Broadband Router User Guide Broadband Router User Guide Dec. 2001 Limitation of Liability Information in this document is subject to change without notice and does not represent a commitment on the part. The material contained herein is supplied without representation or warranty of any kind. Therefore assumes no responsibility and shall have no liability of any kind arising from the supply or use of this document or the material contained herein. This manual copyright© 2001. All rights reserved. No part of this document may be copied or re-used without prior written consent 1Broadband Router About This User Guide Welcome to the Networking world of multifunction routers! Thank you for investing in a Broadband Router. We are dedicated to provide the most efficient, easy to configure, and trouble free equipment in the networking industry. This manual is intended as a basic introduction to your Broadband Router. It supplies enough information to make the Broadband Router operational in most common environments: connecting to the Internet , receiving calls from dial-in users, or connecting to another network through the telephone network. We'll describe how to use your web browser to configure the Broadband Router and to perform some basic operations, e.g. upgrading the software, or viewing the connection log, a task which may be useful in ongoing operations. Finally, we'll tell you how to obtain information and help for subjects that are beyond the scope of this manual. This manual consists of seven chapters and three appendixes: Chapter One: Introduction, explains the features and capabilities of the Broadband Router. Chapter Two: Installing the Broadband Router, gives the simple steps you follow to install the Broadband Router and configure your workstations. Chapter Three: Configuring the Broadband Router, explains how to log in to the ARM Manager, describes the browser screen, and provides the steps needed to configure your Broadband Router for specific applications. It provides easy-to-follow instructions for quick Internet access and provides a guide to the most popular Broadband Router configurations. Chapter Four: Advanced Configuration, provides information on advanced router configuration setup. Chapter Five: Managing the Broadband Router, explains the management features of the Broadband Router. Chapter Six: Messages, lists messages you may see in the ARM message window, and what they mean. Appendix A: Specifications Appendix B: Glossary Appendix C: Warranty, Copyright, FCC Notice Safety Warnings · The Broadband Router is not intended to be serviced by the user. Do not open the case. Contents Chapter 1 Introduction What's in the box? Overview of the Broadband Router Broadband Router Applications Accessing the Internet Accessing Servers from the Public Network Supporting Dial-in Access to Your Network Accessing Internet and Dial-In Simultaneously Creating Your Own Private Wide Area Network Accessing Internet and LAN-to-LAN Simultaneously Creating a Virtual Private Network (VPN) A Configuration Example Security Overview A Physical Look at the Broadband Router The Connectors on the Back The LEDs on the Front Chapter 2 Installing the Broadband Router Installing the Broadband Router Setting Up a Windows PC for Configuring the Broadband Router Connecting more Devices through a Hub to the Broadband Router Chapter 3 Configuring the Broadband Router Internet Access in Five Minutes Using Setup Wizard Overview of The ARM Browser Screen What is a Connection Profile? Internet Access Interface Configuring a Basic Internet Access Profile via EWAN Configuring Auto Backup Configuring a Basic Internet Access Profile via Modem Adding Internet Access Profiles Deleting or Modifying Internet Access Profiles Remote Office Access Advanced Options for Remote Office Profiles Deleting or Modifying Remote Office Access Profiles Dial-in User Access Dial-In User Advanced Options Deleting Dial-in User Profiles Internet Access Time Restrictions Chapter 4 Advanced Configuration NAT(Network Address Translation) Virtual Server/DMZ (De-military Zone) iii Firewall (IP/IPX Filtering) VPN (Virtual Private Network ) Bridging Chapter 5 Managing the Broadband Router System Status Connection Log About System System Upgrade Clear Configuration Reset System Change Password System Time Chapter 6 Messages Messages Appendix A Broadband Router Specifications Appendix B Glossary Appendix C Warranty, Copyrights, FCC Notice Warranty Copyrights FCC Part 15 Notice iv 1Broadband Router 1 Introduction This chapter gives the introduction to the Broadband Router. What' in the Box? s Your Broadband Router box should contain the items listed below · · · 1 Broadband Router 1 AC Adapter, AC 9V 1A 1 RS-232 serial cable with DB-9 (9 pin) male connector and RJ45 plug to connect the Broadband Router Console/COM port and external ISDN TA/ Analog Modem 1 female to female 9 pin adaptor to connect the Broadband Router Console port to a PC COM port. 1 CAT5 UTP cross-over LAN cable to connect the Broadband Router EWAN port to an external ADSL or Cable Modem · · Note: · · Some Cable Modems use straight LAN cable 1 CD-ROM containing the online documentation 1 Quick-Start Guide Overview of the Broadband Router The Broadband Router is a small desktop router that sits between your local Ethernet network and a remote network (e.g., the Internet or a remote office). The Broadband Router contains an EWAN port connecting to an external ADSL/Cable modem , a Console/ COM port for connection to a console device(such as a PC COM port ), and a four-port 10/100Mbps Ethernet switch for connection to PCs on your local network. The Console/COM port can alsobe used to connect to the Internet(as a back-up such as when the ADSL/Cable modem line is not operational) or a remote office via an external ISDN TA or Analog Modem, and even allows a remote user(a tele-commuter or a traveling sales person) to dial in and access your local network. Data comes into the Broadband Router from the local LAN and then is "routed" to the remote network, and vice versa. Broadband Router Applications The main functions of the Broadband Router -to allow devices on your LAN to access the Internet, -to allow access to the servers from the public network, 1-1 -to support remote users to directly dial in and access your LAN, -to support direct dial-up communication with remote offices and share resources between remnote LANs. - to create Virtual Private Network (VPN) to allow remote LANs to share resources with each other over the Internet. Accessing the Internet The most common use for the Broadband Router is to provide Internet access, so that everyone on your LAN can surf the web and send/receive email or files. The Broadband Router automatically acquires the necessary IP address when the connection to the Internet is established. You don't need to apply for and assign an IP address to each PC or workstation on your network. Accessing Servers from the Public Network If you want special servers to be accessible by remote users across the Internet (e.g., an e-mail server, an FTP server, or a web server), you can configure the Broadband Router to proxy the service from its own address. This means that the remote user can address the router as if it were the special server and the Broadband Router will redirect this connection to the appropriate computer on the network. Supporting Dial-in Access to Your Network You can set up your Broadband Router to allow users to connect to your network and share resources from home or while they're travelling. The Broadband Router built-in configuration program makes the necessary setup a snap. As a security feature, after a user calls in, the Broadband Router can hang up and call that user back at a preconfigured telephone number. Figure 1-1 Dial-in Access You can set up the Broadband Router to provide Internet access for everyone on your LAN and allow a remote user to dial in to your network via V.90 Modem or ISDN TA simultaneously. 1-2 Figure 1-2 Internet Access and Dial-in Simultaneously Creating Your Own Private Wide Area Network You can create your own private wide area network with Broadband Router via external ISDN TA / modem and allow two or more remote networks to connect to one another and share resources. The remote network can use a broadband router even though it is a different vendor - as long as it also supports LAN to LAN communications. Figure 1-3 Connecting Two Networks with Broadband Router You can set up the Broadband Router to provide Internet access for everyone on your LAN and create your own private wide area network via V.90 Modem or ISDN TA simultaneously. 1-3 Figure 1-4 Internet Access and LAN-to-LAN Simultaneously Creating a Virtual Private Network (VPN) Virtual Private Networking (VPN) provides a means to connect remote LANs over the Internet, while only local toll charges to an Internet Service Provider are incurred even if the two LANs are physically remote to each other. To create a VPN between two sites, a special connection called "tunnel" followed by a VPN data session has to be set up over the Internet. After a VPN data session is set up, data can be sent over it, optionally encrypted to prevent unauthorized access. Additionally, VPN tunnels allow IP, IPX and Bridging traffic to flow across the Internet, including NetBIOS information (for Windows networking) encapsulated within IP or IPX packets. All information required for a VPN is defined in a VPN profile, which contains, for example, the IP address of the VPN partner and authentication information (including the encryption key that is used). When a PC from one site tries to communicate with a device on the other site for the first time, the VPN tunnel and data session establishment process will be triggered automatically. For the originating side, first the destination IP address will be used to search for the corresponding VPN profile. Based on the information conifgured in the matched VPN profile, a VPN tunnel is created, a VPN data session will be created and authentication information exchanged, then data traffic can start to flow. For the destination side, when a VPN data session creation is requested, the router will base on the originating IP address to search for a matched profile. Once found, the Broadband Router will use the information in the matched profile to authenticate the incoming "call", after which data transfer can begin. More than one VPN data sessions can be established over the same tunnel. See chapter 4 for detailed configuration instructions. 1-4 Figure 1-5 Creating a Virtual Private Network A Configuration Example In Figure 1-6, two Broadband Routers are installed in two different locations. They are connected to the Internet via ADSL/Cable modem, allowing users to surf the Web. They are also connected to each other through the telephone network, forming a private company network. Figure 1-6 Connecting Two Private Networks This example illustrates an important feature of the Broadband Router: a private device can be accessed from the Internet by mapping the application port number to a port number on the Broadband Router. In this case, an Internet user accesses a web server with IP address 206.112.113.6, which is the Broadband Router' IP address. s When properly configured, the Broadband Router will translate that port 80 of that address to port 80 of the private IP address, 192.168.168.112. In this example, all devices on both LANs (except for the Web servers) are configured to obtain their IP addresses automatically (i.e., from the built-in DHCP server in the Broadband Router). It is important for the Web Server on LAN #1 to have the same IP address all the time (so that users can use the same IP address to access it), it also means the Broadband Router should also be assigned a static IP address. IP addresses assigned to the devices on the LAN are only used in the local LAN environment (with default IP network address of 192.168.168.0), therefore these devices naturally form a private network and are not accessible by users across the Internet, unless they are mapped. It is still possible to assign public IP addresses obtained from your ISP to devices on your LAN so that they can be accessed by users 1-5 across the Internet. These public addresses can co-exist with private IP address on the same LAN. In order for LAN to LAN communication to work in such configurations, the default private network Broadband Routeraddress (192.168.168.0) for one of the above Broadband Router has to be changed (to 192.168.170.0 in the above example). The traffic between these two networks is secure because data are sent across the telephone network via a direct phone call. A Security Overview More and more people are concerned about security of their data in the Internet The Broadband Router provides many ways to help make your network and your data secure: ·  ...