Page 2
Hawking Customer Service in order to obtain a Return Authorization number. Warranty is for repair or replacement only. Hawking Technology does not issue any refunds. BE SURE TO HAVE YOUR PROOF OF PURCHASE. RETURN REQUESTS CAN NOT BE PROCESSED WITHOUT PROOF OF PURCHASE. When returning a product, mark the Return Authorization number clearly on the outside of the package and include your original proof of purchase.
Package Contents Introduction Features Minimum Requirements Get to Know the Broadband Router Back Panel Front Panel Setup Diagram Getting Started Chapter 1: Quick Setup (via web UI) About Quick Setup Step 1: Time Zone Step 2: Broadband Type 1.1 Cable Modem 1.2 Fixed IP xDSL 1.3 PPPoE 1.4 PPTP...
Page 4
2.4.6 ALG Settings 2.4.7 Static Routing 2.5 Firewall 2.5.1 Access Control 2.5.2 URL Blocking 2.5.3 DoS (Denial of Service) 2.5.4 DMZ Chapter 3: Status Status 3.1 Status and Information 3.2 Internet Connection 3.3 Device Status 3.4 System Log 3.5 Security Log 3.6 Active DHCP Client 3.7 Statistics Chapter 4: Tools...
The complete H2BR4 package consists of: • One H2BR4 Dual WAN 4-Port Firewall Router • One Quick Installation Guide • One CD with User’s Manual • One Power Adapter • Accessories Check to make sure that the unit was not damaged during shipping and that no items are missing. If you encounter a problem, please contact your dealer.
The user-friendly web management interface provides the user with an easy way to configure the router from anywhere in the world using a web browser. The H2BR4 can easily be firmware upgraded and is compatible with all standard Internet applications. It provides a complete solution for small/medium business and small office/home office users.
Minimum Requirements • One External xDSL (ADSL) or Cable modem with an Ethernet port (RJ-45) • Network Interface Card (NIC) for each Personal Computer (PC) • PCs with a Web-Browser (Internet Explorer 4.0 or higher, or Netscape Navigator 4.7 or higher) Note The WAN “idle timeout”...
1) Local Area Network (LAN) The router’s four LAN ports are what you will use to connect your PCs, print servers, switches, etc. 2) Wide Area Network (WAN) The WAN ports are the segments that connect to your xDSL or Cable modems and are linked to the Internet. 3) Reset The Reset button allows you to do one of two things: If problems occur with your router, press the router’s reset button with a narrow pen tip (for less than four...
Setup Diagram Figure 1.2 below shows a typical setup for a Local Area Network (LAN). Getting started The following are step-by-step instructions on how to start using the router and get connected to the Internet. Set up your network as shown in the setup diagram above (Figure 1.2). You then need to set your LAN PC clients so that they can obtain an IP address automatically.
Page 10
systems. For other operating systems (Macintosh, Sun, etc.), follow the manufacturer’s instructions. The following is a step-by-step illustration on how to configure your PC to obtain an IP address automatically for: 2a) Windows 95/98/Me, 2b) Windows 2000 and 2c) Windows NT. 2a) Windows 95/98/Me i: Click the Start button and select Settings, then click Control Panel.
Page 11
Figure 0.3 ii: eboot the PC. Your PC will now obtain an IP address automatically from your router’s DHCP server. Note Please make sure that the router’s DHCP server is the only DHCP server available on your LAN. Once ou’ e configured your PC to obtain an IP address automatically , please proceed to Step 3.
Page 12
Figure 0.4 vi: Click OK to confirm the settings. Your PC will now obtain an IP address automatically from your rout er’s DHCP server. Note: Please make sure that the router’s DHCP server is the only DHCP server available on y our LAN.
Page 13
iii: Check if the TCP/IP Protocol is on your list of Network Protocols. If TCP/IP is not installed, click the Add button to install it now. If TCP/IP is installed, go to step 5. iv: In the Select Network Protocol window, select the TCP/IP Protocol and click the Ok button to start installing the TCP/IP protocol.
Page 14
vii: Click OK to confirm the settings. Your PC will now obtain an IP address automatically from your router’s DHCP server. Note: Please make sure that the router’s DHCP server is the only DHCP server available on your LAN. Onc you’ve configured your PC to obtain an IP address automatically, please proceed to S Once you have configured your PCs to obtain an IP address automatically, the router’s DHCP server will automatically give your LAN clients IP addresses.
The HOME page screen below will appear. The Home Page is divided into four sections, Quick Setup Wizard, General Setup, Status Information and Tools. Quick Setup Wizard (Chapter 1) If you only want to start using the router as an Internet Access device then you ONLY need t screens in the Quick Setup Wizard section.
Page 16
Menu Quick S etup Wizard (Chapter 1) General Setup (Chapter 2) Status Information (Chapter 3) Tools (C hapter 4) ogout Click on Quick Setup Wizard (see Chapter 1) to start configuring settings required by your ISP so that you can start accessing the Internet.
About Quick Setup he Quick Setup section is designed to let you set up the router as quickly as possible. In the Quick Setup, you are required to fill in only the information necessary to access the Internet. Once you click on the Quick Setup Wizard in e homepage, you will see the screen below.
Click on NEXT to proceed to the next page (step 2). Step 2) Broadband Type this section, you have to select one of four types of connections that you will be using to connect your router’s WAN port to your ISP (see screen below).
Menu Description 1.1 Cable Modem Your ISP will automatically give you an IP address 1.2 Fixed-IP xDSL Your 1.3 PPPoE Your ISP requires you to use a Point-to-Point Protocol over Ethernet (PPPoE) connection. .4 PPTP Your ISP requires you to use a Point-to-Point Tunneling Protocol (PPTP) connection. Click on one of the WAN types and then proceed to the manual’s relevant sub-section (1.1, 1.2, 1.3 or 1.4).
Parameters Description Host Name If your ISP requires a Host Name, type in the host name provided by your ISP; otherwise leave it blank if your ISP does not require a Host Nam MAC Address Your ISP may require a particular MAC address Internet.
Parameters Gateway IP Subnet Mask Click OK when you have finished the configuration above. You have now completed the configuration for the Fixed-I xDSL connection. You can start using the router now. If you wish to use some of the advanced features supported by thi router, see Chapters 2, 3, 4.
Page 23
Parameter Description r Na e Enter the User Name provided by your ISP for the PPPoE co Password Enter the Password provided by your ISP for Servic e Name This is o blank. This is optional. You can specify the maximum size of your transmission packet to the Internet.
1.4 PPTP elect PPTP if your ISP requires the PPTP protocol to connect you to the Internet. Your ISP should provide all the information required in this section. Parameter Description Obtain an IP address The ISP requires you to obtain an IP address by DHCP automatically before connecting to the PPTP server.
Page 25
User ID Enter the User Name provided by your ISP for the PPTP connection (sometimes called a Connection ID). Password Ente PTP Gateway If your LAN has a PPTP gateway, then enter that PPTP gateway IP address here. If you do not have a PPTP gateway then enter the ISP’s Gateway IP address above.
General Settings nce you click on the General Setup button on the homepage, you will see the screen below. you have already configured the Quick Setup Wizard, you do NOT need to configure anything in the General Setup screen in order to start using the Internet. he General Setup contains advanced features that allow you to configure the router to meet your network’s needs such as: Address Mapping, Virtual Server, Access Control, Hacker Attack Preventio...
Below is a general description of what advanced functions are available for this broadband router. Menu Description 2.1 System This section allows you to set the Broadband router’s system Time Zone, Password an Remote M 2.2 WAN This section allows you to select the connection method in order to establish a connectio with your ISP (same as the Quick Setup Wizard section) .3 LAN You can specify the LAN segment’s IP address, subnet Mask, enable/disable DHCP and...
Parameters System Settings 2.1.1 Time Z 2.1.2 Passw ord Settings 2.1.3 Rem ote Management Select one of the above three sys tem settings selections and proceed to the manual’s relevant sub-sections. 2.1.1 Time Zone he Time Zone allows your router to reference or base its time on the settings configured here, which will affect functions such as Log entries and Firewall settings.
arameter Set Time Zone Time Server Addr Enable Daylight Savings Start Daylight Savings Time End Daylight Savings Time Click Apply at the bottom of the screen to save the above configurations. You can now configure other advance sections or start using the router (with the advance settings in place) .1.2 Password Settings ou can change the password required to log into the broadband router's system web-based manageme...
Parameters Description Current Password Enter your current password for the remote management administrator to log in to your router. Note: B New Password Enter yo e-Enter Password Enter your new password again for verification purposes for Verification Note: If (password is “1234”) with the reset button (see router’s back panel). Click Apply at the bottom of the screen to save the above configurations.
Parameters Description Host Address This is the IP address of the to the Broadband router from a remote site. This m address has been designated the Remote Management host IP address for this router (located in our co mpany office), then you are Address is left 0.0.0.0 this means anyone can access the router’s web-based configuration from a remote location, provided that they know the password.
Page 32
aram eters 2.2.1 Dynamic IP address 2.2.2 Static IP address .2.3 PPPo 2.2.4 PPTP 2.2.5 L2TP .2.6 Telstra Big Pond .2.7 Policy .2.8 DNS .2.9 DDNS nce you have made a selection, click More Configuration at the bottom of the screen and proceed to the manual’s levant sub-sections.
2.2.1 Dynamic IP Address hoose the Dynamic IP selection if your ISP will give you an IP address automatically. Some ISP’s may also require that ou fill in additional information such as Host Name, Domain Name and MAC address. (See Chapter 1: “Cable Modem” r more details.) .2.2 Static IP Address hoose the Static IP selection if your ISP has given you a specific IP address for you to use.
Page 35
Parameter Description Obtain an IP address The ISP requires you to obtain an IP address by DHCP automatically before connecting to the L2TP server. AC Address Your ISP may require a particular MAC address in order for you to connect to the Internet.
Idle Time Out Note: The WAN "idle timeout" auto-disconnect function may not work due to abnormal activities of some ne the Internet. For example, some software sends network packets to the Internet in the background, even when you are not using the Internet. This function a with some ISPs.
Parameter Description User Name Enter the User Name provided by your ISP for the Telstra Big Pond connection Password Enter the Password provided by your ISP for the Telstra Big Pond connection User decide login server Select if you want to assign the IP of Telstra Big Pond’s login server manually server manually.
Parameter Description Speed Connectivity check Operation 2.2.8 DNS A Domain Name System (DNS) server is like an index of IP addresses and Web addresses. If you type a Web address into your browser, such as www.router.com, a DNS server will find that name in its index and the matching IP address. Most ISPs provide a DNS server for speed and convenience.
dynamic IP settings, it is likely that the DNS server IP address is provided automatically. However, if there is a DNS erver that you would rather use, you need to specify the IP address of that DNS server here. Parameters Domain Name Server (DNS) Server Secondary DNS Add...
Page 40
Parameters Default WAN Port Enable/Disable Disable Provider DynDNS omain name Account/E-mail assword/Key Click Apply at the bottom of the screen to save the above configurations. You can now configure other advanced sections or start using the router (with the advanced settings in place). Figure 2.11 Description Select the WAN por...
2.3 LAN he LAN Port screen below allows you to specify a private IP address for your router’s LAN ports as well as a subnet ask for your LAN segment. Figure 2.12...
Page 42
Parameters Default IP address 192.168.2.1 Subnet Mask 255.255.255.0 02.1d Spanning Disabled HCP Server Enabled ease Time IP Address Pool Domain Name Click Apply at the bottom of the screen to save the above configurations. You can now configure other advanced sections or start using the router (with the advanced settings in place).
2.4 NAT etwork Address Translation (NAT) allows multiple users at your local site to access the Internet through a single Public IP Add ress or multiple Public IP Addresses. NAT provides Firewall protection from hacker attacks and has the flexibility to allow you to map Private IP Addresses to Public IP Addresses for key services such as Websites and FTP.
2.4.1 Port Forwarding The Port Forwarding allows you to re-direct a particular range of service port numbers (from the Internet/WAN Ports) to a particular LAN IP address. It helps you to host some servers behind the router NAT firewall. Figure 2.14...
Page 45
Parameter Enable Port Forwarding Private IP ort Range AN Port omment dd Port Forwarding into the table emove Port Forwarding into the table Click Apply at the bottom of the screen to save the above configurations. You can now configure other advanced sections or start using the router (with the advanced settings in place).
2.4.2 Virtual Server se the Virtual Server function when you want different servers/clients in your LAN to handle different service/Internet application type (e.g. Em ail, FTP, Web server et c.) from the Internet. Com puters use numbers called port numbers to cognize a particular service/Internet application type.
Page 47
arameters Description Enable Virtual Server Enable Virtual Server. Private IP This is the LAN client/host IP address that the Public Port number packet will be sent to. Not e: You need to give your LAN PC clients a fixed/static IP address for the Virtual Server function to work properly.
address for WAN 2. (For websites, you will need to have a fixed/static global/public IP address or use DDNS with dynamic IP and domain name mapping.) Figure 2.16 2.4.3 Special Applications Some applications require multiple connections, such as Internet games, video conferencing, Internet telephony and others.
Page 49
arameters Description Enable Trigger Port Enables the Special Application function. rigger Port This is the outgoing (Outbound) range of port numbers for this particular application rigger Type Select whether the outbound port protocol is “TCP”, “UDP” or both. ublic Port Enter the In-coming (Inbound) port or port range for this type of application (e.g.
Page 50
Popular applications This section lists the more popular applications that require multiple connections. Select an application from the Popular Applications selection. Once you have selected an application, select a location (1-10) in the Copy to selection box and then click the Copy to button.
2.4.4 UPnP With UPnP, all PCs in your Intra net will discover/locate this router automatically. So you will not have to perform any configuration procedures for you r PC and can access the Internet through this router easily. Parameters Default UPnP Feature Disable Click Apply at the bottom of the screen to save the above configurations.
2.4.5 Protocol and Port Binding Protocol and Port Binding let you manually bind an application to a WAN port. Only packets that match all the entered criteria will be bound to the assigned WAN port. You will have to fill all the items. The item e ignored.
Page 53
Destination IP Range Only packets with this assigned destination IP range will statically bind to the assigned WAN port. Source Port Range Only packets with this assigned source port range will statically bind to the assigned WAN port. estination Port Range Only packets with this assigned destination port range will statically bind to the assigned WAN port.
2.4.6 ALG Settings You can select applications that need “Application Layer Gateway Parameters Default Enable Click Apply at the bottom of the screen to save the above configurations. You can now configure other advanced sections or start using the router (with the advanced settings in place). ”...
2.4.7 Static Routing This router provides a Static Routing function when NAT is disabled. With Stat ccording to your routing rules. ote: The DMZ function of the firewall will not work if static routing is enabled. arameter Enable Static Routing Destinat ion LAN IP ubnet Mask...
Hop Count Interface dd a Rule emove a Rule Click Apply at the bottom of the screen to save the above configurations. You can now confi r start using the ro uter (with the advanced settings in place). .5 Firewall he Broadband rou ter provides extensive firewall protection by restricting connection parameters, thus lim acker attacks, and defending against a wide array of common Internet attacks.
Page 57
Parameters Description 2.5.1 Access Control Access Control allows you to specify which hosts/users can have access to certain Internet applications. .5.2 URL Blocking URL Blocking allows you to specify which URLs cannot be accessed by users. .5.3 DoS The router's firewall can block common hacker attacks and can log the attack activities. .5.4 DMZ The DMZ function allows you to re-direct all packets going to your WAN port IP address to a particular IP address in your LAN.
2.5.1 Access Control you want to restrict users from accessing certain Internet applications/services (e.g. Internet websites, em ou can change the relevant settings here. Access Control allows users to define the type of traffic perm AN. You can con trol which PC client can have access to these services. arameters Filter client PCs by IP...
Page 59
Add PC emove PC You can now configure other advanced sections or start using the router (with the advanced settings in place). Fill in “Client PC MAC Address” and “Comment” for the PC that will be allowed to access the Internet, and then click “Add”. If you find any errors before adding it and want to retype it again, just click "Reset"...
Page 60
Add PC Parameters Client PC Description Client PC IP Address Client PC Service rotocol ort Range pply Changes eset Click Apply Changes at the bottom of the screen to save the above configurations. You can now configure other dvanced sections or start using the router (with the advanced settings in place). Description The descript ion for this client PC rule.
Page 61
Example: Access Control In the example below, LAN client A can only access websites that use Port 80. However, LAN client B is able to access websites and any other service that uses ports between 80 and 999. Figure 2.26...
2.5.2 URL Blocking You can block access to some Web sites from particular PCs by entering a full URL address or just a keyword of the web site. arameters Enable URL Blocking dd URL Keyword Remove URL Keyword You can now configure other advanced sections or start using the router (with the advanced settings in place). Figure 2.27 Description Enables/disables URL Blocking.
2.5.3 DoS (Denial of Service) The Broadband router's firewall can block common hacker attacks, including Ping of Death, Discard Ping from WAN, Port S can, and Sync Flood. If Internet attacks occur the router can log the events. Figure 2.28...
Page 64
arameters Intrusion Detection Features Ping of Death Discard Ping From WAN Port Scan Sync Flood Click Apply at the bottom of the screen to save the above configurations. You can now configure other advanced sections or start using the router (with the advanced settings in place). Figure 2.29 Description Protections from Ping of Death attacks.
2.5.4 DMZ you have a local client PC that cannot run an Internet application (e.g. Games) properly from behind the NAT firewall, en you can open the client up to unrestricted two-way Internet access by defining a DMZ Host. The DMZ function lows you to re-direct all packets going to your WAN port IP address to a particular IP address in your LAN.
Page 66
Parameters Description Enable DMZ Enables/disables DMZ. Note: If there is a conflict between the Virtual Server and the DMZ setting, then the Virtual Server function will have priority over the DMZ function. WAN Port The WAN port that the local client PC’s IP address will bind to. ublic IP Address The IP address of the WAN port or any other Public IP addresses given to you by your ISP.
Status The Status section allows you to monitor the current status of your router. You can use the Status page to monitor: the connection status of the router's WAN/LAN interfaces, the current firmware and hardware version numbers, any illega attempts to access your network , and information on all DHCP client PCs currently connected to yo Parameters Description...
3.1 Status and Information The Status and Information section allows you to view the router’s system information. arameters Description Information You can see the router’s system information, including the router’s: Hardware version, Boot code Version, and Runtime code Version Figure 3.1...
3.2 Internet Connection View the router’s current Internet connection status and other related information. Parameters Description ternet Connection This page displays whether the WAN ports are connected to Cable/DSL connections. It also displays the router’s WAN port: WAN IP address, Subnet Mask, and ISP Gateway as well as the Primary DNS and Secondary DNS being used.
3.3 Device Status View the router’s current configuration settings. The Device Status displays the configuration settings you have configured in the Quick Setup Wizard/General Setup section. Parameters Description Device Status This page shows the router’s current device settings. This page displays the router LAN port’s current LAN IP Address and Subnet Mask.
3.4 System Log View the operation log of the system. arameters Description System Log This page shows the current system log of the Broadband router. It displays any event occurred after system start up. At the bottom of the page, the system log can be saved <Save>...
3.5 Security Log View any attempts that have been mad arameters Description Security Log This page shows the current security log of the Broadband router. It displays any illega attempts to access your network. At the bottom of the page, the security log can be saved <Save>...
3.6 Active DHCP Client View your LAN client's information that is currently linked to the Broadband rou Parameters Description DHCP Client Log This page shows all DHCP clients (LAN PCs) currently connected to your network. The “Active DHCP Client Table” displays the IP address and the MAC address and Time Expired for each LAN Client.
3.7 Statistics iew the statistics of packets sent and received over each WAN and LAN interface. arameters Description Statistics Shows the counters for Figure 3.7 packets sent and received over the WAN and LAN interfaces.
Tools This page inclu des the basic configuration tools, such as Configuration Tools (save or restore configuration settings), irmware Upgrade (upgrade system firmware) and Reset. arameters Description 4.1 Configuration Tools You can save the rou files and restore the .2 Firmw are Upgrade This page allows you to upgrade the router’s firmware.
4.1 Configuration Tools The Configuration Tools screen allows you to save (back up) the router’s current configuration settings. Saving configuration settings provides an added protection and co set to the factory default. When you save (back up) the configuration settings, you can re-load the saved configuration to the router through the Restore selection.
4.2 Firmware Upgrade This page allows you to upgrade the router’s firmware arameters Description Firmware Upgrade This tool allows you to upgrade the router’s system firmware. To upgrade your router’s firmware, you need t file name and path in the appropriate field on this page. You can also use the Browse button to find the firmware file on your PC.
4.3 Reset You can reset the router’s system if any problems occur. The reset function essentially re-boots your router’s system. arameters Description Reset In the event that the system stops responding correctly or in some way stops functioning, you can perform a reset. Your settings will not be changed. To perform the reset, cli on the APPLY button.
Page 79
How to Manually Find Your PC’s IP and MAC Addresses 1) In Windows, open the Command Prompt program. 2) Type Ipconfig /all and click Enter. • Your PC’s IP address is the one entitled IP address (192.168.1.77) • The router’s IP address is the one entitled Default Gateway (192.168.1.254) •...
Page 80
Bridge: A bridge is an intelligent, internetworking device that forwards or filters packets between different networks b ased on data link layer (MAC) address information. ul Gateway (Router): Every non-router IP device nee ev e sends out an IP packet, if the destination is not on the same network, the device has to send the packet to its default ateway, hich will then send it out towards the destination.
Page 81
ISP Gateway Address: (see ISP for definition). The ISP Gateway Address is an IP address for the Internet router loca at the ISP's office. ISP: Internet Service Provider. An ISP is a business that provides connectivity to the Internet for individuals and other businesses or organizations.
Page 82
Protocol: A protocol is a set of rules for interaction agreed upon between multiple parties so that when they interface with each other based on such a protocol, the interpretation of their behavior is well defined and can be made objectively, without confusion or misunderstanding.
Need help?
Do you have a question about the H2BR4 and is the answer not in the manual?
Questions and answers