ActionTec Broadband Router RI408, User Manual

Page 1: ...Broadband Router Model RI408 Firmware Version 4 0 16 1 44 11 User Manual Ver 1 0 Solutions for the Digital Life...

Page 2: ...Network 16 4 Using Network Connections 23 Network Home Office 24 Ethernet Connection 30 Broadband Ethernet Connection 33 WAN PPPoE 39 5 Configuring the Router s Security 45 General 47 Access Control...

Page 3: ...ution Protocol Table 101 Routing 101 Network Objects 103 Firmware Restore 105 Dynamic DNS 105 IP Address Distribution 107 DNS Server 111 Remote Administration 113 Protocols 114 8 Monitoring the Router...

Page 4: ...want to take your home or office networking to the next level the Actiontec Broadband Router is sure to be one of the keys to your success Package Contents s Actiontec Broadband Router s Black Power...

Page 5: ...ty including Fully customizable firewall with Stateful Packet Inspection Content filtering with URL keyword based filtering parental control customizable filtering policies per computer and E mail not...

Page 6: ...using HTTPS Reverse NAT Static NAT Static routing Time zone support VLAN multicast support VPN IPSec VPN passthrough only Getting to Know the Router This section contains a quick description of the Ro...

Page 7: ...hould be contacted Broadband Light The Broadband light illuminates when the Router is connected to a the Internet via Ethernet If flashing data traffic is passing across the port Internet Light When t...

Page 8: ...ports Broadband Port The Broadband port connects the Router to the ISP using an Ethernet cable Reset Button To restore the Router s factory default settings press and hold the Reset button for approx...

Page 9: ...nd off Power Port The Power port connects the Router to an electrical wall outlet via the Power cord MCaution Do not unplug the Power cord from the Router dur ing the reset process Doing so may result...

Page 10: ...the setup procedure described below to verify all communication parameters are valid and the physical cable connections are correct Setting Up the Router There are three parts to setting up the Route...

Page 11: ...n the back of the Router 9 Plug the other end of the white Ethernet cable into the high speed Ethernet jack 10 Make sure the WAN light on the front of the Router glows steadily green Note If the WAN l...

Page 12: ...he new user name and password down on a piece of paper and keep it in a safe place since they will be needed to access the Router s MegaControl Panel in the future 4 The Home screen of the MegaControl...

Page 13: ...e Home screen The Advanced screen appears 7 Click Date and Time The Date and Time screen appears 8 In the Localization section of the screen select the correct time zone from the Time Zone drop down l...

Page 14: ...ed with a stati cally defined IP address and DNS address or instructed to automatically obtain an IP address using the Network DHCP server The Router is set up by default with an active DHCP server an...

Page 15: ...in the Control Panel The Network window appears 2 In the Protocol tab select Internet Protocol TCP IP then click Properties 3 In the IP Address tab click the Obtain an IP address automatically radio b...

Page 16: ...n Menu that occupies the top of the screen Below that the screen is divided into three columns Network Status My Network and Entertainment General Information w Main Menu The Main Menu contains links...

Page 17: ...ys the connection type name IP address and MAC Media Access Control address of all devices connected to the Router s network The icon associated with the device will be displayed normally signifying a...

Page 18: ...ere some basic network settings can be configured Accessing My Network To access My Network click on the My Network icon The My Network screen appears On the far right side of the screen in the Connec...

Page 19: ...iles appears on the screen Website Blocking Website blocking is used to prevent a device on the network from accessing par ticular websites on the Internet To set up website blocking on a networked de...

Page 20: ...ebsite do the following Use a web browser to verify the website is available If it is the website address was entered incorrectly See Modifying a Website Address below If the website is not available...

Page 21: ...he Protocol drop down menu The Edit Service screen appears Define the service then click OK The service will then be automatically added to the top section of the Add Access Control Rule screen and wi...

Page 22: ...hen click Enable Applications The Port Forwarding screen appears 1 Click Add The Add Port Forwarding Rule screen appears 2 Enter the local IP address or the host name of the computer providing the ser...

Page 23: ...o work inside the local network Data packets associated with these applications contain information that allows them to be routed correctly An ALG is needed to handle these packets and ensure they rea...

Page 24: ...the results are displayed in the Diagnostics screen Rename This Device To rename a networked device locate the device in the My Network column then click Rename This Device The Rename Device screen a...

Page 25: ...e network after it has been disconnected is configured in the Timeout for Inactive Device screen To display the screen click Timeout for Inactive Device Select the timeout period from the Timeout drop...

Page 26: ...new connections MCaution The settings covered in this chapter should be config ured by experienced network technicians only To access the Router s network connections click Network Connections at the...

Page 27: ...screen are disabling the connection by clicking Disable or renaming the connec tion by entering a new name in the Rule Name text box Note When a network is disabled its formerly underlying devices wi...

Page 28: ...en should this rule occur Displays when the rule is active To schedule rules see the Advanced Settings chapter Network Select the type of connection being configured from the drop down list options Br...

Page 29: ...ridge The Bridge section of the Configure Network Home Office screen is used to specify which networks can join the network bridge Note When a network is disabled its formerly underlying devices inher...

Page 30: ...ver parameters DHCP automatically assigns IP addresses to net work devices If enabled make sure to configure the network devices as DHCP Clients There are three options in this section Disabled DHCP S...

Page 31: ...host name is not provided by the user DHCP Relay Select this option to have the Router function as a DHCP relay and enter the IP address in the screen that appears IP Address Distribution According to...

Page 32: ...device metric is a value used by the Router to determine whether one route is superior to another considering parameters such as bandwidth and delay time 3 Click in the Default Route check box to defi...

Page 33: ...ed at the bottom of the screen to reveal the Ethernet link below Network Home Office to generate the Ethernet Properties screen This screen displays a list of the connection s properties The only modi...

Page 34: ...g the default values in this section unless familiar with networking concepts Status Displays the connection status of the Ethernet switch When should this rule occur Displays when the rule is active...

Page 35: ...abled check box to activate the Router s firewall on the Ethernet connection Actiontec does NOT recommend activating this feature Additional IP Addresses Clicking New IP Address generates the Addition...

Page 36: ...onnections screen to generate the Broadband Connection Ethernet Properties screen This screen displays a list of the connection s properties The only modifica tions that can be made from this screen a...

Page 37: ...hedule Displays when the rule is active To configure rules see the Advanced Settings chapter Network Select the type of connection being configured from the drop down list options Network Home Office...

Page 38: ...ppropriate DHCP Lease button Use the Following IP Address Select this option if the connection uses a perma nent static IP address The ISP should provide this address along with a subnet mask address...

Page 39: ...dress must be 192 168 1 2 or higher 3 Enter the end of the IP address range used to automatically issue IP address es in the End IP Address text boxes 4 Enter the subnet mask address in the Subnet Mas...

Page 40: ...level in the appropriate text boxes Routing The Router can be configured to use static or dynamic routing Dynamic rout ing automatically adjusts how packets travel on the network while static routing...

Page 41: ...sting Routing Table Clicking New Route generates the New Route window where a new route can be configured Internet Connection Firewall Click in the Enabled check box to activate the Router s firewall...

Page 42: ...bles a point to point connection to be established in the normally multipoint archi tecture of Ethernet A discovery process in PPPoE determines the Ethernet MAC address of the remote device in order t...

Page 43: ...t of the Configure WAN PPPoE screen displays general communica tion parameters Actiontec recommends not changing the default values in this section unless familiar with networking concepts Status Disp...

Page 44: ...g connection above which the proto col initiates from the drop down list which displays all possible underlying devices PPP Configuration Point to Point Protocol PPP is the most popular method for tra...

Page 45: ...r in plain text PAP however is not a secure authentication protocol Man in the middle attacks can easily determine the remote access client s password PAP offers no protection against replay attacks r...

Page 46: ...ss Select this option to configure the Router to use a permanent static IP address The ISP should provide this address DNS Server The Domain Name System DNS is the method by which website or domain na...

Page 47: ...PT if the local network contains multiple devices a topol ogy that necessitates port translation in addition to address translation Device Metric The device metric is a value used by the Router to det...

Page 48: ...y The firewall provides both the security and flexibility home and office users seek It provides a managed professional level of network security while enabling the safe use of interactive application...

Page 49: ...traffic arriving at the Router which does not belong to a known session Port Triggering define port triggering entries to dynamically open the firewall for some protocols or ports Remote Administratio...

Page 50: ...service the firewall receives whether originating in the Internet or from a computer in the local net work is checked against the firewall rules to determine whether the request should be allowed to...

Page 51: ...in the Port Forwarding DMZ host and Remote Access screens Unrestricted All services are permitted except as configured in the Access Control screen Minimum Security Unrestricted Permits full access fr...

Page 52: ...ven the whole network from accessing certain services on the Internet For example one computer can be prohibited from surfing the Internet another computer from transferring files using FTP and the wh...

Page 53: ...screen The Access Control screen appears Note The Allowed section is only visible when the firewall is set to Maximum 2 Click Add in the Blocked section of the screen The Add Access Control Rule scre...

Page 54: ...ave the changes The Access Control screen will display a sum mary of the new access control rule Note To block a service not included in the list select Specify Protocol from the Protocol drop down me...

Page 55: ...n the network Port forwarding sometimes referred to as local servers supports both of these functions To grant Internet users access to servers inside the local network each service pro vided as well...

Page 56: ...plications such as FTP TFTP PPTP and H323 require the support of special specific Application Level Gateway ALG modules in order to work inside the local network Data packets associated with these app...

Page 57: ...t is not protected by the firewall and may be vulnerable to attack Designating a DMZ host may also put other computers in the local network at risk When designating a DMZ host consider the security im...

Page 58: ...ince it conflicts with the following default firewall settings The firewall blocks inbound traffic by default The server replies to the Router s IP and the connection is not sent back to the host sinc...

Page 59: ...ple to set up port triggering for the scenario laid out on the previous page the service ports would be set to UDP and 2222 while the opened ports would be set to UDP and 3333 Remote Administration Th...

Page 60: ...ettings Local IP addresses and other settings can also be changed making it difficult or impossible to access the Router from the local network Therefore remote adminstration access to Telnet or MegaC...

Page 61: ...cking in any Security screen To activate website blocking click in the Enable Website Blocking check box To add a new website to the table 1 Click Add The Blocked Website screen appears 2 Enter the we...

Page 62: ...ite is successfully located Resolved appears in the Status column If not Hostname Resolution Failed appears Click Refresh to update the status if necessary If the Router fails to locate the website do...

Page 63: ...rver to have an unregistered private IP address and still be reachable over the Internet To do this 1 Select Static NAT from any Security screen The Static NAT screen appears 2 Click Add The Add Stati...

Page 64: ...r the firewall s behavior Specific input and output rules can be defined the order of logically similar sets of rules controlled and distinctions made between rules that apply to Internet and local ne...

Page 65: ...ll in the connection settings screen is unchecked Remote administration rules from the remote administration tab DMZ host rules from the DMZ tab Final rules Outbound Packets Output Rules Sets Initial...

Page 66: ...To add an advanced filtering rule define the following rule parameters Matching To apply a firewall rule a match must be made between IP addresses or ranges and ports Use the Source Address and Desti...

Page 67: ...Stateful Packet Inspection SPI Accept Packet Allow access to packets that match the source and des tination IP addresses and protocol ports defined in upper section of the screen The data transfer se...

Page 68: ...n and system start up To access the security log select Security Log from any Security screen The Security Log screen appears Time The time based on the Router s date and time settings the event occur...

Page 69: ...col packet has been accepted rejected Illegal packet options the options field in the packet s header is either ille gal or forbidden Fragmented packet a fragment has been rejected WinNuke protection...

Page 70: ...DHCP response depends on the distribution DHCP relay agent a DHCP relay packet has been received depends on the distribution IGMP packet an IGMP packet has been accepted Multicast IGMP connection a m...

Page 71: ...o small Fragmented packet header too big a packet has been blocked because after defragmentation the header was too big Fragmented packet bad align a packet has been blocked because after defragmentat...

Page 72: ...ull No connection created a connec tion has not been created because the connection pool is full NAT Error No free NAT IP no free NAT IP so NAT has failed NAT Error Conflict Mapping already exists a c...

Page 73: ...successful attempt to establish an inbound connection to the local network Accepted Outgoing Connections activating this check box generates a log message for each successful attempt to establish an...

Page 74: ...ration Attempts check box to write a log mes sage for each remote administration connection attempt whether successful or not 5 Click in the Connection States check box to track connection handling by...

Page 75: ...72 Actiontec Broadband Router User Manual This page left intentionally blank...

Page 76: ...Parental Controls The Router s Parental Control service is provided by Surf Control http www surfcontrol com a company specializing in Internet content filtering A subscription to this service must be...

Page 77: ...tent Filtering To disable the Router s Web content filtering 1 From the MegaControl Panel click Parental Control 2 Clear the Enable Web Content Filtering check box 3 Click OK Creating a Filtering Poli...

Page 78: ...hapter 6 Using Parental Controls 2 Click Filtering Policy from the list on the left side of the screen The Filtering Policy screen appears 3 Click Add a Policy to generate another Filtering Policy scr...

Page 79: ...URL Filtering section of the Policy Filtering screen To do this 1 Select either Block Access to These Websites and URL Keywords or Allow Access to These Websites and URL Keywords from the drop down l...

Page 80: ...LAN Computer The LAN Computer Policy screen appears 2 Enter the name or IP address of the networked computer to which a policy will be applied 3 Select the policy to apply from the Policy drop down li...

Page 81: ...to block or allow access to all sites 1 Click Parental Control in the Home screen 2 Click Advanced Options from the left side of the screen 3 Click in the Block All Web Access on Failure to Contact Pr...

Page 82: ...s attempts Accessed URLs Blocked URLs URLs that were accessed from cache To view content filtering statistics 1 Click Parental Control in the Home screen 2 Click Statistics from the left side of the G...

Page 83: ...80 Actiontec Broadband Router User Manual This page left intentionally blank...

Page 84: ...nced Settings click Advanced at the top of the Home screen which generates the Advanced screen The following settings are explained in this chapter About view information about the Router Configuratio...

Page 85: ...routing policies Network Objects create and manage network objects discrete LAN subsets Firmware Restore restores firmware to previous version loaded in flash memory Dynamic DNS configure Dynamic DNS...

Page 86: ...File feature to view save and load configuration files which are used to backup and restore the Router s current configuration To do this 1 Click Configuration File in the Advanced screen The Configur...

Page 87: ...ettings If the Router s factory default settings need to be restored to build a new network from the beginning for example use the following procedure 1 Click Restore Defaults in the Advanced screen T...

Page 88: ...s the number of packets transmitted and received round trip time and success status To diagnose network connectivity 1 Click Diagnostics from the Advanced screen The Diagnostics screen appears 2 Enter...

Page 89: ...s When replacing another network device with the Router the installation process can be simplified by copying the MAC address of the existing computer to the Router To do this 1 Click MAC Cloning in t...

Page 90: ...ere various system and management parameters can be configured System Use the System section of this screen to configure the following two option Broadband Router s Hostname Specify the Router s host...

Page 91: ...orce users who try to access the MegaControl Panel from the LAN local area network to enter the password Warn User Before Network Configuration Changes Click in this check box to activate user warning...

Page 92: ...buffer capacity reached to trigger an E mail notification System Log Buffer Size Enter the size of the system log buffer in this text box Remote System Notify Level This feature is used to specify the...

Page 93: ...nd Information Outgoing Mail Server Use this section to configure the outgoing mail server options This server is used format and send system and security log E mail notifications Server Enter the hos...

Page 94: ...t of time in seconds before the Router stops attempting to establish a broadband PPP connection DHCP Timeout Enter the amount of time in seconds before the Router stops attempting to establish a broad...

Page 95: ...les every five minutes Any old and not used UPnP defined service is removed unless any user defined rule depends on it Since there is a maximum limitation on the number of UPnP defined services 256 en...

Page 96: ...ing from a local computer use a software image file pre down loaded to the computer s disk drive or located on the accompanying evalua tion CD Upgrading from the Internet use this method to upgrade th...

Page 97: ...te to complete At the conclusion of the upgrade process the Router automatically reboots The new firmware will run maintaining any custom configurations and settings Upgrading From the Internet The Ro...

Page 98: ...ed If Automatically Check Disabled is selected the Router will not automatically check for firmware upgrades Manual Checking and Upgrading To manually upgrade the Router s firmware 1 Click Check Now i...

Page 99: ...sure the Router s date and time are set correctly To do this see the Date and Time section in this chapter 2 Click Scheduler Rules in the Advanced screen The Scheduler Rules screen appears 3 Click Ad...

Page 100: ...of the week by clicking in the appropriate text boxes 8 If applicable click New Hours Range Entry to define an active inactive hourly range The Edit Hour Range screen appears Enter a start and end ti...

Page 101: ...zone from the drop down list The Router can automati cally detect daylight saving setting for selected time zones If the daylight saving settings for a time zone are not automatically detected the fo...

Page 102: ...me Protocol radio button 3 Specify how often to perform the update in the Update Every text box 4 Define time server addresses by clicking Add on the bottom of the Automatic Time Update section and en...

Page 103: ...cation The available types of events are System or Security events The available severity of events are Error Warning and Information To configure E mail notification for a specific user 1 Make sure a...

Page 104: ...ARP Table screen This screen displays the IP and MAC addresses of each DHCP connection Routing Access the routing table rules by clicking Routing in the Advanced screen The Routing screen appears Rou...

Page 105: ...nge occurs in the network A multicast is simply a message that is sent simultaneously to a pre defined group of recipients When joining a multicast group all messages addressed to the group will be re...

Page 106: ...ings such as configuring system rules can be applied to all the devices defined as part of the network object at once For example instead of setting the same website filtering configuration to five co...

Page 107: ...ject in the Description text box 4 Click Add The Edit Item screen appears 5 Select the type of network object type from the Network Object Type list box Options include IPaddress IPSubnet IPRange MACA...

Page 108: ...stname allowing a computer on the network to be more easily accessible from the Internet Typically when connecting to the Internet the service provider assigns an unused IP address from a pool of IP a...

Page 109: ...dyndns org Setting up Dynamic DNS To set up Dynamic DNS on the Router click Dynamic DNS in the Advanced screen The Dynamic DNS screen appears Configure the following parameters Connection To Update Se...

Page 110: ...heck box to designate the mail exchange server to be a backup server IP Address Distribution The Router s DHCP server makes it possible to easily add computers configured as DHCP clients to the networ...

Page 111: ...ected to the Router Defines the range of IP addresses that can be allocated in the network Defines the length of time for which dynamic IP addresses are allocated Provides the above configurations for...

Page 112: ...ay or Disable 3 Complete the following fields Start IP Address Range End IP Address Range determines the number of hosts connected to the network in this subnet Start specifies the first IP address as...

Page 113: ...on the network Provide host name if not specified by client when activated the Router assigns the client a default name if the DHCP client does not have a host name IP Address Distribution Option 60...

Page 114: ...MAC address installed on the network com puter If this network card is replaced the device s entry in the DHCP Connections list must be updated with the new network card s MAC address To remove a host...

Page 115: ...a computer to have multiple host names Permits a host name to have multiple IPs needed if a host has multiple net work cards The DNS server does not require configuration However the list of computer...

Page 116: ...the Action column The DNS Entry screen appears 2 If the host was manually added to the DNS Table its host name and or IP address can be modified Otherwise only modify its host name 3 Click OK to save...

Page 117: ...cols can be used in various security features such as Access Control and Port Forwarding New protocols can be added to support new applications or existing ones can be edited when needed To define a p...

Page 118: ...ice Description text box then click Add Service Ports The Edit Service Server Ports screen appears 4 Select a protocol from the Protocol drop down list To create a new protocol select Other After sele...

Page 119: ...116 Actiontec Broadband Router User Manual This page left intentionally blank...

Page 120: ...log Amount of time since the Router was last started Monitoring Connections 1 Click System Monitoring at the top of the Home screen to display the Full System System wide Monitoring of Connections sc...

Page 121: ...twork and between the local network and the Internet You can view up to the second statistical infor mation about data received from and transmitted to the Internet and about data received from and tr...

Page 122: ...ystem Log displays a list of the most recent activities of the Router Click System Log to generate the System Log screen Router Status To display the amount of time since the Router was last started c...

Page 123: ...120 Actiontec Broadband Router User Manual This page left intentionally blank...

Page 124: ...r restore the default settings to the Router LAN Firewall If the firewall setting for the local network is set to maximum no computers from the network will be able to connect to the Router To gain ac...

Page 125: ...e IP settings are correct Ensure the Router is on and connected properly Verify the Router s settings are the same as the computer I ve run out of Ethernet ports on my Router How do I add more compute...

Page 126: ...e then type ipconfig renew Windows XP Unplug the Ethernet cable and plug it back in I cannot access the Router s MegaControl Panel What should I do If you cannot access the Router s MegaControl Panel...

Page 127: ...marks When logging into the Router the first time or after restoring the Router s default settings the user is asked to create a new user name and password after entering the default user name and pas...

Page 128: ...s is achieved by shaping the traffic and process ing higher priority traffic before lower priority traffic I STOP Do not change any Quality of Service settings unless instructed to do so by the ISP Tr...

Page 129: ...param eters both inbound and outbound Connection based QoS also allows inheriting QoS parameters by some of the applications that open subsequent connections For instance QoS rules can be defined on...

Page 130: ...for QoS input rules and the other for QoS output rules which are for pri oritizing the inbound and outbound traffic respectively Each section lists all the devices on which rules can be set Rules can...

Page 131: ...reshes and an Add link appears 2 Click Add and add a new protocol see the Advanced Settings chapter to learn how to add a protocol Note that clicking Add is equivalent to click ing New Entry in the Pr...

Page 132: ...of packets traffic shaping provides more sophisticated definitions such as Bandwidth limit for each device Bandwidth limit for classes of rules Prioritization policy TCP serialization on a device Addi...

Page 133: ...his example select the default WAN device option 4 Click OK The Edit Device Traffic Shaping screen appears Configure the following parameters Tx Bandwidth Tx bandwidth limits the Router s bandwidth tr...

Page 134: ...fic types Such a portion is known as a shaping class When not used by its predefined traffic type or owner for example VoIP the class will be available to all other traffic However when needed the ent...

Page 135: ...list The screen will refresh adding another Kbits s text box Enter the desired maximum allowed bandwidth Rx Bandwidth In the same manner Rx bandwidth is the reserved reception bandwidth which can also...

Page 136: ...effect Each class can have out bound and or inbound rules for outgoing and incoming traffic respectively For example all outgoing packets from computer A in the network can be defined as belonging to...

Page 137: ...ule The screen will refresh allowing a selection of one of eight priority levels zero being the lowest and seven the highest each priority level is mapped to low medium high priority This sets the pri...

Page 138: ...the same time Downloading the file is distinguished by small requests followed by very large responses This may result in blocking HTML traffic at the ISP A solution for such a situation is limiting t...

Page 139: ...en appears 2 To edit an existing entry click the appropriate icon in the Action column To add a new entry click Add In either case the Edit DSCP Settings screen appears 3 Configure the following param...

Page 140: ...is the value for unassigned traffic and used as a best effort default invoked automatically when no other value has been set A packet can match more than one rule This means that The first class rule...

Page 141: ...amount of packets sent dropped or delayed are just a few of the parameters monitored per each shaping class To view class statistics click Quality of Service at the top of the Home screen then click...

Page 142: ...nd Router Standards IEEE 802 3x IEEE 802 3u IP IP version 4 Firewall ICSA certified Speed LAN Ethernet 10 100 Mbps auto sensing Cabling Type Ethernet 10BaseT UTP STP Category 3 or 5 Ethernet100BaseTX...

Page 143: ...C 3A Certifications FCC Part 15 UL 60959 1 Operating Temperature 0 C to 40 C 32 F to 104 F Storage Temperature 20 C to 70 C 4 F to 158 F Operating Humidity 8 to 93 non condensing Storage Humidity 5 to...

Page 144: ...by turning the equipment off and on the user is encouraged to try to correct the interference by implementing one or more of the following measures s Reorient or relocate the receiving antenna s Incr...

Page 145: ...ire ments the antenna used for this transmitter must be installed to provide a separation distance of at least 20 cm from all persons and must not be co located or operating in conjunction with any ot...