Planet MH-3400 manuale d’uso

Gigabit Multi-Homing VPN Security Router User’s Manual User ’ s Manual MH-3400 Gigabit Multi-Homing VPN Security Router 1[...]

Gigabit Multi-Homing VPN Security Router User’s Manual Copyright Copyright© 2012 by PLANET T echnology Corp. All rights reserved. No pa rt of this publication may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any la nguage or computer language, in any form or by any means, electronic, mechanical, magne[...]

Gigabit Multi-Homing VPN Security Router User’s Manual FCC Caution: To assure continued complian ce (examp le-use only shielded interface ca bles when connecting to computer or peripheral devices). Any changes or mod ifications not expressly approved b y the party responsible for compliance could void the us er’s authority to operate the equi p[...]

Gigabit Multi-Homing VPN Security Router User’s Manual T able of Content s U CHAPTER 1: INTRODUC TION U ........................................................................................................................ 1 U 1. 1 F EATURES ........................................................................................................[...]

Gigabit Multi-Homing VPN Security Router User’s Manual U CH U U U U CH U 8. U U CH U 9. U U CH U 10 U 10 U U 11 U U U CH APTER 7: PORT MANAGEME NT U ............................................................................................................ 54 U U 7.2 P ORT S TAT U S ...............................................................[...]

Gigabit Multi-Homing VPN Security Router User’s Manual 6 U 12.1 D IAGNO STIC U ............................................................................................................................... ....................... 121 U 12.2 F IRMW ARE U PGRADE U ....................................................................................[...]

Gigabit Multi-Homing VPN Security Router User’s Manual 0B Chapter 1: Introduction As Internet becomes essential for your busine ss, the onl y way to prevent your Internet conn ection from failure is to have more than one connection. PLANET’ s Gigabit Multi-Homing VPN Security Router , MH-3400, reduces the risks of potential shut down if one of [...]

Gigabit Multi-Homing VPN Security Router User’s Manual  Dynamic Domain Name System (DDNS): The Dynamic DNS service allows users to ali as a dynamic IP addre ss to a static ho stname.  Multiple NA T : Multiple NA T allo ws local port to set mult i-subnet and connect to the Internet through different W AN IP addresses.  Port Range For ward[...]

Gigabit Multi-Homing VPN Security Router User’s Manual LED definition LED Color Status Description Green Steady Power On PWR Off Off Power Off Steady on System is crashed. Blinking System is on self-tes t after power on the device. DIAG Amber Off System is ready. Steady on Port has been connected & Get IP Blinking Transmit data. WAN/ DMZ: Lin[...]

Gigabit Multi-Homing VPN Security Router User’s Manual 16B 1.4 Specification Product Gigabit Multi-Homing VPN Security Router Model MH-3400 Hardware LAN 1~2 x 10/100/1000Mbp s RJ-45 with LAN 1 configurable as LAN 1 / Mirror Port WA N 3~4 x 10/100/1000Mbp s RJ-45 with WAN 4 configurabl e as W AN 4 / LAN2 / DMZ Ethernet DMZ 1 x 10/100Mbps RJ-45 (W [...]

Gigabit Multi-Homing VPN Security Router User’s Manual z Load balancing between 3G and W AN z Auto/ manual throughput and time calculation mecha nism for cost o r dial-on z demand (Cellular cost Control) z Signal strength display on front panel z Throughput measurement z APN and PIN code Support Network Management z Comprehensive web based manag [...]

Gigabit Multi-Homing VPN Security Router User’s Manual - 6 - 1B Chapter 2: Inst allation Procedure In this chapter we are goin g to introduce hardware in stallation. Through the understanding of multi-WAN setting process, users can easily setup and manage the network, making VPN Router functioning a nd having best performance. 17B 2.1 Systematic [...]

Gigabit Multi-Homing VPN Security Router User’s Manual 18B 2.2 Setting Flo w Chart Below is the description for each setting proces s, and the correspondent content s and purposes. # Setting Content Purpose 1 Hardware installation user’s demand. Install VPN Router hardware based o n user physical requi rements. 2 Login Login the device with Web[...]

Gigabit Multi-Homing VPN Security Router User’s Manual Network function setting e.g. PPTP. different application environment. 11 Logout Close configuration window. Logout VPN Router web-based UI. We will follow the process flow to com plete the network setting in th e following chapters. - 8 -[...]

Gigabit Multi-Homing VPN Security Router User’s Manual 2B Chapter 3: Hardware Inst allation In this chapter we are going to intr oduce hardware interface as well as phy sical installation. Safety Instruction 19B 3.1 VPN Router Network Connection - 9 -[...]

Gigabit Multi-Homing VPN Security Router User’s Manual W AN Con nection : A WA N port can be connected with xDSL Modem, Fiber Modem, Switching Hub, or through an external router to connect to the Internet. LAN Connection: The LAN port can be connected to a S witching Hub or directly to a PC. Users can use servers for monitoring or filt ering thro[...]

Gigabit Multi-Homing VPN Security Router User’s Manual 3B Chapter 4: Login VPN Security Router This chapter is mainly introduci ng W eb-based UI after connecting VPN Router. First, check up VPN Router IP address by conn ecting to DOS through the LAN PC under VPN Security Router. Go to Start → Run, enter cmd to commend DOS, and enter ipconfig fo[...]

Gigabit Multi-Homing VPN Security Router User’s Manual VPN Router default username and password are both “ admin ”. Users can change the login password in the setting later. " Attention For security , we strongly suggest that users mu st change pa ssword after lo gin. Please keep the password safe, or you ca n not login to VPN Rout er . [...]

Gigabit Multi-Homing VPN Security Router User’s Manual 4B Chapter 5: System S tatus This chapter introduce s the device specification and st atus after login as well as change p assword and system time settings for security . 20B 5.1 Home Page In the Home page, all VPN Security Ro uter parame ters and st atus are listed for users’ reference. 58[...]

Gigabit Multi-Homing VPN Security Router User’s Manual 59B 5.1.2 Physical Port Status The status of all system ports, in cluding each connected and e nabled port, will be shown on this Home p age (see above ta ble). Click the respective st atus button and a separate window will a ppeare to show det ailed data (includin g setting status summa ry a[...]

Gigabit Multi-Homing VPN Security Router User’s Manual 60B 5.1.3 System Information Item Description LAN IP Address/ Subnet Mask Identifies the current device IP addre ss and subnet mask. The defa ult is 192.168.1.1 and 255.255.255.0 Working Mode Indicates the current working mode. Ca n be Gateway or Router mode. The default is “Gateway” mode[...]

Gigabit Multi-Homing VPN Security Router User’s Manual SPI (Stateful Packet Inspection) Indicates whether SPI (Stateful Packet Inspec tion) is on or off. The default configuration is “On”. DoS (Denial of Service) Indicates if DoS attack prevention is acti vated.The default configurat ion is “On”. Block WAN Request Indicates that denying t[...]

Gigabit Multi-Homing VPN Security Router User’s Manual When you login VPN Router setting window every tim e, you must enter the password. The default value for VPN Router username and password are both “admi n”. Fo r security reasons, we strongly recommend that you must change your password after first login. Please keep the password safe , o[...]

Gigabit Multi-Homing VPN Security Router User’s Manual Item Description User Name The default is “ admin ”. Old Password Input the original password . （ The default is “ admin ”. ） New User Name Input the new user name. e.x. Planet Ne w Pa s s wor d Input the new password. Confirm New Pass w ord Input the new password again for verifi[...]

Gigabit Multi-Homing VPN Security Router User’s Manual Item Description Time Zone Select your location from the pull-down ti me zone list to show corre ct local time. Daylight Saving If there is Day light Saving Time in your area, input the date range. The device will adjust the time for the Daylight Saving period automatically. NTP Server If you[...]

Gigabit Multi-Homing VPN Security Router User’s Manual 5B Chapter 6: Network This Network page cont ains the basic settings. For most users, completing this general setting is enough for connecting with the Internet. However , some users need advanced information from their ISP . Please refer to the following descriptions for sp ecific configurat[...]

Gigabit Multi-Homing VPN Security Router User’s Manual 67B 6.1.2 LAN Setting LAN setting is shown and can be configured in this p age. The LAN MAC can be modified. When a ne w router replaces an old one, LAN MAC ca n be changed as MAC of the original d evice. Gateway ARP binding wit h LAN PCs won’t need to be configured again. Click “Unified [...]

Gigabit Multi-Homing VPN Security Router User’s Manual Multiple-Subnet Setting Click “Add/Edit” to enter the configuration page, as sh own in the followin g figure. Input the respective IP addresses and subnet masks. This function enables users to input IP segments that di ffer from the router network segment to the multi-net segment configur[...]

Gigabit Multi-Homing VPN Security Router User’s Manual 68B 6.1.3 WAN & DMZ Settings W AN Setting Item Description Interface An indication of which port is connected. Connection Type Obtain an IP automatically, Static IP connection, PPPoE (Point-to-Point Protocol over Ethernet), PPTP (Point -to-Point Tunneling Protocol) or Transparent Bridge. [...]

Gigabit Multi-Homing VPN Security Router User’s Manual Item Description Use the following DNS Server Addresses: Select a user-defined DNS server IP address. DNS Server: Input the DNS IP address set by ISP. At least one IP group should be input. The maximum acceptable groups is two IP group s. Enable Line-Dropped Scheduling: The WAN disconnection [...]

Gigabit Multi-Homing VPN Security Router User’s Manual Item Description WAN IP address Input the available static IP address issued by ISP. Subnet Mask Input the subnet mask of the static IP address issued by ISP, such as: Issued eight static IP addresses: 255.255.255.248 Issued 16 static IP addresses: 255.2 55.255.240 Default Gateway Input the d[...]

Gigabit Multi-Homing VPN Security Router User’s Manual Line-Dropped Period Input the time rule for the disconn ection of this WAN service. Line-Dropped Scheduling Input how long the WAN service may be disconne cted before the newly added connections should go through an other WAN to connect with the Internet. Link Backup Interface Select another [...]

Gigabit Multi-Homing VPN Security Router User’s Manual Item Description User Name Input the user name issued by ISP. Password Input the password issued by ISP. Connect on Demand This function enables the auto-dialing function to be used in a PPPoE dial connection. When the client port attemp ts to connect with the Internet, the device will automa[...]

Gigabit Multi-Homing VPN Security Router User’s Manual After the change s are completed, click “Apply ” to save the configuration, or click “Cancel" to leave without making any change. PPTP This option is for the PPTP time counting system. Input the user’s co nnection name and p assword issued by ISP , and use the built-in PPTP softw[...]

Gigabit Multi-Homing VPN Security Router User’s Manual Password Input the password issued by ISP. Connect on Demand This function enables the auto-diali ng function to be used for a PPTP dial connection. When the client port attemp ts to connect with the Internet, the device will automatically co nnect with the default ISP auto dial connection; w[...]

Gigabit Multi-Homing VPN Security Router User’s Manual Transparent Bridge If all Intranet IP addresses are applied as Intern et IP addresses, and users don’t want to substitute private network IP addresses for al l Intranet IP addresses (ex. 192.168.1.X), this function will enable u sers to integrate existing networks without ch anging the ori [...]

Gigabit Multi-Homing VPN Security Router User’s Manual DNS Server Input the DNS IP address set by ISP. At least one IP group should be input. The maximum acceptable is two IP groups. Internal LAN IP Range Input the available IP range issued by ISP. If ISP issued two discontinuous IP address ranges, users can input them into Internal LAN IP Range [...]

Gigabit Multi-Homing VPN Security Router User’s Manual Router Plus NAT Mode: When you apply a public IP address as your default g ate way, you can setup this public IP address into a LAN PC, and this PC can use t his public IP address to reach th e Internet. Others PCs can use NA T mode to reach the Internet. If this WAN network is enabled the Ro[...]

Gigabit Multi-Homing VPN Security Router User’s Manual WAN default gateway Enter the WAN default gateway, whi c h provided by your ISP. DNS Servers Enter the DNS server IP address, you must have to enter a DNS server IP address, maximum two DNS server s IP addresses available.. Intranet routing default gateway Enter one of IP addresses that provi[...]

Gigabit Multi-Homing VPN Security Router User’s Manual DMZ Setting For some network e nvironments, an independent Co nfigur able DMZ port may be required to set up externally connected servers such a s WEB and Mail servers. T herefore, the device suppor ts a set of independe nt Configurable DMZ ports for users to set up connectio ns fo r servers [...]

Gigabit Multi-Homing VPN Security Router User’s Manual Range DMZ and WAN are within same Subn et Item Description IP Range Input the IP range located at the DMZ port. After the changes are com pleted, click “Apply ” to save the configuration, or click “Cancel" t o leave without making any changes. DMZ IP ranges are the same with WAN IP[...]

Gigabit Multi-Homing VPN Security Router User’s Manual 23B 6.2 Multi- WAN Setting 69B 6.2.1 Load Balance Mode Auto Load Balance Mode When Auto Load Balance mode is selected, the device will use session s or IP and the WAN bandwidth automatically allocate connections to achieve l oad ba lancing for external connections. The net work bandwidth is s[...]

Gigabit Multi-Homing VPN Security Router User’s Manual Please refer to the explanations in 6.2.3 Config urin g Protocol Binding for setting up Protocol Binding and for examples of collocating router modes with Protocol Binding. Unbinding WAN Balance Mode This mode enables users to assign spec ific intranet IP addresses, destination application se[...]

Gigabit Multi-Homing VPN Security Router User’s Manual for Netcom and Telecom can be divide d. Set WAN Grouping If more than one WAN is connected with Netcom, to apply a similar division of traffic policy to these WANs, a combination for the WA Ns must be made. Click “Set WA N Groupi ng”; an interactive window as shown in the figure below wil[...]

Gigabit Multi-Homing VPN Security Router User’s Manual Import Strategy A division of traffic policy can be defined by users too. In the “Import Strategy” wi ndow, select the WAN or WAN group (ex. WAN 1) to be assigned and cli ck t he “Import IP Range” button; the dialogue box for document importation will be displayed accordingly. A polic[...]

Gigabit Multi-Homing VPN Security Router User’s Manual " Note China Netcom strategy an d self-defined strategy can coexist. However , if a destination IP is assigned by both China Netcom strateg y and self-d efined strategy , China Netcom strategy will take priority . In other words, traffic to that destination IP will be transm itted throug[...]

Gigabit Multi-Homing VPN Security Router User’s Manual Item Description Destination Auto Binding Indicates that the session will be conne cted with the same WAN IP when the destination IP is in the same Class B ran ge. For example, there are WAN1-1 200. 1 0.10.1 and WAN2- 200.10.10.2, and two intranet IP addre sses. When 192.168.1.100 visits Inte[...]

Gigabit Multi-Homing VPN Security Router User’s Manual " Note Not all intranet IP will visit the same Class B range wi th the same WAN IP. It depends on which WAN the first connection goes to. If the des tina tion IP is in the same Class B range, the connection will go through with the sam e WAN IP based on the first time learning. Item Desc[...]

Gigabit Multi-Homing VPN Security Router User’s Manual When any intranet IP con nects with TCP443 port or an y destination (0.0.0.0 to 0 represents any destination), it will go through the same W AN IP . As for which W AN w ill be selected, this follows the first- chosen W AN IP distributed by the original session b alance mechanism . For example[...]

Gigabit Multi-Homing VPN Security Router User’s Manual This option is suitable un der the conditio n that on e of the WAN conn ections has failed; the traffic going through this WAN to the destination IP cannot shift to another WAN to reach the destination. For example, if users want the tra ffic to 10.0.0.1 ~ 10.254.25 4.254 to go only through W[...]

Gigabit Multi-Homing VPN Security Router User’s Manual " Note In the load balance mode for Assigned Routin g, the first WAN port (WAN1) will be save d for the traffic of the IP addresses or the applica tion serv ice ports that are not assigned to other WA Ns (WAN2, WAN3, and WAN4 ). Therefore, in this mode, we recommend assig ning one of the[...]

Gigabit Multi-Homing VPN Security Router User’s Manual Protocol Binding Users can define specific I P addresses or specifi c ap plication service ports to go through a us er-assigned WAN for external connections. For any other una ssigned IP addresses and serv ices, WAN load balan cing will still be carried out. " Note In the load balance mo[...]

Gigabit Multi-Homing VPN Security Router User’s Manual Option List for Service Managemen t: Click the button to enter the Service Port configuration page to add or remove default Service Ports on the option list. Source IP Users can assign packets of spe cific Intr anet virtual IP to go through a specific WAN port for external conn ection. In the[...]

Gigabit Multi-Homing VPN Security Router User’s Manual Show Table Click the “Show Table” button. A dialogue box as sho w n in the following figure will be displayed. Users can choose to sort the list by priorities or by interface. Click “Refresh” and the page w ill be refreshed; click “Close” and the dialogue box will be closed. Add o[...]

Gigabit Multi-Homing VPN Security Router User’s Manual up to 100 services into the list. Delete selected service To remove the selected activated Services. Apply Click the “ Apply ” button to save the modification. Cancel Click the “Cancel” button to cancel the modification. This only works before “Apply” is clicked. Auto Load Balanci[...]

Gigabit Multi-Homing VPN Security Router User’s Manual Example 2:How do I set up Auto Load Balance Mo de to keep Intrane t IP 192.168.1.150 ~ 200 from going through WAN2 when the desti nation port is Port 80? As in the figure below, select “HTTP [TCP/80~80]” fro m the pull-down option list “Service”, and then in the boxes for “Source IP[...]

Gigabit Multi-Homing VPN Security Router User’s Manual include all Internet IP addresses). Select W AN1 fr om the pull-down option list “Interface ”, and then click “Enable”. Finally , click “Add New” and the rule will be added to the mode. The device will transmit packets th at are not going to Port 80 to the Internet through W AN1. [...]

Gigabit Multi-Homing VPN Security Router User’s Manual Select WAN2 from the pull-down opti on list “Interfa ce”, and then click “Enable”. Fi nally, click “Add New” and the rule will be added to the mode. After the rule is se t up, only packets that go to Port 80 will be tran smitted through WAN2, while other traffics will be transmitt[...]

Gigabit Multi-Homing VPN Security Router User’s Manual - 53 -[...]

Gigabit Multi-Homing VPN Security Router User’s Manual 6B Chapter 7: Port Management This chapter introduce s how to configure port s and understa nd how to configur e intranet IP addresses. 24B 7.1 Setup Through the device, users can easily manag e the setup for WAN ports, LAN p orts and the DMZ port by choosing the numbe r of ports, speed, prio[...]

Gigabit Multi-Homing VPN Security Router User’s Manual Auto-Neg. selected, the ports setup w ill be done without any manual setting by administrators. VLAN This feature allows administrators to set the LAN port to be one o r more disconnected network sessions . All of them will be able to log on to the Internet through the device. Members in the [...]

Gigabit Multi-Homing VPN Security Router User’s Manual Summary There are Network Connection Type, Inte rface, Link S tatus (Up/Down), Port Activity (Port Enabled), Priority Setting (High or Normal), Speed Status (10Mbp s, 100Mbps or 1000Mbps), Duplex Status (half duplex or full duplex), Auto Neg. (Enabled/Disabled), and VLAN. Statistics The packe[...]

Gigabit Multi-Homing VPN Security Router User’s Manual - 57 - DHCP Dynamic IP Item Description Enable DHCP Server Check the option to activate the DHCP se rver automatic IP lease function. If the function is activated, all PCs will be able to acquire IP automatically. Otherwise, users should configure static virtual IP for each PC individually. C[...]

Gigabit Multi-Homing VPN Security Router User’s Manual 27B 7.4 DHCP Status This is an indication list of the cu rrent status and setup record of the DHCP server . The indicati ons are for the administrator ’s refe rence when a network modification is needed. Item Description DHCP Server This is the current DHCP IP. Dynamic IP Used The amount of[...]

Gigabit Multi-Homing VPN Security Router User’s Manual 28B 7.5 IP & MAC Binding Administrators can apply IP & MAC Binding function to make sure that users can not add extra PCs for Internet access or change private IP addresses. There are two methods for setting up this function: Block MAC address not on the list This method only allows M[...]

Gigabit Multi-Homing VPN Security Router User’s Manual IP & MAC Bi nding - 60 -[...]

Gigabit Multi-Homing VPN Security Router User’s Manual Item Description Static IP: There are two ways to input static IP: 1. If users want to set up a MAC address to acquire IP from DHCP, but the IP need not be a specific assigned IP, inpu t 0.0.0.0 in the boxes. The boxes cannot be left empty. 2. If users want DHCP to assign a stati c IP for a P[...]

Gigabit Multi-Homing VPN Security Router User’s Manual 29B 7.6 IP Grouping IP Group function can combine several IP addresses or IP address ranges into several groups. When you manage user internet access privilege s by IP address, you can set up every management functions for users who have same internet access privileges in the sam e IP group i[...]

Gigabit Multi-Homing VPN Security Router User’s Manual Local Group Set You can choose from the IP list on the left side to set up a local IP group. IP Group Choose IP Group that you would like to modify. If you would like to add new groups, please push “Add new group” b utton. Group Name When you add new groups, please note if the group n ame[...]

Gigabit Multi-Homing VPN Security Router User’s Manual Remote IP Group Management: Basically, Remote IP Group setups are exactly the sa me as Local I P Group setups. However, remote IP group does not have automatically lea rning function s. Instead, you need to define addre sses, ranges and groups manually. For example, 220.130.188.1 to 20 0 (ran[...]

Gigabit Multi-Homing VPN Security Router User’s Manual 30B 7.7 Port Group Management Service port s can be grouping as IP grouping. It is co nvenient to set QoS, firewall access rules, and other functions. Item Description User edit port Input the name, protocol, and port ran ge for the specific se rvice port. Name Name the Port in order to ident[...]

Gigabit Multi-Homing VPN Security Router User’s Manual 7B Chapter 8: QoS (Quality of Service) QoS is an abbreviation for Quality of Service. The main function is to rest rict bandwidth usage for some services and IP addresses to save bandwidth or provide priority to specific applications or services, and also to enable other users to share ba ndw[...]

Gigabit Multi-Homing VPN Security Router User’s Manual 72B 8.1.1 The Maximum Bandwidth provided by ISP In the boxes for W AN1 and W AN2 bandwidt h, inpu t the upstream and do wnstream bandwi dth which users applied for from bandwid th supplier . The bandwid th QoS will make calculations according to the data u sers input. In other words, it will [...]

Gigabit Multi-Homing VPN Security Router User’s Manual " Attention The rules configured in Protocol Binding will be executed by the device according to their priorities too. The higher up on the list, the higher t he prio rity of execution. The unit of calculation in this example is Kbit. Some software indica tes the downstream/upstream spe [...]

Gigabit Multi-Homing VPN Security Router User’s Manual Item Description Interface Select on which WAN the QoS rule should be executed. It can be a single selection or multiple selections. Service Port Select what bandwidth control is to be configured in the QoS rule. If the bandwidth for all services of each IP is to be controlled, select “All [...]

Gigabit Multi-Homing VPN Security Router User’s Manual example, If the rule is set for the IP of each PC, the IP of each PC will have the same bandwidth. " Attention If “Share-Bandwidth” is selected, be aw are of the actual usage conditions and avoid an improp er configuration that might cause a malfunction of the network when the ban dw[...]

Gigabit Multi-Homing VPN Security Router User’s Manual 74B 8.1.3 Smart QoS Item Description Enabled QoS Choose to apply QoS function. When the usage of any WAN’s bandwidth is over___%, Enable Smart QoS Input the required rate value into the column. The def ault is 60%. Each IP’s upstream bandwidth threshold (for all WAN) Input the max. upstre[...]

Gigabit Multi-Homing VPN Security Router User’s Manual Monday to Friday, 8:00am to 6:00pm, users can refer to the following figure to set up the rule. Item Description When the usage of certai n WAN's bandwidth is under__%, then stop to add new punished IP When the usage of certain WAN’s band width is under __%, will stop to punish the IP [...]

Gigabit Multi-Homing VPN Security Router User’s Manual 75B 8.1.4 Exception IP address If some users are allowed to avoid traffic management control, you can use this function to fulfill the requirement. Item Description WAN Select WAN ports. Source IP Enter the exempted IP range, or select the exempted IP group. Do not control Direction Select do[...]

Gigabit Multi-Homing VPN Security Router User’s Manual 32B 8.2 Session control Session manageme nt controls the acceptable maxim um simultaneous session s of Intranet PCs. This funct ion is very useful for managing connection quantity when P2P software such as BT, Thunder, or e mule is used in the Intranet causing large numbers of sessions. Se tt[...]

Gigabit Multi-Homing VPN Security Router User’s Manual - 75 - lines that this user is conne cted with will be removed, and the user will not b e abl to connect with the Internet e for five minutes. New connections cannot be made until the delay time ends. Scheduling time :00am to igure to set up the rule. If “Always” is selected, the rule w i[...]

Gigabit Multi-Homing VPN Security Router User’s Manual 8B Chapter 9 : Firewall This chapter introduce s firewall general policy , access rule, and content filter settings to ensure netwo rk security . 33B 9.1 General Policy The firewall is enabled by default. If the firewall is set as disabled, features such as SPI, DoS, and outbound packet respo[...]

Gigabit Multi-Homing VPN Security Router User’s Manual Through may allow the client end to receive this type of packet message format. This feature is off by default. Prevent ARP Virus Attack This feature is designed to prevent the intranet fro m being attacked by ARP spoofing, causing the con nection failure of the PC. This ARP virus cheat mostl[...]

Gigabit Multi-Homing VPN Security Router User’s Manual Item Description Packet Type This device provides three types of data packet transmission: TCP -SYN-Flood, UDP-Flood and ICMP-Fl ood. WAN Threshold When all packet values from external a ttack or from single external IP attack reach the maximum amount (the default is 1500 0 packets/Sec and 20[...]

Gigabit Multi-Homing VPN Security Router User’s Manual 34B 9.2 Access Rule Users may turn on/off the setting to permit or forbid an y packet to access internet. Us ers may select to set different network access rules: from internal to external or from external to inte rnal. Users may set different packets for IP address and comm unication port nu[...]

Gigabit Multi-Homing VPN Security Router User’s Manual Item Description Edit: Define the network acce ss rule item Delete: Remove the item. Add New Rule: Create a new network access rule Return to Default Rule: Restore all settings to the default values and delete all the self-defined settings. 77B 9.2.2 Add New Access Rule Item Description Actio[...]

Gigabit Multi-Homing VPN Security Router User’s Manual WAN2 or Any). Select from the drop -down menu. Source IP Select the source IP range (for example: An y, Single, Range, or pre set IP group name). If Single or Range is selected, plea se enter a single IP address or a n IP address within a session. Dest. IP Select the destination IP range (suc[...]

Gigabit Multi-Homing VPN Security Router User’s Manual 35B 9.3 URL Filter The device supports two webpage rest riction modes: one is to block certain forbidden domains, and the other is to give access to certain web pages. Only one of these two modes can b e selected. Block Forbidden Dom ain Fill in the complete website such as www.sex.com to hav[...]

Gigabit Multi-Homing VPN Security Router User’s Manual Website Blocking by Keywords Item Description Enabled Click to activate this feature. The defaul t setting is disabled. For example: If users enter the string ”sex”, any websit es containing ”sex” will be blocked. Key w ords （ Only for English keyword ） Enter keywords. Add to List[...]

Gigabit Multi-Homing VPN Security Router User’s Manual Accept Allowed Domains In some companies or sch ools, employees and student s are only allowed to access some specific websites. This is the purpose of the function. Item Description Enabled Activate the function. The default setting is “Disabled.” Domain Name Input the allowed domain nam[...]

Gigabit Multi-Homing VPN Security Router User’s Manual - 85 - Item Description Always : Select “Alw ays” to apply the rule on a round-the-clock ba sis. Select “from”, and the operation will run according to the defined time. …to…: Select " Alw ays " to apply the rule on a round-the-clock basis. If “ From ” is selected, t[...]

Gigabit Multi-Homing VPN Security Router User’s Manual 9B Chapter 10 : VPN (V irtual Private Network) 36B 10.1. Display All VPN Summary This VPN Summary displays the real-time data with r egard to VPN status. The se data include: all tunnel numbers, setting parameters and Group VPN and so forth. Det ail: Push this button to displ ay the following[...]

Gigabit Multi-Homing VPN Security Router User’s Manual VPN T unnel St atus: The following describes V PN Tunnel Status, t he current status of VPN tunnel in detail: Item Description Previous Page/Next Page, Jump to __/__ Page, __ Entries Per Page Click Previous page or Next page to view the desire d VPN tunnel page. Or users can select the page n[...]

Gigabit Multi-Homing VPN Security Router User’s Manual Remote Gateway Set the IP address to connect the rem ote VPN device. Please set the VPN device with a valid IP address or domain name. Control Click “Connect” to verify the tunnel status. The test result will be up dated. To disconnect, click “Di sconnect” to stop the VPN connection. [...]

Gigabit Multi-Homing VPN Security Router User’s Manual 78B 10.1.1. Add a New VPN Tunnel The device supports Gateway to Gateway tunnel or Client to Gateway tunnel. The VPN tunnel connections are don e by 2 VPN devices via the Internet. When a new tunnel is add ed, the setting page for Gateway to Gateway or Client to Gateway will be displayed. Gate[...]

Gigabit Multi-Homing VPN Security Router User’s Manual Item Description Tunnel No. Set the embedded VPN feature, please sele ct the Tunnel number. Tunnel Name Displays the current VPN tunnel connecti on name, such as XXX Office. Users are well-advised to give them different names to avoid confusion. " Note If this tunnel is to be connected t[...]

Gigabit Multi-Homing VPN Security Router User’s Manual further settings. FQDN refers to the combination of ho st name and domain name and can be retrieved from the Internet, i.e. vpn.server .com. This IP address and domain name must be identical to those of the VPN secure gateway setting type to est ablish successful connection. (3) IP + E-mail A[...]

Gigabit Multi-Homing VPN Security Router User’s Manual 2. Subnet This option allows local computers in this su bnet can be connected to the VPN tunnel. Reference: When this VPN tunnel is connec ted, only computers wi th the session of 192.168.1.0 and with subnet mask as 255.255.2 55.0 can connect with remote VPN. - 92 -[...]

Gigabit Multi-Homing VPN Security Router User’s Manual Remote Group Setup This remote gateway authentication type (Remote Security Gateway T ype) must be identical to the remotely-connected local security gateway authentication type (Local Secu rity Gateway T ype). Item Description Remote Security Gateway Type This remote gateway authentication t[...]

Gigabit Multi-Homing VPN Security Router User’s Manual If the remote IP address is unknown, choose IP by DNS Resolved, allowing DNS to translate the IP address. This domain n ame must be available on the Internet. When users finish the setting, the corresp onding IP address will be displ ayed under the remote gateway of Summary. (3) IP + E-mail A[...]

Gigabit Multi-Homing VPN Security Router User’s Manual Group Type offers a few items for remote settings. Please sel ect and set appropriate pa rameters: (1) IP address This option allows the only IP address wh ich is entered to build the VPN tunnel. Reference: When this VPN tunnel is connected, computers with the IP address of 192.168.2.1 can es[...]

Gigabit Multi-Homing VPN Security Router User’s Manual Use IKE Protocol Click the shared key generat ed by IKE to encrypt and authenticate the remote user. If PFS (Perfect Forward Secrecy) is enabled, the Phase 2 shared key gen er ated during the IKE coordination will conduct further encryption and authentication. When PF S is enabled, hackers u [...]

Gigabit Multi-Homing VPN Security Router User’s Manual VPN connection so as to guarantee security. Preshared Key For the Auto (IKE) option, enter a password of any digit or characters in the text of “Pre-shared Key” (the example he re is set as test), and t he system will automatically translate what users entere d as excha nge password and a[...]

Gigabit Multi-Homing VPN Security Router User’s Manual system will determine the VPN tunnel is disc onnected. If you create a VPN tunnel for the active side, the system will automatically rebuild the VPN tunnel again; and if you are a passive one, the system will wait for the other re-e stablish the VPN tunnel. Remote Host ： Remote network node[...]

Gigabit Multi-Homing VPN Security Router User’s Manual 10.1.1.2 Client to Gate way Setting The following describes h ow an administrator build s a VPN tunnel between devices. Users can set this VPN tunnel to be used by one client. Only one tunnel will be set and used by a group of clients, which allows ea sy setting. Situation in Tunnel Item Desc[...]

Gigabit Multi-Homing VPN Security Router User’s Manual - 100 - this tunnel. The W AN IP address will be automat ically filled into this sp ace. Users don't need to do further settings. (2) IP + Domain Name(F QDN) Authentica tion: r the domain name and IP address. If users select IP + domain name type, pl ease ente The W AN IP address will be[...]

Gigabit Multi-Homing VPN Security Router User’s Manual - 101 - 1. IP address This option allows the only IP address which is entered to build the VPN tunnel. Reference: When this VPN tunnel is connected, computers with the IP address of 192.168.1.0 can establish connection. his option allows local computers in this subnet to b e connected to the [...]

Gigabit Multi-Homing VPN Security Router User’s Manual Remote VPN Group Setting This remote gateway authentication type (Remote Security Gateway T ype) must be identical to the remotely-connected local security gateway authentication type (Local Secu rity Gateway T ype). Item Description Remote Security Gateway Type: This local gateway authent ic[...]

Gigabit Multi-Homing VPN Security Router User’s Manual connection, this device will st art authentication and respond to this VPN tunnel connection; if users select this option to link to VPN, please enter the domain na me. (5) Dynamic IP + E-mail Addr. (USER FQD N) Authentication. If users use dynamic IP address to connect to the device, users m[...]

Gigabit Multi-Homing VPN Security Router User’s Manual IKE Protocol Click the shared key generat ed by IKE to encrypt and authenticate the remote user. If PFS (Perfect Forward Secrecy) is enabled, the Phase 2 shared key gen er ated during the IKE coordination will conduct further encryption and authentication. When PF S is enabled, hackers u sing[...]

Gigabit Multi-Homing VPN Security Router User’s Manual Item Description Aggressive Mode: This mode is mostly adopted by remote devices. The IP conne ction is designed to enhance the security control if dynam ic IP is used for con nection. NAT Traversal This option allowed the VPN conne cti on can penetrate the NAT which in front of the router. ?[...]

Gigabit Multi-Homing VPN Security Router User’s Manual Item Description Enabled PPTP Server When this option is selected, the point-to - point tunnel protocol PPTP server can be enabled. PPTP IP Address Range Please enter PPTP IP address range so as to provide the remote users with an entrance IP into the local network. Enter Range Start: Enter t[...]

Gigabit Multi-Homing VPN Security Router User’s Manual 80B 10.1.3. VPN Pass Through Item Description IPSec Pass Through If this option is enabled , the PC is allowed to use VPN- IPSec packet to pass in order to connect to external VPN device. PPTP Pass Through If this option is enabled , the PC is allowed to use VPN- PPTP packet to pass in order [...]

Gigabit Multi-Homing VPN Security Router User’s Manual Chapter 1 1: Advanced Function 37B 11.1 DMZ Host/ Port Range Forwarding 11.1.1 DMZ Host When the NAT mode is act ivated, sometimes users ma y need to use application s that do not support virtual IP addresses such as network games. We recomme nd that users map the device actual WAN IP address[...]

Gigabit Multi-Homing VPN Security Router User’s Manual 11.1.2 Port Range Forwarding Setting up a Port Forwarding Virtual Host: If the server function (which means the se rver for an external service such as WWW, FTP, Mail, etc) is contained in the network, we recomm end t hat users use the firewall function to set up the host as a virtual host, a[...]

Gigabit Multi-Homing VPN Security Router User’s Manual Item Description Service To select from this option the default list of service ports of the virtual host that users want to activate. Such as: All (TCP&UDP) 0~65535, 80 (80~ 80) for WWW, and 21~21 for FTP. Please refer to the list of default service ports. IP Address Input the virtual ho[...]

Gigabit Multi-Homing VPN Security Router User’s Manual activate. Add to list Add the service to the service list. Delete selected item To remove the selected service s. Apply Click the “Apply” button to save the modification. Cancel Click the “Cancel” button to cancel the modi fication. This only works before “Apply” is clicked. Close[...]

Gigabit Multi-Homing VPN Security Router User’s Manual Add to List Add to active service content. Delete Selected Item Remove selected services. Show Table This is a list which display s the current active UPnP functions. Apply Click “Apply” to save the networ k configuration modification. 39B 11.3 Routing In this chapter we introduce the Dyn[...]

Gigabit Multi-Homing VPN Security Router User’s Manual Static Routing will be used. RIP is used when there is more than o ne router in a network, and if an administrator doesn’t want to assign a path list one by one to all of the routers, RIP can help refresh the paths. RIP is a very simple routing protocol, in which Di stance Vect or is used. [...]

Gigabit Multi-Homing VPN Security Router User’s Manual Item Description Dest. IP Subnet Mask Input the remote network IP locations and su bnet that is to be routed. For exam ple, the IP/subnet is 192.168.2.0/255.255.255.0. Gateway The default gateway location of the network node which i s to be routed. Hop Count This is the router layer count for[...]

Gigabit Multi-Homing VPN Security Router User’s Manual 40B 11.4 One to One NAT As both the device and ATU-R need only one actual I P, if ISP issued more than one actual IP (such as eight ADSL static IP addresse s or more), users can map the remaining real IP addresse s to the intranet PC virtual IP addresses. These PCs use private IP addresses in[...]

Gigabit Multi-Homing VPN Security Router User’s Manual Item Description Enabled One to One NAT To activate or close the One-to-One NAT func tion. (Check to activate the function). Private IP Range Begin Input the Private IP address for the Intranet One-to-One NAT fun ction. Public IP Range Begin Input the Public IP address for the Internet One-to[...]

Gigabit Multi-Homing VPN Security Router User’s Manual " Attention One-to-One NA T mo de will change the firewall working mode. If this functio n has been set up, the Internet IP serve r or PC which is mapped with a LAN port will be expo sed on the Internet. T o prevent Internet users from actively conne cting with the One-on-One NA T server[...]

Gigabit Multi-Homing VPN Security Router User’s Manual range Apply Click “Apply” to save the networ k configuration modification. Cancel Click “Cancel" to leave without making any changes. 41B 11.5 DDNS- Dynamic Domain Name Service DDNS supports the dynam ic web add ress transfer for 3322.org 、 DynDNS.org and DtDNS.com. This is for V[...]

Gigabit Multi-Homing VPN Security Router User’s Manual Item Description Interface This is an indication of the WAN p ort the user has selected. DDNS Check either of the boxes before DynDNS.org, 3322.org and DtDNS.com to select one of the four DDNS website addr ess transfer functions. Username The name which is set up for DDNS. Input a complete we[...]

Gigabit Multi-Homing VPN Security Router User’s Manual 42B 11.6 MAC Clone Some ISP will request for a fixed MAC address (network card physical addre ss) for distributing IP addre ss, which is mostly suitable for cable mo de users. User s can input the network ca rd physical ad dress (MAC address: 00-xx-xx-xx-xx-xx) here. The device will adopt thi[...]

Gigabit Multi-Homing VPN Security Router User’s Manual 10B Chapter 12: System T ool System Tool This chapter introduce s the management tool for cont rolling the devi ce and testing network co nnection. For security consideration, we strongly suggest to change the password. Password and Time setting is in Chapter 5.2. 43B 12.1 Diagnostic The devi[...]

Gigabit Multi-Homing VPN Security Router User’s Manual 44B 12.2 Firmware Upgrade Users may directly upgrade the device f irmware on the Firmware Upgrade page. Please confirm all information about the software version in advan ce. Select and bro wse the software file, click "Firmware Upgrade Right No w " to complete the upgrade of the de[...]

Gigabit Multi-Homing VPN Security Router User’s Manual 46B 12.4 SNMP Simple Network Managem ent Protocol (SNMP) refers to network management communications protocol and it is also an important network manage ment item. Th rough this SNMP communications protocol, programs with network management (i.e. SNMP Tools-HP Open View) can h elp communicati[...]

Gigabit Multi-Homing VPN Security Router User’s Manual 47B 12.5 System Recover Users can restart the device wi th System Recover button. Restart As the figure below, if clicking “Resta rt Router” button, the dialog bl ock will pop out, confirming if users would like to restart the device. Return to Factory Default Setting If clicking “Retur[...]

Gigabit Multi-Homing VPN Security Router User’s Manual Besides general HA, Planet also provid es advance d HA function that enables two device s to operate simultaneously. It brings full cost efficie ncy wit hout making another device idle. It does not have to be the same model. All of Planet devices which support HA can achieve the functio n. It[...]

Gigabit Multi-Homing VPN Security Router User’s Manual Following is the description of the two different modes. Item Description Operation-Master Mode Indicates the master devic e will operate for all outbou nd links. When the master device fails transmitting, the bac kup device will take over. Status “Status- Normal” indicates the device ope[...]

Gigabit Multi-Homing VPN Security Router User’s Manual device can keep DHCP functionin g and there will be no LAN disco nnection. LAN IP of the backup device Input LAN IP of Master mode, which is backed up. MAC Address of the backup device Input Master device MAC addres s, which is backed u p. Status “Status- Normal” indicates the status is i[...]

Gigabit Multi-Homing VPN Security Router User’s Manual backup device device. Status “Status-Normal” means both two devices operate n ormally. “Status-Backup” indicates Slave mode has problem s, and the device enables b ackup to take over WAN Item Description Operation-Slave Mode Although working with master device, Backup device’s DHCP [...]

Gigabit Multi-Homing VPN Security Router User’s Manual 11B Chapter 13. Log From the log management and look up, we can see the relevant operatio n status, which is convenient for us to facilitate the set up and operation. 49B 13.1 System Log Its system log offers three options: system log, E-mail alert, and log setting. System Log - 129 -[...]

Gigabit Multi-Homing VPN Security Router User’s Manual Item Description Enabled If this option is selected, the System Log feature will be enabled. Syslog Server The device provides external system log servers with log coll ection feature. System log is an industrial standard co m munications protocol. It is designed to dynamically capture relate[...]

Gigabit Multi-Homing VPN Security Router User’s Manual General Log The device provides the following warning messag e. C lick to activate the feature. System error message, blocked regulations, re gulation of passage permission, system configuratio n change and registration verification. Item Description System Error Message Provides the system l[...]

Gigabit Multi-Homing VPN Security Router User’s Manual V iew System Log This option allows users to view system log. The message content can be read on line via the device. They include All Log, System Log, Access Log, Firewall Log, and VPN log , which is illustrated as below. Outgoing Packet Log View system packet log which is sent out from the [...]

Gigabit Multi-Homing VPN Security Router User’s Manual Incoming Packet Log View system packet log of those entering the firewall. The log includes information about the external source IP addresses, destination IP addresse s, and se rvice ports. It is illustrated as below. Clear Log Now This feature clears all the cu rrent information on the log.[...]

Gigabit Multi-Homing VPN Security Router User’s Manual 50B 13.2 System Statistic The device has the real-tim e surveillance man agement feature th at provides system current operation information such as port location, device name, cu rre nt WAN link status, IP addres s, MAC address, subn et mask, default gateway, DNS, number of re ceived/ sent/ [...]

51B 13.3 Traffic Statistic Six messages will be displayed on the Traffic S tatistic page to provide better traffic manage ment and control. By Inbound IP Address The figure displays the source IP add ress, bytes per second, and p ercentage. By outbound IP Address The figure displays the source IP add ress, bytes per second, and p ercentage. By Outb[...]

Gigabit Multi-Homing VPN Security Router User’s Manual By Inbound Port The figure displays the network protocol type, desti nation IP address, bytes p er second, and percentage. By Outbound Session The figure displays the source IP address, network protocol type, source po rt, destination IP address, destination port, bytes per secon d and percen[...]

Gigabit Multi-Homing VPN Security Router User’s Manual 52B 13.4 IP/ Port Statistic The device allows administrators to inquire a specific IP (or from a specific port) a bout the addresses that this IP had visited, or the users (so urce IP) who used this serv ice port. T his facilitates the identification of websites that needs authentication but [...]

Gigabit Multi-Homing VPN Security Router User’s Manual Specific Port Status Enter the service port number in the field and IP that are currently used by th is port will be displayed. - 138 -[...]

Gigabit Multi-Homing VPN Security Router User’s Manual 12B Appendix A : Configure the 3G USB Interface Before configure the 3G USB interface, please prep are those device as below: z USB 3G (WCDMA) Device z NK Series Router z 3G SIM & Configuration For Example: A T&T 3G connection, the p a rameter as below: z APN: wap.cingular z Dialup Nu[...]

Gigabit Multi-Homing VPN Security Router User’s Manual Step 1: USB/3G Connection Setting [Sidebar Menu] Network > Network Connection [W AN Setting] Select USB port for 3G/4G connection, and enter detai l se tting after click hyper-link “Edit” at USB port column. - 140 -[...]

Gigabit Multi-Homing VPN Security Router User’s Manual Item Description PIN CODE Entry PIN code when the PIN protection is enabled at your 3G SIM, but it is not necessary when the func tion was disabled. " Attention The SIM card will be locked and displays “[PUK] PIN Unlocked Key” when entering incorrect PIN code more than 3 times. USB C[...]

Gigabit Multi-Homing VPN Security Router User’s Manual PUK code to unlock. z 3G modem is not av ailab le. DNS Server: Router is forced to use assigned DNS Server manually , which is not from ISP settings. 3G Setting : APN( Access P oint Network): mo st carriers use “Internet ” as default value. Need to check with carrier provider for the corr[...]

Gigabit Multi-Homing VPN Security Router User’s Manual 54B Step 2: Check IP Address for USB/3G Connection. [Sidebar Menu] Home [W AN St atus] Item Description W AN IP Address Indicates the current IP configuration for USB port. Default Gateway Indicates gateway IP address from ISP . Domain Name Server Indicates the current DNS IP configuration. D[...]

Gigabit Multi-Homing VPN Security Router User’s Manual [Physical Port St atus] S tatus cell indicted curr ent connection status for USB Port Item Description Connected This 3G/4G device just st ill connected via USB Port Enabled This 3G/4G deice still ava ilable & wait to connect 55B Step 3: Check 3G Info from Service Provider [Sidebar Menu] [...]

Gigabit Multi-Homing VPN Security Router User’s Manual Push button to get the updated s tatus. Charge count Default value is disabled. 3G service charge by traffic usage Item Description Premium The basic service fee for 3G traf fic usage Extra charge The additional fee after exceedin g the preimum. Auto Disconnect Auto isconnection function when[...]

Gigabit Multi-Homing VPN Security Router User’s Manual 3G service charge by time usage Item Description Premium The basic service fee for 3G time usa ge Extra Charge Billing Rate by Over-basic connected time Auto-disconnect Auto isconnection function when user d efines max accumulated time to aviod paying unplanned 3 G service fee. Previous Cumul[...]

Gigabit Multi-Homing VPN Security Router User’s Manual 56B Step 4: Configure Advance Setting The VPN Security Router supports fou r USB 3G/4G connection modes. z Performance Mode : 3G service is always co nnected. z Backup mode: support s WAN f ailover . z Smart mode: detect the W AN connection st atus to decide which mode 3G dongle should be i n[...]

Gigabit Multi-Homing VPN Security Router User’s Manual NSD- St art Failover 1. The selected wired W AN port is detected failing the connection. Administrator has to select at least one wired W AN port here. If several wired WAN port s are selected, the 3G dongle will be connecte d automatically when the selected wired W AN ports all fail the conn[...]

Gigabit Multi-Homing VPN Security Router User’s Manual Threshold- St art Load Balance After administ rator chooses which W AN ports are requir ed for 3G service backup, the admini strators can set up bandwid th setting in the threshold- S tart Load Balance columns. In addition to backup W AN port failures, administrators can decide when the traff[...]

Gigabit Multi-Homing VPN Security Router User’s Manual 57B Step 5: Send System log Via SMS Message [Sidebar Menu] Log > System Log [Send SMS] Router can send system log to mobile phones via SMS when events are triggered. - 150 -[...]