IOGear GNS1000 manual

® BOSS™ (Broadband Office Storage Server) a Network Server Appliance (NSA) User Manual[...]

Thank you for purchasing IOGEAR ® 's BOSS™, one of the most advanced and reasonable network server replacements on the market. IOGEAR ® only manufactures high quality connectivity devices so we are sure you will be satisfied with your purchase. IOGEAR ® is dedicated to customer service and satisfaction, and wishes you the best with your n[...]

T able of Contents Package Content and System Requirements Overview Features Benefits and Key Features 1. Pictorial Introduction 1.1 F ront View 1.2 Back Vi e w 2. Installation 2.1 Hardware Installation 2.2 Check your Computer First 2.3 Connecting to the Web-Based Manager 2.4 Web-Based Manager – Basic 3. Configuration Hierachy 3.1 Overview of Con[...]

2 4.2 IP Alias 4.3 Multiple NA T 4.4 Route Settings 4.5 DDNS 5. FireWall Settings 5.1 Virtual Server Settings 5.2 URL Filter Setup 5.3 IP Filter Setup 5.4 Denial of Service 6. VPN Settings 6.1 IP Sec Settings 6.2 PPTP Settings 7. User Management 7.1 Users 7.2 Group 8. NAS Management 8.1 HD Initialization Wizard 8.2 Advanced 34 35 36 37 39 39 41 42 [...]

3 8.3 File Sharing 9. System Management 9.1 Administrator Settings 9.2 Event Report Settings 9.3 Firmware Update 9.4 Time Settings 9.5 SNMP 10. System Report 10.1 System Information 10.2 System Log 10.3 URL Log 10.4 DHCP Lease Report Care and Handling Troubleshootoing T echnical Support Appendix S pecification Radio and TV Interference Limited Warr[...]

4 Package Content and System Requirements This package contains: • 1 Network Server Appliance • 1 P ower Adapter and Cab le • 1 Ethernet cable (CA T5) • 1 User Manual • 1 Quick Start Guide • 1 Warranty/Registration Card System Requirements: Macintosh Users: • Mac OS X (10.2) or greater • Internet Explorer 5.2 or newer PC Users: • [...]

5 Overview This chapter introduces the specifications, features, and benefits of the BOSS™ network server appliance. The Integrated server services such as a Network Address T r anslator (NA T), Vir tual Private Netw ork (VPN), SPI Firewall, and File Server mak e this one of the most sophisticated ser v er appliances on the mark et today . The BO[...]

6 Connection Sharing • Flexib le Address Space f or NA T service • IP Alias • Multiple NA T Virtual Private Network • 20 IPSec T unnels A vailab le • PPTP Server / Client Firewall • SPI (Stateful Packet Inspection) • Prevent Denial of Service (DoS) Attacks • Packet/URL Filtering • Access Control, Virtual Ser ve r System Management[...]

7 Benefits and Key Features Virtual Private Network (VPN) With Virtual Private Network, an enter prise can establish a dedicated tunnel among branch offices and/or mobile employ ees. All data is encr ypted and decrypted via the pre-defined dedicated tunnel. This prev ents hack ers from stealing private inf ormation in the public network. With this [...]

8 Auto Switc hing of Cable T ype T wo types of cables, straight through and crossed-ov er , are used to connect Ether net de vices. In the past, network managers needed to maintain the two types of cables or customize them as needed. The BOSS™ uses new innov ativ e technology that auto-detects which type of cab le is being used and adjusts the po[...]

9 proxy server as w ell. Users of the pub lic network outside the company can access only the DMZ host. The DMZ ma y typically also hav e the company’ s Web pages so these could be served to the outside world. Ho we ver , the DMZ provides access to no other company data. In the e vent that an outside user penetr ated the DMZ host’ s security , [...]

10 Pictorial Introduction System Activity LEDs LEDs : Link/Activity LEDs f or each Ethernet P or t, P ower LED , P acket T ransmit/Receiv e LEDs Hard Disk Activity Light P o wer Light Front View 1. 2. 3. 4. 12 3 4[...]

11 Back View Pictorial Introduction Pow er J ac k P ow er Button W AN por t : 10/100 Mbps W AN port MDI/MDIX switch 4 LAN ports : 10/100 Mbps Reset Button 5. 6. 7. 8. 9. 10. 56 7 8 9 10[...]

12 W AN P ort The W AN por t is used to connect to an ADSL/Cable modem f or linking to the Internet. W AN MDI/MDIX Switch The W AN MDI/MDIX switch (MDI= hub or modem side; MDIX= computer or ser v er side) is used to adjust the cable connection of the W AN por t. If the por t is connected to a hub, y ou should mo v e the s witch to the “hub” sid[...]

13 2.1 Hardware Installation Please follow the steps below to install hardware: Locate the included Ethernet cable. Connect one end of it to the DSL or cable modem or Ethernet reception and the other end to the W AN port on the BOSS™. Locate another Ethernet cable. Connect one end of it to the computer or hub and the other end to one of the LAN p[...]

14 Connect the included power adapter to the power socket on the BOSS™ and then plug the power adapter into a wall outlet. T ur n on the BOSS™. If the link LED of the W AN por t is not ON, s witch the W AN MDI/MDIX s witch to the alternate setting. The hardware installation is now complete. 2.2 Check Y our PC (Windows only) Do not assign an IP [...]

Figure 2.2a Figure 2.2b 15 Installation[...]

Figure 2.2c 16 OSD Opera- tion Installation 2.3 Connecting to the Web-Based Mana ger Please follow these steps to connect to the web- based manager: Open Internet Explorer on the computer that is DIRECTL Y connected to the BOSS™. T ype “http://192.168.2.1” in the address field, then press the Enter key . 2. An authentication window shows up t[...]

Figure 2.3a Figure 2.3b 17 Installation[...]

Figure 2.4a 18 2.4 Web-Based Mana ger – Basic Settings Star t to configure y our network environment b y clicking Basic Settings in the left menu . The Basic Settings page is shown as (Figure 2.4a) . Installation[...]

Figure 2.4b 19 The Basic Settings page contains, Internal Network Interface , Domain Name Server , and External Net- work Interface . We describe these settings in detail in the f ollowing sections. Y ou must click the Apply button after you finish inputting the settings . Y ou will see a rebooting window as Figure 2.4b . During the rebooting phase[...]

20 Installation How the Router W orks The router implements an IP-sharing feature. With only one physical IP address to access the Internet it is impossible for all computers within the home or office network to use the same IP address to gain access to the Internet at the same time. Howe v er , using the BOSS™, all computers within the home or o[...]

21 According to the default settings , we will assign the LAN to network “192.168.2.1” Y ou can add more detailed configurations later in section 4.1 DHCP Server settings. For the Netw ork Address T ranslation (NA T) application, the private netw ork address should be set in the following address range reserved by the Internet Assigned Numbers [...]

Class Address Range A Class 10.0.0.0/10.255.255.255 B Class 172.16.0.0/172.31.255.255 C Class 192.168.0.0/192.168.255.255 Domain Name Server Y our ISP may require a DNS (Domain Name Server) address. Please contact your ISP (cab le or DSL provider) for the needed DNS addresses. Once obtained, please enter the information into the DNS section of the [...]

External Network Interface External network interface includes ADSL/PPP oE , DHCP Client and Fixed IP Address settings. Y ou must choose one of three wa ys to configure the e xternal network interface . The y are illustrated as f ollows: Example 1: If y ou are connecting through a fixed IP address from the ISP . (Cable modem users) Example 2: If yo[...]

2 4 Example 1: Fixed IP Address Settings If you have a fixed IP address obtained from your ISP to access the Internet, please follow the steps below: 1. Select the Fixed IP Address radio button. 2. Enter the Public IP Address . 3. Enter the External Gateway . 4. Enter the External Netmask . 5. Click the Apply button. Installation[...]

2 5 Example 2: DHCP Client If you have a dynamic IP address provided by your ISP to access the Internet, please select the DHCP Client radio button. Once the external IP address is obtained via the DHCP protocol, there is no need to give an External IP Address, External Gateway Address, or Netmask. The DHCP server will dynamically assign these fiel[...]

Most ADSL connections do not give you a fixed IP address. In this case, you must enter the user name and password provided by your ISP f or authentication. Please f ollo w the steps below . Please select the ADSL/PPPoE radio button. In ADSL/PPPoE Setting : Enter the User Name and Password . In the Advanced Setting selection in the left menu: Y ou c[...]

After completing your configuration, each time the BOSS™ boots, it will try to connect with your ISP and the ISP will assign the BOSS™ an external IP address. If you w ould like to connect immediately , you can clic k on the Connect symbol. Once successfully connected, the Status field should reflect this. If the Status is still the same, check[...]

Configuration Hierarchies and Power Management This chapter gives you an overview of all the configuration options av ailab le. The BOSS™ is a multifunction product. Section 3.1 explains the corresponding settings for each function. Section 3.2 describes the power management in detail. 3.1 Overview of Configuration Menu There are eight main categ[...]

Figure 3.2a 2 9 P o wer Management 3.2 Power Management We divided the po wer management function into three parts. There are P ower Down, W ak e on LAN, and Hard Disk Standby . We describe each part below in detail. Power Down Y ou can turn the power down in se v eral w ays: • P ower Do wn by W eb Please select System Management -> Administra[...]

Wake On LAN (WOL) The WOL function allows remote users on the network to turn on the BOSS™. Please note that the power adapter is connected to the BOSS™ and plugged into a power outlet. Hard Disk Standby If the hard disk is idle for a while, it can enter Standby Mode to reduce the consumption of power . In the left menu, select NAS Management -[...]

3 1 Network Settings T o Configure Y our Network Settings When you select Network Settings in the left menu of the web page, five configuration options appear: DHCP Server , IP Alias, Multiple NA T , Route Settings and DDNS. Please refer to the corresponding section for these configurations.[...]

In DHCP Server settings, we assign the range of the virtual IP addresses for the four LAN ports of BOSS™. All devices connected to the LAN ports of BOSS™ will be dynamically assigned the IP addresses within the range. Y ou can either enable the DHCP server or disable it in this screen also. T o Enable the DHCP Server If you do not have a DHCP s[...]

3 3 Network Settings 7. Click the Apply button. When DHCP server is enabled, it will allow DHCP clients to obtain their network configuration from the unit. In the figure above, the IP address range of 192.168.2.2 to 192.168.2.250 is dynamically assigned to individual DHCP clients. The DHCP client ma y be assigned an IP address like “192.168.2.XX[...]

3 4 4.2 IP Alias In Basic Settings, we’ve set the private IP address of BOSS™ as “192.168.2.1”. We will assign the LAN ports of BOSS™ to the network of “192.168.X.XXX”. In DHCP server settings, we’ve set the IP addresses of the LAN as “192.168.2.XXX”. “192.168.X.XXX” includes “192.168.2.XXX”, and therefore is considered [...]

If you get several fixed IP addresses from your ISP and the ISP restricts the bandwidth for each fixed IP address, you have to prevent the network packets from always sending on the same IP address and the other IP address to sit idle. Multiple NA T solves this and allows you to increase the bandwidth. Multiple NA T allows y ou to dispatch your net[...]

3 6 5. Or enter “0” in each field for non-setting multiple NA T . 6. Click the Apply button. After you configure the Multiple NA T on the group of fixed IP addresses , it can increase the bandwidth. The Internal IP range you entered will be routed to the corresponding External IP range. 4.4 Route Settings Network Settings[...]

In the figures, the destination network is “172.16.6.X”. And the packets will be route in or out of the destina- tion network through the gateway “192.168.2.249”. 4.5 DDNS 3 7 The Route Settings page gives you a way to set the static route. Y ou have to set the static route if you would like to route your packets to the specific network and[...]

Dynamic DNS service allows you to assign a fixed machine name to a dynamic IP address. Dynamic DNS provides you with the ability to change the IP address of your domain name to point to your dynamically allocated IP address. This allo ws you to host y our server on a changing IP address. Please follow the steps below to setup DDNS. 1. Select Enable[...]

3 9 Firewall Settings When you select the “Firewall Settings” item in the left menu of the web page, four configuration items appear , including: Vir tual Ser ver settings, URL Filter , IP Filter setup and Denial of Service. Please refer to the corresponding section for each of these items. 5.1 Virtual Server Settings Setting up your Firewall[...]

The Virtual Ser ver Service is a wa y to simulate mul- tiple servers on the intranet. Y ou hav e se v eral IP addresses within your LAN; howe v er , internal IPs are not visible to others outside of your network. When a server is placed on a home or office inter- nal network, that need to be seen by others outside of the internal network, basic for[...]

4 1 5.2 URL Filter Setup The URL Filter function is used to restrict internal users from accessing specific URL locations or web sites. If the Site 1 is given as www .yahoo .com, any hosts in the intranet will not be allo wed to connect to www .yahoo .com. Please follow the steps to enable this feature: 1. Select the Enable radio button in URL Filt[...]

The IP filter function is similar to URL Filter . It provides further restrictions in access permission. URL Filter- ing only blocks port number 80 (HTTP) on servers outside of your own network. In IP filtering, you can assign a group of IPs to be restricted. Y ou can block four individual ports or a range of ports at the same time, so the specific[...]

4. Enter the port number of the ports you wish to block from the selected IP . There are f our fields you can enter por t numbers into , in any order or combination. 5. T o block more than 4 ports, enter a range of por t numbers (if any) in the last field. 4 3 5.4 Denial of Service It is highly recommended that the DoS Protection feature be enabled[...]

4 4 VPN Settings VPN (Virtual Private Networking) provides for secure communication between two separate networks without using a dedicated leased line. In order to achiev e this functionality , a secure tunnel must be built between the two sites for secure communication over the Inter net. The BOSS™ supports the two most popular protocols, IPSec[...]

6.1 IPSec Settings 4 5 Sometimes there is a need to transfer commercial infor- mation from a branch office through the Internet. The infor- mation being transferred cannot be sent over the Internet without encryption. The best solution f or most customers is to establish a secure tunnel between the company and branch office. IPsec implements this f[...]

4 6 VPN Settings 9. In Remote Host Setting: If the remote computer has a fixed IP address (e.g. 10.0.0.9). Please select the Fixed IP radio button. 10. Enter the remote computer’ s IP address within the Remote IP field. (e.g. 10.0.0.9) 11. Enter the remote computer’ s Subnet. (e.g. 172.17.0.0) 12. Enter the Remote Netmask of the remote computer[...]

Figure 6.1a,b,c 4 7 VPN Settings The Name field is the connection name; the Gate- way field is the IP address with which the remote and local computers will communicate; the Destina- tion Subnet field specifies the sub-network address with which computers will communicate; the Status field shows you whether the current link is estab- lished or not.[...]

6.2 PPTP Settings For most companies, the PPTP server creates a se- cure connection that a remote user can access a local computer within the company . The remote user has to run a PPTP client and connect to the PPTP ser ver . The PPTP server has to validate the remote user as being in the User List in section 9.1. The ser ver certifies the PPTP cl[...]

4 9 User Management The BOSS™ provides a client/server environment for users to share files over a network. File sharing works by authorizing the users or groups to access folders by their username and password. When we create a new shared f older , w e must create a ne w user/group list from the current users/groups. When a user/group tries to a[...]

50 User Management For file sharing to work, we have to allow users and/or groups. W e create the user accounts here. The “admin” and “guest” accounts are in the system by default. Please follow these steps to create new users: 1. Click the NEW button in User Management. ( Figure 7.1a ) 2. Then the Add/Modify Users page shows up . 3. Enter [...]

7.2 Group After creating the users, you can categorize the users into different groups. In the following example, we will assign Mary to the teacher group and T om and Sophia to the student group. The group management interface is similar to user man- agement. The “e v eryone” group is there b y def ault. T o create new groups, please follow th[...]

User Management 52[...]

NAS Management Setting Up Y our BOSS™ When you select the NAS Management item from the left menu of the web page, three configuration items appear including; HD Initialization Wizard, Advanced and File Sharing. Please refer to the corresponding section for the configuration details. 8.1 HD Initialization Wizard The first time you use the NAS feat[...]

The Step 1 page should now appear . T o set the information for file sharing, please enter the workgroup name (make sure this matches the workgroup on your network), the computer descrip- tion and share f older name. Y ou can create more share folders after the initialization process. Click the Next button to continue HD initialization. (Click the [...]

NAS Management 8.2 Advanced Figure 8.1a Figure 8.1b In NAS Management -> Advanced settings, there are three protocols for different OS platforms. By default, all protocols are enabled, but for security reasons users may want to disable specific protocols. • For MS-Windows Users Please follow the steps below: 1. In MS-Windows File Sharing field[...]

• For Mac Users Please follow the steps below: 1. In Apple File Sharing field, please select the Enable radio button. 2. Enter the Name in Apple Zone field. 3. Click the Apply button. • For Unix-like Platform Users Please follow the steps below: 1. In Network File System field, please select the “Enable” radio button. 2. Click the Apply but[...]

Y ou will go back to the Advanced Setting page . Please check the NFS Mapping List in NFS Setting section. The mapping rule you created is in the list. NAS Management • FTP Setting Please select the “Enable” radio button in FTP Server field and click the Apply button. T o enable the FTP ser v er , you also hav e to enab le the file sharing an[...]

5. 6. 7. 8. NAS Management 5 8 In the Method field, select the “Write” method if you are allowing the user/group to read and write to the folder . Select the “Read” method if you only want user/ groups to read the folder . Select the user in “Denying Users List”, then click the “left arrow . ” b utton to add the user to the “ Allo[...]

NAS Management Please enter the user name and password that was created in section 9.1. 5 9[...]

6 0 Instruction to BOSS™ Management When you select the System Management item in the left menu, four configuration items appear including; Administrator Settings, Event Report Settings, Firmware Update, Time Settings and SNMP . Please refer to the corresponding section for these configura- tion details. System Management 9.1 System Management Ad[...]

61 New P assw ord : The administr ator can change the administrator pass word here . Please enter the new password you would like to change to. Note that you must fill the new password in both Password change and Password confirmation fields. If both fields are not the same, the page will not be submitted. FTP Server : Please select the Enable radi[...]

The Event Report Setting is used to send the admin- istrator an e-mail alert once an event occurs on the system. If you select the Disable radio button in Alarm Mail, the system will not send an alarm to anyone. T o enable the function, please follow the steps: 1. Select Enable radio button in Alarm Mail. 2. Enter the IP Address or Domain Name of t[...]

6 3 9.3 Firmware Update In Firmware Update, the current firmware version is shown. Y ou can select a new firmware image to update the unit. If you would like to upgrade your firmware, you should download the image for the current model and save the image on your local drive. If the image is al- ready on your drive, please follow these steps: 1. The[...]

6 4 9.4 Time Settings In Time Settings , you can adjust the system time . The fields in Time Settings are described below: 1. YY/MM/DD f ormat. Please enter the year in the first field then select the month and date. 2. HH:MM:SS format. Please enter the hour , minutes and seconds respectively . 3. Click the Apply button. Once the system time is set[...]

6 5 9.5 SNMP The SNMP agent allows users with SNMP client ap- plications to conveniently inspect the network status of NSA. Please follow the steps below to setup the SNMP agent. 1. Select the Enable radio button in the SNMP Agent field. 2. Enter the Community Name . Note that the agent side and the client side must use the same community name. 3. [...]

10.1 System Information Generating System Reports The System Information displays some useful infor- mation about the system. It shows the firmware version, the system up time and the internal and external net- work connections. The BOSS™ has one W AN port and f our LAN por ts . The W AN por t belongs to the external 66 System Reports When you se[...]

network interf ace and the LAN por t belongs to the internal network interface . They are described as below: • Firmware V ersion: 1.06 • The system up time • IP Address: the IP Address is shown as your current setting. In Chapter 2, section 2.4, the Basic setting, we already configure the external interf ace in one of the three wa ys, ADSL/P[...]

6 8 10.2 System Log The System Log function repor ts the system history . It shows the time that the event occurred, the event level and a description of the event in the Message column. If there is an error , the e v ent repor t will help determine where and/or what the error is. Y ou can clear the records under the Administrator Settings. Please [...]

69 System Reports 10.4 DHCP Lease Report The DHCP Lease Report function reports all leased IP provided by DHCP server . F rom this page, you can find out which host was assigned to which IP address. Y ou can clear all the records through administrator settings. Please refer to the Section 9.1, Clean DHCP Lease.[...]

Care & Handling Y our IOGEAR ® BOSS™ is a high performance Network Ser v er Appliance. The head that reads the inf ormation on the installed Hard Drive is a fragile piece of technology . Theref ore, care must be taken not to bump the BOSS™ while it is operating. Care must also be taken not to bump the BOSS™ excessively when the drive is [...]

T roubleShooting Basic T roubleShooting BOSS™ • Make sure you have Critical Updates from the Microsoft ® Website at http://windowsupdate.microsoft.com; then, click on “Product Updates, ” select the latest Critical Update package f or your Windo ws ® OS, and then click “Do wnload. ” • Apple users please ensure you hav e the latest v [...]

T roubleShooting Notes: All URLs are subject to change. If the URLs listed in this manual are no longer valid, you can find the majority of necessary updates at http://www .v ersiontr ac k er .com or http://www .do wnload.com. Contacting IOGEAR ® Service Support If you are still experiencing problems using your BOSS™ Drive, please follow the dir[...]

T echnical Support T o help IOGEAR ® customers obtain the highest lev el of perf ormance from their BOSS™, IOGEAR ® ’s Service Support team is available to answer your technical questions. Do not hesitate to call if you are having troub le getting y our drive to w ork correctly . Service Suppor t can be reached at IOGEAR ® from 8am to 5pm P [...]

Default Setting T able Appendix 7 4 Configuration Item Default Settings Administrator Username <empty> Administrator Password admin Internal IP address 192.168.2.1[...]

Appendix 7 5 Power Button Description of LEDs Status Meaning Power O n Power On Of f Power Off Heart-Beat Solid/Off System is not working Flashing System is working WAN/LAN On Link up Link/Activity Of f Link down Flash The interface is transmitting/receiving packets WAN/LAN On The network link is 100 Mbps 10/100 Mbps Off The network link is 10 Mbps[...]

Function Specification Power Consumption Input Voltage Connector Type Storage Temperature Operating Temperature Operating Humidity Dimensions Case Supported Internal Drives Power Adapter 5 RJ/45 Ports 3.5" ATA 133 or equivalent 32~158° F (0~70° C) 68~122° F (20~50°C) 20~80% RH, (Non Condensing) 10.5 in. (26.67 cm) x 2.5 in. (6.35 cm) x 6.2[...]

77 Radio & TV Interference Statement W ARNING!!! This equipment generates, uses and can radiate radio frequency energy and, if not installed and used in accordance with the instruction manual, may cause interf erence to radio comm unications. This equipment has been tested and found to comply with the limits for a Class B computing device pursu[...]

Limited W arranty IN NO EVENT SHALL THE DIRECT VENDOR'S LIABILITY FOR DIRECT , INDIRECT , SPECIAL, INCI- DENT AL OR CONSEQUENTIAL DAMA GES RESUL TING FROM THE USE OF THE PR ODUCT , DISK, OR ITS DOCUMENT A TION EXCEED THE PRICE P AID FOR THE PRODUCT . The direct vendor makes no warranty or representation, expressed, implied, or statutory with r[...]

7 9[...]

23 Hubble • Irvine, CA 92618 • (P) 949.453.8782 • (F) 949.453.8785 • www .iogear .com ® Contact info.[...]