Amit TE1088 System Manual

Networking gateway
Table of Contents

Advertisement

Quick Links

Networking Gateway
System Manual
S/W Version 2.0
August 2005
P/N 214196

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the TE1088 and is the answer not in the manual?

Questions and answers

Subscribe to Our Youtube Channel

Summary of Contents for Amit TE1088

  • Page 1 Networking Gateway System Manual S/W Version 2.0 August 2005 P/N 214196...
  • Page 3: About This Manual

    About This Manual This manual contains the following chapters: Chapter 1 – Product Description: Describes the Networking Gateway and its components. Chapter 2 – Installation: Describes how to install the system and its components. Chapter 3 – Operation and Administration: Describes how to use the web-based management application for configuring parameters and managing the Networking Gateway.
  • Page 5: Table Of Contents

    Contents Chapter 1 - Product Description ............1 Introducing the Networking Gateway IDU ............2 Functions and Features ...................3 1.2.1 Basic Functions....................3 1.2.2 Wireless Functions....................4 1.2.3 Security Functions ....................4 1.2.4 Advanced Functions ....................5 Specifications....................6 1.3.1 Radio Specifications ....................6 1.3.2 Regulatory Standards Compliance ..............6 1.3.3 Environmental ......................7 1.3.4...
  • Page 6 Contents Chapter 3 - Using the Web Configuration Server......17 Introduction ....................18 Accessing the Web Configuration Server............ 19 Log in and Log out ..................20 3.3.1 The Main Menu ....................21 3.3.2 Control Buttons ....................21 Status ......................23 Wizard (Administrator only) ................25 Basic Setting....................
  • Page 7 Introducing the Networking Gateway IDU 3.9.2 System Log ......................73 3.9.3 Dynamic DNS.....................75 3.9.4 SNMP Setting.....................76 3.9.5 Routing Table.....................77 3.9.6 Schedule Rule....................80 3.9.7 UPnP Setting......................83 3.10 Toolbox ......................84 3.10.1 View Log ......................84 3.10.2 Firmware Upgrade (Administrator only).............85 3.10.3 Backup Setting ....................86 3.10.4 Reset to Default ....................87 3.10.5 Reboot........................87 3.10.6 DRAP .........................88...
  • Page 9 Figures Figure 1: Front Panel .........................11 Figure 2: Rear Panel (without antenna).....................13 Figure 3: Log In Window........................20 Figure 4: Networking Gateway Main Window..................21 Figure 5: System Status ........................23 Figure 6: Setup Wizard ........................25 Figure 7: Setup Wizard - Select WAN Type ..................25 Figure 8: Setup Wizard –...
  • Page 10 Figures Figure 25: DHCP Clients List......................45 Figure 26: MAC Address Control.......................46 Figure 27: DHCP Clients Combo Box ....................48 Figure 28: Wireless Setting .......................48 Figure 29: Wireless Clients List ......................51 Figure 30: Advanced Wireless Setting ....................52 Figure 31: Change Password ......................54 Figure 32: Security Setting Window ....................55 Figure 33: Packet Filter Initial Window ....................56 Figure 34: Inbound Packet Filter –...
  • Page 11 Introducing the Networking Gateway IDU Figure 54: Schedule Rule ........................80 Figure 55: Schedule rule Setting .......................81 Figure 56: Schedule Rule Setting – Example Step 1 ................81 Figure 57: Schedule Rule Setting – Example Step 2 ................82 Figure 58: Virtual Server - Schedule Rule#1 ..................82 Figure 59: Packet Filter - Schedule Rule#1..................83 Figure 60: UPnP Setting ........................83 Figure 61: Toolbox ..........................84...
  • Page 13 Tables Table 1: Radio Specifications ......................6 Table 2: Regulatory Standards Compliance..................6 Table 3: Environmental Specifications....................7 Table 4: Mechanical Specifications .....................7 Table 5: Electrical Specifications ......................7 Table 6: Front Panel LEDs ........................11 Table 7: Rear Panel Connectors .......................13 Table 8: Status Window Parameters ....................23 Table 9: Setup Wizard –...
  • Page 14 Tables Table 24: Wireless Clients List Parameters ..................51 Table 25: Advanced Wireless Setting Parameters................52 Table 26: Advanced Wireless Setting Parameters................56 Table 27: URL Blocking Parameters ....................61 Table 28: Domain Filter Parameters....................63 Table 29: Firewall Parameters......................64 Table 30: Miscellaneous Items Parameters ..................65 Table 31: Virtual Server Parameters ....................68 Table 32: Special Applications Parameters..................69 Table 33: VPN Pass Through Parameters ..................71...
  • Page 15: Chapter 1 - Product Description

    Chapter 1 - Product Description In This Chapter: Introducing the Networking Gateway IDU, page 2 Functions and Features, page 3 Specifications, page 6...
  • Page 16: Introducing The Networking Gateway Idu

    Chapter 1 - Product Description Introducing the Networking Gateway The Networking Gateway Indoor Unit (IDU) enables operators and service providers using a Broadband Wireless Access system to provide subscribers with a number of broadband services transparently. The Networking Gateway IDU together with the SU-ODU comprises a Subscriber Unit that provides data connections to the Base Station.
  • Page 17: Functions And Features

    Functions and Features Functions and Features 1.2.1 Basic Functions Auto-sensing Ethernet Switch Equipped with a 4-port auto-sensing Ethernet switch. Printer sharing Embedded print server to allow all of the networked computers to share one printer through the USB host port. WAN Types Support of several WAN types: Static, Dynamic, PPPoE, PPTP, and Dynamic IP with Road Runner Session Management (e.g., Telstra,...
  • Page 18: Wireless Functions

    Chapter 1 - Product Description Statistics of WAN Support Enables to monitor inbound and outbound packets. 1.2.2 Wireless Functions High speed for wireless LAN connection Up to 54 Mbps data rate by incorporating Orthogonal Frequency Division Multiplexing (OFDM). IEEE 802.11b compatible (11M) Allowing inter-operation among multiple vendors.
  • Page 19: Advanced Functions

    Functions and Features SPI Mode Support When SPI Mode is enabled, the Networking Gateway checks every incoming packet and detects if this packet has changed its IP address since initial negotiation. DoS Attack Detection Support When this feature is enabled, the Networking Gateway detects and logs Denial of Service (DoS) attack arriving from the Internet.
  • Page 20: Specifications

    Chapter 1 - Product Description Specifications 1.3.1 Radio Specifications Table 1: Radio Specifications Item Description Frequency 2400-2483.5 MHz Wireless LAN Standards Compliant with IEEE 802.11b and IEEE 802.11g Output Power (Average) 10, 12, 15, 17 dBm Data Rates IEEE 802.11g mode: M, 48M, 36M, 24M, 18M, 12M, 6M with auto fallback in.
  • Page 21: Environmental

    Specifications 1.3.3 Environmental Table 3: Environmental Specifications Item Details Operating temperature C to 40 Operating humidity 5%-95% non condensing 1.3.4 Mechanical Table 4: Mechanical Specifications Item Details Dimensions (W x H x D) 190.5 x 26.2 x 111 mm Weight 0.62 kg 1.3.5 Electrical...
  • Page 23: Chapter 2 - Installation

    Chapter 2 - Installation In This Chapter: Installation Requirements, page 10 Panels Layout and Components, page 11 Installation, page 14...
  • Page 24: Installation Requirements

    Chapter 2 - Installation Installation Requirements 2.1.1 Packing List Networking Gateway IDU Antenna Power Transformer Mains power cord 2.1.2 Additional Installation Requirements Ethernet cable(s) for connecting to the end-user’s data equipment. Mains plug adapter or termination plug (if the power plug on the supplied AC power cord does not fit local power outlets).
  • Page 25: Panels Layout And Components

    Panels Layout and Components Panels Layout and Components 2.2.1 Front Panel Figure 1: Front Panel 2.2.1.1 Front Panel LEDs Table 6: Front Panel LEDs Function Status Description POWER Power Indication On Power is available. Wireless LAN Sending or receiving data via wireless WLAN Blinking Activity...
  • Page 26 Chapter 2 - Installation Function Status Description Data rate is 10 Mbps on the corresponding LAN port. The ODU port is connected to the ODU. ODU Port ODU LINK/ACT The ODU port is sending or receiving Activity Blinking data. Data rate is 100 Mbps. ODU 10/100 ODU Port Data Rate...
  • Page 27: Rear Panel Components

    Panels Layout and Components 2.2.2 Rear Panel Components Figure 2: Rear Panel (without antenna) 2.2.2.1 Rear Panel Connectors Table 7: Rear Panel Connectors Connector Description POWER DC Power Inlet from Power Transformer Connection to the ODU. Carries Ethernet, Power (55 VDC) and signaling.
  • Page 28: Installation

    Chapter 2 - Installation Installation The unit can be placed on a desktop or a shelf. Alternatively, it may be wall- mounted. For optimal performance, place the Networking Gateway in the center of your office (or your home), in a location that is away from any potential source of interference, such as a metal wall or microwave oven.
  • Page 29 Installation If a printer is to be used, connect it to the USB port using a standard USB cable. To configure the Print Server on your computer(s), refer to Appendix A - Print Server. Configure the network settings of the computers for proper operation with the Networking Gateway.
  • Page 31: Chapter 3 - Using The Web Configuration Server

    Chapter 3 - Using the Web Configuration Server In This Chapter: Start-up and Log in on page 18 Status on page 23 Wizard on page 25 Basic Setting on page 33 Security Setting on page 55 NAT Setting on page 67 Advanced Settings on page 72 Toolbox on page 84...
  • Page 32: Introduction

    Chapter 3 - Using the Web Configuration Server Introduction The Networking Gateway IDU can be configured using the following methods: The Web Configuration Server A .cfg-file loaded into the unit from the web configuration server or TFTP. SNMP This document describes the configuration using the Web Configuration Server.
  • Page 33: Accessing The Web Configuration Server

    Accessing the Web Configuration Server Accessing the Web Configuration Server Follow the steps below to access the Web Configuration Server: Connect the unit to the AC mains. Connect PC to LAN port 1. NOTE When connecting from WAN, make sure that a remote administrator is enabled (see section 3.7.6), and enter the WAN IP address specified in the System Status window (see section 3.4) using TCP port 88.
  • Page 34: Log In And Log Out

    Chapter 3 - Using the Web Configuration Server Log in and Log out After connection is established, the networking gateway web user interface appears. There are two entry levels: for general users and for system administrators. The menus and screens vary depending on entry level. The menus and parameters specified hereinafter, refer to both entry levels, unless otherwise specified.
  • Page 35: The Main Menu

    Log in and Log out Figure 4: Networking Gateway Main Window 3.3.1 The Main Menu The Web Configuration Server view consists of a number of menu links (to the left). Clicking on each of them expands the menu node and displays the selected page with the applicable content (configurable parameters/options or status information) in the main area.
  • Page 36 Chapter 3 - Using the Web Configuration Server Save – Saves any changes made to the configuration. Most changes require rebooting the system for them to take effect. Undo – Recovers the original settings. Help – Displays a help screen for the specific window. Refresh –...
  • Page 37: Status

    Status Status The Status window appears in the main window upon successful log in. The window can be accessed at any time by clicking on the Status menu on the menu list. Figure 5: System Status The Status window provides information for observing the product's working status, as follows: Table 8: Status Window Parameters Parameter...
  • Page 38 Chapter 3 - Using the Web Configuration Server Parameter Description IP Address The WAN IP address. Release (Administrator only) – In Dynamic IP Address mode only, Click to release the WAN IP address. Subnet Mask The Subnet mask of the device. (The default is 255.255.255.0) Gateway The default Gateway IP address.
  • Page 39: Wizard (Administrator Only)

    Wizard (Administrator only) Wizard (Administrator only) The Setup Wizard will guide you through the basic configuration procedure (recommended for most users). Figure 6: Setup Wizard Click on Next. The Select WAN Type window appears. NOTE You can click Back at any time to return to previous screens and change your settings. Figure 7: Setup Wizard - Select WAN Type Select the WAN Type from the list: NG System Manual...
  • Page 40: Figure 8: Setup Wizard - Wan Type - Static Ip Address

    Chapter 3 - Using the Web Configuration Server Static IP Address – a static IP Address provided by the ISP Dynamic IP Address – an IP Address automatically obtained from the ISP (default) Dynamic IP Address with Road Runner Session Management (e.g. Telstra, BigPond) PPP over Ethernet –...
  • Page 41: Figure 9: Setup Wizard - Dynamic Ip Address

    Wizard (Administrator only) Set the following parameters provided by your ISP: Table 9: Setup Wizard – Static IP Address Parameters Parameter Description LAN IP Address Sets the local IP address of the device. Static IP Address The IP address of the WAN port. The default is 0.0.0.0.
  • Page 42: Figure 10: Setup Wizard - Dynamic Ip Address With Road Runner Session Management

    Chapter 3 - Using the Web Configuration Server Set the following parameters: Table 10: Setup Wizard – Dynamic IP Address Parameters Parameter Description LAN IP Address The local IP address of the device. The default IP address is 192.168.254.253. To change the IP address enter a new value.
  • Page 43: Figure 11: Setup Wizard - Ppp Over Ethernet

    Wizard (Administrator only) Set the following parameters: Table 11: Setup Wizard – Dynamic IP Address with Road Runner Session Management Parameters Parameter Description LAN IP Address The local IP address of the device. The default IP address is 192.168.254.253. To change the IP address enter a new value.
  • Page 44: Figure 12: Setup Wizard - Pptp

    Chapter 3 - Using the Web Configuration Server Set the following parameters: Table 12: Setup Wizard – PPPoE Parameters Parameter Description LAN IP Address The local IP address of the device. The default IP address is 192.168.254.253. To change the IP address enter a new value.
  • Page 45: Table 13: Setup Wizard - Pptp Parameters

    Wizard (Administrator only) Set the following parameters: Table 13: Setup Wizard – PPTP Parameters Parameter Description LAN IP Address The local IP address of the device. The default IP address is 192.168.254.253. . To change the IP address enter a new value. IP Mode select one of the following options: Dynamic IP Address (this is the default setting)
  • Page 46: Figure 13: Setup Wizard - Configuration Completed

    Chapter 3 - Using the Web Configuration Server Figure 13: Setup Wizard - Configuration Completed The configurations will take effect only after rebooting your computer. Click on Reboot to restart your computer. For more advance configurations, see details on the specific windows, below.
  • Page 47: Basic Setting

    Basic Setting Basic Setting The Basic Setting window allows to configure the settings for WAN, LAN, and Wireless and to change the password. Figure 14: Basic Setting 3.6.1 WAN Setup Click on WAN Setup from the Basic Setting menu on the menu list. The Primary Setup window appears.
  • Page 48: Figure 16: Virtual Computers

    Chapter 3 - Using the Web Configuration Server NOTE The WAN setup window is read only for user level entry. From the WAN Setup window you can: Set the WAN type – allows to select the WAN connection type of your ISP.
  • Page 49: Figure 17: Choose Wan Type

    Basic Setting NOTE The Reboot button is not available at first entry to the Primary Setup window and appears only after saving your changes. For user entry level (public password), the parameter fields in all WAN type screens are disabled (for display only). IMPORTANT Changes to the Primary Setup window will take effect only after rebooting the system.
  • Page 50: Figure 18: Primary Setup - Static Ip Address

    Chapter 3 - Using the Web Configuration Server Dynamic IP Address with Road Runner Session Management (e.g. Telstra BigPond). See section 3.6.1.3. PPP over Ethernet: Some ISPs require the use of PPPoE to connect to their services. See section 3.6.1.4. PPTP: Some ISPs require the use of PPTP to connect to their services.
  • Page 51: Figure 19: Primary Setup - Dynamic Ip Address

    Basic Setting Parameter Description The default is 0.0.0.0. Primary DNS The IP address of the primary Domain Name Server. The default is 0.0.0.0. Secondary DNS The IP address of the secondary Domain Name Server. The default is 0.0.0.0. Enable/Disable. When disabled, the gateway functions as a regular router as opposed to a NAT router.
  • Page 52: Figure 20: Primary Setup - Dynamic Ip Address With Road Runner Session Management

    Chapter 3 - Using the Web Configuration Server The Setup page for Dynamic IP Address includes the following parameters: Table 16: Dynamic IP Address Parameters Parameter Description Host Name Optional - Some ISPs require a host name, for example, Home. A string of maximum 39 characters.
  • Page 53: Table 17: Dynamic Ip Address With Road Runner Session Management Parameters

    Basic Setting The Setup page for Dynamic IP Address with Road Runner Session Management provides authentication using dedicated DHCP server and includes the following parameters: Table 17: Dynamic IP Address with Road Runner Session Management Parameters Parameter Description Account The account provided by your ISP A string of maximum 53 characters.
  • Page 54: Figure 21: Primary Setup - Pppoe

    Chapter 3 - Using the Web Configuration Server Figure 21: Primary Setup - PPPoE The Setup page for PPPoE includes the following parameters: Table 18: PPP over Ethernet Parameters Parameter Description PPPoE Account The account assigned to you by your ISP. PPPoE Password The password assigned to you by your ISP.
  • Page 55: Figure 22: Primary Setup - Pptp

    Basic Setting 3.6.1.5 PPTP Some ISPs require the use of PPTP to connect to their services. Figure 22: Primary Setup - PPTP The Setup page for PPTP includes the following parameters: Table 19: PPTP Parameters Parameter Description IP Mode Select one of the following options: Dynamic IP Address (this is the default setting) Static IP Address My IP Address...
  • Page 56: Lan Setup

    Chapter 3 - Using the Web Configuration Server Parameter Description Maximum Idle Time The amount of time of inactivity before disconnecting your PPTP session. To disable this feature, set this parameter to 0 seconds, or enable Auto-reconnect. Connection Control Authentication for IP allocation. Select one of the following options: Connect-on-demand –...
  • Page 57: Table 20: Lan Setup Parameters

    Basic Setting The LAN Setup page includes the following parameters: Table 20: LAN Setup Parameters Parameter Description LAN IP Address Sets the local IP address of the device. The users on your network must use this LAN IP address as their default gateway.
  • Page 58: Figure 24: Lan Setup - Dhcp Server Enabled

    Chapter 3 - Using the Web Configuration Server Figure 24: LAN Setup - DHCP Server Enabled The LAN PC receives a DHCP IP address from the Networking Gateway. To receive the DHCP IP address from the DHCP server, perform the following procedure: Set the DHCP Server parameter to Disable.
  • Page 59: Figure 25: Dhcp Clients List

    Basic Setting 3.6.2.1 DHCP Clients List Figure 25: DHCP Clients List The DHCP Clients List displays the following parameters for each DHCP client: Table 21: DHCP Clients List Parameters Parameter Description IP Address The IP address of the DHCP client. Host Name The host name of the DHCP client.
  • Page 60: Figure 26: Mac Address Control

    Chapter 3 - Using the Web Configuration Server 3.6.2.2 Fixed Mapping Opens the MAC Address Control window. MAC Address Control allows to assign different access rights for different users and to assign a fixed IP address to a specific MAC address. NOTE All the settings in this page will take effect only when MAC Address Control is set to "Enable".
  • Page 61 Basic Setting Parameter Description clients on the wireless LAN, or use the Web configuration. Association control "Association" refers to the exchanging of information between wireless clients and the device to establish a link between them. A wireless client is able to transmit and receive data to the device only after successful association.
  • Page 62: Wireless Setting

    Chapter 3 - Using the Web Configuration Server To enter the MAC address: Use the DHCP clients combo box. Figure 27: DHCP Clients Combo Box Select a specific client in the "DHCP clients" Combo box and click on Copy to to copy the MAC address of the selected client to the selected ID in the "ID"...
  • Page 63: Table 23: Wireless Setting Parameters

    Basic Setting The Wireless Setting window includes the following parameters: Table 23: Wireless Setting Parameters Parameter Description Wireless Enable/Disable – Check the Enable box to enable this service. The default setting is "Enable". Network ID (SSID) Network ID is used for identifying the Wireless LAN (WLAN). Client stations can roam freely over this product and other Access Points that have the same Network ID.
  • Page 64 Chapter 3 - Using the Web Configuration Server Parameter Description Pre-share key mode: ASCII or HEX can be selected. Pre share key: 32 ASCII characters or 64 hexadecimal digits pre-share key (encryption key). WPA (Wi-Fi Protected Access) – improves data protection and implements access control to Wireless LAN systems.
  • Page 65: Figure 29: Wireless Clients List

    Basic Setting 3.6.3.1 Wireless Clients List Clicking on the Wireless Clients List button that appears in the Wireless Setting window opens the Wireless Clients List window. Figure 29: Wireless Clients List The Wireless Clients List displays the following parameters for each wireless client: Table 24: Wireless Clients List Parameters Parameter...
  • Page 66: Figure 30: Advanced Wireless Setting

    Chapter 3 - Using the Web Configuration Server Figure 30: Advanced Wireless Setting The Advanced Wireless Setting window includes the following parameters: Table 25: Advanced Wireless Setting Parameters Parameter Description Beacon Interval Specify the intervals (in milliseconds) between the packets sent by the access point to synchronize the wireless network (beacons).
  • Page 67 Basic Setting Parameter Description DTIM Interval Delivery Traffic Indication Message (DTIM) is a countdown informing clients of the next window for listening to broadcast and multicast messages. The range is: 1~65535 seconds. The default value is 3 seconds. Wireless Mode The wireless mode supported: 802.11b, 802.11g, or both.
  • Page 68: Change Password

    Chapter 3 - Using the Web Configuration Server 3.6.3.3 MAC Address Control MAC Address Control allows to assign different access rights for different users and to assign a fixed IP address to a specific MAC address. For further details, see section 3.6.2.2. 3.6.4 Change Password The Change Password window allows to change the system password.
  • Page 69: Security Setting

    Security Setting Security Setting Click on the Security Setting menu on the menu list to display the submenus and the Security Setting window. Figure 32: Security Setting Window 3.7.1 MAC Control MAC Address Control allows to assign different access rights for different users and to assign a fixed IP address to a specific MAC address.
  • Page 70: Figure 33: Packet Filter Initial Window

    Chapter 3 - Using the Web Configuration Server Figure 33: Packet Filter Initial Window The Outbound filter applies on all outbound packets. The Inbound filter applies only on packets that are destined to Virtual Servers or DMZ host. You can select one of the following filtering policies: Allow all to pass except those match the specified rules Deny all to pass except those match the specified rules Up to 8 rules can be specified for each direction, inbound and outbound.
  • Page 71: Inbound Filter

    Security Setting Parameter Description Destination IP address You can define a single IP address (for example, 4.3.2.1) or a range of IP addresses (for example, 4.3.2.1-4.3.2.254). An empty field denotes all IP addresses. Destination port address You can define a single port (for example, 80) or a range of ports (for example, 1000-1999).
  • Page 72: Figure 34: Inbound Packet Filter - Example 1

    Chapter 3 - Using the Web Configuration Server Example 1: Figure 34: Inbound Packet Filter – Example 1 In this example, IPs (1.2.3.100-1.2.3.149) are allowed to send mail (port 25), receive mail (port 110), and browse the Internet (port 80). IPs (1.2.3.10-1.2.3.20) are allowed to perform all operations.
  • Page 73: Figure 36: Outbound Packet Filter - Example 1

    Security Setting In this example, IPs (1.2.3.100-1.2.3.119) are allowed to do everything except read net news (port 119) and transfer files via FTP (port 21). All other IPs are all allowed to perform all operations. 3.7.2.2 Outbound Filter To enable Outbound Packet Filter, click on the Outbound Filter button and check the Enable box in the Outbound Packet Filter window.
  • Page 74: Url Blocking (Administrator Only)

    Chapter 3 - Using the Web Configuration Server Example 2: Figure 37: Outbound Packet Filter - Example 2 In this example, IPs (192.168.123.100) and (192.168.123.119) can only read net news (port 119) and send mail (port 25). They are blocked from performing any other operation.
  • Page 75: Figure 39: Url Blocking Example

    Security Setting The URL Blocking window includes the following parameters: Table 27: URL Blocking Parameters Parameter Description URL Blocking Enable/Disable - Check to enable the URL Blocking feature. If any part of the Web site's URL matches the pre-defined word specified in this field, the connection will be blocked. For example, you can use a pre-defined word "sex"...
  • Page 76: Domain Filter (Administrator Only)

    Chapter 3 - Using the Web Configuration Server In this example: All URLs which include the string "msn" will be blocked, and the action will be recorded in the log file. All URLs which include the string "sina" will be blocked, and the action will be recorded in the log file.
  • Page 77: Table 28: Domain Filter Parameters

    Security Setting Table 28: Domain Filter Parameters Parameter Description Domain Filter Check to enable the Domain Filter feature to prevent users from accessing specific URLs. Log DNS Query Check to enable logging users' attempts to enter the specified URLs. Privilege IP Addresses Sets a group of hosts and allows them to access the network Range without restriction.
  • Page 78: Firewall (Administrator Only)

    Chapter 3 - Using the Web Configuration Server 3.7.5 Firewall (Administrator only) Firewall rules deny/allow traffic from passing through the device. Figure 41: Firewall Up to 8 rules can be specified for each direction of traffic: inbound and outbound. For each rule, you can define the following: Table 29: Firewall Parameters Parameter Description...
  • Page 79: Miscellaneous Items (Administrator Only)

    Security Setting 3.7.6 Miscellaneous Items (Administrator only) Figure 42: Miscellaneous Items From the Miscellaneous Items window you can set the following parameters: Table 30: Miscellaneous Items Parameters Parameter Description Remote Administrator Enables the user to perform administration tasks from a Host/Port remote host.
  • Page 80 Chapter 3 - Using the Web Configuration Server Parameter Description side SPI Mode When enabled, the router records the information, such as IP address, port address, ACK, SEQ number and so on, of the packets that pass through the WAN, and the Networking Gateway checks every incoming packet to detect whether it is valid.
  • Page 81: Nat Setting (Administrator Only)

    NAT Setting (Administrator only) NAT Setting (Administrator only) The NAT Setting page provides access to configuring the virtual server, special AP, DMZ host and VPN pass through. Figure 43: NAT Setting 3.8.1 Virtual Server Virtual Server enables WWW, FTP and other services on your LAN to be accessible to Internet users.
  • Page 82: Special Ap

    Chapter 3 - Using the Web Configuration Server Specify the following parameters for each ID: Table 31: Virtual Server Parameters Parameter Description Protocol Select from TCP, UDP, * (all). The default setting is *. Service Ports Enter a port number, or a range of ports. Server IP Enter the server IP on the LAN interface.
  • Page 83: Dmz Host

    NAT Setting (Administrator only) Figure 45: Special Applications The Special Applications window includes the following parameters: Table 32: Special Applications Parameters Parameter Description Trigger The outbound destination port number issued by the application. Incoming Ports When the trigger packet is detected using the destination port, the inbound packets to the specified port numbers are allowed to pass through the networking gateway.
  • Page 84: Vpn Pass Through

    Chapter 3 - Using the Web Configuration Server Internet games, Video conferencing, Internet telephony (H.323 or SIP), and other special applications. CAUTION This feature exposes your computer and may cause security issues. Make sure your PC is updated with the last security updates. Figure 46: DMZ Host Check the Enable box to enable this feature.
  • Page 85: Table 33: Vpn Pass Through Parameters

    NAT Setting (Administrator only) The VPN Pass Through window includes the following parameters: Table 33: VPN Pass Through Parameters Parameter Description VPN PPTP Pass-Through Check to enable PPTP connection to pass through the device. The device can handle up to 8 concurrent sessions. VPN IPSec Pass-Through Check to enable IPSec connection to pass through the device.
  • Page 86: Advanced Settings (Administrator Only)

    Chapter 3 - Using the Web Configuration Server Advanced Settings (Administrator only) The Advanced Settings menu provides access to configuring additional features, such as System Time, Log, Dynamic DNS, SNMP, Routing, Scheduling Rules and enabling Universal Plug and Play protocol. Figure 48: Advanced Setting 3.9.1 System Time...
  • Page 87: System Log

    Advanced Settings (Administrator only) From the System Time window, you can select one of the following ways to set the date and time of the device: Table 34: System Time Parameters Parameter Description Get Date and Time by NTP Select if you want to set the device's internal clock using the Protocol Network Time Protocol (NTP) from a specific server located on the internet.
  • Page 88: Figure 50: System Log

    Chapter 3 - Using the Web Configuration Server Figure 50: System Log The System Log window includes the following parameters: Table 35: System Log Parameters Parameter Description IP Address for Syslog Server Enter the IP address of the syslog server. It is valid only on your subnet LAN.
  • Page 89: Dynamic Dns

    Advanced Settings (Administrator only) NOTE The changes made in the System Log page become effective upon clicking Save. Rebooting the system is not required. To view the system log: Click on the View Log… button at the bottom of the screen. The System Log opens (see View Log on page 84, Figure 62)
  • Page 90: Snmp Setting

    Chapter 3 - Using the Web Configuration Server The Dynamic DNS window includes the following parameters: Table 36: Dynamic DNS Parameters Parameter Description DDNS Click Enable or Disable to enable/disable Dynamic DNS. Provider Select from the list of Dynamic DNS servers on which you have an account.
  • Page 91: Routing Table

    Advanced Settings (Administrator only) The SNMP Setting window includes the following parameters: Table 37: SNMP Parameters Parameter Description Enable SNMP You must check either Local or Remote or both to enable the SNMP function. Local - The device will respond to requests from LAN. Remote –...
  • Page 92: Figure 53: Routing Table

    Chapter 3 - Using the Web Configuration Server Figure 53: Routing Table Routing Table settings are used to setup the functions of static and dynamic routing. The Routing Table window includes the following parameters: Table 38: Routing Table Parameters Parameter Description Dynamic Routing Routing Information Protocol (RIP) will exchange information...
  • Page 93 Advanced Settings (Administrator only) Example: Configuration on NAT Router Destination Subnet Mask Gateway Enabled 192.168.1.0 255.255.255.0 192.168.123.216 ˇ 192.168.0.0 255.255.255.0 192.168.123.103 ˇ If, for example, Client3 wanted to send an IP datagram to 192.168.0.2 (Client2), he would use the above table to determine that he had to go via 192.168.123.103 (Gateway2).
  • Page 94: Schedule Rule

    Chapter 3 - Using the Web Configuration Server 3.9.6 Schedule Rule Schedule Rule allows to set the schedule time for which a service will be turned on or off. Figure 54: Schedule Rule The Schedule Rule window includes the following parameters: Table 39: Routing Table Parameters Parameter Description...
  • Page 95: Figure 55: Schedule Rule Setting

    Advanced Settings (Administrator only) Figure 55: Schedule rule Setting You can enter a rule name and set which day and what time to schedule from “Start Time” to “End Time”. In the following example, a rule named "FTP Time" is scheduled to operate every day between 14:10 and 16:20. Figure 56: Schedule Rule Setting –...
  • Page 96: Figure 57: Schedule Rule Setting - Example Step 2

    Chapter 3 - Using the Web Configuration Server Figure 57: Schedule Rule Setting – Example Step 2 When rules are set, you can: Edit – Click to edit the specific rule. Delete – Click to delete the specific rule. When the rule is deleted, all subsequent rules are automatically renumbered.
  • Page 97: Upnp Setting

    Advanced Settings (Administrator only) Example2: Packet Filter – Apply Rule#1 using scheduled rule #1 (ftp time: every day 14:10 to 16:20). Figure 59: Packet Filter - Schedule Rule#1 3.9.7 UPnP Setting Universal Plug and Play (UPnP) is a protocol for connecting voice/video applications through the Networking Gateway when in NAT mode.
  • Page 98: Toolbox

    Chapter 3 - Using the Web Configuration Server 3.10 Toolbox The Toolbox menu provides access to viewing the system log, to firmware upgrade, backup setting, resetting the system to the factory default values, to rebooting the system, implementing DRAP protocol, running Wake-on- LAN and performing Ping tests.
  • Page 99: Firmware Upgrade (Administrator Only)

    Toolbox Figure 62: View System Log While in Log View, you can: Click Back to return to the System Log window. Click Refresh to manually update the Log. Click Download to download the Log file (system.log) and save it locally, on your PC. Click Clear to clear the log file of its content.
  • Page 100: 3.10.3 Backup Setting

    Chapter 3 - Using the Web Configuration Server Figure 63: Firmware Upgrade To upgrade the firmware: Click on Browse to browse to the upgrade file's location. The upgrade file is a *.BIN file. Click Upgrade to begin the upgrading process, or Cancel to terminating When the upgrade process is complete, the unit will automatically restart.
  • Page 101: 3.10.4 Reset To Default

    Toolbox Figure 64: Backup To restore your settings: Select Firmware Upgrade from the Menu list, browse to the .bin file you saved, and click Upgrade (see Firmware Upgrade on page 85). You can also upload the configuration file to the unit using TFTP client. 3.10.4 Reset to Default To reset the unit to factory defaults: Click Reset to default in the menu list.
  • Page 102: 3.10.6 Drap

    Chapter 3 - Using the Web Configuration Server Figure 66: Reboot Click OK to reboot, or Cancel to continue working. NOTE Most of the configurations performed, require to reboot the system for them to take effect. 3.10.6 DRAP Dynamic Resource Allocation Protocol (DRAP) is used for registration to the Base Station to which the SU is connected (by performing "Discovery").
  • Page 103: 3.10.7 Miscellaneous Items

    Toolbox Parameter Description Discovery. The default is 0.0.0.0. Server Port The UDP port used for the DRAP server. For WMAX use port 8171 The default is 0. Discovery Time The Discovery Time is the timeout to be used when the Auto Discovery process is used for finding a DRAP server.
  • Page 104: Table 41: Miscellaneous Items Parameters

    Chapter 3 - Using the Web Configuration Server The Miscellaneous Items window includes the following parameters: Table 41: Miscellaneous Items Parameters Parameter Description MAC Address for Wake-on- Wake-on-LAN enables to remotely power up a networked device. To use this feature, the target device must be Wake- on-LAN enabled and you need to know the device's MAC address, e.g., 00-11-22-33-44-55.
  • Page 105: Web Configuration Server's Parameters Summary

    Web Configuration Server’s Parameters Summary 3.11 Web Configuration Server’s Parameters Summary Table 42: Web Configuration Server’s Parameters Summary Parameter Range/Options Default Status Printer (USB0) Not Ready Status Off-line or no paper Printing Ready Device error Primary Setup WAN Type Static IP Address Dynamic IP Address Dynamic IP Address Dynamic IP Address with RRSM...
  • Page 106 Chapter 3 - Using the Web Configuration Server Parameter Range/Options Default Renew IP Forever Check/Uncheck Check Enable NAT Disable Check/Uncheck Uncheck Primary Setup - Dynamic IP Address with Road Runner Session Management Account A string of maximum 53 characters Password A string of maximum 53 characters Login Server A string of maximum 31 characters...
  • Page 107 Web Configuration Server’s Parameters Summary Parameter Range/Options Default PPTP Account A string of maximum 53 characters PPTP Password A string of maximum 53 characters Connection ID (Optional) Maximum Idle 0~65535 300 seconds Time Connection Connect-on-demand Auto Reconnect(always on) Control Auto Reconnect(always on) Manually LAN Setup LAN IP Address...
  • Page 108 Chapter 3 - Using the Web Configuration Server Parameter Range/Options Default Connection Check/Uncheck Uncheck Control Allow/Deny Deny Connection Check/Uncheck Uncheck Control Allow/Deny Deny MAC Address MAC Address A string of maximum Rules 1-4 32 characters IP Address 1~254 Check/Uncheck Uncheck Check/Uncheck Uncheck Wireless Setting...
  • Page 109 Web Configuration Server’s Parameters Summary Parameter Range/Options Default Preamble Type Short Preamble Auto Long Preamble Auto Authentication Open System Both Type Shared Key Both SSID broadcast Enable Enable Disable Antenna Transmit 100% 17dBM 100% 17dBM Power 50% 15dBM 25% 12dBM 12.5% 10dBM Change Password Administrator...
  • Page 110: Figure 38: Url Blocking

    Chapter 3 - Using the Web Configuration Server Parameter Range/Options Default InBound Packet Filter Inbound Filter Check/Uncheck Uncheck Enable Inbound Filter Allow all…except Allow all…except Mode Deny all…except Inbound Rules 1-8 Source IP: x.x.x.x Source Port: 0~65535 Destination IP: x.x.x.x Destination Port: 0~65535 Enable Check/Uncheck Use Rule#: 1~10...
  • Page 111 Web Configuration Server’s Parameters Summary Parameter Range/Options Default Enable Check/Uncheck Uncheck Firewall Firewall Rules 1-8 Source Interface Source IP x.x.x.x Destination Interface Destination IP x.x.x.x Protocol ICMP Destination Port 0~65535 Action Allow Allow Deny Enable Check/Uncheck Uncheck Miscellaneous Items Remote x.x.x.x 0.0.0.0 Administrator...
  • Page 112 Chapter 3 - Using the Web Configuration Server Parameter Range/Options Default TFTP Access Port 0~65535 Enable TFTP Check/Uncheck Uncheck Access Discard PING Check/Uncheck Check from WAN side Enable SPI mode Enable Check/Uncheck Uncheck DoS Attack Check/Uncheck Uncheck Detection Enable Virtual Server Virtual Server Protocol Rules 1-20...
  • Page 113 Web Configuration Server’s Parameters Summary Parameter Range/Options Default VPN IPSec Pass- Check/Uncheck Check Through Enable System Time System Time Get Date and Time by NTP Protocol Set Date and Time Source Manually Set Date and Time using PC's Date and Time Set Date and Time Manually Time Server time.nist.gov...
  • Page 114 Chapter 3 - Using the Web Configuration Server Parameter Range/Options Default Enable IP Check/Uncheck Uncheck Address E-mail Alert Check/Uncheck Uncheck Enable SMTP Server x.x.x.x IP/Port E-mail addresses A string of maximum 127 characters E-mail Subject A string of maximum 63 characters User name A string of maximum 25 characters Password...
  • Page 115 Web Configuration Server’s Parameters Summary Parameter Range/Options Default Get Community A string of maximum 27 characters Public Set Community A string of maximum 27 characters Private IP 1-4 x.x.x.x SNMP Version Routing Table Dynamic Routing Disable Disable RIPv1 RIPv2 Static Routing Disable Disable Enable...
  • Page 116 Chapter 3 - Using the Web Configuration Server Parameter Range/Options Default Browse DRAP Protocol DRAP Disable Disable Enable DRAP Server IP x.x.x.x 0.0.0.0 Address Server Port Discovery Time Acknowledge Time Miscellaneous Items MAC Address for Wake-on-LAN DHCP Client List From dropdown list Domain Name or IP address for Ping Test...
  • Page 117: Appendix A - Print Server

    Appendix A - Print Server This Networking Gateway provides the function of network print server for MS Windows 2000/XP and Unix based platforms. The device comes with a USB port for connecting the printer. This Appendix will guide you through configuring the Print Server.
  • Page 118: Configuring On Windows 2000 And Xp Platforms

    Appendix A - Print Server Configuring on Windows 2000 and XP Platforms Windows 2000 and XP have a built-in LPR client, that can be used for printing. Your Printer Driver must be installed in LPT1 or other ports before you proceed to the following procedure.
  • Page 119 Web Configuration Server’s Parameters Summary Select the Ports tab, Click “Add Port…” Select “Standard TCP/IP Port”, and then click “New Port…” The TCP/IP Printer Port Wizard appears. Click Next. The Add Port window is displayed. NG System Manual...
  • Page 120 Appendix A - Print Server Enter the IP address of the Networking Gateway device: 192.168.254.253 in the Printer Name or IP Address field. The Port Name field is automatically filled in as you type. You can change it as required. Click Next.
  • Page 121 Web Configuration Server’s Parameters Summary Select Custom, and then click “Settings…” The Port Settings window is displayed. NG System Manual...
  • Page 122 Appendix A - Print Server In the Protocol field, select “LPR”. Enter lp (lowercase letters) in the “Queue Name” field and check the “LPR Byte Counting Enabled” check box. Click OK to apply your settings. The Port Settings window closes and the Additional Port Information Required window reappears.
  • Page 123 Web Configuration Server’s Parameters Summary Click Finish. The window closes. Close the Printer Ports window. The new printer port appears in the Ports tab. NG System Manual...
  • Page 124 Appendix A - Print Server Click Apply and then OK to close the window. NOTE Print a test page to ensure that the printer is working properly. NG System Manual...
  • Page 125: Appendix B - 802.1X Setting

    Appendix B - 802.1x Setting...
  • Page 126 Appendix B - 802.1x Setting Testing Environment (Use Windows 2000 Radius Server) Equipment Details PC1: Microsoft Windows XP Professional without Service Pack 1. D-Link DWL-650+ wireless LAN adapter Driver version: 3.0.5.0 (Driver date: 03.05.2003) PC2: Microsoft Windows XP Professional with Service Pack 1a. Z-Com XI-725 wireless LAN USB adapter Driver version: 1.7.29.0 (Driver date: 10.20.2001) Authentication Server: Windows 2000 RADIUS server with Service...
  • Page 127 Web Configuration Server’s Parameters Summary Set RADIUS server IP. Set RADIUS server shared key. Configure WEP key and 802.1X setting. The following test uses the inbuilt 802.1X authentication method such as, EAP_TLS, PEAP_CHAPv2 (Windows XP with SP1 only), and PEAP_TLS (Windows XP with SP1 only) using the Smart Card or other Certificate of the Windows XP Professional.
  • Page 128 Appendix B - 802.1x Setting NOTE The above figure shows a setting of Windows XP without service pack 1. If users upgrade to service pack 1, they will not see MD5-Challenge in the EAP type list, but they will receive a new Protected EAP (PEAP) option. Select MD5-Challenge or Smart Card or other Certificate as the EAP type If use smart card or the certificate is selected as the EAP type,...
  • Page 129 Web Configuration Server’s Parameters Summary Change EAP type to fit the variable test condition. Windows 2000 RADIUS server Authentication testing: DUT authenticate PC1 using certificate. (PC2 follows the same test procedures.) Download and install the certificate on PC1. (Fig 4) PC1 choose the SSID of DUT as the Access Point.
  • Page 130 Appendix B - 802.1x Setting NG System Manual...
  • Page 131 Web Configuration Server’s Parameters Summary DUT authenticate PC2 using PEAP-TLS. PC2 choose the SSID of DUT as the Access Point. Set authentication type of wireless client and RADIUS server both to PEAP_TLS. Disable the wireless connection and enable again. The DUT will send the user's certificate to the RADIUS server, and then send the message of authentication result to PC2.
  • Page 133: Glossary

    Glossary DHCP Dynamic Host Configuration Protocol. A protocol for dynamically assigning IP addresses from a pre-defined list to nodes on a network. Using DHCP to manage IP addresses simplifies client configuration and efficiently utilizes IP addresses. Domain Name System: The name resolution system that lets users locate computers on the Internet (TCP/IP network) by domain name.
  • Page 134 Glossary MAC Address Standardized data link layer address that is required for every port or device that connects to a LAN. Other devices in the network use these addresses to locate specific ports in the network and to create and update routing tables and data structures.
  • Page 135 Glossary TFTP Trivial File Transfer Protocol. Simplified version of FTP that allows files to be transferred from one computer to another over a network, usually without the use of client authentication. User Datagram Protocol. Connectionless transport layer protocol in the TCP/IP protocol stack. UDP is a simple protocol that exchanges datagrams without acknowledgments or guaranteed delivery, requiring that error processing and retransmission be handled by other protocols.

Table of Contents