Moxa EDR-G902 manuel d'utilisation

EDR- G9 03 /G902 Use r’s Manual Second Edition, Januar y 2011 www.moxa.com/product © 201 1 Moxa Inc . All rights reserved. Reprod uction witho ut perm ission is prohibite d.[...]

EDR- G9 03 /G902 Use r’s Manual The softw are described in this manual is furnished under a license agreement and may be used only in accordance with the terms of that agree ment. Copyri ght Notice Copyrig ht ©201 1 Mo xa I nc . All r ights r eserved. Reprod uction witho ut perm ission is prohibite d. Trademarks The MOXA logo is a regis tered tr[...]

Table of Content s 1. Int rodu ct ion ...................................................................................................................................... 1-1 Ov erv iew ........................................................................................................................................... 1-2 Packag e Checklist[...]

A. MIB Groups ....................................................................................................................................... A-1[...]

1 1. Introduction Welcome to the Moxa EtherDevice Router (EDR - G903 /G902), the Gig abit F irewall/VPN secure routers desig ned for connec ting Ethernet - enab led devic es in industrial fie ld applicatio ns. The follow ing topics are covered in this chapter:  Over view  Package C hecklist  Featu res  Indus trial Netwo rking Cap abilit[...]

EDR - G903/G902 Introduc tion 1-2 Overvi ew As the world ’ s network and information techno logy becomes more mature , the trend is to use Etherne t as the major communic ations interf ace in many industrial co mmunications and automation applicati ons. In fact, a whole new ind ustry has sprung up to provid e Ethernet products that c omply with t[...]

2 2. Getting Started This chapte r explains how to access the E therDevic e R outer for the first time . There are three ways to access the switch: (1 ) serial console , (2) Telnet console, or (3) web brow ser. The serial conso le connection method , which requir es using a short ser ial cable to connect the E therDevice R outer to a PC’s COM por[...]

EDR - G903/G902 Getting Started 2-2 RS - 232 Console Configurati on (115200, None, 8, 1, VT100) NOTE Connec tion C autio n! We strong ly suggest that you do NOT use more than one connectio n method at the same time. Fo llowing this advice wi ll allow you to maintain be tter control over the config uration of your E therD evice R oute r NOTE We reco[...]

EDR - G903/G902 Getting Started 2-3 4. Click the Ter minal tab, and select V T100 for Terminal Type. Click OK to continue. 5. Typ e 1 to select an si/VT1 00 terminal ty pe, and then press Ent er. 6. The Console login screen will appear . Use the keyboard to enter the login acco unt ( admin or use r ), and then press E nter to jump to the Passw ord [...]

EDR - G903/G902 Getting Started 2-4 telnet telnet (IP address) Example : telnet 1 92.168 .127 .10 Open a telnet conne ction telnet (IP address) (port number) Example : telnet 192.168 .127 .10 23 Open a telnet conne ction with por t number ssh ssh (IP ad dress) Example : ssh 19 2.168.12 7.10 Open a ssh connection Login by User account : Command Para[...]

EDR - G903/G902 Getting Started 2-5 Perfor m the following step s to access the console utility v ia Telnet. 1. Click Star t ( Run, and then telnet to the E therDev ice R outer ’s IP address from the Windows Run window. (You may also iss ue the telnet command from the MS - DOS pro mpt.). 2. R efer to i nstruc tion s 6 and 7 in the RS - 232 Cons o[...]

EDR - G903/G902 Getting Started 2-6 NOTE By defa ult, the E therDevice R outer ’ s password is not set (i.e., is blank). Y ou may need to wait a few moments for the web page to be downlo aded to your compute r. Use the menu tr ee on the left side of the wind ow to open the function pages to acce ss each of the router ’s functions.[...]

3 3. Features and Functio ns In this cha pter, we explain how to access the E therD evice R o uter ’s c onfigur ation op tions, pe rform mo nitoring, and use adminis tration functions . There are three ways to access thes e functions: (1) RS - 232 consol e, (2) Telnet co nsole, and (3) web browser. The web browser is the most user - friendly w ay[...]

EDR - G903/G902 Featur es and F unctio ns 3-2 The Overv iew page is divid ed into three major par ts: Interf ace Status, Basic f unction status , and Recent 10 Event logs , and gives u ser s a quick overview of the E therDevic e R outer ’ s current s etting s. Click More … at the top of the Interf ace Status table to see detail ed informa tion [...]

EDR - G903/G902 Featur es and F unctio ns 3-3 Click More … at the top of the “ Recent 10 Event Log ” table to open the Eve ntLogT abl e page . Configu ring Basic Settin gs The Basic Settings gro up includes the most commonly used settings require d by administrators to maintain and contro l the E therDevic e R outer . System Ide ntification T[...]

EDR - G903/G902 Featur es and F unctio ns 3-4 Maintai ner Contac t Info Sett ing Descrip tion Facto ry Defa ult Max. 30 Charac ters Enter the conta ct informatio n of the person responsible for maintaining this E therDev ice R outer None Web Con fi gur ati on Sett ing Descrip tion Facto ry Defa ult http or https User s c an connect to the E therDev[...]

EDR - G903/G902 Featur es and F unctio ns 3-5 The follow ing table shows additional c onfig uration example s: Allowable Hosts In put For mat Ay hos t Disabl e 192.1 68.1.120 192.1 68.1.120 / 255. 255. 255.255 192.1 68.1.1 t o 192.16 8.1.25 4 192.1 68.1.0 / 25 5.255.25 5.0 192.1 68.0.1 t o 192.16 8.255. 254 192.1 68.0.0 / 25 5.255.0. 0 192.1 68.1.1[...]

EDR - G903/G902 Featur es and F unctio ns 3-6 • ATTE NTION ! • By d efault , the Pa ssw ord f ield is blank . If a Password is already set, the n you will be requir ed to type the Passwor d when logging into the RS - 232 conso le, Telnet console , or web browser interf ace. Account Sett ing Descrip tion Facto ry Defa ult Admin “admin” privi[...]

EDR - G903/G902 Featur es and F unctio ns 3-7 NOTE The E therDe vice R outer has a real time clock so the user does not need to update the Current Time and Current D ate to set the initia l time fo r the E therDevic e R outer after each re b oot . This is especially use ful wh en the network does not have an Internet connec tion for an NTP se rve r[...]

EDR - G903/G902 Featur es and F unctio ns 3-8 Time S erver I P/Name Sett ing Descrip tion Facto ry Defa ult 1s t Tim e Serv er IP/Name IP or Domain addre ss (e.g., 192.168 .1.1, time.s tdtime.gov .tw, or time.nist.g ov). None 2nd Tim e Serv er IP/Name The E therDevice R outer will try to locate the 2nd NTP Server if the 1st NTP Server fails to conn[...]

EDR - G903/G902 Featur es and F unctio ns 3-9 If the user en able s the SettingCheck functio n with the Accessible IP l ist and the confirmer Timer is set to 15 seconds, then whe n the user cl ick s the Activ ate button o n the access ible IP list page, the E therDevice Ro ute r will exe cute the config uration change and the web brows er will try [...]

EDR - G903/G902 Featur es and F unctio ns 3- 10 System File Update — b y Remote TFTP The E therDe vice R outer s upports saving your config uration file to a remote TF TP server or local host to allow other E the rDevic e R outer r o ute r s to use the same config uration at a later time, or sav ing the Log file for future reference. L oading pre[...]

EDR - G903/G902 Featur es and F unctio ns 3- 11 Log File C lick Ex por t t o export the Log file of th e E therDevic e R oute r to the local hos t. NOTE Some operating syste ms will open the configur ation file and log file directly in the web page. In such cases, right clic k the Expo rt b utton and then s ave as a file. Upgrade Firmwar e To impor[...]

EDR - G903/G902 Featur es and F unctio ns 3- 12 Networ k Setting s Mode C onfiguration Network M ode E therDevic e R outer pr ovid es Rou ter Mode and Bridge Mo de op eration for differ ent applications : Route r Mode In this mode , E therD evice R outer operates as a gateway between differe nt networks. • Each interf ace (WAN1, WAN2 and LAN) has[...]

EDR - G903/G902 Featur es and F unctio ns 3- 13 WAN1 Configuration Connect ion Note that there are t here are thre e diffe rent connec tion types fo r the WAN1 interface: D ynamic I P, Static I P , and PPPoE. A detaile d explanation o f the configuratio n settings for each type is give n below. Connection M ode Sett ing Descrip tion Facto ry Defa u[...]

EDR - G903/G902 Featur es and F unctio ns 3- 14 E xample : S uppose a remote user (IP: 1 0.10.10.10 ) wants to connect to the internal se rver (pr ivate IP: 30.30. 30.10) vi a the PPTP protocol. The IP addre ss for the PPTP server is 20.20.20.1. T he necessar y c onfig uration settings are sho w n in the fo llowing fig ure. DNS (Dom an Name Ser ver[...]

EDR - G903/G902 Featur es and F unctio ns 3- 15 Gat eway Sett ing Descrip tion Facto ry Defa ult IP Add res s The Gatewa y IP address None Detaile d Ex pla nation o f PPPoE Type PPPoE Dialup User Na me Sett ing Descrip tion Facto ry Defa ult Max. 30 characters The User Name for logging in to the PPPoE server None Host Nam e Sett ing Descrip tion Fa[...]

EDR - G903/G902 Featur es and F unctio ns 3- 16 Connec tion T ype Sett ing Descrip tion Facto ry Defa ult Static IP, Dynamic IP, PPPoE Conf igure the connectio n type Dynamic I P Detaile d Ex pla nation o f Dyna mic IP Type PPTP Dialup Point - to - Point Tunnel ing Pr otocol is used for Vir tual Private Networ ks (VPN). Remote users can use PPTP to[...]

EDR - G903/G902 Featur es and F unctio ns 3- 17 DNS (Dom an Name Ser ver; option al set ting for Dynamic IP and PPPoE t y pes) Server 1/ 2/3 Sett ing Descrip tion Facto ry Defa ult IP Add res s The DNS I P Addr ess None NOTE The prior ity of a manual ly c onfigured DNS will higher than the DNS from the PPPo E or DHCP s erver. Detaile d Ex pla natio[...]

EDR - G903/G902 Featur es and F unctio ns 3- 18 Subn et Ma sk Sett ing Descrip tion Facto ry Defa ult IP Add res s The sub net mask None Gat eway Sett ing Descrip tion Facto ry Defa ult IP Add res s The Gatewa y IP address None Detaile d Ex pla nation o f PPPoE Type PPPoE Dialup User Na me Sett ing Descrip tion Facto ry Defa ult Max. 30 characters [...]

EDR - G903/G902 Featur es and F unctio ns 3- 19 Using DMZ M ode A DMZ ( d emilitarize d z one) is an isolated netw ork for de vices — such as d ata, FTP, w eb , and m ail server s connec ted to a LAN n etwo r k — that need to frequently co nnect with externa l network s . The deploy ment of an FTP server in a D MZ is illustrated in the follo wi[...]

EDR - G903/G902 Featur es and F unctio ns 3- 20 LAN IP Co nfig urat ion IP Addre ss Sett ing Descrip tion Facto ry Defa ult IP Add res s The LAN interf ace IP address 192.1 68.127.2 54 Subn et Ma sk Sett ing Descrip tion Facto ry Defa ult IP Add res s The sub net mask 255. 255. 255.0 DHCP Server The E therDe vice R outer prov ides a DHCP (Dynamic H[...]

EDR - G903/G902 Featur es and F unctio ns 3- 21 Static DHCP List Use the Static DHC P list to ensure that device s connected to the E therDev ice R outer alw ays use the same IP address. The static DHCP list matches I P add re ss es to MAC a ddress es . In the abo v e exam ple , a device named “ D evic e - 01 ” w as added to the Static DHCP lis[...]

EDR - G903/G902 Featur es and F unctio ns 3- 22 DHCP Leas ed List Use the DHCP Leased List to view the current DHCP clients. Dynamic DNS Dynamic DNS ( Do main Name S erv er ) al l o ws you to use a domain name (e .g. , moxa .edr - g903) t o conne ct to the E therDev ice R outer . The E therDev ice R outer c an connect to 4 free DNS servers and regi[...]

EDR - G903/G902 Featur es and F unctio ns 3- 23 Network Redundancy Moxa EtherDev ice Router provide s 2 types of network redundanc y functions : WAN backup (EDR - G903 o nly) and V RRP . The E the rDevic e R outer has two WAN interfaces : WAN 1 is the pr imary WAN interface and WA N2 is the backup interf ace . When t he E therDevic e R outer detect[...]

EDR - G903/G902 Featur es and F unctio ns 3- 24 Link Ch eck Sett ing Descrip tion Facto ry Defa ult Enable or Disab le Activate Backup function by checking the link status of WAN1 Disabl ed Ping Che ck Sett ing Descrip tion Facto ry Defa ult Enable or Disab le Activate s the Backup functio n if unable to ping from the E therDevic e R outer to a spe[...]

EDR - G903/G902 Featur es and F unctio ns 3- 25 Virtual Router R edundancy P rotocol (VRRP ) VRRP Setting s The Virtual Router Redund ancy Protocol (VRR P) feature can solv e the problem with static configur ation . VR RP enables a group of routers to form a single virtual route r w ith a virtual IP addr ess . The LAN clients can then be config ure[...]

EDR - G903/G902 Featur es and F unctio ns 3- 26 Static Ro uting a nd Dynam ic Routin g The E therDe vice R outer s upports two routing methods : static routing and dynamic routing. Dy namic routing makes use of RIP V1/V1c /V2. You can either choose o ne routing method, or combine the two method s to establis h you r routing tab le. A routing entry [...]

EDR - G903/G902 Featur es and F unctio ns 3- 27 Clickable B uttons Add For add ing an entry to the Static Ro uting Table . Delet e For re mov ing selected entries f rom the Static Ro uting Table. Modify For mo dif y ing the content of a selec ted entry in the Static Routing Ta ble . NOTE The entrie s in the Static Routing Tab le will not be added t[...]

EDR - G903/G902 Featur es and F unctio ns 3- 28 Routing T able The Routing Table page show s all r outing entr ies. All Routi n g Entr y List Sett ing Descrip tion Fac tory Defau lt All S how all routing e ntries N/A Connec ted S how connected routing entr ies N/A Static S how Sta tic routing entries N/A RIP S how RIP routing entr ies N/A Others S [...]

EDR - G903/G902 Featur es and F unctio ns 3- 29 Enable/D isable NAT Policy Sett ing Descrip tion Facto ry Defa ult Enable or Disab le Enable or disa ble the selected NA T policy Enabled NAT Mo de Sett ing Descrip tion Facto ry Defa ult N-1 1-1 Port F orwarding Select the NA T types N-1 Interfa ce (N - 1 mode) Sett ing Descrip tion Facto ry Defa ult[...]

EDR - G903/G902 Featur es and F unctio ns 3- 30 Enable/D isable NAT policy Sett ing Descrip tion Facto ry Defa ult Enable or Disab le Enable or disa ble the selected NA T policy Enabled NAT Mo de Sett ing Descrip tion Facto ry Defa ult N-1 1-1 Port Fo rward Select the NA T types N-1 Interface (Port Forward mode) Sett ing Descrip tion Facto ry Defa [...]

EDR - G903/G902 Featur es and F unctio ns 3- 31 1- to - 1 NAT If the internal d evice and external device need to communicate w ith each other, choose 1- to - 1 NAT , which offe rs bi - directio n al communicatio n (N- to - 1 and Port forw arding are b oth single - direction al communica tion NAT func tions ). 1- to - 1 N A T is us ually use d when[...]

EDR - G903/G902 Featur es and F unctio ns 3- 32 Enable/D isable NAT policy Sett ing Descrip tion Facto ry Defa ult Enable or Disab le Enable or disa ble the selected NA T policy None NAT Mo de Sett ing Descrip tion Facto ry Defa ult N-1 1-1 Port Fo rward Select the NA T types None Interfa ce (1 - 1 N AT typ e) Sett ing Descrip tion Facto ry Defa ul[...]

EDR - G903/G902 Featur es and F unctio ns 3- 33 Fire wall Settin gs Firewall Policy Concept A f irewall dev ice is common ly used to pr ovi de secu r e traffic control o ver an Ethernet n etwo rk , as illustr ated in the f ollowing f igure . F irewa ll device s are depl oy ed at critical point s be tween an e xter nal network ( the non - secure p a[...]

EDR - G903/G902 Featur es and F unctio ns 3- 34 Firewall P olic y Config uration The E therD evice R oute r ’s F irewall polic y prov id es secur e traffic c ontrol , allo wing u ser s to control network traffic based on the fo llowing par ameters . Interface From/To Sett ing Descrip tion Facto ry Defa ult All (WAN1 /WAN2/LAN) Sel ect the From In[...]

EDR - G903/G902 Featur es and F unctio ns 3- 35 Destin at ion IP Sett ing Descrip tion Facto ry Defa ult All (I P Addres s) This Firewall Polic y will check all Destination IP addresses in the packet All Single (IP Ad dress) This Fir ewall Po licy will chec k single Des tination IP addr esses in the packet Range (IP Address) This F irewall Polic y [...]

EDR - G903/G902 Featur es and F unctio ns 3- 36 Ether Type Sett ing Descrip tion Fac tory Defa ult 0x060 0 to 0x FFFF When Protoc ol is set to “ Manual ” you can set up Ether T ype manually None Ta r get Sett ing Descrip tion Fac tory Defa ult Accept The packet will pass the Firewall w hen it match es this Fi rewall policy None Drop The p acket[...]

EDR - G903/G902 Featur es and F unctio ns 3- 37 Quick Automa tion Profile Ethernet Fieldbus prot ocol s are p opular in i ndustrial auto mation applica tion s. I n fact, many Fieldbus p rotocols (e.g., EtheNe t/IP and Modbus TCP/I P) can operate on an industrial Ether net network , with the Ethernet port number defined b y IANA (Internet Assigne d [...]

EDR - G903/G902 Featur es and F unctio ns 3- 38 Modbus TC P/IP (UDP) 502 PROFInet RT U nicast (TCP) 34962 PROFInet RT U nicast (UDP) 34962 PROFInet R T Multicast (TCP) 34963 PROFInet RT Multic ast (UDP) 34963 PROFInet Co ntext Manager (TCP) 34964 PROFInet Co ntext Manager (UDP) 34964 IEC 608 70 -5- 104 (TCP) 2404 IEC 608 70 -5- 104 (UDP) 2404 DNP ([...]

EDR - G903/G902 Featur es and F unctio ns 3- 39 Mask : Po licy [ X ] is m asked by P olicy [Y ] The Source/De stination I P r ang e or Source/Destinati on port number of policy [X] is smaller or e qual to policy [Y ] but the actio n target (Accep t/Drop) is d ifferent . For ex ample, t wo f irewall policies are show n belo w: In d ex In put Outp ut[...]

EDR - G903/G902 Featur es and F unctio ns 3- 40 Suppos e the user ne xt ad d s a new policy with the f ollowing c onfig uration : In d ex In put Outp ut Protocol Source IP Destin at ion IP T ar get 3 WAN2 LAN All 20.20. 20.25 192.1 68.127.2 0 to 192 .168.1 27.30 DROP The sou rce I P r a nge in policy 3 is smaller than po licy 2, but the destinatio [...]

EDR - G903/G902 Featur es and F unctio ns 3- 41 SYN/R ST Scan Sett ing Descrip tion Facto ry Defa ult Enable or Disab le Enable or disa ble the SYN/RST Scan No ne ICMP - D eath Sett ing Descrip tion Facto ry Defa ult Enable or Disa ble Enable or disa ble the I CMP - Death defense None Packet/S econd The lim it value to activ ate ICMP - Death defens[...]

EDR - G903/G902 Featur es and F unctio ns 3- 42 IPSec C onfiguration IP Sec configuratio n includes 5 parts: • Global Setting: Enable / Disable all I PSec Tunnels and N AT - Traver sal functio n • Tunnel Setting : Set up the VPN Connectio n type and VPN net wo r k plan • Key Exchange: Authe ntication for 2 VPN g ateways • Data Exc hange: Da[...]

EDR - G903/G902 Featur es and F unctio ns 3- 43 Tunnel Setting Enable or Di sable VPN T unnel Sett ing Descrip tion Fac tory Defa ult Enable or Disab le Enable or Disa ble this VPN Tunnel Disable Name o f VP N Tunne l Sett ing Descrip tion Fac tory Defa ult Max. of 16 c ha ra cter s User defined name of this VPN Tunnel. None NOTE T he first charac [...]

EDR - G903/G902 Featur es and F unctio ns 3- 44 Local Ne twork / Ne tmask / ID Setting Descrip tion Fac tory Defa ult IP Add res s IP address of loc al VPN network IP addres s of LAN interf ace S ubnet Mask Subnet Mask of lo cal VPN network Netmask of LAN interf ace ID ID for indentify ing the VPN tunnel conne ction. T he Local ID must be equal to [...]

EDR - G903/G902 Featur es and F unctio ns 3- 45 In X .50 9 Mod e , the use r needs to up load the Local and Remote certif ications first , and then sele ct the certif ications fro m the drop - down li st . S ee the X.509 C ertifica tion sectio n in this chapter for details. Encry ption Alg orithm Setting Descrip tion Fac tory Defa ult DES 3DES AES [...]

EDR - G903/G902 Featur es and F unctio ns 3- 46 Data Exchange (IPSec phase II) Perfect Fo rward Secrecy Sett ing Descrip tion Fac tory Defa ult Enable or Disab le Us es different secur ity key for differe nt IPSec phases to enhance secur ity Disabl e SA Lifetime Setting Descrip tion Fac tory Defaul t SA lifetime (minutes) Lifetime for SA in Phase 2[...]

EDR - G903/G902 Featur es and F unctio ns 3- 47 IPSec Status The user can check the VPN tunnel status in the I PSec Conn ection L ist . This list sho ws the Name of the IPSec tunnel, IP address of Local and Remote Subnet/Gatew ay , and the establis h ed status of the Key exchang e phase and Data exchange phase. X.509 Certificat ion X.509 is a digit[...]

EDR - G903/G902 Featur es and F unctio ns 3- 48 Certificat e Generat ion The user must fill in the fo llowing inform ation to generate the Root c ertificatio n: • Countr y name (2 Letter code) • Certif icate Days • State or Provinc e Name • Locality Name • Organizatio n Name • Organizatio n Unit Name • Co mmo n N ame • Email Addr es[...]

EDR - G903/G902 Featur es and F unctio ns 3- 49 Local Cert ificat e Uploa d Upload the .p12 loc al certific ate on this pa ge. The Password must be the sam e as the .p12 cer tificate file. If the password is not correct, the certific ate import proce ss will fail. Lab el : Us er d efi ne d name for this local ce rtific ate Name/S ubject : Show the [...]

EDR - G903/G902 Featur es and F unctio ns 3- 50 L2TP Configurat ion L2TP S erver Mod e Sett ing Descrip tion Fac tory Defaul t Enable / Disabl e Enable or Disab le the L2TP functio n on the WAN1 or WAN 2 interf ace Disabl e Local IP Sett ing Descrip tion Fac tory Defau lt IP Add res s The IP ad dress of the Lo c al S ubn et 0.0.0.0 Offered IP Range[...]

EDR - G903/G902 Featur es and F unctio ns 3- 51 Examples for T ypical VPN App lications Site to Sit e IPSec VPN t unnel with P er - shar ed Key The follo wing example show s how to create a secure LAN to LAN VPN tunnel between the C entral site and Remote si te via an Intr anet network . VPN Plan: • A ll co mmunication f rom the Central s ite net[...]

EDR - G903/G902 Featur es and F unctio ns 3- 52 L2TP for Remo te User Ma intenance The follow ing example show s how a Roaming user use s L2TP over IPSec to connec t to theremote site networ k. VPN Plan: • A ll communicatio n from the Roaming us er ( n o f ixed IP) to the Remote site Network (100 .100.3.0/24 ) need s to pass throug h the VPN tunn[...]

EDR - G903/G902 Featur es and F unctio ns 3- 53 How Traffic Prioritization W orks The E therDe vice R outer provides fo ur diff erent prior ities levels ( 0- 3 , h igh to l ow) for incoming and outgoing traff ic. The fo llowing fig ur e illustr ates i nco ming traffic , whi ch refers t o the traff ic transmitted fr om WA N1 to LA N or WAN2 to LA N [...]

EDR - G903/G902 Featur es and F unctio ns 3- 54 Max . Ban dwid th Sett ing Descrip tion Facto ry Defa ult 1 to 1,0 00,000 KBytes/s The maximum b andwidth f or total inco ming or outgo ing traffic 100 KByt es/s Default Priority Sett ing Descrip tion Facto ry Defa ult Prior ity 0/1/2/3 A packet without matching any incoming /outgo ing policy will adh[...]

EDR - G903/G902 Featur es and F unctio ns 3- 55 Priority Sett ing Descrip tion Facto ry Defa ult Prior ity 0/1/2/3 Sel ect the prior ity for this policy Prior ity 0 Source IP Sett ing Descrip tion Facto ry Defa ult All (I P Addres s) Select the Sourc e IP address for this policy All Single (IP Ad dress) Range (IP Address) Source Por t Sett ing Desc[...]

EDR - G903/G902 Featur es and F unctio ns 3- 56 The E therDe vice R outer will manag e the bandwi dth for outgoing packet s . Base d o n the fou r o utgo ing po licies below , when the source IP of the Ethernet tr affic matches the outgo ing policies, the m ax im um b andwidth for a packet sent from these source IP addresses wil l be reserv ed by i[...]

EDR - G903/G902 Featur es and F unctio ns 3- 57 SNMP Re ad Settings SN MP Versi ons Sett ing Descrip tion Facto ry Defa ult Disabl e V1, V2c , V3, or V1, V 2c, or V3 only Select the SN MP protocol version use d to manage the secu re router . Disabl e Contact Person Sett ing Descrip tion Facto ry Defa ult Admin o r user Admin priv ilege allows acc e[...]

EDR - G903/G902 Featur es and F unctio ns 3- 58 Access Co ntrol Sett ing Descrip tion Facto ry Defa ult Read only (Pub lic MIB only) A ccess contro l type after match ing the community string Re ad only No Access Target IP Address Sett ing Descrip tion Facto ry Defa ult IP Add res s Enter the IP addre ss of the Trap Server used by your network. Rea[...]

EDR - G903/G902 Featur es and F unctio ns 3- 59 1. Co nfig ure Em ail Ev ent Ty pes Select the desir ed Event types fro m the Web B ro wse r Event t ype pa ge (a descrip tion of each event type is given later in the Email Alarm Events se tting subsecti on). 2. Confi gur e Email Set t ings To config ure the E therDevice R outer ’ s email setup fro[...]

EDR - G903/G902 Featur es and F unctio ns 3- 60 E- mail Setup Main S erver I P/Name Sett ing Descrip tion Facto ry Defa ult IP add re ss The I P Address of your email server. None Port Sett ing Descrip tion Facto ry Defa ult Port number The por t number of your email server. None Acco unt Name Sett ing Descrip tion Facto ry Defa ult Max. 30 Charact[...]

EDR - G903/G902 Featur es and F unctio ns 3- 61 Configur ing R elay Warning The Auto Relay Warning functio n uses relay output to alert the user when certain user - configured events take place. Ther e are two basic steps requir ed to set up the Relay Warni ng f unction: 1. Confi guring Re lay Eve nt Typ es Select the desir ed Event t y pes fro m t[...]

EDR - G903/G902 Featur es and F unctio ns 3- 62 Using Diagnosis The E therDe vice R outer provides P ing tools a nd LLD P for adminis trator s to diagnose network sys tems. Ping The Ping functio n uses the ping comma nd to gi ve users a simple but powerful tool for troubles hooting network proble ms. The f unction ’ s most unique fe ature is that[...]

EDR - G903/G902 Featur es and F unctio ns 3- 63 Neighbor Por t D escrip t ion: A tex tual descrip tion of the neighbor device ’ s inter face. Neighbor Sy s tem: Hostname of the neighbor dev ice. Using Monitor You can monito r statistics in real time from the E therDevice R outer ’ s web conso le. Monitor by S ystem Access the Monitor by selecti[...]

EDR - G903/G902 Featur es and F unctio ns 3- 64 Using Syst em Log The E th erDevice R outer provi des Event L og and Sys l og functions to record impor tant events . Using Ev ent Log Field Desc riptio n Bootup This field shows how many times the ED R- G509 has been rebooted or cold started. Date The d ate is updated b ased on how the c urrent date [...]

EDR - G903/G902 Featur es and F unctio ns 3- 65 DI trans ition (On - > O ff) Cold star t Factory def ault Warm start System restart Warm start Firm ware U pgrade War m start Conf iguration Upgrade Warm start NOTE The m aximum numb er of e vent e ntr ies is 1000. Usi ng Sysl og This functio n provides the event logs for the syslog server. The fun[...]

EDR - G903/G902 Featur es and F unctio ns 3- 66 2. A w arning mess age will appe ar to warn the user that the security c ertificate was issued by a company they have no t chosen to t rust. 3. Select Yes to enter the E therDev ice R outer ’ s web br owser i nterface and acc ess the web browse r interf ace secured via HTTPS/SS L.[...]

A A. MIB Groups The E therD evice R outer come s with built - in SNMP (Simple Network Management Protoco l) agent software that suppor ts cold start trap, line up/d own trap, and RFC 1213 MIB - II. The standard MIB groups that the E therDevic e R outer series suppo rt are: MIB I I.1 – Sy ste m Gr oup sysORTable MIB I I.2 – Interfaces Group ifTa[...]