User manual INTELLINET 523295

Broadband Router User's Manual 1 Introduction....................................................................................................................... 4 Features.............................................................................................................................. 4 Minimum Requirements .................................................................................................. 4 Package Content ............................................................................................................... 4 Note .................................................................................................................................... 4 Get to know the Broadband Router................................................................................ 5 Back Panel ......................................................................................................................... 5 Front Panel ........................................................................................................................ 6 Setup Diagram................................................................................................................... 7 Getting started................................................................................................................... 8 Chapter 1 ......................................................................................................................... 16 Quick Setup ..................................................................................................................... 16 Step 1) Time Zone ........................................................................................................... 16 Step 2) WAN Type .......................................................................................................... 17 1.1 Cable Modem ............................................................................................................ 18 1.2 Fixed-IP xDSL........................................................................................................... 19 1.3 PPPoE ........................................................................................................................ 19 1.4 PPTP .......................................................................................................................... 21 Step 3) DNS...................................................................................................................... 22 Chapter 2 ......................................................................................................................... 24 General Settings .............................................................................................................. 24 2.1 System ........................................................................................................................ 26 2.1.1 Host Name .............................................................................................................. 27 2.1.2 System Time ........................................................................................................... 28 2.1.3 Administrator Settings .......................................................................................... 29 2.2 WAN........................................................................................................................... 31 2.2.1 Dynamic IP ............................................................................................................. 32 2.2.2 Static IP Address.................................................................................................... 33 2.2.3 PPPoE (PPP over Ethernet).................................................................................. 33 2.2.4 PPTP ....................................................................................................................... 33 2.2.5 DNS ......................................................................................................................... 33 2.3 LAN ............................................................................................................................ 34 2.3.1 LAN Settings .......................................................................................................... 35 2.3.2 DHCP Mapping...................................................................................................... 37 2.4 NAT ............................................................................................................................ 38 2.4.1 Special Application ................................................................................................ 40 2.4.2 Virtual Server......................................................................................................... 42 2.4.3 Port Forwarding .................................................................................................... 44 2.4.4 DMZ ........................................................................................................................ 45 2.5 Firewall ...................................................................................................................... 46 2.5.1 Hacker Prevention ................................................................................................. 47 2.5.2 Client Filtering ....................................................................................................... 49 2.5.3 URL Filtering ......................................................................................................... 51 2.5.4 MAC Control.......................................................................................................... 52 2.6 Routing....................................................................................................................... 53 2.6.1 Static Routing......................................................................................................... 54 2 2.6.2 Dynamic Routing ................................................................................................... 55 2.7 UPnP .......................................................................................................................... 56 2.7.1 UPnP Settings......................................................................................................... 57 2.7.2 UPnP Port Mapping .............................................................................................. 58 2.8 DDNS.......................................................................................................................... 59 Chapter 3 ......................................................................................................................... 61 Status................................................................................................................................ 61 3.1 Status.......................................................................................................................... 62 3.2 Security Log............................................................................................................... 63 3.3 DHCP Client List ...................................................................................................... 64 3.4 Routing Table List .................................................................................................... 65 Chapter 4 ......................................................................................................................... 66 Tools ................................................................................................................................. 66 4.1 Configuration Tools.................................................................................................. 67 4.2 Firmware Upgrade ................................................................................................... 69 4.3 Reset ........................................................................................................................... 70 Appendix A...................................................................................................................... 71 Glossary ......................................................................................................................... 72 3 Introduction Congratulations on purchasing this Broadband Router. This Broadband Router is a cost-effective IP Sharing Router that enables multiple users to share the Internet through an ADSL or cable modem. Simply configure your Internet connection settings in the Broadband Router and plug your PC to the LAN port and you're ready to share files and access the Internet. As your network grows, you can connect another hub or switch to the router's LAN ports, allowing you to easily expand your network. The Broadband Router provides a total solution for the Small and Mediumsized Business (SMB) and the Small Office/Home Office (SOHO) markets, giving you an instant network today, and the flexibility to handle tomorrow's expansion and speed. Features · · · · · · · · · · High Internet Access throughput Allow multiple users to share a single Internet line Supports up to 253 users Internet Access via Cable or xDSL modem Access Private LAN Servers from the Public Network Equipped with four LAN ports (10/100M) and one WAN port (10/100M) Support DHCP (Server/Client) for easy setup Support advance features such as: Special Applications, DMZ, Virtual Servers, Client Filtering, Firewall. Allow you to monitor the router's status such as: DHCP Client Log, Security Log and Device/Connection Status Easy to use Web-based GUI for configuration and management purposes Remote Management allows configuration and upgrades from a remote site (over the Internet) · Minimum Requirements · · · One External xDSL (ADSL) or Cable modem with an Ethernet port (RJ-45) Network Interface Card (NIC) for each Personal Computer (PC) PCs with a Web-Browser (Internet Explorer 4.0 or higher, or Netscape Navigator 4.7 or higher) Package Content · · · · One 4-port Broadband router unit One Quick Installation Guide One User Manual CD One Power Adapter Accessories · Note The WAN "idle timeout" auto-disconnect function may not work due to abnormal activities of some network application software, computer virus or hacker attacks from the Internet. For example, some software sends network packets to the Internet in the background, even when you are not using the Internet. So please turn off your computer when you are not using it. This function also may not work with some ISP. So please make sure this function can work properly when you use this function in the first time, especially when your ISP charge you by time used. 4 Get to know the Broadband Router Back Panel The diagram (fig1.0) below shows the broadband router's back panel. The router's back panel is divided into three sections, LAN, WAN and Reset: Figure 1.0 1) Local Area Network (LAN) The Broadband router's 4 LAN ports are where you connect your LAN's PCs, printer servers, hubs and switches etc. 2) Wide Area Network (WAN) The WAN port is the segment connected to your xDSL or Cable modem and is linked to the Internet. 3) Reset The Reset button allows you to do one of two things. 1) If problems occur with your router, press the router's reset button with a pencil tip (for 2~4 seconds) and the router will re-boot itself, keeping your original configurations. Every time when you finished configuration the router, please also to the reset to make the new configuration take effect. 2) If problems persist or you experience extreme problems or you forgot your password, press the reset button for longer than 5 seconds and the router will reset itself to the factory default settings (warning: your original configurations will be replaced with the factory default settings) 5 Front Panel On the router's front panel there are LED lights that inform you of the router's current status. Below is an explanation of each LED and its description. LED PWR WAN 10/100M WAN LNK/ACT Light Status ON ON Off Description Router's power supply is on WAN port 100Mbps is connected WAN port 10Mbps is connected WAN is connected No WAN connection WAN port has Activity (ACT), data being sent LAN port 100Mbps is connected LAN port 10Mbps is connected LAN is connected No LAN connection LAN port has Activity (ACT), data being sent ON Off Flashing LAN 10/100M (Port 1-4) ON Off LAN LNK/ACT (Port 1-4) ON Off Flashing 6 Setup Diagram Figure 1.2 below shows a typical setup for a Local Area Network (LAN). Figure 1.2 7 Getting started This is a step-by-step instruction on how to start using the router and get connected to the Internet. 1) Setup your network as shown in the setup diagram above (fig 1.2). 2) You then need to set your LAN PC clients so that it can obtain an IP address automatically. All LAN clients require an IP address. Just like an address, it allows LAN clients to find one another. (If you have already configured your PC to obtain an IP automatically then proceed to step 3, page 11) Configure your PC to obtain an IP address automatically By default the broadband router's DHCP is on, this means that you can obtain an IP address automatically once you've configured your PC to obtain an IP address automatically. This section will show you how to configure your PC's so that it can obtain an IP address automatically for either Windows 95/98/Me, 2000 or NT operating systems. For other operating systems (Macintosh, Sun, etc.), follow the manufacturer's instructions. The following is a step-by-step illustration on how to configure your PC to obtain an IP address automatically for 2a) Windows 95/98/Me, 2b) Windows XP, 2c) Windows 2000 and 2d) Windows NT. 2a) Windows 95/98/Me 1: Click the Start button and select Settings, then click Control Panel. The Control Panel window will appear. 2: Double-click Network icon. The Network window will appear. 3: Check your list of Network Components. If TCP/IP is not installed, click the Add button to install it now. If TCP/IP is installed, go to step 6. 4: In the Network Component Type dialog box, select Protocol and click Add button. 5: In the Select Network Protocol dialog box, select Microsoft and TCP/IP and then click the OK button to start installing the TCP/IP protocol. You may need your Windows CD to complete the installation. 6: After installing TCP/IP, go back to the Network dialog box. Select TCP/IP from the list of Network Components and then click the Properties button. 7: Check each of the tabs and verify the following settings: · · · · Bindings: Check Client for Microsoft Networks and File and printer sharing for Microsoft Networks. Gateway: All fields are blank. DNS Configuration: Select Disable DNS. WINS Configuration: Select Disable WINS Resolution. IP Address: Select Obtain IP address automatically. · 8 8: Reboot the PC. Your PC will now obtain an IP address automatically from your Broadband Router's DHCP server. Note: Please make sure that the Broadband router's DHCP server is the only DHCP server available on your LAN. Once you've configured your PC to obtain an IP address automatically, please proceed to Step 3 2b) Windows XP 1: Click the Start button and select Settings, then click Network Connections. The Network Connections window will appear. 2: Double-click Local Area Connection icon. The Local Area Connection window will appear. 3: Check your list of Network Components. You should see Internet Protocol [TCP/IP] on your list. Select it and click the Properties button. 4: In the Internet Protocol (TCP/IP) Properties window, select Obtain an IP address automatically and Obtain DNS server address automatically as shown on the following screen. 9 5: Click OK to confirm the setting. Your PC will now obtain an IP address automatically from your Broadband Router's DHCP server. Note: Please make sure that the Broadband router's DHCP server is the only DHCP server available on your LAN. Once you've configured your PC to obtain an IP address automatically, please proceed to Step 3. 2c) Windows 2000 1: Click the Start button and select Settings, then click Control Panel. The Control Panel window will appear. 2: Double-click Network and Dial-up Connections icon. In the Network and Dial-up Connection window, double-click Local Area Connection icon. The Local Area Connection window will appear. 3: In the Local Area Connection window, click the Properties button. 4: Check your list of Network Components. You should see Internet Protocol [TCP/IP] on your list. Select it and click the Properties button. 5: In the Internet Protocol (TCP/IP) Properties window, select Obtain an IP address 10 automatically and Obtain DNS server address automatically as shown on the following screen. 6: Click OK to confirm the setting. Your PC will now obtain an IP address automatically from your Broadband Router's DHCP server. Note: Please make sure that the Broadband router's DHCP server is the only DHCP server available on your LAN. Once you've configured your PC to obtain an IP address automatically, please proceed to Step 3. 2d) Windows NT 1: Click the Start button and select Settings, then click Control Panel. The Control Panel window will appear. 2: Double-click Network icon. The Network window will appear. Select the Protocol tab from the Network window. 3: Check if the TCP/IP Protocol is on your list of Network Protocols. If TCP/IP is not installed, click the Add button to install it now. If TCP/IP is installed, go to step 5. 4: In the Select Network Protocol window, select the TCP/IP Protocol and click the Ok 11 button to start installing the TCP/IP protocol. You may need your Windows CD to complete the installation. 5: After you install TCP/IP, go back to the Network window. Select TCP/IP from the list of Network Protocols and then click the Properties button. 6: Check each of the tabs and verify the following settings: · IP Address: Select Obtain an IP address from a DHCP server. · DNS: Let all fields are blank. · WINS: Let all fields are blank. · Routing: Let all fields are blank. 7: Click OK to confirm the setting. Your PC will now obtain an IP address automatically from your Broadband Router's DHCP server. Note: Please make sure that the Broadband router's DHCP server is the only DHCP server available on your LAN. Once you've configured your PC to obtain an IP address automatically, please proceed to Step 3. 12 3) Once you have configured your PCs to obtain an IP address automatically, the router's DHCP server will automatically give your LAN clients an IP address. By default the Broadband Router's DHCP server is enabled so that you can obtain an IP address automatically. To see if you have obtained an IP address, see Appendix A. Note: Please make sure that the Broadband router's DHCP server is the only DHCP server available on your LAN. If there is another DHCP on your network, then you'll need to switch one of the DHCP servers off. (To disable the Broadband router's DHCP server see chapter 2 LAN Port) 4) Once your PC has obtained an IP address from your router, enter the default IP address 192.168.2.1 (broadband router's IP address) into your PC's web browser and press 5) The login screen below will appear. Enter the password and then click to login. Note: By default the password is empty string. For security reasons it is recommended that you change the password as soon as possible (in General setup/system/password, see chapter 2) 6) The HOME page screen below will appear. The Home Page is divided into four sections, Quick Setup Wizard, General Setup, Status Information and Tools. 13 Quick Setup Wizard (Chapter 1) If you only want to start using the broadband router as an Internet Access device then you ONLY need to configure the screens in the Quick Setup Wizard section. General Setup (Chapter 2) If you want to use more advanced features that the broadband router has to offer, then you'll need to configure the Quick Setup Wizard and the General Setup section. Alternatively, you can just configure the General Setup section, since the General Setup/WAN and the Quick Setup Wizard contain the same configurations. Status Information (Chapter 3) The Status Information section is for you to monitor the router's current status information only. Tools (Chapter 4) If you want to Reset the router (because of problems) or save your configurations or upgrade the firmware then the Tools section is the place to do this. 14 Menu Quick Setup Wizard (Chapter 1) Description Select your Internet connection type and then input the configurations needed to connect to your Internet Service Provider (ISP). This section contains configurations for the Broadband router's advance functions such as: Address Mapping, Virtual Server, Access Control, Hacker Attack Prevention, DMZ, Special applications and other functions to meet your LAN requirements. In this section you can see the Broadband router's system information, Internet Connection, Device Status, Security Log and DHCP client Log information. This section contains the broadband router's Tools - Tools include Configuration tools, Firmware upgrade and Reset. Configuration tools allow you to Backup (save), Restore, or Restore to Factory Default configuration for your Broadband router. The Firmware upgrade tool allows you to upgrade your Broadband router's firmware. The RESET tool allows you to reset your Broadband router. General Setup (Chapter 2) Status Information (Chapter 3) Tools (Chapter 4) 7) Click on Quick Setup Wizard (see chapter 1) to start configuring settings required by your ISP so that you can start accessing the Internet. The other sections (General Setup, Status Information and Tools) do not need to be configured unless you wish to implement/monitor more advance features/information. Select the section (Quick Setup Wizard, General Setup, Status Information and Tools) you wish to configure and proceed to the corresponding chapter. Use the selections on the web management's top right hand page to navigate around the web-based management User Interface. Note: Click "Logout" on the Web management's top right hand side to leave management tool when you have finished configuration. 15 Chapter 1 Quick Setup The Quick Setup section is designed to get you using the broadband router as quickly as possible. In the Quick Setup you are required to fill in only the information necessary to access the Internet. Once you click on the Quick Setup Wizard in the HOME page, you should see the screen below. Step 1) Time Zone The Time Zone allows your router to base its time on the settings configured here, this will affect functions such as Log entries and Firewall settings. Parameter Set Time Zone Description Select the time zone of the country you are currently in. The router will set its time based on your selection. Enable Daylight Saving The router can also take Daylight savings into account. If you wish to use this function, you must check/tick the enable box to enable your daylight saving configuration (below). Select the period in which you wish to start daylight Savings Time Start from 16 End by Select the period in which you wish to end daylight Savings Time Click on NEXT to proceed to the next page (step 2) Broadband Type. Step 2) WAN Type In this section you have to select one of four types of connections that you will be using to connect your broadband router's WAN port to your ISP (see screen below). Note: Different ISP's require different methods of connecting to the Internet, please check with your ISP as to the type of connection it requires. Menu 1.1 Cable Modem 1.2 Fixed-IP xDSL 1.3 PPPoE 1.4 PPTP Description Your ISP will automatically give you an IP address Your ISP has given you an IP address already Your ISP requires you to use a Point-to-Point Protocol over Ethernet (PPPoE) connection. Your ISP requires you to use a Point-to-Point Tunneling Protocol (PPTP) connection. 17 Click on one of the WAN type and then proceed to the manual's relevant sub-section (1.1, 1.2, 1.3 or 1.4). Click on Back to return to the previous screen. 1.1 Cable Modem Choose Cable Modem if your ISP will automatically give you an IP address. Some ISP's may also require that you fill in additional information such as Host Name and MAC address (see screen below). Note: The Host Name and MAC address section is optional and you can skip this section if your ISP does not require these settings for you to connect to the Internet. Parameters Host Name Description If your ISP requires a Host Name, type in the host name provided by your ISP, otherwise leave it blank if your ISP does not require a Host Name. Your ISP may require a particular MAC address in order for you to connect to the Internet. This MAC address is the PC's MAC address that your ISP had originally connected your Internet connection to. Type in this MAC address in this section or use the "Clone MAC Address" button to replace the WAN MAC address with the MAC address of that PC (you have to be using that PC for the Clone MAC Address button to work). To find out the PC's MAC address see Appendix A. (see Glossary for an explanation on MAC address) MAC Address 18 Click on NEXT to proceed to the next page (step 3) DNS. 1.2 Fixed-IP xDSL Select Fixed-IP xDSL if your ISP has given you a specific IP address for you to use. Your ISP should provide all the information required in this section. Parameters IP Gateway IP Subnet Mask Description This is the IP address that your ISP has given you. This is the ISP's IP address gateway Enter the Subnet Mask provided by your ISP (e.g. 255.255.255.0) Click on NEXT to proceed to the next page (step 3) DNS. 1.3 PPPoE Select PPPoE if your ISP requires the PPPoE protocol to connect you to the Internet. Your ISP should provide all the information required in this section. 19 Parameter User Name Password Service Name MTU Description Enter the User Name provided by your ISP for the PPPoE connection Enter the Password provided by your ISP for the PPPoE connection This is optional. Enter the Service name should your ISP requires it, otherwise leave it blank. You can specify the maximum size of your transmission packet to the Internet. Leave it as it is if you to not wish to set a maximum packet size. Enter the Maximum Idle Time (in minutes) before the WAN line automatically being disconnected. Enter "0" if you wish the WAN line always to be connected. Note: This "idle timeout" function may not work due to abnormal activities of some network application software, computer virus or hacker attacks from the Internet. For example, some software sends network packets to the Internet in the background, even when you are not using the Internet. So please turn off your Maximum Idle Time 20 computer when you are not using it. This function also may not work with some ISP. So please make sure this function can work properly when you use this function in the first time, especially your ISP charge you by time used. Auto-reconnect Check this box to enable Auto-reconnect. If Auto-reconnect is enabled, the router will automatically connect to the ISP in the first time when a user try to access Internet after the WAN line being disconnected due to idle time out. Click on NEXT to proceed to the next page (step 3) DNS. 1.4 PPTP Select PPTP if your ISP requires the PPTP protocol to connect you to the Internet. Your ISP should provide all the information required in this section. Parameter Description 21 PPTP Account PPTP Password Host Name Service IP Address My IP Address Enter the User Name provided by your ISP for the PPTP connection. Sometimes called a Connection ID Enter the Password provided by your ISP for the PPTP connection Enter the Host Name of this router. Enter the IP address of the ISP Gateway or PPTP Gateway. This is the IP address that your ISP has given you to establish a PPTP connection. Enter the Subnet Mask provided by your ISP (e.g. 255.255.255.0) My Subnet Mask Connection ID MTU This is the ID given by ISP. This is optional. You can specify the maximum size of your transmission packet to the Internet. Leave it as it is if you to not wish to set a maximum packet size. Enter the Maximum Idle Time (in minutes) before the WAN line automatically being disconnected. Enter "0" if you wish the WAN line always to be connected. Note: This "idle timeout" function may not work due to abnormal activities of some network application software, computer virus or hacker attacks from the Internet. For example, some software sends network packets to the Internet in the background, even when you are not using the Internet. So please turn off your computer when you are not using it. This function also may not work with some ISP. So please make sure this function can work properly when you use this function in the first time, especially your ISP charge you by time used. Check this box to enable Auto-reconnect. If Auto-reconnect is enabled, the router will automatically connect to the ISP in the first time when a user try to access Internet after the WAN line being disconnected due to idle time out. Maximum Idle Time Auto-reconnect Click on NEXT to proceed to the next page (step 3) DNS. Step 3) DNS A Domain Name System (DNS) server is like an index of IP addresses and Web addresses. If you type a Web address into your browser, such as www.router.com, a DNS server will find that name in its index and the matching IP address. Most ISPs provide a DNS server for speed and convenience. If your Service Provider connects you to the Internet with dynamic IP settings, it is 22 likely that the DNS server IP address is provided automatically. However, if there is a DNS server that you would rather use, you need to specify the IP address of that DNS server here. Click when you have finished the configuration above. Congratulations! You have completed the basic configuration for router. You can start using the router now, if you wish to use some of the advance features supported by this router see chapter 2, 3, 4. Click on Back to return to the previous screen. 23 Chapter 2 General Settings Once you click on the General Setup button at the Home Page, you should see the screen below. If you have already configured the Quick Setup Wizard you do NOT need to configure anything thing in the General Setup screen for you to start using the Internet. The General Setup contains advanced features that allow you to configure the router to meet your network's needs such as: Port Forwarding, Virtual Server, Client Filtering, Hacker Prevention, Special Applications, DMZ and other functions. Below is a general description of what advance functions are available for this broadband router. Menu 2.1 System 2.2 WAN Description This section allows you to set the Broadband router's system Time Zone, Password and Remote Management Administrator. This section allows you to select the connection method in order to establish a connection with your ISP (same as the Quick Setup Wizard section) 24 2.3 LAN 2.4 NAT You can specify the LAN segment's IP address, subnet Mask, enable/disable DHCP and select an IP range for your LAN You can configure the Port Forwarding, Virtual Server, DMZ and Special Applications functions in this section. This allows you to specify what user/packet can pass your router's NAT. The Firewall section allows you to configure Client Filtering, URL Filtering, MAC Control and Hacker Prevention. The Routing section allows you to configure the static routing table and dynamic routing. The UPnP section allows you to configure UPnP parameters and lookup the port mapping. The DDNS section allows you to configure DDNS service. 2.5 Firewall 2.6 Routing 2.7 UPnP 2.8 DDNS Select one of the above eight General Setup selections and proceed to the manual's relevant sub-section 25 2.1 System The system screen allows you to specify a time zone, to change the system password and to specify a remote management user for the broadband router. Parameters System Settings 2.1.1 Host Name 2.1.2 System Time 2.1.3 Administrator Settings Description Allows you to setup the Host Name and Domain Name of this router. Select the time zone of the country you are currently in. The router will set its time based on your selection. Allows you to select a password in order to access the web-based management website. You can specify a Host IP address that can perform remote management functions. Select one of the above three system settings selections and proceed to the manual's relevant sub-section 26 2.1.1 Host Name This page allows you to assign Host Name and Domain Name to the router. You can do web configuration from the LAN by typing the whole name you configured here except for the IP address. Parameter Host Name Description Enter the Host Name of this router. Domain Name Enter the Domain Name of this router. Click at the bottom of the screen to save the above configurations. You can now configure other advance sections or start using the router (with the advance settings in place) 27 2.1.2 System Time The System Time allows your router to reference or base its time on the Time Zone settings configured here, which will affect functions such as Log entries and Firewall settings. Parameter Set Time Zone Description Select the time zone of the country you are currently in. The router will set its time based on your selection. Enable Daylight Savings The router can also take Daylight savings into account. If you wish to use this function, you must check/tick the enable box to enable your daylight saving configuration (below). Select the period in which you wish to start daylight Savings Time Select the period in which you wish to end daylight Savings Time Start from End by Click at the bottom of the screen to save the above configurations. You can now configure other advance sections or start using the router (with the advance settings in place) 28 2.1.3 Administrator Settings You can change the password required to log into the broadband router's system web-based management. By default, there is no password. So please assign a password to the Administrator as soon as possible, and store it in a safe place. Passwords can contain 3 to 12 alphanumeric characters, and are case sensitive. The remote management function allows you to designate a host in the Internet the ability to configure the Broadband router from a remote site. Enter the designated host IP Address in the Host IP Address field. Parameters Current Password Description Enter your current password for the remote management administrator to login to your Broadband router. Note: By default there is NO password Enter your new password Enter your new password again for verification purposes Note: If you forget your password, you'll have to reset the router to the factory default (No password) with the reset button (see router's back panel) New Password Confirmed Password 29 Idle Time Out Enter the Max Idle Time (in minutes) allowed after login to the web configuration. If you idle long then this time, the router will force to close the login session and you have to login again if you want to continue doing further configuration. If you assign "0" for this value, there will be no time out. Check "Enable" to enable the remote management function. This is the IP address of the host in the Internet that will have management/configuration access to the Broadband router from a remote site. This means if you are at home and your home IP address has been designated the Remote Management host IP address for this router (located in your company office), then you are able to configure this router from your home. If the IP Address is left 0.0.0.0 this means anyone can access the router's web-based configuration from a remote location, providing they know the password. Click the Enable box to enable the Remote Management function. Note: When you want to access the web-based management from a remote site, you must enter the router's WAN IP address (e.g. 10.0.0.1) into your web-browser followed by port number 8080, e.g. 10.0.0.1:8080 (see below). You'll also need to know the password set in the Password Setting screen in order to access the router's web-based management. Enable IP Address Port The port number of remote management web interface. Click at the bottom of the screen to save the above configurations. You can now configure other advance sections or start using the router (with the advance settings in place) 30 2.2 WAN Use the WAN Settings screen if you have already configured the Quick Setup Wizard section and you would like to change your Internet connection type. The WAN Settings screen allows you to specify the type of WAN port connect you want to establish with your ISP. The WAN settings offer the following selections for the router's WAN port, Dynamic IP, Static IP, PPPoE, PPTP and DNS. Parameters 2.2.1 Dynamic IP 2.2.2 Static IP address 2.2.3 PPPoE 2.2.4 PPTP Description Your ISP will automatically give you an IP address Your ISP has given you an IP address already Your ISP requires PPPoE connection. Your ISP requires you to use a Point-to-Point Tunneling Protocol (PPTP) connection. You can specify a DNS server that you wish to use. Once you have made a selection, click at the bottom of the screen and proceed to the manual's relevant sub-section 2.2.5 DNS 31 2.2.1 Dynamic IP Choose the Dynamic IP selection if your ISP will automatically give you an IP address. Some ISP's may also require that you fill in additional information such as Host Name, Domain Name and MAC address. The BigPond login is optional, commonly used in Australia. If your ISP need you to do the BigPond login, please enable it and fill the user name, password and the server name. Parameters Pre-Request IP Description If your ISP requires a Pre-Request IP, type in the IP provided by your ISP, otherwise leave it blank if your ISP does not require a Pre-Request IP. If your ISP requires a Host Name, type in the host name provided by your ISP, otherwise leave it blank if your ISP does not require a Host Name. Your ISP may require a particular MAC address in order for you to connect to the Internet. This MAC address is the PC's MAC address that your ISP had originally connected your Internet connection to. Type in this MAC address in this section or use the "Clone MAC Address" button to replace the WAN MAC address with the MAC address of that PC (you have to be using Host Name MAC Address 32 that PC for the Clone MAC Address button to work). To find out the PC's MAC address see Appendix A. (see Glossary for an explanation on MAC address) BigPond User Name Password BigPond is commonly used in Australia. If your ISP need you to do the BigPond login, please enable it. The user name required by BigPond login. The password required by BigPond login. Login Server The BigPond login server address. Click when you have finished the configuration above. Congratulations! You have completed the configuration for the Cable Modem connection. You can start using the router now, if you wish to use some of the advance features supported by this router see chapter 2, 3, 4. 2.2.2 Static IP Address Select Static IP address if your ISP has given you a specific IP address for you to use. Your ISP should provide all the information required in this section. (See chapter 1 "Fixed IP" for more detail) 2.2.3 PPPoE (PPP over Ethernet) Select PPPoE if your ISP requires the PPPoE protocol to connect you to the Internet. Your ISP should provide all the information required in this section. (See chapter 1 "PPPoE" for more detail) 2.2.4 PPTP Select PPTP if your ISP requires the PPTP protocol to connect you to the Internet. Your ISP should provide all the information required in this section. (See chapter 1 "PPTP" for more detail) 2.2.5 DNS A Domain Name System (DNS) server is like an index of IP addresses and Web addresses. If you type a Web address into your browser, such as www.router.com, a DNS server will find that name in its index and the matching IP address. Most ISPs provide a DNS server for speed and convenience. If your Service Provider connects you to the Internet with dynamic IP settings, it is likely that the DNS server IP address is provided automatically. However, if there is a DNS server that you would rather use, you need to specify the IP address of that DNS server here. (See chapter 1 Step 3 "DNS" for more detail) 33 2.3 LAN The LAN setting allows you to assign a private IP address for this router. You can also enable DHCP server to manage your IP automatically. 34 2.3.1 LAN Settings The LAN Settings allow you to specify a private IP address for your router's LAN ports as well as a subnet mask for your LAN segment. You also can enable the DHCP server to let the router manage private IP addresses for you automatically. Parameters IP address Subnet Mask DHCP Server Default 192.168.2.1 Description This is the router's LAN port IP address (Your LAN clients default gateway IP address) The Subnet Mask for your LAN segment is fixed as 255.255.255.0 You can enable or disable the DHCP server. By enabling the DHCP server the router will automatically give your LAN clients an IP address. If the DHCP is not enabled then you'll have to manually set your LAN client's IP addresses; make sure the LAN Client is in the same subnet as this broadband router if you want the router to be your LAN client's default gateway 255.255.255.0 Enabled 35 Lease Time The DHCP when enabled will temporarily give your LAN clients an IP address. In the Lease Time setting you can specify the time period that the DHCP lends an IP address to your LAN clients. The DHCP will change your LAN client's IP address when this time threshold period is reached You can select a particular IP address range for your DHCP server to issue IP addresses to your LAN Clients. Note: By default the IP range is from: Start IP 192.168.2.100 to End IP 192.168.2.199. If you want your PC to have a static/fixed IP address then you'll have to choose an IP address outside this IP address Pool IP Address Pool Lease Time The DHCP when enabled will temporarily give your LAN clients an IP address. In the Lease Time setting you can specify the time period that the DHCP lends an IP address to your LAN clients. The DHCP will change your LAN client's IP address when this time threshold period is reached You can specify a Domain Name for your LAN Local Domain Name Click at the bottom of the screen to save the above configurations. You can now configure other advance sections or start using the router (with the advance settings in place) 36 2.3.2 DHCP Mapping The DHCP Mapping allows you to manually assign the client MAC address and IP address mapping and let the clients in the list get the same IP address every time. Parameters Client MAC Address Assigned Address Description The MAC Address of the client. The IP Address that will be assigned to the client. Click at the bottom of the screen to save the above configurations. You can now configure other advance sections or start using the router (with the advance settings in place) 37 2.4 NAT Network Address Translation (NAT) allows multiple users at your local site to access the Internet through a single Public IP Address or multiple Public IP Addresses. NAT provides Firewall protection from hacker attacks and has the flexibility to allow you to map Private IP Addresses to Public IP Addresses for key services such as Websites and FTP. Parameter 2.4.1 Special Application Description Some applications require multiple connections, such as Internet games, video conferencing, Internet telephony and others. In this section you can configure the router to support these types of applications. 2.4.2 Virtual Server You can have different services (e.g. email, FTP, Web etc.) going to different service servers/clients in your LAN. The Virtual Server allows you to re-direct a particular service port number (from the Internet/WAN Port) to a particular LAN IP address and its service port number. 2.4.3 Port Forwarding You can have different services (e.g. email, FTP, Web etc.) going to different service servers/clients in your LAN. The Port Forwarding allows you to re-direct a particular range of service port numbers (from the Internet/WAN Ports) to a particular LAN IP address. 38 2.4.4 DMZ The DMZ function allows you to re-direct all packets going to your WAN port IP address to a particular IP address in your LAN. Click on one of the three NAT selections and proceed to the manual's relevant subsection. 39 2.4.1 Special Application Some applications require multiple connections, such as Internet games, video conferencing, Internet telephony and others. In this section you can configure the router to support multiple connections for these types of applications. Parameters Trigger Port Description This is the out going (Outbound) port number for this particular application Select whether the outbound port protocol is "TCP" or "UDP". Enter the In-coming (Inbound) port or port range for this type of application (e.g. 2300-2400, 47624) Note: Individual port numbers are separated by a comma (e.g. 47624, 5775, 6541 etc.). To input a port range use a "dash" to separate the two port number range (e.g. 2300-2400) Trigger Type Public Port Public Type Select the Inbound port protocol type: "TCP" or "UDP". Enabled You have to check this box to enable this rule. Click at the bottom of the screen to save the above configurations. You can now configure other advance sections or start using the router (with the advance settings in place) 40 Example: Special Applications If you need to run applications that require multiple connections, then specify the port (outbound) normally associated with that application in the "Trigger Port" field. Then select the protocol type (TCP or UDP) and enter the public ports associated with the trigger port to open them up for inbound traffic. Example: ID 1 2 Trigger Port Trigger Type 28800 6112 UDP UDP Public Port 2300-2400, 47624 6112 Public Type TCP UDP Comment MSN Game Zone Battle.net In the example above, when a user trigger's port 28800 (outbound) for MSN Game Zone then the router will allow incoming packets for ports 2300-2400 and 47624 to be directed to that user. Note: Only one LAN client can use a particular special application at a time. 41 2.4.2 Virtual Server Use the Virtual Server function when you want different servers/clients in your LAN to handle different service/Internet application type (e.g. Email, FTP, Web server etc.) from the Internet. Computers use numbers called port numbers to recognize a particular service/Internet application type. The Virtual Server allows you to re-direct a particular service port number (from the Internet/WAN Port) to a particular LAN private IP address and its service port number. (See Glossary for an explanation on Port number) Parameters Private IP Description This is the LAN client/host IP address that the Public Port number packet will be sent to. Note: You need to give your LAN PC clients a fixed/static IP address for Virtual Server to work properly. This is the port number (of the above Private IP host) that the below Public Port number will be changed to when the packet enters your LAN (to the LAN Server/Client IP) Select the port number protocol type (TCP or UDP). Private Port Type Public Port Enter the service (service/Internet application) port number from the Internet that will be re-directed to the above Private IP address host in your LAN Note: Virtual Server function will have priority over the DMZ function if there is a conflict between the Virtual Server and the DMZ settings. 42 Enabled You have to check this box to enable this rule. Click at the bottom of the screen to save the above configurations. You can now configure other advance sections or start using the router (with the advance settings in place) Example: Virtual Server The diagram below demonstrates one of the ways you can use the Virtual Server function. Use the Virtual Server when you want the web server located in your private LAN to be accessible to Internet users. The configuration below means that any request coming form the Internet to access your web server will be translated to your LAN's web server (192.168.2.2). Note: For the virtual server to work properly Internet/remote users must know your global IP address. (For websites you will need to have a fixed/static global/public IP address) 43 2.4.3 Port Forwarding The Port Forwarding allows you to re-direct a particular range of service port numbers (from the Internet/WAN Ports) to a particular LAN IP address. It helps you to host some servers behind the router NAT firewall. Parameter Server IP Description This is the private IP of the server behind the NAT firewall. Note: You need to give your LAN PC clients a fixed/static IP address for Port Forwarding to work properly. The range of ports to be forward to the private IP. (e.g. 2300-2400, 47624) Mapping Ports Note: Individual port numbers are separated by a comma e.g. 47624, 5775, 6541 etc.). To input a port range use a "dash" to separate the two port number range (e.g. 2300-2400) Enabled You have to check this box to enable this rule. Click at the bottom of the screen to save the above configurations. You can now configure other advance sections or start using the router (with the advance settings in place) 44 2.4.4 DMZ If you have a local client PC that cannot run an Internet application (e.g. Games) properly from behind the NAT firewall, then you can open the client up to unrestricted two-way Internet access by defining a DMZ Host. The DMZ function allows you to re-direct all packets going to your WAN port IP address to a particular IP address in your LAN. The difference between the virtual server and the DMZ function is that the virtual server re-directs a particular service/Internet application (e.g. FTP, websites) to a particular LAN client/server, whereas DMZ re-directs all packets (regardless of services) going to your WAN IP address to a particular LAN client/server. Parameters Enable Description You have to check this box to enable the DMZ function. Note: If there is a conflict between the Virtual Server and the DMZ setting, then Virtual Server function will have priority over the DMZ function. Public IP Private IP The WAN IP address that a particular DMZ host in your LAN will be mapped to. Input the IP address of a particular host in your LAN that will receive all the packets originally going to the WAN port/Public IP address above. Note: You need to give your LAN PC clients a fixed/static IP address for DMZ to work properly. You can now configure other advance sections or start using the router (with the advance settings in place) 45 2.5 Firewall The Broadband router provides extensive firewall protection by restricting connection parameters, thus limiting the risk of hacker attack, and defending against a wide array of common Internet attacks. Note: To enable the Firewall settings select Enable and click Apply Parameters 2.5.1 Hacker Prevention 2.5.2 Client Filtering 2.5.3 URL Filtering Description The Broadband router's firewall can block common hacker attacks. Client Filtering allows you to specify which hosts users can or cannot have access to certain Internet applications URL Filtering allows you to specify which URLs can not be accessed by users. MAC Control allows you to specify which MAC addresses can or cannot have access to Internet. 2.5.4 MAC Control Click on one of the firewall selections and proceed to the manual's relevant sub-section 46 2.5.1 Hacker Prevention The Broadband router's firewall can block common hacker attacks, including Denial of Service, Ping of Death, Port Scan and Sync Flood. If Internet attacks occur the router can log the events. Parameters Enable Hacker Attack Protect Discard PING from WAN side Allow to PING the Gateway Drop Port Scan Packets Allow to Scan Security Port Description Check this box to enable the hacker DoS attacks. Check this box to discard PING packets come from the WAN side. Check this box to let the router's WAN port will not respond to any Ping requests Check this box to protect the router from Port Scan. Check this box to allow client scan security port 113. Check this box to discard NetBIOS packets from passing through this router. Discard NetBIOS Packets 47 Accept Fragment Packets Send ICMP Packets When Error Check this box to accept fragment packets. Check this box to enable sending ICMP packets when an error occurs. Click at the bottom of the screen to save the above configurations. You can now configure other advance sections or start using the router (with the advance settings in place) 48 2.5.2 Client Filtering If you want to restrict users from accessing certain Internet applications/services (e.g. Internet websites, email, FTP etc.), then this is the place to set that configuration. Client Filtering allows users to define the traffic type permitted in your LAN. You can control which PC client can have access to these services. Parameters Enable Client Filter IP Port Description Check this box to enable Client Filtering function. Enter the client IP range that you want to filter. Enter the port range of services that you want to restrict the clients to access. Select the protocol type of services that you want to restrict the clients to access. Select "Always" if you want to block the clients from accessing the services all the time. Select "Block" if you want to block the clients from Type Block Time 49 accessing the services only during the assigned time period. Day Select the period of week day you want to apply this rule. Select the time period in a day you want to apply this rule. Check this box to enable this rule. Time Enable You can now configure other advance sections or start using the router (with the advance settings in place) 50