1. Manuals
  2. Brands
  3. QNO Manuals
  4. Network Router
  5. FQR7200
  6. User manual

QNO FQR7200 User Manual

4wan 1lan all gigabit
Hide thumbs
Table of Contents

Advertisement

Quick Links

4WAN 1LAN All Gigabit
Multi-WAN QoS Router
Load Balance, Bandwidth Management, and Network Security
English User's Manual

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the FQR7200 and is the answer not in the manual?

Questions and answers

Subscribe to Our Youtube Channel

Related Manuals for QNO FQR7200

Summary of Contents for QNO FQR7200

  • Page 1 4WAN 1LAN All Gigabit Multi-WAN QoS Router Load Balance, Bandwidth Management, and Network Security English User’s Manual...

  • Page 2: Table Of Contents

    Content I. Introduction .............................. 3 II. Multi- WAN Router Installation ......................5 2.1 Systematic Setting Process ........................... 5 2.2 Setting Flow Chart ............................5 III. Hardware Installation ..........................8 3.1 Router LED Signal ............................8 3.2 Router Network Connection ......................... 10 IV.
  • Page 3 12.3 Traffic Statistic .............................. 152 12.4 Connection Statistic (Future Feature) ......................155 12.5 IP/ Port Statistic ............................157 12.6 QRTG (Qno Router Traffic Grapher) ......................159 XIII. Log out ............................... 164 Appendix I: User Interface and User Manual Chapter Cross Reference ........165 Appendix II: Troubleshooting .......................
  • Page 4 Manual, and the relevant rights and obligations between the users and Qno Technology Inc (hereafter "Qno"), and is the exclusion to remit or limit the liability of Qno. The users who obtain the file of this manual directly or indirectly, and users who use the relevant services, must obey this Agreement.
  • Page 5 【5-2】The power of interpretation, potency and dispute are applicable for the law of Taiwan. If there is any dissension or dispute between the users and Qno, it should be attempted to solve by consultation first. If it is not solved by consultation, user agrees that the dissension or dispute is brought to trial in the jurisdiction of the court in the location of Qno.

  • Page 6: Introduction

    Multi-WAN Router I. Introduction Multi-WAN Router (referred as Router hereby) is a business level firewall router that efficiently integrates new generation multiple WAN-port firewall devices. It meets the needs of both medium and large-scale enterprises, internet cafes, and communities, etc. The Router focuses on multiple ISP environment and user bandwidth management requirement to integrate the gigabit backbone networking, it can support hardware port mirror, smart QoS, Multi-WAN load balance, gateway redundancy, and Intelligent Firewall.
  • Page 7 DHCP server is also supported, as well as an easy configuration of IP-MAC binding function allowing network structure to be flexible and easy to deployed and managed. You can log on to our Web site www.Qno.com.tw, and find the latest Qno product information and technical support.

  • Page 8: Multi- Wan Router Installation

    Multi-WAN Router II. Multi- WAN Router Installation In this chapter we are going to introduce hardware installation. Through the understanding of multi-WAN setting process, users can easily setup and manage the network,making Router functioning and having best performance. 2.1 Systematic Setting Process Users can set up and enable the network by utilizing bandwidth efficiently.
  • Page 9 Multi-WAN Router network to meet physical requirements. user’s demand. Login Login the device with Login Router web-based UI. Web Browser. Verify device specification Verify Firmware Verify Router specification, Firmware version version and working and working status. status. Set password and time Set time and re-new Modify the login password considering safe password.
  • Page 10 Multi-WAN Router Monitor Router Administrators can look up system log and Management and working status and monitor system status and inbound/outbound maintenance settings: Syslog, configuration backup. flow in real time. SNMP, and configuration backup Logout Close configuration Logout Router web-based UI. window.

  • Page 11: Hardware Installation

    Multi-WAN Router III. Hardware Installation In this chapter we are going to introduce hardware interface as well as physical installation. 3.1 Router LED Signal LED Signal Description Color Description Green Green LED on: Power ON Power Amber Amber LED on: System self-test is running. DIAG Amber LED off: System self-test is completed successfully.
  • Page 12 The Router has two wall-mount slots on its bottom panel. When mounting the device on the wall, please ensure that the heat dissipation holes are facing sideways as shown in the following picture for safety reasons. Qno is not responsible for damages inccured by insecure wall-mounting hardware.

  • Page 13: Router Network Connection

    Multi-WAN Router 3.2 Router Network Connection WAN connection:A WAN port can be connected with xDSL Modem, Fiber Modem, Switching Hub, or through an external router to connect to the Internet. LAN Connection: The LAN port can be connected to a Switching Hub or directly to a PC. Users can use servers for monitoring or filtering through the port after “Physical Port Mangement”...

  • Page 14: Login Router

    Multi-WAN Router IV. Login Router This chapter is mainly introducing Web-based UI after connecting Router. First, check up Router IP address by connecting to DOS through the LAN PC under Router. Go to Start → Run, enter cmd to commend DOS, and enter ipconfig for getting Default Gateway address, as the graphic below, 192.168.1.1.
  • Page 15 Multi-WAN Router Then, open webpage browser, IE for example, and key in 192.168.1.1 in the website column. The login window will appear as below: Router default username and password are both “admin”. Users can change the login password in the setting later.

  • Page 16: Device Spec Verification, Status Display And Login Password And Time Setting

    Multi-WAN Router V. Device Spec Verification, Status Display and Login Password and Time Setting This chapter introduces the device specification and status after login as well as change password and system time settings for security. 5.1 Home Page In the Home page, all Router parameters and status are listed for users’ reference. 5.1.1 WAN Status IP Address: Indicates the current IP configuration for WAN port.
  • Page 17 Multi-WAN Router When “Obtain an IP automatically” is selected, two buttons (Release and Manual Connect: Renew) will appear. If a WAN connection, such as PPPoE or PPTP, is selected, “Disconnect” and “Connect” will appear. DMZ IP Address: Indicates the current DMZ IP address. 5.1.2 Physical Port Status The status of all system ports, including each connected and enabled port, will be shown on this Home page (see above table).
  • Page 18 Multi-WAN Router The current port setting status information will be shown in the Port Information Table. Examples: type (10Base-T/100Base-TX/1000Base-T), iniferface (WAN/ LAN/ DMZ), link status (Up/ Down), physical port status (Port Enabled/ Port Disabled), priority (high or normal), speed status (10Mbps or 100Mbps), duplex status (Half/ Full), auto negotiation (Enabled or Disabled).
  • Page 19 Multi-WAN Router 5.1.3 System Information Device IP Address/ Subnet Mask:Identifies the current device IP address and subnet mask. The default is 192.168.1.1 and 255.255.255.0 Working Mode:Indicates the current working mode. Can be Gateway or Router mode. The default is “Gateway” mode. System active time: Indicates how long the device has been running.
  • Page 20 Multi-WAN Router 5.1.4 Firewall Status SPI (Stateful Packet Inspection): Indicates whether SPI (Stateful Packet Inspection) is on or off. The default configuration is “On”. DoS (Denial of Service):Indicates if DoS attack prevention is activated. The default configuration is “On”. Block WAN Request:Indicates that denying the connection from Internet is activated. The default configuration is “On”.

  • Page 21: Change And Set Login Password And Time

    Multi-WAN Router because you have not specified an outbound SMTP server address.”—— represents that you do not have email setting and it can not send out syslog emails. If you have the email address set in system log, but the log does not meet the sending log conditions, it will show “E-mail settings have been configured.”——...
  • Page 22 Multi-WAN Router The default is “admin”. User Name: Input the original password.（The default is “admin”.） Old Password: Input the new user name. i.e.Qno New User Name: New Password: Input the new password. Confirm New Password: Input the new password again for verification.
  • Page 23 Multi-WAN Router Time Zone: Select your location from the pull-down time zone list to show correct local time. Daylight Saving: If there is Daylight Saving Time in your area, input the date range. The device will adjust the time for the Daylight Saving period automatically. External NTP Server: If you have your own preferred time server, input the server IP address.

  • Page 24: Network

    Multi-WAN Router VI. Network This Network page contains the basic settings. For most users, completing this general setting is enough for connecting with the Internet. However, some users need advanced information from their ISP. Please refer to the following descriptions for specific configurations. 6.1 Network Connection 6.1.1 Host Name and Domain Name...
  • Page 25 Multi-WAN Router Device name and domain name can be input in the two boxes. Though this configuration is not necessary in most environments, some ISPs in some countries may require it. 6.1.2 LAN Setting LAN setting is shown and can be configured in this page. The LAN MAC can be modified. When a new router replaces an old one, LAN MAC can be changed as MAC of the original device.
  • Page 26 Multi-WAN Router LAN Setting This is configuration information for the device current LAN IP address. The default configuration is 192.168.1.1 and the default Subnet Mask is 255.255.255.0. It can be changed according to the actual network structure. Multiple-Subnet Setting: Click “Add/Edit” to enter the configuration page, as shown in the following figure. Input the respective IP addresses and subnet masks.
  • Page 27 Multi-WAN Router 6.1.3 WAN & DMZ Settings WAN Setting: Interface: An indication of which port is connected. Connection Type: Obtain an IP automatically, Static IP connection, PPPoE (Point-to-Point Protocol over Ethernet), PPTP (Point-to-Point Tunneling Protocol) or Transparent Bridge. Config.: A modification in an advanced configuration: Click Edit to enter the advanced configuration page. Obtain an Automatic IP automatically: This mode is often used in the connection mode to obtain an automatic DHCP IP.
  • Page 28 Multi-WAN Router Use the following DNS Server Select a user-defined DNS server IP address. Addresses: DNS Server: Input the DNS IP address set by ISP. At least one IP group should be input. The maximum acceptable groups is two IP groups. Enable Line-Dropped The WAN disconnection schedule will be activated by checking this Scheduling:...
  • Page 29 Multi-WAN Router added connections should go through another WAN to connect with the Internet. Link Backup Interface Select another WAN port as link backup when port binding is configured. Users should select the port that employs the same ISP. If your WAN connects to a Switch, select “Enabled” to filter broadcast Shared- Circuit WAN packets.
  • Page 30 Multi-WAN Router WAN IP address: Input the available static IP address issued by ISP. Input the subnet mask of the static IP address issued by ISP, such as: Subnet Mask: Issued eight static IP addresses: 255.255.255.248 Issued 16 static IP addresses: 255.255.255.240 Default Gateway: Input the default gateway issued by ISP.
  • Page 31 Multi-WAN Router disconnection, all the external connections that go through this WAN will be disconnected too. Only after the disconnected lines are reconnected can they go through the standby system to connect with the Internet. Therefore, to avoid a huge number of disconnections, users can activate this function to arrange new connections to be made through another WAN to the Internet.
  • Page 32 Multi-WAN Router User Name: Input the user name issued by ISP. Password Input the password issued by ISP. Connect on This function enables the auto-dialing function to be used in a PPPoE dial Demand: connection. When the client port attempts to connect with the Internet, the device will automatically make a dial connection.
  • Page 33 Multi-WAN Router through this WAN will be disconnected too. Only after the disconnected lines are reconnected can they go through the standby system to connect with the Internet. Therefore, to avoid a huge number of disconnections, users can activate this function to arrange new connections through another WAN to the Internet.
  • Page 34 Multi-WAN Router WAN IP Address: This option is to configure a static IP address. The IP address to be configured could be one issued by ISP. (The IP address is usually provided by the ISP when the PC is installed. Contact ISP for relevant information).
  • Page 35 Multi-WAN Router Demand: connection. When the client port attempts to connect with the Internet, the device will automatically connect with the default ISP auto dial connection; when the network has been idle for a period of time, the system will break the connection automatically. (The default time for automatic break off when no packets have been transmitted is five minutes).
  • Page 36 Multi-WAN Router different network environment. (e.g. ADSL PPPoE MTU: 1492) The default is “Auto”. After the changes are completed, click “Apply” to save the configuration, or click “Cancel" to leave without making any changes. Transparent Bridge If all Intranet IP addresses are applied as Internet IP addresses, and users don’t want to substitute private network IP addresses for all Intranet IP addresses (ex.
  • Page 37 Multi-WAN Router WAN IP Address: Input one of the static IP addresses issued by ISP. Subnet Mask: Input the subnet mask of the static IP address issued by ISP, such as: Issued eight static IP addresses: 255.255.255.248 Issued 16 static IP addresses: 255.255.255.240 Default Gateway Address: Input the default gateway of the static IP address issued by ISP.
  • Page 38 Multi-WAN Router Internal LAN IP Range 1 and Internal LAN IP Range 2 respectively. The WAN disconnection schedule will be activated by checking Enable Line-Dropped Scheduling: this option. In some areas, there is a time limitation for WAN connection service. For example: the optical fiber service will be disconnected from 0:00 am to 6:00 am.
  • Page 39 Multi-WAN Router reach the Internet. If this WAN network is enabled the Router plus NAT mode, you can still use load balancing function in this WAN network. WAN IP address Enter the public IP address. Subnet mask Enter the public IP address subnet mask. WAN default gateway Enter the WAN default gateway, which provided by your ISP.
  • Page 40 Multi-WAN Router available.. Intranet routing default Enter one of IP addresses that provide by the ISP as your default gateway gateway. Enter your IP addresses range, which IP addresses are provided by Intranet IP addresses range ISP. If you have multiple IP ranges, you need setup group1 and group You can also setup the default gateway and IP range in the group 2.
  • Page 41 Multi-WAN Router IP address: Indicates the current default static IP address. Config.: Indicates an advanced configuration modification: Click Edit to enter the advanced configuration page. The DMZ configuration can be classified by Subnet and Range: Subnet: The DMZ and WAN located in different Subnets For example: If the ISP issued 16 real IP addresses: 220.243.230.1-16 with Mask 255.255.255.240, users have to separate the 16 IP addresses into two groups: 220.243.230.1-8 with Mask 255.255.255.248, and 220.243.230.9-16 with Mask 255.255.255.248 and then set the device and the gateway in the same group...

  • Page 42: Multi- Wan Setting

    Multi-WAN Router IP Range: Input the IP range located at the DMZ port. After the changes are completed, click “Apply” to save the configuration, or click “Cancel" to leave without making any changes. 6.2 Multi- WAN Setting 6.2.1 Load Balance Mode Auto Load Balance Mode When Auto Load Balance mode is selected, the device will use sessions or IP and the WAN bandwidth automatically allocate connections to achieve load balancing for external connections.
  • Page 43 Multi-WAN Router automatic load ratio will be 1:1; if one of the upload bandwidths is 1024Kbit/sec while the other is 512Kbit/sec, the automatic load ratio will be 2:1. Therefore, to ensure that the device can balance the actual network load, please input real upload and download bandwidths.
  • Page 44 Multi-WAN Router allocate connections based on session number to achieve network load balance. IP Balance: If “By IP” is selected, the WAN bandwidth will automatically allocate ● connections based on the number of IP addresses to achieve network load balance. Note! Only when a device assignment is collocated with Protocol Binding can the balancing function be brought into full play.
  • Page 45 Multi-WAN Router Name: To define a name for the WAN grouping in the box, such as “Education” etc. The name is for recognizing different WAN groups. Interface: Check the boxes for the WANs to be added into this combination. Add To List: To add a WAN group to the grouping list.
  • Page 46 Multi-WAN Router To build a policy document users can use a text-based editor, such as Notepad, which is included with Windows system. Follow the text format in the figure below to key in the destination IP addresses users want to assign. For example, if the destination IP address range users want to designate is 140.115.1.1 ~ 140.115.1.255, key in 140.115.1.1 ~ 140.115.1.255 in Notepad.
  • Page 47 Multi-WAN Router Note! China Netcom strategy and self-defined strategy can coexist. However, if a destination IP is assigned by both China Netcom strategy and self-defined strategy, China Netcom strategy will take priority. In other words, traffic to that destination IP will be transmitted through the WAN (or WAN group) under China Netcom strategy.
  • Page 48 Multi-WAN Router Destination Auto Binding Indicates that the session will be connected with the same WAN IP when the destination IP is in the same Class B range. For example, there are WAN1-1 200.10.10.1 and WAN2- 200.10.10.2, and two intranet IP addresses. When 192.168.1.100 visits Internet 61.222.81.100 for the first time, the connection is through WAN1- 200.10.10.1.
  • Page 49 Multi-WAN Router User Define Dis. Or Port Auto Indicates that the intranet IP will connect through the same WAN IP when the service ports are self- defined. Binding You can self- define the service ports and destination IP. (If the destination IP is set as 0.0.0.0 to 0, this represents that the destination is to any IP range.) Note!
  • Page 50 Multi-WAN Router it will go through the same WAN IP. As for which WAN will be selected, this follows the first- chosen WAN IP distributed by the original session balance mechanism. For example, there are two intranet IP- 192.168.100.1 and 192.168.100.2. When these intranet IPs first connects with TCP443 port, 192.168.100.1 will go through WAN1, and 192.168,100.2 will go through WAN2.
  • Page 51 Multi-WAN Router Retry Timeout: Delay time for external connection detection latency. The default is 30 seconds. After the retry timeout, external service detection will restart. When Fail: (1) Generate the Error Condition in the System Log: If an ISP connection failure is detected, an error message will be recorded in the System Log.
  • Page 52 Multi-WAN Router ISP Host: This is the detected location for the ISP port, such as the DNS IP address of ISP. When configuring an IP address for this function, make sure this IP is capable of receiving feedback stably and speedily. (Please input the DNS IP of the ISP port) Remote Host: This is the detected location for the remote Network Segment.
  • Page 53 Multi-WAN Router Protocol Binding Users can define specific IP addresses or specific application service ports to go through a user-assigned WAN for external connections. For any other unassigned IP addresses and services, WAN load balancing will still be carried out. Note！...
  • Page 54 Multi-WAN Router Service: This is to select the Binding Service Port to be activated. The default (such as ALL-TCP&UDP 0~65535, WWW 80~80, FTP 21 to 21, etc.) can be selected from the pull-down option list. The default Service is All 0~65535.
  • Page 55 Multi-WAN Router input “0” in the IP boxes. Destination IP: In the boxes, input an external static IP address. For example, if connections to destination IP address 210.11.1.1 are to be restricted to WAN1, the external static IP address 210.1.1.1 ~ 210.1.1.1 should be input.
  • Page 56 Multi-WAN Router Add or Remove Service Port If the Service Port users want to activate is not in the list, users can add or remove service ports from “Service Port Management” to arrange the list, as described in the following: Service Name: In this box, input the name of the Service Port which users want to activate, such as BT, etc.
  • Page 57 Multi-WAN Router Close: To quit this configuration window. Auto Load Balancing mode when enabled: The collocation of the Auto Load Balance Mode and the Auto Load Mode will enable more flexible use of bandwidth. Users can assign specific Intranet IP addresses to specific destination application service ports or assign specific destination IP addresses to a WAN users choose for external connections.
  • Page 58 Multi-WAN Router Example 2:How do I set up Auto Load Balance Mode to keep Intranet IP 192.168.1.150 ~ 200 from going through WAN2 when the destination port is Port 80? As in the figure below, select “HTTP [TCP/80~80]” from the pull-down option list “Service”, and then in the boxes for “Source IP”...
  • Page 59 Multi-WAN Router Example 3:How do I set up Auto Load Balance Mode to keep all Intranet IP addresses from going through WAN2 when the destination port is Port 80 and keep all other services from going through WAN1? As in the figure below, there are two rules to be configured. The first rule: select “HTTP [TCP/80~80]”...
  • Page 60 Multi-WAN Router click “Add New” and the rule will be added to the mode. The device will transmit packets that are not going to Port 80 to the Internet through WAN1. Configuring “Assigned Routing Mode” for load Balance: IP Group: This function allows users to assign packets from specific Intranet IP addresses or to specific destination Service Ports and to specific destination IP addresses through an assigned WAN to the Internet.
  • Page 61 Multi-WAN Router then in the boxes of “Source IP” input “192.168.1.0 ~ 0” (which means to include all Intranet IP addresses). Retain the original numbers “0.0.0.0” in the boxes of “Destination IP” (Which means to include all Internet IP addresses). Select WAN2 from the pull-down option list “Interface”, and then click “Enable”.
  • Page 62 Multi-WAN Router then click “Enable”. Finally, click “Add New” and the rule will be added to the mode. The second rule: Select “All Port [TCP&UDP/1~65535]” from the pull-down option list “Service”, and then in the boxes of “Source IP” input “192.168.1.0 ~ 0” (which means to include all Intranet IP addresses). In the boxes of “Destination IP”...

  • Page 63: Port Management

    Multi-WAN Router VII. Port Management This chapter introduces how to configure ports and understand how to configure intranet IP addresses. 7.1 Setup Through the device, users can easily manage the setup for WAN ports, LAN ports and the DMZ port by choosing the number of ports, speed, priority, duplex and enable/disable the auto-negotiation feature for connection setting of each port.

  • Page 64: Port Status

    Multi-WAN Router deliver the packet. The default value is “Normal”. Speed: This feature allows users to select the network hardware connection speed for the Ethernet port. The options are 10Mbps and 100Mbps. Duplex Status: This feature allows users to select the network hardware connection speed working mode for the Ethernet.

  • Page 65: Ip/ Dhcp

    Multi-WAN Router Summary: There are Network Connection Type, Interface, Link Status (Up/Down), Port Activity (Port Enabled), Priority Setting (High or Normal), Speed Status (10Mbps, 100Mbps or 1000Mbps), Duplex Status (half duplex or full duplex), Auto Neg. (Enabled/Disabled), and VLAN. Statistics: The packet data of this specific port will be displayed.
  • Page 66 Multi-WAN Router With an embedded DHCP server, it supports automatic IP assignation for LAN computers. (This function is similar to the DHCP service in NT servers.) It benefits users by freeing them from the inconvenience of recording and configuring IP addresses for each PC respectively. When a computer is turned on, it will acquire an IP address from the device automatically.
  • Page 67 Multi-WAN Router PC. The default is 1440 minutes (a day). Users can change it according to their needs. The time unit is minute. This is an initial IP automatically leased by DHCP. It means DHCP will Range Start: start the lease from this IP. The default initial IP is 192.168.1.100. Range End: This is the end IP automatically leased by DHCP.

  • Page 68: Dhcp Status

    Multi-WAN Router 7.4 DHCP Status This is an indication list of the current status and setup record of the DHCP server. The indications are for the administrator’s reference when a network modification is needed. DHCP Server: This is the current DHCP IP. The amount of dynamic IP leased by DHCP.

  • Page 69: Ip & Mac Binding

    Multi-WAN Router 7.5 IP & MAC Binding Administrators can apply IP & MAC Binding function to make sure that users can not add extra PCs for Internet access or change private IP addresses. There are two methods for setting up this function: Block MAC address not on the list This method only allows MAC addresses on the list to receive IP addresses from DHCP and have Internet access.
  • Page 70 Multi-WAN Router...
  • Page 71 Multi-WAN Router IP & MAC Binding Static IP: There are two ways to input static IP: If users want to set up a MAC address to acquire IP from DHCP, but the IP need not be a specific assigned IP, input 0.0.0.0 in the boxes.
  • Page 72 Multi-WAN Router Name: For distinguishing clients, input the name or address of the client that is to be bound. The maximum acceptable characters are 12. Enabled: Activate this configuration. Add to list: Add the configuration or modification to the list. Delete selected item: Remove the selected binding from the list.

  • Page 73: Ip Grouping

    Multi-WAN Router 7.6 IP Grouping IP Group function can combine several IP addresses or IP address ranges into several groups. When you manage user internet access privileges by IP address, you can set up every management functions for users who have same internet access privileges in the same IP group in order to decrease the effort of setting rules for each IP address.
  • Page 74 Multi-WAN Router Local Group Set You can choose from the IP list on the left side to set up a local IP group. IP Group Choose IP Group that you would like to modify. If you would like to add new groups, please push “Add new group”...
  • Page 75 Multi-WAN Router first, and choose to add IP address information from the left side into the remote group.

  • Page 76: Port Group Management

    Multi-WAN Router 7.7 Port Group Management Service ports can be grouping as IP grouping. It is convenient to set QoS, firewall access rules, and other functions. Input the name, protocol, and port range for the specific service port. User edit port Name the Port in order to identify its property.
  • Page 77 Multi-WAN Router Click “Cancel" to leave without making any changes. Cancel...

  • Page 78: Qos (Quality Of Service)

    Multi-WAN Router VIII. QoS (Quality of Service) QoS is an abbreviation for Quality of Service. The main function is to restrict bandwidth usage for some services and IP addresses to save bandwidth or provide priority to specific applications or services, and also to enable other users to share bandwidth, as well as to ensure stable and reliable network transmission.

  • Page 79: Bandwidth Management

    Multi-WAN Router 8.1 Bandwidth Management 8.1.1 The Maximum Bandwidth provided by ISP...
  • Page 80 Multi-WAN Router In the boxes for WAN1 and WAN2 bandwidth, input the upstream and downstream bandwidth which users applied for from bandwidth supplier. The bandwidth QoS will make calculations according to the data users input. In other words, it will guarantee a minimum rate of upstream and downstream for each IP and Service Port based on the total actual bandwidth of WAN1 and WAN2.
  • Page 81 Multi-WAN Router Interface: Select on which WAN the QoS rule should be executed. It can be a single selection or multiple selections. Service Port: Select what bandwidth control is to be configured in the QoS rule. If the bandwidth for all services of each IP is to be controlled, select “All (TCP&UDP) 1~65535”.
  • Page 82 Multi-WAN Router be controlled, input “0” in the boxes of IP address. This means all Intranet IP addresses will be restricted. QoS can also control the range of Class B. Upstream: Means the upload bandwidth for Intranet IP. Direction: Downstream: Means the download bandwidth for Intranet IP. Server in LAN, Upstream: If a Server for external connection has been built in the device, this option is to control the bandwidth for the traffic coming from outside to this Server.
  • Page 83 Multi-WAN Router download information, the total occupied bandwidth is fixed. Enable: Activate the rule. Add to list: Add this rule to the list. Move up & Move QoS rules will be executed from the bottom of the list to the top of the list. In down: other words, the lower down the list, the higher the priority of execution.
  • Page 84 Multi-WAN Router Interface: Select on which WAN the QoS rule should be executed. It can be a single selection or multiple selections. Service Port: Select what bandwidth control is to be configured in the QoS rule. If FTP uploads or downloads need to be controlled, select “FTP Port 21~21”. Refer to the Default Service Port Number List.
  • Page 85 Multi-WAN Router High: 60% guaranteed bandwidth to the service Priority: Low: Only 10% bandwidth offered to the service Enabled: Activate the rule. Add this rule to the list. Add to list: Delete Selected Remove the rules selected from the Service List. items: Show Table: This will display all the Priority Rules users made for the bandwidth.
  • Page 86 Multi-WAN Router 8.1.3 Smart QoS Enabled QoS: Choose to apply QoS function. When the usage of any WAN’s Input the required rate value into the column. The bandwidth is over___%, Enable Smart default is 60%. Each IP’s upstream bandwidth threshold Input the max.
  • Page 87 Multi-WAN Router shown on the list. If “Always” is selected, the rule will be executed around Scheduling: the clock. If “From…” is selected, the rule will be executed according to the configured time range. For example, if the time control is from Monday to Friday, 8:00am to 6:00pm, users can refer to the following figure to set up the rule.
  • Page 88 Multi-WAN Router 8.1.4 Exception IP address If some users are allowed to avoid traffic management control, you can use this function to fulfill the requirement. Select WAN ports. Source IP Enter the exempted IP range, or select the exempted IP group. Do not control Direction Select do not control upload, download, or both of them.

  • Page 89: Session Control

    Multi-WAN Router 8.2 Session control Session management controls the acceptable maximum simultaneous sessions of Intranet PCs. This function is very useful for managing connection quantity when P2P software such as BT, Thunder, or emule is used in the Intranet causing large numbers of sessions. Setting up proper limitations on sessions can effectively control the sessions created by P2P software.
  • Page 90 Multi-WAN Router this user will not be able to make a new session for five minutes. Even if the previous session has been closed, new sessions cannot be made until the setting time ends. If this function is selected, when the user’s port connections reach the limit, all the lines that this user is connected with will be removed, and the user will not be able to connect with the Internet for five minutes.
  • Page 91 Multi-WAN Router Exempted Service Port or IP Address Service Port: Choose the service port. IP Address: Input the IP address range or IP group. Enabled: Activate the rule. Add to list: Add this rule to the list. Remove the rules selected from the Service List. Delete seleted item: Click “Apply”...

  • Page 92: Hardware Optimization (Future Feature)

    Multi-WAN Router 8.3 Hardware Optimization (Future Feature) This GIGABIT flagship router not only provides high processing performance but also launches “hardware optimization’ function for bandwidth control and traffic prioritization. The main purpose is to process the bandwidth functions through hardware design, which can accerlate and prioritize the traffic distribution and usage without wasting CPU and system resources.
  • Page 93 Multi-WAN Router the traffic in high priorities when the traffic rules match source MAC addresses. (2) Destination MAC address: Hardware optimization will only be effective to guarantee the traffic in high priorities when the traffic rules match destination MAC addresses. (3) None: The traffic rules neither match traffic rules nor check MAC addresses.

  • Page 94: Firewall

    Multi-WAN Router IX. Firewall This chapter introduces firewall general policy, access rule, and content filter settings to ensure network security. 9.1 General Policy The firewall is enabled by default. If the firewall is set as disabled, features such as SPI, DoS, and outbound packet responses will be turned off automatically.
  • Page 95 Multi-WAN Router Inspection): technology. The Firewall operates mainly at the network layer. By executing the dynamic authentication for each connection, it will also perform an alarming function for application procedure. Meanwhile, the packet authentication firewall may decline the connections which use non-standard communication protocol.
  • Page 96 Multi-WAN Router Advanced Setting Packet Type: This device provides three types of data packet transmission: TCP-SYN-Flood, UDP-Flood and ICMP-Flood. WAN Threshold: When all packet values from external attack or from single external IP attack reach the maximum amount (the default is 15000 packets/Sec and 2000 packets/Sec respectively), if these conditions above occurs, the IP will be blocked for 5 minutes ( the default is 5 minutes OBJ 176 ).
  • Page 97 Multi-WAN Router Show Blocked IP: Show the blocked IP list and the remained blocked time. Restricted WEB Features: It supports the block that is connected through: Java, Cookies, Active X, and HTTP Proxy access. Don’t Block Java / If this option is activated, users can add trusted network or IP address ActiveX / Cookies Proxy into the trust domain, and it will not block items such as Java/ActiveX/Cookies contained in the web pages from the trust...
  • Page 98 Multi-WAN Router Input the information of the QQ number, etc. User Name: Input the number. Exempted QQ Number: Add the number to the list. Add to list: Delete the selected rule in the list. Delete selected item: Block File Type...
  • Page 99 Multi-WAN Router Exception IP address: Input Exception IP.

  • Page 100: Access Rule

    Multi-WAN Router 9.2 Access Rule Users may turn on/off the setting to permit or forbid any packet to access internet. Users may select to set different network access rules: from internal to external or from external to internal. Users may set different packets for IP address and communication port numbers to filter Internet access rules.
  • Page 101 Multi-WAN Router In addition to the default rules, all the network access rules will be displayed as illustrated above. Users may follow or self-define the priority of each network access rule. The device will follow the rule priorities one by one, so please make sure the priority for all the rules can suit the setting rules. Edit: Define the network access rule item Delete:...
  • Page 102 Multi-WAN Router 9.2.2 Add New Access Rule Action: Allow: Permits the pass of packets compliant with this control rule. Deny: Prevents the pass of packets not compliant with this control rule. Service Port: From the drop-down menu, select the service that users grant or do not give permission.
  • Page 103 Multi-WAN Router address or an IP address within a session. Dest. IP: Select the destination IP range (such as Any, Single, Range, or preset IP group name) If Single or Range is selected; please enter a single IP address or an IP address within a session. Select “Always”...

  • Page 104: Content Filter

    Multi-WAN Router 9.3 Content Filter The device supports two webpage restriction modes: one is to block certain forbidden domains, and the other is to give access to certain web pages. Only one of these two modes can be selected. Block Forbidden Domain Fill in the complete website such as www.sex.com to have it blocked.
  • Page 105 Multi-WAN Router Click ”Add to list” to create a new website to be controlled. Add to list: Delete selected item: Click to select one or more controlled websites and click this option to delete. Website Blocking by Keywords: Enabled: Click to activate this feature. The default setting is disabled. For example: If users enter the string ”sex”, any websites containing ”sex”...
  • Page 106 Multi-WAN Router Accept Allowed Domains In some companies or schools, employees and students are only allowed to access some specific websites. This is the purpose of the function. Activate the function. The default setting is “Disabled.” Enabled: Input the allowed domain name, etc. www.google.com Domain Name: Add the rule to list.
  • Page 107 Multi-WAN Router Select “Always” to apply the rule on a round-the-clock basis. Select “from”, and the Always: operation will run according to the defined time. …to…: Select "Always" to apply the rule on a round-the-clock basis. If “From” is selected, the activation time is introduced as below This control rule has time limitation.

  • Page 108: Advanced Function

    Multi-WAN Router X. Advanced Function 10.1 DMZ Host/ Port Range Forwarding 11.1.1 DMZ Host When the NAT mode is activated, sometimes users may need to use applications that do not support virtual IP addresses such as network games. We recommend that users map the device actual WAN IP addresses directly to the Intranet virtual IP addresses, as follows: If the “DMZ Host”...
  • Page 109 Multi-WAN Router external service such as WWW, FTP, Mail, etc) is contained in the network, we recommend that users use the firewall function to set up the host as a virtual host, and then convert the actual IP addresses (the Internet IP addresses) with Port 80 (the service port of WWW is Port 80) to access the internal server directly.
  • Page 110 Multi-WAN Router Service Port Add or remove service ports from the list of service ports. Management: Add to the active service content. Add to list: Service Port Management The services in the list mentioned above are frequently used services. If the service users want to activate is not in the list, we recommend that users use “Service Port Management”...
  • Page 111 Multi-WAN Router Click the “Apply” button to save the modification. Apply: Click the “Cancel” button to cancel the modification. This only works Cancel: before “Apply” is clicked. Close: Quit this configuration window.

  • Page 112: Upnp

    Multi-WAN Router 10.2 UPnP UPnP (Universal Plug and Play) is a protocol set by Microsoft. If the virtual host supports UPnP system (such as Windows XP), users could also activate the PC UPnP function to work with the device. Service Port: Select the UPnP service number default list here;...

  • Page 113: Routing

    Multi-WAN Router 10.3 Routing In this chapter we introduce the Dynamic Routing Information Protocol and Static Routing Information Protocol.
  • Page 114 Multi-WAN Router 10.3.1 Dynamic Routing The abbreviation of Routing Information Protocol is RIP. There are two kinds of RIP in the IP environment – RIP I and RIP II. Since there is usually only one router in a network, ordinarily just Static Routing will be used.
  • Page 115 Multi-WAN Router Dest. IP: Input the remote network IP locations and subnet that is to be routed. For example, the IP/subnet is 192.168.2.0/255.255.255.0. Subnet Mask: Gateway: The default gateway location of the network node which is to be routed. Hop Count: This is the router layer count for the IP.
  • Page 116 Multi-WAN Router...

  • Page 117: One To One Nat

    Multi-WAN Router 10.4 One to One NAT As both the device and ATU-R need only one actual IP, if ISP issued more than one actual IP (such as eight ADSL static IP addresses or more), users can map the remaining real IP addresses to the intranet PC virtual IP addresses.
  • Page 118 Multi-WAN Router Enabled One to One NAT: To activate or close the One-to-One NAT function. (Check to activate the function). Private IP Range Begin: Input the Private IP address for the Intranet One-to-One NAT function. Input the Public IP address for the Internet One-to-One NAT function. Public IP Range Begin: Range Length: The numbers of final IP addresses of actual Internet IP addresses.
  • Page 119 Multi-WAN Router Attention！ One-to-One NAT mode will change the firewall working mode. If this function has been set up, the Internet IP server or PC which is mapped with a LAN port will be exposed on the Internet. To prevent Internet users from actively connecting with the One-on-One NAT server or PC, please set up a proper denial rule for access, as described Firewall.
  • Page 120 Multi-WAN Router Add to List Add this configuration to the One-to-One NAT list. Delete selected range Remove a selected One-to-One NAT list. Click “Apply” to save the network configuration modification. Apply Click “Cancel" to leave without making any changes. Cancel...

  • Page 121: Ddns- Dynamic Domain Name Service

    IP of a cable modem will be changed from time to time. To overcome this problem for users who want to build services such as a website, it offers the function of dynamic web address transfer. This service can be applied from www.qno.cn/ddns, www.3322.org, www.dyndns.org, or www.dtdns.com, and these are free.
  • Page 122 Multi-WAN Router This is an indication of the WAN port the user has selected. Interface Check either of the boxes before DynDNS.org, 3322.org, DtDNS.com DDNS and QnoDDNS.org.cn to select one of the four DDNS website address transfer functions. Username The name which is set up for DDNS. Input a complete website address such as abc.qnoddns.org.cn as a user name for QnoDDNS.
  • Page 123 Multi-WAN Router configuration modification. Click “Cancel" to leave without making any changes. Cancel...

  • Page 124: Mac Clone

    Multi-WAN Router 10.6 MAC Clone Some ISP will request for a fixed MAC address (network card physical address) for distributing IP address, which is mostly suitable for cable mode users. Users can input the network card physical address (MAC address: 00-xx-xx-xx-xx-xx) here. The device will adopt this MAC address when requesting IP address from ISP.

  • Page 125: Inbound Load Balance

    Following introduces how to enable and setup Inbound Load Balance step by step. Attention! In For some models of Qno routers, user can try the function for a period but with time limit. If the function can match your network demand, you can apply for the official version License Key in Qno Official Website (www.qno.com.tw).
  • Page 126 Multi-WAN Router...
  • Page 127 Multi-WAN Router 4. Configure Domain Name and Host IP. Assign DNS service provider and Host IP address. Take the setting on TWNIC as an example, the network structure and IP are as following: WAN1:ADSL ISP A 210.10.1.1 WAN2:ADSL ISP B 200.1.1.1 Domain Name:abc.com.tw Name Server(NS):ns1.abc.com.tw /ns2.abc.com.tw Go to website of your DNS service provider to modify your own DNS Host/IP, as the following figure:...
  • Page 128 Multi-WAN Router Domain Name: Input the Domain Name which is applied before. The domain name will be shown in following configuration automatically without entering again. Time To Live: Time To Live (the abbreviation is TTL) is time interval of DNS inquiring (second, 0~65535).
  • Page 129 Multi-WAN Router Interface: Assign WAN IP address as corresponding IP of NS Record. The system will show all acquired enabled WAN IP addresses automatically so that users can check directly. But users have to check if the IP addresses are the same as the corresponding settings on TWNIC DNS service provider.
  • Page 130 Multi-WAN Router “www.mydomain.com” and “mail.mydomain.com”. They are both orientated to “host.mydomain.com.” You can also assign several domain names to the same IP address. One of the domains will be A record corresponding server IP, and the others will be alias of A record domain. If you change your server IP, you don’t have to modify every domain one by one.
  • Page 131 Multi-WAN Router Mail Input the server name which is saved in A Record or external mail server. Server: Click “Apply” button to save the configuration. Besides, users have to configure DNS service port as following description. 10. Enable DNS Query (DNS service port) in Access Rule of Firewall setting. Add a new access rule in Firewall setting to enable DNS service port of the WAN on which Inbound Load Balance need to be enabled.
  • Page 132 Multi-WAN Router Service Port: Activate the service port of A Record server, e.g. SMTP [TCP/25~25] for Mail. Internal IP: Input the internal IP of A Record, e.g. 192.168.8.100 of Mail server. Interface: Select the WAN port of A Record and corresponding IP. Enable: Activate the configuration.

  • Page 133: System Tool

    Multi-WAN Router XI. System Tool This chapter introduces the management tool for controlling the device and testing network connection. For security consideration, we strongly suggest to change the password. Password and Time setting is in Chapter 5.2. 11.1 Diagnostic The device provides a simple online network diagnostic tool to help users troubleshoot network-related problems.
  • Page 134 Multi-WAN Router Ping This item informs users of the status quo of the outbound session and allows the user to know the existence of computers online. On this test screen, please enter the host IP that users want to test such as 192.168.5.20. Press "Go" to start the test.

  • Page 135: Firmware Upgrade

    Multi-WAN Router 11.2 Firmware Upgrade Users may directly upgrade the device firmware on the Firmware Upgrade page. Please confirm all information about the software version in advance. Select and browse the software file, click "Firmware Upgrade Right Now" to complete the upgrade of the designated file. Note！...

  • Page 136: Setting Backup

    Multi-WAN Router 11.3 Setting Backup Import Configuration File: This feature allows users to integrate all backup content of parameter settings into the device. Before upgrade, confirm all information about the software version. Select and browse the backup parameter file: "config.exp." Select the file and click "Import" to import the file. Export Configuration File: This feature allows users to backup all parameter settings.

  • Page 137: Snmp

    Activate SNMP feature. The default is activated. Enabled: Set the name of the device such as Qno. System Name: Set the name of the person who manages the device (i.e. John). System Contact: Define the location of the device (i.e.
  • Page 138 Multi-WAN Router Apply: Press “Apply” to save the settings. Cancel: Press “Cancel” to keep the settings unchanged.

  • Page 139: System Recover

    Multi-WAN Router 11.5 System Recover Users can restart the device with System Recover button. Restart As the figure below, if clicking “Restart Router” button, the dialog block will pop out, confirming if users would like to restart the device. Return to Factory Default Setting If clicking “Return to Factory Default Setting, the dialog block will pop out, if the device will return to factory default.
  • Page 140 Multi-WAN Router It’s recommended to save the current configuration before upgrading firmware. After firmware upgraded, import the configuration file after returning to factory default to ensure system stable. (Please refer to 12.3)

  • Page 141: High Availability

    Therefore, administrators will have more opportunity and time to deal with the master device problems. Besides general HA, Qno also provides advanced HA function that enables two devices to operate simultaneously. It brings full cost efficiency without making another device idle. It does not have to be the same model.
  • Page 142 Multi-WAN Router (2) Two devices are operating simultaneously Two devices operate outbound linking simultaneously, but they are still separated as Master device and Backup device. In normal situation, Master device is major DHCP IP issuer, and Backup device will disable DHCP issuing automatically. When Master device fails transmitting, the Backup device will take over all outbound links and enable DHCP server to provide IP addresses.
  • Page 143 Multi-WAN Router Indicates the backup device will take over when the master fails Operation-Backup Mode transmitting. WAN and LAN IP setting in backup device should be the same as those of master device. The backup device should not be in charge of network transmitting and DHCP server.
  • Page 144 Multi-WAN Router Operation-Master Mode Besides operating network with another device, Master device is also the DHCP server to issue LAN IP addresses. Although Slave device also supports outbound linking, its DHCP server is disabled. WAN Backup The checked WANs will works in the other device. For an example, if (The Checked WANs are not WAN1 and WAN2 work in this device, and WAN3 and WAN4 work in working in this device.)
  • Page 145 Multi-WAN Router Operation-Slave Mode Although working with master device, Backup device’s DHCP server is disabled. LAN users need to transmit traffic through the WAN on Slave device. You should add LAN IP of Slave device into Master device DHCP server default gateway, which is DHCP server IP address.

  • Page 146: License Key

    Multi-WAN Router 11.7 License Key Users have to purchase License Key to “enable” some functions in Qno Firwalls/Routers series or upgrade to “Official Version”(not trial version), such as QnoSniff or Inbound Load Balance, etc. Before inputing License Key, the device will check whether current time Current Time: is correct and whether License Key is still in valid period.
  • Page 147 Multi-WAN Router Registration Time: Display successfully inputted and registered time. Status Information: Indicate remaining trial date or supported amount of QnoSoftkey VPN Tunnels. Refresh: Refresh current system status and time.

  • Page 148: Log

    Multi-WAN Router XII. Log From the log management and look up, we can see the relevant operation status, which is convenient for us to facilitate the setup and operation. 12.1 System Log Its system log offers three options: system log, E-mail alert, and log setting. System Log...
  • Page 149 Multi-WAN Router Enabled: If this option is selected, the System Log feature will be enabled. Host Name: The device provides external system log servers with log collection feature. System log is an industrial standard communications protocol. It is designed to dynamically capture related system message from the network.
  • Page 150 Multi-WAN Router reaches the threshold first and send the log message of that parameter to the user. Users may send out the log right away by pressing this button. Send Log to E- mail: Log Setting Alert Log The device provides the following warning message. Click to activate these features: Syn Flooding, IP Spoofing, Win Nuke, Ping of Death / Unauthorized Login Attempt.
  • Page 151 Multi-WAN Router General Log The device provides the following warning message. Click to activate the feature. System error message, blocked regulations, regulation of passage permission, system configuration change and registration verification. Provides the system log with all kinds of error messages. For example, System Error Message: wrong settings, occurrence of abnormal functions, system reactivation,...
  • Page 152 Multi-WAN Router Outgoing Packet Log: View system packet log which is sent out from the internal PC to the Internet. This log includes LAN IP, destination IP, and service port that is applied. It is illustrated as below. Incoming Packet Log: View system packet log of those entering the firewall.
  • Page 153 Multi-WAN Router Clear Log Now: This feature clears all the current information on the log.

  • Page 154: System Statistic

    Multi-WAN Router 12.2 System Statistic The device has the real-time surveillance management feature that provides system current operation information such as port location, device name, current WAN link status, IP address, MAC address, subnet mask, default gateway, DNS, number of received/ sent/ total packets , number of received/ sent/ total Bytes, Received and Sent Bytes/Sec., total number of error packets received, total number of the packets dropped, number of session, number of the new Session/Sec., and upstream as well as downstream broadband usage (%).

  • Page 155: Traffic Statistic

    Multi-WAN Router 12.3 Traffic Statistic Six messages will be displayed on the Traffic Statistic page to provide better traffic management and control. By Inbound IP Address: The figure displays the source IP address, bytes per second, and percentage. By outbound IP Address: The figure displays the source IP address, bytes per second, and percentage.
  • Page 156 Multi-WAN Router By Outbound Port: The figure displays the network protocol type, destination IP address, bytes per second, and percentage. By Inbound Port: The figure displays the network protocol type, destination IP address, bytes per second, and percentage.
  • Page 157 Multi-WAN Router By Outbound Session: The figure displays the source IP address, network protocol type, source port, destination IP address, destination port, bytes per second and percentage. By Inbound Session: The figure displays the source IP address, network protocol type, source port, destination IP address, destination port, bytes per second and percentage.

  • Page 158: Connection Statistic (Future Feature)

    Multi-WAN Router 12.4 Connection Statistic (Future Feature) Connection Statistic function is used to record the numbers of network connections, including outbound sessions, and intranet users (PC). It also displays the user connection sessions. Enable: When enabling Connection Statistic function, parts of system efficiency will be influenced.
  • Page 159 Multi-WAN Router connection statistic and details.(As the following graph): Host Name: Display PC names that having outbound traffic. It will show blank when the system cannot analyze. Session: Display PC connection sessions that having outbound traffic. Refresh: Click the Refresh button that the latest data and list will be updated.

  • Page 160: Ip/ Port Statistic

    Multi-WAN Router 12.5 IP/ Port Statistic The device allows administrators to inquire a specific IP (or from a specific port) about the addresses that this IP had visited, or the users (source IP) who used this service port. This facilitates the identification of websites that needs authentication but allows a single WAN port rather than Multi-WANs.
  • Page 161 Multi-WAN Router...

  • Page 162: Qrtg (Qno Router Traffic Grapher)

    Multi-WAN Router 12.6 QRTG (Qno Router Traffic Grapher) QRTG utilizes dynamic GUI and simple statistic to display system status of Qno Firewall/ Router presently, including CPU Utilization(%), Memory Utilization(%), Session and WAN Traffic. Enable QRTG: The funcation is disabled by default. When you are going to enable the QRTG function, system will pop-up a warning massage to remind you this function will be enabled, which may influence router efficiency.
  • Page 163 Multi-WAN Router...
  • Page 164 Multi-WAN Router II. WAN Traffic Statistic (hourly) graphic and average (up/down stream) (As in the following figures) * The UI might vary from model to model, depending on different product lines.
  • Page 165 Multi-WAN Router III. WAN Traffic Statistic (Day) graphic and average (up/down stream)(As in the following figures) * The UI might vary from model to model, depending on different product lines.
  • Page 166 Multi-WAN Router IV. WAN Traffic Statistic (Week) graphic and average (up/down stream)(As in the following figures) * The UI might vary from model to model, depending on different product lines.

  • Page 167: Log Out

    Multi-WAN Router XIII. Log out On the top right corner of the web- based UI, there is a Logout button. Click on it to log out of the web-based UI. To enter next time, open the Web browser and enter the IP address, user name and password to log in.

  • Page 168: Appendix I: User Interface And User Manual Chapter Cross Reference

    5.1 Home Basic Setting VI. Network Network Connection 6.1 Network Connection Traffic Management 6.2 Multi- WAN Setting Protocol Binding 6.2 Multi- WAN Setting USB Setting Please download user manual on Qno official webpage. http://www.qno.com.tw VIII. QoS Bandwidth 8.1 QoS/Smart QoS Management...
  • Page 169 Multi-WAN Router Session Control 8.2 Session Limit Hardware 8.3 Hardware Optimization Optimization IP/DHCP VII. Port Management Setup 7.3 DHCP/ IP Status 7.4 DHCP Status IP & MAC Binding 7.5 IP & MAC Binding Group Management VII. Port Management Local IP Group 7.6 IP Grouping Remote IP Group 7.6 IP Grouping...
  • Page 170 Multi-WAN Router System Recover 12.5 System Recover High Availability 13.6 High Availability License Key 13.7 License Key Port Management VII. Port Management Setup 7.1 Setup Status 7.2 Status XIII. Log System Log 13.1 System Log System Status 13.2 System Statistic Traffic Statistic 13.3 Traffic Statistic Connection Statistic...

  • Page 171: Appendix Ii: Troubleshooting

    Multi-WAN Router Appendix II: Troubleshooting （1） Shock Wave and Worm Virus Prevention Since many users have been attacked by Shock Wave and Worm viruses recently, the internet transmission speed was brought down and the Session bulky increase result in the massive processing load of the device.
  • Page 172 Multi-WAN Router Use the same method to add UDP [UDP135~139] and TCP [445~445] Ports. c. Enhance the priority level of these three to the highest.

  • Page 173: 2） Block Qqlive Video Broadcast Setting

    If the login onto the QQLive Server is blocked, the issue can be resolved. The following relates to Qno products and provides users with solutions by introducing users how to set up the device. a). Log into the device web- based UI, and enter “Firewall -> Access Rule”.
  • Page 174 Multi-WAN Router cache.tv.qq.com loginqqlivedx.qq.com qqlive.qq.com 58.60.11.145 219.133.49.159 219.133.62.70 58.60.11.146 loginqqlivewt.qq.com tv1-3t.qq.com 58.60.11.147 58.251.63.13 221.236.11.40 59.36.97.5 loginqqlivexy.qq.com tv2.qq.com 59.36.97.7 202.205.3.218 218.17.209.17 59.36.97.37 219.133.63.48 After repeated addition, users may see the links to the QQLive Server blocked. Click "Apply" to block QQLive video broadcast.

  • Page 175: 3） Arp Virus Attack Prevention

    Multi-WAN Router （3） ARP Virus Attack Prevention ARP Issue and Information Recently, many cyber cafes in China experienced disconnection (partially or totally) for a short period of time, but connection is resumed quickly. This is caused by the clash with MAC address. When virus-contained MAC mirrors to such NAT equipments as host devices, there is complete disconnection within the network.
  • Page 176 For these two situations, the device and client setup must be done to prevent ARP virus attack, which is to guarantee the complete resolution of the issue. The device selection is advised to take into consideration the one with anti-ARP virus attack. Qno products come squarely with such a feature, which is very user-friendly compared to other products.
  • Page 177 Now we understand ARP, ARP cheat and attack, as well as how to identify this type of attack. What comes next is to find out effective prevention measures to stop the network from being attacked. The general solution provided by Qno can be divided into the following three options: a) Enable “Prevent ARP Virus Attack”: Enter the device IP address to log in the management webpage of the device.
  • Page 178 Multi-WAN Router b) Bind the Gateway IP and MAC address for each PC This prevents the ARP from cheating IP and its MAC address. First, find out the gateway IP and MAC address on the device end. On every PC, start or operate cmd to enter the dos operation. Enter arp –s 192.168.1.1 0a-0f-d4-9e-fb-0b so as to finish the binding of pc01 as illustrated.
  • Page 179 Multi-WAN Router arp -d arp -s Router LAN IP Router LAN MAC For those internal network attacked by Arp, the source must be identified. Method: If the PC fails to go online or there is packet loss of ping, in the DOS screen, input arp –a command to check if the MAC address of the gateway is the same with the device MAC address.
  • Page 180 Multi-WAN Router After an item is added to the list, the corresponding message will be displayed in the white block on the bottom. However, such method is not recommended because the inquiry of IP/MAC addresses of all hosts creates heavy workload. Another method to bind IP and MAC is more recommended because of easy operation, reducing workload and time efficiency.
  • Page 181 Multi-WAN Router Click to display IP and MAC binding list dialog box. In this box, the unbinding IP and MAC address corresponding to the PC are displayed. Enter the "Name" of the computer and click on "Enabled" with the display of the “√” icon and push the option on the top right corner of the screen to confirm. Now the bound options will display on the IP and MAC binding list (as illustrated in Figure 5) and click "Apply”...
  • Page 182 Multi-WAN Router Though these basic operations can help solve the problem but Qno's technical engineers suggest that further measures should be taken to prevent the ARP attack. 1. Deal with virus source as well as the source device affected by virus through virus killing and the system re-installation.
  • Page 183 Multi-WAN Router and delete some redundant accounts. 5. Frequently update anti-virus software (virus data base), and set the daily upgrade that allows regular and automatic update. Install and use the network firewall software. Network firewall is important for the process of anti-virus. It can effectively avert the attack from the network and invasion of the virus. Some users of the pirate version of Windows cannot install patches successfully.

  • Page 184: Appendix Iii: Qno Technical Support Information

    For more information about the Qno's product and technology, please log onto the Qno's bandwidth forum, refer to the examples of the FTP server, or contact the technical department of Qno's dealers as well as the Qno's Mainland technical center.

This manual is also suitable for:

Qvm330Multi-wan qos router

Table of Contents