SMC 7004VBR Installation Instructions for Model 751.0113 SPECIAL NOTE: Part C – Adjusting MTU Value. This procedure MUST be followed in order to prevent chronic disconnections of the VPN tunnel! Part A – General Setup Note: Please insure the router is plugged into the WAN connection and the Configuration PC is plugged into one of the 4 Ethernet ports prior to starting the setup procedures. 1. Open your Internet Browser and type in the following address: HTTP://192.168.2.1 and Click “GO” 2. Enter the default password provided by SMC “smcadmin”. Click “LOGIN”. 3. Select “Setup Wizard” for the initial configuration. 4. Select the correct Time zone for the region you are in. Click “NEXT”. 5. Select the WAN Installation type you need to configure. This will be directed by the ISP. Select “Cable Modem” for a DHCP, (Cable Modem or xDSL) configuration. Select “Fixed-IP xDSL” for a Static IP configuration. Select “PPPoE xDSL” for UserID and Password configuration. 6. For “Fixed-IP xDSL” - Enter the IP address, Subnet Mask, Default Gateway and DNS Server addresses provided by the ISP. 7. For DHCP (Cable Modem or xDSL) enter a Host name that will be provided by the ISP. 8. For “PPPoE” Site – Enter User Name and Password provided by the ISP. This information will be provided by the ISP. Service Name field can be left blank. Note*** Change the default MTU to 1456 in order to prevent session disconnects. 9. Select “Finish”. This will save the configuration and reboot the router automatically. Part B – Special Instructions 1. The router will boot itself and return to the Status display. In order to continue with the configuration please select NAT from the left side of the Status screen. 2. This will take you to the Virtual Server settings screen. You must add in the Static IP address that is reserved for the FPM/GPM workstation in order to allow for the incoming Wakeup message to be handled properly. This inbound message is TCP on Port 5069. FPM/GPM Workstation IP Address = 192.168.2.99 FPM/GPM Workstation Subnet Mask = 255.255.255.0 FPM/GPM Workstation Default Gateway = 192.168.2.1 3. Select “Apply” at the bottom of the screen. 4. Select “Firewall” from the left side of the screen. 5. Select “Advanced” to proceed to the Advanced Settings screen. 6. Change the IPSec setting to “Enable” to allow for IPSec Passthrough. Then Select “Apply”. Special Note: If you set the “Advanced Firewall Protection” to enable you MUST use the destination host name FPVPN.GALILEO.COM in the Nortel Client! 7. In order for the changes to take effect you will need to reboot the router. Select “Tools” on the left side of the screen. 8. Select “Reboot” and Click on “Apply” at the bottom of the screen. Part C – Adjusting MTU Value MTU, Partial Loss of Internet Connection, and Performance o o MTU (Maximum Transmission Unit) is the largest packet a network device transmits. The best MTU setting for equipment is often just the default value. MTU is sometimes presented as something that can be easily changed to improve performance, but in practice this may cause problems. You need to follow this procedure in order to prevent problems with the VPN connection. This will manifest itself as severe performance problems such as chronic disconnects. Setting MTU size is a process of trial-and-error: start with the maximum value of 1500, then reduce the size until the problem goes away. In order to find the optimum size for the MTU setting you will need to utilize the extended portions of the PING command. (The parameters are case sensitive!) PING –f –l 1500 fpnet.galileo.com -f Set Don’t Fragment flag in packet -l size Send buffer size (lowercase L) If you have a problem with the packet size the following message will be returned: Packet needs to be fragmented but DF set. Reduce the size of the send buffer until the reply message comes back normally. Reply from 12.17.202.11: bytes=1500 time=36ms TTL=59 To make the changes on the workstation you will need to go to http://www.dslreports.com/ , Select Tests + Tools. Then select Dr. TCP. You will need to download & install the latest copy of this program (DR.TCP). This program will allow you to make the necessary changes to the MTU size on each workstation. Change the MaxMTU value, Click Apply and then reboot the workstation.