User manual COMET LABS RF30

Model : RF30 User Manual V5.0 User Manual v5.0 1 / 203 RF30 User's Manual (Updated December 14, 2005) Copyright Information © 2005 Cometlabs Electric Corporation, Ltd. The contents of this publication may not be reproduced in whole or in part, transcribed, stored, translated, or transmitted in any form or any means, without the prior written consent of Cometlabs Electric Corporation. Published by Cometlabs Electric Corporation. All rights reserved. Cometlabs does not assume any liability arising out of the application of use of any products or software described herein. Neither does it convey any license under its patent rights nor the patent rights of others. Cometlabs reserves the right to make changes in any products described herein without notice. This publication is subject to change without notice. Trademarks Mac OS is a registered trademark of Apple Computer, Inc. Windows 98, Windows NT, Windows 2000, Windows Me and Windows XP are registered trademarks of Microsoft Corporation. User Manual v5.0 2 / 203 Safety Warnings Your RF30 is built for reliability and long service life. For your safety, be sure to read and follow the following safety warnings. Read this installation guide thoroughly before attempting to set up your RF30. Your RF30 is a complex electronic device. DO NOT open or attempt to repair it yourself. Opening or removing the covers can expose you to high voltage and other risks. In the case of malfunction, turn off the power immediately and have it repaired at a qualified service center. Contact your vendor for details. Connect the power cord to the correct supply voltage. Carefully place connecting cables to avoid people from stepping or tripping on them. DO NOT allow anything to rest on the power cord and DO NOT place the power cord in an area where it can be stepped on. DO NOT use the RF30 in environments with high humidity or high temperatures. DO NOT use the same power source for the RF30 as other equipment. DO NOT use your RF30 and any accessories outdoors. If you wall mount your RF30, make sure that no electrical, water or gas pipes will be damaged during installation. DO NOT install or use your RF30 during a thunderstorm. DO NOT expose your RF30 to dampness, dust, or corrosive liquids. DO NOT use your RF30 near water. Be sure to connect the cables to the correct ports. DO NOT obstruct the ventilation slots on your RF30 or expose it to direct sunlight or other heat sources. Excessive temperatures may damage your device. DO NOT store anything on top of your RF30. Only connect suitable accessories to your RF30. Keep packaging out of the reach of children. If disposing of the device, please follow your local regulations for the safe disposal of electronic products to protect the environment. User Manual v5.0 3 / 203 TABLE OF CONTENT CHAPTER 1: INTRODUCTION.............................................................................10 1.1 OVERVIEW .......................................................................................................10 1.2 PRODUCT HIGHLIGHTS ...................................................................................10 1.2.1 INCREASED BANDWIDTH, SCALABILITY AND RESILIENCE .........................10 1.2.2 VIRTUAL PRIVATE NETWORK SUPPORT ......................................................10 1.2.3 ADVANCED FIREWALL SECURITY............................................................... 11 1.2.4 INTELLIGENT BANDWIDTH MANAGEMENT ................................................ 11 1.3 PACKAGE CONTENTS .......................................................................................12 1.3.1 FRONT PANEL ............................................................................................12 1.3.2 REAR PANEL ..............................................................................................12 1.3.3 RACK MOUNTING ......................................................................................13 1.3.4 CABLING ...................................................................................................14 CHAPTER 2: ROUTER APPLICATIONS.............................................................15 2.1 OVERVIEW .......................................................................................................15 2.2 BANDWIDTH MANAGEMENT WITH QOS .........................................................15 2.2.1 QOS TECHNOLOGY....................................................................................15 2.2.2 QOS POLICIES FOR DIFFERENT APPLICATIONS...........................................16 2.2.3 GUARANTEED / MAXIMUM BANDWIDTH ...................................................18 2.2.4 POLICY BASED TRAFFIC SHAPING .............................................................19 2.2.5 PRIORITY BANDWIDTH UTILIZATION .........................................................20 2.2.6 MANAGEMENT BY IP OR MAC ADDRESS................................................... 20 2.2.7 DIFFSERV (DSCP MARKING) .....................................................................21 2.3 OUTBOUND TRAFFIC........................................................................................22 2.3.1 OUTBOUND FAIL OVER..............................................................................22 2.3.2 OUTBOUND LOAD BALANCING..................................................................23 2.4 INBOUND TRAFFIC ...........................................................................................24 2.4.1 INBOUND FAIL OVER .................................................................................24 2.4.2 INBOUND LOAD BALANCING .....................................................................25 2.5 DNS INBOUND..................................................................................................26 2.5.1 DNS INBOUND FAIL OVER ........................................................................27 2.5.2 DNS INBOUND LOAD BALANCING ............................................................28 2.6 VIRTUAL PRIVATE NETWORKING....................................................................30 User Manual v5.0 4 / 203 2.6.1 GENERAL VPN SETUP ...............................................................................30 2.6.2 VPN PLANNING - FAIL OVER ....................................................................32 2.6.3 CONCENTRATOR ........................................................................................33 3.1 OVERVIEW .......................................................................................................34 3.2 BEFORE YOU BEGIN ........................................................................................34 3.3 CONNECTING YOUR ROUTER ..........................................................................35 3.4 CONFIGURING PCS FOR TCP/IP NETWORKING.............................................36 3.4.1 OVERVIEW.................................................................................................37 3.4.2 WINDOWS XP............................................................................................38 3.4.2.1 Configuring.......................................................................................38 3.4.2.2 Verifying Settings .............................................................................41 3.4.3 WINDOWS 2000 .........................................................................................45 3.4.3.1 Configuring.......................................................................................45 3.4.3.2 Verifying Settings .............................................................................49 3.4.4 WINDOWS 98 / ME ....................................................................................50 3.4.4.1 Installing Components ......................................................................50 3.4.4.2 Configuring.......................................................................................55 3.4.4.3 Verifying Settings .............................................................................59 3.5 FACTORY DEFAULT SETTINGS .........................................................................61 3.5.1 USER NAME AND PASSWORD ......................................................................61 3.5.2 LAN AND WAN PORT ADDRESSES............................................................62 3.6 INFORMATION FROM YOUR ISP......................................................................63 3.6.1 PROTOCOLS ...............................................................................................63 3.6.2 CONFIGURATION INFORMATION .................................................................64 3.6.2.1 Windows ...........................................................................................64 3.7 WEB CONFIGURATION INTERFACE .................................................................68 CHAPTER 4: ROUTER CONFIGURATION ........................................................69 4.1 OVERVIEW .......................................................................................................69 4.2 STATUS .............................................................................................................70 4.2.1 ARP TABLE ...............................................................................................71 4.2.2 ROUTING TABLE .........................................................................................72 4.2.3 DHCP TABLE .............................................................................................72 4.2.4 IPSEC STATUS.............................................................................................73 4.2.5 PPTP STATUS ............................................................................................73 4.2.6 TRAFFIC STATISTICS ..................................................................................74 4.2.7 SYSTEM LOG .............................................................................................74 User Manual v5.0 5 / 203 4.2.8 IPSEC LOG ................................................................................................75 4.3 QUICK START ...................................................................................................76 4.3.1 DCHP ........................................................................................................76 4.3.2 STATIC IP...................................................................................................77 4.3.3 PPPOE.......................................................................................................78 4.3.4 PPTP .........................................................................................................79 4.3.5 BIG POND ..................................................................................................80 4.4 CONFIGURATION..............................................................................................81 4.4.1 LAN..........................................................................................................82 4.4.1.1 Ethernet.............................................................................................82 4.4.1.2 DHCP Server ....................................................................................83 4.4.2 WAN .........................................................................................................85 4.4.2.1 ISP Settings.......................................................................................85 4.4.2.1.1 DHCP ........................................................................................87 4.4.2.1.2 Static IP .....................................................................................88 4.4.2.1.3 PPPoE........................................................................................89 4.4.2.1.4 PPTP Settings............................................................................90 4.4.2.1.5 Big Pond Settings......................................................................91 4.4.2.2 Bandwidth Settings ...........................................................................92 4.4.3 DUAL WAN ...............................................................................................93 4.4.3.1 General Settings................................................................................93 4.4.3.2 Outbound Load Balance ...................................................................94 4.4.3.3 Inbound Load Balance ......................................................................96 4.4.3.4 Protocol Binding ...............................................................................99 4.4.4 SYSTEM ...................................................................................................101 4.4.4.1 4.4.4.2 4.4.4.3 4.4.4.4 Time Zone .......................................................................................101 Remote Access................................................................................102 Firmware Upgrade ..........................................................................103 Backup / Restore.............................................................................104 Restart Router................................................................................105 4.4.4.6 Password ..........................................................................................106 4.4.4.7 System Log Server..........................................................................107 4.4.4.8 Email Alert......................................................................................108 4.4.5 FIREWALL ................................................................................................109 4.4.5.1 Packet Filter .................................................................................... 110 4.4.5.2 URL Filter....................................................................................... 111 4.4.5.3 LAN MAC Filter ............................................................................. 113 4.4.5.4 Block WAN Request....................................................................... 114 User Manual v5.0 6 / 203 4.4.5.5 Intrusion Detection .......................................................................... 114 4.4.6 VPN ......................................................................................................... 115 4.4.6.1 IPSec ................................................................................................ 115 4.4.6.1.1 IPSec Wizard............................................................................ 115 4.4.6.1.2 IPSec Policy ............................................................................. 119 4.4.6.2 PPTP ................................................................................................124 4.4.7 QOS.........................................................................................................126 4.4.8 VIRTUAL SERVER.....................................................................................129 4.4.8.1 DMZ ...............................................................................................130 4.4.8.2 Port Forwarding Table ....................................................................131 4.4.8.2.1 Port Range Mapping ...............................................................132 4.4.8.2.2 Port Redirection ......................................................................133 4.4.9 ADVANCED ..............................................................................................134 4.4.9.1 Static Route.....................................................................................134 4.4.9.2 Dynamic DNS.................................................................................135 4.4.9.3 Device Management .......................................................................137 4.5 SAVE CONFIGURATION TO FLASH.................................................................138 4.6 LOGOUT .........................................................................................................138 CHAPTER 5: TROUBLESHOOTING .................................................................139 5.1 BASIC FUNCTIONALITY .................................................................................139 5.1.1 ROUTER WON'T TURN ON.......................................................................139 5.1.2 LEDS NEVER TURN OFF..........................................................................139 5.1.3 LAN OR INTERNET PORT NOT ON ...........................................................140 5.1.4 FORGOT MY PASSWORD ..........................................................................140 5.2 LAN INTERFACE............................................................................................141 5.2.1 CAN'T ACCESS RF30 FROM THE LAN.....................................................141 5.2.2 CAN'T PING ANY PC ON THE LAN..........................................................141 5.2.3 CAN'T ACCESS WEB CONFIGURATION INTERFACE...................................141 5.2.3.1 Pop-up Windows.............................................................................143 5.2.3.2 Javascripts.......................................................................................144 5.2.3.3 Java Permissions .............................................................................145 5.3 WAN INTERFACE...........................................................................................146 5.3.1 CAN'T GET WAN IP ADDRESS FROM THE ISP.........................................146 5.4 ISP CONNECTION ..........................................................................................147 5.5 PROBLEMS WITH DATE AND TIME.................................................................149 User Manual v5.0 7 / 203 APPENDIX A: PRODUCT SPECIFICATIONS ..................................................150 APPENDIX B: CUSTOMER SUPPORT ..............................................................152 APPENDIX C: FCC INTERFERENCE STATEMENT ......................................153 APPENDIX D: NETWORK, ROUTING, AND FIREWALL BASICS...............154 D.1 NETWORK BASICS.........................................................................................154 D.1.1 IP ADDRESSES ........................................................................................154 D.1.1.1 Net mask ........................................................................................154 D.1.1.2 Subnet Addressing .........................................................................155 D.1.1.3 PRIVATE IP ADDRESSES .......................................................................155 D.1.2 NETWORK ADDRESS TRANSLATION (NAT).............................................157 D.1.3 DYNAMIC HOST CONFIGURATION PROTOCOL (DHCP) ...........................157 D.2 ROUTER BASICS ............................................................................................158 D.2.1 WHAT IS A ROUTER? ...............................................................................158 D.2.2 WHY USE A ROUTER?..............................................................................158 D.2.3 ROUTING INFORMATION PROTOCOL (RIP) ..............................................158 D.3 FIREWALL BASICS .........................................................................................159 D.3.1 WHAT IS A FIREWALL? ............................................................................159 D.3.1.1 Stateful Packet Inspection..............................................................159 D.3.1.2 Denial of Service (DoS) Attack .....................................................159 D.3.2 WHY USE A FIREWALL? ..........................................................................160 APPENDIX E: VIRTUAL PRIVATE NETWORKING.......................................161 E.1 WHAT IS A VPN? ...........................................................................................161 E.1.1 VPN APPLICATIONS ................................................................................161 E.2 WHAT IS IPSEC? ...........................................................................................162 E.2.1 IPSEC SECURITY COMPONENTS ..............................................................162 E.2.1.1 Authentication Header (AH) ..........................................................162 E.2.1.2 Encapsulating Security Payload (ESP) ..........................................163 E.2.1.3 Security Associations (SA).............................................................164 E.2.2 IPSEC MODES .........................................................................................165 E.2.3 TUNNEL MODE AH .................................................................................166 E.2.4 TUNNEL MODE ESP ................................................................................166 E.2.5 INTERNET KEY EXCHANGE (IKE) ...........................................................167 User Manual v5.0 8 / 203 APPENDIX F: IPSEC LOGS AND EVENTS.......................................................169 F.1 IPSEC LOG EVENT CATEGORIES ..................................................................169 F.2 IPSEC LOG EVENT TABLE.............................................................................169 APPENDIX G: BANDWIDTH MANAGEMENT WITH QOS ..........................171 G.1 OVERVIEW.....................................................................................................171 G.2 WHAT IS QUALITY OF SERVICE?...................................................................171 G.3 HOW DOES QOS WORK?............................................................................172 G.4 Who Needs QoS? .................................................................................172 G.4.1 HOME USERS...........................................................................................172 G.4.2 OFFICE USERS .........................................................................................173 APPENDIX H: ROUTER SETUP EXAMPLES ..................................................174 H.1 OUTBOUND FAIL OVER.................................................................................174 H.2 OUTBOUND LOAD BALANCING.....................................................................176 H.3 INBOUND FAIL OVER ....................................................................................179 H.4 DNS INBOUND FAIL OVER ...........................................................................181 H.5 DNS INBOUND LOAD BALANCING ...............................................................184 H.6 DYNAMIC DNS INBOUND LOAD BALANCING ..............................................187 H.7 VPN CONFIGURATION..................................................................................192 H.7.1 LAN TO LAN.........................................................................................192 H.7.2 HOST TO LAN ........................................................................................194 H.8 IP SEC FAIL OVER (GATEWAY TO GATEWAY) ..............................................196 H.9 VPN CONCENTRATOR ..................................................................................199 H.10 PROTOCOL BINDING ...................................................................................202 User Manual v5.0 9 / 203 Chapter 1: Introduction 1.1 Overview Congratulations on purchasing the RF30 Router from Cometlabs. Combining a router with an Ethernet network switch, the RF30 is a state-of-the-art device that provides everything you need to get your network connected to the Internet over your Cable or DSL connection quickly and easily. The Quick Start Wizard and DHCP Server will get first-time users up and running with minimal fuss and configuration, while sophisticated Quality of Service (QoS) and Load Balancing features grant advanced users total control over their network and Internet connection. This manual illustrates the many features and functions of the RF30, and even takes you through the various ways you can apply this versatile device to your home or office. Take the time now to familiarize yourself with the RF30. 1.2 Product Highlights 1.2.1 Increased Bandwidth, Scalability and Resilience With integrated Dual WAN ports, the RF30 combines two broadband lines such as DSL or Cable into one Internet connection, providing optimal bandwidth sharing for multiple PCs on your network, or allowing maximum reliability with network redundancy. Load Balancing enables the RF30 to efficiently balance network traffic across two connections, ideal for small-to-medium businesses that require increased bandwidth, network scalability, and resilience for mission-critical network and Internet applications. Auto failover can also be configured to ensure smooth, continuous service should one connection fail, providing maximum business uptime and productivity, plus uninterrupted service for you and your customers. 1.2.2 Virtual Private Network Support The RF30 supports comprehensive IPSec VPN protocols for businesses to establish private encrypted tunnels over the Internet to ensure data transmission security among multiple sites, such as a branch office or dial-up connection. Up to 30 simultaneous IPSec VPN connections are possible on the RF30, with performance of up to 30Mbps. User Manual v5.0 10 / 203 1.2.3 Advanced Firewall Security Aside from intelligent broadband sharing, the RF30 offers integrated firewall protection with advanced features to secure your network from outside attacks. Stateful Packet Inspection (SPI) determines if a data packet is permitted to enter the private LAN. Denial of Service (DoS) prevents hackers from interrupting network services via malicious attacks. In addition, the RF30 firewall can be configured to alert you via email should your network come under fire, offering both tight network security and peace of mind. 1.2.4 Intelligent Bandwidth Management The RF30 utilizes Quality of Service (QoS) to give you full control over the priority of both incoming and outgoing data, ensuring that critical data such as customer information moves through your network, even while under a heavy load. Transmission speeds can be throttled to make sure users are not saturating bandwidth required for mission-critical data transfers. Priority types of upload data can also be changed, allowing the RF30 to automatically sort out actual speeds for unmatched convenience. User Manual v5.0 11 / 203 1.3 Package Contents RF30 iBusiness Security Gateway SMB Bracket x 2 (for rack-mounting) Screw x 4 (for rack-mounting) Getting Started CD-ROM Quick Start Guide AC-DC Power Adapter (12VDC, 1A) 1.3.1 Front Panel LED Power Status LAN 1­8 Function A solid light indicates a steady connection to a power source. A blinking light indicates the device is writing to flash memory. Lit when connected to an Ethernet device. 10/100M : Lit green when connected at 100Mbps. Not lit when connected at 10Mbps. Link/ACT: Lit when device is connected. Blinking when data is transmitting/receiving. Lit when connected to an Ethernet device. 10/100M : Lit green when connected at 100Mbps. Not lit when connected at 10Mbps. Link/ACT: Lit when device is connected. Blinking when data is transmitting/receiving. Lit when connected to an Ethernet device. 10/100M : Lit green when connected at 100Mbps. Not lit when connected at 10Mbps. Link/ACT: Lit when device is connected. Blinking when data is transmitting/receiving. WAN1 WAN2 1.3.2 Rear Panel User Manual v5.0 12 / 203 1 2 3 4 5 Port Function To reset the device and restore factory default settings, after the device is fully booted, press and hold RESET until the Status LED begins to blink. 1 RESET 2 WAN2 WAN2 10/100M Ethernet port (with auto crossover support); connect xDSL/Cable modem here. 3 WAN1 WAN1 10/100M Ethernet port (with auto crossover support); connect xDSL/Cable modem here. 4 LAN 1--8 Connect a UTP Ethernet cable (Cat-5 or Cat-5e) to one of the eight LAN ports when connecting a PC to the network. 5 DC12V Connect DC Power Adapter here. (12VDC) 1.3.3 Rack Mounting To rack mount the RF30, carefully secure the device to your rack on both sides using the included brackets and screws. See the diagram below for a more detailed explanation. User Manual v5.0 13 / 203 1.3.4 Cabling Most Ethernet networks currently use unshielded twisted pair (UTP) cabling. The UTP cable contains eight conductors, arranged in four twisted pairs, and terminated with an RJ45 type connector. One of the most common causes of networking problems is bad cabling. Make sure that all connected devices are turned on. On the front panel of the RF30, verify that the LAN link and WAN line LEDs are lit. If they are not, check to see that you are using the proper cabling. User Manual v5.0 14 / 203 Chapter 2: Router Applications 2.1 Overview Your RF30 Router is a versatile device that can be configured to not only protect your network from malicious attackers, but also ensure optimal usage of available bandwidth with Quality of Service (QoS) and both Inbound and Outbound Load Balancing. Alternatively, the RF30 can also be set to redirect incoming and outgoing network traffic with the Fail Over capability, ensuring minimal downtime and increased reliability. The following chapter describes how the RF30 can work for you. 2.2 Bandwidth Management with QoS Quality of Service (QoS) gives you full control over which types of outgoing data traffic should be given priority by the router. By doing so, the router can ensure that latency-sensitive applications like voice, bandwidth-consuming data like gaming packets, or even mission critical files efficiently move through the router even under a heavy load. You can throttle the speed at which different types of outgoing data pass through the router. In addition, you can simply change the priority of different types of upload data and let the router sort out the actual speeds. 2.2.1 QoS Technology QoS generally involves the prioritization of network traffic. QoS is comprised of three major components: Classifier, Meter, and Scheduler. Each of these components has a distinct role in ensuring that incoming and outgoing data is managed according to user specifications. The Classifier analyses incoming packets and marks each one according to configured parameters. The Meter communicates the drop priority to the Scheduler and measures the temporal priorities of the output stream against configured parameters. Finally, the User Manual v5.0 15 / 203 Scheduler schedules each packet for transmission based on information from both the Classifier and the Meter. Scheduler Meter Classifier WAN1 WAN2 Inbound Outbound 2.2.2 QoS Policies for Different Applications By setting different QoS policies according to the applications you are running, you can use the RF30 to optimize the bandwidth that is being used on your network. User Manual v5.0 16 / 203 VoIP Normal PCs Restricted PC As illustrated in the diagram above, applications such as Voiceover IP (VoIP) require low network latencies to function properly. If bandwidth is being used by other applications such as an FTP server, users using VoIP will experience network lag and/or service interruptions during use. To avoid this scenario, this network has assigned VoIP with a guaranteed bandwidth and higher priority to ensure smooth communications. The FTP server, on the other hand, has been given a maximum bandwidth cap to make sure that regular service to both VoIP and normal Internet applications is uninterrupted. User Manual v5.0 17 / 203 2.2.3 Guaranteed / Maximum Bandwidth Setting a Guaranteed Bandwidth ensures that a particular service receives a minimum percentage of bandwidth. For example, you can configure the RF30 to reserve 10% of the available bandwidth for a particular computer on the network to transfer files. Alternatively you can set a Maximum Bandwidth to restrict a particular application to a fixed percentage of the total throughput. Setting a Maximum Bandwidth of 20% for a file sharing program will ensure that no more than 20% of the available bandwidth will be used for file sharing. User Manual v5.0 18 / 203 2.2.4 Policy Based Traffic Shaping Policy Based Traffic Shaping allows you to apply specific traffic policies across a range of IP addresses or ports. This is particularly useful for assigning different policies for different PCs on the network. Policy based traffic shaping lets you better manage your bandwidth, providing reliable Internet and network service to your organization. User Manual v5.0 19 / 203 2.2.5 Priority Bandwidth Utilization Assigning priority to a certain service allows the RF30 to give either a higher or lower priority to traffic from this particular service. Assigning a higher priority to an application ensures that it is processed ahead of applications with a lower priority and vice versa. 2.2.6 Management by IP or MAC address The RF30 can also be configured to apply traffic policies based on a particular IP or MAC address. This allows you to quickly assign different traffic policies to a specific computer on the network. User Manual v5.0 20 / 203