Planet Technology ADE-4300A/B manual

ADSL 2/2+ VPN Firewall Router ADE-4300A/B, ADW-4300A/B User's Manual[...]

ii Cop y right Cop y right ã 2004 b y PLANE T T echnolog y Corp. All rights reserved. No part o f this publication m a y be reproduced, trans m itted, transcribed, stored in a retrieval s y ste m , or translated into an y language or co m puter language, in an y f or m or b y an y m eans, electronic, m echanical, m agnetic, optical, che m ical, m [...]

iii R&TTE Compliance Statement T his equip m ent co m plies w ith all the require m ents o f DIREC T IVE 1999/5/CE OF T HE EUROPEAN PARLIAMEN T AND T HE COUNCIL OF 9 March 1999 on radio equip m ent and teleco mm unication ter m inal Equip m ent and the m utual recognition o f their con f or m it y (R& TT E) T he R& TT E Directive repeal[...]

[...]

i Table of Contents CH A P T ER 1 IN T RODUC T IO N ..................................................................................... .1 A DE-4300/ A DW-4300 Feature s ............................................................................ .1 Package Content s ................................................................................[...]

ii Diagnostic s ......................................................................................................... . 98 Remote A dministratio n ...................................................................................... . 99 Routin g ..................................................................................................[...]

1 Ch a pte r 1 I n trod uc tio n This Chapter provides an overview of the ADE-4300/AD W -4300's fea- tures and capabilities. Congratulations on the purchase o f y our ne w ADE-4300/AD W -4300. T he ADE- 4300/AD W -4300 is a m ulti- f unction device providing the f ollo w ing services: · ADSL 2/2+ Modem . · Shared Broadband Internet Access f [...]

ADE-4300/AD W -4300 User Guide 2 · IPoA, PPPoE, PPPoA, Direct Connection Support. T he ADE-4300/AD W- 4300 supports all co mm on connection m ethods. · Auto-detection of Internet Connection Method. In m ost situations, the ADE-4300/AD W -4300 can test y our ADSL and Internet connection to deter m ine the connection m ethod used b y y our ISP. · [...]

Introduction 3 Wireless Features ( A DW-4300 onl y ) · Standards Compliant. T he AD W -4300 co m plies w ith the IEEE802.11g (DSSS) speci f ications f or W ireless LANs. · Supports both 802.11b and 802.11g Wireless Stations. T he 802.11g standard provides f or bac k w ard co m patibilit y w ith the 802.11b standard, so both 802.11b and 802.11g W [...]

ADE-4300/AD W -4300 User Guide 4 tion and even the existence o f each PC is hidden. Fro m the external vie w point, there is no net w or k , onl y a single device - the ADE-4300/AD W -4300. · Firewall. All inco m ing data pac k ets are m onitored and all inco m ing server re- quests are f iltered, thus protecting y our net w or k f ro m m alicious[...]

Introduction 5 Package Contents T he f ollo w ing ite m s should be included. I f an y o f these ite m s are da m aged or m issing, please contact y our dealer i mm ediatel y . · T he ADE-4300/AD W -4300 Unit · Quic k Installation Guide · User ’ s Manual CD · Po w er Adapter · 1 RJ-45 Cable · 1 RJ-11 (ADSL) cable[...]

ADE-4300/AD W -4300 User Guide 6 Ph y sical Details Front-mounted LEDs of A DE-4300 Figure 2-1: Front Panel of A DE-4300 Front-mounted LEDs of A DW-4300 Figure 3-2: Front Panel of A DW-4300 PWR LED On - Po w er on. Off - No po w er. S T A T US LED Off - Nor m al operation. Blinking - T his LED blin k s during start up, and during a Fir m w are Upgr[...]

Introduction 7 Rear Panel Figure 4-1: Rear Panel of A DE-4300 Figure 5-2: Rear Panel of A DW-4300 RESE T Button (Reset to De- faults) T his button w ill reset the ADE-4300/AD W -4300 to the f actor y de f ault settings. T o do this, press and hold the Reset Button f or f ive (5) sec- onds, until the Status LED is lit, then release the Reset Button,[...]

8 Ch a pte r 2 I n st a ll a tio n This Chapter covers the physical installation of the ADE-4300/AD W- 4300. Requirements · Net w or k cables. Use standard 10/100Base T net w or k (U T P) cables w ith RJ45 connectors. · T CP/IP protocol m ust be installed on all PCs. · For Internet Access, an Internet Access account w ith an ISP, and a DSL conne[...]

Installation 9 2. Connect L A N Cables Use standard LAN cables to connect PCs to the S w itching Hub ports on the ADE- 4300/AD W -4300. Both 10Base T and 100Base T connections can be used si m ulta- neousl y . I f required, connect an y port to a nor m al port on another Hub, using a standard LAN cable. An y LAN port on the ADE-4300/AD W -4300 w il[...]

10 Ch a pte r 3 S e t u p This Chapter provides Setup details of the ADE-4300/AD W -4300. O v er v ie w T his chapter describes the setup procedure f or: · Internet Access · LAN con f iguration · W ireless setup (AD W -4300 onl y ) · Assigning a Pass w ord to protect the con f iguration data. PCs on y our local LAN m a y also require con f igur[...]

Setup 11 Configuration Program T he ADE-4300/AD W -4300 contains an H TT P server. T his enables y ou to connect to it, and con f igure it, using y our W eb Bro w ser. Your Bro w ser must support Ja v aScript . T he con f iguration progra m has been tested on the f ollo w ing bro w sers: · Netscape V4.08 or later · Netscape 7 · Internet Explorer[...]

ADE-4300/AD W -4300 User Guide 12 If y ou can't connect I f the ADE-4300/AD W -4300 does not respond, chec k the f ollo w ing: · T he ADE-4300/AD W -4300 is properl y installed, LAN connection is OK, and it is po w ered ON. Y ou can test the connection b y using the "Ping" co mm and: · Open the MS-DOS w indo w or co mm and pro m pt[...]

Setup 13 Common Connection T y pes T y pe Details ISP Data required D y na m ic IP Address Y our IP Address is allocated auto m aticall y , w hen y ou con- nect to y ou ISP. a) ADSL para m eters (VPI and VCI) m a y be required, i f the y cannot be detected auto m ati- call y . b) So m e ISP's m a y require y ou to use a particular Hostname or [...]

ADE-4300/AD W -4300 User Guide 14 Home Screen A f ter f inishing the Setup W i z ard, y ou w ill see the Home screen. W hen y ou connect in f uture, y ou w ill see this screen w hen y ou connect. An exa m ple screen is sho w n belo w . Figure 7: Home Screen Main Menu T he m ain m enu, on the le f t, contains lin k s to the m ost-co mm onl y used sc[...]

Setup 15 L A N Screen Use the LAN lin k on the m ain m enu to reach the LAN screen. An exa m ple screen is sho w n belo w . Figure 8: L A N Screen Data - L A N Screen T CP/IP IP A ddress IP address f or the ADE-4300/AD W -4300, as seen f ro m the local LAN. Use the de f ault value unless the address is alread y in use or y our LAN is using a di ff [...]

ADE-4300/AD W -4300 User Guide 16 · T he DHCP Server provides the Gateway and DNS addresses to the client, as w ell as allocating an IP Address. · T he ADE-4300/AD W -4300 can act as a DHCP ser v er . · W indo w s 95/98/ME and other non-Server versions o f W indo w s w ill act as a DHCP client . T his is the de f ault W indo w s setting f or the[...]

Setup 17 Wireless Screen ( A DW-4300 onl y ) T he AD W -4300's settings m ust m atch the other W ireless stations. Note that the AD W -4300 w ill auto m aticall y accept both 802.11b and 802.11g connec- tions, and no con f iguration is required f or this f eature. T o change the AD W -4300's de f ault settings f or the W ireless Access Po[...]

ADE-4300/AD W -4300 User Guide 18 Options M ode Select the desired m ode: · 802.11G-plus ( T I) T his allo w s clients to use an y o f the f ollo w ing m odes: · Standard 802.11b · 802.11B+ ( T exas Instru m ents proprietar y enhanced m ode) · Standard 802.11g · 802.11G-plus ( T exas Instru m ents proprietar y enhanced m ode). T his m ode can [...]

Setup 19 A llo w access b y … Use this f eature to deter m ine w hich W ireless stations can use the Access Point. T he options are: · A ll Wireless Stations - All w ireless stations can use the access point, provided the y have the correct SSID and secu- rit y settings. · T rusted Wireless stations only - Onl y w ireless stations y ou designat[...]

ADE-4300/AD W -4300 User Guide 20 Wireless Securit y ( A DW-4300 onl y ) T his screen is accessed b y clic k ing the "Con f igure" button on the W ireless screen. T here are 3 options f or W ireless securit y : · Disabled - no data encr y ption is used. · WEP - data is encr y pted using the W EP standard. · WP A -PSK - data is encr y p[...]

Setup 21 Ke y Value Enter the k e y value or values y ou w ish to use. T he Default Key is required, the other k e y s are optional. Other stations m ust have the sa m e k e y. Passphrase I f desired, y ou can generate a k e y f ro m a phrase, instead o f entering the k e y value directl y . Enter the desired phrase, and clic k the "Generate K[...]

ADE-4300/AD W -4300 User Guide 22 Trusted Wireless Stations ( A DW-4300 onl y ) T his f eature can be used to prevent un k no w n W ireless stations f ro m using the Access Point. T his list has no e ff ect unless the setting Allow access by trusted stations only is enabled. T o change the list o f trusted w ireless stations, use the M odify List b[...]

Setup 23 Edit Use this to change an existing entr y in the " T rusted Stations" list: 1. Select the Station in the Trusted Station list. 2. Clic k the Edit button. T he address w ill be copied to the "Address" f ield, and the Add button w ill change to Update . 3. Edit the address (MAC or ph y sical address) as required. 4. Clic[...]

ADE-4300/AD W -4300 User Guide 24 Pass w ord Screen T he pass w ord screen allo w s y ou to assign a pass w ord to the ADE-4300/AD W -4300. Figure 13: Pass w ord Screen Old Pass w ord Enter the existing pass w ord in this f ield. Ne w pass w ord Enter the ne w pass w ord here. Verif y pass- w ord Re-enter the ne w pass w ord here. Y ou w ill be pro[...]

Setup 25 M ode Screen Use this screen to change the m ode bet w een Router m ode and Mode m (Bridge) m ode. Figure 15: M ode Screen Select the desired option, and clic k "Save". Router Both the ADSL Mode m and the Router f eatures are operational. In this m ode, this device can provide shared Internet Access to all y our LAN users. Also, [...]

26 Ch a pte r 4 P C C o n fig u r a tio n This Chapter details the PC Configuration required on the local ("Inter- nal") LAN. O v er v ie w For each PC, the f ollo w ing m a y need to be con f igured: · T CP/IP net w or k settings · Internet Access con f iguration · W ireless con f iguration (AD W -4300 onl y ) Windo w s Clients T his [...]

PC Configuration 27 Checking TCP/IP Settings - Windo w s 9x/ME: 5. Select Control Panel - Network . Y ou should see a screen li k e the f ollo w ing: Figure 16: Net w ork Configuration 6. Select the TCP/IP protocol f or y our net w or k card. 7. Clic k on the Properties button. Y ou should then see a screen li k e the f ollo w ing. Figure 17: IP A [...]

ADE-4300/AD W -4300 User Guide 28 · On the Gateway tab, enter the ADE-4300/AD W -4300's IP address in the New Gateway f ield and clic k Add , as sho w n belo w . Y our LAN ad m inistrator can advise y ou o f the IP Address the y assigned to the ADE-4300/AD W -4300. Figure 18: Gate w a y T ab (Win 95/98) · On the DNS Configuration tab, ensure[...]

PC Configuration 29 Checking TCP/IP Settings - Windo w s NT4.0 1. Select Control Panel - Network , and, on the Protocols tab, select the T CP/IP protocol, as sho w n belo w . Figure 20: Windo w s N T 4.0 - T CP/IP 2. Clic k the Properties button to see a screen li k e the one belo w .[...]

ADE-4300/AD W -4300 User Guide 30 Figure 21: Windo w s N T 4.0 - IP A ddress 3. Select the net w or k card f or y our LAN. 4. Select the appropriate radio button - Obtain an IP address from a DHCP Server or Specify an IP Address , as explained belo w . Obtain an IP address from a DHCP Ser v er T his is the de f ault W indo w s setting. Using this i[...]

PC Configuration 31 Figure 22 - Windo w s N T 4.0 - A dd Gate w a y 2. T he DNS should be set to the address provided b y y our ISP, as f ollo w s: · Clic k the DNS tab. · On the DNS screen, sho w n belo w , clic k the Add button (under DNS Service Search Order ), and enter the DNS provided b y y our ISP. Figure 23: Windo w s N T 4.0 - DNS[...]

ADE-4300/AD W -4300 User Guide 32 Checking TCP/IP Settings - Windo w s 2000: 1. Select Control Panel - Network and Dial-up Connection . 2. Right - clic k the Local Area Connection icon and select Properties . Y ou should see a screen li k e the f ollo w ing: Figure 24: Net w ork Configuration (Win 2000) 3. Select the TCP/IP protocol f or y our net [...]

PC Configuration 33 5. Ensure y our T CP/IP settings are correct, as described belo w . Using DHCP T o use DHCP, select the radio button Obtain an IP Address automatically . T his is the de f ault W indo w s setting. Using this is recommended . B y de f ault, the ADE- 4300/AD W -4300 w ill act as a DHCP Server. Restart y our PC to ensure it obtains[...]

ADE-4300/AD W -4300 User Guide 34 Checking TCP/IP Settings - Windo w s XP 1. Select Control Panel - Network Connection . 2. Right clic k the Local Area Connection and choose Properties . Y ou should see a screen li k e the f ollo w ing: Figure 26: Net w ork Configuration (Windo w s XP) 3. Select the TCP/IP protocol f or y our net w or k card. 4. Cl[...]

PC Configuration 35 Figure 27: T CP/IP Properties (Windo w s XP) 5. Ensure y our T CP/IP settings are correct. Using DHCP T o use DHCP, select the radio button Obtain an IP Address automatically . T his is the de f ault W indo w s setting. Using this is recommended . B y de f ault, the ADE- 4300/AD W -4300 w ill act as a DHCP Server. Restart y our [...]

ADE-4300/AD W -4300 User Guide 36 Internet A ccess T o con f igure y our PCs to use the ADE-4300/AD W -4300 f or Internet access: · Ensure that the DSL m ode m , Cable m ode m , or other per m anent connection is f unctional. · Use the f ollo w ing procedure to con f igure y our Bro w ser to access the Internet via the LAN, rather than b y a Dial[...]

PC Configuration 37 M acintosh Clients Fro m y our Macintosh, y ou can access the Internet via the ADE-4300/AD W -4300. T he procedure is as f ollo w s. 1. Open the T CP/IP Control Panel. 2. Select Ethernet f ro m the Connect via pop-up m enu. 3. Select Using DHCP Server f ro m the Configure pop-up m enu. T he DHCP Client ID f ield can be le f t bl[...]

ADE-4300/AD W -4300 User Guide 38 Wireless Station Configuration ( A DW-4300 onl y ) T his section applies to all W ireless stations w ishing to use the AD W -4300's Access Point, regardless o f the operating s y ste m w hich is used on the client. T o use the W ireless Access Point in the AD W -4300, each W ireless Station m ust have co m pat[...]

PC Configuration 39 Figure 29 Wireless Net w orks (Windo w s XP) If the "Broadcast SSID" setting on the A DW-4300 has been disabled, its SSID w ill NO T be listed. See the follo w ing section "If the SSID is not listed" for details of dealing w ith this situation. 4. T he next step depends on w hether or not W ireless securit y [...]

ADE-4300/AD W -4300 User Guide 40 T o connect: · Chec k the chec k box Allow me to connect to the selected wireless network, even though it is not secure . · T he Connect button w ill then be available. Clic k the Connect button, and w ait a f e w seconds f or the connection to be established. If using WEP Data Encr y ption I f W EP data encr y p[...]

PC Configuration 41 Figure 32: A d v anced - Wireless Net w orks Select the SSID f or the AD W -4300, and clic k Configure , to see a screen li k e the f ol- lo w ing: Figure 33: Wireless Net w ork Properties - WEP Configure this screen as follo w s: · Set Network Authentication to m atch theAD W -4300. (I f the setting on the AD W- 4300 is "[...]

ADE-4300/AD W -4300 User Guide 42 · For the Network key and Confirm network key , enter the default ke y v alue used on the AD W -4300. ( W indo w s w ill deter m ine i f 64bit or 128bit encr y ption is used.) · T he Key index m ust m atch the default ke y index on the AD W -4300. T he de f ault value is 1. · Ensure the options The key is provid[...]

PC Configuration 43 If using WP A -PSK Data Encr y ption I f W PA-PSK data encr y ption has been enabled on the AD W -4300, it does not m atter w hich net w or k is selected on the screen belo w . Just clic k the Advanced button. Figure 35: Wireless Net w orks (Windo w s XP) Y ou w ill then see a screen li k e the exa m ple belo w . Figure 36: A d [...]

ADE-4300/AD W -4300 User Guide 44 Figure 37: Wireless Net w ork Properties- WP A -PSK Configure this screen as follo w s: · Set Network Authentication to WP A -PSK . · For Data Encryption , select T KIP . · For the Network key and Confirm network key , enter the net w or k k e y (PSK) used on the AD W -4300. · Ensure the option This is a comput[...]

PC Configuration 45 Figure 38: Preferred Net w orks Clic k OK to establish a connection to the AD W -4300. If the SSID is not listed I f the "Broadcast SSID" setting on the AD W -4300 has been disabled, its SSID w ill NO T be listed on the screen belo w . Figure 39: Wireless Net w orks (Windo w s XP) In this situation, y ou need to obtain[...]

ADE-4300/AD W -4300 User Guide 46 Figure 40: Unlisted Wireless Net w ork 2. Clic k the Add button. Y ou w ill see a screen li k e the exa m ple belo w . Figure 41: A dd Wireless Net w ork 3. Con f igure this screen as f ollo w s: · Enter the correct SSID, as used on the AD W -4300. Re m e m ber the SSID is case- sensitive, so be sure to m atch the[...]

PC Configuration 47 · I f using data encr y ption ( W EP or W PA-PSK), enter the k e y used on the AD W- 4300. See the preceding sections f or details o f W EP and W PA-PSK. · Unchec k the options The key is provided for me automatically and This is a com- puter-to-computer (ad hoc) network . · Clic k OK to save and exit. 4. T his w ireless net [...]

48 Ch a pte r 5 O p e r a tio n an d St a t u s This Chapter details the operation of the ADE-4300/AD W -4300 and the status screens. For Details of operation in Bridge ( M odem) mode, see Chapter 8 - M odem M ode. Operation - Router M ode Once both the A DE-4300/ A DW-4300 and the PCs are configured, operation is automatic. Ho w ever, there are so[...]

Operation and Status 49 Figure 43: Status Screen Data - Status Screen S y stem De v ice Name T he current na m e o f the Router. T his na m e is also the "hostna m e" f or users w ith an "@Ho m e" t y pe connection. Firm w are Version T he version o f the current f ir m w are installed. A DSL M odem Status T his indicates the st[...]

ADE-4300/AD W -4300 User Guide 50 A DSL Details Clic k this button to open a sub- w indo w and vie w the details o f each VC (Virtual Circuit). Internet (VC1) Connection M ethod Displa y s the current connection m ethod, as set in the Setup W i z ard . Connection Status T his indicates the current status o f the Internet Connection · A cti ve - Co[...]

Operation and Status 51 description o f the current connection. A ttached De v ices T his w ill open a sub- w indo w , sho w ing all LAN and W ireless devices currentl y on the net w or k. VPN Status Vie w details o f each current VPN T unnel is a sub- w indo w . Y ou also have the option o f vie w ing the VPN Log. For f urther details about VPN, s[...]

ADE-4300/AD W -4300 User Guide 52 Connection Status - PPPoE & PPPo A I f using PPPoE (PPP over Ethernet) or PPPoA (PPP over A T M), a screen li k e the f ollo w ing exa m ple w ill be displa y ed w hen the "Connection Details" button is clic k ed. Figure 44: PPPoE Status Screen Data - PPPoE/PPPo A Screen Connection T ime T his indicat[...]

Operation and Status 53 Connection Details - D y namic IP A ddress I f y our access m ethod is "Direct" (no login), w ith a D y na m ic IP address, a screen li k e the f ollo w ing exa m ple w ill be displa y ed w hen the "Connection Details" button is clic k ed. Figure 45: Connection Details - Fixed/D y namic IP A ddress Data -[...]

ADE-4300/AD W -4300 User Guide 54 Connection Details - Fixed IP A ddress I f y our access m ethod is "Direct" (no login), w ith a f ixed IP address, a screen li k e the f ollo w ing exa m ple w ill be displa y ed w hen the "Connection Details" button is clic k ed. Figure 464: Connection Details - Fixed/D y namic IP A ddress Data[...]

55 Ch a pte r 6 Adv ance d Fea t u r e s This Chapter explains when and how to use the ADE-4300/AD W- 4300's "Advanced" Features. O v er v ie w T he f ollo w ing advanced f eatures are provided: · Access Control · Internet Access · T rusted PCs · Internet: · DMZ · Special Applications · URL f ilter · D y na m ic DNS · Fire w[...]

ADE-4300/AD W -4300 User Guide 56 Figure 475: A ccess Control Screen Data - A ccess Control Screen Internet A ccess A ccess control Select the desired options f or Internet access control: · Disable - Nothing is bloc k ed. · Block all Internet access - All tra ff ic via the W AN port is bloc k ed. · Block selected Ser v ices - Y ou can select w [...]

Advanced Features 57 Figure 48: T rusted PCs Data - T rusted PCs T rusted PCs T rusted PCs T his lists an y PCs w hich y ou have designated as “ T rusted ” . Other PCs T his list an y PCs detected b y the router, w hich y ou have not designated as " T rusted". Buttons << Add a T rusted PC to the list ( m ove f ro m the "Oth[...]

ADE-4300/AD W -4300 User Guide 58 Figure 47: Internet Screen DMZ T his f eature, i f enabled, allo w s the DMZ co m puter on y our LAN to be exposed to all users on the Internet. · T his allo w s al m ost an y application to be used on the "DMZ PC". · T he "DMZ PC" w ill receive all "Un k no w n" connections and data[...]

Advanced Features 59 Figure 48: Special A pplications Screen Data - Special A pplications Screen Checkbox Use this to Enable or Disable this Special Application as required. Name Enter a descriptive na m e to identi f y this Special Application. Incoming Ports · T y pe - Select the protocol ( T CP or UDP) used w hen y ou receive data f ro m the sp[...]

ADE-4300/AD W -4300 User Guide 60 Using a Special A pplication · Con f igure the Special Applications screen as required. · On y our PC, use the application nor m all y . Re m e m ber that onl y one (1) PC can use each Special application at an y ti m e. Also, w hen 1 PC is f inished using a particular Special Application, there m a y need to be [...]

Advanced Features 61 Note: It is necessar y to clic k the Sa ve button in the Access Control page f or activation o f T rusted PCs i f y ou add/delete an y entr y o f T rusted PCs page. Figure 49: URL Filter Screen Data - URL Filter Screen Current Filter Strings Current Filter Strings T he list contains the current list o f ite m s to bloc k . · T[...]

ADE-4300/AD W -4300 User Guide 62 D y namic DNS (Domain Name Ser v er) T his f ree service is ver y use f ul w hen co m bined w ith the Virtual Server f eature. It allo w s Internet users to connect to y our Virtual Servers using a URL, rather than an IP Ad- dress. T his also solves the proble m o f having a d y na m ic IP address. W ith a d y na m[...]

Advanced Features 63 DDNS Data Host Name Enter the do m ain na m e allocated to y ou b y the DDNS Service. I f y ou have m ore than one na m e, enter the na m e y ou w ish to use. User Name Enter y our Userna m e f or the DDNS Service. ( T ZO.co m uses y our E- m ail address.) Pass w ord Enter y our current pass w ord f or the DDNS Service. ( T ZO.[...]

ADE-4300/AD W -4300 User Guide 64 Fire w all Rules T he Firewall Rules screen allo w s y ou to de f ine "Fire w all Rules" w hich can allo w or prevent certain tra ff ic. " T ra ff ic" m eans inco m ing connection atte m pts, not pac k ets. B y de f ault: · All Outgoing tra ff ic is per m itted. · All Inco m ing tra ff ic is d[...]

Advanced Features 65 Log Indicates w hether or not connections covered b y this rule should be logged. Buttons Use the Add button to create a ne w rule. T he other buttons - Edit , M ove , or Delete - require that a rule be selected f irst. Use the radio buttons in the le f t colu m n to select the desired rule. Outgoing Rules # For the de f ault r[...]

ADE-4300/AD W -4300 User Guide 66 Incoming Rules (Inbound Ser v ices) T his screen is displa y ed w hen the "Add" or "Edit" button f or Inco m ing Rules is clic k ed. Figure 52: Inbound Ser v ices Screen Data - Incoming Rules Screen Inbound Ser v ices Ser v ice Select the desired Service. T his deter m ines w hich pac k ets are [...]

Advanced Features 67 desired values in the "Single/Start" and "Finish" f ields to de- ter m ine the address range. · Single address - Enter the required address in the "Sin- gle/Start" f ields. Log T his deter m ines w hether pac k ets covered b y this rule are logged. Select the desired action. · A l w a ys - al w a[...]

ADE-4300/AD W -4300 User Guide 68 · ALLO W b y schedule, other w ise Bloc k Note: · An y outbound tra ff ic w hich is not bloc k ed b y rules y ou create w ill be allo w ed b y the De f ault rule. · ALLO W rules are onl y use f ul i f the tra ff ic is alread y covered b y a BLOCK rule. ( T hat is, y ou w ish to allo w a subset o f tra ff ic w hi[...]

Advanced Features 69 Fire w all Ser v ices Services are used w hen creating Fire w all Rules. I f y ou w ish to create a f ire w all rule, but the required service is not listed in the "Service" list, y ou can use this f eature to de f ine the required service or services. Once created, these services w ill be listed in the "Service&[...]

ADE-4300/AD W -4300 User Guide 70 A dd/Edit Ser v ice T his screen is displa y ed w hen the Add or Edit button on the Services screen is clic k ed. Figure 55 : A dd/Edit Ser v ice Data - A dd/Edit Ser v ice Ser v ices Name I f editing, this sho w s the current na m e o f the Service. I f adding a ne w service, this w ill be blan k , and y ou should[...]

Advanced Features 71 Options T his screen allo w s advanced users to enter or change a nu m ber o f settings. For nor m al operation, there is no need to use this screen or change an y settings. An exa m ple Options screen is sho w n belo w . Figure 56: Options Screen Data - Options Screen Internet Respond to Ping · I f chec k ed, the W ireless Ro[...]

ADE-4300/AD W -4300 User Guide 72 Schedule T his Schedule can be used f or the Fire w all Rules and the URL f ilter. Figure 57: Schedule Screen Data - Schedule Screen Schedule Day Each da y o f the w ee k can scheduled independentl y. Session 1 Session 2 T w o (2) separate sessions or periods can be de f ined. Session 2 can be le f t blan k i f not[...]

Advanced Features 73 Use this N T P Ser v er I f y ou pre f er to use a particular N T P server as the pri m ar y N T P server, chec k the chec k box "Use this N T P Server" and enter the Server's IP address in the f ields provided.. I f this setting is not enabled, the de f ault N T P Servers are used. Current T ime T his displa y s[...]

ADE-4300/AD W -4300 User Guide 74 Virtual Ser v ers T his f eature, so m eti m es called Port Forwarding , allo w s y ou to m a k e Servers on y our LAN accessible to Internet users. Nor m all y , Internet users w ould not be able to access a server on y our LAN because: · Y our Server does not have a valid external IP Address. · Atte m pts to co[...]

Advanced Features 75 na m ic IP addresses (IP address is allocated upon connection, so it m a y change each ti m e y ou connect). Figure 59: Virtual Ser v ers Screen Data - Virtual Ser v ers Screen Ser v ers Ser v ers T his lists a nu m ber o f co mm on Server t y pes. I f the desired Server t y pe is not listed, y ou can create a Fire w all Rule t[...]

ADE-4300/AD W -4300 User Guide 76 From the Internet, A LL Virtual Ser v ers ha v e the IP A ddress allocated b y y our ISP[...]

Advanced Features 77 VPN Setup T he VPN (Virtual Private Net w or k ) f eature in the ADE-4300/AD W -4300 allo w s y ou to create a VPN connection bet w een 2 ADE-4300/AD W -4300s, or a re m ote PC to estab- lish a VPN connection to the ADE-4300/AD W -4300. T o establish a VPN connection f ro m a re m ote PC to the ADE-4300/AD W -4300, y ou need su[...]

ADE-4300/AD W -4300 User Guide 78 VPN Policies Screen T his screen is displa y ed w hen y ou select VPN on the Advanced m enu. It allo w s y ou to create, m odi f y and m anage y our VPN Policies. I f y ou have not created an y policies, the Polic y T able w ill be e m pt y . Figure 60: VPN Policies Screen Data - VPN Policies Screen Polic y T able [...]

Advanced Features 79 VPN Status Vie w details o f each current VPN T unnel (connection) in a sub- w indo w . Y ou also have the option o f vie w ing the VPN Log. VPN A uto Polic y Screen T his screen is displa y ed w hen y ou clic k the Add Auto Policy button on the VPN Poli- cies screen, or w hen y ou edit an existing Auto Polic y . It allo w s y [...]

ADE-4300/AD W -4300 User Guide 80 Data - VPN- A uto Polic y Screen General Polic y Name Enter a unique na m e to identi f y this polic y . T his na m e is not supplied to the re m ote VPN endpoint. It is used onl y to help y ou m anage the policies. Remote VPN Endpoint I f the re m ote endpoint has a d y na m ic IP address, select "D y na m ic[...]

Advanced Features 81 IKE Direction T his setting is used w hen deter m ining i f the IKE polic y m atches the current tra ff ic. Select the desired option. · Responder onl y - Inco m ing connections are allo w ed, but outgoing connections w ill be bloc k ed. · Initiator and Responder - Both inco m ing and outgoing connections are allo w ed. Excha[...]

ADE-4300/AD W -4300 User Guide 82 IPSec PFS (Per- fect For w ard Secrec y) I f enabled, securit y is enhanced b y ensuring that the k e y is changed at regular intervals. Also, even i f one k e y is bro k en, subsequent k e y s are no easier to brea k . (Each k e y has no relationship to the previous k e y .) T his setting applies to both IKE and I[...]

Advanced Features 83 VPN- Manual Polic y Screen T his screen is displa y ed w hen y ou clic k the Add M anual Policy button on the VPN Policies screen, or w hen y ou edit an existing Manual Polic y . It allo w s y ou to de f ine or edit a "Manual" VPN polic y . An "Manual" VPN polic y requires that y ou enter all data on both VP[...]

ADE-4300/AD W -4300 User Guide 84 NE T BIOS Enable Chec k this i f y ou w ish NE T BIOS tra ff ic to be f or w arded over the VPN tunnel. T he NE T BIOS protocol is used b y Microso f t Net w or k ing. Local L A N Local L AN T his identi f ies w hich PCs on y our LAN are covered b y this polic y . For each selection, data m ust be provided as f oll[...]

Advanced Features 85 A uthentication Select the desired Authentication Algorith m , and enter the k e y in the f ield provided. · For MD5, the k e y should be 16 ASCII characters (32 Hex characters). · For SHA-1, the k e y should be 20 ASCII (40 Hex charac- ters).[...]

ADE-4300/AD W -4300 User Guide 86 VPN Status Screen T his screen is displa y ed w hen y ou clic k the VPN Log button on the VPN Policies screen, or on the Status screen. T his screen allo w s y ou to vie w details o f each current VPN T unnel (connection). I f there are no current connections, the status table w ill be e m pt y . Figure 63: VPN-Sta[...]

Advanced Features 87 SN M P Si m ple Net w or k Manage m ent Protocol (SNMP) is the protocol w hich enable ad m inis- trator to m onitor net w or k and band w idth usage as w ell as various other net w or k para m eters li k e s y ste m in f or m ation and port usages, providing s y ste m ad m inistrators w ith live readings and periodical usage tr[...]

88 Ch a pte r 7 Adv ance d Admi n istr a tio n This Chapter explains the settings available via the "Administration" section of the menu. O v er v ie w Nor m all y , it is not necessar y to use these screens, or change an y settings. T hese screens and settings are provided to deal w ith non-standard situations, or to provide additional o[...]

Advanced Features 89 PC Database T he PC Database is used w henever y ou need to select a PC (e.g. f or the "DMZ" PC). · It eli m inates the need to enter IP addresses. · Also, y ou do not need to use f ixed IP addresses on y our LAN. Ho w ever, i f y ou do use a f ixed IP address on so m e devices on y our LAN, y ou should enter detail[...]

ADE-4300/AD W -4300 User Guide 90 Data - PC Database Screen Kno w n PCs T his lists all current entries. Data displa y ed is name (IP Address) type . T he "t y pe" indicates w hether the PC is connected to the LAN. Name I f adding a ne w PC to the list, enter its na m e here. It is best i f this m atches the PC's "hostna m e&quo[...]

Advanced Features 91 PC Database - A d v anced T his screen is displa y ed i f the "Advanced Ad m inistration" button on the PC Database is clic k ed. It provides m ore control than the standard PC Database screen. Figure 66: PC Database ( A dmin) Data - A d v anced PC Database Kno w n PCs T his lists all current entries. Data displa y ed[...]

ADE-4300/AD W -4300 User Guide 92 M A C A ddress Select the appropriate option · A utomatic disco v ery - Select this to have the ADE- 4300/AD W -4300 contact the PC and f ind its MAC address. T his is onl y possible i f the PC is connected to the LAN and po w ered On. · M A C address is - Enter the MAC address on the PC. T he MAC address is also[...]

Advanced Features 93 Config File T his f eature allo w s y ou to do w nload the current settings f ro m the ADE-4300/AD W- 4300, and save the m to a f ile on y our PC. Y ou can restore a previousl y -do w nloaded con f iguration f ile to the ADE-4300/AD W- 4300, b y uploading it to the ADE-4300/AD W -4300. T his screen also allo w s y ou to set the[...]

ADE-4300/AD W -4300 User Guide 94 Logging T he Logs record various t y pes o f activit y on the ADE-4300/AD W -4300. T his data is use f ul f or troubleshooting, but enabling all logs w ill generate a large a m ount o f data and adversel y a ff ect per f or m ance. Since onl y a li m ited a m ount o f log data can be stored in the ADE-4300/AD W -43[...]

Advanced Features 95 Logs Include (Check- boxes) Use these chec k boxes to deter m ine w hich events are included in the log. Chec k ing all options w ill increase the si z e o f the log, so it is good practice to disable an y events w hich are not reall y required. · A ttempted access to blocked sites - I f chec k ed, atte m pted Internet accesse[...]

ADE-4300/AD W -4300 User Guide 96 E-mail T his screen allo w s y ou to E- m ail Logs and Alerts. A sa m ple screen is sho w n belo w . Figure 69: E-mail Screen Data - E-mail Screen E- M ail Notification T urn E-mail Notification on Chec k this box to enable this f eature. I f enabled, the E- m ail address in f or m ation (belo w ) m ust be provided[...]

Advanced Features 97 E-mail A lerts Send E-mail alerts immedi- ately Y ou can choose to have alerts E- m ailed to y ou, b y chec k ing the desired chec k boxes. T he ADE-4300/AD W -4300 can send an i mm ediate alert w hen it detects a signi f icant securit y incident such as · A k no w n hac k er attac k is directed at y our IP address · A co m p[...]

ADE-4300/AD W -4300 User Guide 98 Diagnostics T his screen allo w s y ou to per f or m a "Ping" or a "DNS loo k up". T hese activities can be use f ul in solving net w or k proble m s. An exa m ple Network Diagnostics screen is sho w n belo w . Figure 70: Net w ork Diagnostics Screen Data - Net w ork Diagnostics Screen Ping Ping[...]

Advanced Features 99 Remote A dministration I f enabled, this f eature allo w s y ou to m anage the ADE-4300/AD W -4300 via the Internet. Figure 71: Remote A dministration Screen Data - Remote A dministration Screen Remote A dministration Enable Remote M anagement Chec k to allo w ad m inistration/ m anage m ent via the Internet. ( T o connect, see[...]

ADE-4300/AD W -4300 User Guide 100 T o connect from a remote PC v ia the Internet 1. Ensure y our Internet connection is established, and start y our W eb Bro w ser. 2. In the "Address" bar, enter "H TT P://" f ollo w ed b y the Internet IP Address o f the ADE-4300/AD W -4300. I f the port nu m ber is not 80, the port nu m ber i[...]

Advanced Features 101 Routing O v er v ie w · I f y ou don't have other Routers or Gate w a y s on y our LAN, y ou can ignore the "Routing" page co m pletel y . · I f the ADE-4300/AD W -4300 is onl y acting as a Gate w a y f or the local LAN seg m ent, ignore the "Routing" page even i f y our LAN has other Routers. · I f[...]

ADE-4300/AD W -4300 User Guide 102 Figure 72: Routing Screen Data - Routing Screen RIP RIP Direction Select the desired RIP Direction. RIP Version Choose the RIP Version f or the Server. Static Routing Static Routing T able Entries T his list sho w s all entries in the Routing T able. · T his area sho w s details o f the selected ite m in the list[...]

Advanced Features 103 4300 itsel f . T y picall y , routers have a special entr y f or the Default Route . It should be con f igured as f ollo w s. Destination IP A ddress Nor m all y 0.0.0.0, but chec k y our router docu m enta- tion. Net w ork M ask Nor m all y 0.0.0.0, but chec k y our router docu m enta- tion. Gate w a y IP A ddress T he IP Add[...]

ADE-4300/AD W -4300 User Guide 104 local Router) Metric 2 Entr y 2 (Segment 2) Destination IP Address 192.168.2.0 Net w or k Mask 255.255.255.0 (Standard Class C) Gate w a y IP Address 192.168.0.100 Metric 3 For Router A 's Default Route Destination IP Address 0.0.0.0 Net w or k Mask 0.0.0.0 Gate w a y IP Address 192.168.0.1 (ADE-4300/AD W -43[...]

Advanced Features 105 Upgrade Firm w are T he f ir m w are (so f t w are) in the ADE-4300/AD W -4300 can be upgraded using y our W eb Bro w ser. Y ou m ust f irst do w nload the upgrade f ile, then select Upgrade Firmware on the Administration m enu. Y ou w ill see a screen li k e the f ollo w ing. Figure 74: Router Upgrade Screen T o perform the F[...]

106 Ch a pte r 8 M od e m M od e This Chapter explains configuration and operation when in " M odem" or "Bridge" mode.. O v er v ie w T here are t w o m odes available on the M ode screen. · Router - Both the ADSL Mode m and the Router f eatures are operational. In this m ode, this device can provide shared Internet Access to a[...]

Advanced Ad m inistration 107 Home Screen I f in Mode m m ode, the ho m e screen w ill loo k li k e the exa m ple belo w . Figure 75: Home Screen - M odem M ode Note that the m enu has changed, m an y o f the options in Router m ode are not avail- able. T he screens available are: · M ode - change bac k to Router m ode, i f desired. · L AN - set [...]

ADE-4300/AD W -4300 User Guide 108 M ode Screen T his screen is change bac k to Router m ode, i f desired. Figure 76: M ode Screen Data - Mode Screen De v ice Name T his f ield displa y s the current na m e o f this device. De v ice M ode Select the desired device m ode f or the router: · Router - Both the ADSL Mode m and the Router f eatures are [...]

Advanced Ad m inistration 109 Status Screen In Mode m m ode, the Status screen loo k s li k e the exa m ple belo w . Figure 77: Status Screen - Bridge M ode Data - Status Screen (Bridge Mode) S y stem De v ice Name T he current na m e o f the Router. T his na m e is also the "hostna m e" f or users w ith an "@Ho m e" t y pe conn[...]

ADE-4300/AD W -4300 User Guide 110 VC 1 Status VC 2 Status VC 3 Status VC 4 Status For each VC (Virtual Circuit), the current status is displa y ed. T his w ill be either "Enabled" or "Disabled". A DSL Details Clic k this button to open a sub- w indo w and vie w the details o f each VC (Virtual Circuit). L A N IP A ddress T he I[...]

111 Append i x A T ro u bl e s h ooti n g This Appendix covers the most likely problems and their solutions. O v er v ie w T his chapter covers so m e co mm on proble m s that m a y be encountered w hile using the ADE-4300/AD W -4300 and so m e possible solutions to the m . I f y ou f ollo w the sug- gested steps and the ADE-4300/AD W -4300 still d[...]

ADE-4300/AD W -4300 User Guide 112 Problem 2: Some applications do not run properl y w hen using the A DE- 4300/ A DW-4300. Solution 2: T he ADE-4300/AD W -4300 processes the data passing through it, so it is not transparent. For inco m ing connections, y ou m ust use the Virtual Server or Fire w all Rules to speci f y the PC w hich w ill receive t[...]

Appendi x A - Troubleshooting 113 w ireless stations. T his w ill m ean high access speed is onl y possi- ble w hen close to the AD W -4300.[...]

114 Append i x B Abo u t Wir e l e ss LANs (ADW-4300 only) This Appendix provides some background information about using W ireless LANs ( W LANs). M odes W ireless LANs can w or k in either o f t w o (2) m odes: · Ad-hoc · In f rastructure A d-hoc Mode Ad-hoc m ode does not require an Access Point or a w ired (Ethernet) LAN. W ireless Stations ([...]

Appendi x B - About W ireless LANs 115 Channels T he W ireless Channel sets the radio f requenc y used f or co mm unication. · Access Points use a f ixed Channel. Y ou can select the Channel used. T his allo w s y ou to choose a Channel w hich provides the least inter f erence and best per f or m- ance. In the USA and Canada, 11 channel are availa[...]

ADE-4300/AD W -4300 User Guide 116 Wireless L A N Configuration T o allo w W ireless Stations to use the Access Point, the W ireless Stations and the Access Point m ust use the sa m e settings, as f ollo w s: M ode On client W ireless Stations, the m ode m ust be set to "In f rastruc- ture". ( T he Access Point is al w a y s in "In f[...]

117 Append i x C Abo u t VPNs O v er v ie w A VPN (Virtual Private Net w or k ) provides a secure connection bet w een 2 points, over an insecure net w or k - t y picall y the Internet. T his secure connection is called a VPN T unnel . T here are m an y standards and protocols f or VPNs. T he standard i m ple m ented in the ADE-4300/AD W -4300 is I[...]

ADE-4300/AD W -4300 User Guide 118 Because the IKE and IPsec connections are separate, the y have di ff erent SAs (secu- rit y associations). Policies VPN con f iguration settings are stored in Policies . Note that di ff erent vendors use di ff erent ter m s. Generall y , the ter m s "VPN Polic y ", "IPSec Polic y ", and "I[...]

Appendi x C - VPNs 119 Common VPN Situations VPN Pass-through Figure 78: VPN Pass-through Here, a PC on the LAN behind the Router/Gate w a y is using VPN so f t w are, but the Router/Gate w a y is NO T acting as a VPN endpoint. It is onl y allo w ing the VPN connec- tion. · T he PC so f t w are can use an y VPN protocol supported b y the re m ote [...]

ADE-4300/AD W -4300 User Guide 120 Connecting 2 L A Ns v ia VPN Figure 80: Connecting 2 VPN Gate w a y s T his allo w s t w o (2) LANs to be connected. PCs on each endpoint gain secure access to the re m ote LAN. · T he 2 LANs MUS T use di ff erent IP address ranges. · T he VPN Policies at each end deter m ine w hen a VPN tunnel w ill be establis[...]

Appendi x C - VPNs 121 Configuration Settings - Gate w a y A Gate w a y A should be con f igured as sho w n belo w . Figure 82: Gate w a y A Configuration[...]

ADE-4300/AD W -4300 User Guide 122 Configuration Settings - Gate w a y B Gate w a y B should be con f igured as sho w n belo w . Figure 83: Gate w a y B Configuration Settings Setting L A N A Gate w a y L A N B Gate w a y Notes Polic y Na me Exa m ple Exa m ple Na m e does not a ff ect operation. Select a m eaning f ul na m e.[...]

Appendi x C - VPNs 123 Re m ote VPN Endpoint Fixed IP Address 205.17.11.43 Fixed IP Address 202.11.13.211 Other endpoint's W AN (Internet) IP address. NetBIOS Enable Enable Disable i f not required. Local LAN IP address Mask 192.168.0.0 255.255.255.0 192.168.1.0 255.255.255.0 Local Address subnet. Use a m ore restrictive de f inition i f possi[...]

124 Append i x D Sp ec ifi ca tio n s A DSL 2/2+ VPN Fire w all Router Product ADSL 2/2+ VPN Fire w all Router, 802.11g W ireless ADSL 2/2+ VPN Fire w all Router Model ADE-4300A/B, AD W -4300A/B Hard w are Standard Multi-Mode code support ANSI T 1.413 Issue 2 I T U- T G.994.1 (G.hs) rev. 3 I T U- T G.992.1(G.d m t) - Annex A (ADSL over PO T S f or [...]

Appendi x D - Specifications 125 Di m ension ( W x D x H) 199 mm x 150 mm x 33 mm Po w er 15V AC, 1A Po w er Consu m ption Maxi m u m 15 W , 51 B T U T e m perature: Hu m idity 0~40 degree C (operating), -10~70 degree C (storage) 5%~ 95% (non-condensing) E m ission FCC, CE Wireless Interface ( A DW-4300 onl y ) Standards IEEE802.11b, IEEE802.11g W [...]

ADE-4300/AD W -4300 User Guide 126 Regulator y A ppro v als FCC Statement T his equip m ent has been tested and f ound to co m pl y w ith the li m its f or a Class B digital device, pursuant to Part 15 o f the FCC Rules. T hese li m its are designed to provide reasonable protection against har m f ul inter f erence in a residential installation. T [...]