User manual SMC NETWORKS SMC7004VBR

[. . . ] BarricadeTM Broadband Router Broadband Router with 4-Port Switch N N N N N N Multi-user Internet access via single user account EZ 3-Click Installation Wizard Configurable Parental Control Stateful Packet Inspection and DoS support Supports a Wide Variety of Internet Applications Virtual Private Network using PPTP, L2TP, IPSec pass-through User Guide SMC7004VBR BarricadeTM Broadband Router User Guide From SMC's Barricade line of Broadband Routers 38 Tesla Irvine, CA 92618 Phone: (949) 679-8000 May 2002 Part Number: 150200009800A Revision Number: R01 Copyright Information furnished by SMC Networks, Inc. However, no responsibility is assumed by SMC for its use, nor for any infringements of patents or other rights of third parties which may result from its use. No license is granted by implication or otherwise under any patent or patent rights of SMC. SMC reserves the right to change specifications at any time without notice. [. . . ] When the SPI feature is turned on, all the incoming packets will be blocked unless certain types of traffic types are checked by the users. When the user checkes certain types of traffic, only the particular type of traffic initiated from the Internal LAN will be allowed. For example, if the user only checks "FTP service" from the Stateful Packet Inspection page, all the incoming traffic will be blocked except the FTP connection initiated from the local LAN. · Stateful Packet Inspection This option allows you to select different application types that are using dynamic port numbers. If you need to use the Stateful Packet Inspection (SPI) for blocking packets, click on the "Yes" radio button in the "Enable SPI and Anti-DoS firewall protection" field and then check the inspection type that you need, such as Packet Fragmentation, TCP Connection, UDP Session, FTP Service, H. 323 Service and TFTP Service. · Hacker Prevention Feature The Barricade firewall inspects packets at the application layer, and maintains TCP and UDP session information, including timeouts and number of active sessions, provides the ability to detect and prevent certain types of network attacks such as DoS attacks. Network attacks that deny access to a network device are called denial-of-service (DoS) attacks. Denials of Service (DoS) attacks are aimed at devices and networks with a connection to the Internet. Their goal is not to steal information, but to disable a device or network so users no longer have access to network resource. 4-28 CONFIGURING THE BARRICADE By using the above inspected information and timeout/threshold critieria, the Barricade provides the following DoS attack preventions: Ping of Death (Ping flood) attack, SYN flood attack, IP fragment attack (Teardrop Attack), Brute-force attack, Land Attack, IP Spoofing attack, IP with zero length, TCP null scan (Port Scan Attack), UDP port loopback, Snork Attack etc. . Note: The firewall does not significantly affect system performance, so we advise enabling the prevention features to protect your network users. · When hackers attempt to enter your network, we can alert you by e-mail Enter your E-mail address for alerting hacker access. · Connection Policy Enter the appropriate values for TCP/UDP sessions · DoS Criteria and Port Scan Criteria Setup DoS and port scan criteria in the spaces provided. 4-29 ADVANCED SETUP DMZ (Demilitarized Zone) If you have a client PC that cannot run an Internet application properly from behind the firewall, then you can open the client up to unrestricted two-way Internet access. Adding a client to the DMZ (Demilitarized Zone) may expose your local network to a variety of security risks, so only use this option as a last resort. Tools Use the "Tools" menu to backup the current configuration, restore a previously saved configuration, restore factory settings, update firmware, and reset the Barricade. 4-30 CONFIGURING THE BARRICADE Configuration Tools Choose a function and click "More Configuration. " 4-31 ADVANCED SETUP Backup Backup allows you to save the Barricade's configuration to a file. You can then check "Restore" to restore the saved backup configuration file. "Restore to factory defaults" resets the Baricade to the original settings. 4-32 CONFIGURING THE BARRICADE Firmware Upgrade This tool permits easy downloading of the latest Firmware. Download the upgrade file from the SMC website (www. smc. com) and save it to your hard drive. Check the Status page Information section to confirm that the upgrade process was successful. 4-33 ADVANCED SETUP Reset Click "Apply" to reset the Barricade. Note: If you use the Reset button on the rear panel, the Barricade performs a power reset. If the button is held depressed for over 5 seconds, all the LEDs will illuminate and the factory settings will be restored. 4-34 CONFIGURING THE BARRICADE Status The Status screen displays WAN/LAN connection status, firmware, and hardware version numbers, illegal attempts to access your network, as well as information on DHCP clients connected to your network. 4-35 ADVANCED SETUP The following items are included on this screen: Section INTERNET GATEWAY INFORMATION Description Displays WAN connection type and status. Displays the number of attached clients, the firmware versions, the physical MAC address for each media interface, as well as the hardware version and serial number. Click on this button to refresh Dynamic settings. Security Log Save Clear Refresh DHCP Client Log Release Renew 4-36 CHAPTER 5 CONFIGURING CLIENT TCP/IP If you have not previously installed the TCP/IP protocols on your client PCs, refer to the following section. If you need information on how to configure a TCP/IP address on a PC, refer to "Setting Up TCP/IP to Work with the Barricade" on page 5-5. Installing TCP/IP Windows 95/98/ME 1. [. . . ] Be sure the cable is plugged into both the Barricade and the corresponding device. Verify that the proper cable type is used and that its length does not exceed the specified limits. Be sure that the network interface on the attached device is configured for the proper communication speed and duplex mode. Check the adapter on the attached device and cable connections for possible defects. [. . . ]