User manual NETOPIA 3300-ENT FIRMWARE USER GUIDE V8.7

[. . . ] Netopia Firmware User Guide 3300-ENT Enterprise-Series Netopia Firmware Version 8. 7 ® Copyright Copyright© 2006, Netopia, Inc. Netopia, the Netopia logo, Broadband Without Boundaries, and 3-D Reach are registered trademarks belonging to Netopia, Inc. , registered U. S. All other trademarks are the property of their respective owners. 6001 Shellmound Street Emeryville, CA 94608 U. S. A. Part Number Netopia part number 6161236-00-01 Contents Contents iii Chapter 1 -- Introduction. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-1 What's New in 8. 7 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [. . . ] Enter the packet specific information for this filter. ATMP example To enable a firewall to allow ATMP traffic, you must provision the firewall to allow inbound and outbound UDP packets specifically destined for port 5150. The source port may be dynamic, so often it is not useful to apply a compare function on this portion of the control/negotiation packets. You must also set the firewall to allow inbound and outbound GRE packets (Protocol 47, Internet Assigned Numbers Document, RFC 1700), enabling transport of the tunnel payload. From the Main Menu navigate to Display/Change IP Filter Set, and from the pop-up menu select Basic Firewall. Virtual Private Networks (VPNs) 5-29 Main Menu System Configuration Filter Sets Display/Change Filter Set Basic Firewall Select Display/Change Input Filter. Display/Change Input Filter screen +--#----Source IP Addr----Dest IP Addr------Proto-Src. Port-D. Port--On?-Fwd--+ +---------------------------------------------------------------------------+ |1 0. 0. 0. 0 0. 0. 0. 0 TCP NC =2000 Yes No | |2 0. 0. 0. 0 0. 0. 0. 0 TCP NC =6000 Yes No | | | +---------------------------------------------------------------------------+ Select Input Filter 1 and press Return. In the Change Input Filter 1 screen, set the Destination Port information as shown below. Change Input Filter 1 Enabled: Yes Forward: Yes Call Placement/Idle Reset: No Change Force Routing: No Source IP Address: Source IP Address Mask: Dest. IP Address Mask: TOS: TOS Mask: Protocol Type: Source Port Compare. . . Only: 0. 0. 0. 0 0. 0. 0. 0 0. 0. 0. 0 0. 0. 0. 0 0 0 TCP No Compare 0 Equal 1723 No Return/Enter accepts * Tab toggles * ESC cancels. Enter the packet specific information for this filter. Select Input Filter 2 and press Return. In the Change Input Filter 2 screen, set the Protocol Type to allow GRE as shown below. 5-30 Firmware User Guide Change Input Filter 2 Enabled: Yes Forward: Yes Call Placement/Idle Reset: No Change Force Routing: No Source IP Address: Source IP Address Mask: Dest. IP Address Mask: TOS: TOS Mask: Protocol Type: 0. 0. 0. 0 0. 0. 0. 0 0. 0. 0. 0 0. 0. 0. 0 0 0 GRE Return/Enter accepts * Tab toggles * ESC cancels. Enter the packet specific information for this filter. In the Display/Change IP Filter Set screen select Display/Change Output Filter. Display/Change Output Filter screen +-#----Source IP Addr----Dest IP Addr------Proto-Src. Port-D. Port--On?-Fwd-+ +-------------------------------------------------------------------------+ |1 0. 0. 0. 0 0. 0. 0. 0 TCP NC =1723 Yes Yes | |2 0. 0. 0. 0 0. 0. 0. 0 GRE --Yes Yes | | | +-------------------------------------------------------------------------+ Virtual Private Networks (VPNs) 5-31 Select Output Filter 1 and press Return. In the Change Output Filter 1 screen, set the Protocol Type and Destination Port information as shown below. Change Output Filter 1 Enabled: Yes Forward: Yes Call Placement/Idle Reset: No Change Force Routing: No Source IP Address: Source IP Address Mask: Dest. IP Address Mask: TOS: TOS Mask: Protocol Type: Source Port Compare. . . Port ID: 0. 0. 0. 0 0. 0. 0. 0 0. 0. 0. 0 0. 0. 0. 0 0 0 UDP No Compare 0 No Compare 5150 Return/Enter accepts * Tab toggles * ESC cancels. Enter the packet specific information for this filter. Select Output Filter 2 and press Return. In the Change Output Filter 2 screen, set the Protocol Type to allow GRE as shown below. Change Output Filter 2 Enabled: Yes Forward: Yes Call Placement/Idle Reset: No Change Force Routing: No Source IP Address: Source IP Address Mask: Dest. IP Address Mask: TOS: TOS Mask: Protocol Type: 0. 0. 0. 0 0. 0. 0. 0 0. 0. 0. 0 0. 0. 0. 0 0 0 GRE Return/Enter accepts * Tab toggles * ESC cancels. Enter the packet specific information for this filter. 5-32 Firmware User Guide Windows Networking Broadcasts Netopia firmware provides the ability to forward Windows Networking NetBIOS broadcasts. This is useful for, for example, a Virtual Private Network, in which you want to be able to browse the remote network to which you are tunnelling, as part of your Windows Network Neighborhood. Routed connections, such as VPNs, can not use NetBEUI to carry the Network Neighborhood information. They need to use NetBIOS, because NetBEUI cannot be routed. This feature will allow browsing the Network Neighborhood without any additional workstation configuration. [. . . ] See "Statistics & Logs" on page 9-3 for more information. Troubleshooting A-3 How to Reset the Router to Factory Defaults Lose your password?This section shows how to reset the Netopia Router so that you can access the configuration screens once again. Note: Keep in mind that all of your settings may need to be reconfigured. If you don't have a password, the only way to access the Netopia Router is the following: 1. Referring to the diagram below, find the round Reset Switch opening. Example Netopia Router back panel Factory Reset Switch: Push to clear all settings 2. 3. Carefully insert the point of a pen or an unwound paperclip into the opening. [. . . ]