Zyxel HS100/HS100W - Manual

HomeSafe User’s Guide Warranty v ZyXEL Limited Warranty ZyXEL warrants to the original end user (purchaser) that this product is free from any defects in materials or workmanship for a period of up to two years from the date of purchase. During the warranty period, and upon proof of purchase, should...

HomeSafe User’s Guide vi Customer Support Customer Support When you contact your customer support representative please have the following information ready: Please have the following information ready when you contact customer support. • Product model and serial number. • Warranty Information. • Da...

HomeSafe User’s Guide Table of Contents vii Table of Contents Getting Started.................................................................................................................................................. I Chapter 1 Getting to Know Your HomeSafe .....................................

HomeSafe User’s Guide List of Figures xiii List of Figures Figure 1-1 Secure Internet Access via Cable, DSL or Wireless Modem ..................................................... 1-5 Figure 1-2 HomeSafe Parental Control Gateway Application ..............................................................

HomeSafe User’s Guide List of Figures xv Figure 9-7 Trigger Port Forwarding Process: Example ............................................................................. 9-10 Figure 9-8 Trigger Port .......................................................................................................

HomeSafe User’s Guide List of Figures xvii Figure 25-16 Example 3: Menu 15.1.1.1 ................................................................................................. 25-10 Figure 25-17 Example 3: Final Menu 15.1.1.............................................................................

HomeSafe User’s Guide List of Tables xix List of Tables Table 1-1 IEEE 802.11b .............................................................................................................................. 1-2 Table 1-2 IEEE 802.11g ......................................................................

HomeSafe User’s Guide List of Tables xxi Table 16-6 Maintenance : Firmware Upload ............................................................................................. 16-5 Table 16-7 Maintenance : Restore Configuration ...........................................................................

HomeSafe User’s Guide Preface xxiii Preface About This User's Manual Congratulations on your purchase of the HS-100 Parental Control Gateway or HS-100W Parental Control Gateway. This manual is designed to guide you through the configuration of your HomeSafe for its various applications. ) Some parts...

HomeSafe User’s Guide xxiv Preface Syntax Conventions • The version number on the title page is the latest firmware version that is documented in this User’s Guide . Earlier versions may also be included. • “Enter” means for you to type one or more characters and press the carriage return. “Select” ...

Getting Started I P P a a r r t t I I : : Getting Started This part helps you get to know your HomeSafe, introduces the web configurator and covers how to configure the Connection and Parental Control Wizard Setup screens.

HomeSafe User’s Guide Getting to Know Your HomeSafe 1-1 Chapter 1 Getting to Know Your HomeSafe This chapter introduces the main features and applications of the HomeSafe . 1.1 HomeSafe Parental Control Gateway Overview HomeSafe is a parental control security gateway that can give a parent control o...

HomeSafe User’s Guide 1-2 Getting to Know Your HomeSafe Content Filtering The HomeSafe can block access to Internet services according to how you configure parental control application blocking. You can define time periods and days during which content filtering is enabled and include or exclude cat...

HomeSafe User’s Guide 1-4 Getting to Know Your HomeSafe Network Address Translation (NAT) Network Address Translation (NAT) allows the translation of an Internet protocol address used within one network (for example a private IP address used in a local network) to a different IP address known within...

HomeSafe User’s Guide Getting to Know Your HomeSafe 1-5 Wireless Association List (HS-100W only) With the wireless association list, you can see the list of the wireless stations that are currently using the HomeSafe to access your wired network. 1.3 Applications for the HomeSafe Here are some examp...

HomeSafe User’s Guide 1-6 Getting to Know Your HomeSafe 1.3.3 Wireless LAN Application Add a wireless LAN to your existing network without expensive network cables. Wireless stations can move freely anywhere in the coverage area and use resources on the wired network. Figure 1-3 Wireless LAN Applica...

HomeSafe User’s Guide Introducing the Web Configurator 2-1 Chapter 2 Introducing the Web Configurator This chapter describes how to access the HomeSafe web configurator and provides an overview of the initial configuration screens. 2.1 Web Configurator Overview The embedded web configurator allows y...

HomeSafe User’s Guide 2-2 Introducing the Web Configurator ) The Welcome screen only appears when you first enter the HomeSafe web browser. After you fully configure the wizard you automatically proceed to the Password screen for all future logins, see Figure 2-25 . You may go to the Welcome screen ...

HomeSafe User’s Guide Introducing the Web Configurator 2-3 Figure 2-3 Wizard Step 2 : Wireless LAN Setup The following table describes the fields in this screen. Table 2-2 Wizard Step 2 : Wireless LAN Setup LABEL DESCRIPTION ESSID Enter a descriptive name (up to 32 printable 7-bit ASCII characters) ...

HomeSafe User’s Guide 2-4 Introducing the Web Configurator Figure 2-4 Wizard Step 2 : Wireless LAN Setup Basic Security The following table describes the labels in this screen. Table 2-3 Wizard Step 2 : Wireless LAN Setup Basic Security LABEL DESCRIPTION WEP Encryption Select 64-bit WEP or 128-bit W...

HomeSafe User’s Guide Introducing the Web Configurator 2-5 ) The wireless stations and HomeSafe must use the same ESSID, channel ID and Pre-Shared Key for wireless communication. Figure 2-5 Wizard Step 2 : Wireless LAN Setup Extend Security The following table describes the labels in this screen. Ta...

HomeSafe User’s Guide 2-6 Introducing the Web Configurator Table 2-5 Wizard Step 3 : Internet Access Setup LABEL DESCRIPTION Are you using a DSL service provider that requires a PPPoE login name and password? Select Yes from the drop-down list box if you are using a DSL service provider that require...

HomeSafe User’s Guide Introducing the Web Configurator 2-7 Figure 2-8 Wizard Step 3 : Internet Access Setup The following table describes the labels in this screen. Table 2-7 Wizard Step 3 : Internet Access Setup LABEL DESCRIPTION DHCP Static Select DHCP to have your Internet connection configured f...

HomeSafe User’s Guide 2-8 Introducing the Web Configurator Table 2-8 Wizard Step 3 : Internet Access Static IP Address Setup LABEL DESCRIPTION Internet Access Setup My WAN IP Address Enter your WAN IP address in this field. My WAN IP Subnet Mask Type your network's IP subnet Mask. Gateway IP Address...

HomeSafe User’s Guide Introducing the Web Configurator 2-9 Figure 2-11 Wizard Step 4 : Parental Control Wizard The following table describes the labels in this screen. Table 2-9 Wizard Step 4 : Parental Control Wizard LABEL DESCRIPTION Enable the Parental Control System Select the check box to allow...

HomeSafe User’s Guide 2-10 Introducing the Web Configurator Figure 2-12 Wizard Step 4 : Parental Control Time Setup The following table describes the labels in this screen. Table 2-10 Wizard Step 4 : Parental Control Time Setup LABEL DESCRIPTION Time Zone Choose the Time Zone of your location. This ...

HomeSafe User’s Guide Introducing the Web Configurator 2-11 Figure 2-13 Wizard Step 4 : Create or Edit a Profile The following table describes the labels in this screen. Table 2-11 Wizard Step 4 : Create or Edit a Profile LABEL DESCRIPTION Click a radio button to select a users profile. Username Thi...

HomeSafe User’s Guide 2-12 Introducing the Web Configurator Figure 2-14 Wizard Step 4 : Parental Control Profile Information The following table describes the labels in this screen. Table 2-12 Wizard Step 4 : Parental Control Profile Information LABEL DESCRIPTION User Name Type the profile user name...

HomeSafe User’s Guide Introducing the Web Configurator 2-13 2.6.5 Step 4 : Parental Control Time Allowance This screen allows you to set the amount of time during each day a user can access the Internet. By default a new user account does not have permission to access the Internet. Figure 2-16 Wizar...

HomeSafe User’s Guide 2-14 Introducing the Web Configurator The following table describes the labels in this screen. Table 2-14 Wizard Step 4 : Parental Control Time Allowance LABEL DESCRIPTION Unrestricted Select the check box for the day(s) that you do not want any time restrictions for user Inter...

HomeSafe User’s Guide Introducing the Web Configurator 2-15 Figure 2-17 Wizard Step 4 : Parental Control Application Blocking The following table describes the labels in this screen. Table 2-15 Wizard Step 4 : Parental Control Application Blocking LABEL DESCRIPTION Available services Select a servic...

HomeSafe User’s Guide 2-16 Introducing the Web Configurator Figure 2-18 Wizard Step 4 : Parental Control Summary The following table describes the labels in this screen. Table 2-16 Wizard Step 4 : Parental Control Summary LABEL DESCRIPTION Back Click Back to display the previous screen. Add/Edit Ano...

HomeSafe User’s Guide Introducing the Web Configurator 2-17 ) The web site displays a registration successful web page. It may take up to another ten minutes for content filtering to be activated. See Checking Content Filtering Activation for how to know if the content filtering has been activated. ...

HomeSafe User’s Guide 2-18 Introducing the Web Configurator Figure 2-20 Wizard Step 4 : Content Filter Registration If you click Register Later you will proceed to Figure 2-24 . 2.7 Step 5 : Content Filter Service Activation Once you have completed the registration process you can click Activate to ...

HomeSafe User’s Guide Introducing the Web Configurator 2-19 Figure 2-23 Content Filter Activation Failure 2.7.1 Content Filter Setup Complete Well done! You have finished configuration of Content Filter Service Activation. You may now click Close to finish using the setup wizard and close your brows...

HomeSafe User’s Guide 2-20 Introducing the Web Configurator If you want to configure more of your HomeSafe features, proceed with the rest of this User’s Guide. 2.9 Accessing the HomeSafe Web Configurator ) You have to open a new browser and enter the device IP address to log in again. 1. Launch you...

HomeSafe User’s Guide Introducing the Web Configurator 2-21 5. You should now see the MAIN MENU screen (see Figure 2-27 ). ) The management session automatically times out when the time period set in the Administrator Inactivity Timer field expires (default five minutes). Simply log back into the Ho...

HomeSafe User’s Guide 2-22 Introducing the Web Configurator Table 2-17 Screens Summary LINK TAB FUNCTION WIZARD SETUP CONNECTION Use these screens for initial configuration including general setup, Wireless LAN setup, ISP parameters for Internet Access and WAN IP/DNS Server/MAC address assignment. P...

HomeSafe User’s Guide Connection Wizard 3-1 Chapter 3 Connection Wizard This chapter provides information on the Connection Wizard screens in the main menu web configurator . 3.1 Connection Wizard Overview The web configurator’s setup wizard helps you configure your device to access the Internet. Th...

HomeSafe User’s Guide 3-2 Connection Wizard Figure 3-1 Connection Wizard : General Setup 3.3 Connection Wizard: Screen 2 Set up your wireless LAN using the second wizard screen. Figure 3-2 Connection Wizard : Wireless LAN Setup The following table describes the fields in this screen. Table 3-1 Conne...

HomeSafe User’s Guide Connection Wizard 3-3 Table 3-1 Connection Wizard : Wireless LAN Setup LABEL DESCRIPTION The level of Security can be selected as none, basic or extended. Choose No security to have no wireless LAN security configured and proceed to the ISP Parameters for Internet Access screen...

HomeSafe User’s Guide 3-4 Connection Wizard Key 1 to Key 4 The WEP keys are used to encrypt data. Both the HomeSafe and the wireless stations must use the same WEP key for data transmission. If you chose 64-bit WEP , then enter any 5 ASCII characters or 10 hexadecimal characters ("0-9", "...

HomeSafe User’s Guide Connection Wizard 3-5 Figure 3-5 Connection Wizard : Ethernet Encapsulation The following table describes the fields in this screen. Table 3-4 Connection Wizard : Ethernet Encapsulation LABEL DESCRIPTION ISP Parameters for Internet Access Encapsulation You must choose the Ether...

HomeSafe User’s Guide 3-6 Connection Wizard For the service provider, PPPoE offers an access and authentication method that works with existing access control systems (for instance, Radius). For the user, PPPoE provides a login and authentication method that the existing Microsoft Dial-Up Networking...

HomeSafe User’s Guide Connection Wizard 3-7 Table 3-5 Connection Wizard : PPPoE Encapsulation LABEL DESCRIPTION Idle Timeout Type the time in seconds that elapses before the router automatically disconnects from the PPPoE server. The default time is 100 seconds. Next Click Next to continue. Back Cli...

HomeSafe User’s Guide 3-8 Connection Wizard Table 3-6 Connection Wizard : PPTP Encapsulation LABEL DESCRIPTION User Name Type the user name given to you by your ISP. Password Type the password associated with the User Name above. Nailed-Up Connection Select Nailed-Up Connection if you do not want th...

HomeSafe User’s Guide Connection Wizard 3-9 ) Regardless of your particular situation, do not create an arbitrary IP address; always follow the guidelines above. For more information on address assignment, please refer to RFC 1597, Address Allocation for Private Internets and RFC 1466, Guidelines fo...

HomeSafe User’s Guide 3-10 Connection Wizard Table 3-8 Example of Network Properties for LAN Servers with Fixed IP Addresses Choose an IP address 192.168.1.2-192.168.1.32; 192.168.1.65-192.168.1.254. Subnet mask 255.255.255.0 Gateway (or default route) 192.168.1.1(HomeSafe LAN IP) The fifth wizard s...

HomeSafe User’s Guide Connection Wizard 3-11 Table 3-9 Connection Wizard : WAN Setup LABEL DESCRIPTION First DNS Server Second DNS Server Third DNS Server Select From ISP if your ISP dynamically assigns DNS server information (and the HomeSafe's WAN IP address). The field to the right displays the (...

HomeSafe User’s Guide 3-12 Connection Wizard Figure 3-10 Connection Wizard Problems Well done! You have successfully set up your HomeSafe to operate on your network and access the Internet.

System, LAN, and Wireless LAN II P P a a r r t t I I I I : : System, LAN, WLAN and WAN This part covers configuration of the system, LAN, WLAN and WAN screens.

HomeSafe User’s Guide System Screens 4-1 Chapter 4 System Screens This chapter provides information on the System screens. 4.1 System Overview See the Wizard Setup chapter for more information on the next few screens. 4.2 Configuring General Setup Click SYSTEM to open the General screen. Figure 4-1 ...

HomeSafe User’s Guide 4-2 System Screens Table 4-1 SYSTEM : General Setup LABEL DESCRIPTION First DNS Server Second DNS Server Third DNS Server Select From ISP if your ISP dynamically assigns DNS server information (and the HomeSafe's WAN IP address). The field below displays the (read-only) DNS ser...

HomeSafe User’s Guide 4-4 System Screens Table 4-2 SYSTEM : DDNS LABEL DESCRIPTION Apply Click Apply to save your changes back to the HomeSafe. Reset Click Reset to begin configuring this screen afresh. 4.5 Configuring Password To change your HomeSafe’s password (recommended), click SYSTEM , then th...

HomeSafe User’s Guide LAN Screens 5-1 Chapter 5 LAN Screens This chapter describes how to configure LAN settings. 5.1 LAN Overview Local Area Network (LAN) is a shared communication system to which many computers are attached. The LAN screens can help you configure a LAN DHCP server, manage IP addre...

HomeSafe User’s Guide 5-2 LAN Screens packets. When set to Both or Out Only , the HomeSafe will broadcast its routing table periodically. When set to Both or In Only , it will incorporate the RIP information that it receives; when set to None , it will not send any RIP packets and will ignore any RI...

HomeSafe User’s Guide LAN Screens 5-3 use the computer to access the Internet without changing the network settings, even when the IP addresses of the computer and the HomeSafe are not in the same subnet. Figure 5-1 Any IP Example Application The Any IP feature does not apply to a computer using eit...

HomeSafe User’s Guide 5-4 LAN Screens 5.5 Configuring IP Click LAN to open the IP screen. Figure 5-2 LAN : IP The following table describes the fields in this screen. Table 5-1 LAN : IP LABEL DESCRIPTION DHCP Server DHCP (Dynamic Host Configuration Protocol, RFC 2131 and RFC 2132) allows individual ...

HomeSafe User’s Guide 5-6 LAN Screens Table 5-1 LAN : IP LABEL DESCRIPTION Active Select this option to activate the Any-IP feature. This allows a computer to access the Internet without changing the network settings (such as IP address and subnet mask) of the computer, even when the IP addresses of...

HomeSafe User’s Guide LAN Screens 5-7 Table 5-2 LAN : Static DHCP LABEL DESCRIPTION # This is the index number of the Static IP table entry (row). MAC Address Type the MAC address (with colons) of a computer on your LAN. IP Address This field specifies the size, or count of the IP address pool. Appl...

HomeSafe User’s Guide Wireless Configuration and Roaming 6-1 Chapter 6 Wireless Configuration and Roaming This chapter discusses how to configure the Wireless and Roaming screen s on the HomeSafe. 6.1 Wireless LAN Overview This section introduces the wireless LAN(WLAN) and some basic scenarios. 6.1....

HomeSafe User’s Guide 6-2 Wireless Configuration and Roaming Figure 6-2 Basic Service set 6.1.3 ESS An Extended Service Set (ESS) consists of a series of overlapping BSSs, each containing an access point, with each access point connected together by a wired network. This wired connection between APs...

HomeSafe User’s Guide Wireless Configuration and Roaming 6-3 6.2 Wireless LAN Basics Refer also to the Wizard Setup chapter for more background information on Wireless LAN features, such as channels. 6.2.1 RTS/CTS A hidden node occurs when two stations are within range of the same access point, but ...

HomeSafe User’s Guide 6-4 Wireless Configuration and Roaming ) Enabling the RTS Threshold causes redundant network overhead that could negatively affect the throughput performance instead of providing a remedy. 6.2.2 Fragmentation Threshold A Fragmentation Threshold is the maximum data fragment size...

HomeSafe User’s Guide Wireless Configuration and Roaming 6-5 Table 6-1 WLAN : Wireless LABEL DESCRIPTION Enable Wireless LAN Click the check box to activate wireless LAN. ESSID (Extended Service Set IDentity) The ESSID identifies the Service Set with which a wireless station is associated. Wireless ...

HomeSafe User’s Guide 6-6 Wireless Configuration and Roaming station may not be able to communicate with other wireless stations on the network and vice versa. Figure 6-6 Roaming Example The steps below describe the roaming process. 1. As wireless station Y moves from the coverage area of access poi...

HomeSafe User’s Guide Wireless Configuration and Roaming 6-7 Figure 6-7 WLAN : Roaming The following table describes the labels in this screen. Table 6-2 WLAN : Roaming LABEL DESCRIPTION Active Select Yes from the drop-down list box to enable roaming on the HomeSafe if you have two or more HomeSafes...

HomeSafe User’s Guide Wireless Security 7-1 Chapter 7 Wireless Security This Chapter describes how to use the MAC Filter, 802.1x, Local User Database and RADIUS to configure wireless security on your HomeSafe. 7.1 Wireless Security Overview Wireless security is vital to your network to protect wirel...

HomeSafe User’s Guide Wireless Security 7-3 Table 7-1 WLAN : Wireless : No Security LABEL DESCRIPTION Reset Click Reset to reload the previous configuration for this screen. 7.2 Security Parameters Summary Refer to this table to see what other security parameters you should configure for each Authen...

HomeSafe User’s Guide 7-4 Wireless Security Figure 7-3 WEP Authentication Steps Open system authentication involves an unencrypted two-message procedure. A wireless station sends an open system authentication request to the AP, which will then automatically accept and connect the wireless station to...

HomeSafe User’s Guide Wireless Security 7-5 Select Dynamic to have the HomeSafe automatically use short preamble when all wireless clients support it, otherwise the HomeSafe uses long preamble. ) The HomeSafe and the wireless stations MUST use the same preamble mode in order to communicate. 7.4 Conf...

HomeSafe User’s Guide 7-6 Wireless Security Table 7-3 WLAN : Wireless : Static WEP Encryption LABEL DESCRIPTION Key 1 to Key 4 The WEP keys are used to encrypt data. Both the HomeSafe and the wireless stations must use the same WEP key for data transmission. If you chose 64-bit WEP , then enter any ...

HomeSafe User’s Guide Wireless Security 7-7 Temporal Key Integrity Protocol (TKIP) uses 128-bit keys that are dynamically generated and distributed by the authentication server. It includes a per-packet key mixing function, a Message Integrity Check (MIC) named Michael, an extended initialization ve...

HomeSafe User’s Guide 7-8 Wireless Security 7.6 Configuring WPA-PSK Authentication In order to configure and enable WPA-PSK Authentication; click the WIRELESS link under ADVANCED to display the Wireless screen. Select WPA-PSK from the Security list. Figure 7-6 WLAN : Wireless : WPA-PSK The following...

HomeSafe User’s Guide Wireless Security 7-9 Table 7-4 WLAN : Wireless : WPA-PSK LABEL DESCRIPTION WPA Group Key Update Timer The WPA Group Key Update Timer is the rate at which the AP (if using WPA-PSK key management) or RADIUS server (if using WPA key management) sends a new group key out to all cl...

HomeSafe User’s Guide 7-10 Wireless Security generate unique data encryption keys to encrypt every data packet that is wirelessly communicated between the AP and the wireless clients . Figure 7-7 WPA with RADIUS Application Example 7.8 Configuring WPA Authentication In order to configure and enable ...

HomeSafe User’s Guide Wireless Security 7-11 Table 7-5 WLAN : Wireless : WPA LABEL DESCRIPTION ReAuthentication Timer (in seconds) Specify how often wireless stations have to reenter usernames and passwords in order to stay connected. Enter a time interval between 10 and 9999 seconds. The default ti...

HomeSafe User’s Guide 7-12 Wireless Security 7.10 Dynamic WEP Key Exchange The AP maps a unique key that is generated with the RADIUS server. This key expires when the wireless connection times out, disconnects or reauthentication times out. A new WEP key is generated each time reauthentication is p...

HomeSafe User’s Guide Wireless Security 7-13 Table 7-6 WLAN : Wireless : 802.1x and Dynamic WEP LABEL DESCRIPTION ReAuthentication Timer (in seconds) Specify how often wireless stations have to reenter usernames and passwords in order to stay connected. Enter a time interval between 10 and 9999 seco...

HomeSafe User’s Guide Wireless Security 7-17 Table 7-8 WLAN : Wireless: 802.1x LABEL DESCRIPTION Authentication Databases The authentication database contains wireless station login information. The local user database is the built-in database on the HomeSafe. The RADIUS is an external server. Use t...

HomeSafe User’s Guide 7-18 Wireless Security Figure 7-12 WLAN : MAC Address Filter The following table describes the labels in this menu. Table 7-9 WLAN : MAC Address Filter LABEL DESCRIPTION Active Select Yes from the drop down list box to enable MAC address filtering. Filter Action Define the filt...

HomeSafe User’s Guide Wireless Security 7-19 7.15 Introduction to Local User Database By storing user profiles locally on the HomeSafe, your HomeSafe is able to authenticate wireless users without interacting with a network RADIUS server. However, there is a limit on the number of users you may auth...

HomeSafe User’s Guide 7-20 Wireless Security Table 7-10 WLAN : Local User Database LABEL DESCRIPTION User Name Enter the username (up to 31 characters) for this user profile. Password Type a password (up to 31 characters) for this user profile. Note that as you type a password, the screen displays a...

HomeSafe User’s Guide Wireless Security 7-21 7.17.1 EAP Authentication Overview EAP (Extensible Authentication Protocol) is an authentication protocol that runs on top of the IEEE802.1x transport mechanism in order to support multiple types of user authentication. By using EAP to interact with an EA...

HomeSafe User’s Guide WAN 8-1 Chapter 8 WAN Screens This chapter describes how to configure WAN settings . 8.1 WAN Overview See the Wizard Setup chapter for more information on the fields in the WAN screens. 8.2 TCP/IP Priority (Metric) The metric represents the "cost of transmission". A rou...

HomeSafe User’s Guide 8-2 WAN Table 8-1 WAN : Route LABEL DESCRIPTION WAN Traffic Redirect The default WAN connection is "1' as your broadband connection via the WAN port should always be your preferred method of accessing the WAN. The default priority of the routes is WAN and then Traffic Redir...

HomeSafe User’s Guide WAN 8-3 Table 8-2 WAN ISP : Ethernet Encapsulation LABEL DESCRIPTION Login Server This field only applies when you select Telia Login in the Service Type field. Type the domain name of the Telia login server, for example “login1.telia.com”. Relogin Every(min) This field only ap...

HomeSafe User’s Guide WAN 8-5 PPTP supports on-demand, multi-protocol and virtual private networking over public networks, such as the Internet. The screen shown next is for PPTP encapsulation. Figure 8-4 WAN ISP : PPTP Encapsulation The following table describes the labels in this screen. Table 8-4...

HomeSafe User’s Guide 8-6 WAN Table 8-4 WAN ISP : PPTP Encapsulation LABEL DESCRIPTION My IP Subnet Mask Your HomeSafe will automatically calculate the subnet mask based on the IP address that you assign. Unless you are implementing subnetting, use the subnet mask computed by the HomeSafe. Server IP...

HomeSafe User’s Guide 8-8 WAN Table 8-5 WAN : IP LABEL DESCRIPTION RIP Version The RIP Version field controls the format and the broadcasting method of the RIP packets that the HomeSafe sends (it recognizes both formats when receiving). Choose RIP-1 , RIP-2B or RIP-2M . RIP-1 is universally supporte...

HomeSafe User’s Guide WAN 8-9 The MAC address screen allows users to configure the WAN port's MAC address by either using the factory default or cloning the MAC address from a computer on your LAN. Choose Factory Default to select the factory assigned default MAC Address. Otherwise, click Spoof this...

HomeSafe User’s Guide 8-10 WAN 8.8 Configuring Traffic Redirect To change your HomeSafe’s Traffic Redirect settings, click WAN , then the Traffic Redirect tab. The screen appears as shown. Figure 8-9 WAN : Traffic Redirect The following table describes the labels in this screen. Table 8-6 WAN : Traf...

SUA/NAT and Static Route III P P a a r r t t I I I I I I : : SUA/NAT and Static Route This part covers Network Address Translation and setting up static routes.

HomeSafe User’s Guide NAT Screens 9-1 Chapter 9 Network Address Translation (NAT) Screens This chapter discusses how to configure NAT on the HomeSafe . 9.1 NAT Overview NAT (Network Address Translation - NAT, RFC 1631) is the translation of the IP address of a host in a packet. For example, the sour...

HomeSafe User’s Guide 9-2 NAT Screens (for Many-to-One and Many-to-Many Overload mapping), NAT offers the additional benefit of firewall protection. With no servers defined, your HomeSafe filters out all incoming inquiries, thus preventing intruders from probing your network. For more information on...

HomeSafe User’s Guide NAT Screens 9-3 Figure 9-2 NAT Application With IP Alias 9.1.5 NAT Mapping Types NAT supports five types of IP/port mapping. They are: ¾ One to One : In One-to-One mode, the HomeSafe maps one local IP address to one global IP address. ¾ Many to One : In Many-to-One mode, the Ho...

HomeSafe User’s Guide 9-4 NAT Screens Table 9-2 NAT Mapping Types TYPE IP MAPPING SMT ABBREVIATION One-to-One ILA1 ÅÆ IGA1 1-1 Many-to-One (SUA/PAT) ILA1 ÅÆ IGA1 ILA2 ÅÆ IGA1 … M-1 Many-to-Many Overload ILA1 ÅÆ IGA1 ILA2 ÅÆ IGA2 ILA3 ÅÆ IGA1 ILA4 ÅÆ IGA2 … M-M Ov Many One-to-One ILA1 ÅÆ IGA1 ILA2 ÅÆ...

HomeSafe User’s Guide NAT Screens 9-5 Default Server IP Address In addition to the servers for specified services, NAT supports a default server IP address. A default server receives packets from ports that are not specified in this screen. ) If you do not assign a Default Server IP Address, the Hom...

HomeSafe User’s Guide 9-6 NAT Screens 9.3.2 Configuring Servers Behind SUA (Example) Let's say you want to assign ports 21-25 to one FTP, Telnet and SMTP server (A in the example), port 80 to another (B in the example) and assign a default server IP address of 192.168.1.35 to a third (C in the examp...

HomeSafe User’s Guide NAT Screens 9-7 Figure 9-4 SUA/NAT Setup The following table describes the labels in this screen. Table 9-4 SUA/NAT Setup LABEL DESCRIPTION Default Server In addition to the servers for specified services, NAT supports a default server. A default server receives packets from po...

HomeSafe User’s Guide 9-8 NAT Screens set summary screen, the new rule will be rule 7, not 9. Now if you delete rule 4, rules 5 to 7 will be pushed up by 1 rule, so old rules 5, 6 and 7 become new rules 4, 5 and 6. To change your HomeSafe’s Address Mapping settings, click SUA/NAT , then the Address ...

HomeSafe User’s Guide NAT Screens 9-9 Configuring Address Mapping To edit an address mapping rule, select the radio button of a rule and click the Edit button to display the screen shown next. Figure 9-6 Address Mapping Edit The following table describes the labels in this screen. Table 9-6 Address ...

HomeSafe User’s Guide 9-10 NAT Screens service (coming in from the server on the WAN) to the IP address of a computer on the client side (LAN). The problem is that port forwarding only forwards a service to a single LAN IP address. In order to use the same service on a different LAN computer, you ha...

HomeSafe User’s Guide NAT Screens 9-11 ) Only one LAN computer can use a trigger port (range) at a time. Figure 9-8 Trigger Port The following table describes the labels in this screen. Table 9-7 Trigger Port LABEL DESCRIPTION # This is the rule index number (read-only). Name Type a unique name (up ...

HomeSafe User’s Guide NAT Screens 10-1 Chapter 10 Static Route Screens This chapter shows you how to configure static routes for your HomeSafe. 10.1 Static Route Overview Each remote node specifies only the network to which the gateway is directly connected, and the HomeSafe has no knowledge of the ...

HomeSafe User’s Guide 10-2 NAT Screens Table 10-1 Static Route LABEL DESCRIPTION # Number of an individual static route. Name Name that describes or identifies this route. Active This field shows whether this static route is active ( Yes ) or not ( No ). Destination This parameter specifies the IP n...

UPnP, Parental Control and Firewall IV P P a a r r t t I I V V : : UPnP, Parental Control and Firewall This part provides information and configuration instructions for configuration of Universal Plug and Play, parental control, firewall and content filtering.

HomeSafe User’s Guide UPnP 11-1 Chapter 11 UPnP This chapter introduces the Universal Plug and Play feature. 11.1 Universal Plug and Play Overview Universal Plug and Play (UPnP) is a distributed, open networking standard that uses TCP/IP for simple peer-to-peer network connectivity between devices. ...

HomeSafe User’s Guide 11-2 UPnP Gateway Device). At the time of writing ZyXEL's UPnP implementation supports Windows Messenger 4.6 and 4.7 while Windows Messenger 5.0 and Xbox are still being tested. UPnP broadcasts are only allowed on the LAN. Please see later in this User’s Guide for examples of i...

HomeSafe User’s Guide UPnP 11-3 11.4.1 Installing UPnP in Windows Me Follow the steps below to install UPnP in Windows Me. Step 1. Click Start and Control Panel . Double-click Add/Remove Programs . Step 2. Click on the Windows Setup tab and select Communication in the Components selection box. Click...

HomeSafe User’s Guide 11-4 UPnP Step 4. Select Networking Service in the Components selection box and click Details . Step 5. In the Networking Services window, select the Universal Plug and Play check box. Step 6. Click OK to go back to the Windows Optional Networking Component Wizard window and cl...

HomeSafe User’s Guide UPnP 11-5 Step 3. In the Internet Connection Properties window, click Settings to see the port mappings that were automatically created. Step 4. You may edit or delete the port mappings or click Add to manually add port mappings. ) When the UPnP-enabled device is disconnected f...

HomeSafe User’s Guide 11-6 UPnP Step 6. Double-click the icon to display your current Internet connection status. 11.5.2 Web Configurator Easy Access With UPnP, you can access the web-based configurator on the ZyXEL device without finding out the IP address of the ZyXEL device first. This is helpful...

HomeSafe User’s Guide UPnP 11-7 Step 6. Right-click the icon for your ZyXEL device and select Properties . A properties window displays with basic information about the ZyXEL device.

HomeSafe User’s Guide Parental Control 12-1 Chapter 12 Parental Control This chapter gives some background information on parental control and explains how to get started with the HomeSafe parental control. 12.1 Parental Control Overview Parental Control lets a parent (LAN administrator) control a c...

HomeSafe User’s Guide 12-2 Parental Control Figure 12-2 User Status Window 4. You can start browsing the web from the current window, or use the link on the top of the box to open a new web browser. ¾ If you close or navigate away from the status screen, you can redisplay the status screen by typing...

HomeSafe User’s Guide Parental Control 12-3 Figure 12-3 HomeSafe Parental Control Wireless Gateway Application 12.4 Configuring Parental Control From the MAIN MENU , click PARENTAL CONTROL to open the configuration screen. Internet A B

HomeSafe User’s Guide 12-4 Parental Control Figure 12-4 Parental Control The following table describes the labels in this screen. Table 12-1 Parental Control LABEL DESCRIPTION Enable Parental Control Select the check box to allow the parent (LAN administrator) to have control over a child’s (LAN use...

HomeSafe User’s Guide Parental Control 12-5 Table 12-1 Parental Control LABEL DESCRIPTION Group Select from the drop-down list box a category of web pages that you want to have access control over ¾ Kids ¾ Young Teen ¾ Mature Teen ¾ Adult These groups are used in conjunction with content filtering t...

HomeSafe User’s Guide 12-6 Parental Control Table 12-1 Parental Control LABEL DESCRIPTION Reset Click Reset to start configuring this screen again. 12.5 Parental Control Group Edit Filter The HomeSafe content filtering allows you to block services and block web sites by URL keywords that you specify...

HomeSafe User’s Guide Parental Control 12-7 3. The HomeSafe either blocks or forwards the request based on the services you select in the Available Services field in the Parental Control Activation Blocking screen. Checking Content Filtering Activation After you register for content filtering, the b...

HomeSafe User’s Guide 12-12 Parental Control Table 12-3 Parental Control : Filter LABEL DESCRIPTION Gay/Lesbian Selecting this category excludes pages that provide information, promote, or cater to gay and lesbian lifestyles. This does not include pages that are sexually oriented. Restaurants/Dining...

HomeSafe User’s Guide Parental Control 12-13 Table 12-3 Parental Control : Filter LABEL DESCRIPTION Clear All Click Clear All to empty the keyword list. Keyword Type a keyword in the Keyword field and click then Add Keyword to add a keyword to the list of keywords. The list of keywords that will be ...

HomeSafe User’s Guide 12-14 Parental Control type (TCP, UDP, or ICMP). The second field indicates the IP port number that defines the service. (Note that there may be more than one IP protocol type. For example, look at the default configuration labeled “( DNS )”. (UDP/TCP:53) means UDP port 53 and ...

HomeSafe User’s Guide Parental Control 12-15 Table 12-4 Services SERVICE DESCRIPTION POP3(TCP:110) Post Office Protocol version 3 lets a client computer get e-mail from a POP3 server through a temporary connection (TCP/IP or other). PPTP(TCP:1723) Point-to-Point Tunneling Protocol enables secure tra...

HomeSafe User’s Guide Parental Control 12-17 Table 12-5 Parental Control : Edit LABEL DESCRIPTION Groups Select a group from the drop down list box. The category of web pages to block are grouped as one of the following ¾ Kids ¾ Young Teen ¾ Mature Teen ¾ Adult These groups are used in conjunction w...

HomeSafe User’s Guide 12-18 Parental Control Table 12-5 Parental Control : Edit LABEL DESCRIPTION Edit Customized Services A Customized Service is a service that is not available in the pre-defined Available Services list and you must define using the next two fields. Type Services are either TCP an...

HomeSafe User’s Guide Parental Control 12-19 Table 12-6 Parental Control : Bypass List LABEL DESCRIPTION Name Type a name to identify a device on your LAN. MAC Address Type the MAC address (with colons) of a device on your LAN. Apply Click Apply to save your changes back to the HomeSafe. Reset Click...

HomeSafe User’s Guide Firewall 13-1 Chapter 13 Firewall This chapter gives some background information on firewalls and explains how to get started with the HomeSafe firewall. 13.1 Introduction What is a Firewall? Originally, the term firewall referred to a construction technique designed to prevent...

HomeSafe User’s Guide 13-2 Firewall 4. Don't enable any local service (such as SNMP or NTP) that you don't use. Any enabled service could present a potential security risk. A determined hacker might be able to find creative ways to misuse the enabled services to access the firewall or the network. 5...

HomeSafe User’s Guide Firewall 13-3 Table 13-1 Firewall: Settings LABEL DESCRIPTION Packets to Log Choose what LAN to WAN packets to log. Choose from: ¾ No Log ¾ Log Blocked (blocked LAN to WAN services appear in the Blocked Services textbox in the Services screen (with Enable Services Blocking sele...

Remote Management V P P a a r r t t V V : : Remote Management This part provides information and configuration instructions for configuration of remote management.

HomeSafe User’s Guide Remote Management Screens 14-1 Chapter 14 Remote Management Screens This chapter provides information on the Remote Management screens. 14.1 Remote Management Overview Remote management allows you to determine which services/protocols can access which HomeSafe interface (if any...

HomeSafe User’s Guide 14-2 Remote Management Screens 3. The IP address in the Secured Client IP field does not match the client IP address. If it does not match, the HomeSafe will disconnect the session immediately. 4. There is already another remote management session with an equal or higher priori...

HomeSafe User’s Guide Remote Management Screens 14-3 Table 14-1 Remote Management : WWW LABEL DESCRIPTION Server Access Select the interface(s) through which a computer may access the HomeSafe using this service. Secured Client IP Address A secured client is a “trusted” computer that is allowed to c...

HomeSafe User’s Guide 14-4 Remote Management Screens Figure 14-3 Remote Management : Telnet The following table describes the labels in this screen. Table 14-2 Remote Management : Telnet LABEL DESCRIPTION Server Port You may change the server port number for a service if needed, however you must use...

HomeSafe User’s Guide 14-6 Remote Management Screens ) SNMP is only available if TCP/IP is configured. Figure 14-5 SNMP Management Model An SNMP managed network consists of two main types of component: agents and a manager. An agent is a management software module that resides in a managed device (t...

HomeSafe User’s Guide Remote Management Screens 14-7 14.6.1 Supported MIBs The HomeSafe supports MIB II that is defined in RFC-1213 and RFC-1215. The focus of the MIBs is to let administrators collect statistical data and monitor status and performance. 14.6.2 SNMP Traps The HomeSafe will send traps...

HomeSafe User’s Guide Remote Management Screens 14-9 Table 14-5 Remote Management : SNMP LABEL DESCRIPTION Service Access Select the interface(s) through which a computer may access the HomeSafe using this service. Secured Client IP Address A secured client is a “trusted” computer that is allowed to...

HomeSafe User’s Guide 14-10 Remote Management Screens 14.8 Configuring Security To change your HomeSafe’s security settings, click REMOTE MGMT , then the Security tab. The screen appears as shown. If an outside user attempts to probe an unsupported port on your HomeSafe, an ICMP response packet is a...

Logs and Maintenance VI P P a a r r t t V V I I : : Logs and Maintenance This part covers the centralized logs and maintenance screens.

HomeSafe User’s Guide Logs 15-1 Chapter 15 Centralized Logs This chapter contains information about configuring general log settings and viewing the HomeSafe’s logs. Refer to the appendices for example log message explanations. 15.1 View Log The web configurator allows you to look at all of the Home...

HomeSafe User’s Guide 15-2 Logs Table 15-1 View Logs LABEL DESCRIPTION Destination This field lists the destination IP address and the port number of the incoming packet. Note This field displays additional information about the log entry. Email Log Now Click Email Log Now to send the log screen to ...

HomeSafe User’s Guide Logs 15-3 Figure 15-2 Log Settings The following table describes the labels in this screen. Table 15-2 Log Settings LABEL DESCRIPTION Address Info Mail Server Enter the server name or the IP address of the mail server for the e-mail addresses specified below. If this field is l...

HomeSafe User’s Guide 15-4 Logs Table 15-2 Log Settings LABEL DESCRIPTION Mail Subject Type a title that you want to be in the subject line of the log e-mail message that the HomeSafe sends. Not all HomeSafe models have this field. Send Log To The HomeSafe sends logs to the e-mail address specified ...

HomeSafe User’s Guide Maintenance 16-1 Chapter 16 Maintenance This chapter displays system information such as ZyNOS firmware, port IP addresses and port traffic statistics. 16.1 Maintenance Overview The maintenance screens can help you view system information, upload new firmware, manage configurat...

HomeSafe User’s Guide 16-2 Maintenance Table 16-1 Maintenance : Status LABEL DESCRIPTION IP Subnet Mask This is the WAN port subnet mask. DHCP This is the WAN port DHCP role - Client or None . LAN Port IP Address This is the LAN port IP address. IP Subnet Mask This is the LAN port subnet mask. DHCP ...

HomeSafe User’s Guide Maintenance 16-3 Table 16-2 Maintenance : System Statistics LABEL DESCRIPTION Poll Interval(s) Enter the time interval for refreshing statistics in this field. Set Interval Click this button to apply the new poll interval you entered in the Poll Interval(s) field. Stop Click St...

HomeSafe User’s Guide 16-4 Maintenance 16.4 Any IP Table Click MAINTENANCE , Any IP Table . The Any IP table shows current read-only information (including the IP address and the MAC address) of all network devices that use the Any IP feature to communicate with the HomeSafe. Figure 16-4 Maintenance...

HomeSafe User’s Guide Maintenance 16-5 Table 16-5 Maintenance : Association List LABEL DESCRIPTION Association Time This field displays the time a wireless station first associated with the HomeSafe. Refresh Click Refresh to redisplay the current screen. 16.6 F/W Upload Screen Find firmware at www.z...

HomeSafe User’s Guide 16-6 Maintenance Figure 16-7 Upload Warning The HomeSafe automatically restarts in this time causing a temporary network disconnect. In some operating systems, you may see the following icon on your desktop. Figure 16-8 Network Temporarily Disconnected After two minutes, log in...

HomeSafe User’s Guide Maintenance 16-7 Figure 16-10 Maintenance : Configuration 16.7.1 Backup Configuration Backup configuration allows you to back up (save) the HomeSafe’s current configuration to a file on your computer. Once your HomeSafe is configured and functioning properly, it is highly recom...

HomeSafe User’s Guide 16-8 Maintenance Figure 16-11 Configuration : Restore Successful The HomeSafe automatically restarts in this time causing a temporary network disconnect. In some operating systems, you may see the following icon on your desktop. Figure 16-12 Temporarily Disconnected If you uplo...

HomeSafe User’s Guide Maintenance 16-9 Figure 16-14 Factory Defaults You can also press the RESET button on the rear panel to reset the factory defaults of your HomeSafe. Refer to the Hardware Installation chapter for more information on the RESET button. 16.8 Restart Screen System restart allows yo...

SMT General Configuration VII P P a a r r t t V V I I I I : : SMT General Configuration This part covers System Management Terminal configuration for general setup, WAN setup, LAN setup, WLAN setup, Internet access, remote node, static route, NAT and enabling the firewall. ) See the web configurator...

HomeSafe User’s Guide Introducing the SMT 17-1 Chapter 17 Introducing the SMT This chapter explains how to access and navigate the System Management Terminal and gives an overview of its menus. 17.1 SMT Introduction T he HomeSafe’s SMT (System Management Terminal) is a menu-driven interface that you...

HomeSafe User’s Guide 17-2 Introducing the SMT Figure 17-2 SMT Menu Overview 17.2 Navigating the SMT Interface The SMT (System Management Terminal) is the interface that you use to configure your HomeSafe. Several operations that you should be familiar with before you attempt to modify the configura...

HomeSafe User’s Guide Introducing the SMT 17-3 Table 17-1 Main Menu Commands Entering information Type in or press [SPACE BAR], then press [ENTER]. You need to fill in two types of fields. The first requires you to type in the appropriate information. The second allows you to cycle through the avail...

HomeSafe User’s Guide 17-4 Introducing the SMT Table 17-2 Main Menu Summary # MENU TITLE DESCRIPTION 14 Dial-in User Setup Use this menu to set up local user profiles on the HomeSafe. 15 NAT Setup Use this menu to specify inside servers when NAT is enabled. 21 Filter and Firewall Setup Use this menu...

HomeSafe User’s Guide Menu 1 General Setup 18-1 Chapter 18 Menu 1 General Setup Menu 1 - General Setup contains administrative and system-related information . 18.1 General Setup Menu 1 — General Setup contains administrative and system-related information (shown next). The System Name field is for ...

HomeSafe User’s Guide 18-2 Menu 1 General Setup Table 18-1 Menu 1 General Setup FIELD DESCRIPTION EXAMPLE Domain Name Enter the domain name (if you know it) here. If you leave this field blank, the ISP may assign a domain name via DHCP. You can go to menu 24.8 and type "sys domain name" to s...

HomeSafe User’s Guide Menu 1 General Setup 18-3 Figure 18-2 Menu 1.1 Configure Dynamic DNS Follow the instructions in the next table to configure Dynamic DNS parameters. Table 18-2 Menu 1.1 Configure Dynamic DNS FIELD DESCRIPTION EXAMPLE Service Provider This is the name of your Dynamic DNS service ...

HomeSafe User’s Guide 18-4 Menu 1 General Setup Table 18-2 Menu 1.1 Configure Dynamic DNS FIELD DESCRIPTION EXAMPLE IP Address Update Policy: You can select Yes in either the Use Server Detected IP field (recommended) or the User Specified IP Addr field, but not both. With the Use Server Detected IP...

HomeSafe User’s Guide Menu 2 WAN Setup 19-1 Chapter 19 Menu 2 WAN Setup This chapter describes how to configure the WAN using menu 2. 19.1 Introduction to WAN This chapter explains how to configure settings for your WAN port. 19.2 WAN Setup From the main menu, enter 2 to open menu 2. Figure 19-1 Men...

HomeSafe User’s Guide Menu 3 LAN Setup 20-1 Chapter 20 Menu 3 LAN Setup This chapter covers how to configure your wired Local Area Network (LAN) settings. 20.1 LAN Setup This section describes how to configure the Ethernet using Menu 3 — LAN Setup . From the main menu, enter 3 to display menu 3. Fig...

HomeSafe User’s Guide 20-4 Menu 3 LAN Setup Table 20-2 Menu 3.2: LAN TCP/IP Setup Fields FIELD DESCRIPTION EXAMPLE Edit IP Alias The HomeSafe supports three logical LAN interfaces via its single physical Ethernet interface with the HomeSafe itself as the gateway for each LAN network. Press [SPACE BA...

HomeSafe User’s Guide Menu 3 LAN Setup 20-5 Table 20-3 Menu 3.2.1: IP Alias Setup FIELD DESCRIPTION EXAMPLE IP Alias 1, 2 Choose Yes to configure the LAN network for the HomeSafe. Yes IP Address Enter the IP address of your HomeSafe in dotted decimal notation. 192.168.1.1 IP Subnet Mask Your HomeSaf...

HomeSafe User’s Guide 20-6 Menu 3 LAN Setup Table 20-4 Menu 3.5 Wireless LAN Setup FIELD DESCRIPTION EXAMPLE AP must have the same ESSID. Enter a descriptive name of up to 32 printable 7-bit ASCII characters. Hide ESSID Press [SPACE BAR] and select Yes to hide the ESSID in the outgoing data frame so...

HomeSafe User’s Guide 20-8 Menu 3 LAN Setup Figure 20-8 Menu 3.5.1 WLAN MAC Address Filter The following table describes the fields in this menu. Table 20-5 Menu 3.5.1 WLAN MAC Address Filter FIELD DESCRIPTION Active To enable MAC address filtering, press [SPACE BAR] to select Yes and press [ENTER]....

HomeSafe User’s Guide Menu 3 LAN Setup 20-9 Figure 20-9 Menu 3.5 Wireless LAN Setup Step 3. Move the cursor to the Edit Roaming Configuration field. Press [SPACE BAR] to select Yes and then press [ENTER]. Menu 3.5.2 – Roaming Configuration displays as shown next. Figure 20-10 Menu 3.5.2 Roaming Conf...

HomeSafe User’s Guide Internet Access 21-1 Chapter 21 Internet Access This chapter shows you how to configure your HomeSafe for Internet access . 21.1 Introduction to Internet Access Setup Use information from your ISP along with the instructions in this chapter to set up your HomeSafe to access the...

HomeSafe User’s Guide 21-2 Internet Access Table 21-1 Menu 4: Internet Access Setup (Ethernet) FIELD DESCRIPTION Retype to Confirm Enter your password again to make sure that you have entered is correctly. Login Server The HomeSafe will find the RoadRunner Server IP if this field is left blank. If i...

HomeSafe User’s Guide Internet Access 21-3 Figure 21-2 Internet Access Setup (PPTP) The following table contains instructions about the new fields when you choose PPTP in the Encapsulation field in menu 4. Table 21-2 New Fields in Menu 4 (PPTP) Screen FIELD DESCRIPTION EXAMPLE Encapsulation Press [S...

HomeSafe User’s Guide 21-4 Internet Access Table 21-3 New Fields in Menu 4 (PPPoE) screen FIELD DESCRIPTION EXAMPLE Idle Timeout This value specifies the time in seconds that elapses before the HomeSafe automatically disconnects from the PPPoE server. 100 (default) If you need a PPPoE service name t...

HomeSafe User’s Guide Remote Node Configuration 22-1 Chapter 22 Remote Node Configuration This chapter covers remote node configuration . 22.1 Introduction to Remote Node Setup A remote node is required for placing calls to a remote gateway. A remote node represents both the remote gateway and the n...

HomeSafe User’s Guide Remote Node Configuration 22-3 Table 22-1 Menu 11.1 Remote Node Profile for Ethernet Encapsulation FIELD DESCRIPTION EXAMPLE Once you have configured this menu, press [ENTER] at the message “Press ENTER to Confirm...” to save your configuration, or press [ESC] at any time to ca...

HomeSafe User’s Guide 22-4 Remote Node Configuration Table 22-2 Fields in Menu 11.1 (PPPoE Encapsulation Specific) FIELD DESCRIPTION EXAMPLE Service Name If you are using PPPoE encapsulation, then type the name of your PPPoE service here. Only valid with PPPoE encapsulation. poellc Authen This field...

HomeSafe User’s Guide Remote Node Configuration 22-5 Table 22-3 Menu 11.1 Remote Node Profile for PPTP Encapsulation FIELD DESCRIPTION EXAMPLE Encapsulation Press [SPACE BAR] and then [ENTER] to select PPTP . You must also go to menu 11.3 to check the IP Address setting once you have selected the en...

HomeSafe User’s Guide 22-6 Remote Node Configuration Table 22-4 Remote Node Network Layer Options FIELD DESCRIPTION EXAMPLE My WAN Addr This field is applicable to PPPoE and PPTP encapsulations only. Some implementations, especially the UNIX derivatives, require the WAN link to have a separate IP ne...

HomeSafe User’s Guide Remote Node Configuration 22-7 Use menu 11.5 to specify the filter set(s) to apply to the incoming and outgoing traffic between this remote node and the HomeSafe to prevent certain packets from triggering calls. You can specify up to 4 filter sets separated by commas, for examp...

HomeSafe User’s Guide Static Route Setup 23-1 Chapter 23 Static Route Setup This chapter shows how to setup IP static routes . 23.1 IP Static Route Setup Step 1. To configure an IP static route, use Menu 12 – Static Routing Setup (shown next). Figure 23-1 Menu 12 IP Static Route Setup Step 2. Now, t...

HomeSafe User’s Guide Dial-in User Setup 24-1 Chapter 24 Dial-in User Setup This chapter shows you how to create user accounts on the HomeSafe . 24.1 Dial-in User Setup By storing user profiles locally, your HomeSafe is able to authenticate wireless users without interacting with a network RADIUS se...

HomeSafe User’s Guide NAT 25-1 Chapter 25 Network Address Translation (NAT) This chapter discusses how to configure NAT on the HomeSafe. 25.1 Using NAT ) You must create a firewall rule in addition to setting up SUA/NAT, to allow traffic from the WAN to be forwarded through the HomeSafe. 25.1.1 SUA ...

HomeSafe User’s Guide 25-2 NAT Step 3. Move the cursor to the Edit IP field, press [SPACE BAR] to select Yes and then press [ENTER] to bring up Menu 11.3 - Remote Node Network Layer Options. Figure 25-2 Menu 11.3 Applying NAT to the Remote Node The following table describes the options for Network A...

HomeSafe User’s Guide NAT 25-3 25.3.1 Address Mapping Sets Enter 1 to bring up Menu 15.1 — Address Mapping Sets . Figure 25-4 Menu 15.1 Address Mapping Sets SUA Address Mapping Set Enter 255 to display the next screen (see also section 25.1.1) . The fields in this menu cannot be changed. Figure 25-5...

HomeSafe User’s Guide 25-4 NAT Table 25-2 SUA Address Mapping Rules FIELD DESCRIPTION EXAMPLE Type These are the mapping types. Server allows us to specify multiple servers of different types behind NAT to this machine. See later for some examples. Server When you have completed this menu, press [EN...

HomeSafe User’s Guide NAT 25-5 Table 25-3 Menu 15.1.1 First Set FIELD DESRIPTION EXAMPLE Set Name Enter a name for this set of rules. This is a required field. If this field is left blank, the entire set will be deleted. NAT_SET Action The default is Edit . Edit means you want to edit a selected rul...

HomeSafe User’s Guide 25-6 NAT Table 25-4 Menu 15.1.1.1 Editing/Configuring an Individual Rule in a Set FIELD DESCRIPTION EXAMPLE Server . Start This is the starting local IP address (ILA). 0.0.0.0 End This is the ending local IP address (ILA). If the rule is for all local IPs, then put the Start IP...

HomeSafe User’s Guide NAT 25-7 Figure 25-9 Multiple Servers Behind NAT Example 25.5 General NAT Examples The following are some examples of NAT configuration. 25.5.1 Example 1: Internet Access Only In the following Internet access example, you only need one rule where the ILAs (Inside Local Addresse...

HomeSafe User’s Guide 25-8 NAT 25.5.2 Example 2: Internet Access with an Inside Server The dynamic Inside Global Address is assigned by the ISP. Figure 25-12 NAT Example 2 In this case, you do exactly as above (use the convenient pre-configured SUA Only set) and also go to menu 15.2 to specify the I...

HomeSafe User’s Guide NAT 25-9 Figure 25-14 NAT Example 3 Step 1. In this case you need to configure Address Mapping Set 1 from Menu 15.1 - Address Mapping Sets. Therefore you must choose the Full Feature option from the Network Address Translation field (in menu 4 or menu 11.3) in Step 2. Figure 25...

HomeSafe User’s Guide 25-10 NAT Figure 25-16 Example 3: Menu 15.1.1.1 Figure 25-17 Example 3: Final Menu 15.1.1 Now configure the IGA3 to map to our web server and mail server on the LAN. Step 10. Enter 15 from the main menu. Step 11. Enter 2 in Menu 15 - NAT Setup . Step 12. Enter 1 in Menu 15.2 - ...

HomeSafe User’s Guide NAT 25-11 Example 3: Menu 15.2 25.5.4 Example 4: NAT Unfriendly Application Programs Some applications do not support NAT Mapping using TCP or UDP port address translation. In this case it is better to use Many-to-Many No Overload mapping as port numbers do not change for Many-...

HomeSafe User’s Guide 25-12 NAT Figure 25-20 Example 4: Menu 15.1.1 Address Mapping Rules 25.6 Configuring Trigger Port Forwarding ) Only one LAN computer can use a trigger port (range) at a time. Enter 3 in menu 15 to display Menu 15.3 — Trigger Port Setup , shown next. Figure 25-21 Menu 15.3 Trigg...

HomeSafe User’s Guide Firewall 26-1 Chapter 26 Enabling the Firewall This chapter shows you how to get started with the HomeSafe firewall. 26.1 Remote Management and the Firewall When SMT menu 24.11 is configured to allow management (see the Remote Management chapter) and the firewall is enabled: • ...

SMT Advanced Management VIII P P a a r r t t V V I I I I I I : : SMT Advanced Management This part discusses filtering setup, SNMP, system security, system information and diagnosis, firmware and configuration file maintenance, system maintenance, remote management and call scheduling. ) See the web...

HomeSafe User’s Guide Filter Configuration 27-1 Chapter 27 Filter Configuration This chapter shows you how to create and apply filters. 27.1 Introduction to Filters Your HomeSafe uses filters to decide whether to allow passage of a data packet and/or to make a call. There are two types of filter app...

HomeSafe User’s Guide 27-2 Filter Configuration apply up to four filter sets to a particular port to block multiple types of packets. With each filter set having up to six rules, you can have a maximum of 24 rules active for a single port. Sets of factory default filter rules have been configured in...

HomeSafe User’s Guide Filter Configuration 27-3 27.2 Configuring a Filter Set The HomeSafe includes filtering for NetBIOS over TCP/IP packets by default. To configure another filter set, follow the procedure below. Step 1. Enter 21 in the main menu to open menu 21. Figure 27-4 Menu 21: Filter and Fi...

HomeSafe User’s Guide 27-4 Filter Configuration Table 27-1 Abbreviations Used in the Filter Rules Summary Menu FIELD DESCRIPTION M More. “Y” means there are more rules to check which form a rule chain with the present rule. An action cannot be taken until the rule chain is complete. “N” means there ...

HomeSafe User’s Guide Filter Configuration 27-5 To configure TCP/IP rules, select TCP/IP Filter Rule from the Filter Type field and press [ENTER] to open Menu 21.1.1.1 - TCP/IP Filter Rule , as shown next. Figure 27-6 Menu 21.1.1.1 TCP/IP Filter Rule The following table describes how to configure yo...

HomeSafe User’s Guide 27-6 Filter Configuration Table 27-3 TCP/IP Filter Rule FIELD DESCRIPTION OPTIONS Port # Enter the source port of the packets that you wish to filter. The range of this field is 0 to 65535. This field is ignored if it is 0. 0-65535 Port # Comp Press [SPACE BAR] and then [ENTER]...

HomeSafe User’s Guide Filter Configuration 27-7 Packet into IP Filter Matched Matched Yes Action Matched Action Not Matched More? No Filter Active? Check IP Protocol Drop Drop Packet Accept Packet Drop Forward Check Next Rule Check Next Rule Check Next Rule Forward Not Matched Yes No Check Src IP Ad...

HomeSafe User’s Guide 27-8 Filter Configuration To configure a generic rule, select Generic Filter Rule in the Filter Type field in menu 21.1.4.1 and press [ENTER] to open Generic Filter Rule, as shown below. Figure 27-8 Menu 21.1.4.1 Generic Filter Rule The following table describes the fields in t...

HomeSafe User’s Guide Filter Configuration 27-9 Table 27-4 Generic Filter Rule Menu Fields FIELD DESCRIPTION OPTIONS Action Not Matched Select the action for a packet not matching the rule. Check Next Rule Forward Drop Once you have completed filling in Menu 21.4.1.1 - Generic Filter Rule , press [E...

HomeSafe User’s Guide Filter Configuration 27-11 Figure 27-11 Example Filter Rules Summary: Menu 21.1.3 After you’ve created the filter set, you must apply it. Step 1. Enter 11 from the main menu to go to menu 11. Step 2. Go to the Edit Filter Sets field, press [SPACE BAR] to select Yes and press [E...

HomeSafe User’s Guide 27-12 Filter Configuration Figure 27-12 Protocol and Device Filter Sets 27.5 Firewall Versus Filters Firewall configuration is discussed in the firewall chapters of this manual. Further comparisons are also made between filtering, NAT and the firewall. 27.6 Applying a Filter Th...

HomeSafe User’s Guide Filter Configuration 27-13 four filter sets by entering their numbers separated by commas. The HomeSafe already has filters to prevent NetBIOS traffic from triggering calls, and block incoming telnet, FTP and HTTP connections. Figure 27-14 Filtering Remote Node Traffic Menu 11....

HomeSafe User’s Guide SNMP Configuration 28-1 Chapter 28 SNMP Configuration This chapter explains SNMP Configuration menu 22. 28.1 About SNMP Simple Network Management Protocol is a protocol used for exchanging management information between network devices. SNMP is a member of the TCP/IP protocol s...

HomeSafe User’s Guide 28-2 SNMP Configuration • GetNext - Allows the manager to retrieve the next object variable from a table or list within an agent. In SNMPv1, when a manager wants to retrieve all elements of a table from an agent, it initiates a Get operation, followed by a series of GetNext ope...

HomeSafe User’s Guide SNMP Configuration 28-3 28.4 SNMP Traps The HomeSafe will send traps to the SNMP manager when any one of the following events occurs: Table 28-2 SNMP Traps TRAP # TRAP NAME DESCRIPTION 1 coldStart ( defined in RFC-1215 ) A trap is sent after booting (power on). 2 warmStart ( de...

HomeSafe User’s Guide System Security 29-1 Chapter 29 System Security This chapter describes how to configure the system security on the HomeSafe . 29.1 System Security You can configure the system password, an external RADIUS server and 802.1x in this menu. 29.1.1 System Password Figure 29-1 Menu 2...

HomeSafe User’s Guide 29-2 System Security Table 29-1 Menu 23.2 System Security : RADIUS Server FIELD DESCRIPTION EXAMPLE Authentication Server Active Press [SPACE BAR] to select Yes and press [ENTER] to enable user authentication through an external authentication server. No Server Address Enter th...

HomeSafe User’s Guide System Information and Diagnosis 30-1 Chapter 30 System Information and Diagnosis This chapter covers the information and diagnostic tools in SMT menus 24.1 to 24.4. These tools include updates on system status, port status, log and trace capabilities and upgrades for the syste...

HomeSafe User’s Guide 30-2 System Information and Diagnosis Figure 30-2 Menu 24.1 System Maintenance : Status The following table describes the fields present in Menu 24.1 — System Maintenance — Status . These fields are READ-ONLY and meant for diagnostic purposes. The upper right corner of the scre...

HomeSafe User’s Guide System Information and Diagnosis 30-3 30.2 System Information To get to the System Information: Step 1. Enter 24 to display Menu 24 — System Information and Console Port Speed . Step 2. Enter 2 to display Menu 24.2 — System Information . Step 3. From this menu you have two choi...

HomeSafe User’s Guide 30-4 System Information and Diagnosis 30.2.2 Console Port Speed You can set up different port speeds for the console port through Menu 24.2.2 – System Maintenance – Console Port Speed . Your HomeSafe supports 9600 (default), 19200, 38400, 57600 and 115200 bps. Press [ SPACE BAR...

HomeSafe User’s Guide System Information and Diagnosis 30-5 Your HomeSafe sends five types of syslog messages. Some examples (not all HomeSafe specific) of these syslog messages with their message formats are shown next: 1. CDR CDR Message Format SdcmdSyslogSend( SYSLOG_CDR, SYSLOG_INFO, String ); S...

HomeSafe User’s Guide 30-6 System Information and Diagnosis 5. Firewall log Firewall Log Message Format SdcmdSyslogSend(SYSLOG_FIREWALL, SYSLOG_NOTICE, buf); buf = IP[Src=xx.xx.xx.xx : spo=xxxx Dst=xx.xx.xx.xx : dpo=xxxx | prot | rule | action] Src: Source Address spo: Source port (empty means no so...

HomeSafe User’s Guide System Information and Diagnosis 30-7 Figure 30-8 Menu 24.4 System Maintenance : Diagnostic 30.4.1 WAN DHCP DHCP functionality can be enabled on the LAN or WAN as shown in Figure 30-9 . LAN DHCP has already been discussed. The HomeSafe can act either as a WAN DHCP client ( IP A...

HomeSafe User’s Guide Firmware and Configuration File Maintenance 31-1 Chapter 31 Firmware and Configuration File Maintenance This chapter tells you how to backup and restore your configuration file as well as upload new firmware and configuration files. 31.1 Filename Conventions The configuration f...

HomeSafe User’s Guide 31-2 Firmware and Configuration File Maintenance 31.2 Backup Configuration Option 5 from Menu 24 – System Maintenance allows you to backup the current HomeSafe configuration to your computer. Backup is highly recommended once your HomeSafe is functioning properly. FTP is the pr...

HomeSafe User’s Guide Firmware and Configuration File Maintenance 31-3 31.2.4 GUI-based FTP Clients The following table describes some of the commands that you may see in GUI-based FTP clients. Table 31-2 General Commands for GUI-based FTP Clients COMMAND DESCRIPTION Host Address Enter the address o...

HomeSafe User’s Guide 31-4 Firmware and Configuration File Maintenance 31.2.7 TFTP Command Example The following is an example TFTP command: tftp [-i] host get rom-0 config.rom where “i” specifies binary image transfer mode (use this mode when transferring binary files), “host” is the HomeSafe IP ad...

HomeSafe User’s Guide Firmware and Configuration File Maintenance 31-5 Figure 31-3 Telnet into Menu 24.6 Step 1. Launch the FTP client on your computer. Step 2. Enter “open”, followed by a space and the IP address of your HomeSafe. Step 3. Press [ENTER] when prompted for a username. Step 4. Enter yo...

HomeSafe User’s Guide 31-6 Firmware and Configuration File Maintenance ) WARNING! DO NOT INTERRUPT THE FILE TRANSFER PROCESS AS THIS MAY PERMANENTLY DAMAGE YOUR HOMESAFE. 31.4.1 Firmware File Upload FTP is the preferred method for uploading the firmware and configuration. To use this feature, your c...

HomeSafe User’s Guide Firmware and Configuration File Maintenance 31-7 31.4.3 FTP File Upload Command from the DOS Prompt Example Step 1. Launch the FTP client on your computer. Step 2. Enter “open”, followed by a space and the IP address of your HomeSafe. Step 3. Press [ENTER] when prompted for a u...

HomeSafe User’s Guide System Maintenance 32-1 Chapter 32 System Maintenance This chapter leads you through SMT menus 24.8 to 24.10. 32.1 Command Interpreter Mode The Command Interpreter (CI) is a part of the main system firmware. The CI provides much of the same functionality as the SMT, while addin...

HomeSafe User’s Guide 32-2 System Maintenance Figure 32-2 Valid Commands 32.2 Call Control Support The HomeSafe provides two call control functions: budget management and call history. Please note that this menu is only applicable when Encapsulation is set to PPPoE in menu 4 or menu 11.1. The budget...

HomeSafe User’s Guide System Maintenance 32-3 Table 32-1 Budget Management FIELD DESCRIPTION EXAMPLE Remote Node Enter the index number of the remote node you want to reset (just one in this case) 1 Connection Time/Total Budget This is the total connection time that has gone by (within the allocated...

HomeSafe User’s Guide 32-4 System Maintenance 32.3 Time and Date Setting The Real Time Chip (RTC) keeps track of the time and date (not available on all models). There is also a software mechanism to set the time manually or get the current time and date from an external server when you turn on your...

HomeSafe User’s Guide System Maintenance 32-5 Table 32-3 Time and Date Setting Fields FIELD DESCRIPTION Time Zone Press [SPACE BAR] and then [ENTER] to set the time difference between your time zone and Greenwich Mean Time (GMT). Daylight Saving Daylight Saving Time is a period from late spring to e...

HomeSafe User’s Guide Remote Management 33-1 Chapter 33 Remote Management This chapter covers remote management (SMT menu 24.11). 33.1 Remote Management Remote management allows you to determine which services/protocols can access which HomeSafe interface (if any) from which computers. You may manag...

HomeSafe User’s Guide 33-2 Remote Management Table 33-1 Menu 24.11 – Remote Management Control FIELD DESCRIPTION EXAMPLE Port This field shows the port number for the service or protocol. You may change the port number if needed, but you must use the same port number to access the HomeSafe. 23 Acces...

HomeSafe User’s Guide Call Scheduling 34-1 Chapter 34 Call Scheduling Call scheduling (applicable for PPPoA or PPPoE encapsulation only) allows you to dictate when a remote node should be called and for how long. 34.1 Introduction to Call Scheduling The call scheduling feature allows the HomeSafe to...

HomeSafe User’s Guide 34-2 Call Scheduling Figure 34-2 Menu 26.1 Schedule Set Setup If a connection has been already established, your HomeSafe will not drop it. Once the connection is dropped manually or it times out, then that remote node can't be triggered up until the end of the Duration . Table...

HomeSafe User’s Guide Call Scheduling 34-3 Table 34-1 Menu 26.1 Schedule Set Setup FIELD DESCRIPTION EXAMPLE Action Forced On means that the connection is maintained whether or not there is a demand call on the line and will persist for the time period specified in the Duration field. Forced Down me...

Appendices and Index IX P P a a r r t t I I X X : : Appendices and Index This section provides some Appendices and an Index.

HomeSafe User’s Guide Troubleshooting A-1 Appendix A Troubleshooting PROBLEM CORRECTIVE ACTION None of the LEDs turn on when you turn on the HomeSafe. Make sure that you have the correct power adapter connected to the HomeSafe and plugged in to an appropriate power source. Check all cable connection...

HomeSafe User’s Guide Troubleshooting B-1 Appendix B PPPoE PPPoE in Action An ADSL modem bridges a PPP session over Ethernet (PPP over Ethernet, RFC 2516) from your PC to an ATM PVC (Permanent Virtual Circuit) that connects to an xDSL Access Concentrator where the PPP session terminates (see the nex...

HomeSafe User’s Guide B-2 PPPoE With PPPoE, the VC (Virtual Circuit) is equivalent to the dial-up connection and is between the modem and the AC, as opposed to all the way to the ISP. However, the PPP negotiation is between the PC and the ISP. The HomeSafeas a PPPoE Client When using the HomeSafeas ...

HomeSafe User’s Guide PPTP C-1 Appendix C PPTP What is PPTP? PPTP (Point-to-Point Tunneling Protocol) is a Microsoft proprietary protocol (RFC 2637 for PPTP is informational only) to tunnel PPP frames. How can we transport PPP frames from a PC to a broadband modem over Ethernet? A solution is to bui...

HomeSafe User’s Guide C-2 PPTP PPTP Protocol Overview PPTP is very similar to L2TP, since L2TP is based on both PPTP and L2F (Cisco’s Layer 2 Forwarding). Conceptually, there are three parties in PPTP, namely the PNS (PPTP Network Server), the PAC (PPTP Access Concentrator) and the PPTP user. The PN...

HomeSafe User’s Guide PPTP C-3 The PPP frames are tunneled between the PNS and PAC over GRE (General Routing Encapsulation, RFC 1701, 1702). The individual calls within a tunnel are distinguished using the Call ID field in the GRE header.

HomeSafe User’s Guide Log Descriptions D-1 Appendix D Log Descriptions Configure centralized logs using the embedded web configurator; see the online help for details. This appendix describes some of the log messages. Chart 1 System Error Logs LOG MESSAGE DESCRIPTION %s exceeds the max. number of se...

HomeSafe User’s Guide D-2 Log Descriptions Chart 2 System Maintenance Logs LOG MESSAGE DESCRIPTION mismatch ID content. !! No known phase 1 ID type found The ID type of an incoming packet does not match any known ID type. Chart 3 UPnP Logs LOG MESSAGE DESCRIPTION UPnP pass through Firewall UPnP pack...

HomeSafe User’s Guide Log Descriptions D-3 Chart 4 Content Filtering Logs LOG MESSAGE DESCRIPTION %s When the content filter is not on according to the time schedule or you didn't select the "Block Matched Web Site” checkbox, the system forwards the web content. Waiting content filter server tim...

HomeSafe User’s Guide D-4 Log Descriptions Chart 5 ICMP Type and Code Explanations TYPE CODE DESCRIPTION 0 Time to live exceeded in transit 1 Fragment reassembly time exceeded 12 Parameter Problem 0 Pointer indicates the error 13 Timestamp 0 Timestamp request message 14 Timestamp Reply 0 Timestamp r...

HomeSafe User’s Guide Log Descriptions D-5 Usage: [0:none/1:log/2:alert/3:both] [0:don't show debug type/1:show debug type] 4. Use sys logs category followed by a log category and a parameter to decide what to record. Use 0 to not record logs for that category, 1 to record only logs for that categor...

HomeSafe User’s Guide Setting up Your Computer’s IP Address E-1 Appendix E Setting up Your Computer’s IP Address All computers must have a 10M or 100M Ethernet adapter card and TCP/IP installed. Windows 95/98/Me/NT/2000/XP, Macintosh OS 7 and later operating systems and all versions of UNIX/LINUX in...

HomeSafe User’s Guide E-2 Setting up Your Computer’s IP Address b. Select Protocol and then click Add . c. Select Microsoft from the list of manufacturers . d. Select TCP/IP from the list of network protocols and then click OK . If you need Client for Microsoft Networks: a. Click Add . b. Select Cli...

HomeSafe User’s Guide Setting up Your Computer’s IP Address E-3 -If you do not know your gateway’s IP address, remove previously installed gateways. -If you have a gateway IP address, type it in the New gateway field and click Add . 4. Click OK to save and close the TCP/IP Properties window. 5. Clic...

HomeSafe User’s Guide Setting up Your Computer’s IP Address E-9 Verifying Your Computer’s IP Address Check your TCP/IP properties in the TCP/IP Control Panel window. Macintosh OS X 1. Click the Apple menu, and click System Preferences to open the System Preferences window. 2. Click Network in the ic...

HomeSafe User’s Guide Wireless LAN and IEEE 802.11 F-1 Appendix F Wireless LAN and IEEE 802.11 A wireless LAN (WLAN) provides a flexible data communications system that you can use to access various services (navigating the Internet, email, printer services, etc.) without the use of a cabled connect...

HomeSafe User’s Guide Wireless LAN and IEEE 802.11 F-2 time two or more wireless adapters are within range of each other, they can set up an independent network, which is commonly referred to as an Ad-hoc network or Independent Basic Service Set (IBSS). See the following diagram of an example of an ...

HomeSafe User’s Guide Wireless LAN and IEEE 802.11 F-3 Diagram F-2 ESS Provides Campus-Wide Coverage

HomeSafe User’s Guide Wireless LAN with IEEE 802.1x G-1 Appendix G Wireless LAN With IEEE 802.1x As wireless networks become popular for both portable computing and corporate networks, security is now a priority. Security Flaws with IEEE 802.11 Wireless networks based on the original IEEE 802.11 hav...

HomeSafe User’s Guide Wireless LAN with IEEE 802.1x G-2 Diagram G-1 Sequences for EAP MD5–Challenge Authentication Client computer access authorized. Client computer access not authorized.

HomeSafe User’s Guide Types of EAP Authentication H-1 Appendix H Types of EAP Authentication This appendix discusses the four popular EAP authentication types: EAP-MD5 , EAP-TLS , EAP-TTLS and PEAP . The type of authentication you use depends on the RADIUS server or the AP. Consult your network admi...

HomeSafe User’s Guide H-2 Types of EAP Authentication Comparison of EAP Authentication Types EAP-MD5 EAP-TLS EAP-TTLS PEAP Certificate – Client No Yes Optional Optional Certificate – Server No Yes Yes Yes Dynamic Key Exchange No Yes Yes Yes Credential Security None Strong Strong Strong Deployment Di...

HomeSafe User’s Guide Antenna Selection and Positioning Recommendation I-1 Appendix I Antenna Selection and Positioning Recommendation An antenna couples RF signals onto air. A transmitter within a wireless device sends an RF signal to the antenna, which propagates the signal through the air. The an...

HomeSafe User’s Guide I-2 • Directional antennas concentrate the RF signal in a beam, like a flashlight. The angle of the beam width determines the direction of the coverage pattern; typically ranges from 20 degrees (less directional) to 90 degrees (very directional). The directional antennas are id...

HomeSafe User’s Guide Brute-Force Password Guessing Protection J-1 Appendix J Brute-Force Password Guessing Protection The following describes the commands for enabling, disabling and configuring the brute-force password guessing protection mechanism for the password. See other appendices for inform...

HomeSafe User’s Guide Triangle Route K-1 Appendix K Triangle Route The Ideal Setup When the firewall is on, your HomeSafeacts as a secure gateway between your LAN and the Internet. In an ideal network topology, all incoming and outgoing network traffic passes through the HomeSafeto protect your LAN ...

HomeSafe User’s Guide K-2 Triangle Route Step 1. A computer on the LAN initiates a connection by sending a SYN packet to a receiving server on the WAN. Step 2. The HomeSafereroutes the packet to Gateway B which is in Subnet 2. Step 3. The reply from WAN goes through the HomeSafeto the computer on th...

HomeSafe User’s Guide Index L-1 Appendix L Index 8 802.1x ........................................................... 7-11 A Active ........................................................... 22-2 Address Assignment ................................ 3-8, 3-9 Address Resolution Protocol (ARP) ...........