User manual 3COM WL-552

[. . . ] OfficeConnect ADSL Wireless 54 Mbps 11g Firewall Router User Guide ® WL-552 3CRWDR101A-75 3CRWDR101B-75 http://www. 3Com. com/ Part No. AA Published March 2006 3Com Corporation 350 Campus Drive, Marlborough, MA USA 01752-3064 Copyright © 2004, 2005, 2006, 3Com Corporation. No part of this documentation may be reproduced in any form or by any means or used to make any derivative work (such as translation, transformation, or adaptation) without written permission from 3Com Corporation. 3Com Corporation reserves the right to revise this documentation and to make changes in content from time to time without obligation on the part of 3Com Corporation to provide notification of such revision or change. [. . . ] Traffic Mapping You can define up to 16 rules to classify traffic into Diffserv forwarding groups and outgoing VCs in this screen. Figure 68 Traffic Mapping screen 82 CHAPTER 5: CONFIGURING THE ROUTER Click Add to add a new traffic class rule (see Figure 69). Figure 69 Add New Traffic Class Rule Screen Traffic Statistics This screen shows the WAN outbound traffic statistics of all the Diffserv forwarding groups in the last 12 hours. This screen automatically updates every 5 minutes. Figure 70 Traffic Statistics Screen Advanced 83 Advanced From the Advanced screen, you can configure: Security Static Routes RIP DDNS SNMP Syslog Proxy Arp Security Use the Security screen to set the advanced security settings for the Router. Figure 71 Security Screen NAT -- Before you enable NAT (Network Address Translation), make sure you have changed the administrator password. NAT is the method by which the Router shares the single IP address assigned by your ISP with the computers on your network. This function should only be disabled by advanced users, and if your ISP assigns you multiple IP addresses or you need NAT disabled for an advanced system configuration. If you have a single IP address and 84 CHAPTER 5: CONFIGURING THE ROUTER you turn NAT off, the computers on your network will not be able to access the Internet. Other problems may also occur. IPSEC NAT-T Pass-through -- NAT-T (NAT Traversal) is an Internet Draft proposed to IETF in order to help the problems associated with passing IPsec traffic through NAT Routers. For NAT-T to work, both ends of the connection need to support this function. Ensure that you select NAT-T only if it is needed as it will reduce LAN-WAN throughput. This Router supports NAT-T draft 2 implementation. Universal Plug and Play -- This is a technology that offers seamless operation of voice messaging, video messaging, games, and other applications that are Universal Plug and Play compliant. Some applications require the Router's firewall to be configured in a specific way to operate properly. This usually requires opening TCP and UDP ports and in some instances setting trigger ports. An application that is Universal Plug and Play compliant has the ability to communicate with the Router, basically "telling" the Router which way it needs the firewall configured. If you are using any applications that are Universal Plug and Play compliant, and want to take advantage of the Universal Plug and Play features, you can enable this feature. WAN Ping Blocking -- Computer hackers use what is known as "Pinging" to find potential victims on the Internet. By pinging a specific IP address and receiving a response from the IP address, a hacker can determine that something of interest might be there. The Router can be set up so it will not respond to an Internet Control Message Protocol (ICMP) Ping from the outside. To turn off the ping response, check Block ICMP Ping and click Apply; the Router will not respond to an ICMP ping from the Internet. MSS Clamping -- You might not be able to browse some Web sites or to send email messages that contain attachments from an Internet Connection Sharing client computer if your outbound connection is through a Windows XP-based Internet Connection Sharing host computer that uses Point-to-Point Protocol over Ethernet (PPPoE). This issue may occur if the Windows XP-based Internet Connection Sharing host computer uses a smaller Maximum Transmission Unit (MTU) size on the WAN interface (the PPPoE connection to the Internet) than it uses on the private interface (the Ethernet connection to the Internet Connection Sharing client). If a packet is larger than Advanced 85 the MTU size on the WAN interface, the client sends an Internet Control Message Protocol (ICMP) error to the external server to request that the server negotiate the TCP Maximum Segment Size (MSS). MSS clamping will make Internet Connection Sharing set the MSS value low enough to match the external interface. Remote Administration -- This feature allows you to make changes to your Router's settings from anywhere on the Internet. Four options are available: If you do not want to use this feature, select Disable Remote Administration. [. . . ] Pour empecher que cet appareil cause du brouillage au service faisant l'objet d'une licence, il doit etre utilize a l'interieur et devrait etre place loin des fenetres afin de Fournier un ecram de blindage maximal. Si le matriel (ou son antenne d'emission) est installe a l'exterieur, il doit faire l'objet d'une licence. INDUSTRY CANADA EMISSIONS COMPLIANCE STATEMENT AVIS DE CONFORMITé à LA RéGLEMENTATION D'INDUSTRIE CANADA SAFETY COMPLIANCE NOTICE This Class B digital apparatus complies with Canadian ICES-003. Cet appareil numérique de la classe B est conform à la norme NMB-003 du Canada. This device has been tested and certified according to the following safety standards and is intended for use only in Information Technology Equipment which has been tested to these or other equivalent standards: UL Standard 60950-1 CAN/CSA C22. 2 No. 60950-1 IEC 60950-1 EN 60950-1 EU COMPLIANCE For connection to ADSL networks This equipment may be operated in: AT DE MT GB BE GR NL IS CY HU PL LI CZ IE PT NO DK IT SK CH EE LV SI BG FI LT ES RO FR LU SE TR 139 Intended use: ADSL 802. 11g/b Firewall Router For connection to ADSL networks NOTE: To ensure product operation is in compliance with local regulations, select the country in which the product is installed. Refer to 3CRWDR101A-75 User Guide. Cesky [Czech] 3Com Coporation tímto prohlasuje, ze tento RLAN device je ve shod se základními pozadavky a dalsími píslusnými ustanoveními smrnice 1999/5/ES. [. . . ]