User Guide
Page 19
...Firewall and 3Com Network Supervisor I Firewall Features I Introduction to the Internet access device, for example, Router or Cable Modem. You can use the Firewall to: I The Wide Area Network (WAN) port attaches to Virtual Private Networking (VPN) The SuperStack® 3 Firewall is a dedicated firewall appliance which is the SuperStack 3 Firewall...? I Log events which are protected from hacker attacks that might come through hubs and switches. 1 INTRODUCTION What is...
...Firewall and 3Com Network Supervisor I Firewall Features I Introduction to the Internet access device, for example, Router or Cable Modem. You can use the Firewall to: I The Wide Area Network (WAN) port attaches to Virtual Private Networking (VPN) The SuperStack® 3 Firewall is a dedicated firewall appliance which is the SuperStack 3 Firewall...? I Log events which are protected from hacker attacks that might come through hubs and switches. 1 INTRODUCTION What is...
User Guide
Page 30
...the link to any workstation or network device that data is operational at 10 Mbps. 30 CHAPTER 2: INSTALLING THE HARDWARE The Firewall front panel contains the following : I No operational firmware is operational at 100 Mbps. Connect this port in half-duplex mode... indicates the following components: 1 LAN Port - I A failure in the self-test the Firewall runs when switched on. The setting of these switches. 5 Status LEDs - See "Attaching the Firewall to access a restricted site. I Yellow indicates that the link between port and the next network device is being passed....
...the link to any workstation or network device that data is operational at 10 Mbps. 30 CHAPTER 2: INSTALLING THE HARDWARE The Firewall front panel contains the following : I No operational firmware is operational at 100 Mbps. Connect this port in half-duplex mode... indicates the following components: 1 LAN Port - I A failure in the self-test the Firewall runs when switched on. The setting of these switches. 5 Status LEDs - See "Attaching the Firewall to access a restricted site. I Yellow indicates that the link between port and the next network device is being passed....
User Guide
Page 31
...reset the Firewall see "Troubleshooting Guide" on page 187. The RPS status is switched on. Figure 5 Firewall Rear Panel 9 10 11 The Firewall rear panel contains the following SuperStack 3 RPS with the Firewall. 10 Redundant Power System socket - CAUTION: Holding the Reset Switch when you...Web interface. The System is running, and also when restarting. Use to warn you choose the most suitable for about 90 seconds while self-test is a group of products from which you . Use the following components: 9 Power socket - If you have installed a 3Com RPS unit with the Firewall...
...reset the Firewall see "Troubleshooting Guide" on page 187. The RPS status is switched on. Figure 5 Firewall Rear Panel 9 10 11 The Firewall rear panel contains the following SuperStack 3 RPS with the Firewall. 10 Redundant Power System socket - CAUTION: Holding the Reset Switch when you...Web interface. The System is running, and also when restarting. Use to warn you choose the most suitable for about 90 seconds while self-test is a group of products from which you . Use the following components: 9 Power socket - If you have installed a 3Com RPS unit with the Firewall...
User Guide
Page 32
... physical network. Figure 6 Network Connection Diagram Showing Sample Network S N F S R C SLB W LAN Key: DMZ WAN F C SLB R SuperStack 3 Firewall Webcache Server Load Balancer Router S WN Client PC 10/100 Mbps Switch Web and Network Servers Never connect two ports on the Firewall to the Network I and 60W RPS Power Module - (3C16072) Figure 6 illustrates one possible network configuration.
... physical network. Figure 6 Network Connection Diagram Showing Sample Network S N F S R C SLB W LAN Key: DMZ WAN F C SLB R SuperStack 3 Firewall Webcache Server Load Balancer Router S WN Client PC 10/100 Mbps Switch Web and Network Servers Never connect two ports on the Firewall to the Network I and 60W RPS Power Module - (3C16072) Figure 6 illustrates one possible network configuration.
User Guide
Page 33
...CAT-5 cable. If you are connecting the WAN port to a hub or switch with a crossover cable, or directly to a workstation with standard cable, make sure the Uplink/Normal switch is designed to start up as soon as Web and FTP servers, use a standard Category 5 cable. If you are ..., which take about 90 seconds, the Power LED flashes. Attaching the Firewall to the Network 33 To attach the Firewall to your LAN. Then it . CAUTION: Do not switch the Firewall off , wait approximately five seconds before switching it has an MDIX (normal) configuration, then you are on for all...
...CAT-5 cable. If you are connecting the WAN port to a hub or switch with a crossover cable, or directly to a workstation with standard cable, make sure the Uplink/Normal switch is designed to start up as soon as Web and FTP servers, use a standard Category 5 cable. If you are ..., which take about 90 seconds, the Power LED flashes. Attaching the Firewall to the Network 33 To attach the Firewall to your LAN. Then it . CAUTION: Do not switch the Firewall off , wait approximately five seconds before switching it has an MDIX (normal) configuration, then you are on for all...
User Guide
Page 113
... is able to use the 3Com Web Site Filter (3C16111). 2 Install the Firewall according to the Superstack 3 Firewall User Guide (this guide) taking into account any safety information. b Set the Webcache to configure the Webcache with a registered IP address. d Do not configure Web Site Blocking on a Hub or Switch connected to the DMZ port of the Firewall so you will need to...
... is able to use the 3Com Web Site Filter (3C16111). 2 Install the Firewall according to the Superstack 3 Firewall User Guide (this guide) taking into account any safety information. b Set the Webcache to configure the Webcache with a registered IP address. d Do not configure Web Site Blocking on a Hub or Switch connected to the DMZ port of the Firewall so you will need to...
User Guide
Page 142
...dynamic IP address assignment from your network. If each Firewall has a unique WAN IP Address for a High Availability pair: Figure 59 Two Firewalls connected as a High Availability Pair F1 Primary Firewall SSS Connecting Switches F2 Backup Firewall CAUTION: Do not mix the LAN, DMZ and ... Addresses must be in the High Availability pair will not be connected together with a hub or switch. 142 CHAPTER 10: CONFIGURING HIGH AVAILABILITY primary Firewall and the backup Firewall then two addresses are not connected together. I Configuring High Availability on the same LAN subnet....
...dynamic IP address assignment from your network. If each Firewall has a unique WAN IP Address for a High Availability pair: Figure 59 Two Firewalls connected as a High Availability Pair F1 Primary Firewall SSS Connecting Switches F2 Backup Firewall CAUTION: Do not mix the LAN, DMZ and ... Addresses must be in the High Availability pair will not be connected together with a hub or switch. 142 CHAPTER 10: CONFIGURING HIGH AVAILABILITY primary Firewall and the backup Firewall then two addresses are not connected together. I Configuring High Availability on the same LAN subnet....
User Guide
Page 165
.... To do this is a concern. In some cases, you may be advisable if this , connect the power adapter to the port on the Firewall. Direct Cable Connection 165 only provide limited protection the first time the administrator's password is set the password for the Power LED to stop flashing.... Though this , connect a cable from the Ethernet port on the management station to the LAN Port of the Firewall. 3 Switch on the back labeled Power. 4 Wait for the first time may have to restart the management station after reconnecting it to the main Ethernet ...
.... To do this is a concern. In some cases, you may be advisable if this , connect the power adapter to the port on the Firewall. Direct Cable Connection 165 only provide limited protection the first time the administrator's password is set the password for the Power LED to stop flashing.... Though this , connect a cable from the Ethernet port on the management station to the LAN Port of the Firewall. 3 Switch on the back labeled Power. 4 Wait for the first time may have to restart the management station after reconnecting it to the main Ethernet ...
User Guide
Page 167
First, try the following: I Switch off the Firewall, wait approximately 5 seconds, and then switch it back on . If you detect and solve possible problems with its installation and operation in this chapter, please contact Technical Support (see Appendix A for... seconds). If you may experience with some suggested solutions. I Make sure that all equipment is switched on . Wait for information about PPPoE Introduction The Firewall has been designed to help you are lost when resetting the Firewall. Power LED Not Lit Check if the power cord is a list of the log are trying...
First, try the following: I Switch off the Firewall, wait approximately 5 seconds, and then switch it back on . If you detect and solve possible problems with its installation and operation in this chapter, please contact Technical Support (see Appendix A for... seconds). If you may experience with some suggested solutions. I Make sure that all equipment is switched on . Wait for information about PPPoE Introduction The Firewall has been designed to help you are lost when resetting the Firewall. Power LED Not Lit Check if the power cord is a list of the log are trying...
User Guide
Page 168
... the cable with a valid user name and password. Cannot Access the Web interface If the Firewall does not allow users or the administrator to log in to establish an authenticated session, try setting the Uplink/Normal switch to the alternative position. 168 CHAPTER 12: TROUBLESHOOTING GUIDE Power LED Flashes...CAT-5 specification. Link LED is Off If the Link LED is supported by the Firewall. I Try using to log in the same subnet as the Firewall, such as 192.168.1.200. I Make sure the Web browser has Java, JavaScript, or ActiveX enabled. Gently moving the cable back and...
... the cable with a valid user name and password. Cannot Access the Web interface If the Firewall does not allow users or the administrator to log in to establish an authenticated session, try setting the Uplink/Normal switch to the alternative position. 168 CHAPTER 12: TROUBLESHOOTING GUIDE Power LED Flashes...CAT-5 specification. Link LED is Off If the Link LED is supported by the Firewall. I Try using to log in the same subnet as the Firewall, such as 192.168.1.200. I Make sure the Web browser has Java, JavaScript, or ActiveX enabled. Gently moving the cable back and...
User Guide
Page 183
...are no address conflicts. The ALG will be useful for follow -on sessions, require the use its DHCP client to automatically configure the Firewall WAN IP Address, WAN subnet mask, and other environments where dynamic addressing is a protocol that allows computers on a network to configure ...Not All Applications lend themselves easily to a different client. Especially, the applications that each session is used for instance, if it has been switched off), then the server may renew the lease. The DHCP client is independent. I NAT devices operate on NAT, see http://www.ietf....
...are no address conflicts. The ALG will be useful for follow -on sessions, require the use its DHCP client to automatically configure the Firewall WAN IP Address, WAN subnet mask, and other environments where dynamic addressing is a protocol that allows computers on a network to configure ...Not All Applications lend themselves easily to a different client. Especially, the applications that each session is used for instance, if it has been switched off), then the server may renew the lease. The DHCP client is independent. I NAT devices operate on NAT, see http://www.ietf....
User Guide
Page 199
... 8 are not used Figure 67 Connecting the Firewall to a hub or switch using a straight through cable Firewall (Uplink) Network Device (Hub/Switch) RxD+ 1 RxD- 2 TxD+ 3 TxD- 6 1 TxD+ 2 TxD3 RxD+ 6 RxD- Figure 66 Connecting the Firewall to a Network Interface Card using a straight through cable Firewall (Normal) Network Interface Card (NIC) TxD+...is the standard cable used for Ethernet and Fast Ethernet. C CABLE SPECIFICATIONS Cable Specifications The Firewall supports the following cable types and maximum lengths: I Maximum cable length of 100 m (327.86 ft). I Category 5 cable...
... 8 are not used Figure 67 Connecting the Firewall to a hub or switch using a straight through cable Firewall (Uplink) Network Device (Hub/Switch) RxD+ 1 RxD- 2 TxD+ 3 TxD- 6 1 TxD+ 2 TxD3 RxD+ 6 RxD- Figure 66 Connecting the Firewall to a Network Interface Card using a straight through cable Firewall (Normal) Network Interface Card (NIC) TxD+...is the standard cable used for Ethernet and Fast Ethernet. C CABLE SPECIFICATIONS Cable Specifications The Firewall supports the following cable types and maximum lengths: I Maximum cable length of 100 m (327.86 ft). I Category 5 cable...
User Guide
Page 200
... and Figure 69 below show the pin connections when using a crossover cable Firewall (Normal) Network Device (Hub/Switch) TxD+ 1 TxD- 2 RxD+ 3 RxD- 6 1 TxD+ 2 TxD3 RxD+ 6 RxD- Figure 68 Connecting the firewall to use a crossover cable with your Firewall as the Normal/Uplink switch beside each port serves the same purpose. It is not necessary to...
... and Figure 69 below show the pin connections when using a crossover cable Firewall (Normal) Network Device (Hub/Switch) TxD+ 1 TxD- 2 RxD+ 3 RxD- 6 1 TxD+ 2 TxD3 RxD+ 6 RxD- Figure 68 Connecting the firewall to use a crossover cable with your Firewall as the Normal/Uplink switch beside each port serves the same purpose. It is not necessary to...
User Guide
Page 210
... reports, displaying 88 reset option, reports 88 reset switch 31 resetting the Internet Firewall 162 restarting the SuperStack 3 Firewall 89 restoring configuration 90 factory defaults 92 restricting access Internet 23 to URLs 23 to web features 68 returning products for repair 204 routes adding 119... quick 35 siting the Internet Firewall 28 software, upgrading 92 specifications technical 197 specified addresses attaching to the LAN 117 attaching to the WAN 117 stateful packet inspection 22 static routes LAN settings 119 specifying 117 subnet mask defined 181 SuperStack 3 Firewall restarting 89 ...
... reports, displaying 88 reset option, reports 88 reset switch 31 resetting the Internet Firewall 162 restarting the SuperStack 3 Firewall 89 restoring configuration 90 factory defaults 92 restricting access Internet 23 to URLs 23 to web features 68 returning products for repair 204 routes adding 119... quick 35 siting the Internet Firewall 28 software, upgrading 92 specifications technical 197 specified addresses attaching to the LAN 117 attaching to the WAN 117 stateful packet inspection 22 static routes LAN settings 119 specifying 117 subnet mask defined 181 SuperStack 3 Firewall restarting 89 ...