve NetBios Type:

NetBios Type...

+--------+

| Type B |

| Type P |

| Type M |

| Type H |

+--------+

Serve NetBios Scope:

NetBios Scope:

Serve NetBios Name Server:

NetBios Name Server IP Addr:

0.0.0.0

To serve DHCP clients with the NetBIOS scope, select Serve NetBios Scope and toggle it to Yes.

Select NetBios Scope and enter the scope.

To serve DHCP clients with the IP address of a NetBIOS name server, select Serve NetBIOS Name Server

and toggle it to Yes.

Select NetBios Name Server IP Addr and enter the IP address for the NetBIOS name server.

You are now ﬁnished setting up DHCP NetBIOS Options. To return to the IP Address Serving screen, press

Escape.

To enable BootP’s address serving capability, select Serve BOOTP Clients and toggle to Yes.

Note: Addresses assigned through BootP are permanently allocated from the IP Address Serving pool until

you release them. To release these addresses, navigate back to the Main Menu, then Statistics & Logs,

Served IP Addresses, and Lease Management.

Statistics

& Logs

Main

Served IP

Addresses

Lease Management

Download from Www.Somanuals.com. All Manuals Search And Download.

10-28 User’s Reference Guide

IP Address Lease Management

Reset All Leases

Release BootP Leases

Reclaim Declined Addresses

Hit RETURN/ENTER, you will return to the previous screen.

Select Release BootP Leases and press Return.

MacIP (KIP forwarding) setup

When hosts using AppleTalk (typically those using LocalTalk) are not directly connected to an IP network (usually

an Ethernet), they must use a MacIP (AppleTalk–IP) gateway.

The optional Netopia AppleTalk feature enhancement kit provides for this service. A MacIP gateway converts

network trafﬁc into the correct format for AppleTalk or IP, depending on the trafﬁc’s destination. The MacIP

gateway can also distribute IP addresses to AppleTalk computers on the network.

Note: Macintosh computers that have LocalTalk or EtherTalk selected in the MacTCP control panel, or

“AppleTalk (MacIP)” selected in the TCP/ IP control panel, must use the MacIP gateway to communicate with the

Internet or any other IP network. Users should point their MacTCP or TCP/ IP control panel to look in the

LocalTalk zone for the MacIP server. Macintosh computers that have Ethernet selected in the MacTCP or TCP/ IP

control panel can do their own AppleTalk–IP conversions.

Setting up MacIP involves choosing MacIP dynamic address serving and then conﬁguring that type. KIP

forwarding is simply a method for distributing IP addresses to AppleTalk clients.

In the IP Address Serving screen, select Serve Mac IP/ KIP Clients and toggle to Yes to enable MacIP/ KIP

address serving capability. This option is automatically enabled if the AppleTalk kit is installed and IP

Address Serving is enabled.

Select MacIP/ KIP Static Options and press Return. The MacIP/ KIP Forwarding screen appears.

Download from Www.Somanuals.com. All Manuals Search And Download.

IP Setup and Network Address Translation 10-29

The MacIP (KIP) Forwarding Setup screen tells the Netopia R7200 how many static addresses to allocate

for MacIP/ KIP clients. The addresses must fall within the address pool from the previous screen.

Enter the number of static MacIP addresses to reserve.

Note that the address pool IP range is listed for your referral in this screen.

MacIP (KIP) Forwarding Setup

This screen tells the Netopia how many static addresses to allocate for

MacIP/KIP clients. The addresses must fall within one of the address pools

from the previous screen.

Number of Static Addresses:

First Static Client Address:

0.0.0.0

Enter the number of static MacIP addresses to reserve here.

Reserve static MacIP addresses for KIP Forwarding here.

You have ﬁnished your IP setup.

Download from Www.Somanuals.com. All Manuals Search And Download.

10-30 User’s Reference Guide

Download from Www.Somanuals.com. All Manuals Search And Download.

IPX Setup 11-1

Chapter 11

IPX Setup

Internetwork Packet Exchange (IPX) is the network protocol used by Novell NetWare networks. This chapter

shows you how to conﬁgure the Netopia R7200 for routing data using IPX. You also learn how to conﬁgure the

router to serve IPX n e t w o rk addresses.

T h is s ect i on cov e r s the following topic s :

“IPX features” on page 11-1

“IPX deﬁnitions” on page 11-1

“IPX setup screen” on page 11-3

“IPX routing tables” on page 11-5

IPX features

The Netopia R7200 supports the following IPX features:

IPX RIP and SAP

NetBIOS broadcast packet forwarding (IPX type 20)

IPX packet ﬁltering deﬁnable by source and destination IPX address and socket number for added security

IPX SAP ﬁltering to aid in optimizing WAN bandwidth

Dial-on-demand features:

Spooﬁng of IPX keep-alive, SPX, and server serialization packets

Conﬁgurable RIP/ SAP timers on connection proﬁles

IPX deﬁnitions

This section deﬁnes IPX-related protocols such as RIP, SAP, and NetBIOS, in addition to other related terms.

See the next section for setup instructions.

Internetwork Packet Exchange (IPX)

IPX is a datagram, connectionless protocol that Novell adapted from Xerox Network System’s (XNS’s) Internet

Datagram Protocol (IDP). IPX is dynamically routed, and the routing architecture works by “learning” network

addressing automatically.

Download from Www.Somanuals.com. All Manuals Search And Download.

11-2 User’s Reference Guide

IPX address

An IPX address consists of a network number, a node number, and a socket number. An IPX network number is

composed of eight hexadecimal digits. The network number must be the same for all nodes on a particular

physical network segment. The node number is composed of twelve hexadecimal digits and is usually the

hardware address of the interface card. The node number must be unique inside the particular IPX network.

Socket numbers correspond to the particular service being accessed.

Socket

A socket in IPX is the equivalent of a port in TCP/ IP. Sockets route packets to different processes within a

single node. Novell has reserved several sockets for use in the NetWare environment:

Field

Value

Packet Type

Description

00h

Unknown Packet Type

Used for all packets not

classiﬁed by any other type

01h

04h

05h

11h

14h

Routing Information Packet

Service Advertising Packet

Sequenced Packet

Unused for RIP packets

Used for SAP packets

Used for SPX packets

NetWare Core Protocol Packet Used for NCP packets

Propagated Packet Used for Novell NetBIOS

Routing Information Protocol (RIP)

RIP, which was also derived from XNS, is a protocol that allows for the bidirectional transfer of routing tables

and provides timing information (ticks), so that the fastest route to a destination can be determined. IPX

routers use RIP to create and dynamically maintain databases of internetwork routing information. See “IPX

routing tables” on page 11-5 for more information.

Service Advertising Protocol (SAP)

SAP is a protocol that provides servers and routers with a method for exchanging service information. Using

SAP, servers advertise their services and addresses. Routers collect this information to dynamically update

their routing tables and share it with other routers. These broadcasts keep all routers on the internetwork

synchronized and provide real-time information on accessible servers on the internetwork.

Download from Www.Somanuals.com. All Manuals Search And Download.

IPX Setup 11-3

The following is a list of common SAP server types:

Unknown

0000h

0003h

0004h

0005h

0007h

0009h

0024h

0047h

8000h

Print Queue

File Server

Job Server

Print Server

Archive Server

Remote Bridge Server

Advertising Print Server

Reserved Up To

NetBIOS

NetBIOS is a protocol that performs tasks related to the Transport and Session layers of the OSI model. It can

operate over IPX using a special broadcast packet known as “IPX Packet type 20” to communicate with IPX

NetBIOS servers.

IPX spooﬁng

The Netopia R7200 has several IPX features designed to restrict the trafﬁc on the dial-up link when the unit is

not sending or receiving IPX data. When the link is idle and a user is logged into a Novell server, the server will

send keep-alive packets to ensure that the user is still there. If the link is idle, the keep-alive packets will be

sent back to the server by the locally connected Netopia R7200 as though they came back from the user

without bringing up the dial-up link.

SPX keep-alive packets are also treated in this manner. IPX RIP and SAP messages will not be sent if the link is

down. Together, these features enable the user to remain connected to a Novell server or SPX peer without

bringing up the dial-up link, except to send and receive actual user data.

IPX setup screen

Network

Protocols

Setup

System

Configuration

Main

IPX Setup

You will use the IPX Setup screen to conﬁgure the Ethernet side of the Netopia R7200. The information you

enter controls how the router routes IPX trafﬁc.

Before changing any of the settings in this screen, consult your network administrator for the IPX setup

information you will need. Changes made in this screen will take effect only after the Netopia R7200 is reset.

Download from Www.Somanuals.com. All Manuals Search And Download.

11-4 User’s Reference Guide

To go to the IPX Setup screen, from the Main Menu select System Conﬁguration and then select Network

Protocols Setup and then select IPX Setup.

Note: If you have completed Easy Setup, the information you have already entered will appear in the IP Setup

options screen.

IPX Setup

IPX Routing:

Ethernet Encapsulation...

Ethernet Network Address:

802.3

00000000

Ethernet Path Delay:

Ethernet NetBios Forwarding:

Ethernet Inbound SAP Filter Set...

<<NONE>>

Default Gateway Address:

Filters and Filter Sets...

IPX Wan Pool Base Address

00000000

Return/Enter accepts * Tab toggles * ESC cancels.

Set up the basic IPX attributes of your Netopia in this screen.

1. To enable IPX routing, select IPX Routing, toggle it to On, and press Return.

2. To change Ethernet encapsulation from the commonly used 802.3 standard, select Ethernet

Encapsulation and choose a different encapsulation method.

3. Select Ethernet Network Address and enter the network address of the IPX network connected to the

Netopia R7200’s Ethernet port.

Note: If the Ethernet network address is set to zero, the router will attempt to learn the address from any

conﬁgured IPX device on the Ethernet network or from the remote IPX network when a call is established.

4. To change the default path delay, select Ethernet Path Delay and enter a value (in ticks). This value is used

to determine the port cost of using the Ethernet port in IPX RIP calculations.

5. To enable NetBIOS packet forwarding, select Ethernet NetBios Forwarding and toggle it to Yes. This

parameter will determine whether IPX Packet type 20 packets are forwarded on the Ethernet interface.

These packets are used by NetBIOS and some other applications.

6. Select Ethernet Inbound SAP Filter Set to ﬁlter incoming IPX SAP advertisements on the Ethernet. By

attaching an incoming SAP ﬁlter on the Ethernet, you can restrict the number of SAP entries learned on a

large IPX network to only those required by remote users connecting to the Netopia R7200. An Ethernet

SAP ﬁlter must be used with networks that have so many servers advertised that the Netopia R7200 would

otherwise exhaust its internal memory storing server entries.

To attach a SAP ﬁlter set, ﬁrst deﬁne the ﬁlter set using the Filters and Filter Sets option (see step 8

below). Then select the ﬁlter set from the Ethernet Incoming SAP Filter Set pop-up menu. To detach the

ﬁlter set, select Detach Filter Set.

Download from Www.Somanuals.com. All Manuals Search And Download.

IPX Setup 11-5

7. Select Default Gateway Address and enter the network addre ss of the I PX n e t w o rk to which all packets of

unknown destination address should be routed.

Note: The default gateway address is usually set up to match the IPX Address in your network connection

proﬁle.

8. To conﬁgure ﬁlters and ﬁlter sets, select Filters and Filter Sets and go to the IPX ﬁlters and ﬁlter sets

screens. For information on how to conﬁgure IPX ﬁlters and ﬁlter sets, see “IPX ﬁlters” on page 14-21.

9. Select IPX Wan Pool Base Address and enter the ﬁrst IPX network address to be allocated to requesting

IPX WAN clients. The base address you enter must not conﬂict with other IPX networks assigned to your IPX

internet.

IPX routing tables

Main

• IPX Routing Table

• IPX SAP Bindery Table

Statistics & Logs

IPX routing tables provide information on current IPX routes and services.

To go to the IPX Routing Table screen, select IPX Routing Table in the Statistics & Logs screen. This table

shows detailed information about current IPX network routes.

IPX Routing Table

Net Addr-Hops-Ticks-Type--Status-Interface--------------via Router------------

-----------------------------------SCROLL UP----------------------------------

00000020 2

00000030 2

00000033 4

00000100 2

00000110 1

3 RIP Active Ethernet

12 RIP Active Ethernet

14 RIP Active Ethernet

7 RIP Active Ethernet

1 RIP Active Ethernet

00000120:00000c465c2f

000000120:00000c465c2f

00000120:00000c465c2f

---------------------------------SCROLL DOWN-----------------------------

UPDATE

To go to the IPX SAP Bindery Table screen, select IPX SAP Bindery Table in the Statistics & Logs screen. This

table shows detailed information about available IPX services and their location.

Download from Www.Somanuals.com. All Manuals Search And Download.

11-6 User’s Reference Guide

Download from Www.Somanuals.com. All Manuals Search And Download.

AppleTalk Setup 12-1

Chapter 12

AppleTalk Setup

T h is chapter di s c u s ses the concept of A p ple T a l k routing and how to conﬁgure AppleTalk setup for a Netopia

R7200 with the AppleTalk kit installed.

AppleTalk support is available as a separate kit for the Netopia R7200 SDSL Router. Skip this chapter if you do

not ha v e t he A p ple T a l k kit.

This section covers the following topics:

“AppleTalk networks” on page 12-1

“Installing AppleTalk” on page 12-4

“Conﬁguring AppleTalk” on page 12-6

Note: To take effect, all changes to AppleTalk options require a restart.

AppleTalk networks

A network is a communication system that connects computers so that they share information using network

services such as e-mail, print spoolers, and ﬁle servers. Information is transferred over a cabling system or

WAN using a common set of protocols. You can think of the cabling system as an organization of cities, streets,

and buildings and the protocols as the method of sending letters or packages, as illustrated on the following

pages. A cable is the physical medium (for example, twisted pair or coaxial) over which information travels from

one device to another.

AppleTalk protocol

AppleTalk is a protocol set for local area networks developed by Apple Computer. While initially applied to the

LocalTalk cabling system for connecting Macintosh computers and LaserWriter printers, it has been expanded

to use other cabling systems such as Ethernet, as well as dial-up telephone networks and packet switching

systems. LocalTalk was originally known as the AppleTalk Personal Network system.

Each computer or peripheral device (printer, client, ﬁle server) connected to a network is called a node and has

a unique node address, which can be any number from 1 to 254. Whenever you open the Chooser or any

application that communicates with other computers on your network, your application compiles a list of all

node names and addresses. All you see are the names --- for example, “Paul’sMac,” “TechSportsWriter,” or

“2nd Floor AppleShare” --- but your application also knows the node addresses of all these devices.

When you send information, commands, or requests to a printer, server, or another workstation, your

application formats the information into units known as packets. It then attaches the correct address to the

packets and sends them to the AppleTalk software on your computer, which forwards the packets across the

network. Packets also include a return address so the receiver will know where to reply.

Download from Www.Somanuals.com. All Manuals Search And Download.

12-2 User’s Reference Guide

If the cabling of your network were a street system, then a node address would correspond to a building’s

street address. But node addresses are not permanent. Each AppleTalk device determines its node address at

startup. Although a Macintosh that is starting up will try to use its previous address, the address will often be

different upon restart. This dynamic node addressing scheme prevents conﬂicts when devices are moved

between networks and simpliﬁes the administrative tasks of a network. If you have only one network, the node

address alone is all the information AppleTalk needs to send a packet from one computer to another.

However, networks can be connected together through routers, such as the Netopia R7200, into an

internetwork (often shortened to internet). Because devices on different networks can have duplicate node

numbers, AppleTalk tells them apart according to an additional part of their addresses: the network number.

The Netopia R7200 assigns a unique network number to each member network. In terms of the city street

metaphor, the network number is similar to the name of the street. Putting a network number together with a

node number fully speciﬁes the address of a node on an internet.

To make the services on an internet manageable, groups of devices on a network can be grouped into zones.

When this is done, selecting a network service (server, etc.) includes choosing a zone from which the service

can be selected. Like network numbers, zone names are assigned by routers.

A routing table is maintained by each AppleTalk router. The table serves as a map of the internet, specifying the

path and distance, in hops, between its router and other networks. The routing table is used to determine

whether a router will forward a data packet and, if so, to which network.

You can use the information in the AppleTalk routing table to observe and diagnose the Netopia R7200’s

current connections to other AppleTalk routers. To go to the AT Routing Table screen from the Netopia R7200’s

console, select Statistics & Logs from the Main Menu and then select AppleTalk Routing Table. An AT Routing

Table similar to the one shown below appears.

AT Routing Table

-Net---Range--Def Zone Name----------Hops-State-Next Rtr Addr.--Pkts Fwded

----------------------------------SCROLL UP--------------------------

Admin

Good 46.131

AdMan

Aspirations

Sales

Marketing

Molluscs

Customer Service

Telemarketing

Rio

*24

Regiment

Rhinos

Unique Services

Aspirations

Rhinos

---------------------------------SCROLL DOWN-------------------------

UPDATE

'*' Entries have multiple zone names. Return/Enter on these to see zone list.

A router has multiple communications ports and is capable of forwarding information to other routers and

devices on the internet. The router performs packet forwarding, network and device address maintenance, and

other administrative functions required by the AppleTalk protocols.

Download from Www.Somanuals.com. All Manuals Search And Download.

AppleTalk Setup 12-3

MacIP

When Macintosh computers encapsulate TCP/ IP packets in AppleTalk, because they are either on LocalTalk or

EtherTalk, they must use the services of a MacIP gateway. This gateway converts network trafﬁc into the correct

format for AppleTalk or IP, depending on the trafﬁc’s destination. Setting up MacIP involves enabling the feature

and optionally setting up a range of addresses to be static.

See “IP address serving” on page 10-21 for more information on how to set up MacIP and other IP addressing

schemes.

AURP

AppleTalk Update-Based Routing Protocol (AURP) allows AppleTalk networks to communicate across an IP

network. Your local AppleTalk networks (connected to the Netopia R7200) can exchange data with remote

AppleTalk networks that are also connected to an AURP-capable router.

When two networks using AppleTalk communicate with each other through a network based on the Internet

Protocol, they are said to be tunneling through the IP network. The Netopia R7200 uses AURP to allow your

AppleTalk network to tunnel to designated AppleTalk partner networks, as well as to accept connections from

remote AppleTalk networks tunneling to your AppleTalk LAN.

Routers and seeding

To conﬁgure AppleTalk networks, you must understand the concept of seeding. Seeding is the process by which

routers (or more speciﬁcally, router ports) agree on which routing information is valid. AppleTalk routers that

have been reset, for example, must decide which zones and network numbers are valid before they begin

routing. In this case, a router may use the information it has stored or information it receives from another

router, depending on how it has been conﬁgured.

To help ensure agreement between routers on a network, a seed router is conﬁgured with the correct

information, and other routers obtain their information from that router when they are turned on or reset.

Routers commonly use one of three types of seeding procedures: hard seeding, soft seeding, and non-seeding.

Hard seeding: When a router that uses hard seeding is turned on or reset, it requests network number and

zone name information from any existing routers on the networks it will serve. If no other routers reply, the

router uses the network numbers and zone names speciﬁed in its own conﬁguration. If other routers reply, and

their information matches the router’s own conﬁguration information, the result is the same—the router uses

the values in its own conﬁguration. However, if other routers provide network numbers or zone names that

conﬂict with those in the router’s conﬁguration, the router disables any of its own ports for which there are

conﬂicts.

Soft seeding: When a router that uses soft seeding is turned on or reset, it requests network number and zone

name information from any existing routers on the networks it will serve. If no other routers reply, the router

uses the network numbers and zone names speciﬁed in its own conﬁguration. If other routers reply, the router

uses the information they provide, regardless of whether or not there are conﬂicts between the information

received and its conﬁgured information. Once a soft- or hard-seeding router begins to route, it can serve as a

seed router, providing network number and zone name information to other routers upon request. The default

state of the Netopia R7200’s AppleTalk ports is soft seeding.

Non-seeding: When a router using non-seeding is turned on or reset, it requests network number and zone

name information from any existing routers on the networks it will serve. For any network where no other

routers reply, the non-seeding router will not have any active ports until the next reset.

Download from Www.Somanuals.com. All Manuals Search And Download.

12-4 User’s Reference Guide

It is important to set the Netopia R7200’s seeding action to work best in your particular network environment.

These scenarios may guide you in deciding how to set the router’s seeding:

If the Netopia R7200 is the only router on your network, you must set it to either hard seeding or soft

seeding. The default is soft seeding.

If there is another active router on your network and you want that router to conﬁgure the Netopia R7200’s

EtherTalk or LocalTalk parameters, you can set the Netopia R7200 to non-seeding.

If there is another active router on your network, you could set the Netopia R7200 to be soft seeding if you

are unsure whether the second router will always be available to conﬁgure the Netopia R7200’s EtherTalk

or LocalTalk parameters.

If you want the Netopia R7200 to conﬁgure the EtherTalk or LocalTalk parameters of other routers on your

network, you must set it to hard seeding. In this case, the other routers must be soft seeding or

non-seeding, and the Netopia R7200 must already be active when those other routers are rebooted.

If you want the Netopia R7200 and all other routers on your network to use only their own conﬁgurations,

set the Netopia R7200 and all other routers to hard seeding. In this case, any router (including the Netopia

R7200) that is rebooted will not begin routing if it detects a routing conﬂict between itself and any other

router. This last scenario could be useful for detecting and locating routing errors on your network.

Installing AppleTalk

The AppleTalk kit consists of hardware and ﬁrmware components that you enable on your router in order to

connect an AppleTalk network. The AppleTalk cable supplied in the AppleTalk feature expansion kit cable

connects to the Auxiliary port on the Netopia R7200.

Netopia R7200 SDSL Router back panel

Ethernet

Auxiliary

Console

Power

Line

Normal

Uplink

Auxiliary connection port

HD-15 (female)

You then enable AppleTalk routing through the console-based management screens.

To install the AppleTalk features from the Main Menu, go to System Conﬁguration and select Upgrade Feature

Set.

Download from Www.Somanuals.com. All Manuals Search And Download.

AppleTalk Setup 12-5

System

Configuration

Main

Upgrade

Feature Set

The Netopia Feature Set Upgrade screen appears.

Netopia Feature Set Upgrade

You may be able to extend the features of your Netopia by purchasing a

'Software Upgrade'. For a list of available upgrades, please see the release

notes that came with your Netopia or visit the Netopia Communications web

site at www.netopia.com.

To purchase an upgrade, you must provide your Serial Number, which is:

xx-xx-xx

You will receive an Upgrade Key, which you should enter below.

Upgrade Key:

UPGRADE NOW

CANCEL

Follow the instructions to enable AppleTalk on your router. Once AppleTalk is enabled, you can conﬁgure your

network as described in the following sections.

Download from Www.Somanuals.com. All Manuals Search And Download.

12-6 User’s Reference Guide

Conﬁguring AppleTalk

AppleTalk setup for Netopia R7200s consists of conﬁguring EtherTalk, LocalTalk, and AURP.

EtherTalk setup

In the System Conﬁguration screen, select Network Protocols Setup and then select AppleTalk Setup. Select

EtherTalk Phase ll Setup and press Return.

EtherTalk Phase II Setup

EtherTalk Phase II Enabled:

Show Zones...

+---------ET II Zone List----------+

+----------------------------------+

| Unnamed

Enter New Zone Name:

Delete Zone Name...

Set Default Zone...

Net Low:

Net Hi:

Seeding...

+----------------------------------+

Up/Down Arrow Keys to select, ESC to dismiss.

If you are using EtherTalk Phase ll on the Ethernet network connected to the Netopia R7200, select

EtherTalk Phase ll Enabled and toggle it to On.

To view the zones available to EtherTalk Phase ll, select Show Zones and press Return. You can dismiss

the list of zones by pressing Return or Escape.

Select Enter New Zone Name to enter a new zone name.

Note: Your EtherTalk network number and zone name must match the values in use on the EtherTalk

network.

If another router is already present on the EtherTalk network that you will be connecting to the Netopia

R7200, use the zone names and network numbers used by that router for that EtherTalk network.

Otherwise, your EtherTalk network may experience routing conﬂicts. The Netopia R7200 supports creating

up to 32 zone names.

As an alternative, you can set EtherTalk seeding to soft seeding and let the Netopia R7200 receive the

zone name and network number from the other router.

To remove zones from the list, select Delete Zone Name and press Return to see the zones list. Use the

up and down arrow keys to select the zone to delete. Press Return to delete it and exit the list. Press

Escape to exit the list without deleting any zones.

Select Set Default Zone to choose a different default zone. This is the zone where the Netopia R7200’s

Download from Www.Somanuals.com. All Manuals Search And Download.

AppleTalk Setup 12-7

E t her T a l k Ph a se I I p ort is vi s i ble to other A p ple Talk nodes. The default zone is also where new AppleTalk

nodes will appear. If you do not set a default zone, the ﬁrst zone you create will be the default zone.

You can also set the range of EtherTalk Phase II network numbers. Select Net Low and enter the lower limit

of the network number range. Select Net High and enter the upper limit of the range.

Select the Seeding pop-up menu and choose the seeding method for the Netopia R7200 to use. (See

“Routers and seeding” on page 12-3).

You have ﬁnished conﬁguring EtherTalk Phase II.

LocalTalk setup

For instructions on making the physical connections for LocalTalk, see “Connecting to a LocalTalk network” on

page 4-6.

In the AppleTalk Setup screen, select LocalTalk Setup and press Return. The LocalTalk Setup screen appears.

LocalTalk Setup

LocalTalk Enabled:

LocalTalk Zone Name:

LocalTalk Net Number:

Seeding...

Unnamed

33126

Soft-Seeding

Use this screen to set up the LocalTalk Port Routing attributes.

If you are using LocalTalk with the Netopia R7200, select LocalTalk Enabled and make sure LocalTalk is

set to On, which is the default.

Note: Since the LocalTalk connector attaches to the Auxiliary port on the router, that port will no longer be

available for a third external modem.

Select LocalTalk Zone Name and enter a new or existing zone name.

Note: Your LocalTalk network may already have a zone and network number in place. For the Netopia

R7200’s LocalTalk port to be part of your LocalTalk network, it must have a network number and zone

name that matches the values in use on the LocalTalk network.

If another router is already present on the LocalTalk network that you will be connecting to the Netopia

R7200, use the zone name and network number used by that router for that LocalTalk network. Otherwise,

your LocalTalk network may experience routing conﬂicts.

Download from Www.Somanuals.com. All Manuals Search And Download.

12-8 User’s Reference Guide

As an alternative, you can set LocalTalk seeding to soft seeding and let the Netopia R7200 receive the

zone name and network number from the other router.

Select LocalTalk Net Number and enter the desired network number.

Select Seeding. From the pop-up menu, choose the type of seeding for the Netopia R7200’s LocalTalk port

to use (see “Routers and seeding” on page 12-3).

You have ﬁnished conﬁguring LocalTalk.

AURP setup

From the Network Protocols screen, select AppleTalk Setup. Then select AURP Setup and press Return. The

AURP Setup screen appears.

AURP Setup

AURP Enable:

Display/Change Partner...

Add Partner...

Delete Partner...

Enter Free Trade Zone Name:

Accept Connections From...

Configured Partners Only

Advanced Options...

AURP Allows you to connect remote AppleTalk Networks across IP.

To activate AURP and enable connections to and from AURP partners, select AURP Enable and toggle it to

On.

Viewing AURP partners

To see a table of existing AURP partners, select Display/ Change Partner and press Return.

Note: The Netopia R7200 can deﬁne a total of 32 AURP partners.

AURP Free Trade Zone

The Free Trade Zone is an AURP security feature. It allows the Netopia administrator to specify a single

AppleTalk zone that will be the only one visible to the remote side for partners that have this option enabled.

Download from Www.Somanuals.com. All Manuals Search And Download.

AppleTalk Setup 12-9

Example:

Site A has an AURP tunnel to site B. Both sites have multiple zones deﬁned on the EtherTalk port and a unique

zone on their LocalTalk ports. If side A has indicated that one of its EtherTalk zones is the Free Trade Zone and

has opted to use the Free Trade Zone option for its tunnel to B, then only this Free Trade Zone will show up on

side B and only those machines or services in the Free Trade Zone will be accessible to side B. All of side A will

be able to see all of side B.

Adding an AURP partner

To add a new AURP partner, select Add Partner and press Return. The Add AURP Partner screen appears.

Add AURP Partner

Partner IP Address or Domain Name:

Initiate Connection:

Restrict to Free Trade Zone:

ADD PARTNER NOW

CANCEL

Enter Information about new Partner.

Select Partner IP Address or Domain Name and enter the new AURP partner’s IP address. If you do not

know the remote network’s IP address, enter its domain name. Domain names are the Internet addresses

favore d by peop l e (for e x a mp l e , chaga l l.a rts.edu ). Dom a i n n a mes are matched to the IP addresses actually

used by IP routers (for example, 163.7.8.202).

To initiate a connection with an AURP partner, select Initiate Connection and toggle it to Yes. This will open

a connection to the remote AppleTalk network after rebooting.

You can choose to restrict this partner to the Free Trade Zone by toggling Restrict to Free Trade Zone to

Yes. See “AURP Free Trade Zone” on page 12-8 for more information.

To add the new AURP partner, select ADD PARTNER NOW. To discard the new AURP partner, select

CANCEL.

Modifying an AURP partner

To modify an AURP partner, in the AURP Setup screen select Display/ Change Partner and press Return. A

table of existing partners appears.

Use the up and down arrow keys to select a partner, then press Return to go to the Change AURP Partner

screen. The Change AURP Partner screen appears.

Download from Www.Somanuals.com. All Manuals Search And Download.

12-10 User’s Reference Guide

Change AURP Partner

Partner IP Address or Domain Name: 176.163.8.134

Initiate Connection:

Restrict to Free Trade Zone:

The Change AURP Partner screen has all the values you entered when you added that partner. All of these

values may be modiﬁed in this screen.

Deleting an AURP partner

To delete an AURP partner, in the AURP Setup screen select Delete Partner and press Return. A table of

existing partners appears.

Use the up and down arrow keys to select an AURP partner, then press Return to delete it. Press Escape to

exit without deleting a partner.

Receiving AURP connections

To control the acceptance of incoming AURP tunnels, select Accept Connections From and choose Anyone

or Conﬁgured Partners Only from the pop-up menu. If you choose Anyone, all incoming AURP connections

will be accepted.

The more secure option is Conﬁgured Partners Only, which accepts connections only from recognized

AURP partners (the ones you have set up).

Conﬁguring AURP Options

In the AURP Setup screen, select Advanced Options and go to the AURP Options screen. Using AURP can cause

a problem when two networks, one local and one remote, have the same network number. This may cause

network routing ambiguities than can result in routing errors.

Download from Www.Somanuals.com. All Manuals Search And Download.

AppleTalk Setup 12-11

AURP Options

Tickle Interval (HH:MM:SS):

Update Interval (HH:MM:SS):

00:00:00

00:00:30

Enable Network Number Remapping:

Yes

Remap into Range

From:

To:

4096

32768

Cluster Remote Networks:

Enable Hop-Count Reduction:

Return accepts * ESC cancels * Left/Right moves insertion point * Del deletes.

Select Tickle Interval (HH:MM:SS) and set the timer to indicate how often a tickle or “Are you still there”

packet will be sent to the remote AppleTalk network.

The AURP tickle timer is a parameter that you can set anywhere between 0 and 100 hours. This parameter

tells the AURP partners when to send out an AURP tickle packet. If this value is set to 0, the Netopia

R7200 will never send out a tickle packet. Tickle packets verify that the remote router is working. The

minimum tickle interval is 90 seconds. The maximum tickle interval setting is 99:59:59 (100 hours), which

is the recommendation for small networks.

Raising the tickle packet interval does not ensure that the AURP tunnel is dropped or not brought up. If any

application on the local network generates AppleTalk trafﬁc destined for the network at the remote end of

the AURP tunnel, the tunnel remains up. For example, if a host on the local network connects to a host on

the remote network using remote access software, the AURP tunnel remains up. The AURP tunnel also

remains up if a local user selects the Chooser and uses an AppleTalk service that involves a remote zone,

such as mounting a remote AppleShare volume.

In many AppleTalk internets, individual AppleTalk networks come and go. Routers are designed to notify

each other at the end of their Update Interval every time there's such a change in the network topology.

This will cause the Netopia's WAN link to be brought up. To minimize what may be unnecessary calls,

change the Update Interval value to some larger value. At the end of this time window, if there has been a

local AppleTalk network change, the Netopia R7200 will call any remote AURP partner and forward the new

network information.

To enable network number remapping, select Enable Network Number Remapping and toggle it to Yes.

You should enable network number remapping if you plan to use AURP when connecting to unknown

AppleTalk networks; for example, when Accept Connections from Anyone is enabled. With remapping, the

Netopia R7200 will substitute network numbers not used by your network for the numbers of other remote

networks. These safe remappings will only be used by local routers on your network; remote routers will not

be aware of the remapping.

Download from Www.Somanuals.com. All Manuals Search And Download.

12-12 User’s Reference Guide

When network number remapping is enabled, you must choose a safe range of network numbers as a

destination for the remapping. A safe range of network numbers does not intersect your local AppleTalk

network’s range of network numbers.

To choose a destination range for the remapping, select From under Remap into Range and enter a

starting value. Then select To and enter an ending value. Make sure the range you choose is large enough

to accommodate all expected incoming AURP network numbers.

To improve the efﬁciency of remapping network numbers into a safe range, select Cluster Remote

Networks and toggle it to Yes. This setting takes any number of remote networks being remapped and

causes them to be remapped into a continuous range.

To override the AppleTalk maximum limit of 15 hops, select Enable Hop-Count Reduction and toggle it to

Yes. Hosts on a local AppleTalk network will then see AppleTalk destinations across the IP tunnel as being

only one hop away.

AppleTalk allows a packet up to 15 hops (going through 15 AppleTalk routers) to reach its destination.

Packets that must reach destinations more than 15 hops away will not succeed; therefore, tunneling from

one large AppleTalk network to another could exceed that limit. In such a case, hop-count reduction

enables full network to network communication.

You have ﬁnished conﬁguring AURP.

Download from Www.Somanuals.com. All Manuals Search And Download.

Monitoring Tools 13-1

Chapter 13

Monitoring Tools

This chapter discusses the Netopia R7200’s device and network monitoring tools. These tools can provide

statistical information, report on current network status, record events, and help in diagnosing and locating

problems.

T h is s ect i on cov e r s the following topic s :

“Quick V i e w status o v e r v i e w ” o n page 13 -1

“Stati s t i cs & L o g s ” on page 13 -4

“Ev e nt h i s tories” on page 13 -5

“Routing table s ” on page 13 -7

“Served IP Addresses” on page 13-10

“System Information” on page 13-12

“SNMP” on page 13-12

“Web-based management pages” on page 13-16

Quick View status overview

You can get a useful, overall status report from the Netopia R7200 in the Quick View screen. To go to the Quick

View screen, select Quick View in the Main Menu.

Main

Quick View

The Quick View screen has three status sections:

General status

Current WAN Connection Status

LED Status

The status sections vary according to the interface of your Netopia R7200.

Download from Www.Somanuals.com. All Manuals Search And Download.

13-2 User’s Reference Guide

General status

Quick View

CPU Load: 5%

12/3/1998 02:41:39 PM

Unused Memory: 602 KB

Default IP Gateway: 0.0.0.0

Domain Name Server: 0.0.0.0

Domain Name: netopia.com

----------------MAC Address--------IP Address-------IPX Address---------------

Ethernet Hub: 00-00-c5-70-03-48 192.168.1.1

SDSL WAN1:

00-00-c5-70-03-4a 0.0.0.0

Current DSL Status

Profile Name----------Rate--%Use-Remote Address-----Est.-More Info------------

ISP

Port1 10 IP 92.163.4.1

Lcl NAT 192.163.100.6

LED Status

PWR-+-----WAN1------+--CON--AUX--+-----WAN2------+--EN--+--------LEDS---------

LNK RDY CH1 CH2 LNK LNK LNK RDY CH1 CH2 DATA | '-'= Off 'G'= Green

- - - -

- | 'R'= Red 'Y'= Yellow

Current Date: The current date; this can be set with the Date and Time utility (see “Date and time” on

page 8-12).

Default IP Gateway: The router’s default gateway, which may be either manually conﬁgured or learned via

DHCP. This is the value you assigned in the Default IP Gateway ﬁeld on page 7-7. If you are using the router’s

defaults (DHCP and NAT) this value will be 0.0.0.0. If you have assigned an IP address as your default gateway,

it is shown here.

CPU Load: Percentage of the system’s resources being used by all current transmissions.

Unused Memory: The total remaining system memory available for use.

Domain Name Server: If you are using the router’s defaults (DHCP and NAT) this value will be 0.0.0.0. If you

have assigned an IP address as your default gateway, it is shown here.

Domain Name: The domain name you have assigned, typically the name of your ISP.

MAC Address: The Netopia R7200’s hardware address, for those interfaces that support DHCP.

IP Address: The Netopia R7200’s IP address, entered in the IP Setup screen.

IPX Address: The Netopia R7200’s IPX address, entered in the IPX Setup screen.

EtherTalk Address: The Netopia R7200’s AppleTalk address on its EtherTalk Phase II interface, entered in the

EtherTalk Phase II Setup screen (only if the optional AppleTalk feature set is installed).

LocalTalk Address: The Netopia R7200’s AppleTalk address on its LocalTalk interface, entered in the LocalTalk

Setup screen (only if the optional AppleTalk feature set is installed).

Download from Www.Somanuals.com. All Manuals Search And Download.

Monitoring Tools 13-3

Current status

The current status section is a table showing the current status of the WAN. For example:

Current DSL Status

---Profile Name------State---%Use-Remote Address----Est.-More Info----------

ISP

10 IP 92.163.4.1

Lcl NAT 192.163.100.6

Proﬁle Name: Lists the name of the connection proﬁle being used, if any.

State: Lists the ports in use for this connection.

%Use: Indicates the average percent utilization of the maximum capacity of the channels in use for the

connection.

Remote Address: Shows the IP address of the connected remote router if the connection is using IP.

Otherwise, shows the IPX address of the connected remote router, if using IPX.

Est: Indicates whether the connection was locally (“Lcl”) or remotely (“Rmt”) established.

More Info: Indicates, in order of priority, the NAT address in use for this connection, the IPX address in use (if IP

is also in use), or the ISDN caller identiﬁcation (if available).

Status lights

This section shows the current real-time status of the Netopia R7200’s status lights (LEDs). It is useful for

remotely monitoring the router’s status. The Quick View screen’s arrangement of LEDs corresponds to the

physical arrangement of LEDs on the router.

-PWR-+-----WAN1------+--CON--AUX--+-----WAN2------+--EN--+--------LEDS---------

LNK RDY CH1 Ch2 LNK LNK LNK RDY CH1 CH2 DATA | '-'= Off 'G'= Green

- G - -

- - - -

- | 'R'= Red 'Y'= Yellow

Each LED representation can report one of four states:

–: The LED is off.

R: The LED is red.

G: The LED is green.

Y: The LED is yellow.

The section “Netopia R7200 SDSL Router status lights” on page 3-4 describes the meanings of the colors for

each LED.

Download from Www.Somanuals.com. All Manuals Search And Download.

13-4 User’s Reference Guide

Statistics & Logs

Main

Statistics & Logs

• General Statistics

When you are troubleshooting your Netopia R7200, the Statistics & Logs screens provide insight into the recent

event activities of the router.

From the Main Menu go to Statistics & Logs and select one of the options described in the sections below.

General Statistics

To go to the General Statistics screen, select General Statistics and press Return. The General Statistics

screen appears.

General Statistics

Phys I/F---------Rx Bytes---Tx Bytes---Rx Pkts---Tx Pkts----Rx Err----Tx Err

Ethernet Hub

LocalTalk

SDSL 1

123456789 123456789 12345678 12345678 12345678 12345678

123456789 123456789

123456789 123456789 12345678 12345678

Network----------Rx Bytes---Tx Bytes---Rx Pkts---Tx Pkts----Rx Err----Tx Err

123456789 123456789 12345678 12345678 12345678 12345678

123456789 123456789 12345678 12345678

IPX

AppleTalk

The General Statistics screen displays information about data trafﬁc on the Netopia R7200’s data ports. This

information is useful for monitoring and troubleshooting your LAN. Note that the counters roll over at their

maximum ﬁeld width, that is, they restart again at 0.

Download from Www.Somanuals.com. All Manuals Search And Download.

Monitoring Tools 13-5

Physical Interface

The top left side of the screen lists total packets received and total packets transmitted for the following data

ports:

Ethernet Hub

Aux Async or LocalTalk (if the optional AppleTalk feature set is installed)

SDSL 1

Network Interface

The bottom left side of the screen lists total packets received and total packets transmitted for the following

protocols:

IP (IP packets on the Ethernet)

IPX (IPX packets on the Ethernet) if IPX is enabled

AppleTalk (AppleTalk packets on Ethernet using EtherTalk Phase II if the optional AppleTalk feature set is

installed)

LT (LocalTalk on the PhoneNET) if the optional AppleTalk feature set is installed

The right side of the table lists the total number of occurrences of each of six types of communication

statistics:

Rx Bytes: The number of bytes received

Tx Bytes: The number of bytes transmitted

Rx Packets: The number of packets received

Tx Pkts: The number of packets transmitted

Rx Err: The number of bad Ethernet packets received

Tx Err: The number of errors occurring when Ethernet packets are transmitted simultaneously by nodes on the

LAN

Event histories

The Netopia R7200 records certain relevant occurrences in event histories. Event histories are useful for

diagnosing problems because they list what happened before, during, and after a problem occurs. You can view

two different event histories: one for the router’s system and one for the WAN. The Netopia R7200’s built-in

battery backup prevents loss of event history from a shutdown or reset.

The router’s event histories are structured to display the most recent events ﬁrst, and to make it easy to

distinguish error messages from informational messages. Error messages are preﬁxed with an asterisk. Both

the WAN Event History and Device Event History retain records of the 128 most recent events.

In the Statistics & Logs screen, select WAN Event History. The WAN Event History screen appears.

Download from Www.Somanuals.com. All Manuals Search And Download.

13-6 User’s Reference Guide

Main

• WAN Event History

• Device Event History

Statistics & Logs

WAN Event History

The WAN Event History screen lists a total of 128 events on the WAN. The most recent events appear at the

top.

WAN Event History

Current Date -- 12/3/98 03:02:23 PM

-Date-----Time-----Event------------------------------------------------------

----------------------------------SCROLL UP-----------------------------------

07/03/98 13:59:06 DSL: IP up, channel 1, gateway: 173.166.107.1

07/03/98 13:59:05 DSL: Channel 1 up

07/03/98 13:59:05 >>WAN: data link activated at 1040 Kbps

07/03/98 13:58:32 --Device restarted-----------------------------------------

07/03/98 12:46:39 --Device restarted-----------------------------------------

07/03/98 11:45:57 --Device restarted-----------------------------------------

07/02/98 17:58:15 DSL: IP up, channel 1, gateway: 173.166.107.1

07/02/98 17:58:10 DSL: Channel 1 up

07/02/98 17:58:10 >>WAN: data link activated at 1040 Kbps

07/02/98 17:57:05 DSL: IP down, channel 1

07/02/98 17:57:05 Link 1 down: No Synch

07/02/98 17:57:05 >>WAN: data link deactivated

07/02/98 17:48:02 DSL: IP up, channel 1, gateway: 173.166.107.1

07/02/98 17:48:01 DSL: Channel 1 up

---------------------------------SCROLL DOWN----------------------------------

Clear History...

Return/Enter on event item for details or SCROLL [UP/DOWN] item for scrolling.

Each entry in the list contains the following information:

Date: Date of the event.

Time: Time of the event.

Event: A brief description of the event.

Ch.: The channel involved in the event.

Dir. Number: The directory number (number dialed) involved in the event (switched circuit models only).

The ﬁrst event in each call sequence is marked with double arrows (>>).

Failures are marked with an asterisk (*).

If the event history exceeds the size of the screen, you can scroll through it by using the SCROLL UP and

SCROLL DOWN items.

To scroll up, select SCROLL UP at the top of the list and press Return. To scroll down, select SCROLL DOWN at

the bottom of the list and press Return.

Download from Www.Somanuals.com. All Manuals Search And Download.

Monitoring Tools 13-7

To get more information about any event listed in the WAN Event History, select the event and then press

Return. A dialog box containing more information about the selected event will appear. Press Return or Escape

to dismiss the dialog box.

To clear the event history, select Clear History at the bottom of the history screen and press Return.

Device Event History

The Device Event History screen lists a total of 128 port and system events, giving the time and date for each

event, as well as a brief description. The most recent events appear at the top.

In the Statistics & Logs screen, select Device Event History. The Device Event History screen appears.

Device Event History

Current Date -- 12/3/98 02:03:27 AM

-Date-----Time-----Event------------------------------------------------------

----------------------------------SCROLL UP-----------------------------------

01/22/96 02:03:18 AURP initialization complete

01/22/96 02:03:18 AppleTalk initialization complete

01/22/96 02:03:11 IPX initialization complete

01/22/96 02:03:11 IP address server initialization complete

01/22/96 02:03:11 --BOOT: Warm start v4.3

---------------------------------

01/22/96 02:02:32 IPX initialization complete

01/22/96 02:02:32 IP address server initialization complete

01/22/96 02:02:32 --BOOT: Warm start v4.3

---------------------------------

01/22/96 01:59:50 * IP: Route 0.0.0.0/0.0.0.0 not installed

01/22/96 01:59:50 IPX initialization complete

01/22/96 01:59:50 IP address server initialization complete

01/22/96 01:59:50 --BOOT: Cold start v4.3

---------------------------------

01/22/96 01:55:12 AppleTalk initialization complete

01/22/96 01:55:07 * IP: Route 0.0.0.0/0.0.0.0 not installed

---------------------------------SCROLL DOWN----------------------------------

Clear History...

Return/Enter on event item for details or SCROLL [UP/DOWN] item for scrolling.

If the event history exceeds the size of the screen, you can scroll through it by using SCROLL UP and SCROLL

DOWN.

To scroll up, select SCROLL UP at the top of the list and press Return. To scroll down, select SCROLL DOWN at

the bottom of the list and press Return.

To obtain more information about any event listed in the Device Event History, select the event and then press

Return. A dialog box containing more information about the selected event appears. Press Return or Escape to

dismiss the dialog box.

To clear the Device Event History, select Clear History and press Return.

Routing tables

You can view all of the IP, IPX, and AppleTalk routes in the Netopia R7200’s IP, IPX, and AppleTalk routing

tables, respectively.

To go to a routing table screen, select the routing table you are interested in from the Statistics & Logs screen.

Download from Www.Somanuals.com. All Manuals Search And Download.

13-8 User’s Reference Guide

Each of the routing table screens represents a snapshot of the routing table information at the time the screen

is ﬁrst invoked. To take a new snapshot, select Update at the bottom of the screen and press Return.

Statistics & Logs

WAN Event History...

Device Event History...

IP Routing Table...

IPX Routing Table...

IPX SAP Bindery Table...

AppleTalk Routing Table...

Served IP Addresses...

General Statistics...

System Information...

IP routing table

In the Statistics & Logs screen, select IP Routing Table and press Return.

The IP routing table displays all of the IP routes currently known to the Netopia R7200.

IP Routing Table

Network Address-Subnet Mask-----via Router------Port------------------Type----

----------------------------------SCROLL UP-----------------------------------

0.0.0.0

255.0.0.0

0.0.0.0

Other

Local

Bcast

Other

Bcast

127.0.0.1

192.168.1.0

192.168.1.1

192.168.1.15

224.0.0.0

255.255.255.255 127.0.0.1

255.255.255.240 192.168.1.1

255.255.255.255 192.168.1.1

255.255.255.255 192.168.1.15

Loopback

Ethernet

224.0.0.0

0.0.0.0

255.255.255.255 255.255.255.255 255.255.255.255 --

---------------------------------SCROLL DOWN----------------------------------

UPDATE

Download from Www.Somanuals.com. All Manuals Search And Download.

Monitoring Tools 13-9

IPX routing table

In the Statistics & Logs screen, select IPX Routing Table and press Return.

The IPX routing table displays all of the IPX routes currently known to the Netopia R7200.

IPX Sap Bindery table

In the Statistics & Logs screen, select IPX Sap Bindery Table and press Return.

The IPX Sap Bindery table displays all of the IPX Sap Bindery routes currently known to the Netopia R7200.

AppleTalk routing table

In the Statistics & Logs screen, select AppleTalk Routing Table and press Return. An AT Routing Table similar

to the one shown below will appear.

The AppleTalk routing table displays information about the current state of AppleTalk networks connected to the

Netopia R7200, including remote AppleTalk networks connected with AURP. This information is gathered from

other active AppleTalk routers.

AT Routing Table

-Net---Range--Def Zone Name----------Hops-State-Next Rtr Addr.--Pkts Fwded

----------------------------------SCROLL UP--------------------------

Admin

Good 46.131

AdMan

Aspirations

Sales

Marketing

Molluscs

Customer Service

Telemarketing

Rio

*24

Regiment

Rhinos

Unique Services

Aspirations

Rhinos

---------------------------------SCROLL DOWN-------------------------

UPDATE

'*' Entries have multiple zone names. Return/Enter on these to see zone list.

The table has the following columns:

Net: Displays the starting network number supplied by the AppleTalk router in the Next Rtr Addr. column. If a

network number is preceded by an asterisk (*), it has multiple zones. To display the zones, select the network

entry and press Return.

Range: Displays the ending network number for the extended network.

Def Zone Name: Displays the zone or zones associated with the speciﬁed network or network range. The zone

name shown is either the only zone or the default zone name for an extended network. To see the complete list

of zones for an extended network with multiple zones, select the entry in the table and press Return. Press

Return again to close the list of zones.

Hops: Displays the number of routers between the Netopia R7200 and the speciﬁed network.

Download from Www.Somanuals.com. All Manuals Search And Download.

13-10 User’s Reference Guide

State: Displays the state of the speciﬁed route, based on the frequency of Routing Table Maintenance Protocol

(RTMP) packets received for the route. The state can be Good, Suspect, or Bad. AppleTalk routers regularly

exchange RTMP packets to update AppleTalk routing information.

Next Rtr Addr.: Displays the DDP or IP address of the next hop for the speciﬁed route. A DDP address is

displayed if the router shown is on the local AppleTalk network. DDP address means that a connection to the

next-hop router is by a native AppleTalk network (e.g., LocalTalk or EtherTalk Phase II). An IP address is

displayed if the Netopia R7200 is connected to the router shown using AURP. IP address means a connection

transports over AURP (AppleTalk encapsulated IP).

Pkts Fwded: The number of packets sent to the router shown.

Each row in the AppleTalk routing table corresponds to an AppleTalk route or network range. If the list of routes

shown exceeds the size of the screen, you can scroll through it by using SCROLL UP and SCROLL DOWN.

To scroll up, select SCROLL UP at the top of the table and press Return. To scroll down, select SCROLL DOWN

at the bottom of the table and press Return.

Served IP Addresses

You can view all of the IP addresses currently being served by the Netopia R7200 SDSL Router from the Served

IP Addresses screen.

From the Statistics & Logs menu, select Served IP Addresses. The Served IP Addresses screen appears.

Served IP Addresses

-IP Address-------Type----Expires--Client Identifier--------------------------

----------------------------------SCROLL UP-----------------------------------

192.168.1.100

192.168.1.101

192.168.1.102

192.168.1.103

192.168.1.104

192.168.1.105

192.168.1.106

192.168.1.107

192.168.1.108

192.168.1.109

192.168.1.110

192.168.1.111

192.168.1.112

192.168.1.113

DHCP

00:36

00:58

EN: 00-00-c5-4a-1f-ea

EN: 08-00-07-16-0c-85

---------------------------------SCROLL DOWN----------------------------------

Lease Management...

EN = Ethernet Address; AT = AppleTalk Address; CP = Profile Name; HX = hex

To manage DHCP leases, select Lease Management in this screen.

Download from Www.Somanuals.com. All Manuals Search And Download.

Monitoring Tools 13-11

The IP Address Lease Management screen appears.

IP Address Lease Management

Reset All Leases

Release BootP Leases

Reclaim Declined Addresses

Hit RETURN/ENTER, you will return to the previous screen.

This screen has three options:

Reset All Leases: Resets all current IP addresses leased through DHCP without waiting for the default

one–hour lease period to elapse

Release BootP Leases: Releases any BootP leases that may be in place and which may no longer be

required.

Reclaim Declined Addresses: Reclaims served leases that have been declined; for example by devices

that may no longer be on the network.

Download from Www.Somanuals.com. All Manuals Search And Download.

13-12 User’s Reference Guide

System Information

The System Information screen gives a summary view of the general system level values in the Netopia R7200

SDSL Router.

From the Statistics & Logs menu select System Information. The System Information screen appears.

System Information

Serial Number

Firmware Version

70-02-ec (7340780)

4.3

Processor Speed (MHz)

Flash ROM Capacity (MBytes)

DRAM Capacity (MBytes)

Ethernet

8 Port 10Base-T

Switched Async

SDSL

Auxiliary Serial Port

WAN 1 Interface

WAN 2 Interface

Not Installed

AppleTalk Feature Set

User Restriction (# users)

Analog Dial-In Kit

Installed

The information display varies by model, ﬁrmware version, feature set, and so on. You can tell at a glance your

particular system conﬁguration.

SNMP

The Netopia R7200 includes a Simple Network Management Protocol (SNMP) agent, allowing monitoring and

conﬁguration by a standard SNMP manager.

The Netopia R7200 supports the following management information base (MIB) documents:

MIB II (RFC 1213)

Interface MIB (RFC 1229)

Ethernet MIB (RFC 1643)

AppleTalk MIB I (RFC 1243)

Netopia MIB

These MIBs are on the Netopia R7200 CD included with the Netopia R7200. Load these MIBs into your SNMP

management software in the order they are listed here. Follow the instructions included with your SNMP

manager on how to load MIBs.

Download from Www.Somanuals.com. All Manuals Search And Download.

Monitoring Tools 13-13

The SNMP Setup screen

From the Main Menu, select SNMP in the System Conﬁguration screen and press Return. The SNMP Setup

screen appears.

System

Configuration

Main

SNMP

SNMP Setup

System Name:

System Location:

System Contact:

Read-Only Community String:

Read/Write Community String:

public

private

Authentication Traps Enable:

IP Trap Receivers...

Off

Configure optional SNMP parameters from here.

Follow these steps to conﬁgure the ﬁrst three items in the screen:

1. Select System Name and enter a descriptive name for the Netopia R7200’s SNMP agent.

2. Select System Location and enter the router’s physical location (room, ﬂoor, building, etc.).

3. Select System Contact and enter the name of the person responsible for maintaining the router.

System Name, System Location, and System Contact set the values returned by the Netopia R7200 SNMP

agent for the SysName, SysLocation, and SysContact objects, respectively, in the MIB II system group. Although

optional, the information you enter in these items can help a system administrator manage the network more

efﬁciently.

Community strings

The Read-Only Community String and the Read/ Write Community String are like passwords that must be used

by an SNMP manager querying or conﬁguring the Netopia R7200. An SNMP manager using the Read-Only

Community String can examine statistics and conﬁguration information from the router, but cannot modify the

router’s conﬁguration. An SNMP manager using the Read/ Write Community String can both examine and

modify conﬁguration parameters.

Download from Www.Somanuals.com. All Manuals Search And Download.

13-14 User’s Reference Guide

By default, the read-only and read/ write community strings are set to public and private, respectively. You

should change both of the default community strings to values known only to you and trusted system adminis-

trators.

To change a community string, select it and enter a new value.

Starting with the version 4.3 ﬁrmware, setting the Read-Only and Read-Write community strings to the empty

string will block all SNMP requests to the router. (The router may still send SNMP Traps if those are properly

enabled.)

Previously, if either community string was the empty string, SNMP Requests specifying an empty community

string were accepted and processed.

This change is designed to allow the administrator to block SNMP access to the router and to provide more

granular control over the allowed SNMP operations to the router.

Setting only the Read-Write community string to the empty string will block SNMP Set Requests to the

router, but Get Requests and Get-Next Requests will still be honored using the Read-Only community string

(assuming that is not the empty string).

Sett i ng only the Read -O n ly community s t r ing to the empty s t r ing will not block Get Requests or Get-Next

Requests since those operations (and Set Requests) are still allowed using the (non-empty) Read-Write

community string.

Even if you decide not to use SNMP, you should change the community strings. This prevents unauthorized

access to the Netopia R7200 through SNMP. For more information on security issues, see “Suggested security

measures” on page 14-1.

SNMP traps

An SNMP trap is an informational message sent from an SNMP agent (in this case, the Netopia R7200) to a

manager. When a manager receives a trap, it may log the trap as well as generate an alert message of its own.

Standard traps generated by the Netopia R7200 include the following:

An authentication failure trap is generated when the router detects an incorrect community string in a

received SNMP packet. Authentication Traps Enable must be On for this trap to be generated.

A cold start trap is generated after the router is reset.

An interface down trap (ifDown) is generated when one of the router’s interfaces, such as a port, stops

functioning or is disabled.

An interface up trap (ifUp) is generated when one of the router’s interfaces, such as a port, begins

functioning.

The Netopia R7200 sends traps using UDP (for IP networks).

You can specify which SNMP managers are sent the IP traps generated by the Netopia R7200. Up to eight

receivers can be set. You can also review and remove IP traps.

To go to the IP Trap Receivers screen, select IP Trap Receivers. The IP Trap Receivers screen appears.

Download from Www.Somanuals.com. All Manuals Search And Download.

Monitoring Tools 13-15

IP Trap Receivers

Display/Change IP Trap Receiver...

Add IP Trap Receiver...

Delete IP Trap Receiver...

Return/Enter to modify an existing Trap Receiver.

Navigate from here to view, add, modify and delete IP Trap Receivers.

Setting the IP trap receivers

1. Select Add IP Trap Receiver.

2. Select Receiver IP Address or Domain Name. Enter the IP address or domain name of the SNMP manager

you want to receive the trap.

3. Select Community String if you enabled one in the SNMP Setup screen, and enter the appropriate

password.

4. Select Add Trap Receiver Now and press Return. You can add up to seven more receivers.

Viewing IP trap receivers

To display a view-only table of IP trap receivers, select Display/ Change IP Trap Receiver in the IP Trap

Receivers screen.

Modifying IP trap receivers

1. To edit an IP trap receiver, select Display/ Change IP Trap Receiver in the IP Trap Receivers screen.

2. Select an IP trap receiver from the table and press Return.

3. In the Change IP Trap Receiver screen, edit the information as needed and press Return.

Deleting IP trap receivers

1. To delete an IP trap receiver, select Delete IP Trap Receiver in the IP Trap Receivers screen.

2. Select an IP trap receiver from the table and press Return.

3. In the dialog box, select Continue and press Return.

Download from Www.Somanuals.com. All Manuals Search And Download.

13-16 User’s Reference Guide

Web-based management pages

The web-based management pages add signiﬁcant new features for monitoring your router.

You access the web-based management pages by launching your web browser and entering the URL:

http:/ / router_IP_address

where router_IP_address is the address of your router. The default address is 198.162.1.1.

The System Information page appears.

System Information page

This is the initial page you link to when you connect to the web-based management pages.

It displays useful general information about your router:

Ethernet Address: The router’s hardware or MAC address

Firmware Version: The router’s model number and current ﬁrmware revision level

Current Date: The current date and time, as you have conﬁgured them

IP Address: The router’s internal IP address

IPX Network Address: The router’s IPX network address, if you have it enabled and are on an IPX network

Download from Www.Somanuals.com. All Manuals Search And Download.

Monitoring Tools 13-17

The display contains two frames, a navigation frame on the left and the information and conﬁguration page on

the right.

The left frame permits you to navigate to:

System

Information: displays the router’s hardware (MAC) address, the model number and ﬁrmware version

curre nt l y in s ta l l e d, the current date and time, the router’s I P a ddress, and the IPX address, if any.

Event History

“WAN Event History page” on page 13-18: displays the most recent events that the router reports for

your WAN connections.

“Device Event History page” on page 13-19: displays the most recent events that the router reports of

its own internal activity.

If you click any link in the left frame, that page is displayed in the right frame.

Event History pages

The Netopia R7200 records certain relevant occurrences in event histories. Event histories are useful for

diagnosing problems because they list what happened before, during, and after a problem occurs. You can view

two different event histories: one for the router’s system and one for the WAN. The Netopia R7200’s built-in

battery backup prevents loss of event history from a shutdown or reset.

The router’s event histories are structured to display the most recent events ﬁrst and to make it easy to

distinguish error messages from informational messages. Error messages are preﬁxed with an asterisk. Both

the WAN Event History and Device Event History pages retain records of up to 128 of the most recent events.

Download from Www.Somanuals.com. All Manuals Search And Download.

13-18 User’s Reference Guide

WAN Event History page

You can refresh the WAN Event History log by clicking the update this page link.

Download from Www.Somanuals.com. All Manuals Search And Download.

Monitoring Tools 13-19

Device Event History page

You can refresh the Device Event History log by clicking the update this page link.

Download from Www.Somanuals.com. All Manuals Search And Download.

13-20 User’s Reference Guide

Download from Www.Somanuals.com. All Manuals Search And Download.

Security 14-1

Chapter 14

Security

The Netopia R7200 provides a number of security features to help protect its conﬁguration screens and your

local network from unauthorized access. Although these features are optional, it is strongly recommended that

you use them.

T h is s ect i on cov e r s the following topic s :

“Sugge s ted secu r ity mea s ures” on page 14 -1

“U s er accounts” on page 14 -1

“Di a l -in c on s o l e a ccess” on page 14 -3

“En a b l e S martStart/ Smart V i e w / W e b server” on page 14-4

“Te l n e t access” on page 14 -4

“About ﬁlters and ﬁlter sets” on page 14-4

“Working with IP ﬁlters and ﬁlter sets” on page 14-12

“IPX ﬁlters” on page 14-21.

“Firewall tutorial” on page 14-29

Suggested security measures

In addition to setting up user accounts, Telnet access, and ﬁlters (all of which are covered later in this chapter),

there are other actions you can take to make the Netopia R7200 and your network more secure:

Change the SNMP community strings (or passwords). The default community strings are universal and

could easily be known to a potential intruder.

Set the answer proﬁle so it must match incoming calls to a connection proﬁle.

Leave the Enable Dial-in Console Access option set to No.

When using AURP, accept connections only from conﬁgured partners.

Conﬁgure the Netopia R7200 through the serial console port to ensure that your communications cannot

be intercepted.

User accounts

When you ﬁrst set up and conﬁgure the Netopia R7200, no passwords are required to access the conﬁguration

screens. Anyone could tamper with the router’s conﬁguration by simply connecting it to a console.

However, by adding user accounts, you can protect the most sensitive screens from unauthorized access. User

accounts are composed of name/ password combinations that can be given to authorized users.

Download from Www.Somanuals.com. All Manuals Search And Download.

14-2 User’s Reference Guide

Caution!

You are strongly encouraged to add protection to the conﬁguration screens. Unprotected screens could allow an

unauthorized user to compromise the operation of your entire network.

Once user accounts are created, users who attempt to access protected screens will be challenged. Users who

enter an incorrect name or password are returned to a screen requesting a name/ password combination to

access the Main Menu.

To set up user accounts, in the System Conﬁguration screen select Security and press Return. The Security

Options screen appears.

Security Options

Enable Dial-in Console Access:

Yes

Enable SmartStart/SmartView/Web Server:

Enable Telnet Console Access:

Enable Telnet Access to SNMP Screens:

Yes

Show Users...

Add User...

Delete User...

Password for This Screen (11 chars max):

Return/Enter accepts * Tab toggles * ESC cancels.

Set up configuration access options here.

Protecting the Security Options screen

The ﬁrst screen you should protect is the Security Options screen, because it controls access to the

conﬁguration screens. Access to the Security Options screen can be protected with a password.

Select Password for This Screen in the Security Options screen and enter a password. Make sure this

password is secure and is different from any of the user account passwords.

Protecting the conﬁguration screens

You can protect the conﬁguration screens with user accounts. You can administer the accounts from the

Security Options screen. You can create up to four accounts.

To display a view-only list of user accounts, select Show Users in the Security Options screen.

Download from Www.Somanuals.com. All Manuals Search And Download.

Security 14-3

To add a new user account, select Add User in the Security Options screen and press Return. The Add Name

With Write Access screen appears.

Add Name With Write Access

Enter Name:

Enter Password (11 characters max):

ADD NAME/PASSWORD NOW

CANCEL

Follow these steps to conﬁgure the new account:

1. Select Enter Name and enter a descriptive name (for example, the user’s ﬁrst name).

2. Select Enter Password and enter a password.

3. To accept the new name/ password combination, select ADD NAME/ PASSWORD NOW and press Return.

To exit the Add Name With Write Access screen without saving the new account, select CANCEL. You are

returned to the Security Options screen.

To delete a user account, select Delete User to display a list of accounts. Select an account from the list and

press Return to delete it. To exit the list without deleting the selected account, press Escape.

Dial-in console access

Remote modem terminal emulator setups can dial in to the modem line and establish a remote console

session, even though they are not using PPP. This allows Netopia, Inc.'s Up and Running, Guaranteed!

department or other administrator with the appropriate security to remotely conﬁgure your router for you.

To prevent any remote caller from establishing a remote session, set the option Enable Dial-in Console

Access set to No.

To allow access for Up and Running, Guaranteed! with the default name and password in place, toggle this

option to Yes.

Download from Www.Somanuals.com. All Manuals Search And Download.

14-4 User’s Reference Guide

Enable SmartStart/SmartView/Web server

You may want to restrict access to the Web-based screens to prevent inadvertent switching or connecting and

disconnecting of connection proﬁles. Since SmartStart can be used to reconﬁgure the router, you may want to

block inadvertent damage resulting from unauthorized use of SmartStart. To prevent access to these features

toggle this option to No.

Telnet access

Telnet is a TCP/ IP service that allows remote terminals to access hosts on an IP network. The Netopia R7200

supports Telnet access to its conﬁguration screens.

Caution!

You should consider password-protecting or restricting Telnet access to the Netopia R7200 if you suspect there

is a chance of tampering.

To password-protect the conﬁguration screens, select Easy Setup from the Main Menu, and go to the Easy

Setup Security Con ﬁ gur a t i on s c reen. B y e ntering a name and pass w o rd pair in this screen, all access via serial,

Telnet, SNMP, and Web server will be password-protected.

To restrict Telnet access, select Security in the Advanced Conﬁguration menu. The Security Options screen will

appear. There are two levels of Telnet restriction available:

To restrict Telnet access to the SNMP screens, select Enable Telnet Access to SNMP Screens and toggle

it to No. (See “SNMP traps” on page 13-14.)

To restrict Telnet access to all of the conﬁguration screens, select Enable Telnet Console Access and

toggle it to No.

About ﬁlters and ﬁlter sets

Security should be a high priority for anyone administering a network connected to the Internet. Using packet

ﬁlters to control network communications can greatly improve your network’s security.

The Netopia R7200’s packet ﬁlters are designed to provide security for the Internet connections made to and

from your network. You can customize the router’s ﬁlter sets for a variety of packet ﬁltering applications.

Typically, you use ﬁlters to selectively admit or refuse TCP/ IP connections from certain remote networks and

speciﬁc hosts. You will also use ﬁlters to screen particular types of connections. This is commonly called

ﬁrewalling your network.

Before creating ﬁlter sets, you should read the next few sections to learn more about how these powerful

security tools work.

What’s a ﬁlter and what’s a ﬁlter set?

A ﬁlter is a rule that lets you specify what sort of data can ﬂow in and out of your network. A particular ﬁlter can

be either an input ﬁlter—one that is used on data (packets) coming in to your network from the Internet—or an

output ﬁlter—one that is used on data (packets) going out from your network to the Internet.

Download from Www.Somanuals.com. All Manuals Search And Download.

Security 14-5

A ﬁlter set is a group of ﬁlters that work together to check incoming or outgoing data. A ﬁlter set can consist of

a combination of input and output ﬁlters.

How ﬁlter sets work

A ﬁlter set acts like a team of customs inspectors. Each ﬁlter is an inspector through which incoming and

outgoing packages must pass. The inspectors work as a team, but each inspects every package individually.

Each inspector has a speciﬁc task. One inspector’s task may be to examine the destination address of all

outgoing packages. That inspector looks for a certain destination—which could be as speciﬁc as a street

address or as broad as an entire country—and checks each package’s destination address to see if it matches

that destination.

FROM:

TO:

A ﬁlter inspects data packets like a customs inspector scrutinizing packages.

Filter priority

Continuing the customs inspectors analogy, imagine the inspectors lined up to examine a package. If the

package matches the ﬁrst inspector’s criteria, the package is either rejected or passed on to its destination,

depending on the ﬁrst inspector’s particular orders. In this case, the package is never seen by the remaining

inspectors.

Download from Www.Somanuals.com. All Manuals Search And Download.

14-6 User’s Reference Guide

packet

first

filter

match?

yes

send

to next

filter

forward

discard?

discard

(delete)

forward

to network

If the package does not match the ﬁrst inspector’s criteria, it goes to the second inspector, and so on. You can

see that the order of the inspectors in the line is very important.

For example, let’s say the ﬁrst inspector’s orders are to send along all packages that come from Rome, and the

second inspector’s orders are to reject all packages that come from France. If a package arrives from Rome,

the ﬁrst inspector sends it along without allowing the second inspector to see it. A package from Paris is

ignored by the ﬁrst inspector, rejected by the second inspector, and never seen by the others. A package from

London is ignored by the ﬁrst two inspectors, so it’s seen by the third inspector.

In the same way, ﬁlter sets apply their ﬁlters in a particular order. The ﬁrst ﬁlter applied can forward or discard

a packet before that packet ever reaches any of the other ﬁlters. If the ﬁrst ﬁlter can neither forward nor discard

the packet (because it cannot match any criteria), the second ﬁlter has a chance to forward or reject it, and so

on. Because of this hierarchical structure, each ﬁlter is said to have a priority. The ﬁrst ﬁlter has the highest

priority, and the last ﬁlter has the lowest priority.

How individual ﬁlters work

As described above, a ﬁlter applies criteria to an IP packet and then takes one of three actions:

Forwards the packet to the local or remote network

Blocks (discards) the packet

Ignores the packet

A ﬁlter forwards or blocks a packet only if it ﬁnds a match after applying its criteria. When no match occurs, the

ﬁlter ignores the packet.

Download from Www.Somanuals.com. All Manuals Search And Download.

Security 14-7

A ﬁltering rule

The criteria are based on information contained in the packets. A ﬁlter is simply a rule that prescribes certain

actions based on certain conditions. For example, the following rule qualiﬁes as a ﬁlter:

Block all Telnet attempts that originate from the remote host 199.211.211.17.

This rule applies to Telnet packets that come from a host with the IP address 199.211.211.17. If a match

occurs, the packet is blocked.

Here is what this rule looks like when implemented as a ﬁlter on the Netopia R7200:

+-#--Source IP Addr--Dest IP Addr-----Proto-Src.Port-D.Port--On?-Fwd-+

+--------------------------------------------------------------------+

| 1 199.211.211.17 0.0.0.0

TCP 23

Yes No |

+--------------------------------------------------------------------+

To understand this particular ﬁlter, look at the parts of a ﬁlter.

Parts of a ﬁlter

A ﬁlter consists of criteria based on packet attributes. A typical ﬁlter can match a packet on any one of the

following attributes:

The source IP address (where the packet was sent from)

The destination IP address (where the packet is going)

The type of higher-layer Internet protocol the packet is carrying, such as TCP or UDP

Port numbers

A ﬁlter can also match a packet’s port number attributes, but only if the ﬁlter’s protocol type is set to TCP or

UDP, since only those protocols use port numbers. The ﬁlter can be conﬁgured to match the following:

The source port number (the port on the sending host that originated the packet)

The destination port number (the port on the receiving host that the packet is destined for)

By matching on a port number, a ﬁlter can be applied to selected TCP or UDP services, such as Telnet, FTP, and

World Wide Web. The following tables show a few common services and their associated port numbers:

Internet service

FTP

TCP port

Internet service

Finger

TCP port

20/ 21

Telnet

World Wide Web

News

SMTP (mail)

Gopher

144

513

rlogin

Download from Www.Somanuals.com. All Manuals Search And Download.

14-8 User’s Reference Guide

Internet service

UDP port

Internet service

UDP port

Who Is

AppleTalk Routing

202

Maintenance (at-rtmp)

World Wide Web

AppleTalk Name Binding

(at-nbp)

202

SNMP

TFTP

161

AURP (AppleTalk)

who

387

513

Port number comparisons

A ﬁlter can also use a comparison option to evaluate a packet’s source or destination port number. The

comparison options are:

No Compare: No comparison of the port number speciﬁed in the ﬁlter with the packet’s port number.

Not Equal To: For the ﬁlter to match, the packet’s port number cannot equal the port number speciﬁed in the

ﬁlter.

Less Than: For the ﬁlter to match, the packet’s port number must be less than the port number speciﬁed in the

ﬁlter.

Less Than or Equal: For the ﬁlter to match, the packet’s port number must be less than or equal to the port

number speciﬁed in the ﬁlter.

Equal: For the ﬁlter to match, the packet’s port number must equal the port number speciﬁed in the ﬁlter.

Greater Than: For the ﬁlter to match, the packet’s port number must be greater than the port number speciﬁed

in the ﬁlter.

Greater Than or Equal: For the ﬁlter to match, the packet’s port number must be greater than or equal to the

port number speciﬁed in the ﬁlter.

Other ﬁlter attributes

There are three other attributes to each ﬁlter:

The ﬁlter’s order (i.e., priority) in the ﬁlter set

Whether the ﬁlter is currently active

Whether the ﬁlter is set to forward packets or to block (discard) packets

Download from Www.Somanuals.com. All Manuals Search And Download.

Security 14-9

Putting the parts together

When you display a ﬁlter set, its ﬁlters are displayed as rows in a table:

+-#---Source IP Addr---Dest IP Addr-----Proto-Src.Port-D.Port--On?-Fwd-+

+----------------------------------------------------------------------+

| 1 192.211.211.17 0.0.0.0

TCP 0

Yes No |

| 2 0.0.0.0

0.0.0.0

TCP NC

ICMP --

TCP NC

UDP NC

=6000 Yes No |

| 3 0.0.0.0

Yes Yes |

| 4 0.0.0.0

>1023 Yes Yes |

| 5 0.0.0.0

>1023 Yes Yes |

+----------------------------------------------------------------------+

The table’s columns correspond to each ﬁlter’s attributes:

#: The ﬁlter’s priority in the set. Filter number 1, with the highest priority, is ﬁrst in the table.

Source IP Addr: The packet source IP address to match.

Dest IP Addr: The packet destination IP address to match.

Proto: The protocol to match. This can be entered as a number (see the table below) or as TCP or UDP if those

protocols are used.

Protocol

Number to use

Full name

N/ A

ICMP

TCP

Ignores protocol type

Internet Control Message Protocol

Transmission Control Protocol

User Datagram Protocol

UDP

Src. Port: The source port to match. This is the port on the sending host that originated the packet.

D. Port: The destination port to match. This is the port on the receiving host for which the packet is intended.

On?: Displays Yes when the ﬁlter is in effect or No when it is not.

Fwd: Shows whether the ﬁlter forwards (Yes) a packet or discards (No) it when there’s a match.

Download from Www.Somanuals.com. All Manuals Search And Download.

14-10 User’s Reference Guide

Filtering example #1

Returning to our ﬁltering rule example from above (see page 14-7), look at how a rule is translated into a ﬁlter.

Start with the rule, then ﬁll in the ﬁlter’s attributes:

1. The rule you want to implement as a ﬁlter is:

Block all Telnet attempts that originate from the remote host 199.211.211.17.

2. The host 199.211.211.17 is the source of the Telnet packets you want to block, while the destination

address is any IP address. How these IP addresses are masked determines what the ﬁnal match will be,

although the mask is not displayed in the table that displays the ﬁlter sets (you set it when you create the

ﬁlter). In fact, since the mask for the destination IP address is 0.0.0.0, the address for Dest IP Addr could

have been anything. The mask for Source IP Addr must be 255.255.255.255 since an exact match is

desired.

Source IP Addr = 199.211.211.17

Source IP addre ss mask = 255.255.255.255

Dest IP Addr = 0.0.0.0

Destination IP address mask = 0.0.0.0

Note: To learn about IP addresses and masks, see Appendix B, “Understanding IP Addressing.”

3. Using the tables on page 14-7, ﬁnd the destination port and protocol numbers (the local Telnet port):

Proto = TCP (or 6)

D. Port = 23

4. The ﬁlter should be enabled and instructed to block the Telnet packets containing the source address

shown in step 2:

On? = Yes

Fwd = No

This four-step process is how we produced the following ﬁlter from the original rule:

+-#---Source IP Addr---Dest IP Addr-----Proto-Src.Port-D.Port--On?-Fwd-+

+----------------------------------------------------------------------+

| 1 192.211.211.17 0.0.0.0

TCP 0

Yes No |

+----------------------------------------------------------------------+

Filtering example #2

Suppose a ﬁlter is conﬁgured to block all incoming IP packets with the source IP address of 200.233.14.0,

regardless of the type of connection or its destination. The ﬁlter would look like this:

Download from Www.Somanuals.com. All Manuals Search And Download.

Security 14-11

+-#---Source IP Addr---Dest IP Addr-----Proto-Src.Port-D.Port--On?-Fwd-+

+----------------------------------------------------------------------+

| 1 200.233.14.0

0.0.0.0

Yes No |

+----------------------------------------------------------------------+

This ﬁlter blocks any packets coming from a remote network with the IP network address 200.233.14.0. The 0

at the end of the address signiﬁes any host on the class C IP network 200.233.14.0. If, for example, the ﬁlter

is applied to a packet with the source IP address 200.233.14.5, it will block it.

In this case, the mask, which does not appear in the table, must be set to 255.255.255.0. This way, all

packets with a source address of 200.233.14.x will be matched correctly, no matter what the ﬁnal address byte

is.

Note: The protocol attribute for this ﬁlter is 0 by default. This tells the ﬁlter to ignore the IP protocol or type of

IP packet.

Design guidelines

Careful thought must go into designing a new ﬁlter set. You should consider the following guidelines:

Be sure the ﬁlter set’s overall purpose is clear from the beginning. A vague purpose can lead to a faulty

set, and that can actually make your network less secure.

Be sure each individual ﬁlter’s purpose is clear.

Determine how ﬁlter priority will affect the set’s actions. Test the set (on paper) by determining how the

ﬁlters would respond to a number of different hypothetical packets.

Consider the combined effect of the ﬁlters. If every ﬁlter in a set fails to match on a particular packet, the

packet is:

Forwarded if all the ﬁlters are conﬁgured to discard (not forward)

Discarded if all the ﬁlters are conﬁgured to forward

Discarded if the set contains a combination of forward and discard ﬁlters

Disadvantages of ﬁlters

Although using ﬁlter sets can greatly enhance network security, there are disadvantages:

Filters are complex. Combining them in ﬁlter sets introduces subtle interactions, increasing the likelihood

of implementation errors.

Enabling a large number of ﬁlters can have a negative impact on performance. Processing of packets will

take longer if they have to go through many checkpoints.

Too much reliance on packet ﬁlters can cause too little reliance on other security methods. Filter sets are

not a substitute for password protection, effective safeguarding of passwords, caller ID, the “must match”

option in the answer proﬁle, PAP or CHAP in connection proﬁles, callback, and general awareness of how

your network may be vulnerable.

Download from Www.Somanuals.com. All Manuals Search And Download.

14-12 User’s Reference Guide

An approach to using ﬁlters

The ultimate goal of network security is to prevent unauthorized access to the network without compromising

authorized access. Using ﬁlter sets is part of reaching that goal.

Each ﬁlter set you design will be based on one of the following approaches:

That which is not expressly prohibited is permitted.

That which is not expressly permitted is prohibited.

It is strongly recommended that y o u take the latte r, and safer, approach to all of your ﬁlter set designs.

Working with IP ﬁlters and ﬁlter sets

This section covers IP ﬁlters and ﬁlter sets. For working with IPX ﬁlters and ﬁlter sets, see “IPX ﬁlters” on

page 14-21.

S y s tem

Configuration

M a i n

Filter

Sets

IP Filter Sets

To work with ﬁlters and ﬁlter sets, begin by accessing the ﬁlter set screens.

Note: Make sure you understand how ﬁlters work before attempting to use them. Read the section “About

ﬁlters and ﬁlter sets,” beginning on page 14-4.

IP Filter Sets

Display/Change IP Filter Set...

Add IP Filter Set...

Delete IP Filter Set...

Return/Enter to configure and add a new Filter Set

Set Up IP Filter Sets (Firewalls) from this and the following Menus.

The procedure for creating and maintaining ﬁlter sets is as follows:

1. Add a new ﬁlter set.

2. Create the ﬁlters for the new ﬁlter set.

Download from Www.Somanuals.com. All Manuals Search And Download.

Security 14-13

3. View, change, or delete individual ﬁlters and ﬁlter sets.

The sections below explain how to execute these steps.

Adding a ﬁlter set

You can create up to eight different custom ﬁlter sets. Each ﬁlter set can contain up to 16 output ﬁlters and up

to 16 input ﬁlters.

To add a new ﬁlter set, select Add IP Filter Set in the IP Filter Sets screen and press Return. The Add Filter Set

screen appears.

Note: There are two groups of items in the Add IP Filter Set screen, one for input ﬁlters and one for output

ﬁlters. The two groups work in essentially the same way, as you’ll see below.

Add IP Filter Set

Filter Set Name:

Filter Set 3

Display/Change Input Filter...

Add Input Filter...

Delete Input Filter...

Display/Change Output Filter...

Add Output Filter...

Delete Output Filter...

ADD FILTER SET

CANCEL

Configure the Filter Set name and its associated Filters.

Naming a new ﬁlter set

A l l n e w ﬁ lt e r sets ha v e a d e f a u l t n a me. T h e ﬁ r s t ﬁ lt e r set y o u add w ill be c a l l e d F il t er Set 1, the ne x t ﬁl t er w ill be

Filter Set 2, and so on.

To give a new ﬁlter set a different name, select Filter Set Name and enter a new name for the ﬁlter set.

To save the ﬁlter set, select ADD FILTER SET. The saved ﬁlter set is empty (contains no ﬁlters), but you can

return to it later to add ﬁlters (see “Modifying ﬁlter sets” on page 14-17). Or you can add ﬁlters to your new set

before saving it (see “Adding ﬁlters to a ﬁlter set” on page 14-14).

To leave the Add Filter Set screen without saving the new ﬁlter set select CANCEL. You are returned to the IP

Filter Sets screen.

Download from Www.Somanuals.com. All Manuals Search And Download.

14-14 User’s Reference Guide

Input and output ﬁlters—source and destination

There are two kinds of ﬁlters you can add to a ﬁlter set: input and output. Input ﬁlters check packets received

from the Internet, destined for your network. Output ﬁlters check packets transmitted from your network to the

Internet.

packet

input filter

LAN

WAN

packet

output filter

The Netopia R-Series Router

Packets in the Netopia R7200 pass through an input ﬁlter if they originate in the WAN and through an output ﬁlter if they’re

being sent out to the WAN.

The process for adding input and output ﬁlters is exactly the same. The main difference between the two

involves their reference to source and destination. From the perspective of an input ﬁlter, your local network is

the destination of the packets it checks, and the remote network is their source. From the perspective of an

output ﬁlter, your local network is the source of the packets, and the remote network is their destination.

Type of ﬁlter

Source means

Destination means

Input ﬁlter

The remote network

The local network

Output ﬁlter

The remote network

Adding ﬁlters to a ﬁlter set

In this section you’ll learn how to add an input ﬁlter to a ﬁlter set. Adding an output ﬁlter works exactly the same

way, providing you keep the different source and destination perspectives in mind.

To add an input ﬁlter, select Add Input Filter in the Add IP Filter Set screen. The Add Filter screen appears. (To

add an output ﬁlter, select Add Output Filter.)

Download from Www.Somanuals.com. All Manuals Search And Download.

Security 14-15

Add Filter

Enabled:

Forward:

Source IP Address:

Source IP Address Mask:

0.0.0.0

Dest. IP Address:

Dest. IP Address Mask:

0.0.0.0

Protocol Type:

Source Port Compare...

Source Port ID:

Dest. Port Compare...

Dest. Port ID:

No Compare

ADD THIS FILTER NOW

CANCEL

Enter the IP specific information for this filter.

1. To make the ﬁlter active in the ﬁlter set, select Enabled and toggle it to Yes. If Enabled is toggled to No, the

ﬁlter can still exist in the ﬁlter set, but it will have no effect.

2. If you want the ﬁlter to forward packets that match its criteria to the destination IP address, select Forward

and toggle it to Yes. If Forward is toggled to No, packets matching the ﬁlter’s criteria will be discarded.

3. Select Source IP Address and enter the source IP address this ﬁlter will match on. You can enter a subnet

or a host address.

4. Select Source IP Address Mask and enter a mask for the source IP address. This allows you to further

modify the way the ﬁlter will match on the source address. Enter 0.0.0.0 to force the ﬁlter to match on all

source IP addresses, or enter 255.255.255.255 to match the source IP address exclusively.

5. Select Dest. IP Address and enter the destination IP address this ﬁlter will match on. You can enter a

subnet or a host addre ss.

6. Select Dest. IP Address Mask and enter a mask for the destination IP address. This allows you to further

modify the way the ﬁlter will match on the destination address. Enter 0.0.0.0 to force the ﬁlter to match on

all destination IP addresses.

7. Select Protocol Type and enter ICMP, TCP, UDP, Any, or the number of another IP transport protocol (see

the table on page 14 -9 ).

Note: If Protocol Type is set to TCP or UDP, the settings for port comparison that you conﬁgure in steps 8

and 9 will appear. These settings only take effect if the Protocol Type is TCP or UDP.

8. Select Source Port Compare and choose a comparison method for the ﬁlter to use on a packet’s source

port number. Then select Source Port ID and enter the actual source port number to match on (see the

table on page 14-7).

9. Select Dest. Port Compare and choose a comparison method for the ﬁlter to use on a packet’s destination

port number. Then select Dest. Port ID and enter the actual destination port number to match on (see the

table on page 14-7).

Download from Www.Somanuals.com. All Manuals Search And Download.

14-16 User’s Reference Guide

10. When you are ﬁnished conﬁguring the ﬁlter, select ADD THIS FILTER NOW to save the ﬁlter in the ﬁlter set.

Select CANCEL to discard the ﬁlter and return to the Add IP Filter Set screen.

Viewing ﬁlters

To display a view-only table of input or output ﬁlters, select Display/ Change Input Filter or Display/ Change

Output Filter in the Add IP Filter Set screen.

Modifying ﬁlters

To modify a ﬁlter, select Display/ Change Input Filter or Display/ Change Output Filter in the Add IP Filter Set

screen to display a table of ﬁlters.

Select a ﬁlter from the table and press Return. The Change Filter screen appears. The parameters in this

screen are set in the same way as the ones in the Add Filter screen (see “Adding ﬁlters to a ﬁlter set” on

page 14-14).

Change Filter

Enabled:

Forward:

Source IP Address:

Source IP Address Mask:

0.0.0.0

Dest. IP Address:

Dest. IP Address Mask:

0.0.0.0

Protocol Type:

Source Port Compare...

Source Port ID:

Dest. Port Compare...

Dest. Port ID:

No Compare

Enter the IP specific information for this filter.

Deleting ﬁlters

To delete a ﬁlter, select Delete Input Filter or Delete Output Filter in the Add IP Filter Set screen to display a

table of ﬁlters.

Select the ﬁlter from the table and press Return to delete it. Press Escape to exit the table without deleting the

ﬁlter.

Viewing ﬁlter sets

To display a view-only list of ﬁlter sets, select Display/ Change IP Filter Set in the IP Filter Sets screen.

Download from Www.Somanuals.com. All Manuals Search And Download.

Security 14-17

Modifying ﬁlter sets

To modify a ﬁlter set, select Display/ Change IP Filter Set in the IP Filter Sets screen to display a list of ﬁlter

sets.

Select a ﬁlter set from the list and press Return. The Change IP Filter Set screen appears. The items in this

screen are the same as the ones in the Add Filter screen (see “Adding ﬁlters to a ﬁlter set” on page 14-14).

Change IP Filter Set

Filter Set Name:

Basic Firewall

Display/Change Input Filter...

Add Input Filter...

Delete Input Filter...

Display/Change Output Filter...

Add Output Filter...

Delete Output Filter...

Deleting a ﬁlter set

Note: If you delete a ﬁlter set, all of the ﬁlters it contains are deleted as well. To reuse any of these ﬁlters in

another set, before deleting the current ﬁlter set you’ll have to note their conﬁguration and then recreate them.

To delete a ﬁlter set, select Delete IP Filter Set in the IP Filter Sets screen to display a list of ﬁlter sets.

Select a ﬁlter set from the list and press Return to delete it. Press Escape to exit the list without deleting the

ﬁlter set.

A sample IP ﬁlter set

This section contains the settings for a ﬁlter set called Basic Firewall, which is part of the Netopia R7200’s

factory conﬁguration.

Basic Firewall blocks undesirable trafﬁc originating from the WAN (in most cases, the Internet), but forwards all

trafﬁc originating from the LAN. It follows the conservative “that which is not expressly permitted is prohibited”

approach: unless an incoming packet expressly matches one of the constituent input ﬁlters, it will not be

forwarded to the LAN.

Download from Www.Somanuals.com. All Manuals Search And Download.

14-18 User’s Reference Guide

The ﬁve input ﬁlters and one output ﬁlter that make up Basic Firewall are shown in the table below.

Input ﬁlter Input ﬁlter Input ﬁlter Input ﬁlter Input ﬁlter

Output

ﬁlter 1

Setting

Enabled

Yes

Forward

Yes

Source IP

address

0.0.0.0

TCP

0.0.0.0

TCP

0.0.0.0

TCP

0.0.0.0

UDP

0.0.0.0

Source IP

address mask

0.0.0.0

Dest. IP

address

Dest. IP

address mask

Protocol type

ICMP

N/ A

Source port

comparison

Compare

N/ A

Source port ID

N/ A

Dest. port

comparison

Equal

Greater

Than

Greater

Than

Dest. port ID

2000

6000

N/ A

1023

N/ A

Basic Firewall’s ﬁlters play the following roles.

Input ﬁlters 1 and 2: These block WAN-originated OpenWindows and X-Windows sessions. Service origination

requests for these protocols use ports 2000 and 6000, respectively. Since these are greater than 1023,

OpenWindows and X-Windows trafﬁc would otherwise be allowed by input ﬁlter 4. Input ﬁlters 1 and 2 must

precede input ﬁlter 4; otherwise they would have no effect since ﬁlter 4 would have already forwarded

OpenWindows and X-Windows trafﬁc.

Input ﬁlter 3: This ﬁlter explicitly forwards all WAN-originated ICMP trafﬁc to permit devices on the WAN to ping

devices on the LAN. Ping is an Internet service that is useful for diagnostic purposes.

Input ﬁlters 4 and 5: These ﬁlters forward all TCP and UDP trafﬁc, respectively, when the destination port is

greater than 1023. This type of trafﬁc generally does not allow a remote host to connect to the LAN using one

of the potentially intrusive Internet services, such as Telnet, FTP, and WWW.

Output ﬁlter 1: This ﬁlter forwards all outgoing trafﬁc to make sure that no outgoing connections from the LAN

are blocked.

Download from Www.Somanuals.com. All Manuals Search And Download.

Security 14-19

Basic Firewall is suitable for a LAN containing only client hosts that want to access servers on the WAN, but not

for a LAN containing servers providing services to clients on the WAN. Basic Firewall’s general strategy is to

explicitly forward WAN-originated TCP and UDP trafﬁc to ports greater than 1023. Ports lower than 1024 are the

service origination ports for various Internet services such as FTP, Telnet, and the World Wide Web (WWW).

A more complicated ﬁlter set would be required to provide WAN access to a LAN-based server. See the next

section, “Possible modiﬁcations,” for ways to allow remote hosts to use services provided by servers on the

LAN.

Possible modiﬁcations

You can modify the sample ﬁlter set Basic Firewall to allow incoming trafﬁc using the examples below. These

modiﬁcations are not intended to be combined. Each modiﬁcation is to be the only one used with Basic Firewall.

The results of combining ﬁlter set modiﬁcations can be difﬁcult to predict. It is recommended that you take

special care if you are making more than one modiﬁcation to the sample ﬁlter set.

Trusted host. To allow unlimited access by a trusted remote host with the IP address a.b.c.d (corresponding to

a numbered IP address such as 163.176.8.243), insert the following input ﬁlter ahead of the current input

ﬁlter 1:

Enabled: Yes

Forward: Yes

Source IP Address: a.b.c.d

Source IP Address Mask: 255.255.255.255

Dest. IP Address: 0.0.0.0

Dest. IP Address Mask: 0.0.0.0

Protocol Type: 0

Trusted subnet. To allow unlimited access by a trusted remote subnet with subnet address a.b.c.d

(corresponding to a numbered IP address such as 163.176.8.0) and subnet mask e.f.g.h (corresponding to a

numbered IP mask such as 255.255.255.0), insert the following input ﬁlter ahead of the current input ﬁlter 1:

Enabled: Yes

Forward: Yes

Source IP Address: a.b.c.d

Source IP Address Mask: e.f.g.h

Dest. IP Address: 0.0.0.0

Dest. IP Address Mask: 0.0.0.0

Protocol Type: 0

Download from Www.Somanuals.com. All Manuals Search And Download.

14-20 User’s Reference Guide

FTP sessions. To allow WAN-originated FTP sessions to a LAN-based FTP server with the IP address a.b.c.d

(corresponding to a numbered IP address such as 163.176.8.243), insert the following input ﬁlter ahead of the

current input ﬁlter 1:

Enabled: Yes

Forward: Yes

Source IP Address: 0.0.0.0

Source IP Address Mask: 0.0.0.0

Dest. IP Address: a.b.c.d

Dest. IP Address Mask: 255.255.255.255

Protocol Type: TCP

Source Port Comparison: No Compare

Source Port ID: 0

Dest. Port Comparison: Equal

Dest. Port ID: 21

Note: A similar ﬁlter could be used to permit Telnet or WWW access. Set the Dest. Port ID to 23 for Telnet or to

80 for WWW.

AURP tunnel. To allow an AURP tunnel between a remote AURP router with the IP address a.b.c.d

(corresponding to a numbered IP address such as 163.176.8.243) and a local AURP router (including the

Netopia R7200 itself), insert the following input ﬁlter ahead of the current input ﬁlter 1:

Enabled: Yes

Forward: Yes

Source IP Address: a.b.c.d

Source IP Address Mask: 255.255.255.255

Dest. IP Address: 0.0.0.0

Dest. IP Address Mask: 0.0.0.0

Protocol Type: UDP

Source Port Comparison: Equal

Source Port ID: 387

Dest. Port Comparison: Equal

Dest. Port ID: 387

Download from Www.Somanuals.com. All Manuals Search And Download.

Security 14-21

IPX ﬁlters

Filter Sets

(Firewalls)

IPX Filters

and Filter Sets

System

Configuration

Main

IPX packet ﬁlters work very similarly to IP packet ﬁlters. They ﬁlter data trafﬁc coming from or going to remote

IPX networks. IPX ﬁlters can be set up to forward or discard IPX packets based on a number of user-deﬁned

criteria. Like IP ﬁlters, IPX ﬁlters must be grouped in sets that are applied to the answer proﬁle or to connection

proﬁles.

IPX SAP ﬁlters are used for ﬁltering server entries not required to pass over the WAN links. When connecting to

a large IPX network via dial-up connection, the transfer of large numbers of SAP entries can consume signiﬁcant

bandwidth on the WAN link.

Note: Using SAP ﬁltering to prevent a server from being advertised does not provide security against that

server being accessed—IPX packet ﬁltering must be used for that purpose.

Setting up and using IPX ﬁlter sets is a four-step process:

1. Create the ﬁlters to use.

2. Create the ﬁlter sets to use.

3. Add ﬁlters to the ﬁlter sets.

4. Attach the ﬁlter sets to the answer proﬁle or to connection proﬁles.

You can conﬁgure IPX ﬁlters and set up IPX ﬁlter sets from the IPX Filters and Filter Sets screen.

IPX Filters and Filter Sets

Display/Change IPX Packet Filters...

Add IPX Packet Filter...

Delete IPX Packet Filter...

Display/Change IPX Packet Filter Sets...

Add IPX Packet Filter Set...

Delete IPX Packet Filter Set...

Display/Change IPX Sap Filters...

Add IPX Sap Filter...

Delete IPX Sap Filter...

Display/Change IPX Sap Filter Sets...

Add IPX Sap Filter Set...

Delete IPX Sap Filter Set...

Define your filters 1st. IPX Filter Sets refer to, but don't contain, filters.

Download from Www.Somanuals.com. All Manuals Search And Download.

14-22 User’s Reference Guide

The items in the IPX Filters and Filter Sets screen are grouped into four areas:

IPX packet ﬁlters

IPX packet ﬁlter sets

IPX SAP ﬁlters

IPX SAP ﬁlter sets

The following sections explain the items in each of these areas.

IPX packet ﬁlters

For each IPX packet ﬁlter, you can conﬁgure a set of parameters to match on the source or destination

attributes of IPX data packets coming from or going to the WAN.

Viewing and modifying packet ﬁlters

To display a view-only table of IPX packet ﬁlters, select Display/ Change IPX Packet Filters in the IPX Filters and

Filter Sets screen.

To modify any of the ﬁlters in the table, select the desired ﬁlter and press Return to go to the Change Packet

Filter screen. The parameters in this screen are the same as the ones in the Add Packet Filter screen (see the

next section).

Adding a packet ﬁlter

To add a new IPX packet ﬁlter, select Add IPX Packet Filter in the IPX Filters and Filter Sets screen and press

Return. The Add Packet Filter screen appears.

Add Packet Filter

Filter Name:

IPX Filter 1

Source Network:

Source Node Address:

Source Socket:

00000000

000000000000

0000

Destination Network:

Destination Node Address:

Destination Socket:

00000000

000000000000

0000

ADD FILTER NOW

CANCEL

Configure a new IPX Packet Filter. Finished? ADD or CANCEL to exit.

By default, the ﬁlter’s socket numbers and network and node addresses are null (all zeros). This sets the ﬁlter

to match on any IPX data packet. Conﬁgure the ﬁlter using criteria that meet your security needs.

Download from Www.Somanuals.com. All Manuals Search And Download.

Security 14-23

1. Select Filter Name and enter a descriptive name for the ﬁlter.

2. To specify a source network for the ﬁlter to match on, select Source Network and enter an IPX network

address.

3. To specify a source node for the ﬁlter to match on, select Source Node Address and enter an IPX node

address.

4. To specify a source socket for the ﬁlter to match on, select Source Socket and enter an IPX source socket

number.

5. To specify a destination network for the ﬁlter to match on, select Destination Network and enter an IPX

network address.

6. To specify a destination node for the ﬁlter to match on, select Destination Node Address and enter an IPX

node address.

7. To specify a destination socket for the ﬁlter to match on, select Destination Socket and enter an IPX

destination socket number.

8. Select ADD FILTER NOW to save the current ﬁlter. Select CANCEL to exit the Add Packet Filter screen

without saving the new ﬁlter.

Deleting a packet ﬁlter

To delete a packet ﬁlter, select Delete IPX Packet Filter in the IPX Filters and Filter Sets screen to display a

table of ﬁlters. Select a ﬁlter from the table and press Return to delete it. Press the Escape key to exit the table

without deleting the ﬁlter.

IPX packet ﬁlter sets

Before the individual ﬁlters can be used, IPX packet ﬁlters must be grouped into sets. A ﬁlter can be part of

more than one ﬁlter set.

Viewing and modifying packet ﬁlter sets

To display a table of IPX packet ﬁlter sets, select Display/ Change IPX Packet Filter Sets in the IPX Filters and

Filter Sets screen.

To modify any of the ﬁlter sets in the list, select the desired ﬁlter set and press Return to go to the Change

Packet Filter Set screen. The parameters in this screen are the same as the ones in the Add Packet Filter Set

screen (see the next section).

Adding a packet ﬁlter set

To add a new IPX packet ﬁlter set, select Add IPX Packet Filter Set in the IPX Filters and Filter Sets screen and

press Return. The Add Packet Filter Set screen appears.

Download from Www.Somanuals.com. All Manuals Search And Download.

14-24 User’s Reference Guide

Add Packet Filter Set

Filter Set Name:

Show Filters/Change Action on Match...

Append Filter...

Remove Filter...

ADD FILTER SET NOW

CANCEL

Return accepts * ESC cancels * Left/Right moves insertion point * Del deletes.

Configure an IPX Filter Set here. You must ADD FILTER SET NOW to save.

Follow these steps to conﬁgure the new packet ﬁlter set:

1. Select Filter Set Name and enter a descriptive name for the ﬁlter set.

2. To change the forwarding action of ﬁlters in the ﬁlter set, select Show Filters/ Change Action on Match

and press Return. The Show Filters/ Change Actions on Match screen appears.

Show Filters/Change Actions on Match

Filter Name---------------------Forward

Filter 1

Filter 2

<<NO MATCH>>

Yes

Set whether filters forward or drop matching packets here.

Select a ﬁlter and toggle the packet forwarding action to Yes (forward) or No (discard).

Download from Www.Somanuals.com. All Manuals Search And Download.

Security 14-25

3. To add a ﬁlter to the ﬁlter set, select Append Filter to display a table of ﬁlters. Select a ﬁlter from the table

and press Return to add it to the ﬁlter set. The default action of newly added ﬁlters is to not forward

packets that match their criteria.

To exit the table without adding the ﬁlter, press Escape.

4. To remove a ﬁlter from the ﬁlter set, select Remove Filter to display a table of appended ﬁlters. Select a

ﬁlter from the table and press Return to remove it from the set. To exit the table without removing the ﬁlter,

press Escape.

5. Select ADD FILTER SET NOW to save the current ﬁlter set. Select CANCEL to exit the Add Packet Filter Set

screen without saving the new ﬁlter set.

Deleting a packet ﬁlter set

To delete a packet ﬁlter set, select Delete IPX Packet Filter Set in the IPX Filters and Filter Sets screen to

display a list of ﬁlter sets. Select a ﬁlter set from the list and press Return to delete it. Press the Escape key to

exit the list without deleting the ﬁlter set.

Note: Deleting a ﬁlter set does not delete the ﬁlters in that set. However, the ﬁlters in the deleted set are no

longer in effect (unless they are part of another set). The deleted set will no longer appear in the answer proﬁle

or any connection proﬁles to which it was added.

IPX SAP ﬁlters

For each IPX SAP ﬁlter, you can conﬁgure a set of parameters to match on certain attributes of IPX SAP packet

entries. The ﬁlters check IPX SAP packets for entries that match and then acts on those entries. The SAP

packets themselves are always allowed to continue after their entries are checked.

The purpose of ﬁltering SAP packets is not to make your network more secure, but to add efﬁciency to network

bandwidth use. Filtering SAP packets may reduce the size of SAP packets and SAP bindery tables by removing

unwanted entries.

Viewing and modifying SAP ﬁlters

To display a table of IPX SAP ﬁlters, select Display/ Change IPX SAP Filters in the IPX Filters and Filter Sets

screen.

To modify any of the ﬁlters in the table, select the desired ﬁlter and press Return. The Change SAP Filter screen

appears. The parameters in this screen are the same as the ones in the Add SAP Filter screen (see the next

section).

Download from Www.Somanuals.com. All Manuals Search And Download.

14-26 User’s Reference Guide

Adding a SAP ﬁlter

To add a new IPX SAP ﬁlter, select Add IPX SAP Filter in the IPX Filters and Filter Sets screen and press Return.

The Add SAP Filter screen appears.

Add Sap Filter

Filter Name:

Server Name:

Socket:

Type:

0000

IPX Network:

IPX Node Address:

00000000

000000000000

ADD FILTER NOW

CANCEL

Configure a new IPX SAP Filter. Finished? ADD or CANCEL to exit.

By default, the ﬁlter’s socket and type numbers and network and node addresses are null (all zeros). This sets

the ﬁlter to match on any IPX SAP packet entry. Conﬁgure the ﬁlter using criteria that meet your needs.

Follow these steps to conﬁgure the new SAP ﬁlter:

1. Select Filter Name and enter a descriptive name for the ﬁlter.

2. To specify a server name for the ﬁlter to match on, select Server Name and enter the name of an IPX

server. You can use the wildcard characters * (asterisk) and ? (question mark). Use * to match any string,

including a null string (no characters), and ? to match any single character in the server’s name. For

example, the ﬁlter could match on the server name “NETOPIA” with “NETO*”, “NETO?IA”, and “NETOPIA*”.

3. To specify a socket for the ﬁlter to match on, select Socket and enter an IPX socket number.

4. To specify a type number for the ﬁlter to match on, select Type and enter an IPX type number.

5. To specify an IPX network address for the ﬁlter to match on, select IPX Network and enter an IPX network

address.

6. To specify an IPX node address for the ﬁlter to match on, select IPX Node Address and enter an IPX node

address.

7. Select ADD FILTER NOW to save the current ﬁlter. Select CANCEL to exit the Add SAP Filter screen without

saving the new ﬁlter.

Deleting a SAP ﬁlter

To delete a SAP ﬁlter, select Delete IPX SAP ﬁlter in the IPX Filters and Filter Sets screen to display a table of

ﬁlters. Select a ﬁlter from the table and press Return to delete it. Press Escape to exit the table without deleting

the ﬁlter.

Download from Www.Somanuals.com. All Manuals Search And Download.

Security 14-27

IPX SAP ﬁlter sets

Before IPX SAP ﬁlters can be used, they must be grouped into sets. A SAP ﬁlter can be part of more than one

ﬁlter set.

Viewing and modifying SAP ﬁlter sets

To display a table of IPX SAP ﬁlter sets, select Display/ Change IPX SAP Filter Sets in the IPX Filters and Filter

Sets screen to display a list of ﬁlter sets.

To modify any of the ﬁlter sets in the list, select the desired ﬁlter set and go to the Change SAP Filter Set

screen. The parameters in this screen are the same as the ones in the Add SAP Filter Set screen (see the next

section).

Adding a SAP ﬁlter set

To add a new IPX SAP ﬁlter set, select Add IPX SAP Filter Set in the IPX Filters and Filter Sets screen. The Add

SAP Filter Set screen appears.

Add SAP Filter Set

Filter Set Name:

Show Filters/Change Action on Match...

Append Filter...

Remove Filter...

ADD FILTER SET NOW

CANCEL

Configure an IPX Filter Set here. You must ADD FILTER SET NOW to save.

Follow these steps to conﬁgure the new SAP ﬁlter set:

1. Select Filter Set Name and enter a descriptive name for the ﬁlter set.

2. To change the forwarding action of ﬁlters in the ﬁlter set, select Show Filters/ Change Action on Match

and press Return. The Show Filters/ Change Actions on Match screen appears.

Download from Www.Somanuals.com. All Manuals Search And Download.

14-28 User’s Reference Guide

Show Filters/Change Actions on Match

Filter Name---------------------Forward

Filter 1

Filter 2

<<NO MATCH>>

Yes

Set whether filters forward or drop matching packets here.

Select a ﬁlter and toggle the entry forwarding action to Yes (forward) or No (discard).

3. To add a ﬁlter to the ﬁlter set, select Append Filter in the Add SAP Filter Set screen to display a table of

ﬁlters. Select a ﬁlter from the table and press Return to add it to the ﬁlter set. The default action of newly

added ﬁlters is to not forward (discard) packet entries that match their criteria.

To exit the table without adding the ﬁlter, press Escape.

4. To remove a ﬁlter from the ﬁlter set, select Remove Filter in the Add SAP Filter Set screen to display a table

of appended ﬁlters. Select a ﬁlter from the table and press Return to remove it from the set. To exit the

table without removing the ﬁlter, press Escape.

5. To save the current ﬁlter set, select ADD FILTER SET NOW in the Add SAP Filter Set screen. Select

CANCEL to exit the Add SAP Filter Set screen without saving the new ﬁlter set.

Deleting a SAP ﬁlter set

To delete a SAP ﬁlter set, select Delete IPX SAP Filter Set in the IPX Filters and Filter Sets screen to display a

list of ﬁlter sets. Select a ﬁlter set from the list and press Return to delete it. Press Escape to exit the list

without deleting the ﬁlter set.

Note: Deleting a ﬁlter set does not delete the ﬁlters in that set. However, the ﬁlters in the deleted set are no

longer in effect (unless they are part of another set). The deleted set will no longer appear in the answer proﬁle

or any connection proﬁles to which it was added.

Download from Www.Somanuals.com. All Manuals Search And Download.

Security 14-29

Firewall tutorial

General ﬁrewall terms

Filter rule: A ﬁlter set is comprised of individual ﬁlter rules.

Filter set: A grouping of individual ﬁlter rules.

Firewall: A component or set of components that restrict access between a protected network and the Internet,

or between two networks.

Host: A workstation on the network.

Packet: Unit of communication on the Internet.

Packet ﬁlter: Packet ﬁlters allow or deny packets based on source or destination IP addresses, TCP or UDP

ports, or the TCP ACK bit.

Port: A number that deﬁnes a particular type of service.

Basic IP packet components

All IP packets contain the same basic header information, as follows:

Source IP Address

Destination IP Address

Source Port

Destination Port

Protocol

163.176.132.18

163.176.4.27

2541

TCP

ACK Bit

Yes

DATA

User Data

This header information is what the packet ﬁlter uses to make ﬁltering decisions. It is important to note that a

packet ﬁlter does not look into the IP data stream (the User Data from above) to make ﬁltering decisions.

Basic protocol types

TCP: Transmission Control Protocol. TCP provides reliable packet delivery and has a retransmission

mechanism (so packets are not lost). RFC 793 is the speciﬁcation for TCP.

UDP: User Datagram Protocol. Unlike TCP, UDP does not guarantee reliable, sequenced packet delivery. If data

does not reach its destination, UDP does not retransmit the data. RFC 768 is the speciﬁcation for UDP.

There are many more ports deﬁned in the Assigned Addresses RFC. The table that follows shows some of these

port assignments.

Download from Www.Somanuals.com. All Manuals Search And Download.

14-30 User’s Reference Guide

Example TCP/UDP Ports

TCP Port

20/ 21

Service

FTP

Telnet

SMTP

WWW

News

144

UDP Port

Service

161

SNMP

TFTP

387

AURP

Firewall design rules

There are two basic rules to ﬁrewall design:

“What is not explicitly allowed is denied.”

and

“What is not explicitly denied is allowed.”

The ﬁrst rule is far more secure, and is the best approach to ﬁrewall design. It is far easier (and more secure)

to allow in or out only certain services and deny anything else. If the other rule is used, you would have to ﬁgure

out everything that you want to disallow, now and in the future.

Firewall Logic

Firewall design is a test of logic, and ﬁlter rule ordering is critical. If a packet is forwarded through a series of

ﬁlter rules and then the packet matches a rule, the appropriate action is taken. The packet will not forward

through the remainder of the ﬁlter rules.

For example, if you had the following ﬁlter set...

Allow WWW access;

Allow FTP access;

Allow SMTP access;

Deny all other packets.

Download from Www.Somanuals.com. All Manuals Search And Download.

Security 14-31

and a packet goes through these rules destined for FTP, the packet would forward through the ﬁrst rule (WWW),

go through the second rule (FTP), and match this rule; the packet is allowed through.

If you had this ﬁlter set for example....

Allow WWW access;

Allow FTP access;

Deny FTP access;

Deny all other packets.

and a packet goes through these rules destined for FTP, the packet would forward through the ﬁrst ﬁlter rule

(WWW), match the second rule (FTP), and the packet is allowed through. Even though the next rule is to deny all

FTP trafﬁc, the FTP packet will never make it to this rule.

Binary representation

It is easiest when doing ﬁltering to convert the IP address and mask in question to binary. This will allow you to

perform the logical AND to determine whether a packet matches a ﬁlter rule.

Logical AND function

When a packet is compared (in most cases) a logical AND function is performed. First the IP addresses and

subnet masks are converted to binary and then combined with AND. The rules for the logical use of AND are as

follows:

0 AND 0 = 0

0 AND 1 = 0

1 AND 0 = 0

1 AND 1 = 1

For example:

Filter rule:

Deny

IP: 163.176.1.15BINARY: 10100011.10110000.00000001.00001111

Mask: 255.255.255.255BINARY:11111111.11111111.11111111.11111111

Incoming Packet:

IP 163.176.1.15BINARY: 10100011.10110000.00000001.00001111

If you put the incoming packet and subnet mask together with AND, the result is:

10100011.10110000.00000001.00001111

which matches the IP address in the ﬁlter rule and the packet is denied.

Download from Www.Somanuals.com. All Manuals Search And Download.

14-32 User’s Reference Guide

Implied rules

With a given set of ﬁlter rules, there is an Implied rule that may or may not be shown to the user. The implied

rule tells the ﬁlter set what to do with a packet that does not match any of the ﬁlter rules. An example of implied

rules is as follows:

Implied

Meaning

Y+Y+Y=N

N+N+N=Y

Y+N+Y=N

If all ﬁlter rules are YES, the implied rule is NO.

If all ﬁlter rules are NO, the implied rule is YES.

If a mix of YES and NO ﬁlters, the implied rule is NO.

Established connections

The TCP header contains one bit called the ACK bit (or TCP Ack bit). This ACK bit appears only with TCP, not

UDP. The ACK bit is part of the TCP mechanism that guarantees the delivery of data. The ACK bit is set

whenever one side of a connection has received data from the other side. Only the ﬁrst TCP packet will not have

the ACK bit set; once the TCP connection is in place, the remainder of the TCP packets with have the ACK bit

set.

The ACK bit is helpful for ﬁrewall design and reduces the number of potential ﬁlter rules. A ﬁlter rule could be

created just allowing incoming TCP packets with the ACK bit set, since these packets had to be originated from

the local network.

Example IP ﬁlter set screen

This is an example of the Netopia IP ﬁlter set screen:

Change Filter

Enabled:

Forward:

Yes

Source IP Address:

Source IP Address Mask:

0.0.0.0

Dest. IP Address:

Dest. IP Address Mask:

0.0.0.0

Protocol Type:

TCP

Source Port Compare...

Source Port ID:

No Compare

Dest. Port Compare...

Dest. Port ID:

Equal

2000

Established TCP Conns. Only:

Return/Enter accepts * Tab toggles * ESC cancels.

Enter the IP specific information for this filter.

Download from Www.Somanuals.com. All Manuals Search And Download.

Security 14-33

Filter basics

In the source or destination IP address ﬁelds, the IP address that is entered must be the network address of

the subnet. A host address can be entered, but the applied subnet mask must be 32 bits (255.255.255.255).

The Netopia R7200 has the ability to compare source and destination TCP or UDP ports. These options are as

follows:

Item

What it means

No Compare

Not Equal To

Less Than

Does not compare TCP or UDP port

Matches any port other than what is deﬁned

Anything less than the port deﬁned

Any port less than or equal to the port deﬁned

Matches only the port deﬁned

Less Than or Equal

Equal

Greater Than or Equal Matches the port or any port greater

Greater Than Matches anything greater than the port deﬁned

Example network

Incoming

Packet Filter

Netopia

Internet

DATA

IP: 200.1.1.??

Download from Www.Somanuals.com. All Manuals Search And Download.

14-34 User’s Reference Guide

Example ﬁlters

Example 1

Filter Rule:

200.1.1.0

(Source IP Network Address)

(Source IP Mask)

255.255.255.128

Forward = No

(What happens on match)

Incoming packet has the source address of 200.1.1.28

IP Address

200.1.1.28

AND

Binary Representation

00011100

(Source address in incoming IP packet)

255.255.255.128 10000000

00000000

(Perform the logical AND)

(Logical AND result)

This incoming IP packet has a source IP address that matches the network address in the Source IP Address

ﬁeld (00000000) in the Netopia R7200. This will not forward this packet.

Example 2

Filter Rule:

200.1.1.0

(Source IP Network Address)

(Source IP Mask)

255.255.255.128

Forward = No

(What happens on match)

Incoming packet has the source address of 200.1.1.184.

IP Address

200.1.1.184

AND

Binary Representation

10111000

(Source address in incoming IP packet)

255.255.255.128 10000000

10000000

(Perform the logical AND)

(Logical AND result)

Download from Www.Somanuals.com. All Manuals Search And Download.

Security 14-35

This incoming IP packet (10000000) has a source IP address that does not match the network address in the

Source IP Address ﬁeld (00000000) in the Netopia R7200. This rule will forward this packet because the

packet does not match.

Example 3

Filter Rule:

200.1.1.96

(Source IP Network Address)

(Source IP Mask)

255.255.255.240

Forward = No

(What happens on match)

Incoming packet has the source address of 200.1.1.184.

IP Address

200.1.1.184

AND

Binary Representation

10111000

(Source address in incoming IP packet)

255.255.255.240 11110000

10110000

(Perform the logical AND)

(Logical AND result)

Since the Source IP Network Address in the Netopia R7200 is 01100000, and the source IP address after the

logical AND is 1011000, this rule does not match and this packet will be forwarded.

Example 4

Filter Rule:

200.1.1.96

(Source IP Network Address)

(Source IP Mask)

255.255.255.240

Forward = No

(What happens on match)

Incoming packet has the source address of 200.1.1.104.

IP Address

200.1.1.104

AND

Binary Representation

01101000

(Source address in incoming IP packet)

255.255.255.240 11110000

01100000

(Perform the logical AND)

(Logical AND result)

Download from Www.Somanuals.com. All Manuals Search And Download.

14-36 User’s Reference Guide

Since the Source IP Network Address in the Netopia R7200 is 01100000, and the source IP address after the

logical AND is 01100000, this rule does match and this packet will not be forwarded.

Example 5

Filter Rule:

200.1.1.96

(Source IP Network Address)

(Source IP Mask)

255.255.255.255

Forward = No

(What happens on match)

Incoming packet has the source address of 200.1.1.96.

IP Address

200.1.1.96

AND

Binary Representation

01100000

(Source address in incoming IP packet)

255.255.255.255 11111111

01100000

(Perform the logical AND)

(Logical AND result)

Since the Source IP Network Address in the Netopia R7200 is 01100000, and the source IP address after the

logical AND is 01100000, this rule does match and this packet will not be forwarded. This rule masks off a

single IP address.

Download from Www.Somanuals.com. All Manuals Search And Download.

Utilities and Diagnostics 15-1

Chapter 15

Utilities and Diagnostics

A number of utilities and te s ts are a v a i l a b l e for s y s tem d i a g no s t i c a nd control purposes.

T h is s ect i on cov e r s the following topic s :

“Ping” on page 15 -2

“Tr a ce R oute” on page 15 -4

“Te l n e t c l i e nt” on page 15 -5

“Di s c onnect T e l n e t conso l e s ess i on” on page 15 -6

“Factory defaults” on page 15-6

“Tr a ns f e rring conﬁguration and ﬁrmware ﬁles with T FT P ” on page 15 -7

“Transferring conﬁguration and ﬁrmware ﬁles with XMODEM” on page 15-9

“Restarting the system” on page 15-12

Note: These utilities and tests are accessible only through the console-based management screens. See

Chapter 6, “Console-Based Management,” for information on accessing the console-based management

screens.

You access the Utilities & Diagnostics screens from the Main Menu.

Utilities & Diagnostics

Ping...

Trace Route...

Telnet...

Disconnect Telnet Console Session...

Trivial File Transfer Protocol (TFTP)...

X-Modem File Transfer...

Revert to Factory Defaults...

Restart System...

Download from Www.Somanuals.com. All Manuals Search And Download.

15-2 User’s Reference Guide

Ping

The Netopia R7200 includes a standard Ping test utility. A Ping test generates IP packets destined for a

particular (Ping-capable) IP host. Each time the target host receives a Ping packet, it returns a packet to the

original sender.

Ping allows you to see whether a particular IP destination is reachable from the Netopia R7200. You can also

ascertain the quality and reliability of the connection to the desired destination by studying the Ping test’s

statistics.

In the Utilities & Diagnostic screen, select Ping and press Return. The ICMP Ping screen appears.

ICMP Ping

Name of Host to Ping:

Packets to Send:

Data Size:

Delay (seconds):

START PING

Status:

Packets Out:

Packets In:

Packets Lost:

Round Trip Time

(Min/Max/Avg):

0 (0%)

0.000 / 0.000 / 0.000 secs

Enter the IP Address/Domain Name of a host to ping.

Send ICMP Echo Requests to a network host.

To conﬁgure and initiate a Ping test, follow these steps:

1. Select Name of Host to Ping and enter the destination domain name or IP address.

2. Select Packets to Send to change the default setting. This is the total number of packets to be sent during

the Ping test. The default setting is adequate in most cases, but you can change it to any value from 1 to

4,294,967,295.

3. Select Data Size to change the default setting. This is the size, in bytes, of each Ping packet sent. The

default setting is adequate in most cases, but you can change it to any value from 0 (only header data) to

1664.

4. Select Delay (seconds) to change the default setting. The delay, in seconds, determines the time between

Ping packets sent. The default setting is adequate in most cases, but you can change it to any value from

0 to 4,294,967. A delay of 0 seconds forces packets to be sent immediately, one after another.

5. Select START PING and press Return to begin the Ping test. While the test is running, the START PING

item becomes STOP PING. To manually stop the Ping test, select STOP PING and press Return or Escape.

While the Ping test is running and when it is over, a status ﬁeld and a number of statistical items are active on

the screen. These are described below.

Download from Www.Somanuals.com. All Manuals Search And Download.

Utilities and Diagnostics 15-3

Status: The current status of the Ping test. This item can display the status messages shown in the able below:

Message

Description

Resolving host name

Can’t resolve host name

Pinging

Finding the IP address for the domain name-style address

IP address can’t be found for the domain name–style address

Ping test is in progress

Complete

Ping test was completed

Cancelled by user

Ping test was cancelled manually

Destination unreachable from

w.x.y.z

Ping test was able to reach the router with IP address w.x.y.z,

which reported that the test could not reach the ﬁnal

destination

Couldn’t allocate packet buffer

Couldn’t open ICMP port

Couldn’t proceed with Ping test; try again or reset system

Packets Out: The number of packets sent by the Ping test.

Packets In: The number of return packets received from the target host. To be considered on time, return

packets are expected back before the next packet in the sequence of Ping packets is sent. A count of the

number of late packets appears in parentheses to the right of the Packets In count.

In the example that follows, a Netopia R7200 is sending Ping packets to another host, which responds with

return Ping packets. Note that the second return Ping packet is considered to be late because it is not received

by the Netopia R7200 before the third Ping packet is sent. The ﬁrst and third return Ping packets are on time.

time

send Ping packet 1

Netopia

receive Ping packet 1

host

send return Ping packet 1

receive return Ping packet 1

Netopia

send Ping packet 2

receive Ping packet 2

send return Ping packet 2

host

send Ping packet 3

Netopia

receive return Ping packet 2

receive Ping packet 3

host

send return Ping packet 3

receive return Ping packet 3

Netopia

Download from Www.Somanuals.com. All Manuals Search And Download.

15-4 User’s Reference Guide

Packets Lost: The number of packets unaccounted for, shown in total and as a percentage of total packets

sent. This statistic may be updated during the Ping test, and may not be accurate until after the test is over.

However, if an escalating one-to-one correspondence is seen between Packets Out and Packets Lost, and

Packets In is noticeably lagging behind Packets Out, the destination is probably unreachable. In this case, use

STOP PING.

Round Trip Time (Min/ Max/ Avg): Statistics showing the minimum, maximum, and average number of

seconds elapsing between the time each Ping packet was sent and the time its corresponding return Ping

packet was received.

The time-to-live (TTL) value for each Ping packet sent by the Netopia R7200 is 255, the maximum allowed. The

TTL value deﬁnes the number of IP routers that the packet can traverse. Ping packets that reach their TTL value

are dropped, and a “destination unreachable” notiﬁcation is returned to the sender (see the table on the

previous page). This ensures that no inﬁnite routing loops occur. The TTL value can be set and retrieved using

the SNMP MIB-II ip group’s ipDefaultTTL object.

Trace Route

You can count the number of routers between your Netopia Router and a given destination with the Trace Route

utility.

In the Statistics & Diagnostics screen, select Trace Route and press Return. The Trace Route screen appears.

Trace Route

Host Name or IP Address:

Maximum Hops:

Timeout (seconds):

Use Reverse DNS:

Yes

START TRACE ROUTE

Enter the IP Address/Domain Name of a host.

Trace route to a network host.

To trace a route, follow these steps:

1. Select Host Name or IP Address and enter the name or address of the destination you want to trace.

2. Select Maximum Hops to set the maximum number of routers to count between the Netopia Router and

the destination router, up to the maximum of 64. The default is 30 hops.

3. Select Timeout (seconds) to set when the trace will timeout for each hop, up to 10 seconds. The default is

3 seconds.

Download from Www.Somanuals.com. All Manuals Search And Download.

Utilities and Diagnostics 15-5

4. Select Use Reverse DNS to learn the names of the routers between the Netopia Router and the destination

router. The default is Yes.

5. Select START TRACE ROUTE and press Return. A scrolling screen will appear that lists the destination,

number of hops, IP addresses of each hop, and DNS names, if selected.

6. Cancel the trace by pressing Escape. Return to the Trace Route screen by pressing Escape twice.

Telnet client

The Telnet client mode replaces the normal menu mode. Telnet sessions can be cascaded, that is, you can

initiate a Telnet client session when using a Telnet console session. To activate the Telnet client, select Telnet

from the Utilities & Diagnostics menu.

The Telnet client screen appears.

Telnet

Host Name or IP Address:

Control Character to Suspend:

START A TELNET SESSION

Enter the IP Address/Domain Name of a host.

Enter the host name or the IP address in dotted decimal format of the machine you want to Telnet into and

press Return.

Either accept the default control character “Q” used to suspend the Telnet session, or type a different one.

START A TELNET SESSION becomes highlighted.

Press Return and the Telnet session will be initiated.

To suspend the session, press Control-Q or whatever other control character you speciﬁed.

Two new options will appear in the Telnet screen (not shown):

Resume Suspended Session – select if you want to go back to your Telnet session

Terminate Suspended Session – select if you want to end the session

Download from Www.Somanuals.com. All Manuals Search And Download.

15-6 User’s Reference Guide

Disconnect Telnet console session

If you want to close your Telnet console session, select Disconnect Telnet Console Session and press Return.

A dialog box appears asking you to cancel or continue your selection.

Utilities & Diagnostics

+------------------------------------------------------+

| Are you sure you want to close this Console Session? |

CANCEL

CONTINUE

+------------------------------------------------------+

X-Modem File Transfer...

Revert to Factory Defaults...

Restart System...

If you select Continue, you will immediately terminate your session.

Factory defaults

You can reset the Netopia R7200 to its factory default settings. In the Utilities & Diagnostics screen, select

Revert to Factory Defaults and press Return. Select CONTINUE in the dialog box and press Return. The

Netopia R7200 will re boot and i ts s ett i ngs will r e turn to the factory defaults, deleting your conﬁgurations.

In an emergency, you can also use the Reset switch to return the router to its factory default settings. Call

Netopia Technical Support for instructions on using the Reset switch.

Note: Reset to factory defaults with caution. You will need to reconﬁgure all of your settings in the router.

If you lose your password and are unable to access the console screens, you can manually reset the router in

an emergency. See Appendix A, “Troubleshooting.”

Download from Www.Somanuals.com. All Manuals Search And Download.

Utilities and Diagnostics 15-7

Transferring conﬁguration and ﬁrmware ﬁles with TFTP

Trivial File Transfer Protocol (TFTP) is a method of transferring data over an IP network. TFTP is a client-server

application, with the router as the client. To use the Netopia R7200 as a TFTP client, a TFTP server must be

available. Netopia, Inc., has a public access TFTP server on the Internet where you can obtain the latest

ﬁrmware versions.

To use TFTP, select Trivial File Transfer Protocol (TFTP) in the Statistics & Diagnostics screen and press

Return. The Trivial File Transfer Protocol (TFTP) screen appears.

Trivial File Transfer Protocol (TFTP)

TFTP Server Name:

Firmware File Name:

GET ROUTER FIRMWARE FROM SERVER...

GET WAN MODULE FIRMWARE FROM SERVER...

Config File Name:

GET CONFIG FROM SERVER...

SEND CONFIG TO SERVER...

TFTP Transfer State -- Idle

TFTP Current Transfer Bytes -- 0

The sections below describe how to update the Netopia R7200’s ﬁrmware and how to download and upload

conﬁguration ﬁles.

Updating ﬁrmware

Firmware updates may be available periodically from Netopia or from a site maintained by your organization’s

network administrator.

There are two types of ﬁrmware in the Netopia R7200 SDSL Router: router ﬁrmware and WAN module ﬁrmware.

The router ﬁrmware governs how the router communicates with your network and the WAN module; the WAN

module ﬁrmware governs how the WAN module communicates with the remote site. WAN module ﬁrmware is

included on your Netopia CD for XMODEM transfer and later updates will be available on the Netopia website.

Router ﬁrmware updates are also periodically posted on the Netopia website.

To update either the router’s or the internal WAN module’s ﬁrmware, follow these steps:

Select TFTP Server Name and enter the server name or IP address of the TFTP server you will use. The

server name or IP address is available from the site where the server is located.

Select Firmware File Name and enter the name of the ﬁle you will download. The name of the ﬁle is

available from the site where the server is located. You may need to enter a ﬁle path along with the ﬁle

name (for example, bigroot/ conﬁg/ myﬁle).

Download from Www.Somanuals.com. All Manuals Search And Download.

15-8 User’s Reference Guide

Select GET ROUTER FIRMWARE FROM SERVER or GET WAN MODULE FIRMWARE FROM SERVER and

press Return. You will see the following dialog box:

+-----------------------------------------------------------+

Are you sure you want to read the firmware now?

The device will reset when the transfer is complete. |

CANCEL

CONTINUE

+-----------------------------------------------------------+

Select CANCEL to exit without downloading the ﬁle, or select CONTINUE to download the ﬁle. The system

will reset at the end of the ﬁle transfer to put the new ﬁrmware into effect. While the system resets, the

LEDs will blink on and off.

Caution!

Be sure the ﬁrmware update you load onto your router is the correct version for your particular model.

Some models do not support all ﬁrmware versions. Loading an incorrect ﬁrmware version can permanently

damage the unit.

Do not manually power down or reset the Netopia R7200 while it is automatically resetting or it could be

damaged.

If you choose to download the ﬁrmware, the TFTP Transfer State item will change from Idle to Reading

Firmware. The TFTP Current Transfer Bytes item will reﬂect the number of bytes transferred.

Downloading conﬁguration ﬁles

The Netopia R7200 can be conﬁgured by downloading a conﬁguration ﬁle using TFTP. Once downloaded, the ﬁle

reconﬁgures all of the router’s parameters as if someone had manually done so through the console port.

To download a conﬁguration ﬁle, follow these steps:

Select TFTP Server Name and enter the server name or IP address of the TFTP server you will use. The

server name or IP address is available from the site where the server is located.

Select Conﬁg File Name and enter the name of the ﬁle you will download. The name of the ﬁle is available

from the site where the server is located. You may need to enter a ﬁle path along with the ﬁle name (for

example, bigroot/ conﬁg/ myﬁle).

Download from Www.Somanuals.com. All Manuals Search And Download.

Utilities and Diagnostics 15-9

Select GET CONFIG FROM SERVER and press Return. You will see the following dialog box:

+-----------------------------------------------------------+

Are you sure you want to read the configuration now? |

The device will reset when the transfer is complete. |

CANCEL

CONTINUE

+-----------------------------------------------------------+

Select CANCEL to exit without downloading the ﬁle, or select CONTINUE to download the ﬁle. The system

will reset at the end of the ﬁle transfer to put the new conﬁguration into effect.

If you choose to download the conﬁguration ﬁle, the TFTP Transfer State item will change from Idle to

R e ad i ng Conﬁg . T h e TFTP Curr e nt T r ans f e r B y t es item will reﬂect the number of bytes transferred.

Uploading conﬁguration ﬁles

Using TFTP, you can send a ﬁle containing a snapshot of the router’s current conﬁguration to a TFTP server. The

ﬁle can then be downloaded by a different Netopia R7200 unit to conﬁgure its parameters (see “Downloading

conﬁguration ﬁles” on page 15-8). This is useful for conﬁguring a number of routers with identical parameters or

just for creating conﬁguration backup ﬁles.

Uploading a ﬁle can also be useful for troubleshooting purposes. The uploaded conﬁguration ﬁle can be tested

on a different Netopia R7200 unit by Netopia or your network administrator.

To upload a conﬁguration ﬁle, follow these steps:

1. Select TFTP Server Name and enter the server name or IP address of the TFTP server you will use. The

server name or IP address is available from the site where the server is located.

2. Select Conﬁg File Name and enter a name for the ﬁle you will upload. The ﬁle will appear with the name you

choose on the TFTP server. You may need to enter a ﬁle path along with the ﬁle name (for example,

Mypc/ Netopia/ myﬁle).

3. Select SEND CONFIG TO SERVER and press Return. Netopia will begin to transfer the ﬁle.

4. The TFTP Transfer State item will change from Idle to Writing Conﬁg. The TFTP Current Transfer Bytes

item will reﬂect the number of bytes transferred.

Transferring conﬁguration and ﬁrmware ﬁles with XMODEM

You can transfer conﬁguration and ﬁrmware ﬁles with XMODEM through the Netopia R7200’s console port. Be

sure your terminal emulation program supports XMODEM ﬁle transfers.

To go to the X-Modem File Transfer screen, select it in the Utilities & Diagnostics menu.

Note: The X-Modem File Transfer screen is only available if you are connected via the Console port.

Download from Www.Somanuals.com. All Manuals Search And Download.

15-10 User’s Reference Guide

X-Modem File Transfer

Send Firmware to Netopia...

Send Config to Netopia...

Receive Config from Netopia...

Send Firmware to Netopia WAN module...

WAN module Firmware Status:

IDLE

Updating ﬁrmware

Firmware updates may be available periodically from Netopia or from a site maintained by your organization’s

network administration. The procedure below applies whether you are using the console or the WAN interface

module.

Follow these steps to update the Netopia R7200’s ﬁrmware:

1. Make sure you have the ﬁrmware ﬁle on disk and know the path to its location.

2. Select Send Firmware to Netopia (or Send Firmware to Netopia WAN module) and press Return. The

following dialog box appears:

+--------------------------------------------------------------------+

| Are you sure you want to send a firmware file to your Netopia?

| If so, when you hit Return/Enter on the CONTINUE button, you will |

| have 10 seconds to begin the transfer from your terminal program. |

CANCEL

CONTINUE

+--------------------------------------------------------------------+

3. Select CANCEL to exit without downloading the ﬁle, or select CONTINUE to download the ﬁle.

If you choose CONTINUE, you will have ten seconds to use your terminal emulation software to initiate an

XMODEM transfer of the ﬁrmware ﬁle. If you fail to initiate the transfer in that time, the dialog box will

disappear and the terminal emulation software will inform you of the transfer’s failure. You can then try

again.

Download from Www.Somanuals.com. All Manuals Search And Download.

Utilities and Diagnostics 15-11

The system will reset at the end of a successful ﬁle transfer to put the new ﬁrmware into effect. While the

system resets, the LEDs will blink on and off.

Caution!

Do not manually power down or reset the Netopia R7200 while it is automatically resetting or it could be

damaged.

Downloading conﬁguration ﬁles

The Netopia R7200 can be conﬁgured by downloading a conﬁguration ﬁle. The downloaded ﬁle reconﬁgures all

of the Router’s parameters.

Conﬁguration ﬁles are available from a site maintained by your organization’s network administrator or from

your local site (see “Uploading conﬁguration ﬁles,” below).

Follow these steps to download a conﬁguration ﬁle:

1. Make sure you have the conﬁguration ﬁle on disk and know the path to its location.

2. Select Send Conﬁg to Netopia and press Return. The following dialog box appears:

+--------------------------------------------------------------------+

| Do you want to send a saved configuration to your Netopia?

| If so, when you hit Return/Enter on the CONTINUE button, you will |

| have 10 seconds to begin the transfer from your terminal program. |

CANCEL

CONTINUE

+--------------------------------------------------------------------+

3. Select CANCEL to exit without downloading the ﬁle, or select CONTINUE to download the ﬁle.

If you choose CONTINUE, you will have ten seconds to use your terminal emulation software to initiate an

XMODEM transfer of the conﬁguration ﬁle. If you fail to initiate the transfer in that time, the dialog box will

disappear and the terminal emulation software will inform you of the transfer’s failure. You can then try

again.

T h e s y s tem w ill r e set at the end of a success f ul ﬁle tr a ns f e r to put the new con ﬁ gur a t i on into effect.

Uploading conﬁguration ﬁles

A ﬁle containing a snapshot of the Netopia R7200’s current conﬁguration can be uploaded from the router to

disk. The ﬁle can then be downloaded by a different Netopia R7200 to conﬁgure its parameters (see

“Downloading conﬁguration ﬁles,” above). This is useful for conﬁguring a number of routers with identical

parameters or for creating conﬁguration backup ﬁles.

Uploading a ﬁle can also be useful for troubleshooting purposes. The uploaded conﬁguration ﬁle can be tested

on a different Netopia R7200 by Netopia or your network administrator.

The procedure below applies whether you are using the console or the WAN interface. To upload a conﬁguration

ﬁle:

1. Decide on a name for the ﬁle and a path for saving it.

Download from Www.Somanuals.com. All Manuals Search And Download.

15-12 User’s Reference Guide

2. Select Receive Conﬁg from Netopia and press Return. The following dialog box appears:

+--------------------------------------------------------------------+

| Are you sure you want to save your current Netopia configuration? |

| If so, when you hit Return/Enter on the CONTINUE button, you will |

| have 10 seconds to begin the transfer from your terminal program. |

CANCEL

CONTINUE

+--------------------------------------------------------------------+

3. Select CANCEL to exit without uploading the ﬁle, or select CONTINUE to upload the ﬁle.

If you choose CONTINUE, you will have ten seconds to use your terminal emulation software to initiate an

XMODEM transfer of the conﬁguration ﬁle. If you fail to initiate the transfer in that time, the dialog box will

disappear and the terminal emulation software will inform you of the transfer’s failure. You can then try

again.

Restarting the system

You can restart the system by selecting the Restart System item in the Utilities & Diagnostics screen.

You must restart the system whenever you reconﬁgure the Netopia R7200 and want the new parameter values

to take effect. Under certain circumstances, restarting the system may also clear up system or network

malfunctions. Some conﬁguration processes automatically restart the system to apply the changes you have

made.

Download from Www.Somanuals.com. All Manuals Search And Download.

Part III: Appendixes

Download from Www.Somanuals.com. All Manuals Search And Download.

User’s Reference Guide

Download from Www.Somanuals.com. All Manuals Search And Download.

Troubleshooting A-1

Appendix A

Troubleshooting

T h is a ppend i x is int e nded to he l p y o u trouble s hoot problems you may encounter while setting up and using the

Netopia R7200. It also includes information on how to contact Netopia Technical Support.

Important information on these problems can be found in the event histories kept by the Netopia R7200. These

e v e nt h i s tories can be accessed i n the Stati s t i cs & L o gs s c reen.

T h is s ect i on cov e r s the following topic s :

“Conﬁguration problems” on page A-1

“How to reset the router to factory defaults” on page A-3

“Power outages” on page A-3

“Technical support” on page A-4

Conﬁguration problems

If you encounter problems during your initial conﬁguration process, review the following suggestions before

calling for technical support. There are four zones to consider when troubleshooting initial conﬁguration:

1. The computer’s connection to the router

2. The router’s connection to the telecommunication line(s)

3. The telecommunication line’s connection to your ISP

4. The ISP’s connection to the Internet

If the connection from the computer to the router was not successful, verify that the following conditions are in

effect:

The Netopia R7200 is turned on.

An Ethernet cable connects your PC’s Ethernet card or built-in Ethernet port to the Netopia R7200.

The SmartStart application is running and able to access the Netopia R7200.

Telnet is available on your PC or Macintosh. (On a PC, it must be speciﬁed in your system path. You can

usually ﬁnd the application as “c:\ windows\ telnet.exe”.)

Your PC or Macintosh is properly conﬁgured for TCP/ IP.

Your PC or Macintosh has an IP address.

Your PC or Macintosh has a subnet mask that matches or is compatible with the Netopia R7200’s subnet

mask.

Download from Www.Somanuals.com. All Manuals Search And Download.

A-2 User’s Reference Guide

Note: If you are attempting to modify the IP address or subnet mask from a previous, successful conﬁguration

attempt, you will need to clear the IP address or reset your Netopia R7200 to the factory default before

reinitiating the conﬁguration process. For further information on resetting your Netopia R7200 to factory

default, see “Factory defaults” on page 15-6.

Console connection problems

Can’t see the conﬁguration screens (nothing appears)

Make sure the cable connection from the Netopia R7200’s console port to the computer being used as a

console is securely connected.

Make sure the terminal emulation software is accessing the correct port on the computer that’s being

used as a console.

Try pressing Ctrl-L or Return or the up or down arrow key several times to refresh the terminal screen.

Make sure that ﬂow control on serial connections is turned off.

Junk characters appear on the screen

Check that the terminal emulation software is conﬁgured correctly.

Check the baud rate. The default values are 9600, N, 8, and 1.

Characters are missing from some of the conﬁguration screens

Try changing the Netopia R7200’s default speed of 9600 bps and setting your terminal emulation software

to match the new speed.

Network problems

Problems communicating with remote IP hosts

Verify the accuracy of the default gateway’s IP address (entered in the IP Setup or Easy Setup screen).

Use the Netopia R7200’s Ping utility, in the Utilities & Diagnostics screen, and try to Ping local and remote

hosts. See “Ping” on page 15-2 for instructions on how to use the Ping utility. If you can successfully Ping

hosts using their IP addresses but not their domain names (198.34.7.1 but not garcia.netopia.com, for

example), verify that the DNS server’s IP address is correct and that it is reachable from the Netopia

R7200 (use Ping).

If you are using ﬁlters, check that your ﬁlter sets are not blocking the type of connections you are trying to

make.

Local routing problems

Observe the Ethernet LEDs to see if data trafﬁc ﬂow appears to be normal.

Check the WAN statistics and LAN statistics screens to see more speciﬁc information on data trafﬁc ﬂow

and address serving. See “Statistics & Logs” on page 13-4 for more information.

Download from Www.Somanuals.com. All Manuals Search And Download.

Troubleshooting A-3

How to reset the router to factory defaults

Lose your password? This section shows how to reset the router so that you can access the console screens

once again. Keep in mind that all of your connection proﬁles and settings will need to be reconﬁgured.

If you don't have a password, the only way to get back into the Netopia R7200 is the following:

1. Turn the router upside down.

2. Referring to the diagram below, ﬁnd the paper clip-size Reset Switch slot.

Reset Switch Slot

3. Carefully insert the larger end of a standard size paper clip until you contact the internal Reset Switch. (No

need to unwind the paper clip.)

4. Press this switch.

5. This will reset the unit to factory defaults and you will now be able to reprogram the router.

Power outages

If you suspect that power was restored after a power outage and the Netopia R7200 is connected to a remote

site, you may need to switch the Netopia R7200 off and then back on again. After temporary power outages, a

connection that still seems to be up may actually be disconnected. Rebooting the router should reestablish the

connection.

Download from Www.Somanuals.com. All Manuals Search And Download.

A-4 User’s Reference Guide

Technical support

Netopia, Inc. is committed to providing its customers with reliable products and documentation, backed by

excellent technical support.

Before contacting Netopia

Look in this guide for a solution to your problem. You may ﬁnd a solution in this troubleshooting appendix or in

other sections. Check the index for a reference to the topic of concern. If you cannot ﬁnd a solution, complete

the environment proﬁle below before contacting Netopia Technical Support.

Environment proﬁle

Locate the Netopia R7200’s model number, product serial number, and ﬁrmware version. The serial

number is on the bottom of the router, along with the model number. The ﬁrmware version appears in the

Netopia R7200’s Main Menu screen.

Model number:

Serial number:

Firmware version:

What kind of local network(s) do you have, with how many devices?

Ethernet

LocalTalk

EtherTalk

TCP/ IP

IPX

Other

How to reach us

We can help you with your problem more effectively if you have completed the environment proﬁle in the

previous section. If you contact us by telephone, please be ready to supply Netopia Technical Support with the

information you used to conﬁgure the Netopia R7200. Also, please be at the site of the problem and prepared

to reproduce it and to try some troubleshooting steps.

When you are prepared, contact Netopia Technical Support by e-mail, telephone, fax, or post:

Internet: techsports@netopia.com (for technical support)

info@netopia.com (for general information)

Phone: 1 800-782-6449

Fax: 1 510-814-5023

Netopia, Inc.

Customer Service

2470 Mariner Square Loop

Alameda, California 94501

USA

Download from Www.Somanuals.com. All Manuals Search And Download.

Troubleshooting A-5

Netopia Bulletin Board Service: 1 510-865-1321

Online product information

Product information can be found in the following:

Netopia World Wide Web server via http:/ / www.netopia.com

Internet via anonymous FTP to ftp.netopia.com/ pub

FAX-Back

This service provides technical notes that answer the most commonly asked questions and offers solutions for

many common problems encountered with Netopia products.

FAX-Back: 1 510-814-5040

Download from Www.Somanuals.com. All Manuals Search And Download.

A-6 User’s Reference Guide

Download from Www.Somanuals.com. All Manuals Search And Download.

Understanding IP Addressing B-1

Appendix B

Understanding IP Addressing

T h is a ppend i x is a bri e f g e neral i ntroduction to I P a ddressing. A basic understanding of IP will help you in

conﬁguring the Netopia R7200 and using some of its powerful features, such as static routes and packet

ﬁltering.

T h is s ect i on cov e r s the following topic s :

“W h at i s IP ?” on page B -1

“About IP addressing” on page B-1

“Distributing IP addresses” on page B-5

“Nested IP subnets” on page B-11

“Broadcasts” on page B-13

What is IP?

All networks use protocols to establish common standards for communication. One widely used network

protocol is the Internet Protocol, also known as IP. Like many other protocols, IP uses packets, or formatted

chunks of data, to communicate. In packets, a header is part of the envelope information that surrounds the

actual data being transmitted. In e-mail, a header is usually the address and routing information found at the

top of messages.

Note: This guide uses the term “IP” in a very general and inclusive way to identify all of the following:

Networks that use the Internet Protocol, along with accompanying protocols such as TCP, UDP, and

ICMP

Packets that include an IP header within their structure

Devices that send IP packets

About IP addressing

Every networking protocol uses some form of addressing in order to ensure that packets are delivered correctly.

In IP, individual network devices that are initial sources and ﬁnal destinations of packets are usually called

hosts instead of nodes, but the two terms are interchangeable. Each host on an IP network must have a unique

IP address. An IP address, also called an Internet address, is a 32-bit number usually expressed as four

decimal numbers separated by periods. Each decimal number in an IP address represents a 1-byte (8-bit) binary

number. Thus, values for each of the four numbers range from 00000000 to 11111111 in binary notation, or

from 0 to 255 in decimal notation. The expression 192.168.1.1 is a typical example of an IP address.

IP addresses indicate both the identity of the network and the identity of the individual host on the network. The

number of bits used for the network number and the number of bits used for the host number can vary, as long

as certain rules are followed. The local network manager assigns IP host numbers to individual machines.

Download from Www.Somanuals.com. All Manuals Search And Download.

B-2 User’s Reference Guide

IP addresses are maintained and assigned by the InterNIC, a quasi-governmental organization now increasingly

under the auspices of private industry.

Note: It’s very common for an organization to obtain an IP address from a third party, usually an Internet

service provider (ISP). ISPs usually issue an IP address when they are contracted to provide Internet access

services.

The InterNIC (the NIC stands for Network Information Center) divides IP addresses into several classes.

Classes A, B, and C are assigned to organizations that request addresses. In Class A networks, the ﬁrst byte of

an IP address is reserved for the network portion of the address. Class B networks reserve the ﬁrst two bytes

of an IP address for the network address. Class C networks reserve the ﬁrst three bytes of an IP address for the

network address. In all cases, a network manager can decide to use subnetting to assign even more bits to the

network portion of the IP address, but never less than the class requires. The following section gives more

information on subnetting.

Class A networks have a small number of possible network numbers, but a large number of possible host

numbers. Conversely, Class C networks have a small number of possible host numbers, but a large number of

possible network numbers. Thus, the InterNIC assigns Class A addresses to large organizations that have very

large numbers of IP hosts, while smaller organizations, with fewer hosts, get Class B or Class C addresses. You

can tell the various classes apart by the value of the ﬁrst (or high-order) byte. Class A networks use values from

1 to 127, Class B networks use values from 128 to 191, and Class C networks use values from 192 to 223.

The following table summarizes some of the differences between Class A, B, and C networks.

Number of

networks

possible per

class

Number of

hosts

possible per

network

Format of address

(without subnetting)

Class

First byte

Example

1–127

128–191

192–223

127

16,384

16,777,214

65,534

254

net.host.host.host

net.net.host.host

net.net.net.host

97.3.14.250

140.100.10.11

197.204.13.7

2,097,152

Subnets and subnet masks

Often an entire organization is assigned only one IP network number. If the organization has several IP networks

connected together with IP routers, the network manager can use subnetting to distinguish between these

networks, even though they all use the same network number. Each physical network becomes a subnet with a

unique subnet number.

Subnet numbers appear within IP addresses, along with network numbers and host numbers. Since an IP

address is always 32 bits long, using subnet numbers means either the network number or the host numbers

must use fewer bits in order to leave room for the subnet numbers. Since the InterNIC assigns the network

number proper, it should not change, so the subnet numbers must be created out of bits that would otherwise

be part of the host numbers.

Download from Www.Somanuals.com. All Manuals Search And Download.

Understanding IP Addressing B-3

Subnet masks

To create subnets, the network manager must deﬁne a subnet mask, a 32-bit number that indicates which bits

in an IP address are used for network and subnetwork addresses and which are used for host addresses. One

subnet mask should apply to all IP networks that are physically connected together and share a single assigned

network number. Subnet masks are often written in decimal notation like IP addresses, but they are most easily

understood in binary notation. When a subnet mask is written in binary notation, each numeral 1 indicates that

the corresponding bit in the IP address is part of the network or subnet address. Each 0 indicates that the

corresponding bit is part of the host address. The following table shows the proper subnet masks to use for

each class of network when no subnets are required.

Class

Subnet mask for a network with no subnets

Binary: 11111111.00000000.00000000.00000000

Decimal: 255.0.0.0

Binary: 11111111.11111111.00000000.00000000

Decimal: 255.255.0.0

Binary: 11111111.11111111.11111111.00000000

Decimal: 255.255.255.0

To know whether subnets are being used or not, you must know what subnet mask is being used—you cannot

determine this information simply from an IP address. Subnet mask information is conﬁgured as part of the

process of setting up IP routers and gateways such as the Netopia R7200.

Note: If you receive a routed account from an ISP, there must be a mask associated with your network IP

address. By using the IP address with the mask you can discover exactly how many IP host addresses you

actually have.

To conﬁgure subnets properly, you must also be able to convert between binary notation and decimal notation.

Example: Using subnets on a Class C IP internet

When setting up IP routing with a Class A address, or even with multiple Class C addresses, subnetting is fairly

straightforward. Subnetting a single Class C address between two networks, however, is more complex. This

section describes the general procedures for subnetting a single Class C network between two Netopia routers

so that each can have Internet access.

Download from Www.Somanuals.com. All Manuals Search And Download.

B-4 User’s Reference Guide

Network conﬁguration

Below is a diagram of a simple network conﬁguration. The ISP is providing a Class C address to the customer

site, and both networks A and B want to gain Internet access through this address. Netopia R7200 B connects

to Netopia R7200 A and is provided Internet access through Routers A and B.

Customer Site A

PC 1:

IP Address: 192.168.1.3

Subnet Mask:

255.255.255.128

Gateway: 192.168.1.1

Router B:

Netopia R7200 A:

IP Address: 192.168.1.1

IP Address: 192.168.1.2

Subnet Mask: 255.255.255.128

Subnet Mask:

Remote IP: 10.0.0.1

LAN

255.255.255.128

Remote Sub: 255.255.255.0

Gateway: 10.0.0.1

ISP Network

Router A:

Remote IP: 192.168.1.129

Remote Sub:

255.255.255.128

Static Route:

192.168.1.128 [network]

255.255.255.128 [mask]

192.168.1.2 [via router]

IP Address: 10.0.0.1

Gateway: 192.168.1.1

Subnet Mask: 255.255.255.0

Usable IP Addresses avail-

able to Customer Site A:

192.168.1.1 -->

Usable IP Addresses available to

Customer Site A: 192.168.1.1 -->

192.168.1.126

Customer Site B

Netopia R7200 B:

PC 2:

IP Address: 192.168.1.129

IP Address:

Internet

Subnet Mask: 255.255.255.128

Remote IP: 192.168.1.2

192.168.1.130

Subnet Mask:

255.255.255.128

Remote Sub: 255.255.255.128

Gateway: 192.168.1.2

Gateway:

192.168.1.129

Usable IP Addresses available to

Customer Site B: 192.168.1.129

--> 192.168.1.254

LAN

Download from Www.Somanuals.com. All Manuals Search And Download.

Understanding IP Addressing B-5

Background

The IP addresses and routing conﬁgurations for the devices shown in the diagram are outlined below. In

addition, each individual ﬁeld and its meaning are described.

The IP Address and Subnet Mask ﬁelds deﬁne the IP address and subnet mask of the device's Ethernet

connection to the network while the Remote IP and Remote Sub ﬁelds describe the IP address and subnet

mask of the remote router. This information is entered in the connection proﬁle of the Netopia R7200.

The Gateway ﬁeld describes the router or workstation's default gateway, or where they will send their packets if

the appropriate route is not known. The Static Route ﬁeld, which is only shown on Router B, tells Router B what

path to take to get to the network deﬁned by Netopia R7200 B. Finally, the Usable IP Address ﬁeld shows the

range of IP addresses available to the hosts of that network.

Note that the IP addresses given in this section are for example purposes only. Do not use these addresses

when conﬁguring your network.

With this conﬁguration, both Customer Site A and B can gain Internet access through Routers A and B, with no

reconﬁguration of the ISP's equipment. The most important item in this conﬁguration is the static route deﬁned

on Router B. This tells Router B what path to take to get to the network deﬁned by Netopia R7200 B. Without

this information, Customer Site B will be able to access Customer Site A, but not the Internet.

If it is not possible to deﬁne a static route on Router B, RIP could be enabled to serve the same purpose. To

use RIP instead of a static route, enable Transmit RIP on Netopia R7200 A and Transmit and Receive RIP on

Router B. This will allow the route from Customer Site B to propagate on Router B and Customer Site A.

Example: Working with a Class C subnet

Suppose that your organization has a site with only 10 hosts and no plans to add any new hosts. You don’t

need a full Class C address for this site. Many ISPs offer Internet access with only a portion of a full Internet

address.

For example, you might obtain the Class C address 199.14.17.48, with the mask 255.255.255.240. From the

previous example, you can see that this gives you 14 host addresses to distribute to the hosts at your site. In

effect, your existing network of 10 hosts is a subnet of the ISP’s network. Since the Class C address has

already been reduced to subnets, you cannot further subnet your network without the risk of creating network

routing problems (since you must use the mask issued by the ISP). This, however, is not a problematic

limitation for your small network.

The advantages of this situation are the greater ease and lower cost of obtaining a subnet rather than a full

Class C address from an ISP.

Distributing IP addresses

To set up a connection to the Internet, you may have obtained a block of IP host addresses from an ISP. When

conﬁguring the Netopia R7200, you gave one of those addresses to its Ethernet port, leaving a number of

addresses to distribute to computers on your network.

Download from Www.Somanuals.com. All Manuals Search And Download.

B-6 User’s Reference Guide

There are two schemes for distributing the remaining IP addresses:

Manually give each computer an address

Let the Netopia R7200 automatically distribute the addresses

These two methods are not mutually exclusive; you can manually issue some of the addresses while the rest

are distributed by the Netopia R7200. Using the router in this way allows it to function as an address server.

One reason to use the Netopia R7200 as an address server is that it takes less time than manually distributing

the addresses. This is particularly true if you have many addresses to distribute. You need to enter information

only once, rather than having to enter it on each host separately. This also reduces the potential for

misconﬁguring hosts.

Another reason to use the Netopia R7200 as an address server is that it will distribute addresses only to hosts

that need to use them.

All Netopia R7200s come with an integrated Dynamic Host Control Protocol (DHCP) server. Some routers also

come with a Macintosh Internet Protocol (MacIP) server. These servers provide a means of distributing IP

addresses to either a Mac or PC workstation as needed.

When setting up the DHCP or MacIP servers in the Netopia R7200, it is necessary to understand how

workstations lease, renew, and release their IP addresses. This information is helpful in determining dynamic

address allocation for a network.

The term “lease” describes the action of a workstation requesting and using an IP address. The address is

dynamic and can be returned to the address pool at a later time.

The term “renew” refers to what the workstations do to keep their leased IP address. At certain intervals, the

workstation talks to the DHCP or MacIP server and renews the lease on that IP address. This renewal allows

the workstation to keep and use the assigned IP address until the next renewal period.

The term “release” refers to a situation where the workstation is no longer using its assigned IP address or has

been shut down. IP addresses can be manually released as well. The IP address goes back into the DHCP or

MacIP address pool to be reassigned to another workstation as needed.

Technical note on subnet masking

Note: The IP address supplied by the Netopia R7200 will be a unique number. You may want to replace this

number with a number that your ISP supplies if you are conﬁguring the router for a static IP address. The

automatic IP mask supplied by SmartStart is a Class C address. However, the Netopia R7200 and all devices

on the same local network must have the same subnet mask. If you require a different class address, you can

edit the IP Mask ﬁeld to enter the correct address. Refer to the table below.

Number of Devices (other than

Netopia R7200) on Local Network

Largest Possible Ethernet Subnet

Mask

255.255.255.252

255.255.255.248

255.255.255.240

255.255.255.224

2-5

6-13

14-29

Download from Www.Somanuals.com. All Manuals Search And Download.

Understanding IP Addressing B-7

Number of Devices (other than

Netopia R7200) on Local Network

Largest Possible Ethernet Subnet

Mask

30-61

62-125

125-259

255.255.255.192

255.255.255.128

255.255.255.0

Conﬁguration

This section describes the speciﬁc IP address lease, renew, and release mechanisms for both the Mac and PC,

with either DHCP or MacIP address serving.

DHCP address serving

Windows 95 workstation:

The Win95 workstation requests and renews its lease every half hour.

The Win95 workstation does NOT relinquish its DHCP address lease when the machine is shut down.

The lease can be manually expired using the WINIPCFG program, a command line program executable from

the DOS prompt or from the START:RUN menu on a Windows-based computer.

Windows 3.1 workstation (MSTCP Version 3.11a):

The Win3.1 workstation requests and renews its lease every half hour.

The Win3.1 workstation does NOT relinquish its DHCP address lease when the user exits Windows and

goes to DOS.

The lease can be manually expired by typing IPCONFIG/ RELEASE from a DOS window within Windows or

from the DOS prompt.

Macintosh workstation (Open Transport Version 1.1 or later):

The Mac workstation requests and renews its lease every half hour.

The Mac workstation relinquishes its address upon shutdown in all but one case. If the TCP/ IP control

panel is set to initialize at startup, and no IP services are used or the TCP/ IP control panel is not opened,

the DHCP address will NOT be relinquished upon shutdown. However, if the TCP/ IP control panel is opened

or if an IP application is used, the Mac WILL relinquish the lease upon shutdown.

If the TCP/ IP control panel is set to acquire an address only when needed (therefore a TCP/ IP application

must have been launched to obtain a lease) the Mac WILL relinquish its lease upon shutdown every time.

Netopia R7200 DHCP server characteristics

The Netopia R7200 ignores any lease-time associated with a DHCP request and automatically issues the

DHCP address lease for one hour.

The number of devices a Netopia R7200 can serve DHCP to is 512. This is imposed by global limits on the

size of the address serving database, which is shared by all address serving functions active in the router.

Download from Www.Somanuals.com. All Manuals Search And Download.

B-8 User’s Reference Guide

The Netopia R7200 releases the DHCP address back to the available DHCP address pool exactly one hour

after the last-heard lease request. Some other DHCP implementations may hold on to the lease for an

additional time after the lease expired to act as a buffer for variances in clocks between the client and

server.

MacIP serving

Macintosh workstation (MacTCP or Open Transport):

Once the Mac workstation requests and receives a valid address, the Netopia R7200 actively checks for the

workstation’s existence once every minute.

For a dynamic address, the Netopia R7200 releases the address back to the address pool after it has lost

contact with the Mac workstation for over 2 minutes.

For a static address, the Netopia R7200 releases the address back to the address pool after it has lost

contact with the Mac workstation for over 20 minutes.

Netopia R7200 MacIP server characteristics

The Mac workstation uses ATP to both request and receive an address from the Netopia R7200's MacIP server.

Once acquired, NBP conﬁrm packets will be sent out every minute from the Netopia R7200 to the Mac

workstation.

Manually distributing IP addresses

If you choose to manually distribute IP addresses, you must enter each computer’s address into its TCP/ IP

stack software. Once you manually issue an address to a computer, it possesses that address until you

manually remove it. That’s why manually distributed addresses are called static addresses.

Static addresses are useful in cases when you want to make sure that a host on your network cannot have its

address taken away by the address server. Appropriate candidates for a static address include a network

administrator’s computer, a computer dedicated to communicating with the Internet, and routers.

Using address serving

The Netopia R7200 provides three ways to serve IP addresses to computers on a network. The ﬁrst, Dynamic

Host Conﬁguration Protocol (DHCP), is supported by PCs with Microsoft Windows and a TCP/ IP stack.

Macintosh computers using Open Transport and computers using the UNIX operating system may also be able

to use DHCP. The second way, MacIP, is for Macintosh computers. The third way, called Serve Dynamic WAN

Clients (IPCP), is used to fulﬁll WAN client requirements

The Netopia R7200 can use both DHCP and MacIP. Whether you use one or both depends on your particular

networking environment. If that environment includes both PCs and Macintosh computers that do not use Open

Transport, you need to use both DHCP and MacIP to distribute IP addresses to all of your computers.

Serve dynamic WAN clients

The third method, used to fulﬁll WAN client requirements, is called Serve Dynamic WAN Clients. The correct

term or protocol is a subset of the PPP suite call IPCP. Originally, this would apply only to switched WAN

interface routers, and not to leased line routers. However, a new feature can give you Asynchronous PPP dial-in

support on the Auxiliary port on any router including leased line Netopia routers.

Download from Www.Somanuals.com. All Manuals Search And Download.

Understanding IP Addressing B-9

In any situation where a device is dialing into a Netopia router, the router may need to be conﬁgured to serve IP

via the WAN interface. This is only a requirement if the calling device has not been conﬁgured locally to know

what its address(es) are. So when a client, dialing into a Netopia router's WAN interface, is expecting

addresses to be served by the answering router, you must set the answering Netopia router to serve IP via its

WAN interface.

You can do this in either of two ways:

use the Serve Dynamic WAN Clients option in the Address Serving Setup screen.

Enabling Serve Dynamic WAN Clients only allows you to specify a pool of addresses from which the dial-in

client may get an IP address. It does not allow static addressing.

If you want to serve addresses dynamically, use Serve Dynamic WAN Clients.

deﬁne the address that you want to serve in the Connection Proﬁle's IP Setup screen.

This method requires a static value to be used. Thus any user dialing in can obtain the same IP address for

every connection to the proﬁle.

If you want to serve addresses statically, deﬁne the address in the Connection Proﬁle.

Notes:

The addresses that are to be served cannot be used elsewhere. For example you wouldn't want to

deﬁne a static address in a Connection Proﬁle to be served via the WAN that is already deﬁned in the

DHCP pool of addresses.

In order to work correctly, you must deﬁne a host or node address in the IP Proﬁle Parameters of the

Connection Proﬁle.

This is accomplished by specifying the IP address that is to be statically served via the WAN, and then

by entering a mask value of 255.255.255.255.

Tips and rules for distributing IP addresses

Before you allocate IP addresses using DHCP and MacIP, consider whether you need to set aside any static

addresses.

Note any planned and currently used static addresses before you use DHCP and MacIP.

Avoid fragmenting your block of IP addresses. For example, try to use a continuous range for the static

addresses you choose.

Download from Www.Somanuals.com. All Manuals Search And Download.

B-10 User’s Reference Guide

Distributed to the

Netopia R7200

(Ethernet IP address)

Manually distributed

(static)

Pool of addresses distributed

by MacIP and DHCP

Block of IP host addresses

(derived from network IP

address + mask issued by ISP)

The ﬁgure above shows an example of a block of IP addresses being distributed correctly.

The example follows these rules:

An IP address must not be used as a static address if it is also in a range of addresses being distributed

by DHCP or MacIP.

A single IP address range is used by all the address-served clients. These include DHCP, BootP, MacIP, and

WAN clients, even though BootP and static MacIP clients might not be considered served.

The address range speciﬁed for address-served clients cannot wrap around from the end of the total

available range back to the beginning. See below for a further explanation and an example.

The network address issued by an ISP cannot be used as a host address.

A DHCP example

Suppose, for example, that your ISP gave your network the IP address 199.1.1.32 and a 4-bit subnet mask.

Address 199.1.1.32 is reserved as the network address. Address 199.1.1.47 is reserved as the broadcast

address. This leaves 14 addresses to allocate, from 199.1.1.33 through 199.1.1.46. If you want to allocate a

sub-block of 10 addresses using DHCP, enter “10” in the DHCP Setup screen’s Number of Addresses to

Allocate item. Then, in the same screen’s First Address item, enter the ﬁrst address in the sub-block to

allocate so that all 10 addresses are within your original block. You could enter 199.1.1.33, or 199.1.1.37, or

any address between them. Note that if you entered 199.1.1.42 as the ﬁrst address, network routing errors

would probably result because you would be using a range with addresses that do not belong to your network

(199.1.1.49, 199.1.1.50, and 199.1.1.51).

Download from Www.Somanuals.com. All Manuals Search And Download.

Understanding IP Addressing B-11

Nested IP subnets

Under certain circumstances, you may want to create remote subnets from the limited number of IP addresses

issued by your ISP or other authority. You can do this using connection proﬁles. These subnets can be nested

within the range of IP addresses available to your network.

For example, suppose that you obtain the Class C network address a.b.c.0 to be distributed among three

networks. This network address can be used on your main network, while portions of it can be subnetted to the

two remaining networks.

Note: The IP address a.b.c.0 has letters in place of the ﬁrst three numbers to generalize it for this example.

The ﬁgure shows a possible network conﬁguration following this scheme. The main network is set up with the

Class C address a.b.c.0, and contains Router A (which could be a Netopia R7200), a Netopia R7200, and a

number of other hosts. Router A maintains a link to the Internet and can be used as the default gateway.

Internet

a.b.c.16

a.b.c.1

Router A

a.b.c.0

a.b.c.2

Router B

Router C

a.b.c.248

a.b.c.249

a.b.c.128

a.b.c.129

Download from Www.Somanuals.com. All Manuals Search And Download.

B-12 User’s Reference Guide

Routers B and C (which could also be Netopia R7200s) serve the two remote networks that are subnets of

a.b.c.0. The subnetting is accomplished by conﬁguring the Netopia R7200 with connection proﬁles for Routers

B and C (see the following table).

Bits available for host

Connection proﬁle

Remote IP address

Remote IP mask

address

For Router B

For Router C

a.b.c.128

a.b.c.248

255.255.255.192

255.255.255.248

The Netopia R7200’s connection proﬁles for Routers B and C create entries in its IP routing table. One entry

points to the subnet a.b.c.128, while a second entry points to the subnet a.b.c.248. The IP routing table might

look similar to the following:

IP Routing Table

Network Address-Subnet Mask-----via Router------Port--Age--------Type------

----------------------------------SCROLL UP--------------------------------

0.0.0.0

a.b.c.1 WAN

3719

Management

Local

127.0.0.1

a.b.c.128

a.b.c.248

255.255.255.255 127.0.0.1 lp1 6423

255.255.255.192 a.b.c.128 WAN 5157

255.255.255.248 a.b.c.248 WAN 6205

Local

---------------------------------SCROLL DOWN-------------------------------

UPDATE

Let’s see how a packet from the Internet gets routed to the host with IP address a.b.c.249, which is served by

Router C. The packet ﬁrst arrives at Router A, which delivers it to its local network (a.b.c.0). The packet is then

received by the Netopia R7200, which examines its destination IP address.

The Netopia R7200 compares the packet’s destination IP address with the routes in its IP routing table. It

begins with the route at the bottom of the list and works up until there’s a match or the route to the default

gateway is reached.

When a.b.c.249 is masked by the ﬁrst route’s subnet mask, it yields a.b.c.248, which matches the network

address in the route. The Netopia R7200 uses the connection proﬁle associated with the route to connect to

Router C, and then forwards the packet. Router C delivers the packet to the host on its local network.

Download from Www.Somanuals.com. All Manuals Search And Download.

Understanding IP Addressing B-13

The following diagram illustrates the IP address space taken up by the two remote IP subnets. You can see from

the diagram why the term nested is appropriate for describing these subnets.

Address range

available to

a.b.c.0, less

the two nested

subnets

129

valid addresses used

by a.b.c.128

190

249

valid addresses used

by a.b.c.248

254

Broadcasts

As mentioned earlier, binary IP host or subnet addresses composed entirely of ones or zeros are reserved for

broadcasting. A broadcast packet is a packet that is to be delivered to every host on the network if both the

host address and the subnet address are all ones or all zeros, or to every host on the subnetwork if the host

address is all ones or all zeros but the subnet address is a combination or zeros and ones. Instead of making

many copies of the packet, individually addressed to different hosts, all the host machines know to pay

attention to broadcast packets, as well as to packets addressed to their speciﬁc individual host addresses.

Depending on the age and type of IP equipment you use, broadcasts will be addressed using either all zeros or

all ones, but not both. If your network requires zeros broadcasting, you must conﬁgure this through SNMP.

Packet header types

As previously mentioned, IP works with other protocols to allow communication over IP networks. When IP is

used on an Ethernet network, IP works with the Ethernet or 802.3 framing standards, among other protocols.

These two protocols specify two different ways to organize the very ﬁrst signals in the sequence of electrical

signals that make up an IP packet travelling over Ethernet. By default, the Netopia R7200 uses Ethernet packet

headers for IP trafﬁc. If your network requires 802.3 IP framing, you must conﬁgure this through SNMP.

Download from Www.Somanuals.com. All Manuals Search And Download.

B-14 User’s Reference Guide

Download from Www.Somanuals.com. All Manuals Search And Download.

Understanding Netopia NAT Behavior C-1

Appendix C

Understanding Netopia NAT Behavior

The Netopia R7200 implements a powerful feature called Network Address Translation (NAT) as speciﬁed in

RFC 1631. NAT is used for IP address conservation and for security purposes since there will only be a single IP

“presence” on the WAN. This appendix describes the NAT functionality within the Netopia R7200 and provides

examples for setup and use.

Network conﬁguration

Below is a diagram of the network referenced in this appendix.

ISP Network

IP: 200.1.1.1

Customer Site

Netopia Router

WAN IP: 200.1.1.40

LAN IP: 192.168.5.1

Mask: 255.255.255.240

MAC: 00-00-c5-60-21-0a

Mask: 255.255.255.0

MAC: 00-00-c5-60-21-0a

Router

Netopia

Workstation A

IP: 192.168.5.2

Mask: 255.255.255.240

MAC: 00-05-02-04-12-4f

LAN

Internet

WWW Server

Workstation B

IP: 163.176.4.32

IP: 192.168.5.3

Mask: 255.255.255.0

MAC: 00-05-02-0c-1b-41

Mask: 255.255.255.240

MAC: 00-05-02-00-1e-03

Background

NAT is a mechanism employed within the Netopia R7200 to acquire a statically or dynamically assigned IP

address on its WAN interface and proxy against locally assigned IP addresses on its LAN interface. The Netopia

R7200 uses a one-to-many IP address mapping scheme; that is against a single IP address the Netopia R7200

acquires on its WAN interface, the Netopia R7200 can proxy 14, 30, or an unlimited number of IP hosts on the

LAN interface.

In order to fully understand how NAT works, you must understand how a PPP connection is established and IP

addresses are negotiated.

Download from Www.Somanuals.com. All Manuals Search And Download.

C-2 User’s Reference Guide

When the Netopia R7200 establishes a connection over its WAN interface with another router it uses the

Point-to-Point Protocol (PPP). Within PPP there is a Network Control Protocol (NCP) called Internet Protocol

Control Protocol (IPCP), which handles the negotiation of IP addresses between the two routers, in this case the

Netopia R7200 at the customer site above and the router at the Internet service provider (ISP).

If the Netopia R7200 calls the router at the ISP with NAT disabled, the Netopia negotiates its LAN interface

address (as speciﬁed in IP Setup within the Netopia R7200's console) with the router at the ISP through IPCP

and then sets up routing. From the diagram on the previous page you can see that the address for the Netopia

R7200 is 192.168.5.1 and the address of the router at the ISP is 200.1.1.1. Assuming that the addresses

negotiated by the routers are valid and unique for the Internet, the Netopia R7200 and the hosts on its LAN

would be able to access the Internet.

If the Netopia R7200 calls the router at the ISP with NAT enabled, instead of negotiating the LAN interface

address, the Netopia R7200 suggests the address 0.0.0.0 through IPCP. When the router at the ISP sees this

all-zeros IPCP request, the router can either pull a free dynamic IP address from its pool and assign it to the

Netopia R7200’s WAN interface or, if conﬁgured to do so, it can match the Netopia R7200's incoming

connection proﬁle and assign a preconﬁgured static IP address to the Netopia R7200's WAN interface.

From the diagram, you can see that the IP address assigned to the Netopia R7200's WAN interface is

200.1.1.40, while the IP address assigned to the LAN interface remains the same. The LAN interface address

192.168.5.1 is thus hidden from the ISP and the Internet, and the Netopia R7200 only has a single valid IP

presence on the Internet. The LAN interface IP address for the Netopia R7200 can be any IP address; however,

it is recommended that you use the IANA-speciﬁed 192.168.X.X Class C address range, which is used for

networks not attached to the Internet. This address range is described in RFC 1597.

The dynamic IP address acquisition on the WAN interface of the Netopia R7200 is one of several features of

NAT. Another is the mapping of locally assigned IP addresses to the single globally unique IP address acquired

by the Netopia R7200 on its WAN interface. NAT employs several things to accomplish this seamlessly. You

must look at the formatting of an IP packet before IP address remapping can be explained.

Every IP packet that is transmitted across the Netopia R7200’s LAN interface or across the WAN interface to

the Internet contains several bits of information that indicate to any device where the packet is going and where

it came from. In particular, you have the source and destination port and source and destination IP addresses.

A port is used within IP to deﬁne a particular type of service and could be either a Transmission Control

Protocol (TCP) port or User Datagram Protocol (UDP) port. Both TCP and UDP are protocols that use IP as the

underlying transport mechanism. The major difference between TCP and UDP is that TCP is a reliable delivery

service, whereas UDP is a “best-effort” delivery service. A list of well-known TCP or UDP ports and services can

be found in RFC 1700.

If Workstation A wants to communicate with a World Wide Web (WWW) server on the Internet and the Netopia

R7200 does not have NAT enabled, Workstation A forms an IP packet with the source IP address of

192.168.5.2 and destination IP address of 163.176.4.32. The source port could be 400 while the destination

port would be 80 (WWW server). The Netopia R7200 then looks at this IP packet, determines the best routing

method and sends that packet on its way across the WAN interface to the WWW server on the Internet.

With NAT enabled, the Netopia R7200 does something different. For example, suppose that Workstation A

again wants to communicate with the WWW server on the Internet. Workstation A forms an IP packet with the

source IP address of 192.168.5.2 and destination IP address of 163.176.4.32, and source port could be 400

while the destination port would be 80 (WWW server).

Download from Www.Somanuals.com. All Manuals Search And Download.

Understanding Netopia NAT Behavior C-3

When the Netopia R7200 receives this IP packet, it cannot simply forward it to the WAN interface and the

Internet since the IP addresses on the LAN interface are not valid or globally unique for the Internet. Instead,

the Netopia R7200 has to change the IP packet to reﬂect the IP address that was acquired on the WAN

interface from the ISP.

The Netopia R7200 will ﬁrst substitute the source IP address with the IP address that was acquired on the WAN

interface, which in this case is 200.1.1.40. Next the Netopia R7200 will substitute the source TCP or UDP port

with a TCP or UDP port from within a speciﬁed range maintained within the Netopia R7200. And ﬁnally the

modiﬁed IP packet's checksum is recalculated (as speciﬁed in RFC 1631) and the packet is transmitted across

the WAN interface to its destination, the WWW server on the Internet.

If the send and response IP packets were drawn out, this process would look like the following:

WWW Server

163.176.4.32

ISP Router

200.1.1.1

Netopia Router

LAN: 192.168.5.1

WAN: 200.1.1.40

Workstation A

192.168.5.2

Netopia

Router

ISP Router to WWW

Netopia to ISP Router

Wkstn A to Netopia

Src IP: 192.168.5.2

Dst IP: 163.176.4.32

Src Port: 400

Src IP: 200.1.1.40

Dst IP: 163.176.4.32

Src Port: 5001

Src IP: 200.1.1.40

Dst IP: 163.176.4.32

Src Port: 5001

Dst Port: 80

WWW to ISP Router

Src IP: 163.176.4.32

Dst IP: 200.1.1.40

Src Port: 80

ISP Router to Netopia

Src IP: 163.176.4.32

Dst IP: 200.1.1.40

Src Port: 80

Netopia to Wkstn A

Src IP: 163.176.4.32

Dst IP: 192.168.5.2

Src Port: 80

Dst Port: 5001

Dst Port: 400

As you can see, the IP packet from Workstation A is sent to the Netopia R7200 and the source IP address is

substituted with 200.1.1.40 and the source port is substituted with 5001, then the IP packet checksum is

recalculated. When this modiﬁed packet reaches the WWW server on the Internet, the WWW server responds

and sends the IP packet back to destination IP address 200.1.1.40 and destination port 5001.

When the Netopia R7200 receives this IP packet from the WWW server, the Netopia R7200 replaces the

destination IP address with 192.168.5.2, the address for Workstation A. The port is changed back to 400, the

IP packet checksum is recalculated, and the IP packet is sent to Workstation A on the Netopia R7200s LAN

interface.

Download from Www.Somanuals.com. All Manuals Search And Download.

C-4 User’s Reference Guide

The reasons for the IP address changes are obvious from the preceding diagram, but what is not so obvious is

why the TCP or UDP source ports need to be changed as well. These are changed and maintained in an internal

table so the Netopia R7200 can determine which host on the local LAN interface sent the IP packet and what

host the response from the WAN interface is going to go to on the LAN interface. This becomes especially

important when two or more hosts on the LAN interface are accessing the same type of service on the Internet,

like a WWW server (port 80), for example.

Now look at how two hosts on the LAN interface accessing the same WWW server on the Internet will work:

Netopia Router

ISP Router

200.1.1.1

LAN: 192.168.5.1

WAN: 200.1.1.40

WWW Server

163.176.4.32

Workstations

A & B

Netopia

Router

ISP Router to WWW

Netopia to ISP Router

Wkstn A to Netopia

Src IP: 200.1.1.40

Dst IP: 163.176.4.32

Src Port: 5001

Src IP: 200.1.1.40

Dst IP: 163.176.4.32

Src Port: 5001

Src IP: 192.168.5.2

Dst IP: 163.176.4.32

Src Port: 400

Dst Port: 80

Wkstn B to Netopia

Src IP: 192.168.5.3

Dst IP: 163.176.4.32

Src Port: 400

Netopia to ISP Router

Src IP: 200.1.1.40

Dst IP: 163.176.4.32

Src Port: 5002

ISP Router to WWW

Src IP: 200.1.1.40

Dst IP: 163.176.4.32

Src Port: 5002

Dst Port: 80

WWW to ISP Router

Src IP: 163.176.4.32

Dst IP: 200.1.1.40

Src Port: 80

ISP Router to Netopia

Src IP: 163.176.4.32

Dst IP: 200.1.1.40

Src Port: 80

Netopia to Wkstn B

Src IP: 163.176.4.32

Dst IP: 192.168.5.3

Src Port: 80

Dst Port: 5002

Dst Port: 400

WWW to ISP Router

Src IP: 163.176.4.32

Dst IP: 200.1.1.40

Src Port: 80

ISP Router to Netopia

Src IP: 163.176.4.32

Dst IP: 200.1.1.40

Src Port: 80

Netopia to Wkstn A

Src IP: 163.176.4.32

Dst IP: 192.168.5.2

Src Port: 80

Dst Port: 5001

Dst Port: 400

As you can see, when Workstation A and Workstation B transmit an IP packet to the WWW server on the

Internet, they have unique source IP addresses on the LAN interface but potentially the same source ports,

which in this case is 400. When the Netopia R7200 receives these packets, the source IP addresses are

substituted with the single globally unique IP address that was acquired on the WAN interface, which is

200.1.1.40.

Download from Www.Somanuals.com. All Manuals Search And Download.

Understanding Netopia NAT Behavior C-5

Now both IP packets have the exact same source IP address (200.1.1.40) and source ports (400). The Netopia

R7200 is then able to distinguish between the two IP packets by changing the source TCP or UDP ports and

keeping this information in an internal table. As seen above, the source port for Workstation A has been

changed to 5001 and the source port for Workstation B has been changed to 5002.

If you were to look at the internal port mapping table that is maintained by the Netopia R7200, it would look

similar to the following:

Source LAN IP

192.168.5.2

192.168.5.3

Source LAN Port

TCP 400

Remapped LAN Port

TCP 5001

TCP 5002

With this information the Netopia R7200 can determine the appropriate routing for an IP response from the

Internet. In this case, when the WWW server responds with a destination port of 5001, the Netopia R7200 can

see that this packet's destination on the local LAN interface is actually Workstation A at IP address

192.168.5.2. Likewise, with the response for port 5002, the Netopia R7200 can see that this packet's

destination on the local LAN interface is actually Workstation B at IP address 192.168.5.3.

Exported services

Note that this “automatic” port remapping and IP address substitution only works in one direction – for IP

packets that originated on the LAN interface destined to the WAN interface and the Internet. In order for port

remapping and IP address substitution to work in the other direction – that is, hosts on the Internet that want to

originate an IP packet destined to a host on the Netopia R7200s LAN interface – a manual redirection of TCP or

UDP ports as well as destination IP addresses within the Netopia R7200 is required. This manual port

remapping and IP address substitution is accomplished by setting up exported services.

Exported services are essentially user-deﬁned pointers for a particular type of incoming TCP or UDP service

from the WAN interface to a host on the local LAN interface. This is necessary since the Netopia R7200 and

thus the attached local LAN has only one IP presence on the WAN interface and Internet. Exported services

allows the user to redirect one type of service – for example Port 21 (FTP) – to a single host on the local LAN

interface. This will then allow the Netopia R7200 to redirect any packets coming in from the Internet with the

deﬁned destination TCP or UDP port of port 21 (FTP) to be redirected to a host on the local LAN interface.

For example, suppose the WWW server on the Internet with the IP address of 163.176.4.32 wants to access

Workstation B on the Netopia R7200s local LAN interface which is operating as an FTP server. The IP address

for Workstation B is 192.168.5.3, which is not a valid IP address, and thus the WWW server on the Internet

cannot use this IP address to access Workstation B.

The WWW server on the Internet would then have to use the single valid IP address that was acquired on the

Netopia R7200's WAN interface to access any host on the Netopia R7200's local LAN interface, since this is

the only valid address for the Internet. But if the WWW server on the Internet opens a connection to 200.1.1.40

via port 21 (FTP) and no exported services are deﬁned on the Netopia R7200, the Netopia R7200 will discard

the incoming packet since the Netopia R7200 itself does not perform the requested service.

You can see why exported services are necessary. In the example above, an exported service needs to be

deﬁned within the Netopia R7200 redirecting any incoming IP trafﬁc with a destination port of 21 to the host on

the local LAN interface with the IP address of 192.168.5.3.

Download from Www.Somanuals.com. All Manuals Search And Download.

C-6 User’s Reference Guide

If the WWW server on the Internet then tries to open a connection to the IP address of 200.1.1.40 with the

appropriate exported service deﬁned, the Netopia R7200 will look at the destination port and will ﬁnd that it is

destined for port 21 (FTP). The Netopia R7200 then looks at the internal user-deﬁned exported services table

and ﬁnds that any incoming IP trafﬁc from the WAN port with a destination of port 21 (FTP) should be redirected

to the IP address of 192.168.5.3 on the local LAN interface, which in this case is Workstation B.

Once the appropriate exported services are deﬁned, there can be seamless communication between a host on

the Internet and a host on the Netopia R7200’s local LAN interface.

Important notes

Even with the advantages of NAT, there are several things you should note carefully:

There is no formally agreed-upon method among router vendors for handling an all-zeros IPCP request. The

majority of router vendors use the all-zeros IPCP request to determine when a dial-in host wants to be

assigned an IP address. Some vendors however attempt to negotiate and establish routing with an

all-zeros IP address. The Netopia R7200 will not allow routing to be established with an all-zeros IP

address and the call will be dropped with an error logged in the Device Event History.

When using NAT it is most likely that the Netopia R7200 will be receiving an IP address from a pool of

dynamic IP addresses at the ISP. This means that the Netopia R7200's IP presence on the Internet will

change with each connection. This can potentially cause problems with devices on the Internet attempting

to access services like WWW and FTP servers or AURP partners on the Netopia R7200’s local LAN

interface. In this case, if a dynamic IP address is assigned to the WAN interface of the Netopia R7200

each time, the administrator of the Netopia R7200 will have to notify clients who want to access services

on the Netopia R7200’s LAN interface of the new IP address after each connection.

With NAT enabled, there cannot be two or more of the same types of service accessible from the Internet

on the LAN interface of the Netopia R7200. For example, there cannot be multiple FTP servers (Port 23) on

the Netopia R7200's LAN interface that can be accessible by workstations on the Internet. This is because

there is no way within the Netopia R7200 and IP to distinguish between multiple servers using the same

port, in this case port 23.

Fictional IP addresses may be assigned on the Netopia R7200’s LAN interface. It is strongly recommended

that for the Netopia R7200’s LAN interface, an IP address from the Class C address range of 192.168.X.X

be used. This is because this range is deﬁned by the IANA as an address space that will never be routed

through the Internet and is to be used by private Intranets not attached to the Internet.

If the address range of 192.168.X.X is not used and another range of addresses such as 100.1.1.X is

used instead, this address space can potentially overlap an address space that is owned by a user

attached to the Internet. Thus if a user on the Netopia R7200’s LAN interface has an IP address of

100.1.1.2 while the Netopia R7200’s LAN interface is 100.1.1.2 and the local host wants to access a

host on the Internet with the address of 100.1.1.8, the Netopia R7200 has no way of knowing that the

200.1.1.8 address is actually on the Internet and not on its local LAN interface, since the local LAN

interface is assigned the IP address range of 200.1.1.1 to 200.1.1.14.

Download from Www.Somanuals.com. All Manuals Search And Download.

Understanding Netopia NAT Behavior C-7

Conﬁguration

NAT is enabled by default with the SmartStart conﬁguration utility. You can toggle Enable Address Translation to

No or Yes in the Connection Proﬁle screen in System Conﬁguration under the IP Proﬁle Parameters section. NAT

is enabled on a per-proﬁle basis, so it is possible to have any combination of NAT and non-NAT proﬁles. An

example of enabling NAT is as follows:

IP Profile Parameters

Remote IP Address:

Remote IP Mask:

127.0.0.2

255.255.255.0

Address Translation Enabled:

Yes

Filter Set...

Remove Filter Set

Receive RIP:

Enter the remote IP network's IP address (form xxx.xxx.xxx.xxx decimal).

Configure IP requirements for a remote network connection here.

Toggling Address Translation Enabled to Yes enables the Netopia R7200 to send out an all-zeros IPCP address

that requests an IP to be assigned to the Netopia R7200’s WAN interface. Note that the remote IP address is

127.0.0.2, which should also be the default gateway under IP Setup in System Conﬁguration. This is done for

proﬁle matching purposes and because the IP address of the router the Netopia R7200 is dialing is not always

known.

As mentioned earlier in this appendix, NAT works well for IP sessions originated on the Netopia R7200’s LAN

interface destined for the Internet without any additional conﬁguration. For incoming IP connections from the

Internet to a host on the Netopia R7200’s LAN interface, exported services need to be used.

Exported services are conﬁgured under IP Setup in System Conﬁguration. This is where a particular type of TCP

or UDP service originating from the Internet is redirected to a host on the Netopia R7200’s LAN interface. An

example of this screen follows:

Download from Www.Somanuals.com. All Manuals Search And Download.

C-8 User’s Reference Guide

Add Exported Service

+-Type------Port--+

+-----------------+

Service...

| ftp

| telnet

| smtp

Local Server's IP Address:

| tftp

| gopher

| finger

| www-http 80

| pop2

| pop3

| snmp

109 |

110 |

161 |

| timbuktu 407 |

| pptp

1723 |

6667 |

| irc

| Other...

+-----------------+

ADD EXPORT NOW

CANCEL

Within exported services is a pop-up list of well-known TCP and UDP services that can be redirected to a single

host on the Netopia R7200’s LAN interface. There is also an Other... option that allows for manual

conﬁguration of additional TCP or UDP ports. A total of 32 exported services can be deﬁned.

When a particular type of service is redirected to an IP address, that service is removed from the pop-up list,

since only one type of service can be redirected to a single host. However several different types of services

can be redirected to a single or multiple hosts. For example, port 80 (WWW server) could be redirected to

192.168.5.3 on the Netopia R7200’s LAN interface, and port 23 (Telnet) can be redirected to that same host.

Summary

NAT is a powerful feature of the Netopia R7200 and when used and set up properly can yield a secure network

while only using one IP address on the WAN interface. Note that the addresses listed in this appendix are for

demonstration purposes only. Do not use these addresses when conﬁguring your local network.

Download from Www.Somanuals.com. All Manuals Search And Download.

Binary Conversion Table D-1

Appendix D

Binary Conversion Table

This table is provided to help you choose subnet numbers and host numbers for IP and MacIP networks that

use subnetting for IP addresses.

Decimal

Binary

Decimal

Binary

Decimal

Binary

1000000

1000001

1000010

1000011

1000100

1000101

1000110

1000111

1001000

1001001

1001010

1001011

1001100

1001101

1001110

1001111

1010000

1010001

1010010

1010011

1010100

1010101

1010110

1010111

1011000

1011001

1011010

1011011

1011100

1011101

1011110

1011111

Decimal

Binary

1100000

1100001

1100010

1100011

1100100

1100101

1100110

1100111

1101000

1101001

1101010

1101011

1101100

1101101

1101110

1101111

1110000

1110001

1110010

1110011

1110100

1110101

1110110

1110111

1111000

1111001

1111010

1111011

1111100

1111101

1111110

1111111

100000

1000001

100010

100011

100100

100101

100110

100111

101000

101001

101010

101011

101100

101101

101110

101111

110000

110001

110010

110011

110100

110101

110110

110111

111000

111001

111010

111011

111100

111101

111110

111111

100

101

102

103

104

105

106

107

108

109

110

111

112

113

114

115

116

117

118

119

120

121

122

123

124

125

126

127

101

110

111

1000

1001

1010

1011

1100

1101

1110

1111

10000

10001

10010

10011

10100

10101

10110

10111

11000

11001

11010

11011

11100

11101

11110

11111

Download from Www.Somanuals.com. All Manuals Search And Download.

D-2 User’s Reference Guide

Decimal

Binary

10000000

10000001

10000010

10000011

10000100

10000101

10000110

10000111

10001000

10001001

10001010

10001011

10001100

10001101

10001110

10001111

10010000

10010001

10010010

10010011

10010100

10010101

10010110

10010111

10011000

10011001

10011010

10011011

10011100

10011101

10011110

10011111

Decimal

Binary

10100000

10100001

10100010

10100011

10100100

10100101

10100110

10100111

10101000

10101001

10101010

10101011

10101100

10101101

10101110

10101111

10110000

10110001

10110010

10110011

10110100

10110101

10110110

10110111

10111000

10111001

10111010

10111011

10111100

10111101

10111110

10111111

Decimal

Binary

11000000

11000001

11000010

11000011

11000100

11000101

11000110

11000111

11001000

11001001

11001010

11001011

11001100

11001101

11001110

11001111

11010000

11010001

11010010

11010011

11010100

11010101

11010110

11010111

11011000

11011001

11011010

11011011

11011100

11011101

11011110

11011111

Decimal

Binary

11100000

11100001

11100010

11100011

11100100

11100101

11100110

11100111

11101000

11101001

11101010

11101011

11101100

11101101

11101110

11101111

11110000

11110001

11110010

11110011

11110100

11110101

11110110

11110111

11111000

11111001

11111010

11111011

11111100

11111101

11111110

11111111

128

160

192

224

129

130

131

132

133

134

135

136

137

138

139

140

141

142

143

144

145

146

147

148

149

150

151

152

153

154

155

156

157

158

159

161

162

163

164

165

166

167

168

169

170

171

172

173

174

175

176

177

178

179

180

181

182

183

184

185

186

187

188

189

190

191

193

194

195

196

197

198

199

200

201

202

203

204

205

206

207

208

209

210

211

212

213

214

215

216

217

218

219

220

221

222

223

225

226

227

228

229

230

231

232

233

234

235

236

237

238

239

240

241

242

243

244

245

246

247

248

249

250

251

252

253

254

255

Download from Www.Somanuals.com. All Manuals Search And Download.