SMC Networks Router SMC7004VBR V.2 User Manual

							Advanced Setup
29
[PPTP]
Point-to-Point Tunneling Protocol (PPTP) allows the secure 
remote access over the Internet by simply dialing in a local 
point provided by an ISP. Using the above screen allows 
client PCs to establish a normal PPTP session and provides 
hassle-free configuration of the PPTP client on each client PC. 
						

							Navigating the Web-based Administration
30
[Static IP Address]
If your Internet Service Provider has assigned a fixed 
IP address to you, enter the assigned address and subnet 
mask for the Barricade™, and then enter the gateway 
address of your ISP. You may need a fixed address if you 
want to provide Internet services, such as a web server, 
or FTP server. 
						

							Advanced Setup
31
[BigPond®]
Use this section to configure the built-in client. 
						

							Navigating the Web-based Administration
32
[DNS]
Domain Name Servers map numerical IP addresses 
to the equivalent domain name (e.g. 
www.smc.com or 
www.smc-europe.com
). Your ISP should provide the 
IP address of one or more domain name servers. 
Enter those addresses on this screen. 
						

							Advanced Setup
33
LAN 
From this section, you can configure the TCP/IP configuration 
for the Barricade™ LAN interface and DHCP clients.
LAN IP
Use the [LAN] menu to configure the LAN IP address for 
the Barricade™ and to enable the DHCP server for dynamic 
client addresses allocation. Set a period for the lease time 
if required. For home networks, this may be set to Forever, 
which means there is no time limit on the IP address lease.
IP Address Pool
A dynamic IP start address may be specified by the user, 
e.g. 192.168.2.100 (default value). In this example, the IP 
addresses run from 192.168.2.100 to 192.168.2.199 which 
will be part of the dynamic IP address pool. IP addresses 
from 192.168.2.2 to 192.168.2.99, and 192.168.2.200 to 
192.168.2.254 will be available as static IP addresses.
Note: 
Do not include the address of the Barricade™ 
in the DHCP client address pool. 
						

							Navigating the Web-based Administration
34
NAT
From this section, you can configure the [Virtual Server] and 
[Special Application] features that provide control over the port 
openings in the routers firewall. This section can be used to 
support several Internet based applications such as VPN 
connections.
[Virtual Server]
You can configure the Barricade™ as a virtual server.  
Remote users accessing services such as the Web 
or FTP at your local site via public IP addresses can be 
automatically redirected to local servers configured with 
private IP addresses. To provide the most flexibility, 
the Barricade™ can support either a single port (80) 
or a range of ports (80-100). The traffic type can also 
be defined as TCP, UDP, or both (UDP and TCP).
Some of the more common ports include: HTTP: 80, 
FTP: 21, Telnet: 23 and POP3: 110. 
						

							Advanced Setup
35
[Special Applications]
Some applications, such as Internet gaming, videoconferencing, 
Internet telephony require multiple connections. These 
applications cannot work with Network Address Translation 
(NAT) enabled. If you need to run applications that require 
multiple connections, use the following screen to specify 
the additional public ports to be opened for each application.
Specify the port or port range normally associated with an 
application in the [Trigger Port/s] field, select the protocol type 
as TCP or UDP, and then enter the public ports and data type 
associated with the trigger port to open them for inbound traffic.
The maximum range that you can use for all NAT ports 
is 0 to 65535. 
						

							Navigating the Web-based Administration
36
Firewall
The firewall does not significantly affect system performance, 
so we advise enabling it to protect your network users. To enable 
the Stateful Packet Inspection (SPI) firewall, click on [Advanced] 
under the [Firewall] section and select [Enable] and click the 
[Apply] button.
The Barricade™ SPI firewall can provide the access control of 
connected client PCs, block common hacker attacks, including 
IP Spoofing, Land Attack, Ping of Death, IP with zero length, 
Smurf Attack, UDP Port Loopback, Snork Attack, TCP Null Scan, 
and TCP SYN Flooding. 
[Parental Control:]
Using this option allows you to specify different privileges 
for the client PCs. This is an excellent tool to control a childs 
access to specific content and/or general internet access for 
a specific time and/or date.
To setup a Parental Control Rule: Click on [Click here 
to configure a new Parental Control Rule] link. This will take 
you to the [Rule Setup] section. 
						

							Advanced Setup
37
[Rule Description:] 
Set a rule description so you know what this rule applies to. 
Ex. Jons Internet Access.
[DHCP menu option:] 
Apply this rule to a specific IP Address or range of 
IPs on your network. You can use the DHCP client list 
to quickly add IP addresses that were provided via DHCP 
connections. 
						

							Navigating the Web-based Administration
38
[Schedule for Rule:] 
Set the time and date this rule is active.  You can have this 
rule be active all the time or configure it to only be active on 
set days and times.
You can pick the dates you want this rule to be active 
by checking the box next to the date.
For time, set the start time you want the Rule to active, 
and then set how long you want the rule to run. 
[MAC Filtering Table]
The MAC Filtering feature of the Barricade™ allows you to 
control access to your network based on the MAC (Media 
Access Control) Address of the client machine. This ID is 
unique to each network adapter. 
You can configure that MAC address to be allowed to 
access your network, or to deny access to the network.