Home

User`s Manual - EUSSO Technologies, Inc.

1. Ports Port Description 9VAC Power inlet AC9V 1A WAN the port where you will connect your cable or DSL modem or Ethernet router Port 1 4 the ports where you will connect networked computers and other devices 2 2 Procedure for Hardware Installation 1 Decide where to place your Broadband Router You can place your Broadband Router on a desk or other flat surface or you can mount it on a wall For optimal performance place your Broadband Router in the center of your office or your home in a location that is away from any potential source of interference such as a metal wall or microwave oven This location must be close to power and network connection 2 Setup LAN connection a Wired LAN connection connects an Ethernet cable from your computer s Ethernet port to one of the LAN ports of this product Existing Connection To PCs Figure 2 3 Setup of LAN and WAN connections for this product 3 Setup WAN connection Prepare an Ethernet cable for connecting this product to your cable xDSL modem or Ethernet backbone Figure 2 3 illustrates the WAN connection 4 Power on Connecting the power cord to power inlet and turning the power switch on this product will automatically enter the self test phase When it is in the self test phase the indicators M1 will be lighted ON for about 10 seconds and then M1 amp M2 will be flashed 3 times to indicate that the self test operation has finished Finally the M1 will b
2. seve emen Morito v Always ask before opening this type of file You can backup your settings by clicking the Backup Setting button and save it as a bin file Once you want to restore these settings please click Firmware Upgrade button and use the bin file you saved 4 8 4 Reset to default Microsoft Internet Explorer x Reset all setting to default You can also reset this product to factory default by clicking the Reset to default button 4 8 5 Reboot Microsoft Internet Explorer You can also reboot this product by clicking the Reboot button 53 4 8 6 Miscellaneous Items Administrator s Main Menu Miscellaneous Items P MAC Address for Wake on LAN Wake up gt Domain Name or IP address for Ping Test Ping Save Undo Help MAC Address for Wake on LAN Wake on LAN is a technology that enables you to power up a networked device remotely In order to enjoy this feature the target device must be Wake on LAN enabled and you have to know the MAC address of this device say 00 11 22 33 44 55 Clicking Wake up button will make the router to send the wake up frame to the target device immediately Domain Name or IP address for Ping Test Allow you to configure an IP and ping the device You can ping a specific IP to test whether it is alive 54 AppendixA TCP IP Configuration for Windows 95 98 This section introduces you how to install TCP IP protocol into your persona
3. 1 Restore directly when the router power on First hold the RESET button about 5 seconds M1 will start flashing about 5 times move away the hand The RESTORE process is completed 61
4. IP s lease time DHCP client 3 IP pool starting Address IP pool starting Address Whenever there is a request the DHCP server will automatically allocate an unused IP address from the IP address pool to the requesting computer You must specify the starting and ending address of the IP address pool 4 Domain Name Optional this information will be passed to the client 5 Primary DNS Secondary DNS This feature allows you to assign DNS Servers 6 Primary WINS Secondary WINS This feature allows you to assign WINS Servers 7 Gateway The Gateway Address would be the IP address of an alternate Gateway This function enables you to assign another gateway to your PC when DHCP server offers an 18 IP to your PC 4 4 4 Change Password Administrator s Main Menu Change Password Old Password New Password Reconfirm Sme w You can change Password here We strongly recommend you to change the system password for security reason 19 4 5 Forwarding Rules Administrator s Main Menu Virtual Server Allows others to access WWW FTP and other services on your LAN Special Application This configuration allows some applications to connect and work with the NAT router Miscellaneous IP Address of DMZ Host Allows a computer to be exposed to unrestricted 2 way communication Note that this feature should be used only when needed Non standard FTP port You have to configure this item if yo
5. no b 1 1 192 168 122 r p 12 192 168 122 n b 13 192 168 122 n fb M m 192168122 n b 15 192 168 122 r Bp Exanple2 Packet Filter Apply Rule 1 ftp time everyday 14 10 to 16 20 Administrator s Main Menu Outbound Packet Filter 20 dm Setting 5 5 5 1 gt Outbound Filter M Enable Allow all to pass except those match the following rules Deny all to pass except those match the following rules zx E L a j m Rh j 2 dT TDL TL r P r p H I JLt G b 1 4 1L 31 Fd 1 8 RJ 5s Ly L 3L n b j e yD 1L 3L n b 1L 1L TL d n b J 8 fy 31 J o b Schedule rule 00 Always v Copy to p s 49 4 8 Toolbox Administrator s Main Menu View Log View the system logs Firmware Upgrade Prompt the administrator for a file and upgrade it to this device Backup Setting Save the settings of this device to a file Reset to Default Reset the settings of this device to the default values Reboot Reboot this device Miscellaneous MAC Address for Wake on LAN Let you to power up another network device remotely Domain Name or IP address for Ping Test Allow you to configure an IP and ping the device You can ping a secific IP to test whether it is alive 50 4 8 1 System Log Administrator s Main Menu System Log WAN Type Dynamic IP Address R1 944vTIG Display ti
6. ping the Device 24 4 6 1 Packet Filter Administrator s Main Menu Outbound Packet Filter dam Sig gt Outbound Filter I Enable amp Allow all to pass except those match the following rules C Deny all to pass except those match the following rules up LE TIT Schedule rule O0Always v Copy to m Save Undo Inbound Filter MAC Level Help Packet Filter enables you to control what packets are allowed to pass the router Outbound filter applies on all outbound packets However Inbound filter applies on packets that destined to Virtual Servers or DMZ host only You can select one of the two filtering policies 1 Allow all to pass except those match the specified rules 2 Deny all to pass except those match the specified rules You can specify 8 rules for each direction inbound or outbound For each rule you can define the following e Source IP address e Source port address e Destination IP address e Destination port address e Protocol TCP or UDP or both e Use Rule For source or destination IP address you can define a single IP address 4 3 2 1 or a range of IP addresses 4 3 2 1 4 3 2 254 An empty implies all IP addresses 25 For source or destination port you can define a single port 80 or a range of ports 1000 1999 Add prefix T or U to specify TCP or UDP protocol For example T80 U53 U2000 2999 No prefix ind
7. setup the one to one mapping of multiple global IP address and local IP address e Global IP Enter the global IP address assigned by your ISP e Local IP Enter the local IP address of your LAN PC corresponding to the global IP address e Enable Check this item to enable the Virtual Computer feature 17 4 4 2 DHCP Server Administrator s Main Menu DHCP Server gt DHCP Server gt Lease Time gt IP Pool Starting Address gt IP Pool Ending Address gt Domain Name mtcom gt Primary DNS 192 168 123 254 gt Secondary DNS 9511 gt Primary WINS 192 168 1233 gt Secondary WINS 192 168 123 100 gt Gateway pono optional Undo Clients List Fixed Mapping Her Press More gt gt The settings of a TCP IP environment include host IP Subnet Mask Gateway and DNS configurations It is not easy to manually configure all the computers and devices in your network Fortunately DHCP Server provides a rather simple approach to handle all these settings This product supports the function of DHCP server If you enable this product s DHCP server and configure your computers as automatic IP allocation mode then when your computer is powered on it will automatically load the proper TCP IP settings from this product The settings of DHCP server include the following items 1 DHCP Server Choose Disable or Enable 2 Lease Time this feature allows you to configure
8. time to decide which service will be turned on or off Select the enable item Press Add New Rule 46 You can write a rule name and set which day and what time to schedule from Start Time to End Time The following example configure ftp time as everyday 14 10 to 16 20 Administrator s Main Menu Schedule Rule Setting Mom Setting 5 50 0 gt Name of Rule 1 fip time Sunday L o Monday o L Tuesday LG o Wednesday o T o Thursday L Friday LL EN Saturday LO EE Every Day 4 fio fie 47 VT After configure Rule 1 gt Administrator s Main Menu Schedule Rule gt Schedule I Enable Po RFueNme tio 1 ftp time Edit Delete Swe Add New Rule Help Schedule Enable Selected if you want to Enable the Scheduler Edit To edit the schedule rule Delete To delete the schedule rule and the rule of the rules behind the deleted one will decrease one automatically Schedule Rule can be apply to Virtual server and Packet Filter for example 48 Exanplel Virtual Server Apply Rule 1 ftp time everyday 14 10 to 16 20 Administrator s Main Menu Virtual Server ID Service Ports ServerIP Enable Use Rule 1 a 192 168 1223 v of 2 z 192168122 r p 3 1 192 168 122 nr b 4 Ct 192168122 n b 5 1 192 168 122 r p 6 tC 192168122 nr b 7 192 168 122 r p 8 192 168 122 n b 9 192 168 122 n b jJ 10 Tr 192 168 122
9. 003 Activate your browser and disable the proxy or add the IP address of this product into the exceptions Then type this product s IP address in the Location for Netscape or Address for IE field and press ENTER For example http 192 168 123 254 After the connection is established you will see the web user interface of this product There are two appearances of web user interface for general users and for system administrator To log in as an administrator enter the system password the factory setting is admin in the System Password field and click on the Log in button If the password is correct the web appearance will be changed into administrator configure mode As listed in its main menu there are several options for system administration 10 4 2 Status Administrator s Main Menu System Status Remaining Lease Time 00 00 00 Renew IP Address 0 0 0 0 Subnet Mask 0 0 0 0 Gateway 0 0 0 0 Domain Name Server 0 0 0 0 Printer Not ready Octects 0 0 Unicast Packets 0 0 Non unicast Packets View Log Clients List Help Refresh Device Time Thu Oct 09 00 02 29 2003 This option provides the function for observing this product s working status A WAN Port Status If the WAN port is assigned a dynamic IP there may appear a Renew or Release button on the Sidenote column You can click this button to renew or release IP m
10. 3 1 V 80 192 168 123 2 V 1723 192 168 123 6 V 21 4 5 2 Special AP Administrator s Main Menu Special Applications r1rnnmnnmunmB grm A mm Popular applications selectone v Copyto D zj Save Undo Help Some applications require multiple connections like Internet games Video conferencing Internet telephony etc Because of the firewall function these applications cannot work with a pure NAT router The Special Applications feature allows some of these applications to work with this product If the mechanism of Special Applications fails to make an application work try setting your computer as the DMZ host instead 1 Trigger the outbound port number issued by the application 2 Incoming Ports when the trigger packet is detected the inbound packets sent to the specified port numbers are allowed to pass through the firewall This product provides some predefined settings Select your application and click Copy to to add the predefined setting to your list Note At any given time only one PC can use each Special Application tunnel 22 4 5 3 Miscellaneous Items Administrator s Main Menu Miscellaneous Items gt IP Address of DMZ Host 192 168 123 r gt Non standard FTP port IP Address of DMZ Host DMZ DeMilitarized Zone Host is a host without the protection of firewall It allows a computer to be exposed to unrestricted 2 way communication for Internet games V
11. 30 Example Administrator s Main Menu Domain Filter gt Domain Filter IV Enable gt Log DNS Query IV Enable gt Privilege IP Addresses Range From i To po m nn al won msn com M Drop M Log v www sinacom l Drop M Log www google com M Drop l Log l Drop l Log FT l Drop L Log l Drop I Log o l Drop I Log Do l Drop l Log siz l Drop L Log all others l Drop l Log wo oOo a DH a d wW N Qaval linda Haln In this example 1 URL include www msn com will be blocked and the action will be record in log file 2 URL include www sina com will not be blocked but the action will be record in log file 3 URL include www google com will be blocked but the action will not be record in log file 4 IP address X X X 1 X X X 20 can access network without restriction 3l 4 6 3 URL Blocking Administrator s Main Menu URL Blocking SSS SS 1 gt URL Blocking Enable es ILLI URL Blocking will block LAN computers to connect to pre defined Websites The major difference between Domain filter and URL Blocking is Domain filter require user to input suffix like com or org etc while URL Blocking require user to input a keyword only In other words Domain filter can block specific website while URL Blocking can block hundreds of websites by simply a keyword URL Blocking Enable Checked
12. 4 4 1 5 PPTP 1 My IP Address and My Subnet Mask the private IP address and subnet mask your ISP assigned to you 2 Server IP Address the IP address of the PPTP server 3 PPTP Account and Password the account and password your ISP assigned to you If you don t want to change the password keep it empty 3 Connection ID optional Input the connection ID if your ISP requires it 4 Maximum Idle Time the time of no activity to disconnect your PPTP session Set it to zero or enable Auto reconnect to disable this feature If Auto reconnect is enabled this product will automatically connect to ISP after system is restarted or connection is dropped Administrator s Main Menu Primary Setup 0 Om Setting 00505050 P LAN IP Address 192 168 123 254 gt WAN Type PPTP Change gt My IP Address ooo10 gt My Subnet Mask 255 255 255 0 gt Server IP Address ooo gt PPTP Account NEM gt PPTP Password D gt Connection ID optional gt Maximum Idle Time 300 seconds Auto reconnect Undo Help Reboot Saved The change doesn t take effective until rebooting 16 4 4 1 7 Virtual Computers Administrator s Main Menu Virtual Computers D Global TP Leal Ee 1 BEEN 192168123 r 2 o 192 168 123 3 7 192168123 n 4 192168123 D 5 o 3 12168123 r Virtual Computer enables you to use the original NAT feature and allows you to
13. C Address Control Check Enable to enable the MAC Address Control All of the settings in this page will take effect only when Enable is checked Connection control Check Connection control to enable the controlling of which wired can connect to this device If a client is denied to connect to this device it means the client can t access to the Internet either Choose allow or deny to allow or deny the clients whose MAC addresses are not in the Control table please see below to connect to this device 34 Control table 1 NEED 192 168 123 n n 2 192 168 123 n n 3 fo 192 168 123 r r 4 n 192 168 123 n n DHCP clients select one Copy to D v Control table is the table at the bottom of the MAC Address Control page Each row of this table indicates the MAC address and the expected IP address mapping of a client There are four columns in this table MAC Address MAC address indicates a specific client IP Address Expected IP address of the corresponding client Keep it empty if you don t care its IP address C When Connection control is checked check C will allow the corresponding client to connect to this device In this page we provide the following Combobox and button to help you to input the MAC address DHCP clients select one Copy to D R You can select a specific client in the DHCP clients Combobox and then clic
14. MAC Address 00 50 29 22 3A AC Restore MAC gt Renew IP Forever Enable Auto reconnect _Undo Virtual Computers Help Press Change Administrator s Main Menu Choose WAN Type C Static IP Address ISP assigns you a static IP address io Dynamic IP Address Obtain an IP address from ISP automatically C Dynamic IP Address with Road Runner Session Management e g Telstra BigPond C PPP over Ethernet Some ISPs require the use of PPPoE to connect to their services C PPTP Some ISPs require the use of PPTP to connect to their Services 14 This option is primary to enable this product to work properly The setting items and the web appearance depend on the WAN type Choose correct WAN type before you start 1 LAN IP Address the local IP address of this device The computers on your network must use the LAN IP address of your product as their Default Gateway You can change it if necessary 2 WAN Type WAN connection type of your ISP You can click Change button to choose a correct one from the following four options A Static IP Address ISP assigns you a static IP address Dynamic IP Address Obtain an IP address from ISP automatically Dynamic IP Address with Road Runner Session Management e g Telstra BigPond PPP over Ethernet Some ISPs require the use of PPPoE to connect to their services H go A w PPTP Some ISPs require the use of PPTP to connect to their services 4 4 1 1 Static IP A
15. TCP The items you have to setup including IP Address for Syslog Host IP of destination where syslogs will be sent to Check Enable to enable this function E mail Alert Enable Check if you want to enable Email alert send syslog via email SMTP Server IP and Port Input the SMTP server IP and port which are concated with If you do not specify port number the default value is 25 For example mail your url com or 192 168 1 100 26 Send E mail alert to The recipients who will receive these logs You can assign more than 1 recipient using or to separate these email addresses 40 4 7 3 Dynamic DNS Administrator s Main Menu Dynamic DNS E ac RIILI 3 gt DDNS C Disable Enable gt Provider DynDNS org Dynamic v gt Host Name kink dyndns corg sts SsS gt Username E mail pup gt Password Key E To host your server on a changing IP address you have to use dynamic domain name service DDNS So that anyone wishing to reach your host only needs to know the name of it Dynamic DNS will map the name of your host to your current IP address which changes each time you connect your Internet service provider Before you enable Dynamic DNS you need to register an account on one of these Dynamic DNS servers that we list in provider field To enable Dynamic DNS click the check box next to Enable in the DDNS field Next you can enter the appr
16. User s Manual Table of Contents Chapter T IstroductloBz oq epi ode oodd qure dde aede qe deed us 2 Functions and Features ssseeseeeeeseeeesseeereeressesererrerseesresressseseresresseseese 2 Packine Dist EE E tt E T 4 Chapter 2 Hardware Installation ette ett tenerte tn 5 2V Panel Layouts eoo Do ide a ides stele nau eatis 5 2 2 Procedure for Hardware Installation esee 7 Chapter 3 Network Settings and Software Installation 8 3 1 Make Correct Network Settings of Your Computer 8 Chapter 4 Configuring Broadband Router esses 9 4 Start up and Eog 10 cci o te oM eset o IR E t RN 10 2 2 SEHEUS x5 sod eene ita ue e sedie nate date uen fus 11 43 dV EH 12 T Basie Sell lib adeste dak caches tania titel acca tiende da quete pdhis 13 45 Forwarding Rules eet eet tonne seasta d toas deo de gut 20 2 6 Security SECM ESL ue oae Des rip ead tua Ge nM Apa 24 4 7 Advanced Settmgs sii et serta tato Rana Pea eR eor iE 38 AS TopIDOX 269i ers EE E eTa has taste Reade ean cet 50 Appendix A TCP IP Configuration for Windows 95 98 55 Appendix B FAQ and Troubleshooting eee 61 Reset to factory Default 5 eati dcos Uie kn 61 Chapter1 Introduction Congratulations on your purchase of this outstanding Broadband Router This product is specifically designed for Small Office and Home Offi
17. anually B Statistics of WAN enables you to monitor inbound and outbound packets 11 4 3 Wizard Administrator s Main Menu Setup Wizard will guide you through a basic configuration procedure step by step Next Setup Wizard will guide you through a basic configuration procedure step by step Press Next gt Administrator s Main Menu C ISP assigns you a static IP address Static IP Address Obtain an IP address from ISP automatically Dynamic IP Address C Dynamic IP Address with Road Runner Session Management e g Telstra BigPond Some ISPs require the use of PPPoE to connect to their services PPP over Ethernet Some ISPs require the use of PPTP to connect to their services PPTP Back Undo Next gt Setup Wizard Select WAN Type For detail settings please refer to 4 4 1 primary setup 12 4 4 Basic Setting Administrator s Main Menu Primary Setup Configure LAN IP and select WAN type DHCP Server The settings include Host IP Subnet Mask Gateway DNS and WINS configurations Wireless Wireless settings allow you to configure the wireless configuration items Change Password Allow you to change system password 13 4 4 1 Primary Setup WAN Type Virtual Computers Administrator s Main Menu Primary Setup gt LAN IP Address 192 168 123 254 gt WAN Type Dynamic IP Address _ Change gt Host Name optional gt WAN s
18. b c 8 hl L 4b r b Schedule rule 00 Always Copy to TD v Save Undo Inbound Filter MAC Level Help 192 168 123 100 192 168 123 119 They can do everything except read net news port 119 and transfer files via FTP port 21 Others are allowed After Outbound Packet Filter setting is configured click the save button 29 4 6 2 Domain Filter Administrator s Main Menu Domain Filter gt Domain Filter M Enable gt Log DNS Query M Enable gt Privilege IP Addresses Range From fi To o beum 1 nemen m 2 o Drop L Log n 3 l Drop I Log r 4 l Drop l Log 0 5 7777 I Drop L Log rH 6 OO O Drop L Log r 7 EMEN C Drop l Log r 8 777777 C Drop L Log rH 9 l Drop I Log rH 10 all others I Drop l Log bns Al Domain Filter let you prevent users under this device from accessing specific URLs Domain Filter Enable Check if you want to enable Domain Filter Log DNS Query Check if you want to log the action when someone accesses the specific URLs Privilege IP Addresses Range Setting a group of hosts and privilege these hosts to access network without restriction Domain Suffix A suffix of URL to be restricted For example com xxx com Action When someone is accessing the URL met the domain suffix what kind of action you want Check drop to block the access Check log to log these access Enable Check to enable each rule
19. ce needs It provides a complete SOHO solution for Internet surfing and is easy to configure and operate even for non technical users Instructions for installing and configuring this product can be found in this manual Before you install and use this product please read this manual carefully for fully exploiting the functions of this product Functions and Features Router Basic functions Broadband modem and NAT Router Connects multiple computers to a broadband cable or DSL modem or an Ethernet router to surf the Internet Auto sensing Ethernet Switch Equipped with a 4 port auto sensing Ethernet switch Wan type supported The router supports some wan types Static Dynamic PPPOE PPTP Dynamic IP with Road Runner Firewall All unwanted packets from outside intruders are blocked to protect your Intranet DHCP server supported All of the networked computers can retrieve TCP IP settings automatically from this product Web based configuring Configurable through any networked computer s web browser using Netscape or Internet Explorer Virtual Server supported Enables you to expose WWW FTP and other services on your LAN to be accessible to Internet users User Definable Application Sensing Tunnel User can define the attributes to support the special applications requiring multiple connections like Internet gaming video conferencing Internet telephony and so on then this product can sense the a
20. ddress WAN IP Address Subnet Mask Gateway Primary and Secondary DNS enter the proper setting provided by your ISP 4 4 1 2 Dynamic IP Address 1 Host Name optional Required by some ISPs for example 9 Home 2 Renew IP Forever this feature enables this product to renew your IP address automatically when the lease time is expiring even when the system is idle 4 4 1 3 Dynamic IP Address with Road Runner Session Management e g Telstra BigPond 1 LAN IP Address is the IP address of this product It must be the default gateway of your computers 2 WAN Type is Dynamic IP Address If the WAN type is not correct change it 3 Host Name optional Required by some ISPs e g Home 4 Renew IP Forever this feature enable this product renew IP address automatically when the lease time is being expired even the system is in idle state 4 4 1 4 PPP over Ethernet 1 PPPoE Account and Password the account and password your ISP assigned to you For security this field appears blank If you don t want to change the password leave it empty 2 PPPoE Service Name optional Input the service name if your ISP requires it Otherwise leave it blank 3 Maximum Idle Time the amount of time of inactivity before disconnecting your PPPoE session 15 Set it to zero or enable Auto reconnect to disable this feature 4 Maximum Transmission Unit MTU Most ISP offers MTU value to users The most common MTU value is 1492
21. e continuously flashed once per second to indicate that this product is in normal operation Chapter3 Network Settings and Software Installation To use this product correctly you have to properly configure the network settings of your computers and install the attached setup program into your MS Windows platform Windows 95 98 NT 2000 3 1 Make Correct Network Settings of Your Computer The default IP address of this product is 192 168 123 254 and the default subnet mask is 255 255 255 0 These addresses can be changed on your need but the default values are used in this manual If the TCP IP environment of your computer has not yet been configured you can refer to Appendix A to configure it For example 1 configure IP as 192 168 123 1 subnet mask as 255 255 255 0 and gateway as 192 168 123 254 or more easier 2 configure your computers to load TCP IP setting automatically that is via DHCP server of this product After installing the TCP IP communication protocol you can use the ping command to check if your computer has successfully connected to this product The following example shows the ping procedure for Windows 95 platforms First execute the ping command ping 192 168 123 254 If the following messages appear Pinging 192 168 123 254 with 32 bytes of data Reply from 192 168 123 254 bytes 32 time 2ms TTL 64 a communication link between your computer and this product has been successfully established Otherw
22. icates both TCP and UDP are defined An empty implies all port addresses Packet Filter can work with Scheduling Rules and give user more flexibility on Access control For Detail please refer to Scheduling Rule Each rule can be enabled or disabled individually Inbound Filter To enable Inbound Packet Filter click the check box next to Enable in the Inbound Packet Filter field Suppose you have SMTP Server 25 POP Server 110 Web Server 80 FTP Server 21 and News Server 119 defined in Virtual Server or DMZ Host Example 1 Administrator s Main Menu Outbound Packet Filter gt Outbound Filter M Enable C Allow all to pass except those match the following rules Deny all to pass except those match the following rules fi 2 3 100 1 2 3 149 5 110 M 1 2 3 10 1 2 3 20 M IUE I Tmmm l l Schedule rule 00Aways Copy to p sl 1 2 3 100 1 2 3 149 They are allow to send mail port 25 receive mail port 110 and browse the Internet port 80 1 2 3 10 1 2 3 20 They can do everything block nothing 26 Others are all blocked Example 2 Administrator s Main Menu Outbound Packet Filter gt Outbound Filter M Enable C Allow allto pass except those match the following rules amp Deny all to pass except those match the following rules 1 kew 0 Bo B 2 zumo eC 3 ICA DL 3L n E 4 h41 LE 1L n b 5 1L 3 DL 3L o E e JE CE
23. ideo conferencing Internet telephony and other special applications NOTE This feature should be used only when needed Non standard FTP port You have to configure this item if you want to access an FTP server whose port number is not 21 This setting will be lost after rebooting 23 4 6 Security Settings Administrator s Main Menu Packet Filters Allows you to control access to a network by analyzing the incoming and outgoing packets and letting them pass or halting them based on the IP address of the source and destination Domain Filters Let you prevent users under this device from accessing specific URLs URL Blocking URL Blocking will block Lan computers to connect to pre defined Wedsites MAC Address Control MAC Address Control allows you to assign different access right for different users and to assign a specific IP address to a certain MAC address VPN VPN Settings are used to create virtual private tunnels to remote VPN gateways Miscellaneous Remote Administrator Host In general only Intranet user can browse the built in web pages to perform administration task This feature enables you to perform administration task from remote host Administrator Time out The amount of time of inactivity before the device will automatically close the Administrator session Set this to zero to disable it Discard PING from WAN side When this feature is enabled hosts on the WAN cannot
24. if you want to enable URL Blocking URL If any part of the Website s URL matches the pre defined word the connection will be blocked For example you can use pre defined word sex to block all websites if their URLs contain pre defined word sex Enable Checked to enable each rule 32 Administrator s Main Menu URL Blocking gt URL Blocking M Enable 1 msn v ba o V ms 770 o Vv bm Ci K wo con DA utn A amp A WwW N noaaa a In this example URL include msn will be blocked and the action will be record in log file 2 URL include sina will be blocked but the action will be record in log file 3 URL include cnnsi will not be blocked but the action will be record in log file 4 URL include espn will be blocked but the action will be record in log file 33 4 6 4 MAC Address Control Administrator s Main Menu MAC Address Control Tem Beg 000 0 P MAC Address Control Enable Connection control Clients with C checked can connect to this device and allow unspecified MAC addresses to connect 1D MACAddress TP Address C 1 192 168 123 m 2 192 168 123 E 3 192 168 123 r 4 192 168 123 r DHCP clients select one Copy to p s Previous Next gt gt Save Undo Help MAC Address Control allows you to assign different access right for different users and to assign a specific IP address to a certain MAC address MA
25. ise if you get the following messages Pinging 192 168 123 254 with 32 bytes of data Request timed out There must be something wrong in your installation procedure You have to check the following items in sequence 1 Is the Ethernet cable correctly connected between this product and your computer Tip The LAN LED of this product and the link LED of network card on your computer must be lighted 2 Is the TCP IP environment of your computers properly configured Tip If the IP address of this product is 192 168 123 254 the IP address of your computer must be 192 168 123 X and default gateway must be 192 168 123 254 Chapter4 Configuring Broadband Router This product provides Web based configuration scheme that is configuring by your Web browser such as Netscape Communicator or Internet Explorer This approach can be adopted in any MS Windows Macintosh or UNIX based platforms E P pg VyV gy Switch Broadband Router Fast Ethernet N e p f um e Windows Mac Unix like 4 1 Start up and Log in Administrator s Main Menu System Status Remaining Lease Time 00 00 00 _Renew IP Address 0 0 0 0 Subnet Mask 0 0 0 0 Gateway 0 0 0 0 Domain Name Server 0 0 0 0 em Peripheral Status Sidenote Printer Not ready Octects 0 0 Unicast Packets 0 0 Non unicast Packets 0 0 View Log Clients List Help Refresh Device Time Thu Oct 09 00 02 29 2
26. k on the Copy to button to copy the MAC address of the client you select to the ID selected in the ID Combobox Previous page and Next Page To make this setup page simple and clear we have divided the Control table into several pages You can use these buttons to navigate to different pages 35 4 6 5 Miscellaneous Items Administrator s Main Menu Miscellaneous Items gt Remote Administrator Host Port 0 0 0 0 i Bp r gt Administrator Time out b seconds 0 to disable gt Discard PING from WAN side p gt SPI mode E gt DoS Attack Detection n gt VPN PPTP Pass Through M gt VPN IPSec Pass Through M Remote Administrator Host Port In general only Intranet user can browse the built in web pages to perform administration task This feature enables you to perform administration task from remote host If this feature is enabled only the specified IP address can perform remote administration If the specified IP address is 0 0 0 0 any host can connect to this product to perform administration task You can use subnet mask bits nn notation to specified a group of trusted IP addresses For example 10 1 2 0 24 NOTE When Remote Administration is enabled the web server port will be shifted to 88 You can change web server port to other port too Administrator Time out The time of no activity to logout automatically Set it to zero to disable this feature Discard PING from WAN side When thi
27. l computer And suppose you have been successfully installed one network card on your personal computer If not please refer to your network card manual Moreover the Section B 2 tells you how to set TCP IP values for working with this NAT Router correctly A 1 Install TCP IP Protocol into Your PC 1 Click Start button and choose Settings then click Control Panel 2 Double click Network icon and select Configuration tab in the Network window 3 Click Add button to add network component into your PC 4 Double click Protocol to add TCP IP protocol Select Network Component Type 2 x Click the type of network component you want to install Protocol is a language a computer uses Computers must use the same protocol to communicate 55 5 Select Microsoft item in the manufactures list And choose TCP IP in the Network Protocols Click OK button to return to Network window Select Network Protocol Banyan Fast Infrared Protocol 4 IBM 4 IPX SPX compatible Protocol Microsoft Microsoft 32 bit DLC 6 The TCP IP protocol shall be listed in the Network window Click OK to complete the install procedure and restart your PC to enable the TCP IP protocol 56 A 2 Set TCP IP Protocol for Working with NAT Router 1 Click Start button and choose Settings then click Control Panel 2 Double click Network icon Select the TCP IP line that has been associated to your network card in the Configuration
28. me Wed Oct 01 00 10 04 2005 20034 10H iE 4 12 01 30 DOD TCP trigger from 192 168 123 125 2288 to 207 46 104 20 186 2003108 1H FE 12 01 30 DHCP discover 2003410818 E 12 01 34 DHCP discover 20032 10H 1H FE 12 01 35 Admin from 192 168 123 125 login successfully 2003z 10H iH EF 12 01 42 DHCP discover 2003 10H 1H 12 01 58 DHCP discover 2003 10H 1H E 12 02 47 DOD triggered internally 2003 10H 1H E4 12 02 47 DHCP discover 200310818 12 02 51 DHCP discover 2003z 10H iH E 12 02 59 DHCP discover 2003410818 E4 12 03 15 DHCP discover 200310818 P 12 03 48 DOD triggered internally 2003z 10H iH E 12 03 48 DHCP discover 2003 10H 1H E 12 03 52 DHCP discover 20031081H L 12 04 00 DHCP discover 2003z i0H iH E 12 04 16 DHCP discover Back Refresh Download Clear You can View system log by clicking the View Log button 51 4 8 2 Firmware Upgrade Administrator s Main Menu Firmware Upgrade 00 Hirwa Rename Current firmware version is R1 94l4vTIG The upgrade procedure takes about 20 seconds Note Do not power off the unit when it is being upgraded When the upgrade is done successfully the unit will be restarted automatically Upgrade Cancel You can upgrade firmware by clicking Firmware Upgrade button 52 4 8 3 Backup Setting File Download You are downloading the file LJ config bin from 192 168 123 254 Would you like to open the file or save it to your computer
29. n hb 7 Fo Esa 8 Fs n b Schedule rule 00 Always Copyto Fo zi 1 2 3 100 1 2 3 119 They can do everything except read net news port 119 and transfer files via FTP port 21 Others are all allowed After Inbound Packet Filter setting is configured click the save button Outbound Filter To enable Outbound Packet Filter click the check box next to Enable in the Outbound Packet Filter field 27 Example 1 Outbound Packet Filter tem Setting gt Outbound Filter M Enable Allow all to pass except those match the following rules C Deny all to pass except those match the following rules fi 192 168 123 149 122 168 123 20 co uy Cc uh d W N e Schedule rule 00 Always Copy to zl Save Undo Inbound Filter MAC Level Help 192 168 123 100 192 168 123 149 They are allowed to send mail port 25 receive mail port 110 and browse Internet port 80 port 53 DNS is necessary to resolve the domain name 192 168 123 10 192 168 123 20 They can do everything block nothing Others are all blocked 28 Example 2 Outbound Packet Filter tem Setting gt Outbound Filter M Enable Allow all to pass except those match the following rules C Deny all to pass except those match the following rules 1 eso o Bo n fh 2 gum o fn e p 3 hk D kb r b c 4 E 3 b DP r b c 5 LL D LL r b c 6 hk EE r b c T E shE TL hE r
30. ng IP data grams If you have more than one routers and subnets you will need to enable routing table to allow packets to find proper routing path and allow different subnets to communicate with each other Routing Table settings are settings used to setup the functions of static Static Routing For static routing you can specify up to 8 routing rules You can enter the destination IP address subnet mask gateway hop for each routing rule and then enable or disable the rule by checking or unchecking the Enable checkbox 44 r1rrnmrnmrnmrnms tm trt Example t 192 169 123 XXX Submask 192 liter Router Router Client 109 18 D 1 He 192 168 123 216 192 168 123 103 10 16 02 KALARI Clienti 10 10 12 22 Configuration on NAT Router Destination SubnetMask Gateway Hop Enabled 192 168 1 0 255 255 255 0 192 168 123 216 1 V 192 168 0 0 255 255 255 0 192 168 123 103 1 V So if for example the client3 wanted to send an IP data gram to 192 168 0 2 it would use the above table to determine that it had to go via 192 168 123 103 a gateway And if it sends Packets to 192 168 1 11 will go via 192 168 123 216 Each rule can be enabled or disabled individually After routing table setting is configured click the save button 45 4 7 6 Schedule Rule Administrator s Main Menu Schedule Rule gt Schedule M Enable Rue Rule Name tion Save Add New Rule Help You can set the schedule
31. on Routing Table Supported Now the router supports static routing Schedule Rule supported Customers can control some functions like virtual server and packet filters when to Access or when to block Other functions UPNP Universal Plug and Play Supported The router also supports this function The applications X box Msn Messenger Packing List Broadband router unit Installation CD ROM Power adapter CAT 5 UTP Fast Ethernet cable Chapter 2 Hardware Installation 2 1 Panel Layout 2 1 1 Front Panel LIN K ACT b e LED LED Function Color Status Description Power POWER Green On Power is being applied to this product indication System M1 is flashed once per second to Status status Orange Blinking indicate system is alive When system indicators is busy M2 is lighted On The WAN port is linked WAN port WAN m Green The WAN port is sending or receiving activity Blinking data To reset system settings to factory Reset MI Green Flashing defaults An active station is connected to the On Link Act corresponding LAN port Link status Green 1 4 The corresponding LAN port is Blinking sending or receiving data Data is transmitting in 100Mbps on 10 100 Data Rate Green On the corresponding LAN port X For details please refer to Appendix D FAQ and Troubleshooting 2 1 2 Rear Panel 4 3 2 1 WAN 10 100BaseT LAN Connectors
32. opriate information about your Dynamic DNS Server You have to define Provider Host Name Username E mail 41 Password Key You will get this information when you register an account on a Dynamic DNS server Example Administrator s Main Menu Dynamic DNS EE VV gt DDNS C Disable Enable gt Provider DynDNS org Dynamic gt Host Name ikdyndmog gt Username E mail has oo gt Password Key pe After Dynamic DNS setting is configured click the save button 42 4 7 4 SNMP Setting Administrator s Main Menu SNMP Setting 20 dm Setting gt Enable SNMP IV Local l Remote gt Get Community public gt Set Community private In brief SNMP the Simple Network Management Protocol is a protocol designed to give a user the capability to remotely manage a computer network by polling and setting terminal values and monitoring network events Enable SNMP You must check either Local or Remote or both to enable SNMP function If Local is checked this device will response request from LAN If Remote is checked this device will response request from WAN Get Community Setting the community of GetRequest your device will response Set Community Setting the community of SetRequest your device will accept 43 4 7 5 Routing Table ator s Iy Menu Routing Table I I Routing Tables allow you to determine which physical interface address to use for outgoi
33. pplication type and open multi port tunnel for it DMZ Host supported Lets a networked computer be fully exposed to the Internet this function is used when special application sensing tunnel feature is insufficient to allow an application to function 2 correctly Statistics of WAN Supported Enables you to monitor inbound and outbound packets Security functions Packet filter supported Packet Filter allows you to control access to a network by analyzing the incoming and outgoing packets and letting them pass or halting them based on the IP address of the source and destination Domain Filter Supported Let you prevent users under this device from accessing specific URLs URL Blocking Supported URL Blocking can block hundreds of websites connection by simply a keyword VPN Pass through The router also support vpn pass through SPI Mode Supported When SPI Mode is enabled the router will check every incoming packet to detect if this packet is valid DoS Attack Detection Supported When this feature is enabled the router will detect and log the DoS attack comes from The Internet Advanced functions System time Supported Allow you to synchronize system time with network time server E mailAlert Supported The router can send its info by mail Dynamic dns Supported At present the router has 3 ddns dyndns TZO com and dhs org SNMP Supported The router supports basic snmp functi
34. s feature is enabled any host on the WAN cannot ping this product SPI Mode When this feature is enabled the router will record the packet information pass through the router like IP address port address ACK SEQ number and so on And the router will check every incoming packet to detect if this packet is valid DoS Attack Detection When this feature is enabled the router will detect and log the DoS attack comes from the Internet 36 Currently the router can detect the following DoS attack SYN Attack WinNuke Port Scan Ping of Death Land Attack etc VPN PPTP IPSec Pass Through Please enable this feature if you need to establish a PPTP or IPSEC connection that will pass through this device 37 4 7 Advanced Settings Administrator s Main Menu Sysiem Time Allow youto set device time manually or consult network time from NTP server Sysiem Log Send system log to a dedicated host or email to specific receipts Dynamic DNS To host your server on a changing IP address you have to use dynamic domain name service DDNS SNMP Gives a uset the capability to remotely manage a computer network by polling and setting terminal values and monitoring network events Routing If you have more than one routers and subnets you may want to enable routing table to allow packets to find proper routing path and allow different subnets to communicate with each other Schedule Rule Schedule Rule Appl
35. tab of the Network window PCI Fast Ethernet DEC 21140 Based Adapter NetBEUI gt Dial Up Adapter NetBEUI gt PCI Fast Ethernet DEC 21140 Based Adapter 4 TCP IP gt Dial Up Adapter Client for Microsoft Networks v 3 Click Properties button to set the TCP IP protocol for this NAT Router 4 Now you have two setting methods 57 a Select Obtain an IP address automatically in the IP Address tab TCP IP Properties EM 58 c Choose Disable DNS in the DNS Configuration tab TCP IP Properties Host Womar US Sever Searcy Wier pe ED Domain BRI ET Tae B Configure IP manually a Select Specify an IP address in the IP Address tab The default IP address of this product is 192 168 123 254 So please use 192 168 123 xxx xxx is between 1 and 253 for IP Address field and 255 255 255 0 for Subnet Mask field TCP IP Properties 192 168 123 115 59 b In the Gateway tab add the IP address of this product default IP is 192 168 123 254 in the New gateway field and click Add button TCP IP Properties 192 168 123 254 HETGVE c Inthe DNS Configuration tab add the DNS values which are provided by the ISP into DNS Server Search Order field and click Add button TCP IP Properties MyComputer E 168 95 192 1 168 95 1 1 HEITGVE 60 Appendix B FAQ and Troubleshooting Reset to factory Default
36. u want to access an FTP server whose port number is not 21 when Client uses active mode 4 5 1 Virtual Server Administrator s Main Menu Virtual Server ID ServicePorts Server TP Enable Use Rule 192 168 123 n TC 192 168 123 12162125 tt 12168123 192 168 123 192 168 123 12168123 tt 192 168 123 192 168 123 10 192 168 123 11 M 192162125 12 192 168 123 13 192 168 123 14 7 192168125 15 7 192 168 123 cO Yn un d uU N AAA nunmumumunmunmurmnurmzmuttmrmr 20 This product s NAT firewall filters out unrecognized packets to protect your Intranet so all hosts behind this product are invisible to the outside world If you wish you can make some of them accessible by enabling the Virtual Server Mapping A virtual server is defined as a Service Port and all requests to this port will be redirected to the computer specified by the Server IP Virtual Server can work with Scheduling Rules and give user more flexibility on Access control For Detail please refer to Scheduling Rule For example if you have an FTP server port 21 at 192 168 123 1 a Web server port 80 at 192 168 123 2 and a VPN server at 192 168 123 6 then you need to specify the following virtual server mapping table Service Port Server IP Enable 21 192 168 12
37. y schedule rules to Packet Filters and Virtual Server 38 4 7 1 System Time Administrator s Main Menu System Time gt Get Date and Time by NTP Protocol Sync Now Time Server time nist gov Time Zone GMT 08 00 Pacific Time US amp Canada M gt Set Date and Time using PC s Date and Time PC Date and Time poosactoH 4H F 03 47 32 gt Set Date and Time manually Date Year 2003 v Month Oct Day Time How 0 23 Minute D 0 59 Second 0 59 Get Date and Time by NTP Protocol Selected if you want to Get Date and Time by NTP Protocol Time Server Select a NTP time server to consult UTC time Time Zone Select a time zone where this device locates Set Date and Time manually Selected if you want to Set Date and Time manually Function of Buttons Sync Now Synchronize system time with network time server 39 4 7 2 System Log Administrator s Main Menu System Time gt Get Date and Time by NTP Protocol Sync Now Time Server time nist gov Time Zone GMT 08 00 Pacific Time US amp Canada gt Set Date and Time using PC s Date and Time PC Date and Time 200348105148 FF 03 47 32 gt Set Date and Time manually Date Year 2003 v Month Oct v Day Time How 0 23 Minute D 0 59 Second 0 59 Save Undo Help This page support two methods to export system logs to specific destination by means of syslog UDP and SMTP

User`s Manual - EUSSO Technologies, Inc.

Contents

Download Pdf Manuals

Related Search

Related Contents