Congratulations on your purchase of VG211R.
Contents
1. 2 User s Manual Rev 1 0 2003 5 CONGRATULATIONS ON YOUR PURCHASE OF VG I Rivsscsccccscsscccsscsscccscscsceosscsscssenssocssesssseessccseessees 1 1 2 3 4 e Ie br RAE 1 CONFIRM THAT YOU MEET INSTALLATION REQUIREMENTS 0020000000 1 INSTALLATION GUIDE iore eae oeeo eoe oae ea apo Ue ecu ve Cose ao eoe oct od e Cac 2 EAR WARE ILU A 2 hg d VOZI RP TONE PANEL usati dudit a 2 bZV GIR ARCO ER RANE RON 3 DEFAULT WAMU ES Sarcina iE 4 PASSWORD aoa IME A EI 4 2 24 DEFAULT NETWORK SETUP eria aes ea oM Pos DIOC LIPS 4 2535 VOD SETUP aee a ne tn e EERE 4 242 OTHER DETALET SETUP a Gh oett ES 4 CONFIGURING YOUR VGZLIR 5 CONFIGURING YOUR VG211R GENERAL 6 Re ei MEZNE A 6 4 1 1 DINO ONC a AE ye LUI D eal LAN LC D MID MD LA M ali kee ML ED MEE 6 4 1 2 DOSSITORG DO atts E 6 4 1 3 Remote Mandement cesset cioe Ue em bc se eee 6 42 WOLI2. 110 Li Secure HTTP HTTPS TCP Port 443 File Transfer FTP TCP Port 21 MSN Messenger TCP Port 1863 LI Telnet Service TCP Port 23 AOL Instant Messenger TCP 5190 This page allows users to define service limitation of client PC including IP address service type and scheduling rule criteria For URL blocking function you need configure URL address first in URL Blocking Site page For scheduling function you also need configure schedule rule first in Schedule Rule page As shown above user enter Client PC Description Sam and it s IP address 192 168 2 100 and select service name lt WWW gt and E mail Sending and press lt OK gt The follow page will show up After the setup the PCs with IP address from 192 168 2 200 to 192 168 0 210 will not be able to use WWW and sending e mail VG211R supports up to 32 filtering rule Normal Filtering Table up to 10 computers Client PC Client PC IP Description PESE Client Service Schedule Rule Configure 192 168 0 200 Sam 210 WWW E mail Sending Blocking Edit Delete 18 VG211R User Manual MAC Filtering Table User can enter up to 32 MAC addresses the PCs with these MAC addresses will not be allowed to access Internet e MAC Filtering Table up 10 32 computers Rule Number Client PC MAC Address 1 cf oo ft Sef Gf ba TO E AAT AM 111111
3. Refresh gt to update current IP allocation records DHCP Client Log View Information on LAN DHCP clients currently linked to the product Numbers of DACP Clients 1 1p 192 165 0 194 Refresh 8 5 VoIP Status mac d 8 4A1 35 AB AU name 5 This page displays the gateway status including Port Type Port Status time information of each call and Destination This page also displays gatekeeper status User must make sure gatekeeper registered 1s OK VoIP Status Monitoring Phone Port Status HW Type Port Status Start Elapsed Remote Host Destination a Prenesa 2 we FO Rwe w de 26 VG211R User Manual User can press Refresh to update current VoIP status 27
4. example MSN Messenger UPnP Universal Plug and Play Setting Enable or disable UPnP Enable Disable 6 Dynamic DNS Dynamic DNS provides users on the Internet a method to tie their domain name s to computers or servers DDNS allows your domain name to follow your IP address automatically by having your DNS records changed when your IP address changes We can support two DDNS provider TZO com and DynDNS org You must apply DDNS service to get Key from DDNS provider and enables the DDNS service DDNS Dynamic DNS Settings Dynamic ONS 4 Enable Disable Provider DynDNS arg sam456 dyndns org sam45b6 45678912457 Domain Marne Account E mail 7 Tools The tools feature provided by VG211R includes configuration tools save restore configuration and restore to factory defaults system log firmware upgrade and reset The main page is shown below 7 1 Configuration Tools The configuration tools includes backup restore and restore to factory defaults The Backup tool save the VG211R s current configuration to a file named backup config exe on your PC You can then use Restore tool to restore the saved configuration to the VG211R The Reset to Factory Deafults tool will force the configuration of VG21 I R back to the original factory setting and perform a power reset Configuration Tools Use the Backup tool to save the current configuration to a named backup config bin on yo
5. including IP address Subnet mask DHCP server Firewall and UPnP Device Status View the current setting status of this device IP Address Tried Subnet Mask 255 255 255 0 DHEP Server Enabled Firewall Enabled Disabled 8 3 Security Log This page provides the system security log recorded when device boot including user login logout hack attach PPPoE connection NTP connection Get IP from DHCP These records can be saved to host PC User also can clear all security records in Security log window and press lt Refresh gt to update current security records 23 VG211R User Manual Security Log view any attempts that have been made to gain access to your network SUCCESS O3 04 2003 19 O3 04 2003 19 O3 04 2003 19 O3 04 2003 19 O3 04 2003 O3 04 2003 16 O3 04 2003 O3 04 2003 15 ad edi ui 07 55 51 44 39 03 03 03 ad 19 12 Od root root User root root root User root 4 Save Clear Refresh 8 4 DHCP Client Log from fram from from from from from from 192 192 192 192 192 194 192 198 168 168 155 155 155 166 168 168 els I 0 I I 0 0 194 194 1194 194 194 194 194 194 login login timed login login login timed login Success fail out success success fail out Success The DHCP Client Log page displays the IP allocation records User can press lt
6. the reset click on the APPLY button below You will be asked ta confirm your decision The reset will be complete when the power light stops blinking Apply Cancel 8 Status The status page displays the status of the system including the connection status of the interfaces firmware and hardware version numbers system log and DHCP client information Status and Information You can use the Status page to see the connection status for the product s network interfaces firmware and hardware version numbers INFORMATION LAN MAC Address 00 06 4E 01 05 08 WAN Address O0 06 4E 01 05 09 Hardware Version VRZ213 serial Number 20800109 Boot Code Version 0 04 Runtime Code Version 0 53 Thu Feb 2 10 35 38 2003 24 VG211R User Manual 8 1 Internet Connection The Internet Connection page displays the status of the Internet Connection including the connection status of the Internet interfaces WAN port IP Subnet Mask Gateway IP and Primary Secondary DNS IP Internet Connection View the current internet connection status and related information Cable DSL CONNECTED 411 240 102 106 subnet Mask 255 255 255 248 211 20 102 105 Primary DMS cipal secondary DNS este NO When WAN port setting is dynamic IP user can use lt Disconnect gt and lt Connect gt to release and update WAN port IP 8 2 Device Status The Device Status page displays the current setting of this device
7. this port accept call from Internet You should set prefix For example you set port3 to be dedicated line and set 8862 as prefix this port will accept call from Internet for any 8862 prefix number call PBX ID Prefix Setting for Incoming The current Prefix PGA ID ar E 164 Sumber Prefix is listed in table below Click Add button to add new entry or click Delete or Modify button to change the selected entry Index Prefix Connect to PEX C 313 C 2 LT Add Modify Delete 11 VG211R User Manual 4 2 6 Peer Gateway You can define any peer gateway in this table First you may list any peer gateway by IP and net mask then you can set call out limitation for that peer gateway for example Local only or Long distance or International call But 0 0 0 0 means no more peer gateway limitation Any VoIP call can be accept by this gateway Peer Gateway Database The current incoming peer gateway entries is listed in table below Click Add button to add new entry ar click Delete or Modify button to change the selected entry IP Address Local TETI International Distance cs eooo ooo a D DO Add Modify Delete ES 4 2 7 User Management If you enable VoIP authentication any incoming call will invoke IVR to guide you input user id and password Where can I set user id and password The answer is User management You can set user id and password here But that is number digit only Phone
8. 111 4 6 2 URL Blocking You can block access to certain Web sites from a particular PC by entering either a full URL address or just a keyword of the Web site To specify the particular PC go back to the Access Control page and check the box for Http with URL Blocking in the Normal Filtering Table URL Blocking Disallowed Web Sites and Keywords You can block access to certain Web sites from a particular PC by entering either a full URL address or just a keyword of the Web site To specify the particular PC go back to the Access Control page and check the box for Http with URL Blocking in the Normal Filtering Table Rule Number Rule Number Site 1 sex Site 16 Site 2 Site 17 Site 3 Site 18 As shown above all URL with sex cannot be accessed The users within LAN cannot access to any web site with sex in its URL address 4 6 3 Schedule Rule This page allows user to define schedule rule for use in Access Control gt page User press Add Schedule Rule to add schedule name and effective time period This defined schedule rule will be used under Access Control Add PC gt 19 VG211R User Manual Edit Schedule Rule Office Hours Comment Office Hours Activate Time Period Week Day start Time End Time hh mmy Bey Day FI nm Sunday Monday fos Joo iz Tuesday fos Joo fi ifo Wednesday jos Joo iz ifo Thursday Joo p ifo Friday
9. 211R on ports 1 3 of the LAN ports If you have more than 3 computers to plug in connect a hub or a switch using its uplink port and connect additional computers to that device Connecting a Cable Modem or DSL Modem Connect your Cable or DSL modem to the WAN port on the rear panel Power Plug the power cord into the power jack The device will boot up at this moment Make sure the LED in front panel light up correctly VG211R User Manual 2 Default Values 2 1 Password The default user name password is root root For security and management reason we suggest you to set up a password after first login to the system If you forget the user name password you can push the reset button for more than 5 seconds until all the LEDs flash your VG211R will be reset to factory default 2 2 Default Network setup LAN Setup WAN Setup IP Address 192 168 1 1 Subnet Mask 255 255 255 0 DHCP Client enabled DHCP server 100 IP addressed from 192 168 1 100 to 192 168 1 199 2 3 Default VoIP setup 002 Long distance call prefix 0 O 2 4 Other Default setup Taipei Off VG211R User Manual 3 Configuring Your VG211R Login Now that you have successfully configured your computer and retrieved your new network settings from your VG211R you are ready to configure the VG211R s settings for your LAN 1 Open your Web browser 1 Internet Explorer or Netscape Navigator and click the stop button 2 In
10. 5 VE M UM MM E MM Ce 22 V zala po NE ER ET OE OE A Ii EI EAM 23 DYNAMIK DNS ue ae e e 23 TOOL A AA ER RAJE AA NAPA NA OJ AE PRO O OE RE PA ORA A NA IE e 23 7 1 CONFIGURATION TOOL S bv eo en 23 Rd FIRMWARE UPGRADE tud et ance ae eee A ueni EE M ee eT Ne A LM a M 24 7 3 d SE PETER NN O 24 v pw NETS X 24 8 1 INTERNET CONNECTION sie ani ee bei vee evo pee deba 25 8 2 O RE O O NE RE A RE KE NE meee Te 25 8 3 SECURITY LOO 25 8 4 DHCP CEFN COC ae a eee ica Eaa 26 8 5 VoIP STATUS Congratulations on your purchase of VG211R VG211R is a broadband router designed to share Internet Access provide security and to network multiple devices for a variety of users The VG211R s simple installation setup can be used by the least experienced of users while providing networking professionals with easy to configure advanced features Please read the User Guide for advanced features of this product This Package Contains One VG211R One Power Adapter One User Manual CD One Category 5 Fast Ethernet Cable Confirm That You Meet Installation Requirements Before proceeding with the installation of your VG211R ple
11. 6 5 DMZ A DeMilitarized Zone DMZ is a network off one of the LAN ports that acts as a kind of buffer between the external public Internet network and your secure network on the other LAN interface The DMZ gives access to services required from both the external network and the secure network The services are typically HTTP FTP Web servers for public access an HTTP FTP proxy server an SMTP server and a News proxy server Mail servers and News servers for internal use are placed on the secure network Through the use of access control list and Firewall you prohibit access from the Internet to your secure network while still providing access to services on the DMZ DMZ Demilitarized Zone If you have a lacal client PC that cannot run an Internet application properly from behind the firewall then you can open the client up ta unrestricted two way Internet access by defining a virtual Host Enable DMZ Yes No Multiple PCs be exposed to the Internet for two way communications e g Internet gaming video conferencing ar PN connections To use the you must set a static IP address for that PU Public IP Address Client PC IP Address 211 20 102 108 192 168 0 123 192 168 0 0 192 168 0 0 192 168 0 0 192 168 0 0 192 168 0 0 192 168 0 0 192 168 0 0 AOI AOI M 22 VG211R User Manual 5 UPnP Enable the UPnP can support Windows XP network application For
12. PSSETIINOS NETA TAVA AM PA RONI 7 4 2 1 UI D 4 2 2 gO TASH A Se OEE RP tuit tu det EEA OR NO 8 4 2 3 COULSON Mod eias tue aiat 9 4 2 4 Ii Am a 10 4 2 5 PBXAD PII Seine Jor INCOMING 5 5 0 E a 11 4 2 6 6071 2 RE OE O RT ORTU Y 12 4 2 7 OSG ad LO DUDE ee eee ne een a eee eae A ee tee 12 Ao WAN SETIING not ed ed ara O O eds 12 4 3 1 JEU IMPR E A eee ee ne ee ne ee 12 4 3 2 TITOL ae a EPI PETERE 13 4 3 3 SA EET E O A EEIE A 13 E ONE EAE E EO A E M E EA 14 dd ECAN SETTINGS ie A RE cho Ried EA 14 BSc Umm 15 4 5 1 Addres nes soa ae Gees bat amelie 15 4 5 2 Pua O O n Oe ENS 15 4 5 3 SDOCILADDIIGOUIOI Suo exist uisi mon eit i PEE udi ccu 16 Aos Du ERR A O A OE O oo OE OE O PN ea ets 4 6 1 ACCESS 0011142 ERR Tr 17 4 6 2 QUE p e Ges 19 4 6 3 SCHODIITE RING OO REPO aerate soa MOOR TT ROI OT MOTO OTR SON 19 4 6 4 VN O DIA JENO O etas O O O OR OE A O DO NE 21 4 6
13. UDP number the VoRT redirects the external service request to the appropriate server located at another internal IP address 192 188 0 100 UDP m 2 182 158 0200 p 2 mn 3 1921680 E mnm 4 1921680 Em mnm 5 1921680 E mnm 6 1921680 mnm mnm Some of the popular applications and protocol port numbers mapping are defined below Application Protocol Port Number Telnet ITCP 23 FTP TCP 1 SMTP TCP 25 POP3 TCP 110 H328 700 SNMP lUCP hea SNMP Trap UDP 162 HTTP ITCP 80 PPTP O TCP n73 PC Anywhere TCP 5631 PC Anywhere UDP 5632 4 5 3 Special Application Some applications require multiple connections such as Internet gaming video conferencing Internet telephony and others These applications cannot work when Network Address Translation NAT 15 enabled If you need to run applications that require multiple connections specify the port normally associated with an application in the Trigger Port field select the protocol type as TCP or UDP then enter the public ports associated with the trigger port to open them for inbound traffic 16 VG211R User Manual Special Applications Some applications require multiple connections such as Internet gaming video conferencing Internet telephony and others These applications cannot work when Network Address Translation NAT is enabled If you need to run applications that require mu
14. User Management The current Phone User Information Database is listed in table below Click Add button to add new entry or click Defete or Modify button to change the selected entry index sci Add Modify Delete 4 3 WAN Settings The VG211R supports 4 types of WAN connection Dynamic IP DHCP Client PPPoE Static IP and PPTP 4 3 1 Dynamic IP Under this mode VG211R enables DHCP client to get IP address automatically from your service provider The Host Name is optional but may be required by some Service Provider s The default MAC address 15 set to the WAN s physical interface on the VG211R If required by Service Provider you use the lt Clone MAC Address gt button to copy the MAC address of the Network Interface Card installed in your PC and replace the WAN MAC address with this MAC address If necessary you can use the lt Restore gt buttons to restore the WAN IP address 12 VG211R User Manual Dynamic IP The Host Name is optional but may be required by some Service Provider s The default MAC address is set to the WAN s physical interface on the product If required by your Service Provider you use the Clone MAC Address button to copy the MAC address of the Network Interface Card installed in your PC and replace the WAN MAC address with this MAC address If necessary you can use the Release and Renew buttons to release and renew the WAN IP address Host Name MAC Addres
15. a Call Advanced Setting Adv Setting If you enable VolP authentication any incoming call will invoke IVR to guide you input user id and password The user id and password is entered in user management VG211R User Manual Security Setting Allows to Make Call PSTN Call VoIP Authentication Making a Call 4 2 3 Outgoing Mode In the outgoing mode we provide Enterprise and ITSP mode to find out peer gateway IP address In most case we use ITSP mode to find peer gateway The ITSP system provide gatekeeper to control all of VoIP gateway Every gateway login gatekeeper and provide basic information to gatekeeper including port extension number and IP address So ITSP mode can support dynamic IP users like DHCP PPPoE and PPTP users ITSP Mode with GateKeeper Please enter the correct parameters for this device Click OK button to proceed GateKeeper Mode Assigned IP GateKeeper Setting IP Address 203 791 95 140 IP Address Gatekeeper ID Fes The system administrator must enter gatekeeper IP If the default gatekeeper is not able to normally operate The gateway system will automatically login to 214 gatekeeper In the enterprise mode we should define outgoing peer gateway information by extension or prefix For example you dial 123 system will search extension table and return IP to you And if you dial 002 86 10 xxxxxxxx after E 164 processing you will get 86 10 xxxxxxxx th
16. ase be sure you have the following A computer with an Ethernet network card installed Your Windows CD if your computer is running Windows 95 98 ME 2000 or XP An Internet connection through a cable or DSL modem or an external dial up or ISDN modem An additional Ethernet network cable A Web browser such as Internet Explorer or Netscape VG211R User Manual 1 Installation Guide 1 1 Hardware Setup 1 1 1 VG211R Front Panel b los A B C Item LED O O Phone Orange Flashing O O 0 raay Orange On Flashing n n n n E Alert Orange Off z i Color Condition Status Relay Alert Device power on Off hook Phone set Phone port is receiving incoming ring Off hook Line port Line port is receiving incoming ring Phone relay to Line The device could not connect to Gatekeeper successfully The device successfully is connected to Gatekeeper Un VG211R User Manual 1 1 2 VG211R Rear Panel Connect to Phone set or Connect to PBX CO Line Connect to PSTN Line 3 port 10 100Mbps RJ 45 connector Local 1 3 connect to PC or local switch hub Reset button Press for one second to reset the device or press for 5 seconds to reset to the factory default Connecting Phone set Connect phone set directly to the VG211R on phone Connecting PSTN Line Connect PSTN line directly to the VG211Ruter on Line Connecting Computers Connect computers directly to the VG
17. atically when no access to the web after this timeout value Password Set a password to restrict management access to the product If you want to manage the product from a remote location outside of the local network a Current Password Idle Time Qut 10 Min Idle Time 0 Time Qut Mew Password Re Enter Password for Verification x Apply Cancel 4 1 3 Remote Management The Remote Management feature can restrict remote user login from the WAN port The IP setting of 0 0 0 0 allows user from any IP address to remote logged in to the device When the Enabled is not checked remote login is disabled VG211R User Manual Remote Management cet the remote management of the product Host Address Apply Cancel The remote user can login using WAN IP The default port number is 8080 Welcome to MSN com Microsoft Internet Explorer Edit View Favorites Tools Help O O Jer Address http F211 20 102 108 8080 4 2 VoIP Settings The VG211R provide Dial setting and Port setting for VoIP user 4 2 1 Dial Setting This page sets up the parameters related to the prefix of the phone numbers including International call prefix Long distance call prefix country code and area code Dial Setting Use the following filed to set your dialing parameters according to your location Press OK button to proceed Pr
18. aximum Idle Time min Auto reconnect 4 3 3 Static IP If your Service Provider has assigned a fixed IP address enter the assigned IP address subnet mask and the gateway address provided Most service providers provide a DNS server for speed and convenience If there is a DNS server that you would rather use you need to specify the IP address here 13 VG211R User Manual Static IP If your Service Provider has assigned a fixed IP address enter the assigned IP address subnet mask and the gateway address provided Has your Service Provider given you an IP address and Gateway address IP address assigned by your Service Provider 10 Subnet Mask 255 255 255 248 service Provider Gateway Address 2 fios Apply Cancel 4 3 4 PPTP Under this mode VG211R SIP is acting as a PPTP client Enter the PPTP IP Address Subnet Mask Default Gateway User ID Password and PPTP Gateway assigned by your Service Provider Enter a Maximum Idle Time in seconds to define a maximum period of time for which the Internet connection is maintained during inactivity If the connection is inactive for longer than the Maximum Idle Time then it will be dropped PPTP Point to Point Tunneling Protocol is a common connection method used for xOSL connections in Europe 4 4 LAN Settings VG211R needs to have an IP address of the local network You can enable DHCP to dynamically a
19. efix Setting gt Country Code E ZEN Local Infomation Apply Cancel VG211R User Manual 4 2 2 Port Setting This page defines the general port parameters and user must select port number first In the port and port2 we have Web Page as following The default setting is Phone Set and extension number is 1011 1012 But the real extension number will get from Service Center Port Setting select a part to configure The current port s setting will be saved after you select another port or press OK button Port Selected 1 Port General Setting Port Status Enable Port Type Phone cnt Extension Number 1001 Auto FAX Detection FAX Support C Dant Use FAX Protocal C Always Use FAX Protocol Security Setting Allows to Make VoIP Call Iv PSTN Call VoIP Authentication on Making a Call 1 Advanced Setting Adv setting In the port3 and port4 we have Web Page as following The default setting is Relay mode Port3 will relay to port and Port4 will relay to port2 Port Setting Select a port to configure The current port s setting will be saved after you select another port or press OK button Port Selected 4 x Port General Setting Port Type Relay Mode Auto FAX Detection FAX Support C Dont Use FAX Protocol C Always Use FAX Protocol Security Setting Allows to Make VoIP Call PSTN Call VoIP Authentication on Making
20. en they will meet 8643 prefix in prefix table and return IP to you So you cannot use any dynamic IP in this mode VG211R User Manual Outgoing Peer Gateway Database Extension Peer Gateway Table index Extension IP Address Connect to PEX C 4 123 182 168 100 100 2 101 203 79 195 136 Add Delete Outgoing Peer Gateway Table Bb 10 211 20 102 106 2 ol B 28 2 IBS 9 Modify Add Delete 4 2 4 H 323 Setting We provide H 323 related setting in this page If you have any interoperability problem you must change some setting in this page H 323 a 000 538 C Terminal 1 Gateway Fast Connect Other Option o MM MNA Passing through Alias Use MAC address H 323 ID Use Vendor ID User Input _ We use the MAC address as H 323 ID Sometimes ITSP will ask you to change H 323 ID then you should disable use MAC address and enter your H 323 ID in user input field 10 VG211R User Manual 4 2 5 PBX ID Prefix Setting for Incoming If you set port type to be PBX CO line you should set PBX ID here For example you set port and port2 to be PBX CO line and set PBX ID 319 in this page The port and port2 use 319 as their number If port is busy system will ring port2 They use same PBX ID number as their number If you set port type to be dedicated line and want to make
21. fos Joo iz Saturday mm mm _OK Cancel As shown above we defined a schedule rule called Office Hour the active time period is Monday to Friday 9 00 am to 5 00 pm After pressing lt OK gt the following page will show up Schedule Rule This page defines schedule rule names and activates the schedule for use in the Access Control page e Schedule Rule Table up to 10 rules Office Hours Office Hours Edit Delete Add Schedule Rule Apply Cancel Then when we go to lt Access Control gt page select lt Add PC gt in the bottom of the page lt Access Control Add PC gt the scheduling rule will show Office Hour as shown below e Scheduling Rule Ref Schedule Rule Page zie sis T If we setup the PC of finance department in our company IP address 192 168 0 200 to 192 168 0 210 can not access Web during office hour then in Access Control gt page we will see the following page 20 VG211R User Manual e Normal Filtering Table up to 10 computers Client Service 3 2 E 4 a Chel ir qure 5 192 1980 200 WW E mail Sending Edit Delete sc ip io 4 Add PC 4 6 4 Intrusion Detection When the SPI Stateful Packet Inspection firewall feature is enabled all packets can be blocked Stateful Packet Inspection SPI allows full support of different application types that are using dynamic port numbers For the applications checked in the list below the
22. ing Global IP 211 102 107 is transformed as multiple virtual IPs from 192 168 0 100 to 192 168 0 150 Global IP fios is transformed as multiple virtual IPs from 192 168 0 151 to 192 168 0 200 Global IP is transformed as multiple virtual IPs from 192 168 0 0 to 192 180 Global IP is transformed as multiple virtual IPs from 192 168 0 0 to 192 1680 0 Global IP is transformed as multiple virtual IPs from 192 168 0 0 to 192 168 0 0 I 4 5 2 Virtual Server VG211R is a NAT router All the IP addresses coming in and going out to VG211R can be converted between public and private IP addresses You can configure VG211R as a virtual server so that remote users accessing services such as the Web or FTP at your local sites via public IP address can be automatically redirected to local servers configured with private IP address In other words depending 15 VG211R User Manual on the requested service TCP UDP the VG211R redirects the external service request to the appropriate server Virtual Server You can configure the VoRT as a virtual server so that remote users accessing services such as the Web or FTP at your local site via public IP addresses can be automatically redirected ta local servers configured with private IP addresses In other words depending on the requested service TCP
23. llocate IP addresses to your client PCs When DHCP server is enabled you need to enter the IP address range for the local hosts 14 VG211R User Manual LAN Settings You can enable DHCP to dynamically allocate IP addresses to your client PCs or configure filtering functions based on specific clients or protocols The VoRT must have an IP address for the local network LAN IP IP address 192 168 o 255 255 255 0 Enabled C Disabled IP Address Pool s 4 5 NAT Settings 4 5 1 Address Mapping VG211R supports multiple global IP addresses It allows IP addresses used in a private local network to be mapped to one or more addresses used in the public global Internet This page allows user to enter up to 10 addresses mapping between a set of private IP addresses and one global IP address After setting VG211R will map the set of private IP addresses to the global IP address when accessing to the Internet This is very useful in the gaming and some particular multimedia applications Address Mapping Network Address Translation NAT allows IP addresses used in a private local network to be mapped to one or more addresses used in the public global Internet This feature limits the number of public IP addresses required from the ISP and also maintains the privacy and security of the local network We allow one or more than one public IP address to be mapped to a pool of local addresses Address Mapp
24. lly When Access Control is enabled all the packets will be allowed by default user can use lt Normal Filtering Table gt and lt MAC Filtering Table gt to filter out un allowed traffic Access Control Access Control allows users to black PCs on your network from gaining access to the Internet The user can block PCs based on IP and MAC address Enable Filtering Function Yes No 17 VG211R User Manual Normal Filtering Table User can press Add PC gt to edit packet filtering rules Normal Filtering Table up to 10 computers Client PC Client PC IP Description Andee Client Service Schedule Rule Configure No Valid Filtering Rule When user selects lt Add PC gt the following lt Access Control Add PC gt page will show up Access Control Add PC This page allows users to define service limitation of client PC including IP address service type and scheduling rule criteria For URL blocking function you need config URL address first in URL Blocking Site page For scheduling function you also need config schedule rule first in Schedule Rule page Client PC Description Sam Client PC IP Address 192 168 0 200 210 e Client PC Service Service Name Detail Description VAY HTTP TCP Port 80 3128 8000 8001 8080 WWW with URL Blocking HTTP Ref URL Blocking Site Page Li E mail Sending SMTP TCP Port 25 News Forums NNTP TCP Port 119 E mail Receiving POPS TCP Port
25. ltiple connections specify the port normally associated with an application in the Trigger Port field select the protocol type as TCP or UDP then enter the public ports associated with the trigger port to open them for inbound traffic Note The range of the Trigger Ports is from 0 to 65535 Trigger Port Trigger Public Port Pupile Enabled Type Type r 6 2 owp BR Aine 2 D eue 2 2 eue 2 TE EL dT se r p Some of the applications are listed below Example 10 Trigger Port Trigger Type Public Port Public Type 2300 2400 1 UDP MSN Game Zone 2 28800 TCP MSN Game Zone 3 6112 UDP 6112 UDP Battle net 4 6 Firewall VG211R provides extensive firewall protection by restricting connection parameters to limit the risk of hacker attack and defending against a wide array of common attacks When firewall is enabled extra checking will be performed for each packets passing through the device the performance of the device will be greatly affected To enable the firewall feature select lt Enable gt from firewall page 4 6 1 Access Control Access Control allows users to block PCs on your network from gaining access to the Internet The user can block PCs based on IP and MAC address When firewall is enabled Access Control will be enabled automatically User can disable filtering feature manua
26. product will support full operation as initiated from the local LAN The product s firewall can block common hacker attacks including IP Spoofing IP with zero length IP With Option Too Short ICMP Too Short TCP Too Short UDP Tiny Fragment Attack NewTear Attack Smurf Attack Land Attack Ping of Death UDP Loop Attack Tear Drop Attack Snork Attack Winnuke Attack Bonk Attack ASCEND Probe Attack Boink Attack SYN Drop Attack Empty Fragment Attack Oshare Attack TCP null scan TCP Xmas scan RIP defect ICMP defect TCP SYN flood UDP flood Fragmentation Flood Intrusion Detection Features SPI and Anti DoS Firewall Activate SPI and Anti DoS Protection protection RIP Defect Reject the RIP packets from WAN Discard PING from WAN Reject all the PING request to the WAN port a Intrusion Detection Feature SPI and Anti DiaS firewall protection When hacker tries to attack VG211R can send e mail alert to the specified user Enter related e mail information such as e mail address and SMTP server Some e mail service providers require user to enter POP3 information when trying to send e mail In this case enter the POP3 server user name and password otherwise you don t need to enter POP3 related information 21 VG211R User Manual When hackers attempt to enter your network we can alert you by e mail Your E mail Address SMTP Server Address PUPS Serer Address ser name Password 4
27. s pg jos a 1 Fo Clone Mac Address Apply Cancel 4 3 2 PPPoE Under this mode VG211R is acting as a PPPoE client Enter the PPPoE user name and password assigned by your Service Provider The Service Name is normally optional but may be required by some service providers Enter a Maximum Idle Time in seconds to define a maximum period of time for which the Internet connection is maintained during inactivity If the connection 15 inactive for longer than the Maximum Idle Time then it will be dropped You can enable the Auto reconnect option to automatically re establish the connection as soon as you attempt to access the Internet again PPPoE Enter the PPPoE user name and password assigned by your Service Provider The Service Name is normally optional but may be required by same service providers Enter a Maximum Idle Time in minutes to define a maximum period of time for which the Internet connection is maintained during inactivity Ifthe connection is inactive for longer than the Maximum Idle Time then it will be dropped You can enable the Auto reconnect option to automatically re establish the connection as soon as you attempt to access the Internet again If your Internet Service Provider requires the use of PPPoE enter the information below Use PPPoE Authentication User 84562137 hinet net Password E Please retype your password E service Name MTU 1454 1440 lt lt MTU lt 1492 M
28. the Address field type http 192 168 1 1 and press lt ENTER gt 2 Welcome to MSN com Microsoft Internet Explorer File Edit View Favorites Tools Help Q Back x B Search d Address 192 168 1 1 3 The VG211R login screen will appear Leave Password field empty and click on login The default Username Password setting is root root For security reasons you should assign a password as soon as possible Note that the password login in case sensitive Username Password CANCEL 4 Once the user login successfully the first page will appear as below System General Setup O WAN The product supports advanced Router and VolP Gateway functions You can use these pages O LAN to configure the firwall NAT and olP H 323 setting VoIP Routing NAT Firewall UPnP Tools Status VG211R User Manual 4 Configuring Your VG211R General Setup 4 1 System 4 1 1 Time Zone Set the proper time zone and the daylight savings for VG211R Time Zone Set the time zone of the product This information is used for log entries and firewall settings Set Time Zone GMT 08 00 T ainei Enable Daylight Savings Start Daylight Savings Time January End Daylight Savings Time January z f Apply Cancel 4 1 2 Password Settings Set the password of the user The Idle Time Out value is used for VG211R to log out autom
29. ur You can then use the Restore tool to restore the saved configuration to the machine Alternatively you can use the Restore to Factory Defaults tool to force the machine to perform a power reset and restore the original factory settings Backup C Restore C Restore to Factory Defaults More Configuration 23 VG211R User Manual 7 2 Firmware Upgrade The firmware upgrade tool allows you to upgrade the VG211R system firmware You need to download the file to your local PC first and select the target to load The firmware of VG211R is divided into three files one for core firmware one for the user interface and one for the voice prompt message Firmware Upgrade This tool allows you to upgrade the product system firmware using a file provided by device vendor Enter the path and name of the upgrade file then click the APPLY button below You will be prompted to confirm the upgrade Upgrade Target Firmware SEIS 7 3 Reset In the event that the system stops responding correctly or in some way stops functioning you can perform a reset Your settings will not be changed To perform the reset click on the APPLY button below You will be asked to confirm your decision The reset will be complete when the power light stops blinking Reset In the event that the system stops responding correctly or in some way stops functioning you can perform a reset Your settings will not be changed To perform
Download Pdf Manuals
Related Search