Motorola Netopia Embedded Software Bedienungsanleitung

Administrator’s

Handbook

Motorola Netopia

Embedded Seftware

Version 8.7.4

Enterprise Series Routers

Administrator’s Handbook

make any derivative work (such as translation, transformation or adaptation) without written permission

from Motorola, Inc.

Motorola reserves the right to revise this publication and to make changes in content from time to time

without obligation on the part of Motorola to provide notification of such revision or change. Motorola

provides this guide without warranty of any kind, either implied or expressed, including, but not limited to,

the implied warranties of merchantability and fitness for a particular purpose. Motorola may make

improvements or changes in the product(s) described in this manual at any time. MOTOROLA and the

Stylized M Logo are registered in the US Patent & Trademark Office. Microsoft, Windows, Windows Me,

and Windows NT are either trademarks or registered trademarks of Microsoft Corporation in the U.S and/or

other countries. Macintosh is a registered trademark of Apple, Inc. Firefox is a registered trademark of the

Mozilla Foundation. All other product or service names are the property of their respective owners.

Motorola, Inc.

1303 East Algonquin Road

Schaumburg, Illinois 60196

USA

Version 8.7.4

Part Number

6161252-00-01

Contents iii

Chapter 1 — Introduction..........................................................1-1

What’s New in 8.7.4 ...................................................... 1-1

Telnet-based Management.............................................. 1-2

Motorola Netopia® Telnet Menus.................................... 1-2

Motorola Netopia® Models............................................. 1-3

Screen differences .............................................. 1-3

Connecting through a Telnet Session............................... 1-4

Conﬁguring Telnet software................................... 1-4

Navigating through the Telnet Screens............................. 1-5

Chapter 2 — WAN Conﬁguration................................................2-1

WAN Conﬁguration ......................................................... 2-1

WAN Ethernet Conﬁguration screen ....................... 2-1

ADSL Line Conﬁguration screen ............................ 2-4

Creating a New Connection Proﬁle................................... 2-8

Advanced Connection Options....................................... 2-15

Conﬁguration Changes Reset WAN Connection..... 2-15

Scheduled Connections...................................... 2-16

Backup Conﬁguration ......................................... 2-21

Diffserv Options ................................................ 2-22

Priority Queuing (TOS bit).................................... 2-25

VRRP Options (WAN Link Failure Detection).......... 2-26

Chapter 3 — System Conﬁguration............................................3-1

System Conﬁguration Features ....................................... 3-1

IP Setup........................................................................ 3-2

Filter Sets ..................................................................... 3-2

IP Address Serving ........................................................ 3-2

Network Address Translation (NAT) .................................. 3-2

Stateful Inspection......................................................... 3-3

Add Exposed Address List .................................... 3-3

Exposed Address Associations ............................. 3-7

VLAN Conﬁguration ...................................................... 3-11

Overview ........................................................... 3-11

Contents

Administrator’s Handbook

Ethernet Switching/Policy Setup ......................... 3-12

Associating Inter-VLAN Routing Groups ................ 3-17

Adding a RADIUS Proﬁle ..................................... 3-18

Adding Port interfaces ....................................... 3-20

Changing or Deleting a VLAN............................... 3-23

Changing or Deleting an Authentication Server

Conﬁguration ..................................................... 3-24

Conﬁguring additional Authentication Servers....... 3-25

VLAN Example ................................................... 3-27

Date and time ............................................................. 3-37

Wireless conﬁguration .................................................. 3-38

Wireless Multimedia (WMM) ............................... 3-40

Enable Privacy ................................................... 3-41

Multiple SSIDs................................................... 3-45

MAC Address Authentication............................... 3-47

Console Conﬁguration .................................................. 3-49

SNMP (Simple Network Management Protocol)............... 3-50

Security ...................................................................... 3-50

Upgrade Feature Set .................................................... 3-50

Router/Bridge Set........................................................ 3-51

IGMP (Internet Group Management Protocol) ................. 3-52

Logging ....................................................................... 3-55

Log event dispositions ....................................... 3-56

Procedure for Default Installation for ICSA ﬁrewall certiﬁcation

of Small/Medium Business Category Module

(ADSL Routers) ............................................................ 3-60

Chapter 4 — Multi-NAT .............................................................4-1

Overview ....................................................................... 4-1

Features ............................................................. 4-2

Supported trafﬁc ................................................. 4-5

Support for AOL Instant Messenger (AIM)

File Transfer ........................................................ 4-5

Support for Yahoo Messenger............................... 4-5

Contents v

MultiNAT Conﬁguration ................................................... 4-6

Easy Setup Proﬁle conﬁguration ............................ 4-6

Server Lists and Dynamic NAT conﬁguration........... 4-7

System Conﬁguration ........................................... 4-7

Modifying map lists............................................ 4-12

Adding Server Lists...................................................... 4-15

Modifying server lists ......................................... 4-18

Deleting a server ............................................... 4-20

Binding Map Lists and Server Lists ............................... 4-21

IP proﬁle parameters.......................................... 4-21

IP Parameters (WAN Default Proﬁle) .................... 4-23

NAT Associations ......................................................... 4-25

IP Passthrough ............................................................ 4-27

MultiNAT Conﬁguration Example.................................... 4-30

Chapter 5 — Virtual Private Networks (VPNs)............................5-1

Overview ....................................................................... 5-1

About PPTP Tunnels ....................................................... 5-4

PPTP conﬁguration ............................................... 5-4

About IPsec Tunnels....................................................... 5-7

About L2TP Tunnels ....................................................... 5-7

L2TP conﬁguration ............................................... 5-8

About GRE Tunnels ...................................................... 5-10

VPN force-all...................................................... 5-12

About ATMP Tunnels..................................................... 5-14

ATMP conﬁguration ............................................ 5-14

Encryption Support ...................................................... 5-16

MS-CHAP V2 and 128-bit strong encryption ......... 5-17

ATMP/PPTP Default Proﬁle............................................ 5-17

VPN QuickView ............................................................ 5-18

Dial-Up Networking for VPN ........................................... 5-19

Installing Dial-Up Networking............................... 5-20

Creating a new Dial-Up Networking proﬁle ............ 5-21

Administrator’s Handbook

Conﬁguring a Dial-Up Networking proﬁle ............... 5-21

Windows XP Client Conﬁguration ......................... 5-23

Connecting using Dial-Up Networking................... 5-23

Allowing VPNs through a Firewall ................................... 5-23

PPTP example.................................................... 5-24

ATMP example ................................................... 5-27

Windows Networking Broadcasts................................... 5-30

Chapter 6 — Internet Key Exchange for VPNs ............................6-1

Overview ....................................................................... 6-1

Internet Key Exchange (IKE) Conﬁguration........................ 6-2

Adding an IKE Phase 1 Proﬁle ............................... 6-4

Changing an IKE Phase 1 Proﬁle ........................... 6-9

Key Management......................................................... 6-11

Advanced IPsec Options ..................................... 6-14

IPsec WAN Conﬁguration Screens ................................. 6-21

IPsec Manual Key Entry................................................ 6-22

VPN Quickview................................................... 6-23

WAN Event History Error Reporting ...................... 6-24

Chapter 7 — IP Setup ...............................................................7-1

IP Setup........................................................................ 7-1

IP subnets........................................................... 7-3

Static routes ....................................................... 7-6

RIP Options ................................................................... 7-9

Overview ............................................................. 7-9

Authentication conﬁguration................................ 7-10

Connection Proﬁles and Default Proﬁle ................ 7-15

IP Address Serving ...................................................... 7-17

IP Address Pools................................................ 7-19

DHCP NetBIOS Options ...................................... 7-21

More Address Serving Options...................................... 7-23

Conﬁguring the IP Address Server options ........... 7-24

DHCP Relay Agent........................................................ 7-28

Contents vii

Connection Proﬁles ...................................................... 7-30

Multicast Forwarding.................................................... 7-32

Virtual Router Redundancy (VRRP) ...................... 7-34

Additional LANs ................................................. 7-38

Chapter 8 — Line Backup .........................................................8-1

Conﬁguring Backup ........................................................ 8-1

Connection Proﬁles ........................................................ 8-2

IP Setup.............................................................. 8-6

WAN Conﬁguration ......................................................... 8-7

Backup Conﬁguration screen ................................ 8-9

Using Scheduled Connections with Backup .................... 8-12

Backup Default Gateway............................................... 8-14

Backup Conﬁguration screen .............................. 8-14

IP Setup screen ................................................. 8-16

Backup Management/Statistics.................................... 8-16

QuickView ................................................................... 8-18

Chapter 9 — Monitoring Tools ...................................................9-1

Quick View Status Overview............................................ 9-1

General status..................................................... 9-2

Current status ..................................................... 9-2

Status lights........................................................ 9-3

Statistics & Logs ........................................................... 9-3

Event Histories .............................................................. 9-4

IP Routing Table............................................................. 9-6

General Statistics .......................................................... 9-6

System Information........................................................ 9-8

Simple Network Management Protocol (SNMP)................. 9-8

The SNMP Setup screen....................................... 9-9

SNMP traps....................................................... 9-11

Chapter 10 — Security ...........................................................10-1

Suggested Security Measures....................................... 10-1

viii

Administrator’s Handbook

Telnet Tiered Access – Two Password Levels ................. 10-1

UPnP Support.................................................... 10-2

Superuser conﬁguration ..................................... 10-3

Limited user conﬁguration .................................. 10-3

Advanced Security Options ........................................... 10-5

RADIUS server authentication ............................. 10-6

TACACS+ server authentication........................... 10-7

Warning alerts ................................................... 10-8

User access password ..................................... 10-11

User menu differences..................................... 10-12

Telnet Access ............................................................ 10-19

About Filters and Filter Sets........................................ 10-20

What’s a ﬁlter and what’s a ﬁlter set? ............... 10-20

How ﬁlter sets work ......................................... 10-20

How individual ﬁlters work ................................ 10-21

Design guidelines ............................................ 10-26

Working with IP Filters and Filter Sets .......................... 10-27

Adding a ﬁlter set............................................. 10-27

Deleting a ﬁlter set .......................................... 10-32

A sample ﬁlter set............................................ 10-32

Policy-based Routing using Filtersets........................... 10-35

TOS ﬁeld matching........................................... 10-37

Firewall Tutorial ......................................................... 10-38

General ﬁrewall terms ...................................... 10-38

Basic IP packet components............................. 10-38

Basic protocol types......................................... 10-38

Firewall design rules ........................................ 10-39

Filter basics..................................................... 10-41

Example ﬁlters................................................. 10-42

Conﬁguration Management ......................................... 10-45

TFTP ............................................................... 10-48

Contents ix

Chapter 11 — Utilities and Diagnostics ...................................11-1

Ping ............................................................................ 11-2

Trace Route................................................................. 11-4

Telnet Client ................................................................ 11-5

Factory Defaults .......................................................... 11-6

Transferring Conﬁguration and Software Files with TFTP .. 11-6

Updating software.............................................. 11-7

Downloading conﬁguration ﬁles ........................... 11-7

Uploading conﬁguration ﬁles ............................... 11-8

Restarting the System ................................................. 11-8

Appendix A — Troubleshooting..................................................A-1

Conﬁguration Problems .................................................. A-1

Network problems................................................ A-2

How to Reset the Router to Factory Defaults.................... A-2

Power Outages .............................................................. A-3

Technical Support .......................................................... A-3

Before contacting Motorola................................... A-3

Environment proﬁle .............................................. A-3

How to reach us .................................................. A-4

Online product information ................................... A-4

Index

Administrator’s Handbook

Dieses Handbuch passt für folgende Modelle

Inhaltsverzeichnis

Andere Motorola Netzwerk-Router Handbücher

Motorola

Motorola WR850GP - Wireless Broadband Router Bedienungsanleitung

Motorola

Motorola 2247 Bedienungsanleitung

Motorola

Motorola MOTOWI 4 PTP 600 Series Bedienungsanleitung

Motorola

Motorola Netopia R910 Bedienungsanleitung

Motorola

Motorola 2247 Bedienungsanleitung

Motorola

Motorola MotoWI4 PTP 600 Series Bedienungsanleitung

Motorola

Motorola 49901 - Vanguard 340 Router Bedienungsanleitung

Motorola

Motorola BSR 2000 Bedienungsanleitung

Motorola

Motorola WR850G - Wireless Broadband Router Bedienungsanleitung

Motorola

Motorola 7640-47 Handbuch

Motorola

Motorola BSR 2000 Programmierhandbuch

Motorola

Motorola PTP 300 Series Bedienungsanleitung

Motorola

Motorola BR700 - EN Broadband Router Betriebsanleitung

Motorola

Motorola BR700 - EN Broadband Router Bedienungsanleitung

Motorola

Motorola PTP 300 Series Kurzanleitung

Motorola

Motorola MH7021 Bedienungsanleitung

Motorola

Motorola Netopia 2247NWG Bedienungsanleitung

Motorola

Motorola RFS6000 - Wireless RF Switch Bedienungsanleitung

Motorola

Motorola MD1600 Bedienungsanleitung

Motorola

Motorola EWR6300 Bedienungsanleitung

Motorola

Motorola BSR 64000 Bedienungsanleitung

Motorola

Motorola BR700 - EN Broadband Router Bedienungsanleitung

Motorola

Motorola 68384 - Vanguard 320 Router Bedienungsanleitung

Motorola

Motorola PTP 600 Series Bedienungsanleitung

Beliebte Netzwerk-Router Handbücher anderer Marken

Allnet

Allnet ALL0333AU Bedienungsanleitung

HomeSeer

HomeSeer HT-SEL Bedienungsanleitung

Sercomm

Sercomm Genesis OC3505D Bedienungsanleitung

Billion

Billion BIPAC 5102 Series Bedienungsanleitung

TP-Link

TP-Link TD-8817 Bedienungsanleitung

Digi

Digi IX14 Bedienungsanleitung

Cisco

Cisco NCS 540 Handbuch

XAVi

XAVi X8821e Bedienungsanleitung

BEC

BEC 6200WZL Bedienungsanleitung

MikroTik

MikroTik hAP ac3 Series Bedienungsanleitung

Korenix

Korenix JetNet 5428G Series Bedienungsanleitung

NETGEAR

NETGEAR FS526T - Switch Bedienungsanleitung

Korenix

Korenix JetNet 5710G Series Bedienungsanleitung

Automated Logic

Automated Logic ZN551 Betriebsanleitung

Cisco

Cisco ASR 1000 Series Bedienerhandbuch

EnGenius

EnGenius ESR-9710 Bedienungsanleitung

Cisco

Cisco 805 Series Bedienungs- und Sicherheitshinweise

LevelOne

LevelOne FBR-1416 Bedienungsanleitung