Instruction/ maintenance manual of the product NBG800 Soho
Go to page of 83
BroadGuard ™ Secure Cable/DSL Router User’s Guide P/N: 85- 500600- 02 Rev: A1 Janua ry 2001 SOHOw are Inc. Tel: +1 (40 8) 565-988 8 Fax: +1 (408) 565-988 9 SOHOw are Europ e Tel: +44 14 89 611 788 Fax: +44 1489 611 787 Technical Support E-mail: support@s ohoware.
ii SOHOware ® Secure Cable/DSL Router T R AD E M AR K S SOHOware is a trademark of SOHO ware Inc. All other names me ntioned in this document are tradem arks/registered tradem arks of their respective owners.
SOHOware ® Secure Cab le/DSL Router iii Packing List Check the contents of your package to ensure that they match the packing list below. If any thing is miss ing or damaged, cont act the store where you purch ased the product .
iv SOHOware ® Secure Cable/DSL Router Table of Contents CHAPTER 1: INTRODUCTI ON ......................................................................... 1 F EATURES AND B ENEFIT S ....................................................................
SOHOware ® Secure Cab le/DSL Router v Access Contr ol ................................................................................................32 DMZ Host ........................................................................................
vi SOHOware ® Secure C able/DSL Route r List of Figure s Figure 1. Broa dG uard Connecti ons ...................................................................................... 1 Figure 2. Fr ont Panel .............................................
SOHOware ® Secure Cab le/DSL Router vii Figure 31. Ca ble Broadba nd Con nection ............................................................................. 24 Figure 32. N etwork ....................................................................
viii SOHOware ® Secure Ca b le/DSL Ro uter Figure 63. Co ntrol Panel ...................................................................................................... 5 2 Figure 64. N etwork ......................................................
SOHOware ® Secure Cab le/DSL Router 1 Chapter 1: Intr oduction The SOHOware BroadGuard Secure cable/DSL Router provides convenien t Internet access to off ice/family users by sharing a single Broadband Service Provider (BSP) accoun t.
2 SOHOware ® Secure Cable/DSL Router algorithm (Denial of Service & Stateful Packet Inspection) protect your PCs from hack er attacks. • Access Control – Provides management/control of Internet application use.
SOHOware ® Secure Cab le/DSL Router 3 LED Indicators LED Color Function Power Green Lit: Power ON Unlit: Po wer OFF Status Red Blink ing: On power-u p the BroadGuard ch ecks for proper ope ration. The check ing procedure takes only a few seconds Lit: If this LED is always lit, the device is not working properly.
4 SOHOware ® Secure Cable/DSL Router port of a cable /DSL m odem Reset Re-start the BroadGu ard by pres sing the Res et button for longer than 5 seconds. If you forg et the password for the Setup Wizard, res tore the default settin gs b y pressing the reset button for lo nger than 13 seconds.
SOHOware ® Secure Cab le/DSL Router 5 Chapter 2: Installation What You Need Before installing the SOHOware BroadGuard y ou need the following: Any Network Operating System with: • TCP/IP installed .
6 SOHOware ® Secure Cable/DSL Router 4. If you have a fixed pu blic IP addres s, obtain t he foll owing informat ion from yo ur I SP • The assign ed Gateway IP address • Domain Name Serv er’s IP address • Subnet Mask Making a Co nnection All the connection ports are o n the rear panel of the BroadGuard.
SOHOware ® Secure Cab le/DSL Router 7 Some BSPs use an Eth ernet ad apter’s MAC address as an identifier to provide Internet service. In these cases you need to clone the Eth ernet adapters MAC address to the BroadGuard.
8 SOHOware ® Secure Cable/DSL Router Wireless LAN Exten sion This section describes how to extend your Broa d Guard LAN to a CableFREE NetBlaster II Wireless hub. Just connect any nor mal port of the BroadGuard to the CableFREE NetBlaster II wi th standard RJ-45 Ethern et cable (for more SOHOware NetBlaster II information, visit www.
SOHOware ® Secure Cab le/DSL Router 9 Network Configur ation If your local n etwork will access the Internet through a single IP, you n eed to configure the TCP/IP setting s. For Windows 95/98/Me, see th e following section , for Windows NT 4.0 go to pag e 13, and for Win dows 2000 go to page 15.
10 SOHOware ® Secure Cable/DSL Router step3. If TCP/IP is already shown in the list, go to Step 6. If not, click Add . The Select Net work Component T ype dialog box will open ( Figure 9 ) Figure 9. Select Net work Componen t Type step4. Double-click Protocol .
SOHOware ® Secure Cab le/DSL Router 11 Figure 11. Network step6. On the Confi guration card ( Figure 11 ), select TCP/IP and click Propertie s. The TC P/IP Properties dialog box will open ( Figure 12 ) Figure 12. TCP/IP Properties -1 step7. On the IP Address page ( Figure 12 ), select Obtain an I P address automatica lly .
12 SOHOware ® Secure Cable/DSL Router step8. On the IP Address page ( Figure 12 ), select Specify an IP addr ess and assign an IP to y our PC in the IP Address f ield. If the PC is to be used as a DMZ Host, or cont rolled by Access Control, assign an IP to the PC from the rang e 192.
SOHOware ® Secure Cab le/DSL Router 13 Windows NT 4.0 step1. Click Start/ Setti ngs/Co ntro l Panel Figure 14. Control Panel step2. Double-click the Network icon ( Figure 14 ).
14 SOHOware ® Secure Cable/DSL Router Figure 16. Microsoft TCP/IP Properties-1 step4. On the IP Address page ( Figure 16 ), select Obt ain an IP ad dress from a DHCP se rv er and click OK and g o to step 6.
SOHOware ® Secure Cab le/DSL Router 15 Figure 17. Microsoft TCP/IP Properties-2 step7. The system will ask you to restart the co mputer. Click Yes to complete the installation Windows 2000 step1.
16 SOHOware ® Secure Cable/DSL Router step2. Double-click the Network and Di al-up Con nections icon ( Figure 18 ). The Ne twork and Di al-up Connecti ons windo w will op en ( Figure 19 ) Figure 19. Network a nd Dial-up Connections step3. Double-click Local Area Connection .
SOHOware ® Secure Cab le/DSL Router 17 Figure 21. Local A rea Connection Properti es step5. Select Internet Prot ocol (TCP/IP) , an d click Propert ies ( Figure 21 ). The Inter net Protocol ( TCP/IP) Properties window will open ( Figure 22 ) Figure 22.
18 SOHOware ® Secure Cable/DSL Router step6. Select Obtain an IP address automatically an d Obtain DNS server address automatical ly . Click OK an d go to step 9.
SOHOware ® Secure Cab le/DSL Router 19 Mac OS Using the DHCP server to assi gn an IP address step1. Click the Apple icon in th e upper left corner of the sc reen and select Control Pa n el/TCP/IP . The TCP/IP (Setup Ether net) dialog box will appear as shown in Figure 24 Figure 24.
20 SOHOware ® Secure Cable/DSL Router Figure 25. Manual Configuration of IP A ddresses step2. From the Connect Via list box , choose Ethernet step3. From the Configure list box, ch oose Manually step4. In the IP Addres s field, ty pe an IP address: 19 2.
SOHOware ® Secure Cab le/DSL Router 21 Chapter 3: Networ k Configur at ion BroadGuard Network Co nfigurat ion Netw ork Configurati on is easy to s etup on the BroadGuard us ing a standard w eb browse r (Netscape Communi cator 4.0/Microsof t Intern et Explorer 3.
22 SOHOware ® Secure Cable/DSL Router Setup Ho me Page There are three sections on the home page: Setup (Basic) Broadband Connection Use when your BSP (Broadban d Service Provider) requests you to enter specific settin gs, e.g. MAC address authentication, PPPo E, host name/domain n ame, or specifies an IP address to make an Internet connection.
SOHOware ® Secure Cab le/DSL Router 23 Hacker Alert Test Sends a test Hacker Alert E-mail View Current Access Co ntrol Settings The PCs in the list have been denied access to the services shown. Access Mo nitor Shows the current Internet activities o f moni t ore d users.
24 SOHOware ® Secure Cable/DSL Router Basic Broadband Co nnection Figure 30. Broadband Conn ection Select the type of Broadband serv ice that you are subscribed to.
SOHOware ® Secure Cab le/DSL Router 25 MAC Addr ess Clone : Some BSPs u se an Ethernet adapter’s MAC address as an identifier to provide In ternet service. In th ese cases, you need to clone the Ethern et adapter’s MAC address t o the BroadGuard.
26 SOHOware ® Secure Cable/DSL Router Figure 32. Network step2. Click on the Identification tab and write down the infor mation contained in th e Comp uter Na me field – th is is your Host Name Windows NT 4.0 step1. Right-click Network Neigh borhood .
SOHOware ® Secure Cab le/DSL Router 27 step2. Write down the infor mation c o ntained in the Computer Na me field – this is your Host Na me Windows 2000 step1. Right-click My Com puter . Click Propert ies . The System Properti es dialog box will open Figure 34.
28 SOHOware ® Secure Cable/DSL Router Figure 35. Cable Broadb and Connection Click Save and Res tart to start shar i ng yo ur br oad band connec tion.
SOHOware ® Secure Cab le/DSL Router 29 Connect-on- demand --- This se ttin g allo ws the BroadGuard to auto matically make a connection to your BSP whenever y ou la unch an Internet application.
30 SOHOware ® Secure Cable/DSL Router Hacker Atta ck E- mail Alerts Figure 38. Hac ker Attack E- mail Alerts An anti-attack algorithm is built in to the BroadGuard so that it can protect client PCs f rom conventi onal attacks. With BroadGuard, y ou hav e a profession al firewa ll but withou t any specialized s etup/conf iguration.
SOHOware ® Secure Cab le/DSL Router 31 Change Password Figure 39. Chang e Password For security reasons you should change the default administrator passw ord (1234) to a passw ord of you r choice. step1. Enter the current password, the new passw ord, and then retype it for verif icat i o n.
32 SOHOware ® Secure Cable/DSL Router Advanced Access Control Figure 40. A ccess Control This feature preven ts users (or children) f rom running disallowed Internet applications or access ing unsuitable webs ites (maximum 10 websites ). In order to achieve this functionality, a st atic IP should be assigned to users who will be restricted.
SOHOware ® Secure Cab le/DSL Router 33 Figure 41. Global ly Disallo wed Websites/Key words This list will be applied to all restricted users. Enter the full domain name of the website or jus t enter a k eyword.
34 SOHOware ® Secure Cable/DSL Router DMZ Host Figure 42. DMZ Host Usually all PCs conn ected to the BroadGuard are protected from Internet intruders by a built-in firewall. For some kinds of Internet applications, for example, Internet interactive games, vi deo-conferencing, VPN (Virtual Private Networks), or as an e-mail serv er etc.
SOHOware ® Secure Cab le/DSL Router 35 DHCP Settings Figure 43. DHCP Settings Under normal operation , all client PCs’ IP addresses are automa tically assigned by the BroadGu ard’s DHCP server. The IP address range runs from 192.168.1.1 to 192.168.
36 SOHOware ® Secure Cable/DSL Router Each time th e BroadGuard is powered-off , the DH CP IP Addr ess Assignm ents information will be cleared, even though your computer may still be switched on. To prevent t his problem : step1. Shut do wn yo ur PC step2.
SOHOware ® Secure Cab le/DSL Router 37 BroadG uard IP Addres s: The IP add ress of th e NGB800 Subn et Mask: 255.255.2 55.0 is the defau lt setting MAC Address : The MAC address of the BroadGu ard Fi.
38 SOHOware ® Secure Cable/DSL Router Figure 47. PPPoE Service R unning Figure 48. PPPoE Check Su ccessful If you see a screen similar to the following ( Figure 49 ), it means that y our BSP ’s server m ay not be operatin g, or somethi ng could be w rong with y our DSL modem, e.
SOHOware ® Secure Cab le/DSL Router 39 Figure 49. PPPoE Check Un successful A screen such as that shown in Figure 50 indicates that y ou entered a wrong user name, l ogi n p as s word , or service na me. Go t o the DS L b roa dband conne ctio n setup page to ch eck them again.
40 SOHOware ® Secure Cable/DSL Router Hacker Aler t Test Figure 51. Hac ker Alert Test Click the Alert Te st button to auto matically generate an email sent to the add r ess specified in Hacker Attack E-m ail Alerts, page 30. The subject line will read “NBG800 Hack er Alert Test”.
SOHOware ® Secure Cab le/DSL Router 41 Access Monitor Figure 53. A ccess Monit or Access Monitor sho ws the curr ent Internet activities o f monitored users.
42 SOHOware ® Secure Cable/DSL Router Windo ws Use rs Download the firmware from the SOHO ware web site and save the file on your local hard drive. Double-click the file and follow the on-scre en instruc tio ns to run the firmware upgrade.
SOHOware ® Secure Cab le/DSL Router 43 Chapter 4: T r oubleshooting If you cannot find y our problem li sted below, s ee Chapter 5: FA Q s, page 49, or see the BroadGuard FA Q at the SOHO ware website. 1. I can’t connect to the BroadG uard. The BroadGuard is properly installed, LAN connections are OK, and it is powered ON.
44 SOHOware ® Secure Cable/DSL Router Figure 55. Status Check that the PC got an IP address as signed to it automatically (for Window s 95/98/Me see Fig ure 12, page 11. For Windows NT 4.0, see Figu re 16, page 14. F or Window s 2000 see Fig ure 22, page 17.
SOHOware ® Secure Cab le/DSL Router 45 Figure 57. IP Configuration step3. Select the network adapter y ou use to connect to the BroadGuard. Click Relea se step4. Click Rene w to retrieve new information (IP add r ess, subnet mask, and default gateway address) fro m the BroadGuard.
46 SOHOware ® Secure Cable/DSL Router Figure 59. Command Pro mpt-2 step4. Ty pe Ex it step6. Go to DHCP IP Ad dress A ssi gnm ents (see Figure 44, pag e 35). Click Refres h Wind ows 2000 step1. Click Start/Programs/Accessories/Command Prompt Figure 60.
SOHOware ® Secure Cab le/DSL Router 47 Figure 61. Command Pro mpt-4 step4. Ty pe Ex it . step5. Go to DHCP IP Ad dress A ssi gnm ents (see Figure 44, pag e 35). Click Refres h 4. Entering a URL or IP addres s results in a timeout error. Follo w the steps belo w to solve this pro blem: step1.
48 SOHOware ® Secure Cable/DSL Router 5. You can’t vi ew a PC’s na me or its I P address in the DHC P IP Ad dress Assignm ents pa ge, though it can still access the Internet. Each time th e BroadGuard is powered- off, the DH CP IP Address Ass ignments information will be cleared, even though your computer may still be switched on.
SOHOware ® Secure Cab le/DSL Router 49 Chap ter 5: F A Qs How many PCs simultaneously acces sing the Internet can be supported by the BroadG uard? 253 PCs m ay simultaneously access the Intern et via the BroadGuard.
50 SOHOware ® Secure Cable/DSL Router www.sohoware.com, w here they can be downloaded f or free. Does the Bro adGuard pass PPTP pac kets? Yes. Does the BroadG uard su pport IPSec? This function will be supported in later f irmware upgrades.
SOHOware ® Secure Cab le/DSL Router 51 from the Internet only if it is part of a sessio n that was initiated by one of the users on the secure Local A rea Network (LAN), bu t will block all communications that are initiated from the Internet.
52 SOHOware ® Secure Cable/DSL Router Appendix A: VPN R EMO TE A CCESS Thanks to adv anced technology, you can us e the BroadGuard to remotely access your offi ce VPN server from your home office an d you also can build a VPN server f or mobile sales to access f or urgent purposes.
SOHOware ® Secure Cab le/DSL Router 53 step2. In Cont rol Panel , doubl e-click th e Network icon. The Netw ork dialog box w ill open ( Figure 64 ) Figure 64. Network step3. Click Add . The Select Netw ork Component Type dialog box will open ( Figure 65 ) Figure 65.
54 SOHOware ® Secure Cable/DSL Router step5. In the left window, choose Microsoft . In the right, select Microsoft Virtual Private Net working Adapter . A fter the Microsoft Virtual Private Networking Adapter compon ent is completely installed, click OK .
SOHOware ® Secure Cab le/DSL Router 55 Figure 68. Welcom e to Dial-U p Networking step9. Click Next . T he Make New Connection dialog box will open ( Figure 69 ) Figure 69. Make N ew Connection-1 step10. Type a descriptive n ame for the connection. Choose M icrosoft VPN Adapter from the Select a device dropdown list.
56 SOHOware ® Secure Cable/DSL Router Figure 70. Make N ew Connection-2 step11. Enter the Intern et IP Address of the VPN serv er you want to connect to and click Next Figure 71. Make N ew Connection-3 step12. Click Fi nish to complete the settin gs.
SOHOware ® Secure Cab le/DSL Router 57 Figure 72. Dial-Up Net w orking step15. Doub le-cl ick t he ne wly- cre ate d ic on. T he Connect To dialog box will open ( Figure 73 ) Figure 73. Connect To step16. Enter y our User name , Pas sword, and the Intern et IP address of the VPN serve r .
58 SOHOware ® Secure Cable/DSL Router Figure 74. Connection E stablished Windows 2000 VPN Server Setup Note: You m ust have two N etwork Int erface Cards install ed in your Window s 2000 server. step1. Click Start/Progr ams/Admini strati ve Tools/R outing and Remote Access Figure 75.
SOHOware ® Secure Cab le/DSL Router 59 Figure 76. Common Confi gurations step3. Chec k Virtual pr ivate networ k (VPN) se rver and click Next . The Remote Cli ent Protocols dialog box will open ( Figure 77 ) Figure 77. Remote Clie nt Protocols step4.
60 SOHOware ® Secure Cable/DSL Router Figure 78. Internet Conn ection step5. Highlight the Local Area Connection with the IP address in the 192.168. 1.2 ~192.168 .1.254 ra nge. Cli ck Next . The IP Add re ss Assignm ent box will open ( Figure 79 ) Figure 79.
SOHOware ® Secure Cab le/DSL Router 61 Figure 80. A ddress Range A ssignment step7. Click Next . T he New Address Range b ox will open ( Figure 81 ) Figure 81. Ne w Address Range step8. In the Star t IP address field, enter a start IP address in the range 192.
62 SOHOware ® Secure Cable/DSL Router Figure 82. A ddress Range A ssignment step9. Click Next . T he Managing Multiple Remote Access Servers dialog box will open ( Figure 83 ) Figure 83. Managi ng Multiple Remote A ccess Servers step10. Chec k No, I don’t w ant… then click Next step11.
SOHOware ® Secure Cab le/DSL Router 63 step12. Click OK to return to the Routing and Remote Access m a in screen ( Figure 85 ) Figure 85. Routin g and Remote A ccess step13. In the l eft pane, doubl e-click the s erver and double- click IP Routing . In the righ t, double- click the Local Area Co n nection with the IP address in the 192.
64 SOHOware ® Secure Cable/DSL Router Figure 86. Local A rea connection Properties step14. On the General card, check Enable IP Router Manager . Click Input Filters. Remove all filters from the list, then click OK . Click Output Filters . Once again, remove all filters from the list, then click OK .
SOHOware ® Secure Cab le/DSL Router 65 Figure 87. A dministrative Tools step2. Double-click Co mputer Ma nagem e nt. Expand System T ools/Local Users and Groups. Click Us ers to show all use r s lists i n Computer Management ( Fi gure 88 ) Figure 88.
66 SOHOware ® Secure Cable/DSL Router Figure 89. User Pr operties step4. On the Dial-in card, check either Allow access or Contro l access through Remote Acces s Policy (w hich on e you u se depends on y our security policy). Click OK to save a nd co mplete the setting.
SOHOware ® Secure Cab le/DSL Router 67 step5. When there is a live conn ection from a remote user, the icon will show activity ( Figure 90 ) Note: Connections to the VPN server may take sever al attempts before a connection is es tablished.
68 SOHOware ® Secure Cable/DSL Router Appendix B: G LOSSAR Y Ethernet One of the m ost co mmon Local Area Network (LAN) protocols. Eth ernet uses a bus topol ogy that supports a d ata transf er rate of 10Mbps. Fast Ethernet Much the s ame as Ethernet but 10 times f aster; requires upgraded netw ork cards and hubs .
SOHOware ® Secure Cab le/DSL Router 69 PPPoE s upports reli able and strai ghtforward en d-user authentication with no security ri sk and can provide a range of operational ben efits to both the s ubscriber as well as the service prov ider.
70 SOHOware ® Secure Cable/DSL Router TCP/IP protocols are used f or Internet communications an d consist of: TCP (Tra nsmissio n Cont r ol P roto col ) , which use s a se t o f rul e.
SOHOware ® Secure Cab le/DSL Router 71 T echnical Specifications Standards C o mpliance IEEE 802.3 10Base-T & 100Base -TX Certifica tions FCC Class B, VCCI, CE Standards C ompliance Com pression .
72 SOHOware ® Secure Cable/DSL Router T echnical Suppor t Support from Your Network Supplier If additional assistance is required, call your supplier for help.
SOHOware ® Secure Cab le/DSL Router 73 SOHOware Limited War ranty Hardwa re SOHOware, In c. warrants its products to be free of defects in w or kmanship an d materials, under n ormal use and service,.
74 SOHOware ® Secure Cable/DSL Router 1. Inform the dis tributor or retailer 2. Ship the produ ct back to the dis tributor/ retailer with prepai d freight. The purchas er must pay the sh ipping freigh t from the distribu tor/retailer t o SOHOware. Any package sent C.
SOHOware ® Secure Cab le/DSL Router 75 EC DEC LARA TION OF CONF OR MITY For the f ollowing equipm ent : Product Name : BroadGuard™ - Secur e Cable/DSL Router Model Number : NBG800 Produce d by: Manufacturer’s Name : NATIONAL DATACOMM CORPOR ATION Manufacturer’s Address : 4F, NO.
An important point after buying a device Soho NBG800 (or even before the purchase) is to read its user manual. We should do this for several simple reasons:
If you have not bought Soho NBG800 yet, this is a good time to familiarize yourself with the basic data on the product. First of all view first pages of the manual, you can find above. You should find there the most important technical data Soho NBG800 - thus you can check whether the hardware meets your expectations. When delving into next pages of the user manual, Soho NBG800 you will learn all the available features of the product, as well as information on its operation. The information that you get Soho NBG800 will certainly help you make a decision on the purchase.
If you already are a holder of Soho NBG800, but have not read the manual yet, you should do it for the reasons described above. You will learn then if you properly used the available features, and whether you have not made any mistakes, which can shorten the lifetime Soho NBG800.
However, one of the most important roles played by the user manual is to help in solving problems with Soho NBG800. Almost always you will find there Troubleshooting, which are the most frequently occurring failures and malfunctions of the device Soho NBG800 along with tips on how to solve them. Even if you fail to solve the problem, the manual will show you a further procedure – contact to the customer service center or the nearest service center
