Appliance Manual 1. Introduction ....................................................................... 1.1 Product Specifications ...................................................... 1.2 Benefits and Key Features .................................................. 1.3 Physical Parts and Panel of the SA............................................... 1.4 Packing List ........................................................................... 3 3 4 7 9 2. Quick Installation ....................................................................... 10 2.1 Hardware Installation ............................................................. 10 2.2 Check your PC First ............................................................... 11 2.3 Connect to the Web-Based Manager............................................. 13 2.4 Web-Based ManagerBasic Settings............................................14 3. Configuration Hierarchy ........................................................ 21 3.1 Overview of Configuration Menu ........................................ 22 4. Network Settings................................................................23 4.1 DHCP Server ..................................................................... 23 4.2 IP Alias ................................................................................. 25 4.3 Multiple NAT.............................................................................26 4.4 Route Settings................................................................. 27 4.5 DDNS .......................................................................... 28 5. FireWall Settings .................................................................30 5.1 Virtual Server Settings.................................................... 31 5.2 URL Filter Setup........................................................................32 5.3 IP Filter Setup ......................................................................... 33 5.4 Denial of Service .......................................................... 34 6. VPN Settings.................................................................34 6.1 IP Sec Settings...................................................................35 6.2 PPTP Settings...........................................................................38 1 7. System Management ............................................. 40 7.1 Administrator Settings .......................................... . 40 7.2 Event Report Settings .................................................. 41 7.3 Firmware Update ........................................................ 42 7.4 Time Settings ............................................................. 44 7.5 SNMP..................................................................................... 45 8. System Report ............................................................ 46 8.1 System Information ........................................................... 47 8.2 System Log.................................................................... 48 8.3 URL Log .......................................................................... 49 8.4 DHCP Lease Report ................................................................50 9. User Management ...........................................................50 9.1 Users ................................................................................... 51 9.2 Groups ................................................................................ 54 10. NAS Management....................................................................57 10.1 HD Initialization Wizard............................................................ 57 10.2 Advanced ..............................................................................62 10.3 File Sharing ......................................................................... 66 11. Personal Web server (some models)...................................71 12. Personal E-mail server (some models)......................................72 12. Appendix A - USB Printer Server (some models).........................74 12. Appendix B - PPTP VPN Setup................................................79 2 1 Introduction Thank you for purchasing our innovative all-in-one solution for your networking needs. The SA (Server Appliance) integrates server services such as a Network Address Translator (NAT), Virtual Private Network (VPN), SPI firewall, and networked storage into one easy to manage device. The Server Appliance allows a group of trusted computers and networks to connect quickly and safely. With the Server Appliance, network managers and users can save time in establishing some of the most common services done on servers costing thousands of dollars. 1.1 Product Specifications Connection Sharing Flexible Address Space for NAT service IP Alias Multiple NAT Virtual Private Network 20 IPSec Tunnels Available PPTP Server / Client Firewall Prevent Denial of Service (DoS) Attacks Packet/URL Filtering Access Control, Virtual Server System Management Web-based Management for Configuring System Firmware Update via HTTP Reset To Factory Settings Event Alert and Logs System Information 3 Services DHCP Client/Server Proxy DNS RIP DDNS Client FTP Server Network Programmable Static Route Network Protocols Supported: PPPoE, TCP, UDP, ICMP, ARP PPP Authentication PAP, CHAP, MS CHAPv2 Real Time Clock File Sharing Supports CIFS,SMB, Appletalk(AFP), NFS User Management Local User Account Management Power Management Support Mechanical Off/Soft Off/Sleeping/Working System States Other Features (Some Models Only) Personal Web Server USB Printer Server Personal POP E-Mail Server 1.2 Benefits and Key Features Virtual Private Network With Virtual Private Networking, an enterprise can establish a dedicated tunnel among branch offices and/or mobile employees. All data is encrypted and decrypted via the pre-defined dedicated tunnel. This prevents any hackers from stealing private information in the public network. With this functionality, any sub-network can be grouped as though they are in the same network. 4 Firewall The Server Appliance provides a powerful firewall capable of preventing hackers from attacking the gateway or internal network. Many famous DoS attacks can be detected and prevented. Whenever an attack is detected, the system will alert the network manager that an attack has occurred. The network manager can then inspect the log information to find the IP address that sent the packets. Easy Installation In order to facilitate the use of the Server Appliance, the product comes with default settings that most network managers can install it without any modification. If the network manager needs to modify any of the settings, the Server Appliance provides an intuitive Web-based user interface. Network Attached Storage Network-attached storage (NAS) is the concept of shared storage on a network. NAS transfers data using industry standard file sharing protocols such as CIFS, AFP, NFS and FTP. Files can be shared simultaneously by clients regardless of the operating system they are using or the network server they are attached to. This solution provides convenient common storage resources. Dynamic DNS Dynamic DNS allows anyone wishing to reach your host by the name only. Dynamic DNS will map that name to your current IP address, which changes each time you dial your Internet service provider. With a URL that stays the same all the time regardless of IP address your options become almost as unlimited as a normal content provider like www.indiatimes.com or www.yahoo.com. Print Server (Some Models Only) Print Server allows any computer in the network to share an USB printer. It complies with USB 2.0 specifications. And the users can print from any computer over a LAN. 5 Personal Web Server (Some Models Only) The Personal Web Server enables users to host an information type website from their appliance. Create your website and place it on the appliance for the world to see. Use it in combination with our built-in DDNS client and anyone with a broadband connection can have their very own website. Personal POP E-mail Server (Some Models Only) The Personal POP E-mail Server provides users the ability to run a personal private e-mail server. Send e-mail you're your registered domain name or just create a DDNS account and have your personalized e-mail address. FTP Server FTP is the most secure, fastest, reliable method of transferring files. The FTP server allows you full control over who can login to the server appliance, which files the user can access or they could upload data. Power Management We divide the power management function into three parts. These are Power Down, Wake On LAN and Hard Disk Standby. We'll describe each part in detail below. - Power Down We turn the power down in several ways: Power Down by Web Please select System Management -> Administrator Settings. In Power Down field, to select the enable radio button and then click the apply button. Power Down by press the power button Prompt Power Down Please press and hold the power button at least 4 seconds. -Wake On LAN The WOL function allows the remote users on the network to turn on the Server Appliance. Please note that the power adapter must be connected to 6 the Server Appliance and plugged into the power outlet. -Hard Disk Standby If the hard disk is idle for a while, we would like the hard disk to enter standby mode to reduce the consumption of power. In the left menu, select NAS Management -> HD Initialization Wizard, in HD Power Management Setting, please select the time in the `Turn Off hard disk' field (Figure 3.2a). If you select `none', the hard disk will not enter the standby mode even if it is always idle. If you select '5 mins', the hard disk will enter standby mode once it is idle for more than five minutes. Figure 3.2a 1.3 Physical Parts and Panel of the SA 1 WAN port : 10/100 Mbps WAN port MDI/MDIX switch 4 LAN ports : 10/100 Mbps USB 2.0 port (Some Models Only) Reset Button Power Button Power Jack 7 LEDs : Link/Activity LEDs for Each Ethernet Port, Power LED, Packet Transmit/Receive LEDs Power 12VDC/3A WAN Port The WAN port is used to connect to an ADSL/Cable modem for linking to the Internet. WAN MDI/MDIX Switch The WAN MDI/MDIX switch is used to adjust the cable connection of the WAN port. If the port is connected to hub, you should move the switch to the "hub" side; if the port is connected to PC like machine, you should move the switch to the "PC" side. As for the four LAN ports, there is no need to add additional switches for each cable connection. This is because the LAN ports support auto MDI/MDIX. LAN Ports The LAN ports are used to connect to a PC, server, hub, switch or other network devices on the intranet. Reset Button If you forget your password and/or IP settings, you will not be able to access the SA. You can use the Reset Button to restore the factory settings. To initiate a reset, you must hold the button for at least 5 seconds. The primary default settings are listed in the following table. Configuration Item Administrator Username Administrator Password Internal IP address Default Settings admin 172.16.1.1 8 Power Button Description Status of LEDsLED Power Heart-Beat On Off Solid/Off Flashing On WAN/LAN Link/Activity Off Flash Meaning Power On Power Off System is not working System is working Link up Link down The interface is transmitting/receiving packets The network link is 100 Mbps The network link is 10 Mbps Current transfer rate is > 10KB/s WAN/LAN On 10/100 Mbps Off 1 LED on Throughput No LED on Current transfer rate is < 10KB/s 2 LEDs on Current transfer rate is >50KB/s 3 LEDs on Current transfer rate is >100KB/s 4 LEDs on Current transfer rate is >500KB/s 1.4 Packing List Server Appliance Power Adaptor and Cable UTP cable (CAT5) User Manual CD Quick Start Guide 9 2 Quick Installation This chapter will give you brief instructions on how to install the product. In section 2.1, we will configure the hardware part of SA step by step. In section 2.2, we will check whether the IP address of your PC is assigned by DHCP. Once we complete the installation of the SA hardware and checked your PC settings, we will use the web-based management to configure the SA to suit your network environment. In section 2.3, and 2.4, we will review all the software settings. We will configure it to gain access to the Internet. If you need additional help or advanced setting details, please refer to the remaining chapters. 2.1 Hardware Installation Please follow the steps below to install hardware: 1. Get the included Ethernet cable. Connect one end of it to the ADSL/Cable modem and the other end to the WAN port on the SA. 2. Get another Ethernet cable. Connect one end of it to the PC or hub and the other end to one of the LAN ports on the SA. Turn the ADSL/Cable modem on. Note: Cable modem users MUST d ...