SMC2804WBR
BarricadeTM 2.4 GHz 54 Mbps Wireless Cable/DSL Broadband Router
From SMCs Barricade line of Broadband Routers
38 Tesla Irvine, CA 92618 Phone: (949) 679-8000
March 2003 Revision Number: R01

COPYRIGHT

Information furnished by SMC Networks, Inc. (SMC) is believed to be accurate and reliable. However, no responsibility is assumed by SMC for its use, nor for any infringements of patents or other rights of third parties which may result from its use. No license is granted by implication or otherwise under any patent or patent rights of SMC. SMC reserves the right to change specifications at any time without notice. Copyright 2003 by SMC Networks, Inc. 38 Tesla Irvine, CA 92618 All rights reserved. Printed in Taiwan
Trademarks: SMC is a registered trademark; and Barricade is a trademark of SMC Networks, Inc. Other product and company names are trademarks or registered trademarks of their respective holders.

COMPLIANCES

FCC - Class B
This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses, and can radiate radio frequency energy and, if not installed and used in accordance with instructions, may cause harmful interference to radio communications. However, there is no guarantee that the interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of the following measures: Reorient the receiving antenna Increase the separation between the equipment and receiver Connect the equipment into an outlet on a circuit different from that to which the receiver is connected Consult the dealer or an experienced radio/TV technician for help FCC Caution: To assure continued compliance, (example - use only shielded interface cables when connecting to computer or peripheral devices) any changes or modifications not expressly approved by the party responsible for compliance could void the users authority to operate this equipment. This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions: (1) This device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation.
CAUTION STATEMENT: FCC RF Radiation Exposure Statement
This equipment complies with FCC RF radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with a minimum distance of 20 centimeters between the radiator and your body. This transmitter must not be co-located or operating in conjunction with any other antenna or transmitter.
Compliances EC Conformance Declaration - Class B
SMC contact for these products in Europe is: SMC Networks Europe, Edificio Conata II, Calle Fructus Gelabert 6-8, 2o, 4a, 08970 - Sant Joan Desp, Barcelona, Spain. This information technology equipment complies with the requirements of the Council Directive 89/336/EEC on the Approximation of the laws of the Member States relating to Electromagnetic Compatibility and 73/23/EEC for electrical equipment used within certain voltage limits and the Amendment Directive 93/68/ EEC. For the evaluation of the compliance with these Directives, the following standards were applied:
RFI * Limit class B according to EN 55022:1998 Emission: * Limit class A for harmonic current emission according to EN 61000-3-2/ 1995 * Limitation of voltage fluctuation and flicker in low-voltage supply system according to EN 61000-3-3/1995 Immunity: * Product family standard according to EN 55024:1998 * Electrostatic Discharge according to EN 61000-4-2:1995 (Contact Discharge: 4 kV, Air Discharge: 8 kV) * Radio-frequency electromagnetic field according to EN 61000-4-3: 1996 (80 - 1000MHz with 1kHz AM 80% Modulation: 3V/m) * Electrical fast transient/burst according to EN 61000-4-4:1995(AC/DC power supply: 1kV, Data/Signal lines: 0.5kV) * Surge immunity test according to EN 61000-4-5:1995(AC/DC Line to Line: 1kV, AC/DC Line to Earth: 2kV ) * Immunity to conducted disturbances, Induced by radio-frequency fields: EN 61000-4-6:1996(0.15 - 80MHz with 1kHz AM 80% Modulation: 3V/ m) * Power frequency magnetic field immunity test according to EN 61000-4-8:1993(1A/m at frequency 50Hz) * Voltage dips, short interruptions and voltage variations immunity test according to EN 61000-4-11:1994(>95% Reduction @10ms, 30% Reduction @500ms, >95% Reduction @5000ms) LVD: * EN60950(A1/1992; A2/1993; A3/1993; A4/1995; A11/1997)

TABLE OF CONTENTS

About the Wireless Barricade g Router. 1
LED Indicators. 1 Features and Benefits. 2
Installing the Wireless Barricade g Router. 3
Package Contents. 3 Hardware Description. 4 System Requirements. 6 Connect the System. 7 Basic Installation Procedure. 7
Configuring Client TCP/IP. 12
Installing TCP/IP. 12 Windows 95/98/ME. 12 Windows 2000. 13 Setting Up TCP/IP. 15 Configuring Your Computer in Windows 95/98/Me. 15 Configuring Your Computer in Windows NT 4.0. 18 Configuring Your Computer in Windows 2000. 20 Configuring Your Computer in Windows XP. 21 Configuring a Macintosh Computer. 22 Manual IP Configuration. 23 Verifying Your TCP/IP Connection. 24
Configuring the Wireless Barricade g Router. 26
Browser Configuration. 26 Disable Proxy Connection. 27 Internet Explorer (5 or above). 27 Internet Explorer (For Macintosh). 27 Netscape (4 or above). 28 Navigating the Web Browser Interface. 29 Making Configuration Changes. 29
Setup Wizard. Time Zone. Broadband Type. Advanced Setup. System. WAN. LAN. Wireless. Network Address Translation (NAT). Firewall. DDNS (Dynamic DNS) Settings. UPnP (Universal Plug and Play) Setting. Tools. 62
Troubleshooting.66 Specifications.69
ABOUT THE WIRELESS BARRICADE G ROUTER
Congratulations on your purchase of the Wireless Barricade g Broadband Router. SMC is proud to provide you with a powerful yet simple communication device for connecting your local area network (LAN) to the Internet. For those who want to surf the Internet at the lowest possible cost, this Router provides a convenient and powerful solution.

LED Indicators

The Wireless Barricade g Router includes status LED indicators, as described in the following figure and table.
PWR WLAN WAN LAN Link Activity
PWR (Green) WLAN (Green) WAN (Green) LAN Link (Green)

Status

On On On

Description

The Router is receiving power. The Router has established a valid wireless connection. The WAN port has established a valid network connection.

On Flashing

The indicated LAN port has established a valid network connection. The indicated LAN port is transmitting or receiving traffic. The indicated LAN port has established a valid 10 Mbps network connection. The indicated LAN port has established a valid 100 Mbps network connection.

Activity (Amber)

Off On
About the Wireless Barricade g Router

Features and Benefits

Internet connection to DSL or cable modem via a 10/100 Mbps WAN port Local network connection via 10/100 Mbps Ethernet ports or 54 Mbps wireless interface (supporting up to 253 mobile users) 802.11g draft Compliant interoperable with multiple vendors Provides seamless roaming within 802.11g draft WLAN environment DHCP for dynamic IP configuration, and DNS for domain name mapping Firewall with Stateful Packet Inspection, client privileges, hacker prevention, DoS, and NAT NAT also enables multi-user access with a single-user account, and virtual server functionality (providing protected access to Internet services such as Web, mail, FTP, and Telnet) Virtual Private Network support using PPTP, L2TP, or IPSec pass-through User-definable application sensing tunnel supports applications requiring multiple connections Parental controls allow the user to restrict Web browsing Automatic email alerts when the network is being attacked Easy setup through a Web browser on any operating system that supports TCP/IP Compatible with all popular Internet applications

INSTALLING THE WIRELESS BARRICADE G ROUTER
Before installing the Wireless Barricade g Broadband Router, verify that you have all the items listed under Package Contents. If any of the items are missing or damaged, contact your local SMC distributor. Also be sure that you have all the necessary cabling before installing the Router. After installing the Router, refer to the Web-based configuration program in Configuring the Wireless Barricade g Router on page 26 for information on configuring the Router.

Package Contents

After unpacking the Wireless Barricade g Broadband Router, check the contents of the box to be sure you have received the following components:
Wireless Barricade g Broadband Router Power adapter One CAT-5 Ethernet cable Four rubber feet Installation CD containing this User Guide and EZ 3-Click Installation Wizard Quick Installation Guide
Immediately inform your dealer in the event of any incorrect, missing or damaged parts. If possible, please retain the carton and original packing materials in case there is a need to return the product.
Installing the Wireless Barricade g Router
Please register on SMCs Web site at www.smc.com The Wireless Barricade g Router is covered by a limited lifetime warranty.

Hardware Description

The Router can be connected to the Internet or to a remote site using its RJ-45 WAN port. It can be connected directly to your PC or to a local area network using any of the Fast Ethernet LAN ports. Access speed to the Internet depends on your service type. Full-rate ADSL can provide up to 8 Mbps downstream and 640 Kbps upstream. G.lite (or splitterless) ADSL provides up to 1.5 Mbps downstream and 512 Kbps upstream. Cable modems can provide up to 36 Mbps downstream and 2 Mbps upstream. ISDN can provide up to 128 Kbps when using two bearer channels. PSTN analog connections can now run up to 56 Kbps. However, you should note that the actual rate provided by specific service providers may vary dramatically from these upper limits. Although access speed to the Internet is determined by the modem type connected to the Router, data passing between devices connected to your local area network can run up to 100 Mbps over the Fast Ethernet ports. The Router includes an LED display on the front panel for system power and port indications that simplifies installation and network troubleshooting. It also provides four RJ-45 LAN ports and one RJ-45 WAN port on the rear panel.
4 RJ-45 ports for connection to a 10BASE-T/100BASE-TX Ethernet Local Area Network (LAN). These ports can auto-negotiate the operating speed to 10/100 Mbps, the mode to half/full duplex, and the pin signals to MDI/MDI-X

(i.e., allowing these ports to be connected to any network device with straight-through cable). These ports can be connected directly to a PC or to a server equipped with an Ethernet network interface card, or to a networking device such as an Ethernet hub or switch.
One RJ-45 port for connection to a DSL or cable modem (WAN). This port also auto-negotiates operating speed to 10/100 Mbps, the mode to half/full duplex, and the pin signals to MDI/MDI-X.
The following figure shows the components of the Router:
Figure 1. Front and Rear Panels
Reset Button LEDs LAN Ports WAN Port Power Inlet
Use this button to reset the power and restore the default factory settings. Power, WAN and LAN port status indicators. (See LED Indicators on page 1.) Fast Ethernet ports (RJ-45). Connect devices (such as a PC, hub or switch) on your local area network to these ports. WAN port (RJ-45). Connect your cable modem, DSL modem, or an Ethernet router to this port. Connect the included power adapter to this inlet. Warning: Using the wrong type of power adapter may cause damage.

System Requirements

You must have an ISP that meets the following minimum requirements:
Internet access from your local telephone company or Internet Service Provider (ISP) using a DSL modem, cable modem, ISDN TA, or PSTN analog modem. You may also have access over the telephone system to an analog modem at another site. A PC using a fixed IP address or dynamic IP address assigned via DHCP, as well as a Gateway server address and DNS server address from your service provider. A computer equipped with a 10 Mbps, 100 Mbps, or 10/100 Mbps Fast Ethernet card, or a USB-to-Ethernet converter. TCP/IP network protocol installed on each PC that needs to access the Internet. A Java-enabled Web browser, such as Microsoft Internet Explorer 5.0 or above, or Netscape Communicator 4.0 or above installed on one PC at your site for configuring the Router.

Connect the System

The Router can be positioned at any convenient location in your office or home. No special wiring or cooling requirements are needed. You should, however comply with the following guidelines:
Keep the Router away from any heating devices. Do not place the Router in a dusty or wet environment.
You should also remember to turn off the power, remove the power cord from the outlet, and keep your hands dry when you install the Router.
Basic Installation Procedure

radio link, or access other computers or network resources in the wired LAN infrastructure or over the Internet via the Router. The wireless infrastructure configuration not only extends the accessibility of wireless PCs to the wired LAN, but also doubles the effective wireless transmission range for wireless PCs by retransmitting incoming radio signals through the Router. A wireless infrastructure can be used for access to a central database, or for connection between mobile workers, as shown in the following figure:
Wired to Wireless Network Extension

Internet Access Device

Notebook with Wireless PC Card Adapter
Wireless Cable/DSL Broadband Router
Wired LAN PC with Wireless PCI Adapter
Figure 4. Making the WLAN Connections
Attach the Wireless Barricade g Router to the Internet If Internet services are provided through an xDSL or cable modem, use unshielded or shielded twisted-pair Ethernet cable (Category 3 or greater) with RJ-45 plugs to connect the broadband modem directly to the WAN port on the Router.

DSL/Cable Modem

(Primary)
Figure 5. Making the WAN Connection Note: When connecting to the WAN port, use 100-ohm Category 3, 4, or 5 shielded or unshielded twisted-pair cable with RJ-45 connectors at both ends for all connections.
Connecting the Power Adapter Plug the power adapter into the power socket on the Router, and the other end into a power outlet. Check the indicator marked PWR on the front panel to be sure it is on. If the power indicator does not light, refer to Troubleshooting on page 66.
CONFIGURING CLIENT TCP/IP
If you have not previously installed the TCP/IP protocols on your client PCs, refer to the following section. If you need information on how to configure a TCP/IP address on a PC, refer to Setting Up TCP/IP on page 15.

Installing TCP/IP

Windows 95/98/ME
1. Click Start/Settings/Control Panel. 2. Double-click the Network icon and select the Configuration tab in the Network window. 3. Click the Add button. 4. Double-click Protocol.
5. Select Microsoft in the manufacturers list. Select TCP/IP in the Network Protocols list. Click the OK button to return to the Network window.
6. The TCP/IP protocol will be listed in the Network window. Click OK. The operating system may prompt you to restart your system. Click Yes and the computer will shut down and restart.

Windows 2000

1. Click the Start button and choose Settings, then click the Network and Dial-up Connections icon. 2. Double-click the Local Area Connection icon, and click the Properties button on the General tab. 3. Click the install. button.
Configuring Client TCP/IP
4. Double-click Protocol.
5. Choose Internet Protocol (TCP/IP). Click the OK button to return to the Network window.
6. The TCP/IP protocol will be listed in the Network window. Click OK to complete the installation procedure.

Setting Up TCP/IP

To access the Internet through the Router, you must configure the network settings of the computers on your LAN to use the same IP subnet as the Router. The default network settings for the Router are: Gateway IP Address: 192.168.2.1 Subnet Mask: 255.255.255.0 Note: These settings may be changed to suit your network requirements, but you must first configure at least one computer as described in this chapter to access the Routers Web configuration interface.See Configuring the Wireless Barricade g Router on page 26 for information on configuring the Router.)
If you have not previously configured TCP/IP for your computer, refer toConfiguring Client TCP/IP on page 12. The IP address of the connected client PC should be 192.168.2.x (where x means 2254). You can set the IP address for client PCs either by automatically obtaining an IP address from the Routers DHCP service or by manual configuration.
Configuring Your Computer in Windows 95/98/Me
You may find that the instructions here do not exactly match your version of Windows. This is because these steps and screenshots were created in Windows 98. Windows 95 and Windows Millennium Edition are very similar, but not identical, to Windows 98. 1. From the Windows desktop, click Start/Settings/Control Panel. 2. In the Control Panel, locate and double-click the Network icon.
3. On the Network window Configuration tab, double-click the TCP/IP entry for your network card.
4. Click the IP Address tab.
5. Click the Obtain an IP address option. 6. Next click on the Gateway tab and verify the Gateway field is blank. If there are IP addresses listed in the Gateway section, highlight each one and click Remove until the section is empty. 7. Click the OK button to close the TCP/IP Properties window.
8. On the Network Properties Window, click the OK button to save these new settings. Note: Windows may ask you for the original Windows installation disk or additional files. Check for the files at c:\windows\options\cabs, or insert your Windows CD-ROM into your CDROM drive and check the correct file location, e.g., D:\win98, D:\win9x. (if D is the letter of your CD-ROM drive).
9. Windows may prompt you to restart the PC. If so, click the Yes button. If Windows does not prompt you to restart your computer, do so to insure your settings. Obtain IP Settings from Your Wireless Barricade g Router Now that you have configured your computer to connect to your Router, it needs to obtain new network settings. By releasing old IP settings and renewing them with settings from your Router, you will also verify that you have configured your computer correctly. 1. Click Start/Run. 2. Type WINIPCFG and click OK. 3. From the drop-down menu, select your network card. Click Release and then Renew. Verify that your IP address is now 192.168.2.xxx, your Subnet Mask is 255.255.255.0 and your Default Gateway is 192.168. 2.1. These values confirm that the Router is functioning. Click OK to close the IP Configuration window.

Configuring Client TCP/IP Configuring Your Computer in Windows NT 4.0
1. From the Windows desktop click Start/Settings/Control Panel. 2. Double-click the Network icon.
3. Click on the Protocols tab. 4. Double-click TCP/IP Protocol.
5. Click on the IP Address tab. 6. In the Adapter drop-down list, be sure your Ethernet adapter is selected.
7. Click on Obtain an IP address from a DHCP server. 8. Click OK to close the window. 9. Windows may copy files and will then prompt you to restart your system. Click Yes and your computer will shut down and restart. Obtain IP Settings From Your Wireless Barricade g Router Now that you have configured your computer to connect to the Router, it needs to obtain new network settings. By releasing old IP settings and renewing them with settings from the Router, you will also verify that you have configured your computer correctly. 1. On the Windows desktop, click Start/Programs/Command Prompt. 2. In the Command Prompt window, type IPCONFIG /RELEASE and press the <ENTER> key.
3. Type IPCONFIG /RENEW and press the <ENTER> key. Verify that your IP Address is now 192.168.2.xxx, your Subnet Mask is 255.255.255.0 and your Default Gateway is 192.168.2.1. These values confirm that the Router is functioning.
4. Type EXIT and press <ENTER> to close the Command Prompt window.
Configuring Your Computer in Windows 2000
1. Access your Network settings by clicking Start, then choose Settings and then select Control Panel. 2. In the Control Panel, locate and double-click the Network and Dial-up Connections icon. 3. Locate and double-click the Local Area Connection icon for the Ethernet adapter that is connected to the Router. When the Status dialog box window opens, click the Properties button. 4. In the Local Area Connection Properties box, verify the box next to Internet Protocol (TCP/IP) is checked. Then highlight the Internet Protocol (TCP/IP), and click the Properties button.
5. Select Obtain an IP address automatically to configure your computer for DHCP. Click the OK button to save this change and close the Properties window. 6. Click the OK button again to save these new changes. 7. Reboot your PC. 8. To obtain new network settings see Obtain IP Settings from Your Wireless Barricade g Router on page 17.

Verifying Your TCP/IP Connection
After installing the TCP/IP communication protocols and configuring an IP address in the same network as the Router, use the Ping command to check if your computer has successfully connected to the Router. The following example shows how the Ping procedure can be executed in an MS-DOS window. First, execute the Ping command: ping 192.168.2.1 If a message similar to the following appears: Pinging 192.168.2.1 with 32 bytes of data: Reply from 192.168.2.1: bytes=32 time=2ms TTL=64 a communication link between your computer and the Router has been successfully established. If you get the following message,
Pinging 192.168.2.1 with 32 bytes of data: Request timed out. there may be something wrong in your installation procedure. Check the following items in sequence: 1. Is the Ethernet cable correctly connected between the Router and the computer? The LAN LED on the Router and the Link LED of the network card on your computer must be on. 2. Is TCP/IP properly configured on your computer? If the IP address of the Router is 192.168.2.1, the IP address of your PC must be from 192.168.2.2 - 192.168.2.254 and the default gateway must be 192.168.2.1. If you can successfully Ping the Router you are now ready to connect to the Internet!
CONFIGURING THE WIRELESS BARRICADE G ROUTER
The Wireless Barricade g Router can be configured by any Java-supported browser including Internet Explorer 4.0 or above, or Netscape Navigator 4.0 or above. Using the Web management interface, you can configure the Router and view statistics to monitor network activity. Note: Before you attempt to configure your router, if you have access to the Internet please visit www.smc.com and download the latest firmware update to ensure your Router is running the latest firmware.
Before you attempt to log into the Web-based Administration, please verify the following. 1. Your browser is configured properly (see below). 2. Disable any firewall or security software that may be running. 3. Confirm that you have a good link LED where your computer is plugged into the Router. If you dont have a link light, then try another cable until you get a good link.

Browser Configuration

Confirm your browser is configured for a direct connection to the Internet using the Ethernet cable that is installed in the computer. This is configured through the options/preference section of your browser.

Disable Proxy Connection

You will also need to verify that the HTTP Proxy feature of your web browser is disabled. This is so that your web browser will be able to view the Router configuration pages. The following steps are for Internet Explorer and for Netscape. Determine which browser you use and follow the appropriate steps.

Point-to-Point Over Ethernet (PPPoE)
Enter the PPPoE User Name and Password assigned by your Service Provider. The Service Name is normally optional, but may be required by some service providers. The MTU (Maximum Transmission Unit) governs the maximum size of the data packets. Leave this on the default value (1454) unless you have a particular reason to change it. Enter a Maximum Idle Time (in minutes) to define a maximum period of time for which the Internet connection is maintained during inactivity. If the connection is inactive for longer than the Maximum Idle Time, it will be dropped. (Default: 10 minutes)
Point-to-Point Tunneling Protocol (PPTP)
Point-to-Point Tunneling Protocol (PPTP) can be used to join different physical networks using the Internet as an intermediary. Using the above screen allows client PCs to establish a normal PPTP session and provides hassle-free configuration of the PPTP client on each client PC. Enter the assigned IP address, subnet mask and default gateway IP address (usually supplied by your ISP), and then the PPTP User ID, Password and PPPTP Gateway IP address. Enter a maximum Idle Time Out (in minutes) to define a maximum period of time for which the PPTP connection is maintained during inactivity. If the connection is inactive for longer than the Maximum Idle Time, it will be dropped. (Default: 10 minutes)

Static IP Address

If your Internet Service Provider has assigned a fixed IP address, enter the assigned address and subnet mask for the Router, then enter the gateway address of your ISP. You may need a fixed address if you want to provide Internet services, such as a Web server or FTP server.
Domain Name Servers map numerical IP addresses to the equivalent domain name (e.g., www.smc.com). Your ISP should provide the IP address of one or more domain name servers. Enter those addresses in this screen.
Configuring the Wireless Barricade g Router LAN
LAN IP Use the LAN menu to configure the LAN IP address for the Router and to enable the DHCP server for dynamic client address allocation. Set a period for the lease time if required. For home networks this may be set to Forever, which means there is no time limit on the IP address lease. IP Address Pool A dynamic IP start address may be specified by the user, e.g. 192.168.2.100 (default value). Once this start IP address has been assigned, IP addresses running from 192.168.2.100 to 192.168.2.199 will be part of the dynamic IP address pool. IP addresses from 192.168.2.2 to 192.168.2.99, and 192.168.2.200 to 192.168.2.254 will be available as static IP addresses.

Remember not to include the address of the Router in the client address pool. Also remember to configure your client PCs for dynamic IP address allocation.

Advanced Setup Wireless

To configure the Router as a wireless access point for wireless clients (either stationary or roaming), all you need to do is define the radio channel, the Service Set identifier (SSID), and encryption options. Channel and SSID
You must specify a common radio channel and SSID (Service Set ID) to be used by the Router and all of your wireless clients. Be sure you configure all of your clients to the same values. ESSID: The Service Set ID. This should be set to the same value as other wireless devices in your network. Note: The SSID is case sensitive and can consist of up to 32 alphanumeric characters.
Wireless Mode: Set the communication mode for the Router. (Default: 11g only.)
Transmission Rate: Set the data rate transmitted from the Router. The lower the data rate, the longer the transmission distance. (Default: Fully Automatic.)
Channel: The radio channel through which the Router communicates with PCs in its BSS. (Default: Auto) Note: The available channel settings are limited by local regulations.

Encryption

If you are transmitting sensitive data across wireless channels, you should enable Wired Equivalent Privacy (WEP) encryption. Encryption requires you to use the same set of encryption/decryption keys for the Router and all of your wireless clients. You can choose between standard 64-bit or the more robust 128-bit encryption. You may automatically generate encryption keys or manually enter the keys. For automatic 64-bit security, enter a passphrase and click Generate. Four keys will be generated (as shown below). Choose a key from the dropdown list or accept the default key. Automatic 128-bit security generates a single key.
If you use encryption, configure the same keys used for the Router on each of your wireless clients. Note that Wired Equivalent Privacy (WEP) protects data transmitted between wireless nodes, but does not protect any transmissions over your wired network or over the Internet.
Advanced Setup Network Address Translation (NAT)
From this section you can configure the Address Mapping, Virtual Server, and Special Application features that provide control over the port openings in the routers firewall. This section can be used to support several Internet based applications such as VPN Address Mapping
Allows one or more public IP addresses to be shared by multiple internal users. Enter the Public IP address you wish to share into the Global IP field. Enter a range of internal IPs that will share the global IP.

30 sec

TCP FIN wait

TCP connection idle 3600 seconds The length of time a TCP session will be timeout (1 hour) maintained if there is no activity. UDP session idle timeout 30 sec The length of time a UDP session will maintained if there is no activity. The length of time an H.323 session will be maintained if there is no activity.
H.323 data channel 180 sec idle timeout
DoS Criteria and Port Scan Criteria Set up DoS and port scan criteria in the spaces provided (as shown below).
Total incomplete TCP/UDP sessions HIGH

300 sessions

Defines the rate of newly unestablished sessions that will cause the software to start deleting half-open sessions. Defines the rate of newly unestablished sessions that will cause the software to stop deleting half-open sessions. Maximum number of allowed incomplete TCP/UDP sessions per minute. Minimum number of allowed incomplete TCP/UDP sessions per minute. Set this to 0 if no minimum setting is required. Maximum number of incomplete TCP/UDP sessions from the same host.
Total incomplete TCP/UDP sessions LOW

250 sessions

Incomplete TCP/UDP sessions (per min.) HIGH Incomplete TCP/UDP sessions (per min.) LOW

200 sessions

Maximum incomplete TCP/UDP sessions number from same host

10 sessions

Incomplete TCP/UDP sessions detect sensitive time period Maximum half-open fragmentation packet number from same host Half-open fragmentation detect sensitive time period

300 msec

Length of time before an incomplete TCP/UDP session is detected as incomplete. Maximum number of half-open fragmentation packets from the same host. Length of time before a half-open fragmentation session is detected as half-open. Length of time from detecting a flood attack to blocking of the attack.
Flooding cracker block time

300 sec

If you have a client PC that cannot run an Internet application properly from behind the firewall, then you can open the client up to unrestricted two-way Internet access. Enter the IP address of a DMZ host to this screen. Adding a client to the DMZ
(Demilitarized Zone) may expose your local network to a variety of security risks, so only use this option as a last resort.
DDNS (Dynamic DNS) Settings
Domain Name A series of alphanumeric strings separated by periods, that is the address of a the Router network connection and that identifies the owner of the address. Dynamic DNS provides users on the Internet with a method to tie their domain name(s) to computers or servers. DDNS allows your domain name to follow your IP address automatically by having your DNS records changed when your IP address changes. The section also has a Server Configuration section that automatically opens the port options checked in the Virtual Server section. Simply enter in the IP Address of your server, such as a web server, and then click on the port option HTTP Port 80 so users can access your server from the WAN connection (Internet).

This DNS feature is powered by TZO.com. With a DDNS connection you can host your own web site, email server, FTP site, and more at your own location even if you have a dynamic IP address. (Default: Disable)
UPnP (Universal Plug and Play) Setting
Enable UPnP by checking ON in the screen above. UPnP allows the device to automatically:
dynamically join a network obtain an IP address convey its capabilities and learn about the presence and capabilities of other devices. (Default: OFF)
Configuring the Wireless Barricade g Router Tools
Use the Tools menu to backup the current configuration, restore a previously saved configuration, restore factory settings, update firmware, and reset the Router. Tools - Configuration Tools
Backup saves the Routers configuration to a file. Restore restores settings from a saved backup configuration file. Restore to factory defaults restores the Router settings back to the factory default original.

Firmware Upgrade

Tools - Firmware Upgrade
Use this screen to update the firmware or user interface to the latest versions. Download the upgrade file from the SMC Web site (www.smc.com) and save it to your hard drive. In the Upgrade Target field, choose Firmware. Then click Browse to look for the previously downloaded file. Click APPLY. Check the Status page Information section to confirm that the upgrade process was successful.

Tools - Reset

Click APPLY to reset the Router. The reset will be complete when the power LED stops blinking. Note: If you use the Reset button on the front panel, the Router performs a power reset. If the button is held depressed for over five seconds, all the LEDs will illuminate and the factory settings will be restored.
Status The Status screen displays WAN/LAN connection status, firmware, and hardware version numbers, illegal attempts to access your network, as well as information on DHCP clients connected to your network.
The following items are included on this screen:

Section

INTERNET GATEWAY INFORMATION
Displays WAN connection type and status. Displays system IP settings, as well as DHCP and Firewall status. Displays the number of attached clients, the firmware versions, the physical MAC address for each media interface, as well as the hardware version and serial number. Displays illegal attempts to access your network. Click on this button to save the security log file. Click on this button to delete the access log. Click on this button to refresh the screen. Displays information on all DHCP clients on your network.
Security Log Save Clear Refresh DHCP Client Log

Data Sheet

Barricade g

SMC2804WBR
2.4 GHz 54 Mbps Wireless Cable/DSL Broadband Router
The Barricade g 2.4GHz 54Mbps Wireless Cable/DSL Broadband Router (SMC2804WBR) is the perfect networking solution for any home and business user that is looking for a simple, all-in-one network product. This platform independent multi-functional router combines a 4-port 10/100 Mbps dual-speed switch with Automatic MDI-MDIX feature, a high speed 54Mbps wireless access point, Stateful Packet Inspection (SPI) firewall security, network management, and Virtual Private Network (VPN) passthrough support into one convenient device. The new Barricade g offers a high data rate that is up to 5 times faster than the widely used 802.11b wireless LAN and is backward compatible with existing 802.11b network devices. The integrated Stateful Packet Inspection (SPI) firewall provides protection against hacker invasions, such as Denial of Service (DoS) attacks by analyzing individual data packets, to ensure that only authorized packets are allowed access to the network. To control network access, parents, or business owners can block certain websites by entering either a URL address or just a keyword of the website. In addition, if someone attepts to hack into your network the Barricade g can alert you via email. The Barricade g provides a 10/100 Mbps WAN port for high-speed integration into your network. Supporting NAT, the Barricade g can provide simultaneous Internet access for up to 253 PCs using a single purchased IP address. To manage these connections, the Barricade g has a built-in DHCP server to auto-assign IP addresses to devices on your network. By using the web-based management interface, you can configure this router to handle IP routing and port forwarding through the Virtual Server option. For added management, the router also has a full-featured Access Control option. This integrated feature allows you to filter traffic through your network based on IP address or MAC Address. For wireless connectivity, the Barricade g supports up to 54Mbps high-speed wireless connection at data rates of 1, 2, 5.5, 6, 9, 11, 12, 18, 24, 36, 48 and 54 Mbps. To secure this wireless connection, the Barricade g supports 802.1x for authentication, Wi-Fi Protected Access (WPA)*, MAC address filtering and 64/128-bit Wired Equivalent Privacy (WEP). This integrated wireless router allows you to connect to your network at distances up to 350m**. Furthermore, the Barricade g has two detachable antennas that can be replaced with SMC high gain antennas for added performance and coverage. SMCs Barricade g 2.4GHz 54Mbps Wireless Cable/DSL Broadband Router offers a high-speed, cost-effective and comprehensive networking solution for PC,MAC, or Linux users.
www.smc-europe.com www.smc.com

Features and Benets

High Performance & Functionality EZ 3-Click Installation Wizard User-friendly Web-based management Connects to a Cable/xDSL modem Simultaneous Internet access for up to 253 PCs on the LAN using only one IP address Built-in Stateful Packet Inspection (SPI) rewall security 4-port Auto-MDI-MDIX 10/100 Mbps switch versatility plus 1 10/100 Mbps port for WAN connection 2 Detachable Antennas High Speed wireless operation at 1, 2, 5.5, 6, 9, 11, 12, 18, 24, 36, 48, 54 Mbps and has an operating range of up to 350m** Robust security features include 802.1x for authentication, Wi-Fi Protected Access (WPA)*, 64-bit/128-bit WEP encryption, and MAC address ltering URL blocking to limit access to certain websites by entering a full URL address or a keyword of the website Access control based on IP address ltering, MAC address ltering, date and time of the day. Hacker prevention and logging capability with email alerts prevent common hacker attacks Syslog Daemon supports sending Syslog information to a Server running any Syslog Daemon Compatibility Platform independent works with PC, MAC or Linux IEEE 802.3, 802.3u, and 802.11g draft and 802.11b
* Coming soon ** Distance performance may be effected by variables such as barrier composition and local environment interference)

Product Barricade g

Model No SMC2804WBR
Description 2.4GHz 54 Mbps Wireless Cable/DSL Broadband Router

Specifications

Standards IEEE802.3, 802.3u, 802.11g draft, 802.11b Compliant Data Rate 1/2/5.5/6/9/11/12/18/24/36/ 48/54 Mbps Security 64/128-bit WEP Wi-Fi Protected Access* 802.1x Conguration and Mangement Web Conguration and rmware upgradeable Internet Sharing Methods Static IP Dynamic IP PPPoE PPTP WAN Big Pond Protocols TCP/IP, PPTP/L2TP/IPSec Passthrough (VPN) DNS SNTP NAT DHCP HTTP HTML PPP Internet Control Protocol PPP Authentication Protocol Point-to-Point Protocol LED Indicators Power WLAN LAN WAN Interface 4 x 10/100 Base-T RJ-45 LAN Port with Automatic MDI/MDIX feature 1 x 10/100 Base-T RJ-45 Broadband WAN port Wireless RF module Frequency Band 802.11g Radio: 2.4GHz 802.11b Radio: 2.4GHz USA FCC 2412~2462MHz (Ch1~Ch11) Canada IC 2412~2462MHz (Ch1~Ch11) Europe ETSI 2412~2472MHz (Ch1~Ch13) Spain 2457~2462MHz (Ch10~Ch11) France 2457~2472MHz (Ch10~Ch13) Japan STD-T66/STD-33 2412~2484MHz (Ch1~Ch14) Modulation Type OFDM, CCK Operating Channels IEEE 802.11b compliant: 11 channels (US, Canada) 13 channels (ETSI) 2 Channels (Spain) 4 Channels (France) 14 channels (Japan) IEEE 802.11g compliant: 13 channels (US, Canada, Europe, Japan) RF Output Power Modulation Rate-Output Power 802.11b 1Mbps 802.11b 2Mbps 802.11b 5.5Mbps 802.11b 11Mbps (dBm) (dBm) Power 9V, 1000 mA Regulation Compliance FCC Part 15 Class B, Sec. 15.247 and 15.109 ETS 300 328, ETS 300 826, EN60950 and CE-Mark VCCI/JATE CSA/TUV Industry Canada DGT Telec (Japan) Operating Temperature 0 ~ 55C ambient Storage Temperature -20C ~ 75C ambient Humidity 15%~95% Size 22.0 x 13.5 x 2.5 cm Weight 680g

2.4GHz 54 Mbps Wireless Cable/DSL Broadband Router
Modulation Rate-Output Power 802.11g 6Mbps 802.11g 9Mbps 802.11g 12Mbps 802.11g 18Mbps 802.11g 24Mbps 802.11g 36Mbps 802.11g 48Mbps 802.11g 54Mbps
Sensitivity Modulation Rate-Receiver 2.412 ~ 2.484 HGz 802.11b 1Mbps 802.11b 2Mbps 802.11b 5.5Mbps 802.11b 11Mbps Sensitivity (dBm) -90 -88 -85 -84 Sensitivity Typical (dBm) -88 -87 -84 -82 -79 -75 -68 -68
Modulation Rate-Receiver 802.11g 6Mbps 802.11g 9Mbps 802.11g 12Mbps 802.11g 18Mbps 802.11g 24Mbps 802.11g 36Mbps 802.11g 48Mbps 802.11g 54Mbps
Antenna Type Two Detachable Antennas with Reversed SMA Connectors Antenna Gain 2 dBi
SMC Networks Europe Head Ofce Edicio Conata II Fructus Gelabert 6-8 20, 4a 08970 - Sant Joan Despi Barcelona Spain Telephone: +Facsimile: +SMC Networks Central Europe Telephone: +49 (0) 89 92861-0 Facsimile: +49 (0) 89 92861-230 SMC Networks CIS Telephone: +73 Facsimle: +73 SMC Networks Denmark Telephone: +45 (0) Facsimile: +45 (0) 566 62286
SMC Networks Eastern Europe Telephone: +Facsimile: +SMC Networks Italia Telephone : +39 (0) 02 SMC Networks Netherlands Telephone: +075227 Facsimile: +SMC Networks Ireland Telephone: +Facsimile: +SMC Networks Nordic Telephone: +46 (0) 0700 Facsimile: +46 (0) SMC Networks North West Africa Telephone: +16 Facsimle:+15
SMC Networks Sub-Saharan Africa Telephone: +SMC Networks South-East Europe Telephone: +49 (0) 80 Facsimile: +49 (0) 81 SMC Networks Southern Europe Telephone: +33 (0) 32 Facsimile: +33 (0) 58 SMC Networks Spain and Portugal Telephone: +34 (0) Facsimile: +34 (0) SMC Networks United Kingdom Telephone: +44 (0) 6553
SMC is a registered trademark; and EtherPower, EZStart, SimulTasking, TigerSwitch and SuperDisk are trademarks of SMC Networks, Inc. Other product and company names are trademarks or registered trademarks of their respective holders. Copyright 2002 SMC Networks, Inc.