Table of Contents
Advertisement
Quick Links
Advertisement
Table of Contents
Summary of Contents for UTT HiPER 811
- Page 1 HiPER 811 Quick Guide 2009-3-17 Version: 1.2...
- Page 2 The scope of delivery and other details are subject to change without prior notice. Trademark ® is a registered trademark of Shanghai UTT Technologies Co., Ltd. ® HiPER is a registered trademark of Shanghai UTT Technologies Co., Ltd.
- Page 3 Warning This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications.
-
Page 4: Table Of Contents
Table of Contents About This Guide ......................... 1 Conventions .................... 1 0.1.1 Conventions for page path ..............1 0.1.2 Common Button ..................1 0.1.3 List ......................2 0.1.3.1 Editable List .................... 2 0.1.3.2 Read-only List ..................3 0.1.3.3 Sorting Function ..................4 Factory Default Settings ................. - Page 5 3.3.6 How to Delete the Connection .............. 28 Network Security ................... 29 3.4.1 Virus Defense ..................29 3.4.2 Rate Limit ....................30 ARP Spoofing Defense ................. 31 3.5.1 ARP Spoofing Defense Setup .............. 31 3.5.2 Dynamic ARP Table ................31 3.5.3 How to Defense Against ARP Spoofing Attack ........
-
Page 6: About This Guide
About This Guide Note For best use of our product, it is strongly recommended that you update Windows Internet Explorer browser to 6.0 or above. Conventions 0.1.1 Conventions for page path Lever one menu > lever two menu（bold）means the menu path to open some configuration page. -
Page 7: List
: Delete the selected entry(s) with the corresponding settings. 0.1.3 List In web page there are two kinds of lists: Editable list and read-only list. 0.1.3.1 Editable List Editable list is used to display, edit and delete configuration item. Let us take DHCP Static Binding List (see Table 0-1) as an example to explain the functions. -
Page 8: Read-Only List
jump to that page. : Enter the search text in text field, then type <Enter> to display all the matched entries, besides, you can search within results. After search, if you want to display all the entries, you only need type <Enter> in empty text field. Note: The match criterion is that search text exists in entry’s information. -
Page 9: Sorting Function
: Current status entry number /maximum number，the example means there are two status information entry in the list. : Refresh the list to view current status of the list. 0.1.3.3 Sorting Function Except Access Rule List in Advanced Setup > Access Rule page, all the lists in web page support sorting function. -
Page 10: Chapter 1 Product Overview
The HiPER 811 security gateway/VPN firewall is a purpose-built security system designed for small-sized businesses and enterprise branch offices. The HiPER 811 integrates a rich suite of functions, including L2TP/PPTP/IPSec VPN, NAT/PAT, firewall, bandwidth management, DHCP server/client, popular attack defense capability, system management and monitor, and so on. - Page 11 Messenger P2P (peer-to-peer) control: block or allow P2P application, e.g., BitTorrent and BitSpirit Supports personal policy settings to realize personal service according to need Provide hierarchy management structure (include personal, group and global) to flexibly manage the internal users ...
-
Page 12: Specifications
IPSec features as followed: AutoIKE based on preshared key and manual key tunnels ESP and AH protocols DES, 3DES and AES 128/192/256 encryption algorithm MD5 and SHA-1 hash algorithm Diffie-Hellman group 1, 2 and 5 Main mode and aggressive mode DPD (dead peer detection) and Anti-Replay Hub-spoke and mesh connections Specifications... -
Page 13: Chapter 2 Physical Installation
Chapter 2 Physical Installation This section describes how to install the Device. Front Panel The LEDs and network ports are located on the front panel of the Device. Figure 2-1 Front Panel 2.1.1 LEDs The LEDs give real-time information of system status. The following table provides description of the LEDs status and their meaning. -
Page 14: Ports
Blinking Network activity on the Device. No activity on the Device. Blinking The Device is not operating correctly. The Device is operating correctly. Green Valid link on the associated port. Link/Act Blinking Network activity on the associated port. No link established on the associated port. Green The associated port is connected at 100Mbps. - Page 15 The reset operation will clear all the settings and preferences that you have configured. You can also reset the Device to the factory defaults on the System Admin > Backup & Restore page. Page 10...
-
Page 16: Connecting The Device
Connecting the Device Before you install the Device, please make sure your PC can connect to the Internet through your broadband service successfully. If there is any problem, please contact with your ISP for help. After that, please install the Device according to the following steps. Don’t forget to pull out the power plug and keep your hands dry. -
Page 17: Chapter 3 Quick Setup Guide
Chapter 3 Quick Setup Guide After you have connected the Device into your network, you may configure it. This chapter describes how to configure the basic functions of your Device. It will only take you a few minutes. You can access the Internet via the Device immediately after it has been successfully configured. - Page 18 If the displayed page is similar to the screenshot below, it means that your PC has not connected to the Device. If it is failed to connect, please check it follow the steps below: Is the connection between your PC and the Route correct? The LEDs of LAN port which links to the device and the LED on your PC’s adapter should be lit.
-
Page 19: Login The Device
Login the Device Once your PC is properly configured, please do the following to use the Web-based Utility. For local access of the Device’s web-based utility, launch your web browser, and enter the Device’s default IP address: 192.168.16.1, in the RUL filed (see Figure 3-1). Then press the Enter key. - Page 20 The first screen that appears is the Homepage (see Figure 3-3). Model and Version Level One Menu Start Menu Click to Restart the Device Click to jump to the related page Figure 3-3 Homepage Note If you have not setup the Internet connection yet, the system will push a prompt dialog box as below: Page 15...
- Page 21 Figure 3-4 A Dialog Box Please click OK, then you can do common settings through the Start menu (see Figure 3-5), which including: Internet Connection, Network Security, Port Forwarding Rule, ARP Spoofing Defense, User Personal Policy, User Group Policy, Firewall Policy and System Info.
-
Page 22: Internet Connection
Internet Connection Click Start > Internet Connection，it will jump to Basic Setup > Internet Connection page. This page lets you setup the Internet Connection, view its status, and modify or delete it. Note When you have finished the Internet connection setup, it is strongly recommended that you go to Start >... - Page 23 and then select PPPoE; Static IP: If you are required to use a permanent IP address, select Static IP; DHCP: If your ISP automatically assigns an IP address, select DHCP. Most cable modem subscribers use this connection type. ①...
-
Page 24: Pppoe Connection
3.3.1.1 PPPoE Connection If you choose PPPoE connection type, you will see the following page. Figure 3-7 PPPoE Connection Setup User Name and Password: Enter the PPPoE login user name and password provided by your ISP. Page 19... - Page 25 PPP Authentication: Select PPP authentication mode from this drop-down box, available options: NONE, PAP, CHAP and Either. PAP: Password Authentication Protocol; CHAP: Challenge Handshake Authentication Protocol; None: It means that there is no protocol will be used. ...
- Page 26 Dial Schedule: If you select a schedule (set up on User Admin > Schedule Settings page), it will allow your Device to dial-up only in the selected schedule range. Else, the Device always can dial-up. Online Schedule: If you select a schedule rule (set up on User Admin > Schedule ...
-
Page 27: Static Ip Connection
3.3.1.2 Static IP Connection If you choose Static IP connection type, you will see the following page. Figure 3-8 Static IP Connection Setup LAN IP Address: Enter the IP address for the Device’s LAN interface. LAN Subnet Mask: Enter the subnet mask for the Device’s LAN interface. ... -
Page 28: Dhcp Connection
3.3.1.3 DHCP Connection If you choose DHCP connection type, you will see the following page. Figure 3-9 DHCP Connection Setup LAN IP Address: Enter the IP address for the Device’s LAN interface. LAN Subnet Mask: Enter the subnet mask for the Device’s LAN interface. ... -
Page 29: Internet Connection List
3.3.2 Internet Connection List When you have configured the Default connection, you can view its status in the Internet Connection List (see Table 3-1). To view current status of the connection, click Refresh button. Table 3-1 Internet Connection List Table 3-1 Internet Connection List (continued) Name: It displays the connection’s name. - Page 30 PPPoE Connection Status There are eight kinds of status for PPPoE connection (see Table 3-2). During it is in connected status, it will also display the elapsed time (day: hour: minute: second) since connected. Status Description Closed The physical interface is inactive, or not dial-up. Dialing Start dialing up, but not receive response yet.
-
Page 31: How To Dial And Hang Up A Pppoe Connection
Status Description The physical interface is inactive, or the connection has Closed release the IP address but not request a new one yet. Connecting Requesting an IP address. Connected Have acquired an IP address, the connection is established. Internal Error Undefined status. -
Page 32: How To Renew And Release A Dhcp Connection
Click Refresh button to view current status of the connection. Table 3-5 Internet Connection List - PPPoE Connection 3.3.4 How to Renew and Release a DHCP Connection If your connection type is DHCP, when you click the Default hyperlink of the connection entry, the Renew, Release and Refresh buttons will show below the list (see Table 3-6). -
Page 33: How To Edit The Connection
3.3.5 How to Edit the Connection If you want to edit the connection, do the following: In the Internet Connection List, click the Default hyperlink of the connection Step 1 entry, the related information will display in the setup fields. Modify the connection settings. -
Page 34: Network Security
Network Security On the Start > Network Security page, you can do essential security settings: virus defense and rate limit. You can’t go to this page if the Internet connection hasn’t been configured yet. Note When you click Apply button to save and apply your settings, the system will automatically enable the Synchronize with SNTP Server function (you also can setup it in System Admin >Time page), so it will acquire standard time once connected to Internet. -
Page 35: Rate Limit
Enable Popular Virus Defense: Select this check box to protect the device against popular virus attack, e.g., Worm.Blaster and Worm.Sasser. And it will discard those TCP packets whose destination port is 135, 136, 137, 138, 139, 445, 1025, 5554 or 9996, so your LAN hosts can’t access related services provided by outside hosts, e.g., windows file sharing and print sharing services. -
Page 36: Arp Spoofing Defense
ARP Spoofing Defense Click Start > ARP Spoofing Defense，it will jump to Security > ARP Spoofing Defense page. This page lets you setup ARP Spoofing Defense to protect the device and your LAN hosts. 3.5.1 ARP Spoofing Defense Setup Figure 3-13 ARP Spoofing Defense Restrict ARP Update: Select this check box to disable the gratuitous ARP packets ... -
Page 37: How To Defense Against Arp Spoofing Attack
Click Bind All button to bind all current valid IP and MAC address pairs. Figure 3-14 Dynamic ARP Table Note If you want to bind all IP and MAC address pairs in the whole LAN, please make sure that the hosts are turned on, and then click Scan LAN button, last click Bind All button. -
Page 38: Port Forwarding
Port Forwarding Click Start > Port Forwarding, it will jump to Advanced > NAT & DMZ page. In this page, you can setup some port forwarding rules. Port forwarding can be used to set up public services on your network. When users from the Internet make certain requests on your network, the Device can forward those requests to computers equipped to handle the requests. -
Page 39: Port Forwarding Rule List
internal port range is from 21 to 30, and the external port range is from 2001 to 2010. Bind to: Select the NAT rule to which this port forwarding rule is bound. The port forwarding rule will use the NAT rule’s external IP address as the external IP address. -
Page 40: Change Administrator's Password
Change Administrator’s Password The default administrator’s user name is Default (case sensitive) with empty password. To ensure the Device's security, you had better change the default password and remember it. If the password has been changed, you should enter your new password when you access the Device with the user name Default. -
Page 41: Remote Management
Remote Management If you want to allow HTTP, SNMP or TELNET remote management via Internet, go to System Admin > Remote Admin page to setup. Figure 3-17 Remote Management HTTP: Select this check box to allow HTTP remote management. When accessing ... -
Page 42: Appendix Contact Information
Appendix Contact Information For help with the installation or operation of this Device, contact UTT Technical Support at one of the phone numbers or Internet addresses below. Technical Support: +86-4006-781-781 support@utt.com.cn E-mail: http://www.utt.com.cn Official Website: http://www.utt.com.cn/bbs Official BBS: ...