Allnet ALL1297 User guide

CE Mark Warning

This equipment complies with the requirements relating to electromagnetic

compatibility, EN55022 class B for ITE, the essential protection requirement of Council

Directive 89/336/EEC on the approximation of the laws of the Member States relating to

electromagnetic compatibility.

FCC Certifications

This Equipment has been tested and found to comply with the limits for a Class B digital

device, pursuant to Part 15 of the FCC rules. These limits are designed to provide

reasonable protection against harmful interference in a residential installation. This

equipment generates, uses and can radiate radio frequency energy and, if not installed and

used in accordance with the instructions, may cause harmful interference to radio

communications. However, there is no guarantee that interference will not occur in a

particular installation. If this equipment does cause harmful interference to radio or television

reception, which can be determined by turning the equipment off and on, the user is

encouraged to try to correct the interference by one or more of the following measures:

- Reorient or relocate the receiving antenna.

- Increase the separation between the equipment and receiver.

- Connect the equipment into an outlet on a circuit different from that to which the receiver is

connected.

- Consult the dealer or an experienced radio/TV technician for help.

This device complies with Part 15 of the FCC Rules. Operation is subject to the following two

conditions: (1) this device may not cause harmful interference, and (2) this device must

accept any interference received; including interference that may cause undesired operation.

Company has an on-going policy of upgrading its products and it may be possible that

information in this document is not up-to-date. Please check with your local distributors

for the latest information. No part of this document can be copied or reproduced in any

form without written consent from the company.

Trademarks:

All trade names and trademarks are the properties of their respective companies.

Document Version: 2.0

Table of Contents

WELCOME TO MULTI HOMING ............................................... 1

SETTING UP THE HARDWARE................................................... 2

NETWORKING WITH THE WIZARD ........................................ 3

UNDERSTANDING THE USER INTERFACE ............................ 4

BASIC CONFIGURATION............................................................. 6

CONNECTION TYPE SET-UP .............................................................. 8

CONFIGURING A STATIC IP ADDRESS................................................. 8

CONFIGURING A (DYNAMIC) DHCP ACCOUNT ................................ 9

CONFIGURING MULTI HOMING TO USE A PPPOE ACCOUNT............ 10

CONFIGURING MULTI HOMING TO USE A PPTP CONNECTION......... 12

NAT CONFIGURATION .................................................................... 13

CONFIGURING THE DNS SERVICE .................................................. 14

LOAD BALANCE CONFIGURATION .................................................. 15

CLONING A MAC ADDRESS............................................................ 17

DYNAMIC DNS CONFIGURATION................................................... 18

LAN INTERFACE CONFIGURATION ................................................. 21

ROUTER SERVICE CONFIGURATION ................................................ 23

SECURITY...................................................................................... 24

DISABLING ICMP REPLIES ............................................................. 25

BLOCKING INDIVIDUAL (OR SERVICE PORT) OF IP ADDRESSES ON THE

INTERNET....................................................................................... 27

MODIFYING AN IP ADDRESS OR REMOVING AN POLICY FROM THE

INCOMING POLICY LIST

................................................................... 28

BLOCKING INDIVIDUAL (OR SERVICE PORT) OF LAN CLIENTS FROM

ACCESSING THE

INTERNET.............................................................. 28

MAPPING INTERNAL PORTS TO THE OUTSIDE ................................. 30

CONFIGURING A VIRTUAL SERVER ................................................. 32

PORT TRIGGERING CONFIGURATION............................................... 33

URL BLOCKING............................................................................. 34

INTRANET ..................................................................................... 35

ACTIVATING/DEACTIVATING THE DHCP SERVICE .......................... 36

IP A

DDRESS POOL ASSIGNMENT .................................................... 36

A

UTOMATIC MAC-IP ASSOCIATION ............................................... 39

ADMINISTRATION ...................................................................... 40

CHANGING THE VALID USER AND PASSWORD .................................. 42

CONTROLLING WEB ACCESS CONFIGURATION BY IP ADDRESS...... 43

DISPLAY SYSTEM STATUS................................................................ 45

SETUP SYSTEM TIME....................................................................... 45

SETUP ROUTER SERVICES TIME...................................................... 47

RESTARTING YOUR SYSTEM ............................................................ 48

S

ET FACTORY DEFAULT ................................................................... 48

UPDATE YOUR SYSTEM SOFTWARE .................................................. 47

PRESERVING YOUR SYSTEM CONFIGURATION ................................. 49

LOADING YOUR SYSTEM CONFIGURATION ...................................... 49

VIEW SYSTEM LOG.......................................................................... 49

APPENDIX A

SPECIFICATIONS & ACCESSORIES

SYSTEM LED ................................................................................. 52

PORT LED...................................................................................... 52

P

ORTS' LED SUMMARY TABLE ....................................................... 53

F

ACTORY SETTING BUTTON ............................................................ 54

KEY FEATURE ................................................................................ 55

APPENDIX B

SPECIFYING INTERNET ADDRESSES................................ 57

APPENDIX C

COMMON PORT NUMBERS .................................................. 59

1

Welcome to

Multi Homing

The safest and most convenient way to the Information

Superhighway

elcome to Multi Homing! This powerful network tool will enable

you to securely connect multiple computers to the Internet through

a single DSL/Cable modem or T1/E1/ISDN CSU/DSU.

Through this simple comprehensive appliance, you can connect multiple

computers in your home or office using standard Ethernet networking.

Its highly configurable built-in network firewall provides you with the power to

choose specific services allowed through your network, while keeping all

malicious Internet attackers out. Multi Homing also provides super advanced

features like transparent proxy caching, remote utilization monitoring, virtual

private networking, printer sharing and sophisticated bandwidth control.

The simple Web-based interface will help you configure your Multi Homing

with true point-and-click ease.

This document will provide you with the guidance needed to tailor-fit Multi

Homing to your own networking needs.

Thank you for choosing Multi Homing to be part of your networking solution.

W

Chapter

1

2

Setting up the

Hardware

Network cabling made easy.

ulti Homing is a turnkey solution to connect your home or office to

the Internet through a high speed or 'always on' connection. The

following easy steps will get you hooked up and ready to go onto

the Internet.

1. Behind the Multi Homing unit, locate 6 Ethernet network ports (RJ-45).

These look like standard phone jacks, but wider.

2. Connect the wide area network (WAN) uplink port to the equipment

provided by your Internet service provider (ISP) (e.g. Cable/DSL modem

or T1/E1/ISDN CSU/DSU)

3. Connect the local area network (LAN) port to your office network hub or

switch

4. Set up a computer on your LAN

1

to obtain a dynamic IP address (please

refer to your operating system manual or reference guide for details)

5. Obtain an IP address from Multi Homing

6. Start up a Internet browser on your configuration computer and point it to

http://192.168.1.1. You should see the graphical user interface (GUI)

screen.

Congratulations! You have completed the hardware configuration requirements

for Multi Homing. Incidentally, you can now add to your title "Network

Administrator"

1 This computer will be referred to as the "configuration computer" or "Administrator computer" in other parts of this document

M

Chapter

2

3

Networking with

the Wizard

Using the Multi Homing Networking

Wizard is the fastest way to get started!

ecureSOHO comes with a web-based wizard that breezes you through

configuration. The wizard presents you with each necessary configuration

step and each possible option. Upon completion of a wizard based set

up, Multi Homing will be ready for use. When set to factory defaults, the wizard

starts up automatically -- It can also be invoked by clicking on the Configuration

Wizard button on the home tab. At the end of the initial configuration, the

appliance will ask the user for a username and password. This is a standard

authentication mechanism used to ensure that subsequent configuration

changes are done by the proper individuals. Do not give the

username/password to people who are not authorized to change your network

configuration.

S

Chapter

3

4

Understanding

the User Interface

Navigation Rules

ulti Homing has a web-based graphical user interface (GUI) that can

be accessed using a standard HTML (HTTP v1.0) compliant

browser. Once the LAN is properly connected a network

administrator can connect to it through the URL http://192.168.1.1

The GUI has two main navigational components: Tabs and Menus.

Each Tab represents a major group of functions that a user can configure and

are located on the top part of the screen.

The Home tab presents version information as well as a brief feature list. The

Networking tab includes all the essential configuration items required to get a

LAN up and running.

The Security tab provides configuration items that control firewall behavior. By

default, Multi Homing comes configured to lock out unsolicited network

connections. To allow specific services to be allowed through Multi Homing,

some modifications under this tab is required.

M

Chapter

4

Menu

Items

Navigation

Tab s

User

Dialog

Area

5

The Intranet tab accommodates changes that are LAN specific. Under this tab,

a network administrator can specify rules for the assignment of IP addresses as

well as manipulate tools that improve local area network performance and

resource availability, such as the transparent proxy cache.

The Administration Tab provides control, monitoring and troubleshooting

tools.

The Help Tab provide additional context sensitive information.

Menus are located at the left side of the screen provides additional navigation

for tab components.

After each session involving configuration modifications, the changes should be

saved and the system should be restarted to activate the changes.

6

Basic

Configuration

First things first

his chapter covers the use of all the configuration items under the

Networking Tab. Once configured, you should be able to securely

access the Internet through your Multi Homing.

Wide Area Network (WAN1)

The Internet is made up of wide area networks (WAN) and local area networks

(LAN). Each local area network connects to the Internet through a wide area

network.

The Multi Homing is the gateway used by your LAN to connect to your WAN.

Your WAN is provided by your Internet service provider (ISP) using a WAN

medium (Cable/DSL modem or T1/E1/ISDN CSU/DSU).

You will need information provided by your ISP to complete this step.

Depending on your WAN medium, your ISP may provide you with either a

static or dynamic (DHCP/BootP) connection. This information should be

included in the package that came from your ISP. Generally, if your ISP has

provided you with a fixed IP address, you have a static IP address. If your ISP

has provided a username and password, you have a PPPoE

2

link. If your ISP

provided neither an IP address or username/password pair, you most likely

have a DHCP based connection. If unsure, contact your Internet provider's

customer support.

2

Point to Point Protocol over Ethernet (PPPoE) is a common authentication/billing mechanism used by ISPs.

T

Chapter

5

7

Dynamic Host Configuration Protocol (DHCP) based configurations do not

require further set-up since IP address, gateway and DNS information are

automatically set by the ISP.

Secondary Wide Area Network (WAN 2)

Multi Homing has a second WAN port for a secondary WAN connection to the

Internet. Having two WAN ports, Multi Homing can share the Internet traffics

thru load balancing. The setup of secondary WAN interface (WAN 2) is the

same as the primary WAN interface. You can choose a second ISP to provide

your WAN 2 connection. Like primary WAN connection, you have the choice

of Static, Dynamic, PPPoE connection type to suit your ISP supporting

package. Otherwise, you may simple disable it if this does not apply to you.

8

CONNECTION TYPE SET-UP

1. Determine which connection type is assigned by ISP (check

documentation provided by ISP)

2. Click on Networking tab

3. Under the WAN1 Interface menu item, click on Connection

Type

4. Click on the appropriate radio button

5. Click on Apply

6. Do the rest of setting according to prompt window

CONFIGURING A STATIC IP ADDRESS

1. Determine the fixed IP address assigned by the ISP

2. Click on the Networking tab

3. Under the WAN2 Interface menu item, click on IP Address

3

4. Enter the IP address provided by the ISP in the appropriate

text box

5. Enter the netmask of the IP address provided by the ISP in

the appropriate text box

6. Enter the default router (or gateway) information provided by

the ISP in the appropriate text box.

7. Click on Update

8. Do the rest of setting according to prompt window

3

This option is only available if the connection type is configured to be static

9

CONFIGURING A (DYNAMIC) DHCP ACCOUNT

DHCP accounts do not need further configuration. However, for DHCP

accounts with ISPs that restrict IP addresses to specific MAC addresses, see the

subsection on MAC Cloning in the Advanced Networking Tools section of this

chapter.

10

CONFIGURING MULTI HOMING TO USE A ADSL

PPPOE ACCOUNT

1. Determine the username and password information provided

by the ISP

2. Click on the Networking tab

3. Under the WAN1 Interface menu item, click on ADSL-

PPPoE

4. Enter the username and password provided by the ISP into

the appropriate fields.

5. Select the appropriate connection mode for your ADSL-

PPPoE link

4

6. Click on Apply

7. Do the rest setting according to prompt window

4

ADSL-PPPoE allows your ISP to monitor the amount of time you are using the Internet for billing purposes. If your ISP or network

provider bills you for the amount of time that you are connected, you should set the 'Connect on Demand' option and set the

'Maximum Idle Time'. This feature automatically connects your system when needed, and disconnects it if you are not using the

Internet. This feature is both convenient and practical.

11

STARTING WAN1 ADSL-PPPOE MANUALLY

1. Click on ADSL-PPPoE under WAN1 Interface in the

Networking tab.

2. Click on Start

STOPPING WAN1 ADSL-PPPOE MANUALLY

1. Click on ADSL-PPPoE under WAN1 Interface in the

Networking tab.

2. Click on Stop.

12

CONFIGURING MULTI HOMING TO USE A PPTP

CONNECTION

1. Click on Connection Type under WAN1 Interface in the

Networking tab.

2. Click on ADSL-PPTP and press Apply.

3. Enter My IP Address (ex: 192.168.100.100), My Subnet Mask

(ex: 255.255.255.0), Server IP Address (ex: 192.168.100.1),

PPTP Account (ex: 123456) , PPTP Password (ex: 123456) and

press Apply.

13

NAT CONFIGURATION

SET UP ONE-TO-MANY NAT WITH WAN1 INTERFACE

1. Click on NAT under WAN1 Interface in the Networking tab.

2. Click on One-to-Many NAT and press Apply.

SET UP MANY-TO-MANY NAT WITH WAN1

INTERFACE

1. Click on NAT under WAN1 Interface in the Networking tab.

2. Click on Advanced Setting.

3. Enter Public IP Range (ex: 61.220.168.202-61.220.168.206).

4. Press Apply.

SET UP ONE-TO-ONE NAT WITH WAN1 INTERFACE

1. Click on NAT under WAN1 Interface in the Networking tab.

2. Click on Advanced Setting.

3. Enter Public IP in WAN (ex: 61.220.168.204), Private IP in

LAN (ex: 192.168.1.50).

4. Click on Apply

14

Domain Name Service (DNS)

Domain name service helps you to work with IP addresses by mapping them

out to simple 'human readable' names. Multi Homing needs the correct values

for certain LAN side client services (like web-browsing) to work properly. The

DNS server IP addresses should be provided to you by your ISP.

5

CONFIGURING THE DNS SERVICE

1. Click on the Networking tab

2. Under the WAN1 interface menu item, select DNS Settings

3. Enter up to 3 DNS IP addresses into their corresponding

fields

4. Click on Apply

Load Balance

SETTING LOAD BALANCE BY BANDWIDTH

1. Click on Load Balance under WAN2 Interface in the

5

DHCP and PPPoE configurations may not require this step.

15

Networking tab.

2. Choose Bandwidth in Load Balance by combo box.

3. Choose Rate in WAN1:WAN2 combo box (ex: 50%: 50%).

4. Press Apply button.

SETTING LOAD BALANCE BY IP

1. Click on Load Balance under WAN2 Interface in the

Networking tab.

2. Enter some IP addresses (ex: 140.131.50.20) in the text box

under Hosts which use WAN#1.

3. Enter some IP addresses (ex: 211.72.254.6) in the text box

under Hosts which use WAN#2.

4. Press Apply.

16

SETTING LOAD BALANCE BY PORT

1. Click on Load Balance under WAN2 Interface in the

Networking tab.

2. Click some items under Ports which use WAN#1.

3. Click some items under Ports which use WAN#2.

4. Press Apply.

ADDING LOAD BALANCE PREDEFINED PORT

1. Click on Load Balance under WAN2 Interface in the

Networking tab.

2. Click on Predefined.

3. Enter Port Number (ex: 23), Description (ex: Telnet), and

press Apply.

DELETING LOAD BALANCE PREDEFINED PORT

1. Click on Load Balance under WAN2 Interface in the

Networking tab.

2. Click on Predefined.

3. Choose one pair of item and leave them blank.

Advanced Networking Tools

Multi Homing provides advanced networking features that aid in deploying the

network. The crafty Network Administrator can find various applications for

these tools.

Page is loading ...

Allnet ALL1297 User guide

Related papers

Other documents