Broadband Router User Guide March, 2001 Limitation of Liability Information in this document is subject to change without notice. The material contained herein is supplied without representation or warranty of any kind. Therefore assumes no responsibility and shall have no liability of any kind...
• • About This User Guide The Broadband Router is not intended to be serviced by the user. Do not open the case. This product is intended to be supplied by a Listed Direct Plug-In Power Unit marked "Class 2" and rated 9 V ac, 1 A.
The LEDs on the Front Chapter 2 Installing the Broadband Router Installing the Broadband Router Setting Up a Windows PC for Configuring the Broadband Router Connecting more Devices through a Hub to the Broadband Router Chapter 3 Configuring the Broadband Router...
To Enable Bridging Learning Managing the Broadband Router How to View the Connection Log How to Upgrade the Broadband Router Features/Software How to Save or Clear Configuration Changes How to Reset the Broadband Router How to Change the ARM Password...
-to create Virtual Private Network (VPN). Accessing the Internet The most common use for the Broadband Router is to provide Internet access, so that everyone on your LAN can surf the web and send/receive email or files. 1 Broadband Router...
FTP server, or a web server), you can configure the Broadband Router to proxy the service from its own address. This means that the remote user can address the router as if it were the special server and the Broadband Router will re- direct this connection to the appropriate computer on the network.
This example also illustrates an important feature of the Broadband Router that a private device can be accessed from the Internet by mapping the application port number to a port number on the Broadband Router. In this case, an Internet user references the URL http://206.112.113.6, which was assigned to the Broadband...
IP addresses automatically (i.e., from the built-in DHCP server in the Broadband Router). Since the Web Server on LAN #1 must have the same address all the time, this machine has a statically configured DHCP address. These IP addresses are only used in the local LAN environment, these devices naturally form a private network (with default IP network address of 192.168.168.0) and are not accessible by users...
Figure 1-4 Broadband Router Connectors The LEDs on the Front There are 7 LEDs on the front of the Broadband Router that show connection and traffic status of Power, PPPoE, EWAN and LAN ports: Figure 1-5 LEDs EWAN LED1 LED2...
2Broadband Router Installing the Broadband Router Now you should be ready to connect your Broadband Router devices on your LAN . Follow these steps to install the Broadband Router: Step 1 Step 2 Step 3 Figure 2-1 Broadband Router Connectors Connect ADSL/Cable modem to the Broadband Router EWAN port using crossover UTP CAT-5 LAN Cable.
These PCs need to have an Ethernet interface cards installed, and be connected to the Broadband Router either directly( to its LAN ports) or indirectly through an external hub or switch. It shoud also have TCP/IP installed, enabled, and configured to obtain an IP address automatically( i.e., through a DHCP server).
Page 13
-DNS Configuration Tab: Disable DNS should be selected -IP Address Tab: Obtain IP address automatically should be selected Step 10 When the Broadband Router connected to the LAN (and powered on), reboot the PC. After the PC is re-booted, you should be ready to configure the Broadband Router.
Connecting more Devices through a Hub to the Broadband Router The Broadband Router provides four switch ports to allow up to four PCs or Workstations to be connected to it directly. If you want to connect more devices, you can connect an external hub or switch to LAN port , provided LAN port has been configured as an Uplink port.
• • Internet Access in Five Minutes In this section you will be shown how to configure the Broadband Router for basic Internet access in less than five minutes using the web browser-based Acess Router Manager (ARM). Using Different Browsers for Broadband Router...
Page 16
(which is “password”). The password is always displayed as a string of asterisks (“*”). Clicking the Log On button will begin a Access Router Manager (ARM) session. The next time you log in, even if you have modified the password , the default password (“password”) will still be used as the default.
IP address (e.g., when you intend to create your own private WAN among multiple Broadband Router ), or adding a public IP address (e.g., when you want to install servers on the LAN which are accessible from the Internet).
Page 18
This is the window where the actual configuration screens appear. Before any selection of the configuration is made, the window shows a picture of the Broadband Router with cables and peripheral devices that can be connected to it. Message Window Whenever appropriate, the Broadband Router will display system status or error messages in this window.
Page 19
as a separate browser screen from the main ARM browser screen and appears automatically each time you start ARM. If you close this window, you can always restart it or bringing it to the foreground by clicking Monitoring - System Status from the ARM Menu.
ISP. You need to enter such information into a “connection profile” in the Broadband Router. Likewise, a connection profile needs to be created for each dial-in user, each remote office, or each VPN user.
Page 21
Enter the following information: Profile Name: the name that you will use to identify this Internet access profile. Obtain IP Addresses Automatically: Please specify IP address , netmask,gateway and domain name server assigned by ISP. EWAN IP Address: the IP address of your EWAN. EWAN IP Netmask: the IP Netmask of your EWAN.
Page 22
Idle Timeout(0-3600 seconds): The default value of the idle timeout is 120 seconds. It represents the number of seconds of inactivity over the connection: when this value is reached, the Broadband Router will disconnect the call. You can change the idle timeout value to anything between 0 to 3600 seconds.
Translation” in Chapter 5, or acquire public IP addresses., from your ISP and assign it to the router and to the public devices on your LAN. The procedure to assign a public IP address to the router is described below.
Page 24
To install publicly addressed servers on your network (e.g., Web or ftp servers), you need to apply for an IP address for each server plus one for the LAN port of the Broadband Router. All these public IP addresses have to belong to the same IP network.
Page 25
Gateway from the Broadband Router based on the new private IP network. Your device will then again be able to communicate with your Broadband Router. For the same reason, all devices on the LAN need to be restarted before they can access the Internet again.
It is also used for determining Internet access restrictions (see the section, “Setting Internet Access Time Restrictions”, below). Since the Broadband Router does not contain a backup battery for the real-time clock, the time will not be maintained across system resets or power cycles. Therefore, after a reset or power cycle, the clock will not be correct.
Internet access is allowed. The Broadband Router will not connect to the Internet outside of the configured times. In order for this feature to be effective, the Broadband Router must be configured for the current local time. To do this, see the section, “Setting the System Time” , above.
LAN which you want Internet users to be able to access. This is done by configuring the router to re- route an Internet packet that Broadband Router receives from the Internet into the TCP or UDP port that the application uses on the privately addressed LAN machine that is actually running that application.
23 on the router to another port. Configuring Port Address Translation Each application that is to be mapped requires an entry to be configured in the Address Translation Table. To access this table perform the following steps: Step 1...
Page 30
Private Port Number Add Address Translation: Select the type of entry being configured. There may be one and only one Default Entry configured in the router. The Default Entry is a device to which Internet requests will be sent if no other match is found in the Address Translation Table.
Static DHCP Assignments In certain LAN environments, it is desirable for some PCs to be assigned the same address each time it queries a DHCP server. Broadband Router is capable of configuring up to 20 such PCs for static assignments.
Name Bing Step 5 Name IP Address MAC Address Step 6 Step 7 Creating VPN Connection Profiles Before continuing on with this section, be sure you’ve reviewed the section, “Accessing Servers from the Public Network” in Chapter 1. Also, make sure you have properly configured the Internet access profile( as detailed in Chapter 3) before attempting to send traffic through VPN tunnels.
In order to set up access to and from a remote site, be sure to configure both ends of the VPN tunnel appropriately (the remote router and the local router). Broadband Router supports for the Layer 2 Tunneling Protocol(L2TP), which was the original open standard for Vitual Private Networking.
Incoming Only. If the Broadband Router will always initiate the connection to the remote site, select Outgoing Only. Select Both if either side can initiate the connection.The default setting is Both. Remote IP Address: Key in your remote side IP address when you set...
Call Direction: the direction of the call in the tunnel. If the remote site will be dialing in, select Incoming Only. If the Broadband Router will be dialing out to the remote site, select Outgoing Only. Select Both if either side can initiate the connection.The default setting is Both.
Account Name and Account Password. Remote Account Name: the name of the remote network that is dialing Remote Account Password: the password that your Broadband Router will expect to see from the remote system. VPN-L2TP Tunnel: the VPN Tunnel you will use for this profile. This is one of the tunnel configurations set up earlier.
A Packet Filtering Overview The Broadband Router already provides you with many different ways to ensure the security of your data in your local environment. Packet filtering is a security feature that allows you to selectively pass or throw away data traffic between your local LAN and the wide area network (e.g., the Internet).
Page 38
each and every IP or IPX packet to be inspected to determine if it should be allowed or disallowed to be transmitted over a WAN interface alternatively. Due to the conflicting nature of allow and disallow, only one of the above two choices can be made for each WAN interface.
Page 39
Therefore packet filtering simply defines sets of rules of what to allow or disallow through a set of parameters highlighted below: For IP, For IPX, Examples of packet filtering requirements are: 4-12 Condition Configuration Protocol Parameter Protocol TCP/UDP/ ICMP/IGMP/ Address Single/Range/ Network/Any Port...
using any IPX packet type. “I want to disallow people in the manufacturing department to access the Internet“. The corresponding “translated” packet rule is: All access to the Internet is allowed EXCEPT remote devices with the range of IP addresses in the manufacturing department and any port number which are disallowed to communicate with any IP address/port number over my Internet connection using any IP protocol.
Step 4 Step 5 4-14 In case of adding a new selection rule, the following screen shows: IP Filter Configuration Add a new rule Rule No. Rule Name test Interface IP Protocol Local IP Address Local Port Remote IP Address Remote Port APPLY CANCEL...
Page 42
necessary.If you highlighted an existing entry and clicked Delete instead, the corresponding entry in the rule table will be removed. TCP/IP Service Type BootP/DHCP Finger HTTP NetBIOS NNTP SMTP SNMP Sun RPC Telnet TFTP Whois Table 4-1 TCP/IP Port Assignments Configuring IPX Packet Rules(Optioanl) To add a new IPX packet rule or to edit an existing one, select IPX Filter from the ARM menu:...
Page 43
Step 4 Step 5 4-16 in the rule table followed by clicking the Edit button. In case of adding a new selection rule, the following screen shows: IPX Filter Configuration Add a new rule Rule No. Rule Name Interface test IPX Packet Type Local IPX Network Number Local IPX Node Number...
Page 44
Local IPX Network Number: the IPX Network Number(s) of the local devices to which this new rule applies. You can select a single IPX Network Number, a range of IPX Network Numbers, or any IPX Network Number. The screen may change to show fields you need to fill out accordingly.
To install public servers on your network (e.g., Web or ftp servers), you need to apply for an IP address for each server plus one for the LAN port of the Broadband Router. All these public IP addresses have to belong to the same IP network.
Page 46
The default private IP address is 192.168.168.230. If you want to create your own private network through other Broadband Router with remote offices, you need to make sure that each Broadband Router router on each LAN is assigned a unique private IP network address.
Step 3 The IP Routing Table The IP routing table contains all the information that the Broadband Router needs to 4-20 Broadband Router router based on the new private IP address, and then your device can again communicate with your Broadband Router. For the same reason, all devices on the LAN need to be restarted before they can access the Internet again.
Internet. If no match is found and a default IP route is not defined, the IP packet is discarded and will go nowhere.
Page 49
Step 2 Step 3 4-22 following screen: IP Routing Table Add IP Remote IP Address Remote IP Netmask: Gateway Hop Count: APPLY Enter the following information: Add Default Route: select if you want to specify a new default route. Note that the Remote IP Address and Remote IP netmask fields do not appear if you select this option.
SAP Table to display or modify the IPX SAP Table. The IPX Routing Table The IPX routing table contains all the information that the Broadband Router needs to route an IPX data packet. You can view the IPX routing table by clicking on the IPX Routing Table button at the bottom of the System IPX Configuration screen.
Page 51
“Default IPX Route” is used. This normally is set to a path where another router can be reached that has additional information about other networks not known to the local router. If no match is found and a default IPX route is not defined, the IPX packet is discarded and will go nowhere.
Page 52
display the following screen: IPX Routing Table Add a Static IPX Route Add IPX Destination Network Number Gateway Interface Name Gateway MAC Address Hop Count: Apply Step 2 Enter the following information: Add IPX: select the type of entry to be added. If you specify a Default Route, the Destination Network Number and Hop Count fields do not appear.
Page 53
The router will search the SAP table for these entries and respond with the necessary information that the workstation can use to communicate with the desired service.
Page 54
Note: To delete a static SAP entry, select it in the SAP table and click the Delete button. You cannot delete non-static entries. Adding a Static SAP Entry The procedure to add an IPX static SAP entry is as follows: Step 1 Click the ADD button at the bottom of the IPX SAP Table screen to display the following screen:...
Enter the following information: Learn MAC address: enables or disables Learning. If Learning is enabled, the Broadband Router maintains a MAC address table that keeps track of the relationship between MAC addresses and network interfaces - so that the system knows which device is reachable through which network interface.
• How to View the Connection Log The Broadband Router provides a connection log that you can use to track the connections in establlished both out of or into your Broadband Router. Connect and disconnect messages can be useful in determining connection costs, Trigger messages are useful in determining the particular device and application that triggered the connection.
How to Upgrade the Broadband Router Features/ Software You can upgrade your firmware (the software that controls the router’s operations). Normally, this is done when you discover a problem which is resolved in a different version of firmware that contains new features that you need. Both types of system...
System Tools - Reset System Reset System Do you really want to reset the system? Click YES to reset the Broadband Router. If you do not want to reset the system, Click No. Resetting the Broadband Router disconnects any active calls, and...
How to Change the ARM Password After you start using the Broadband Router, you should change the factory default ARM password as follows: Step 1 The following screen displays: Step 2 Step 3 What if I Forget the Password? If you forget the ARM password, the only way to recover is to clear the entire configuration and return the unit to its original state as shipped from the factory.
How to Customize the ARM Interface You can use the ARM Customization feature to specify applications you intend the router for. Your ARM interface will be customized accordingly to fit your specific needs. The ARM Customization screen is the first screen you will see when you are connected to the ARM for the first time.
Enter the following information: System Uptime: the elapsed time since the Broadband Router was powered on(display only). System Name: a unique name that you assign to this Broadband Router. System Contact: the network administrator responsible for maintaining the network. System Location: where the Broadband Router is physically located.
Messages This chapter lists messages you may see in the 904S ARM message window. System Messages ****** has to be an integer [0123456789] The entered field (******) is not a valid integer. ****** has to be valid IP address The entered field (******) is an invalid IP address format or an invalid IP address value.
Page 63
The IP address obtained from the EWAN Internet connection was in conflict with an IP address subnet already defined for an interface of the router. Either change the IP address subnet for the interface, or contact your ISP for a different address assignment "Call operation in progress.
Page 64
"The confirmed encryption key doesn't match" The encryption key entered in the "Confirm Encryption Key" field is not the same as the key in "Encryption key" field. "Invalid DHCP static IP address" An Invalid static DHCP IP address has been detected. This is not permitted. Please select another address or modify the original entry.
Page 65
The firmware file entered is either missing or invalid. "External logon attempt rejected" Another browser elsewhere in the network has attempted to open the router’s HTTP page. This attempt was rejected. Only one HTTTP configuration session allowed at a given time.
Page 66
A duplicate filter name has been detected. A filter name must be unique. "General read failure" An error has occurred while communicating with the router. Please use the “Reload” or “Refresh” button to load this page again. "The Internet access time has been configured successfully"...
Page 67
Current DHCP entry can’t be accessed. "Invalid Filter IP Address" This message is displayed when an IP address with a syntax error is entered. An IP address should be a set of four three-digit numbers. Each three-digit number should be between 0 and 255, inclusive. For example, a correct IP address is 192.168.100.2. "Invalid Entry: Private Port"...
Page 68
The IP address entered in the static DHCP configuration form is invalid. Please check all parameters entered. "Remote Tunnel Name is required" Each tunnel configuration requires a remote system name for authentication. If such a name is not provided or is invalid, this message will be displayed. "IP Address is invalid"...
Page 69
The adminstrator is attempting to add a second profile over the EWAN port "Only 8 rules allowed" The maximum number of Filtering rules, system-wide, has been exceeded. To add an additional rule, one must be deleted. Parameter changes applied Changed parameters have been applied to the router configuration.
Page 70
"Phone number or data service type seems to be incorrect" After an "Apply and Test" button is pressed, the router detected a problem with either the remote phone number or the data service type configured. "Phone number up to 15, limit characters to 123456789,;-[]!*#"...
Page 71
A duplicate user name is entered. Dial-In user names must be unique. "Resetting system, please wait..." The message is displayed when the router is in the process of resetting. You can logon to the router after about 30 seconds. "Save configuration failed. Please try again"...
Page 72
The time has been configured successfully. "The Gateway IP Address has been set as the IP Default Route" The Internet access profile has been configured in the router and the configured ISP Gateway IP Addrress is now set as the IP Default Route "This interface has been configured to support a Remote Office...
Page 73
23 to issue a CLI command to do this. If port 23 has been re-assigned, the administrator must re-assign the HTTP port using the CLI through a new Telnet router port (if available), from a LAN-attached device, or through a non- Internet connection.
Page 74
port (if available), from a LAN-attached device, or through a non-Internet connection. Note: Address Translation only applies to Internet connections 6-13...
Specifications Application • • • • Features Internet Access, Multimedia Applications and Virtual Server • • • • • • Protocol Support • • • • • • • Internet Access via Cable or xDSL Accessing Servers from the Public Network Supporting Multimedia Applications Creating Virtual Private Network Multiple users to share Internet Access...
Page 76
Management • • • • • • • • • Monitoring • • Security • • • • • • Physical Specification • • • • Hardware Configuration • • • • Cisco-like Command Line Interface(CLI) Embedded Telnet server for remote Console management Customized Web-based GUI Firmware upgrade via Web-based GUI/Console port Configuration date upload and download via TFTP...
Page 77
• 1 power jack for AC Adapter 9V/1A • 1 Power Switch...
Page 78
Glossary This section provides some common networking terms you may find in this user guide. ARP, ARP Table To send an IP packet to another device on the same LAN, the source device needs to know the MAC address of the destination device first. If such information is already maintained in the ARP (Address Resolution Protocol) table, the corresponding MAC address will be used to transmit the data packet.
The default route is a special IP route in the IP routing table. When a packet is received by the router, if destination network cannot be found in its routing table, the packet will be forwarded over the default route to the next-hop IP router. Such a router often has a more complete routing table, and therefore is “more...
Page 80
DNS IP address, the secondary DNS IP address, the default gateway IP address, WINS Server addresses, NetBIOS Node Type, etc. Edge Router A router that resides at the edge of a network. It is like a gateway that is used to communicate with the outside network. Encryption A method for scrambling data which inhibits unauthorized snooping.
Page 81
Internet Access and ISP Accounts To access the Internet, first you need to have a device (such as a router or a modem) that you can use to connect to the Internet using a dial-up services such as modem or ISDN or a fixed connection service such as a leased line or a frame relay network.
Page 82
When two physically disjoint offices of the same company need to communicate and share data resources with each other, they can use one router on each side and perform LAN to LAN communication - to allow users on one LAN to access resources on the other.
Page 83
ISDN or modem connection will be set up automatically to take over the communication. For a modem router, such a feature would not apply; (2) load-sharing over 2 modem connections: to allow data to be communicated over two modem connections simultaneously in order to achieve higher combined data throughput;...
Page 84
(such as the Internet network), while RIP/RIP II are more popular in corporate or private networks. Router An intelligent, internetworking device that will forward or filter packets between different networks based on data link layer (MAC) address information.
Page 85
(The next-hop router is in theory one hop closer to the destination.) Routing Table A router relies on a routing table to determine where to forward a received packet. The routing table normally contains, for each destination network, the network address of the next hop router, the hop count to the destination network, an aging count, among other information.
Page 86
(Internet Protocol), a network layer protocol. Un-numbered/numbered Link When the connection of a router to the WAN (Wide Area Network) is assigned an IP address, it is called a numbered link. Otherwise, it is called an un-numbered link. VPN, L2TP, PPP/ECP, DES, IPSec VPN stands for Virtual Private Network.
Page 87
Warranty, Copyrights, FCC Notice Warranty 901 series Broadband Router is provided with a limited oneone year Warranty. Details of the warranty and return process are explained in the Warranty Policy below. Warranty service is subject to the terms and conditions of company Warranty Policy.
extent company deems necessary to restore the Product to proper operating condition without charge to the customer. If, in the company opinion, it is impractical for any reason to repair or replace the Product, company may at its option refund or pay an amount equal to the lesser of (1) the purchase price paid for the product or (2) the then effective company estimated purchase price for the Product.
Need help?
Do you have a question about the 516211 and is the answer not in the manual?
Questions and answers