Hawking Technology H2BR4 manuale d’uso

1[...]

Trademarks & Copyright Windows 95/98/ME and Windows NT/2000/XP are regist ered trademarks of Mi crosoft Corp. All other brands and product name s are trademarks of their respective com panies. No part of this publicat ion may be reproduced in any form or by any means or used to make any deri vative (such as translation, transformation or adapta[...]

Package Contents 5 Introduction Features 6 Minimum Requirem ents 7 Get to Know the Broadband Router Back Panel 7 Front Panel 8 Setup Diagram 9 Getting Started 9 Chapter 1: Quick Setup (via web UI) About Quick Setup 18 Step 1: Time Zone 18 Step 2: Broadband Type 19 1.1 Cable Modem 20 1.2 Fixed IP xDSL 21 1.3 PPPoE 22 1.4 PPTP 24 Chapter 2: General S[...]

2.4.6 ALG Settings 54 2.4.7 Static Routing 55 2.5 Firewall 56 2.5.1 Access Control 58 2.5.2 URL Blocking 62 2.5.3 DoS (Denial of Service) 63 2.5.4 DMZ 65 Chapter 3: Status S t a t u s 6 7 3.1 Status and Information 68 3.2 Internet Connection 69 3.3 Device Status 70 3.4 System Log 71 3.5 Security Log 72 3.6 Active DHCP Client 73 3.7 Statistics 74 Ch[...]

The complete H2BR4 package consists of: • One H2BR4 Dual WAN 4-Port Firewall Router • One Quick Installation Guide • One CD with User’s Manual • One Power Adapter • Accessories Check to make sure that the unit was not damaged during shipping and that no items are missing. If you encounter a problem, please contact your dealer. Please re[...]

The high performance Hawking H2BR4 Dual WAN Firewall Router with built-in 4-port 10/100M Ethernet Switch provides an easy-to-use, cost-effective means of sharing two broadband Internet connections with your LAN (Local Area Network). With the H2BR4’s two WAN ports, users experience significantly faster data rates as a result of increased and more [...]

Minimum Requirements • One External xDSL (ADSL) or Cable modem with an Ethernet port (RJ-45) • Network Interface Card (NIC) for each Personal Computer (PC) • PCs with a Web-Browser (Internet Explorer 4.0 or higher, or Netscape Navigator 4.7 or higher) Note The WAN “idle timeout” auto-disconnect function may not wo rk due to abnormal activ[...]

1) Local Area Network (LAN) The router’s four LAN ports are what you will use to connect your PCs, print servers, switches, etc. 2) Wide Area Network (WAN) The WAN ports are the segments that connect to your xDSL or Cable modems and are linked to the Internet. 3) Reset The Reset button allows you to do one of two things: i. If problems occur with[...]

Setup Diagram Figure 1.2 below shows a typical setup for a Local Area Network (LAN). Figure 0.2 Getting started The following are step-by-step instructions on how to star t using the router and get connected to the Internet. 1) Set up your network as shown in th e setup diagram above (Figure 1.2). 2) You then need to set your LAN PC clients so that[...]

10 For other operating systems (Macintosh, Sun, etc.), follow the manufacturer’s instructions. The following is a step-by-step illustration on how to configure your PC to obtain an IP address automatically for: 2a) 2a) Windows 95/98/Me i: Click the Start button and select Settings , then click Control Panel . The Control Panel window will appear.[...]

vi R Note server is the only DHCP server available on your LAN. Once y v , please proceed to Step 3. 2b) Windows 2000 i: Click the Start button and select Settings , then click Control Panel . The Control Panel window will appear. ii: Double-click the Network and Dial-up Connections icon. In the Network and Dial-up Connection window, double-click t[...]

Figure 0.4 er’s DHCP server. our LAN. Once you’ve configured your PC to obtain an IP address automatically, please proceed to Step 3. i: Click the Start button and select Settings , then click Control Panel . The Control Panel window will appear. Select the Protocol tab from the Network window. vi: Click OK to confirm the settings. Your PC will[...]

iii: Check if the TCP/IP Protocol is on your list of Network Protocols . If TCP/IP is not installed, click the Add button to install it now. If TCP/IP is installed, go to step 5. iv: In the Select Network Protocol window, select the TCP/IP Protocol and click the Ok button to start installing the TCP/IP protocol. You may need your Windows CD to comp[...]

vii: Click OK to confirm the settings. Your PC will now obtain an IP address automatically from your router’s DHCP server. Note : Please make sure that the router’s DHCP server is the only DHCP server available on your LAN. Onc you’ve configured your PC to obtain an IP address automatically, please proceed to S e tep 3. ) Once you have config[...]

6) General Setup, Status Information and Tools. o configure the screens in the Quick Setup Wizard section. General Setup (Chapter 2) uick lems) or save your configurations or upgrade the firmware then you will need to go to the Tools section. Figure 0.7 The HOME page screen below will appear. The Home Page is divided into four sections, Quick Setup[...]

ption Menu Descri Quick S Select your Internet connection type and then input the configurations General Setup (Chapter 2) This section contains configurations for the Broadband router’s advanced functions such as: Bridge, Address Mapping, Virtual Server, Access Status Information (Chapter 3) In this section you can see the Broadband router'[...]

Figure 0.8 17[...]

About Quick Setup he Quick Setup section is designed to let you set up the router as quickly as possible. In the Quick Setup, you are required to fill in only the information necessar y to access the Internet. Once you click on the Quick Setup Wizard in e homepage, you will see the screen below. Step 1) Time Zone The Time Zone allows y e on the set[...]

Click on NEXT to proceed to the next page (step 2). this section, you have to select one of four types of connections that you will be using to connect y our router’s WAN screen below). different methods of connecting to the Internet. Please check with your ISP as to the type of onnection it requires. Figure 1.2 Step 2) Broadband Type In port to [...]

Menu Description 1.1 Cable Modem Your ISP will automatically give you an IP address ISP has given you an IP address already connection. .4 PPTP Your ISP requires you to use a Point-to-P oint Tunneling Protocol (PPTP) connection. 1.2 Fixed-IP xDSL Your 1.3 PPPoE Your ISP requires you to use a Point-to-Point Protocol over Ethernet (PPPoE) 1 Click on [...]

Parameters Description Host Name If your ISP requires a Host Name, type in the host name provided by your ISP; otherwise e. in order for you to connect to the Internet. This MAC address is the PC’s MAC address that your ISP had originally on or use AC Address” button to replace the WAN MAC address with the MAC address of that PC (you have to be[...]

Parameters Description This is the IP address that y our ISP has given you IP . DNS Subnet Mask Gateway IP This is the ISP’ s IP address gateway This is the ISP’s DNS server IP address Enter the Subnet Mask provided by your ISP (e.g. 255.255.255.0) Click OK when you have finished the configuration above. You have now completed the configuration[...]

Parameter Description Use m Enter the User Name provided by your ISP for the PPPoE co r Na e nnection the PPPoE connection e Name This is o our ISP require it. Otherwise, leave it blank. MTU This is optional. You can specify the maxi mum size of your transmission packet to the Internet. Leave it as it is if you do not wish to set a maximum packet s[...]

1.4 PPTP elect PPTP if your ISP requires the PPTP protocol to connect you to the Internet. Your ISP should provide all the Parameter S information required in this section. Figure 1.6 Description The ISP requires you to obtain an IP address by DHCP automatically before connecting to the PPTP server. Obtain an IP address se the following IP address [...]

User ID Enter the User Name provided by y our ISP for the PPTP connection (sometimes called a Connection ID). r the Password provided by your ISP for the PPTP connection. PTP Gateway If your LAN has a PPTP gateway, then enter that PPTP gateway IP address here. If you do not have a PPTP gateway then enter the ISP’s Gateway IP address above. onnect[...]

General Settings nce you click on the General Setup button on the homepage, you will see the screen below. you have already configured the Quick Setup Wizard, you do NOT need to configure anything in the General Setup he General Setup contains advanced features that allow y ou to configure the router to meet your network’s needs such n, Special A[...]

Below is a general description of what advanced functions are available for this broadband router. Menu Description 2.1 System This section allows you to set the Br oadband router’s system Time Zone, Password an Remote M d anagement Administrator. n .3 LAN You can specify the LAN segment’s IP address, subnet Mask, enable/disable DHCP and select[...]

Parameters Description System Settings 2.1.1 Time Z Select the time zone of the country you are currently in. The router will set its time based on your selection. one ord Settings ote Management 2.1.2 Passw Allows you to select a password in order to access the web-based management website. 2.1.3 Rem You can specify a Host IP address that can perf[...]

arameter Description P Set Time Zone Select the time zone of the country you are currently in. The router will set its time based on your selection. ess you must check/tick the enable box to enable your daylight saving configuration (below). Start Daylight Savings Time eriod in which you wish to start daylight Savings Time Time Server Addr You can [...]

Parameters Description Current Password Enter your current password for the re mote managem ent administrator to log in to your router. Note: B ” Enter y o e-Enter Password Enter your new password again for verification purposes Note : If ault (password is “1234”) with the reset button (see router’s back panel). y default, the password is ?[...]

Parameters Description Host Address This is the IP address of the host on the Internet that will have management/configuration access eans if you are at home and your home IP address has been designated the Remote Management host IP address for this router (located in our co able to conf igure this router from your home. If the Host Address is left[...]

Figure 2.6 aram Description P eters 2.2.1 Dynamic IP address Your ISP will automatically give you an IP address 2.2.2 Static IP address Your ISP has given you an IP address already E Your ISP requires PPPoE connection. r ISP requires Telstra Big Pond connection. .2.7 Policy You can configure WAN policy. .2.8 DNS You can specify a DNS server that yo[...]

2.2.1 Dynamic IP Address hoose the Dynamic IP selection if your ISP will give you an IP address automatically. Some ISP’s may also require that ou fill in additional information such as Host Name, Dom ain Name and MAC address. (See Chapter 1: “Cable Modem ” r more details.) .2.2 Static IP Address hoose the Static IP selection if your ISP has [...]

Figure 2.7 34[...]

Parameter Description Obtain an IP address The ISP requires y ou to obtain an IP address by DHCP automatically before connecting to the L2TP server. AC Address Your ISP may require a particular MA C address in order for you to connect to the Internet. This MAC address is the PC's MAC address that your ISP had originally connected your Internet[...]

Idle Time Out Note: The WAN "idle timeout" auto-disconnect function may not work due to abnormal twork application softwa re, computer viruses or hacker attacks from the Internet. For example, some software se nds network packets to the Internet in the lso ay not work function can work properly when you use this function the first time, e[...]

Description Enter the User Name provided by your ISP for the Telstra Big Pond connection Enter the Password provided by your ISP for the Telstra Big Pond connection Select if you want to assign the IP of Telstra Big Pond’s login server manually. Parameter User Name Password User decide login server server manually Login Server The IP of the Login[...]

Figure 2.9 Parameter Description Speed The send/upstream and receive/downstream speed of the WAN line the WAN port is connected to. Connectivity check You can key in an IP. The router will ping that IP to verify if the WAN line can access the Internet. You also can select “Ping Default Gateway”, and the router will check if the WAN line is ok b[...]

dynamic IP settings, it is likely that the DNS server IP addr ess is provided automatically. However, if there is a DNS erver that you would rather use, you need to specify the IP address of that DNS server here. Figure 2.10 cription s Parameters Des Domain This is the ISP’s DNS server IP address that they gave you; or y ou can specify your own p[...]

Figure 2.11 Parameters Default Description t that you want to configure the DDNS for Enable/Disable Disable omain name Your static domain name that use DDNS you set for the DDNS service account above WAN Port Select the WAN por Enable/Disable the DDNS function of this router Provider DynDNS Select a DDNS service provider D Account/E-mail The accoun[...]

2.3 LAN he LAN Port screen below allows you to specify a privat e IP address for y our router’s LAN ports as well as a subnet ask for your LAN segment. T m Figure 2.12 41[...]

Parameters Default Description LAN IP address 192.168.2.1 This is the router’s LAN port (private) IP address (Your LAN clients’ default gateway IP address) Subnet Mask 255.255.255.0 Specifies a Subnet Mask for your LAN segment 02.1d Spanning Disabled If the 802.1d Spanning Tree function is enabled, this router will use the ree spanning tree pro[...]

2.4 NAT etwork Address Translation (NAT) allows multiple users at y our local site to access the Internet through a single Public ress or multiple Public IP Addresses. NAT provides Firewall protection from hacker attacks and has the flexibility an disable NAT function and use the static route. N IP Add to allow you to map Private IP Addresses to Pu[...]

2.4.1 Port Forwarding Figure 2.14 The Port Forwarding allows you to re-direct a particular ra nge of service port numbers (from the Internet/WAN Ports) to a particular LAN IP address. It helps you to hos t some servers behind the router NAT firewall. 44[...]

Parameter Description Enable Port Forwarding Enable Port Forwarding Private IP This is the private IP of the server behind the NAT firewall. Note: You need to give your LAN PC clients a fixed/static IP address for Port Forwarding to work properly. ype This is the protocol type to be forwarded. You can choose to forward “TCP” or “UDP” packet[...]

2.4.2 Virtual Server se the Virtual Server function when you want different serve rs/clients in your LAN to handle different service/Internet ail, FTP, Web server et puters use numbers called port numbers to cognize a particular service/Internet application type. The Virt ual Server allows you to re-direct a particular service port m the Internet/W[...]

arameters Description P Enable Virtual Server Enable Virtual Server. Private IP This is the LAN client/host IP address th at the Public Port number packet will be sent to. Not e: You need to give your LAN PC clients a fixed/static IP address for the Virtual Server function to work properly. Private Port This is the port number (of the above Private[...]

address for WAN 2. (For websites, you will need to have a fixed/static global/public IP address or use DDNS with Figure 2.16 dynamic IP and domain name m apping.) 2.4.3 Special Applications Some applications require multiple connections, such as In ternet gam es, video conferencing, Internet telephony and others. In this section you can configure t[...]

Figure 2.17 arameters Description P Enable Trigger Port Enables the Special Application function. rigger Port This is the outgoing (Outbound) range of port numbers for this particular application rigger Type Select whether the outbound port protocol is “TCP”, “UDP” or both. ublic Port Enter the In-coming (Inbound) port or por t range for th[...]

Popular applications This section lists the more popular applications that require multiple connections. Select an application from the Popular Applications selection. Once you have selected an application, select a location (1-10) in the Copy to selection box and then click the Copy to button. This will automatically list the Public Ports required[...]

2.4.4 UPnP net will discover/locate this router automatically. So you will not have to perform any r PC and can access the Internet through this router easily. With UPnP, all PCs in your Intra configuration procedures for you Figure 2.18 Parameters Default Description UPnP Feature Disable You can Enab le or Disable the UPnP feature here. After you [...]

2.4.5 Protocol and Port Binding s that you leave blank will e ignored. Figure 2.19 Protocol and Port Binding let you manually bind an application to a WAN port. Only packets that match all the entered criteria will be bound to the assigned WAN port. You will have to fill all the items. The item b Parameters Description nd Port Binding” function i[...]

Destination IP Range Only packets with this assigned destination IP range will statically bind to the assigned WAN port. WAN port. estination Port Range Only packets with this assigned destination port range will statically bind to the assigned WAN port. rotocol Only packets with this assigned protoc ol will statically bind to the assigned WAN port[...]

2.4.6 ALG Settings ” to support. Figure 2.20 Parameters Default Description You can select applications that need “Application Layer Gateway Enable You can enable the “Application Layer Gateway”. Then, the router will let that application correctly pass though the NAT gateway. Click Apply at the bottom of the screen to save the above config[...]

2.4.7 Static Routing ic Routing, the router can forward packets ccording to your routing rules. ote: The DMZ function of the firewall will not work if static routing is enabled. Figure 2.21 arameter Description This router provides a Static Routing function when NAT is disab led. With Stat a N P Enable Static Routing The Static R outing function is[...]

Hop Count The number of hops (routers) to pass through to reach the destination LAN. dd a Rule Fill in the "Destination LAN IP", "Subnet Mask”, “Default Gateway”, "Hop ded and then click "Add". This rule for Static Routing will then be added into the "Static Routing Table" below. If you find any errors [...]

Figure 2.23 Parameters Description 2.5.1 Access Control Access Control allows you to sp ecify which hosts/users can have access to certain Internet applications. .5.2 URL Blocking URL Blocking allows you to specify which URLs cannot be accessed by users. .5.3 DoS The router's firewall can block common hacker attacks and can log the attack acti[...]

2.5.1 Access Control you want to restrict users from ail, FTP etc.), itted on your AN. You can con Figure 2.24 arameters Description If accessing certain Internet app lications/services (e.g. Internet websites, em ou can change the relevant settings here . Access Control allows users to define the type of traffic perm trol which PC client can have [...]

Add PC Fill in “Client PC MAC Address” and “Comment” for the PC that will be allowed to access the Internet, and then click “Add”. If you find any errors emove PC If you want to remove a PC from the "MAC Filtering Table", select the PC you want to remove in the table and then click "Delete Selected". If you want to r[...]

Add PC Description The descript Parameters Client PC Description ion for this client PC rule. Address c IP address for the Access Control rule to work properly. ecking the services you want to block. rotocol This allows you to select UDP, TCP or both protocol types you want to block. ort Range You can assign up to five port ra nges. The router will[...]

Example: Access Control th at use Port 80. However, LAN client B is able to access Figure 2.26 In the example below, LAN client A can only access websites websites and any other service that uses ports between 80 and 999. 61[...]

2.5.2 URL Blocking You can block access to some Web sites from particular PCs by entering a full URL address or just a keyword of the web site. Figure 2.27 arameters Description P Enable URL Blocking Enables/disables URL Blocking. dd URL Keyword Fill in the “URL/Keyword” and then click “Add”. You can enter the full URL address or the keywor[...]

2.5.3 DoS (Denial of Service) can, and Sync Flood. If Internet attacks occur th e router can log the events. Figure 2.28 The Broadband router's firewall can block common hacker attacks, including Ping of Death, Discard Ping from WAN, Port S 63[...]

arameters Description Figure 2.29 P Intrusion Detection Features Ping of Death Protections from Ping of Deat h attacks. From the Advanced Settings page, you can configure a threshold for the frequency of packet occurrence. Discard Ping From WAN The router’s WAN port will not respond to any Ping requests Po rt Sc an Protection from any Port Scan a[...]

2.5.4 DMZ you have a local client PC that cannot run an Internet application (e.g. Games) properly from behind the NAT firewall, en you can open the client up to unrestricted two-way Internet access by defining a DMZ Host. The DMZ function lows you to re-direct all packets going to your WAN port IP address to a particular IP address in your LAN. Th[...]

t using the ro Description Parameters Enable DMZ Enables/disables DMZ. ublic IP Address The IP address of the WAN port or any other Public IP addresses given to you by y our ic IP or static IP given by your ISP. If your ISP gives you more than one dynamic IP address, you have to assign the session number that you want to apply. Client PC IP Address[...]

The Status section allows you to monitor the current status of your router. You can use the Status page to monitor: the connection status of the router's l attempts to access your network ur network. Status WAN/LAN interfaces, the current firmware and hardware version num bers, any illega , and information on all DHC P client PCs currently con[...]

3.1 Status and Information The Status and Information section allows you to view the router’s system information. Figure 3.1 arameters Description P Information You can see the router’s system information, including the router’s: Hardware version, Boot code Version, a nd Runtime code Version 68[...]

3.2 Internet Connection View the router’s current Internet connec tion status and other related information. Figure 3.2 Parameters Description ternet Connection This page display s whether the WAN ports are connected to Cable/DSL connections. It also displays the router’s WAN port: WAN IP address, Subnet Mask , and ISP Gateway as well as the Pr[...]

3.3 Device Status View the router’s current configuration settings. The De vice Status displays the configuration settings you have configured in the Quick Setup Wizard/General Setup section. Figure 3.3 Parameters Description Device Status This page shows the router’s current device settings. This page displays the router LAN port’s current L[...]

3.4 System Log View the operation log of the system. Figure 3.4 arameters Description P System Log This page shows the current system log of the Broadband router. It displays any event occurred after system start up. At the botto m of the page, the system log can be saved system log will disappear if not saved to a local file. < Save > to a l[...]

3.5 Security Log e to illegally gain access to your network. View any attempts that have been mad Figure 3.5 arameters Description P This page shows the current security l og of the Broadband router. It displays any illega attempts to access your network. At the botto m of the page, the security log can be saved < Save > to a local file for f[...]

3.6 Active DHCP Client ter's DHCP server Figure 3.6 View your LAN client's information that is cu rrently linked to the Broadband rou Parameters Description This page shows all DHCP clients (L AN PCs) currently connected to your network. The “Active DHCP Client Table” displays the IP address and the MAC address and Time Expired for ea[...]

iew the statistics of packets sent and received over each WAN and LAN interface. 3.7 Statistics V Figure 3.7 arameters Description P Shows the counters for packets sent and received over the WAN and LAN interfaces. Statistics 74[...]

Tools des the basic configuration tools, such as C onfiguration Tools (save or restore configuration settings), irmware Upgrade (upgrade system firmware) and Reset. Figure 4.1 arameters Description This page inclu F P 4.1 Configuration Tools You can save the rou files and restore the ter’s current configuration, restore the router’s saved confi[...]

4.1 Configuration Tools the nvenience if problems occu r with the router and you have to set to the factory default. When you save (back up) the configuration settings, you can re -load the saved configuration to the router through the Restore selection. If more serious problem s occur, you can use the Restore to Factory Defaults election. This wil[...]

4.2 Firmware Upgrade This page allows you to upgrade the router’s firmware Figure 4.3 arameters Description P Firmware Upgrade This tool allows y ou to upgrade the router’s system firmware. To upgrade your router’s o download the firmware f ile to your local hard disk, and enter that file name and path in the appropriate fiel d on this page. [...]

4.3 Reset You can reset the router’s system if any problems occur. The reset function essentially re-boots your router’s sy stem. Figure 4.4 arameters Description P In the event that the system stops responding correctly or in some way stops functioning, you can perform a reset. Your settings will not be changed . To perform the reset, cli on t[...]

How to Manually Find Your PC’s IP and MAC Addresses 2) Type Ipconfig /all and click Enter . • Your PC’s IP address is the one entitled IP address (192.168.1.77) • The router’s IP address is the one entitled Default Gateway (192.168.1.254) • Your PC’s MAC Address is the one entitled Physical Address (00-50-FC-FE-02-DB) 1) In Windows, o[...]

Bridge: A bridge is an intelligent, internetworking device that forwards or filters packets between different networks b ased on data link layer (MAC) address information. Def t ds to configure a default gateway’s IP address. When the ev e sends out an IP packet, if the destination is not on the same network, the device has to send the packet to [...]

ISP Gateway Address: (see ISP for definition). The ISP Gateway Address is an IP address for the Internet router loca at the ISP's office. ted LAN: Local Area Network. A LAN is a group of computers and devices connected together in a relatively small area MAC Address: MAC stands for Media Access Control. A MAC addr ess is the hardware address o[...]

such a protocol, the interpretation of th eir behavior is well defined and can be made objectively, without confusion or misunderstanding. ent network device that forwards packets between different networks based on network layer address information such as IP addresses. tion provided by your ISP, is a set of four numbers (e.g. 255.255.255.0) confi[...]