Home

CNet Technology CNIG904S User's Manual

1. ccsscccccsssssssssscccccccscssssscccssssseeees 26 Using another DHCP Server sciniccst cccnctassiticeas Seecdadcs cenasesesdeidcscnnsvessddetaccscenuudtessetscsscccsvane 26 To Configure your PCs to use DACP nui ii a iii ic da 27 CHAPTER ROUTING bp oiscicicostaccescivcndiewstacienvibscctnost Acid eiii 28 A aniani oiua aa naea ai aa oe aii eono anaa 28 Broadband Router Configuration cccccccssssssscccccssssssssccccccsssssssssccccssesssssscccsssssseees 28 Router Configuration was cecsccdeisscscecisnsccssucescrusscnd dvessecasvotcesscsessesecvaucdsds dercelasUeaderesveetaveneasc 30 Rono Example a ilies a E O E E ES 30 CHAPTER 7 DEVICE OPTIONS cereos eidi cada caDnan aci nadia caia aos icoiaias 32 SS A O A a 32 EPA AA a a 32 NAT Network Address Translation sscccccsssccsssssccccssssccsssscccsssccccsssscccsssccssssscces 33 TE TP erences bseeuceleeinceseceluesent 33 Remote Vian agement ciivsicesccvsciesicecicusiedoisexiawsiesveisecasssausacedassensussawcdcussessckessavansesersescevasuive 33 CHAPTER 8 ADVANCED INTERNET 00 sccccsssssssscsssceccssssnsccccccccccccssccscsecsssssnssccsees 34 DV CE VI Wisin AAA eel ancl Se eseec dala unchaneav a tiaieench ies 34 Advanced Internet SCreen iii diia iia tadas 34 Special Internet Ap PHCAGONS ascosi insnet arae SEa 35 A O 37 DML rta 41 CHAPTERS ACCESS CON PROD wins sina a a 43 A Uaksawedadanrusdeueauvedsauetiectcbiansdeacarnsaacasswecsace 43 SECURE GROUPS 1 a a 44 A O 4
2. a defined Server Select 1t from the drop down list Click Get Data Make any desired changes Note that you can Enable and Disable a Server using this process Click Update e To Delete a defined Server Select 1t from the drop down list Click Delete e To List all Servers Click List All 39 CNet Technology Inc Broadband Router User Guide Data WAN IP e This shows the IP Address which Internet users must use to connect to Address any of your Virtual Servers e To Internet Users ALL your Virtual Servers have the same IP Ad dress e This IP Address is allocated by your ISP It is better to have a fixed IP Address Select Server This lists any Servers you have defined Click the Get Data button to view the correct data for the selected Server Details Name Enter a descriptive name to identify this Server entry Enable Use this to Enable or Disable support for this Server as required IP Address The IP Address of the PC on your LAN which is running the Server software Protocol Select the protocol TCP or UDP used by the Server Internal Port Enter the port number used by the Server to connect to clients Number External Port The port number used by clients when connecting to the Server This is Number normally the same as the Internal Port Number If it is different this device will perform a mapping or translation function allowing the server to use one port address while clients
3. on the WWAN Port DNS 1 fo fo fo fo DNS 2 fo fo lo Jo optional Advanced Internet DNS 3 jo b b b Optional Access Use this link to reach the Routing Table The Routing Table is Control only required if your LAN has 1 or more Routers Save Cancel Figure 5 LAN Screen LAN Configuration For most users the default values for these fields should be satisfactory and no changes will be required If your LAN contains an existing Router or Routers refer to Chapter 6 Routing Data LAN Screen TCP IP IP Address IP address for the Broadband Router Use the default value of 192 168 0 1 unless the address is already in use or your LAN is using a different IP address range In the latter case enter an unused IP Ad dress from within the range used by your LAN Network Mask The default value 255 255 255 0 is standard for small class C networks For other networks use the Network Mask for the LAN segment to which the Broadband Router is attached 1 e the same value as the PCs on that LAN segment 11 CNet Technology Inc DHCP Server Operation Start IP Address Finish IP Ad dress Broadband Router User Guide If Enabled the Broadband Router will allocate IP Addresses to PCs on your LAN The default and recommended value is Enabled If you are already using a DHCP Server this setting must be DISABLED and the exist
4. device is IP Address attached NOT the router on the remote LAN segment Interface Select the appropriate interface LAN Internal LAN or WAN External LAN or WAN from the drop down list Metric The number of routers which must be traversed to reach the remote LAN segment The default value is 1 29 CNet Technology Inc Broadband Router User Guide Router Configuration It is essential that all IP packets for devices not on the local LAN be passed to the Broadband Router so that they can be forwarded to the external LAN WAN or Internet To achieve this the local LAN must be configured to use the Broadband Router as the Default Route or Default Gateway Local Router The local router is the Router installed on the same LAN segment as the Broadband Router This router requires that the Default Route is the Broadband Router itself Typically routers have a special entry for the Default Route It should be configured as follows Destination IP Address Normally 0 0 0 0 but check your router documentation Network Mask Normally 0 0 0 0 but check your router documentation Gateway IP Address The IP Address of the Broadband Router Metric l Other Routers on the Local LAN Other routers on the local LAN must use the Broadband Router s Local Router as the Default Route The entries will be the same as the Broadband Router s local router with the exception of the Gateway IP Address e For a router with a direct connection
5. fusing DHCP the LAN IP Address of a PC may change To solve this problem use either of these methods e Assign a fixed IP Address to the Server PC ensuring that its IP Address is NOT within the address range allocated by the DHCP Server e Reserve an IP Address for the Server PC in the DHCP Server using the Access Control PC screen 38 CNet Technology Inc Advanced Internet User Defined Virtual Servers If the type of Server you wish to use is not listed on the Virtual Servers screen you can define it using this feature Select Advanced Internet User Defined Virtual Servers to see a screen like the example below User Defined Define Special purpose Virtual Servers on your LAN Virtual Servers From the Internet ALL Servers appear to have the WAN IP Address below Current IP Address to connect to ALL virtual Servers 210 241 226 155 WAH IP Address This address is allocated by your ISP It is better to have a fixed IP Address l D Select Server Name GetData Click Get Data to see the correct data for the selected server Name Enable IP Address fo fo fo fo Protocol UDP Internal Port Mo fo Required External Port No fo Optional Clear Form Add Delete Update List all Cancel Figure 23 User Defined Virtual Servers e To Create a new Server Click Clear Form Enter the required data See next section Click Add e To Modify Edit
6. make Servers on your LAN accessible to Internet users Normally Internet users would not be able to access a server on your LAN because e Your Server does not have a valid external IP Address e Attempts to connect to devices on your LAN are blocked by the firewall in this device The Virtual Server feature solves these problems and allows Internet users to connect to your servers as 1llustrated below E Ca El 192 168 0 1 LAN IP Address Broadband Web Server Router FTP Server 192 168 0 20 192 168 0 10 203 70 212 52 WAN IP Address Internet Remote PC Remote PC Using Web Server Using FTP Server http 203 70 212 52 ftp 203 70 212 52 Figure 21 Virtual Servers IP Address seen by Internet Users Note that in this illustration both Internet users are connecting to the same IP Address but using different protocols To Internet users all virtual Servers on your LAN have the same IP Address This IP Address is allocated by your ISP This address should be static rather than dynamic to make it easier for Internet users to con nect to your Servers If using a Static IP Address it is entered on the WAN screen Types of Virtual Servers The Broadband Router supports two 2 types of Virtual Servers e Pre defined Stan
7. on whether you are using a Direct Connection or PPPoE WAN Status Direct Connection WAN Status Direct Connection Data WAN Status Physical Address IP Address Network Mask Default Gateway DHCP Client Buttons Reconnect Refresh Physical Address O0 cO 02 0 7 13 03 LP Address 11216016 Network Mask 250 299 00 Default Gateway 1721605 DHCP Client Enable Reconnect Refresh Figure 9 WAN Status Direct Connection The Hardware address of this device as seen by other devices on the WAN The IP Address of this device as seen by devices on the WAN This device has 2 IP Addresses one for the local LAN and another for the WAN port The Network Mask for the above IP Address IP address of the Router Gateway on the WAN port Displays Enabled or Disabled indicating whether this device is acting as a DHCP client on the external LAN or WAN Use this button if the connection seems to have been lost and no data is being transferred This button has no effect unless acting as a DHCP Client Update the data on screen 16 CNet Technology Inc Configuration WAN Status PPPoE WAN Status PPPoE Connection Status PPPoE O Normally use of the Connect and Disconnect buttons is not required Physical Address 00 c0 02 07 13 03 LP Address 0000 Network Mask 0000 PPPoE Link Status OFF WAN Status Connection Log 028 Send O CO 2
8. to connect to you If using a Static IP Address it is entered on the WAN screen BES To Internet users the IP Address of the DMZ com puter is the IP Address allocated by your ISP as Note shown by the WAN IP Address value 42 Chapter 9 Access Control This Chapter explains how to configure and use the Broadband Router s Ac cess Control feature Overview The Access Control feature allows administrators to restrict Internet Access by individual PCs The process uses Packet Filtering to block or discard data packets By default no packets are blocked or discarded To use this feature e Set the desired restrictions on the Everyone group e All PCs are in the Everyone group unless explicitly moved to another group using the PC screen e Generally access rights are managed by making the Everyone group the most re strictive group Additional access rights then have to be explicitly granted by assigning a user to a less restrictive group However if you wish to restrict only a small number of users 1t may be more conven ient to reverse this and make the Everyone group the least restrictive group Only users requiring restrictions need to be assigned to a more restrictive group e Set the desired restrictions on the other groups Group 1 Group 2 etc as needed e For each PC you wish to move from the Everyone group enter their details on the PCs screen and assign them to the desired grou
9. to the Broadband Router s local Router the Gateway IP Address is the address of the Broadband Router s local router e For routers which must forward packets to another router before reaching the Broadband Router s local router the Gateway IP Address is the address of the intermediate router Routing Example Router A ca 192 168 1 80 a teeter a m Segment 1 Segment O 192 168 1 xx 192 168 0 xx Broadband Router B Router 192 168 1 90 192 168 2 70 192 168 0 1 g a SS Segment 2 atl att 192 168 2 xx a Figure 17 Routing Example For the LAN shown above with 2 routers and 3 LAN segments the required entries would be as follows 30 CNet Technology Inc Routing For the Broadband Router s Routing Table The Broadband Router requires 2 entries as follows Entry 1 Segment 1 Destination IP Address Network Mask Gateway IP Address Interface Metric Entry 2 Segment 2 Destination IP Address Network Mask Gateway IP Address Interface Metric Destination IP Address Network Mask Gateway IP Address Destination IP Address Network Mask Gateway IP Address 192 168 1 0 255 255 255 0 Standard Class C 192 168 0 100 Broadband Router s local Router LAN l 192 168 2 0 255 255 255 0 192 168 0 100 LAN 2 For Router A s Default Route
10. 0 0 0 0 0 0 0 0 192 168 0 1 Broadband Router s IP Ad dress For Router B s Default Route 0 0 0 0 0 0 0 0 192 168 1 80 Broadband Router s local router 31 Chapter 7 Device Options This Chapter details the options available on the Broadband Router s Op tions screen Overview An example Options screen is shown below O tions The password protects the configuration data p NAT allows LAN users to share an external Internet IP address and also provides Firewall protection setting a password is recommended Password New password Verity password lf using this device for Internet Access MAT Network Address Translation must remain Enabled Enable NAT O Disable NAT TETP Trivial FTP is normally not required for firmware upgrades A Windows utility is available for this purpose Enable Firmware Upgrade using TFTP This option allows you to manage this device via the Internet using your Web Browser See help for details po eel A Enable Remote Management Port Number so Current IP Address to connect to this device 210 241 226 155 Save Cancel Figure 18 Options Screen Password Once a password is entered it is required in order to change the device configuration Pass words are case sensitive and can be up to 8 alphanumeric characters no spaces or punctuation To create or change the password enter the required password in both the Ne
11. 6 A a a a a a a 47 APPENDIX A TROUBLESHOOTING wissecsccssssscssssssssscenswessscssnsscceesnsssteassesesenswsssscnsssesseasoesse 49 COV OE VIOW aa E acid 49 General Problems ikke E A A ee ee 49 MTCC TME UL CE aaa 50 APPENDIX BSPECIFICATIONS iii ideo 51 Broadband Router caido 51 P N 9560DN0001 Copyright O 2001 All Rights Reserved Document Version 1 0 All trademarks and trade names are the properties of their respective owners Chapter 1 Introduction This Chapter provides an overview of the Broadband Router s features and capabilities Congratulations on the purchase of your new Broadband Router The Broadband Router is a multi function device providing the following services 4 Port Switching hub 10 100BaseT Shared Internet access via an DSL or Cable modem 10 100BaseT LAN Internet Broadband Router Figure 1 Broadband Router The Broadband Router can also be used to connect your local LAN to a remote LAN or WAN instead of providing shared Internet Access Broadband Router Features The Broadband Router incorporates many advanced features carefully designed to provide sophisticated functions while being easy to use LAN Features 10 100BaseT Hub The Broadband Router includes a 4 port 10 100BaseT switching Hub allow connection of up to 4 PCs Both 10BaseT and 100BaseT connections can be used simultaneously DHCP Server Support Dynamic Host Configuration Protocol p
12. 7 13 3 EF FF FEF FF FF FF PPoE DISC 1 1 B PADI ID 0x0 len 4 O27 Connecting to remote server Dib Reset physical connection O25 stop PPP Did try to establish physical connect ion Clear log Connect Disconnect Refresh Figure 10 WAN Status PPPoE Status Data WAN Status Physical Address The Hardware address of this device as seen by other devices on the WAN IP Address The IP Address of this device as seen by devices on the WAN This device has 2 IP Addresses one for the local LAN and another for the WAN port Network Mask The Network Mask Subnet Mask for the IP Address above PPPoE Link This indicates whether or not the connection is currently established Status If the connection does not exist the Connect button can be used to establish a connection If the connection currently exists the Disconnect button can be used to break the connection Connection Log Log Data The Connection Log shows status messages relating to the existing connection The most common messages are listed in the following table Buttons Connect If not connected establish a connection to your ISP Disconnect If connected to your ISP hang up the connection Clear Log Delete all data currently in the Log This will make it easier to read new messages Refresh Contact this device and update the Log data 17 CNet Technology Inc Broadband Router User Guide Connection Log Messages Connect on Conn
13. Broadband Router Shared Broadband Internet Access CNIG904S A pork Owenin HED User s Guide TABLE OF CONTENTS CHAPTER TIN TRODUCTION ciutat roo iodo acceda oras 1 Broadband Router Features cissecscciccccccsssscaesenssdstecessdctorsasssacteeddesteuasdsteccadsesesdsncteadsvateuskess 1 Packaco Contes il A a 3 Physical Detalla aaa ieeceandencheavedesceanccasecueseesaens 4 CHAPTER 2 INSTALLATION siii aiii AAA AAA AAA AAA AAA 6 REQUIRE MENE tri A AA AA E autunsveleess 6 Installation Procedures laca 6 CHAPTERS CONFIGURATION iisitesccescesiccasineccaascteavearateaicsiagaiessiatatassaivavesrateaiceiaeseutesanees ss 8 OV CE VICW A E 8 CONTIGUTACION Program casinesisicsscieccstsetisccecestesetassscnsaucestaatsccesscuascdeseeassoasesacascaatedseseasscoteiess 9 LAN SCE A tats acme cacisasetscciadcusckusnetetisen ome 11 WAN COMME UPATION ii A A A AAA A 13 WAN Salsa aii A AA AA A Ali 16 LAN DOVICO SIA Sioi cena eaii 19 CHAPTERA PC CONFIGURATION araona aeaea a AO E EESE aeai 21 TA 21 TEENS CIN ande 21 Internet Access CONMSUPAOM iii iia ii aeaa ia 24 Macintosh COMMUTATION snni ninsantaci ariadna nadia addict 25 CHAPTERS DOCP visessstscscsusssavbeassccnsesousaneacacconeubateasbacstacnsasesaatoasamsansshattanbasstacncasetaatedsaimananeets 26 DY CE VIC Wisin id 26 What DHCP DOCS sivcasiicsiccvecvcisenstuciistccvasaeserwsdccvsdeessebisbcacsvedesssuseavsdassdivesceiasveaderesveesasauede 26 Using the Broadband Router s DHCP Server
14. CP Filters 7 E if el ee S ae 9a ee ee UDP Filters if 6 Poo D ee 9a J sf O Save Cancel Figure 27 Filters Screen This screen allows you to define packet filters When you define security groups on the Secu rity Groups screen you can select from any filters defined here as well as the pre defined filters 47 CNet Technology Inc Broadband Router User Guide Data TCP Packets Define the packets you wish to be filtered out by entering the following data TCP Filters Name Enter a descriptive name for this entry Port No Enter an integer representing the Port Number for this type of packet This information can normally be provided by the service provider Otherwise a Network Analyzer or Packet Sniffer can be used to determine the correct port number UDP Filters Name Enter a descriptive name for this entry Port No Enter an integer representing the Port Number for this type of packet This information can normally be provided by the service provider Otherwise a Network Analyzer or Packet Sniffer can be used to determine the correct port number 48 Appendix A Troubleshooting This Appendix covers the most likely problems and their solutions Overview This chapter covers some common problems that may be encountered while using the Broadband Router and some possible solutions to them If you follow the suggested steps and the Broadband Router sti
15. HTTP Web connections is port 80 but using port 80 here will prevent the use of a Web Virtual Server on your LAN See Advanced Internet Virtual Servers Current WAN Port You must use this IP Address to connect see below IP Address This IP Address is allocated by your ISP But if using a Dy namic IP Address this value can change each time you connect to your ISP So it is better if your ISP allocates you a Fixed IP Address To connect from a remote PC via the Internet 1 Ensure your Internet connection is established and start your Web Browser 2 Inthe Address bar enter HTTP followed by the WAN IP Address of the Broadband Router If the port number is not 80 the port number is also required After the IP Ad dress enter followed by the port number e g HTTP 123 123 123 123 8080 This example assumes the WAN IP Address is 123 123 123 123 and the port number is 8080 33 Chapter 8 Advanced Internet This Chapter explains how to use the Advanced Internet features Overview For situations where the Broadband Router is being used to provide shared Internet access the following advanced features are provided e Special Internet Applications e Virtual Servers e DMZ This chapter contains details of the configuration and use of each of these features Advanced Internet Screen This screen provides access to the advanced Internet features and provides a convenient overview and cont
16. I gt Dial Up Adapter 4 NetBEUI gt Dial Up Adapter 42 VPM Support A TCPIP gt PO Fast Ethernet Adapter 34 TEPAP Dial Up Adapter QQ TCP IP gt Dial Adapter 42 VPN Support S File and printer sharing for NetWare Networks 4 Add Remove Properties Figure 12 Network Configuration 2 Select the TCP IP protocol for your network card 3 Click on the Properties button You should then see a screen like the following 21 CNet Technology Inc Broadband Router User Guide TCP IP Properties El ES Bindings Advanced NetBIOS DNS Configuration Gateway WINS Configuration IP Address An IF address can be automatically assigned to this computer If your network does not automatically assign IF addresses ask your network administrator for an address and then type itin the space below C Specify an IP address Figure 13 IP Address Win 95 Ensure your TCP IP settings are correct as follows Using DHCP To use DHCP select the radio button Obtain an IP Address automatically This is the default Windows settings Restart your PC to ensure it obtains an IP Address from the Broadband Router Using Specify an IP Address If your PC is already configured do NOT change the settings on the IP Address tab shown in Figure 13 above On the Gateway tab enter the Broadband Router s IP address in the New Gateway field and click Add Your LAN administrator can advise you of the IP Addr
17. P Address Dynamic allocated on connection cFivedP OP PP Idle Time out minutes is 0 to disable time out Connect On Demand M Enable If Connect on Demand is disabled you must use the Connect button on the Status screen to establish a connection Cancel Figure 8 WAN Port PPPoE Data WAN PPPoE Account Account User Name The name of the Internet account provided by your ISP Password Enter the password for the above account Re enter the password in amp Verify the Verify field to ensure it is correct IP Address IP Address Normally this is Dynamic use this setting if your ISP did not provided by ISP provide an IP Address If your ISP did provide an IP Address select Fixed and enter the value they provided Options Idle Time out If an connection is inactive for longer than this time period it will be terminated If zero 0 then the connection will never be termi nated Connect on Demand Normally this should be Enabled If disabled you must use the Buttons Save Cancel Connect button on the Status screen to establish a connection Save any data you have entered on this screen Remember to save before changing to another screen Cancel any data you have entered since the last Save operation 15 CNet Technology Inc Broadband Router User Guide WAN Status Clicking WAN Status on the menu bar will take you to the WAN Status screen The screen shown will depend
18. as been allocated by the DHCP server to the other device Physical Address The Physical Address Hardware Address of the device which has been allocated a IP Address 19 CNet Technology Inc Broadband Router User Guide Status Possible Status values are Leased the IP Address is allocated to the device shown or Reserved the IP Address is not available Note The DHCP table will be empty unless the DHCP Server function is being used If not empty this table lists the devices on the LAN which have been allocated IP Addresses by the DHCP server function 20 Chapter 4 PC Configuration This Chapter details the PC Configuration required on the local Internal LAN Overview For each PC the following may to be configured e TCP IP network settings e Internet Access configuration TCP IP Settings If using the default Broadband Router settings and the default Windows 95 98 TCP IP settings no changes need to be made e By default the Broadband Router will act as a DHCP Server automatically providing a suitable IP Address to each PC when the PC boots e The default Windows 95 98 TCP IP setting is to act as a DHCP client To check your PC s TCP IP Settings 1 Select Control Panel Network You should see a screen like the following Network ki E Configuration identification Access Control The following network components are installed 4 NetBELUI gt PCI Fast Ethernet Adapter NS MetBEU
19. cation Select it from the drop down list Click Get Data Make any desired changes Click Update e To Create a new Application Click Clear Form Enter the required data as described below Click Add e To List all Applications Click List All Configuration Data from Service Provider This data must be obtained from the service provider Name Enter a descriptive name to identify this application entry Enable Use this to Enable or Disable support for this application as required Outgoing Protocol The protocol TCP or UDP used when you connect to the special applica tion service Port Range The beginning of the range of port numbers used by the application server Start for data you send to it If the application uses a single port number enter it in both the Start and Finish fields Port Range The end of the range of port numbers used by the application server for data Finish you send Incoming Protocol The protocol TCP or UDP used when the application or service sends data to you Port Range The start of the range of port numbers used by the application server when Start data is sent to you If using only one port number enter it in both the Start and Finish fields Port Range The end of the range of port numbers used by the application server when Finish data is sent to you 36 CNet Technology Inc Advanced Internet Virtual Servers This feature allows you to
20. ch is not supported by this device 18 CNet Technology Inc Configuration LAN Device Status The LAN Status link on the menu will result in a screen like the example below Status LAN Device Version 1 0 Release 02 O0daltesse1 1 Firmware Yersioan Hardware ID Network Address Translation Enable Physical Address DO c0 02 07 13 02 ILP Address 192 168 0 1 NetworkMask 255 200 200 0 DHCP server Enable LP Address Physical Address Status 192 168 0 3 Q0 03 2f 00 00 43 192 168 0 11 O0 48 45 c0 03 e4 192 168 10 14 00 40 05 ab db 4d 192 168 10 15 00 40 05 ab db 4e 192 165 0 1F 00 b0 d0 2d fd 3c Figure 11 Status Screen Data LAN Device Status Device Firmware Version Version of the firmware embedded software including this program which is currently installed Hardware ID The hardware ID of this device used by the manufacturer Network Address This will display Enabled NAT is On or Disabled NAT is Off Translation LAN Port Physical Address The Hardware address of this device as seen by other devices on the Internal LAN IP Address The IP Address of this device as seen by other devices on the Inter nal LAN Network Mask The Network Mask Subnet Mask for the IP Address above DHCP Server This shows the status of the DHCP Server function The value will be Enabled or Disabled DHCP Table IP Address The IP Address which h
21. click Clear Form to remove the existing information shown on screen Click the Save button when finished To Change Access for an Existing Group Select the group from the drop down box click Get Data to view their information then change any fields you wish Click Save when finished To Assign PCs to a Security Group All PCs are initially in the Everyone group Use the PCs screen to move individual PCs to other groups as required 44 CNet Technology Inc Data Access Control The following data is required Access Rights Internet Access for this Group No restrictions Block all Access Use Packet Filter Table below No packets are blocked Use this to create an Unlimited Access group or to temporarily remove restrictions Group members cannot access the Internet at all Use this to create the most restrictive group Use this to define intermediate levels of access Using the Packet Filter table gives you fine control over Internet access Simply select the items you wish to block You can choose from the pre defined filters in the Applications to Block column or your own filters in the TCP Packets to Discard and UPD Packets to Discard column Packet Filter Table Applications to Block TCP Packets to Discard UDP Packets to Discard Any items checked will be blocked Users will not be able to use the application This lists any TCP filters you have defined on the Filters screen If no filters
22. ction to ISP or remote LAN PPPoE PPP Over Ethernet Configure Figure 6 WAN Screen Tip If your connection documentation does not refer to PPPoE select Direct Connection WAN Direct Connection WAN This data is supplied by your ISP Direct Some ISP s may require you to use a particular Host name or may need to know the Hardware MAC Connection parma Device ID Device Host Name Hardware MAC Address 00 cO 02 07 13 03 IP Address Dynamic IP Address DHCP Client Fixed IP Address IP Address E Network Mask po po Gateway Pp IP Address Retrieve Defaults Save Cancel Figure 7 WAN Direct Connection If you selected Direct Connection a screen like the example above will be shown Data WAN Direct Connection Device ID Device Host Normally there is no need to change the default name but if your ISP Name requests that you use a particular Hostname enter it here This name will be provided to and recorded by the remote DHCP Server 13 CNet Technology Inc Hardware MAC Address IP Address Dynamic IP Address DHCP Client Fixed IP Address Buttons Retrieve Defaults Save Cancel Note Broadband Router User Guide Also called Network Adapter Address or Physical Address Provide this value to your ISP if requested If you did not provide this value when first connected there is no need to provide it now L
23. dard server types The only data required is the IP Address of the server on your LAN e User defined Non standard servers You must provide additional information about the server Note The TOTAL number of Virtual Servers which can be used at any time is 10 37 CNet Technology Inc Broadband Router User Guide Virtual Server Configuration The Virtual Servers screen 1s reached by the Advanced Internet Virtual Servers link An example screen 1s shown below Virtual Servers _ Allow access to Servers on your LAN From the Internet ALL Servers appear to have the WAN IP Address below ae LL This address is allocated by your ISP It is better to have a fixed IP Address alta DNS Ka Finger fff FTP o E fo fo fo Gopher E a pf fo Mail POP3 E a a gt News fof Telnet E o o fo fo e ee wos r POP e e Figure 22 Virtual Server Screen Data WAN IP Address e This shows the IP Address which Internet users must use to connect to any of your Virtual Servers e To Internet Users ALL your Virtual Servers have the same IP Address e This IP Address is allocated by your ISP It is better to have a fixed IP Address Type Select the type of Server you wish to use Enable Check to enable this Server LAN IP Address e Enter the IP Address of a PC on your LAN e You must install and configure the appropriate Server software on the PC entered here e
24. down box click Get Data to view the information and confirm that this is the correct PC then click the Delete button e To Change an Existing PC s Details Select the PC from the drop down box click Get Data to view their information then change any fields you wish Click Update when finished e To Generate a List of all PCs Just click on the List All button 46 CNet Technology Inc Data PC Name Network Adapter Address Reserve entry in Access Control Enter a name to identify this PC Hardware address for this PC You can use the Windows Winipcfg program or your LAN management program to find this address Check this if you wish to reserve an IP address for this PC This is DHCP Table useful if you have to provide the IP Address for other programs or users If this is left unchecked the following entry can be ignored Reserved This relates to the entry above Enter the reserved address here This IP Address MUST be within the range used by the DHCP server set on the Device Internal LAN Port screen Security Group Select the security group for this PC If you only wish to reserve an IP Address and are not using the security access control features simply leave this at Everyone The Filters screen is reached from the Access Control link on the navigation bar An example screen is shown below Create additional filters by defining packets to be Filtered Out This is optional Filters T
25. e For internal users the Broadband Router acts as a transparent proxy server translating the multiple internal IP addresses into a single external IP address For external requests any attempt to connect to local resources are blocked The Broadband Router will not reverse translate from a global IP address to a local IP address This type of natural firewall provides an impregnable barrier against malicious attacks Package Contents The following items should be included e The Broadband Router Unit e Power Adapter e Quick Installation Guide e CD ROM containing the on line manual If any of the above items are damaged or missing please contact your dealer as soon as possi ble CNet Technology Inc Physical Details Please take a few minutes to familiarize yourself with the Broadband Router Top Mounted LEDs There are 2 LEDs on the top of the unit The DATA STATUS LAN LED has 2 colors Green and Orange Operation of these LEDs is as follows DATA STATUS LAN On Green Normal start up power on sequence or idle is The Data Status LED will flash under the following conditions e Flashing Green The Data Status LED will flash when data 1s transmitted or received through the LAN ports e Flashing Orange Green Orange Hardware error Contact your dealer for technical support DATA WAN On Normal start up power ON sequence or idle ore Flashing The Data LED will flash wh
26. e 1 PC can use each Special Application Note Special Applications Screen This screen can be reached by selecting Special Internet Applications An example screen is shown below Special Enable existing Special Applications or create i i your own If an application still does not work use Appl ications the DMZ feature Select Entry Name auicktime y Click Get Data to see correct data for selected application Name fine l Enable Outaoin Protocol TCP gond Dort Range a Finish 554 Protocol Incamin i oie sot Finish 6999 Clear Porm i Dae Ute ata Cue Figure 20 Special Applications Screen Using a Special Application e Ensure that Special Applications has been enabled on the Advanced Internet screen e Configure the Special Applications screen as required BS Configuration data must be obtained from the Service Application provider Note If an application still cannot function correctly try using the DMZ feature Some Special Applications have been defined not enabled 35 CNet Technology Inc Broadband Router User Guide e To Enable a defined Application Select it from the drop down list Click Get Data Check the Enable checkbox Click Update e To Disable a defined Application As above but uncheck the Enable checkbox e To Delete a defined Application Select it from the drop down list Click Delete e To Modify Edit a defined Appli
27. eave this enabled if you want your ISP to allocate an IP Address to the Broadband Router upon connection Select this if using a fixed IP Address If this option is selected the following data must be entered e IP Address If connecting to an ISP this is the address allocated by the ISP If connecting to another LAN this must be a valid address on the ex ternal LAN e Network Mask This must be compatible with the IP Address above e Gateway IP Address The address of the router or gateway either on the external LAN or supplied by your ISP DNS IP Address At least 1 DNS IP Address is required and should be provided by your ISP DNS settings are on the LAN screen Get the default Device Name and clear the other items No changes are made to the configuration until you click the Save button Save any data you have entered on this screen Remember to save before changing to another screen Cancel any data you have entered since the last Save operation If using Dynamic IP Address the IP Address Network Mask and Gateway fields may dis play the values obtained dynamically 14 CNet Technology Inc Configuration WAN PPPoE If you selected PPPoE on the WAN screen the display will be like the following example WAN If your ISF uses PPPoE PPP over Ethernet they will PPPoE supply the required data Accountillser Mame guest Account Password verify password me IF Address provided by ISP I
28. ection attempt has been triggered by the Connect on De Demand mand setting Manual connection Connection attempt started by the Connect button Reset physical Preparing line for connection attempt connection Connecting to remote Attempting to connect to the ISP s server server Remote Server ISP s Server has responded to connection attempt located Start PPP Attempting to login to ISP s Server and establish a PPP connection PPP up successfully Able to login to ISP s Server and establish a PPP connection Idle time out reached The connection has been idle for the time period specified in the Idle Time out field The connection will now be terminated Disconnecting The current connection is being terminated due to either the Idle Time out above or Disconnect button being clicked Error Remote Server ISP s Server did not respond This could be a Server problem or a not found problem with the link to the Server Error PPP Connec Unable to establish a PPP connection with the ISP s Server This tion failed could be a login problem name or password or a Server problem Error Connection to The existing connection has been lost This could be caused by a Server lost power failure a link failure or Server failure Error Invalid or The data received from the ISP s Server could not be processed unknown packet type This could be caused by data corruption from a bad link or the Server using a protocol whi
29. elect the Connection tab and click the Setup button 3 Select I want to set up my Internet connection manually or I want to connect through a local area network LAN and click Next 4 Select I connect through a local area network LAN and click Next Ensure all of the boxes on the following Local area network Internet Configuration screen are unchecked 6 Check the No option when prompted Do you want to set up an Internet mail account now Click Finish to close the Internet Connection Wizard Then simply use your Browser FTP client or other Internet client to connect to the desired Internet site Accessing AOL To access AOL America On Line through the Broadband Router the AOL for Windows software must be configured to use TCP IP network access rather than a dial up connection The configuration process is as follows e Start the AOL for Windows communication software Ensure that it is Version 2 5 3 0 or later This procedure will not work with earlier versions e Click the Setup button e Select Create Location and change the location name from New Locality to Broadband Router e Click Edit Location Select TCP IP for the Network field Leave the Phone Number blank e Click Save then OK Configuration is now complete e Before clicking Sign On always ensure that you are using the Broadband Router location 24 CNet Technology Inc PC Configuration Macintosh Configu
30. en data is transmitted or received through the WAN port Rear Panel DIP LAN Port 10 100 BaseT Uplink WAN Reset Power switches T LAN pees tT i button Input i DIP switches LAN Port LEDs Link Act LAN Port LEDs 100 10 100BaseT LAN Connectors Uplink Port q gt SALLIT is os o 0000 i Uplink a port LED Figure 2 Rear Panel Refer to the following table for DIP switch operation On The Router is successfully connected to a device through the corresponding port 1 2 3 or 4 Flashing Transmitting or receiving data over that port On LAN port connection is using a 100BaseT connection Off Port is unused or using 10BaseT connection Use standard LAN cables RJ45 connectors to connect your PCs ot these ports Both 10BaseT and 100BaseT connections can be used simultaneously If Port 4 is used the Uplink port can NOT be used Use the Uplink port ONLY to connect via a normal LAN cable to a normal port on another hub If the Uplink port is used Port 4 can NOT be used C Net Technology Inc Introduction WAN port Comnect the ADSL or Cable Modem here If your modem came 10BaseT with a cable use the supplied cable Otherwise use a standard LAN cable WAN Port LED Flashing data 1s being transmitted or received via the WAN port OFF no data 1s being transferred Reset Button When pressed and released the Broadband Router wil
31. ess account with an ISP Installation Procedure WAN Port Existing Connection To PCs Figure 3 Installation Diagram 1 Choose an Installation Site Select a suitable place on the network to install the Broadband Router Ensure the Broadband Router and the Cable DSL modem are powered OFF 2 Connect LAN Cables Use standard LAN cables to connect PCs to the Switching Hub ports LAN ports on the Broadband Router Both 10BaseT and 100BaseT connections can be used simultaneously If required connect the Broadband Router s Uplink port to a standard port on another hub A standard LAN cable should be used Note If the Uplink port is used Port 4 can NOT be used CNet Technology Inc Installation 3 Connect ADSL or Cable Modem Connect the ADSL or Cable modem to the WAN port on the Broadband Router Use the cable supplied with your modem If no cable was supplied use a standard LAN cable 4 Power Up Connect the supplied power adapter and power up Use only the power adapter provided Using a different one may cause hardware damage 5 Check the LEDs When the Broadband Router is powered On the DATA STATUS LAN LED should flash then turn on If it stays flashing in Green and Orange there is a hardware error For more information refer to Top Mounted LEDs in Chapter 1 Chapter 3 Configuration This Chapter provides details of the configuration process Overview This chapter describes the procedure
32. ess they assigned to the Broadband Router Bindings Advanced NetBIOS DNS Configuration Gateway WINS Configuration IPAddress The first gateway in the Installed Gateway list will be the default The address order in the list will be the order in which these machines are used New gateway 192 166 0 1 Installed gateways EN Figure 14 Gateway Tab Win 95 98 22 CNet Technology Inc PC Configuration e On the DNS Configuration tab ensure Enable DNS is selected If the DNS Server Search Order list is empty enter the DNS address provided by your ISP in the fields beside the Add button then click Add TCP IP Properties Px Gateway WINS Configuration IF Address Bindings Advanced NetBIOS DNS Configuration C Disable DNS Enable ONS Host Domain os Server Search O rder ae Add NETOS Figure 15 DNS Tab Win 95 98 If your LAN has a Router the LAN Adminis trator must re configure the Router itself Note Refer to Chapter 6 Routing for details 23 CNet Technology Inc Broadband Router User Guide Internet Access Configuration If you are using the Broadband Router for Internet access e Ensure that the DSL modem Cable modem or other permanent connection is functional e Use the following procedure to configure your Browser to access the Internet via the LAN rather than by a Dial up connection Select Start Menu Settings Control Panel Internet Options S
33. et the range of IP Addresses allocated to PCs by the DHCP Server function BS You can assign Fixed IP Addresses to some devices while using DHCP provided that the Fixed IP Addresses Note are NOT within the range used by the DHCP Server Using another DHCP Server You can only use one 1 DHCP Server If you wish to use another DHCP Server rather than the Broadband Router s the following procedure is required 1 Disable the DHCP Server feature in the Broadband Router This setting is on the LAN screen 2 Configure the DHCP Server to provide the Broadband Router s IP Address as the Default Gateway 26 CNet Technology Inc DHCP To Configure your PCs to use DHCP This is the default setting for TCP IP under Windows 95 98 ME In Windows the DHCP Client setting is called Obtain an IP Address Automatically See Chapter 4 PC Configuration for the procedure to check these settings 27 Chapter 6 Routing This Chapter explains the Routing features of the Broadband Router Overview While the Broadband Router includes a standard static routing table this feature can be completely ignored if you do not have a router in your LAN If you DO have a router it is necessary to configure BOTH the Router and the Routing table in the Broadband Router correctly as described in the following sections BES See Routing Example later in this Chapter for an example of configuring both the Note Broadband Router and t
34. for e LAN setup e WAN port configuration for Internet Access PCs on your local LAN may also require configuration For details see Chapter 4 PC Con figuration Other configuration may also be required depending on which features and functions of the Broadband Router you wish to use Use the table below to locate detailed instructions for the required functions Configure PCs on your LAN Chapter 4 PC Configuration Learn more about using DHCP on the internal LAN Chapter 5 DHCP Configure the Broadband Router and routers fora LAN which Chapter 6 has 1 or more routers Routing Set a password for the Broadband Router or disable NAT Chapter 7 Network Address Translation Options Use any of the following features Chapter 8 Advanced Internet Features e Special Internet Applications e Virtual Servers e DMZ Limit Internet Access by individual PCs Chapter 9 Access Control Where use of a certain feature requires that PCs or other LAN devices be configured this Motel is also explained in the relevant chapter CNet Technology Inc Configuration Configuration Program The Broadband Router contains a HTTP server This enables you to connect to it and config ure it using your Web Browser Most Browsers should work provided they support HTML tables and forms Preparation Before attempting to configure the Broadband Router please ensure that e Your PC can establish a physical connection to the Broadba
35. have been defined this is empty Multiple items can be selected or deselected by holding down the Ctrl key while selecting items Selected items can NOT be accessed by members of this group This lists any UDP filters you have defined on the Filters screen If no filters have been defined this is empty Multiple items can be selected or deselected by holding down the Ctrl key while selecting items Selected items can NOT be accessed by members of this group BS If you have not defined your own filters but wish to do so refer to Filters on Note page 47 45 CNet Technology Inc Broadband Router User Guide PCs The PCs screen is reached from the Access Control link on the navigation bar An example screen 1s shown below PCs PC Name Casual Click Get Data to see correct data for selected PC Mame Casual Network Adapter Address AA45BC8F4821 Do not use any separators 2 or in this address MY Reserve entry in DHCP Table Reserved IP Address 192 1168 lo 90 security Group Group 4 Clear Form Add Delete Update List All Cancel Figure 26 PCs Screen Note that the drop down box lists all PCs previously entered If none have been entered this box will be empty Operations e To Add a New PC Ignore the drop down box click the Clear Form button and enter the PC details in the fields provided Click Add when finished e To Delete an Existing PC Select the PC from the drop
36. he Router Broadband Router Configuration The routing table is accessed by the Routing link on the Home screen An example screen is shown below Routing Select Entry 1 255 255 255 255 1 2 255 255 255 255 2 Get Data Destination IP Address h92 fies o ft Network Mask 255 loss 255 bo Gateway IP Address bo b lo bo Interface LAN Metric ho Clear Form Add Delete Update ListAll Cancel Figure 16 Routing Screen Using this Screen e Any existing entries are listed e To view and edit the details of an existing entry select it and click Get Data After making any changes click the Update button to save your changes e To add a new entry click Clear Form enter your data then click the Add button 28 CNet Technology Inc Routing Routing Table Data An entry in the routing table is required for each LAN segment on your Network other than the segment to which this device is attached The data in the Routing Table is as follows Destination The network address of the remote LAN segment IP Address For standard class C LANs the network address 1s the first 3 fields of this Destination IP Address The 4 last field can be left at 0 Network Mask The Network Mask used on the remote LAN segment For class C networks the standard Network Mask is 255 255 255 0 Gateway The IP Address of the Router on the LAN segment to which this
37. ing DHCP server must be re configured See Chapter 5 for further details The ZP Start Address and IP Finish Address fields set the values used by the DHCP server This range also determines the number of DHCP clients supported Maximum 253 DNS Domain Name Server DNS Domain Name Server IP Addresses Routing Table Routing Table You do NOT need to enter DNS addresses UNLESS you are using a Fixed IP Address on the WAN port Your ISP has allocated you a fixed IP Address In this case your ISP should recommend a DNS You need to enter that address or addresses here If using a Dynamic IP Address DHCP Client on the WAN port the DNS entries are optional Multiple DNS entries should be entered in the order you want them accessed The first available DNS will be used If your LAN contains an existing Router or Routers refer to Chapter 6 Routing 12 CNet Technology Inc Configuration WAN Configuration To configure the WAN port e Select WAN from the menu e Select the appropriate connection type Direct Connection or PPPoE on the screen below then Click the Configure button WAN The WAN portis used to connect to the Internet remote LAN or WAN The required configuration depends on the access method used Direct Connection is more common if the data from your ISP does not yao see mention PPPoE select Direct Connection Click Configure to continue Direct Conne
38. l reboot restart Power port 12V Connect the supplied power adapter here DIP Switches D Normal Operation DHCP Server function disabled Used to restore Default IP Address and clear Password See below Normal Operation Restore Default IP Address and Clear Password If the Broadband Router s IP Address or password is lost the following procedure can be used to recover from this situation l PA 3 4 sequence e OFF e ON e OFF Turn the power to the Broadband Router OFF Set DIP switch 1 ON Turn the power to the Broadband Router ON Operate DIP switch 1 in the following sequence you have 15 seconds to complete the The Broadband Router will now reset and the Yellow Status LED flash The following changes will have been made Other configuration data is unchanged e IP Address set to its default value of 192 168 0 1 e Network Mask set to 255 255 255 0 e DHCP Server is enabled and will allocate IP Addresses in the range 192 168 0 2 to 192 168 0 51 e The password cleared no password required You can now connect to the Broadband Router and make any configuration changes Chapter 2 Installation This Chapter covers the physical installation of the Broadband Router Requirements e Ethernet LAN 10 100BaseT and the TCP IP protocol e For Internet Access a DSL or Cable modem and an Internet Acc
39. ll does not function properly contact your dealer for further advice General Problems Problem 1 Can t connect to the Broadband Router to configure it Solution 1 Check the following e The Broadband Router is properly installed LAN connections are OK and it is powered ON e Ensure that your PC and the Broadband Router are on the same network segment If you don t have a router this must be the case e Ensure that your PC is using an IP Address within the range 192 168 0 2 to 192 168 0 254 and thus compatible with the Broadband Router s default IP Address of 192 168 0 1 Also the Network Mask should be set to 255 255 255 0 to match the Broadband Router In Windows you can check these settings by using Control Panel Network to check the Properties for the TCP IP protocol CNet Technology Inc Broadband Router User Guide Internet Access Problem 1 When I enter an URL or IP address I get a time out error Solution 1 A number of things could be causing this Try the following troubleshoot ing steps e Check if other PCs work If they do ensure that your PCs IP settings are correct IP address Network Mask Default gateway and DNS e Ifthe PCs are configured correctly but still not working check the Broadband Router Ensure that it is connected and ON Connect to it and check its settings and status If you can t connect to it check the LAN and power connections e Ifthe Broadband Router is configured cor
40. n like the following DMZ Because of the security risk involved in using this feature tt should be activated only when necessary C Enable DMZ feature Enter the local IP Address of the DMZ device or PC It is better if this PC has a fixed IP Address rather than be acting as a DHCP client LAN IP Address fo fo fo fo Current IP Address to connect to the DMZ PC 210 241 226 155 This address is allocated by your ISP It is better to have a fixed IP Address Save Cancel HEALS Figure 24 DMZ Screen 41 CNet Technology Inc Broadband Router User Guide Data Enable Enable DMZ Use this to Enable or Disable the DMZ feature The DMZ feature Feature should be disabled when not required LAN IP Address LAN IP Address Enter the IP Address of the PC on your LAN which will become the DMZ PC If using DHCP the LAN IP Address of a PC may change To solve this problem you can use either of these methods e Assign a fixed IP Address to the DMZ PC ensuring that its IP Address is NOT within the address range allocated by the DHCP Server e Reserve an IP Address for the DMZ PC in the DHCP Server using the Access Control PC screen WAN IP Address WAN IP Address This is the IP Address Internet users must use to connect to the DMZ PC This IP Address is allocated by your ISP It is better if you are using a fixed IP Address so that it never changes This will make it easier for Internet users
41. nd Router The PC and the Broadband Router must be directly connected using one of the Switching Hub ports on the Broadband Router or on the same LAN segment e The Broadband Router must be installed and powered ON e Ifthe Broadband Router s default IP Address 192 168 0 1 is already used by another device the other device must be turned OFF until the Broadband Router is allocated a new IP Address during configuration Connecting to the Broadband Router To establish a connection from your PC to the device 1 After installing the Broadband Router in your LAN start your PC If your PC is already running restart it 2 Start your WEB browser 3 Inthe Address box enter HTTP and the IP Address of the Broadband Router as in the following example which uses the Broadband Router s default IP Address HTTP 192 168 0 1 4 Ifyou have assigned a password to the Broadband Router you will be prompted for the password as shown below If no password has been set this dialog will not appear e Leave the User Name blank e Enter the password for this device if one has been set Enter Network Password lx Please enter your authentication information Resource MeedPassword Username Password Figure 4 Password Dialog 5 You should then see the LAN screen See the following section for the available options and configuration screens Cancel dl CNet Technology Inc Broadband Router User Guide If y
42. oadband Router can be managed from a workstation anywhere on the LAN using a WEB browser Advanced Internet Functions Virtual Servers This feature allows Internet users to access Internet servers on your LAN The required setup is quick and easy User Defined Virtual Servers Internet users can access non standard Internet Servers on your LAN by using this feature Special Internet Applications Internet applications such as Internet Videoconferenc ing Telephony Games Servers and other special purpose Servers are supported DMZ One 1 PC on your local LAN can be configured to allow unrestricted 2 way communication with Servers or individual users on the Internet Security Features Configuration Data Optional password protection is provided to prevent unauthorized users from modifying the configuration Access Control Features The LAN Administrator can limit Internet access by individ ual PCs Firewall Protection All incoming data packets are monitored and all incoming server requests are filtered thus protecting your network from malicious attacks from external sources This protection is lost if NAT is disabled CNet Technology Inc Introduction NAT Firewall Protection The firewall protection provided by the Broadband Router is an intrinsic side effect of NAT Network Address Translation All users on the LAN share a single external IP address From the external viewpoint there is no network only a single devic
43. ou can t connect If the Broadband Router does not respond check the following e The Broadband Router is properly installed LAN connection is OK and it is powered ON Ensure that your PC and the Broadband Router are on the same network segment If you don t have a router this must be the case If your PC is using a fixed IP Address its IP Address must be within the range 192 168 0 2 to 192 168 0 254 to be compatible with the Broadband Router s default IP Address of 192 168 0 1 Also the Network Mask must be set to 255 255 255 0 See Chapter 4 PC Configuration for details on checking your PC s TCP IP settings Navigation amp Data Input e Use the menu bar on the left of the screen and the Back button on your Browser for navigation e Changing to another screen without clicking Save does NOT save any changes you may have made You must Save before changing screens or your data will be ignored On each screen clicking this icon will display help for that screen 10 CNet Technology Inc Configuration LAN Screen The LAN screen like the example below will be displayed when you first connect LAN IP Address 192 1168 bo ho Network Mask 55 255 255 b Operation C Enable Disable LAN Start IP Address h92 fies p fu Status Finish IP Address rez fies fo 60 WAN Status DNS Domain Mame Server is required only when using a Fixed IP Address
44. p BS You can limit Internet access for ALL PCs without entering ANY PC data Simply apply the desired Note restrictions to the Everyone group It is also possible to define your own packet filters and use these filters in addition to the pre defined filters Defining your own filters is optional 43 CNet Technology Inc Broadband Router User Guide S ecurity Groups The Security Groups screen 1s reached from the 4ccess Control link on the navigation bar An example screen 1s shown below security Set restrictions on each Security Group Groups The Everyone Group should be the MOST restrictive Group Security Group Select Group Everyone Get Data Click Get Data to see correct data for selected group Internet Access for this Group Access Rights C No restrictions C Block all Access C Use Packet Filter Table below Check the items you wish to black discard Applications TCP Packets to Discard to Block select items to black Created in Admininstrator Defined Filters UDP Packets to Discard select items to black Created in Administrator Defined Filters Clear Form Save Cancel Figure 25 Security Groups Screen Note that the Security groups are pre named Everyone Group 1 Group 2 Group 3 and Group 4 Operations To Define a Security Group Select the group from the drop down box then enter the required data If necessary
45. ration You can access the Internet via the Broadband Router The procedure is as follows Open the TCP IP Control Panel Select Ethernet from the Connect via pop up menu 3 Select Using DHCP Server from the Configure pop up menu The DHCP Client ID field can be left blank 4 Close the TCP IP panel saving your settings Note If using manually assigned IP addresses instead of DHCP the only change required is to set the Router Address field to the Broadband Router s IP Address 25 Chapier 5 DHCP This Chapter covers the use of DHCP using either an existing DHCP Server or the Broadband Router s DHCP Server function Overview If your LAN does not use DHCP and you do not wish to use DHCP you can ignore this chapter What DHCP Does A DHCP Dynamic Host Configuration Protocol server allocates a valid IP address to a DHCP client PC or device upon request e The client request is made when the client device boots e The DHCP Server provides the Gateway and DNS addresses to the client as well as allocating an IP Address e Windows 95 98 ME include all the software required to act as a DHCP client This is the default Windows setting for TCP IP e The Broadband Router can act asa DHCP server Using the Broadband Router s DHCP Server This is the default setting The DHCP Server settings are on the LAN screen On this screen you can e Enable or Disable the Broadband Router s DHCP Server function e S
46. rectly check your Internet connection DSL Cable modem etc to see that it is working correctly Problem 2 Some applications do not run properly when using the Broadband Router Solution 2 The Broadband Router processes the data passing through it so it is not transparent Use the Special Applications feature to allow the use of Internet applica tions which do not function correctly If this does solve the problem you can use the DMZ function This should work with almost every application but e Itis a security risk since the firewall is disabled e Only one 1 PC can use this feature e When the DMZ feature is being used the Special Applications and Virtual Server features should be disabled 50 Appendix B specifications Broadband Router Model Broadband Router Dimensions 204mm L 127mm W 29mm H Operating 0 Cto 40 C Temperature Storage 10 Cto 70 C Temperature Network Protocol TCP IP Network Interface 6 Ethernet 4 10 100BaseT RJ45 auto Switching Hub ports for LAN devices 1 10 100BaseT RJ45 Uplink port 1 10BaseT RJ45 for WAN LEDs 11 LEDs 1 WAN Link Green 4 LAN Link Act Green 4 LAN 100 Green 1 WAN Data Green 1 Data Status LAN Green Orange External Power 12 V DC 1 5A Adapter FCC Statement This device complies with Part 15 of the FCC Rules Operation is subject to the following two conditions 1 This device may not cause harmful inte
47. rference 2 This device must accept any interference received including interference that may cause undesired operation CE Marking Warning This is a Class B product In a domestic environment this product may cause radio interference in which case the user may be required to take adequate measures 51
48. rol center An example screen 1s shown below Advanced These features are optional and should be disabled when not required Use the links to Internet configure each feature Configure this device to allow use of non standard Internet applications such as Video canferencing way communication and Games Servers Special Internet Applications Allow Internet users to access Servers on your LAWN Virtual Servers Without this feature access would be blocked by the Firewall in this device User Defined Define non standard Virtual Servers using port numbers Virtual Servers Allows unrestricted way Internet communication by 1 computer special Internet Applications Enable Disable Virtual Servers C Enable Disable DMZ C Enable Disable Cancel Figure 19 Advanced Internet Screen Operation On this screen you can enable any required feature By default all features are disabled 34 CNet Technology Inc Advanced Internet Special Internet Applications This feature is only required if you wish to use Internet applications which require 2 way communication multiple connections or combined TCP UDP connections Examples of such applications are Internet Videoconferencing Telephony Games Servers and other special purpose Servers Generally you will become aware of the need for this feature when an Internet application is unable to function correctly LES At any time only on
49. rovides a dynamic IP address to PCs and other devices upon request The Broadband Router can act as a DHCP Server for devices on your local LAN DHCP Client Support On the WAN port the router can act as a DHCP Client This allows the use of dynamic IP Addresses on the External LAN or WAN Multi Segment LAN Support LANs containing one or more segments are supported via the Broadband Router s built in static routing table If NAT Network Address Transla tion 1s disabled the Broadband Router will function as a static router CNet Technology Inc Broadband Router User Guide Internet Access Features Shared Internet Access All users on the LAN can access the Internet through the Broadband Router using only a single external IP Address The local invalid IP Ad dresses are hidden from external sources This process is called NAT Network Address Translation ADSL amp Cable Modem Support The Broadband Router has a 10BaseT Ethernet port for connecting an ADSL or Cable Modem All popular ADSL and Cable Modems are sup ported PPPoE Support Connect to your ISP using PPPoE PPP over Ethernet if your ISP uses this method Fixed or Dynamic IP Address On the WAN connection the Broadband Router supports both Dynamic IP Address IP Address is allocated on connection and Fixed IP Address Configuration amp Management Easy Setup Use your WEB browser from anywhere on the LAN for configuration Remote Management The Br
50. use a different port address BS From the Internet ALL Virtual Servers have the IP Address allocated by your ISP as shown by Note the WAN IP Address Connecting to the Virtual Servers Once configured anyone on the Internet can connect to your Virtual Servers They must use the WAN Port IP Address the IP Address allocated to this device by your ISP e g HEE De 203 2702917 252 PED 7 203 470 2120 52 It is more convenient if you are using a Fixed IP Address from your ISP rather than Dynamic If using a Fixed IP Address it is entered on the WAN screen 40 CNet Technology Inc Advanced Internet This feature if enabled allows one 1 computer on your LAN to be exposed to all users on the Internet allowing unrestricted 2 way communication between the DMZ PC and other Internet users or Servers This allows connection to special purpose servers which require proprietary client software or 2 way user connections such as Video conferencing which requires both users to run special software LES To allow unrestricted access the Firewall in this device is disabled creating a security risk Note You should use this feature only if the Special Applications feature is insuffi cient to allow an application to function correctly This feature should be turned ON only when needed and left OFF the rest of the time Configuring the DMZ Select Advanced Internet from the navigation bar then DMZ You will see a scree
51. w Password and Verify Password input fields When prompted for the password leave the User Name blank Motel 32 CNet Technology Inc Options NAT Network Address Translation NAT allows PCs on your LAN to share a single external Internet IP Address This IP Address is supplied by your ISP Use the following to determine whether or nor you need NAT e For Internet access NAT must be left On unless all PCs on your LAN have valid external IP Addresses e If this device is not being used to provide shared Internet access NAT is not normally required With NAT disabled the Broadband Router will act as a static router If NAT is disabled the Firewall protection provided by the Broadband Router is lost and the Advanced Internet features Virtual Servers Special Applications and DMZ are no longer available TFTP TFTP Trivial FTP can be used to upgrade the firmware in the Broadband Router However this 1s not normally required there 1s a Windows utility available for this purpose Remote Management This feature allows you to manage the Broadband Router via the Internet Enable Remote Man Enable to allow management via the Internet If Disabled this agement device will ignore management connection attempts from the WAN port Port Number Enter a port number between 1024 and 65535 8080 is recom mended This port number must be specified when you connect see below Note The default port number for

CNet Technology CNIG904S User's Manual

Contents

Download Pdf Manuals

Related Search

Related Contents