background image

T

ABLE

 

OF

 C

ONTENTS

viii

Summary of Contents for Arion 3100

Page 1: ...Arion 3100 Arion 3200 User s Manaul August 2004 Version 1 0 ...

Page 2: ...ly applies to Arion 3200 Compatible with all leading DSLAMs Firewall hacker attack logging DoS and client filtering Supports DMT line modulation Auto negotiating 10 100 Mbps Ethernet port Supports USB revision 1 1 slave for Arion 3200 PPTP L2TP and IPSec pass through Multiple user Internet access with a single user account Supports PPPoE Web based management ...

Page 3: ...ontinued compliance example use only shielded interface cables when connecting to computer or peripheral devices any changes or modifications not expressly approved by the party responsible for compliance could void the user s authority to operate this equipment This device complies with Part 15 of the FCC Rules Operation is subject to the following two conditions 1 This device may not cause harmf...

Page 4: ...ing and or making test calls to emergency numbers Remain on the line and briefly explain to the dispatcher the reason for the call Perform such activities in off peak hours such as early morning or late evenings The Telephone Consumer Protection Act of 1991 makes it unlawful for any person to use a computer or other electronic device to send any message via a telephone facsimile machine unless suc...

Page 5: ...amily standard according to EN 55024 1998 Electrostatic Discharge according to EN 61000 4 2 1995 Contact Discharge 4 kV Air Discharge 8 kV Radio frequency electromagnetic field according to EN 61000 4 3 1996 80 1000 MHz with 1 kHz AM 80 Modulation 3 V m Electrical fast transient burst according to EN 61000 4 4 1995 AC DC power supply 1 kV Data Signal lines 0 5 kV Surge immunity test according to E...

Page 6: ...geren Zeitraum nicht benutzt sollten Sie es vom Stromnetz trennen Somit wird im Falle einer Überspannung eine Beschädigung vermieden 12 Durch die Lüftungsöffnungen dürfen niemals Gegenstände oder Flüssigkeiten in das Gerät gelangen Dies könnte einen Brand bzw elektrischen Schlag auslösen 13 Öffnen sie niemals das Gerät Das Gerät darf aus Gründen der elektrischen Sicherheit nur von authorisiertem S...

Page 7: ... Phone Line Configuration 2 8 Attach to Your Network Using Ethernet Cabling 2 10 Connect the Power Adapter 2 11 USB Driver Installation 2 11 Windows 98 Me 2000 Driver Installation 2 12 Windows XP Driver Installation 2 16 3 Configuring Client PC 3 1 TCP IP Configuration 3 1 Configuring Your Computer in Windows 95 98 Me 3 2 Configuring Your Computer in Windows NT 4 0 3 9 Disable HTTP Proxy 3 14 Conf...

Page 8: ...n Changes 4 8 System Settings 4 9 Time Settings 4 9 Password Settings 4 10 Remote Management 4 11 DNS 4 12 WAN 4 13 ATM Interface 4 13 Clone MAC Address 4 16 LAN 4 17 NAT 4 18 Address Mapping 4 19 Virtual Server 4 20 Special Applications 4 21 NAT Mapping Table 4 22 Routing 4 23 Static Route 4 23 RIP Routing Information Protocol Parameter 4 24 Routing Table 4 26 Firewall 4 27 Access Control 4 28 Ac...

Page 9: ...onfiguration Tools 4 46 Firmware Upgrade 4 47 Reset 4 48 Status 4 49 A Troubleshooting A 1 B Cables B 1 Ethernet Cable B 1 Specifications B 1 Wiring Conventions B 1 RJ 45 Port Ethernet Connection B 2 Pin Assignments B 3 ADSL Cable Connection B 5 Specifications B 5 Wiring Conventions B 5 C Specifications C 1 Glossary ...

Page 10: ...TABLE OF CONTENTS viii ...

Page 11: ...cal area network LAN to the Internet For those who want to surf the Internet in the most secure way this router provides a convenient and powerful solution About the ADSL Router The ADSL Router provides Internet access to multiple users by sharing a single user account This new technology provides many secure and cost effective functions It is simple to configure and can be up and running in minut...

Page 12: ...ges intrusion detection and NAT NAT also enables multi user Internet access via a single user account and virtual server functionality providing protected access to Internet services such as Web FTP email and Telnet VPN pass through IPSec ESP Tunnel mode L2TP PPTP User definable application sensing tunnel supports applications requiring multiple connections Easy setup through a Web browser on any ...

Page 13: ...ress The ADSL Router provides Internet access for up to 253 users via a single shared IP address Using only one ISP account multiple users on your network can browse the Web at the same time Virtual Server If you have a fixed IP address you can set the ADSL Router to act as a virtual host for network address translation Remote users access various services at your site using a constant IP address ...

Page 14: ... port loopback Snork Attack TCP null scan and TCP SYN flooding Virtual Private Network VPN Pass through The ADSL Router supports three of the most commonly used VPN protocols PPTP L2TP and IPSec The VPN protocols supported by the ADSL Router are briefly described below Point to Point Tunneling Protocol Provides a secure tunnel for remote client access to a PPTP security gateway PPTP includes provi...

Page 15: ...figuring the ADSL Router on page 4 1 Package Contents After unpacking the ADSL Router check the contents of the box to be sure you have received the following components Ethernet ADSL Router ARION3100 3200 Power adapter One CAT 5 Ethernet cable Telephone patch cable One driver and documentation CD This User Guide ADSL Service Ordering Guide Immediately inform your dealer in the event of any incorr...

Page 16: ...ne PC at your site for configuring the ADSL Router Hardware Description The ADSL Router contains an integrated ADSL modem and connects to the Internet or to a remote site using its RJ 11 port It can be connected directly to your PC or to a local area network using the Fast Ethernet LAN port Also you can use the USB port for connecting you PC to the Internet while retaining the RJ 45 LAN connection...

Page 17: ...Router includes an LED display on the front panel for system power and port indications that simplifies installation and network troubleshooting It also provides the one LAN port one USB connector and one ADSL port on the side panel Figure 2 1 Front and Side Panels No USB port and LED for 3100 Wired Ethernet ADSL Router Front Panel Side Panel Connectors ...

Page 18: ...98 Me 2000 XP See USB Driver Installation on page 2 11 for software installation Item Description ADSL Port ADSL port RJ 11 Connect your ADSL line to this port USB Port Connect your PC to this port Reset Button Use this button to reset the power and restore the default factory settings To reset without losing configuration settings see Reset on page 4 48 LAN Port Fast Ethernet port RJ 45 Connect d...

Page 19: ...ovided network cable When inserting an RJ 45 plug be sure the tab on the plug clicks into position to ensure that it is properly seated LED Status Description Power On The ADSL Router is receiving power Normal operation Off Power off or failure LAN On Ethernet Link Flashing The LAN port is sending or receiving data Off No Link ADSL Syn On ADSL connection is functioning correctly Flashing Startup O...

Page 20: ...until it is firmly seated in the port 3 Insert the other end of the cable into the ADSL Router ISP Settings Please collect the following information from your ISP before setting up the ADSL Router ISP account user name and password Protocol encapsulation and VPI VCI circuit numbers DNS server address IP address subnet mask and default gateway for fixed IP users only ...

Page 21: ...ember to turn off the power remove the power cord from the outlet and keep your hands dry when you install the ADSL Router Connect the ADSL Line Run standard telephone cable from the wall jack providing ADSL service to the RJ 11 port on your ADSL Router When inserting an ADSL RJ 11 plug be sure the tab on the plug clicks into position to ensure that it is properly seated If you are using splitterl...

Page 22: ...ervice provider will attach the outside ADSL line to a data voice splitter In this case you can connect your phones and computer directly to the splitter as shown below Figure 2 2 Installing with a Splitter Voice Data Residential Connection Point NID Plain Old Telephone System POTS or Ethernet hub or switch ADSL Router Splitter ...

Page 23: ...our phone system In this case you can connect your phones and computer directly to the incoming ADSL line but you will have to add low pass filters to your phones as shown below Figure 2 3 Installing without a Splitter Plain Old Telephone System POTS Filter or Ethernet hub or switch Voice Data Voice Data Data Voice ADSL Router Residential Connection Point Network Interface Device NID ...

Page 24: ... other network equipment to the hub or switch When inserting an RJ 45 connector be sure the tab on the connector clicks into position to ensure that it is properly seated Warning Do not plug a phone jack connector into an RJ 45 port This may damage the ADSL Router Instead use only twisted pair cables with RJ 45 connectors that conform with FCC standards Notes 1 Use 100 ohm shielded or unshielded t...

Page 25: ...nection with the ADSL service provider after powering up During this time the Sync indicator will flash After the ADSL connection has been established the ADSL Sync LED will stay on USB Driver Installation Before you install the software driver check your system meets the following requirements An available USB port Windows 98 Me 2000 XP have the Windows installation CD ROM ready for use during dr...

Page 26: ...ts were created in Windows 2000 Windows 98 and Windows Millennium Edition are very similar but not identical to Windows 2000 1 Insert the USB cable s Type A plug i e the flat plug into the USB port and the other end of the cable into the ADSL Router 2 Windows 2000 will automatically detect the new hardware and prompt you to install the driver Click Next to continue the installation ...

Page 27: ...USB DRIVER INSTALLATION 2 13 3 Check Specify a location 4 Insert the CD into the CD drive and type D drivers assuming D is the location of your CD drive Click OK ...

Page 28: ...INSTALLATION 2 14 5 Click Next to copy files from the CD Note Windows 98 may ask you for the Windows 98 CD If so remove the ADSL Router driver CD insert the Windows 98 CD and click OK ...

Page 29: ...USB DRIVER INSTALLATION 2 15 6 On the Completing the Found New Hardware Wizard screen click Finish to complete the driver installation ...

Page 30: ...LLATION 2 16 Windows XP Driver Installation 1 Windows XP will automatically detect the new hardware and prompt you to install the driver Check Install from a list or specific location Advanced and click Next ...

Page 31: ...USB DRIVER INSTALLATION 2 17 2 Insert the CD into the CD drive and type D drivers assuming D is the location of your CD drive Click OK ...

Page 32: ...INSTALLATION 2 18 3 Click Next to copy files from the CD ...

Page 33: ...USB DRIVER INSTALLATION 2 19 4 On the Completing the Found New Hardware Wizard screen click Finish to complete the driver installation ...

Page 34: ...INSTALLATION 2 20 ...

Page 35: ...ress determines how you need to configure your computer Depending on your operating system see this section for Windows 95 98 Me configuration Configuring Your Computer in Windows NT 4 0 on page 3 9 Configuring Your Computer in Windows 2000 on page 3 14 Configuring Your Computer in Windows XP on page 3 19 or Configuring Your Macintosh Computer on page 3 26 TCP IP Configuration To access the Intern...

Page 36: ...he ADSL Router on page 4 1 for instruction on configuring the ADSL Router Configuring Your Computer in Windows 95 98 Me DHCP IP Configuration You may find that the instructions in this section do not exactly match your version of Windows This is because these steps and screen shots were created from Windows 98 Windows 95 and Windows Millennium Edition are similar but not identical to Windows 98 1 ...

Page 37: ... window under the Configuration tab double click the TCP IP item listed for your network card 4 In the TCP IP Properties window select the IP Address tab If Obtain an IP address automatically is already selected your computer is already configured for DHCP 5 Click Cancel to close each window ...

Page 38: ...ured your computer correctly 1 On the Windows desktop click Start Run 2 Type WINIPCFG and click OK It may take a second or two for the IP Configuration window to appear In the IP Configuration window select your network card from the drop down menu Click Release and then click Renew Verify that your IP address is now 192 168 2 xxx your Subnet Mask is 255 255 255 0 and your Default Gateway is 192 1...

Page 39: ... 19 2 Check Specify an IP address on the IP Address tab Enter an IP address based on the default network 192 168 2 x where x is between 2 and 254 and use 255 255 255 0 for the subnet mask 3 In the Gateway tab add the IP address of the ADSL Router default 192 168 2 1 in the New gateway field and click Add ...

Page 40: ...SP Otherwise add specific DNS servers into the DNS Server Search Order field and click Add 5 Record the configured information in the following table TCP IP Configuration Setting IP Address ____ ____ ____ ____ Subnet Mask ____ ____ ____ ____ Primary DNS Server ____ ____ ____ ____ Secondary DNS Server ____ ____ ____ ____ Default Gateway ____ ____ ____ ____ Host Name ____ ____ ____ ____ ...

Page 41: ...our Windows 95 98 Me CD to copy some files After it finishes copying it will prompt you to restart your system Click Yes and your computer will shut down and restart After that set up other PCs on the LAN according to the procedures described above ...

Page 42: ...s The following steps are for Internet Explorer Internet Explorer 1 Open Internet Explorer 2 Click the Stop button then click Tools Internet Options 3 In the Internet Options window click the Connections tab Next click the LAN Settings button 4 Clear all the checkboxes 5 Click OK and then click OK again to close the Internet Options window Your computer is now configured to connect to the ADSL Rou...

Page 43: ... determine how your ISP issues your IP address Many ISPs issue these numbers automatically using Dynamic Host Configuration Protocol DHCP Other ISPs provide a static IP address and associated numbers which you must enter manually How your ISP assigns your IP address determines how you need to configure your computer Follow these instructions 1 On the Windows desktop click Start Settings Control Pa...

Page 44: ...the IP Address tab 5 In the Adapter drop down list be sure your Ethernet adapter is selected 6 If Obtain an IP address automatically is already selected your computer is already configured for DHCP Click Cancel to close each window 7 Windows may copy some files and will then prompt you to restart your system Click Yes and your computer will shut down and restart ...

Page 45: ...Router it needs to obtain new network settings By releasing old DHCP IP settings and renewing them with settings from your ADSL Router you will verify that you have configured your computer correctly 1 On the Windows desktop click Start Programs Command Prompt 2 In the Command Prompt window type IPCONFIG RELEASE and press the ENTER key ...

Page 46: ...ENTER key Verify that your IP Address is now 192 168 2 xxx your Subnet Mask is 255 255 255 0 and your Default Gateway is 192 168 2 254 These values confirm that your ADSL Router is functioning 4 Type EXIT and press the ENTER key to close the Command Prompt window ...

Page 47: ...5 0 for the subnet mask In the Gateway field add the IP address of the ADSL Router default 192 168 2 1 and click Add 3 On the DNS Configuration tab in the DNS Server Search Order field add the IP address for the ADSL Router and click Add This automatically relays DNS requests to the DNS server s provided by your ISP Otherwise add specific DNS servers into the DNS Server Search Order field and clic...

Page 48: ...8 Your computer is now configured to connect to the ADSL Router Configuring Your Computer in Windows 2000 DHCP IP Configuration 1 On the Windows desktop click Start Settings Network and Dial Up Connections TCP IP Configuration Setting IP Address ____ ____ ____ ____ Subnet Mask ____ ____ ____ ____ Primary DNS Server ____ ____ ____ ____ Secondary DNS Server ____ ____ ____ ____ Default Gateway ____ _...

Page 49: ...e connection status screen will open Click Properties 4 Double click Internet Protocol TCP IP 5 If Obtain an IP address automatically and Obtain DNS server address automatically are already selected your computer is already configured for DHCP If not select these options Click Cancel to close each window ...

Page 50: ... it needs to obtain new network settings By releasing old DHCP IP settings and renewing them with settings from your ADSL Router you can verify that you have configured your computer correctly 1 On the Windows desktop click Start Programs Accessories Command Prompt 2 In the Command Prompt window type IPCONFIG RELEASE and press the ENTER key ...

Page 51: ... ENTER key Verify that your IP Address is now 192 168 2 xxx your Subnet Mask is 255 255 255 0 and your Default Gateway is 192 168 2 254 These values confirm that your ADSL Router is functioning 4 Type EXIT and press the ENTER key to close the Command Prompt window ...

Page 52: ...lect Use the following DNS server addresses 4 Enter the IP address for the ADSL Router in the Preferred DNS server field This automatically relays DNS requests to the DNS server s provided by your ISP Otherwise add a specific DNS server into the Alternate DNS Server field and click OK to close the dialog boxes 5 Record the configured information in the following table TCP IP Configuration Setting ...

Page 53: ...is is so that your browser can view the ADSL Router s HTML configuration pages Determine which browser you use and refer to Internet Explorer on page 3 8 Your computer is now configured to connect to the ADSL Router Configuring Your Computer in Windows XP DHCP IP Configuration 1 On the Windows desktop click Start Control Panel ...

Page 54: ...dow click Network and Internet Connections 3 The Network Connections window will open Locate and double click the Local Area Connection icon for the Ethernet adapter that is connected to the ADSL Router 4 In the connection status screen click Properties ...

Page 55: ...21 5 Double click Internet Protocol TCP IP 6 If Obtain an IP address automatically and Obtain DNS server address automatically are already selected your computer is already configured for DHCP Click Cancel to close each window ...

Page 56: ... it needs to obtain new network settings By releasing old DHCP IP settings and renewing them with settings from your ADSL Router you can verify that you have configured your computer correctly 1 On the Windows desktop click Start Programs Accessories Command Prompt 2 In the Command Prompt window type IPCONFIG RELEASE and press the ENTER key ...

Page 57: ...P Address is now 192 168 2 xxx your Subnet Mask is 255 255 255 0 and your Default Gateway is 192 168 2 1 These values confirm that your ADSL Router is functioning Type EXIT and press the ENTER key to close the Command Prompt window Your computer is now configured to connect to the ADSL Router ...

Page 58: ...se the following DNS server addresses 5 Enter the IP address for the ADSL Router in the Preferred DNS server field This automatically relays DNS requests to the DNS server s provided by your ISP Otherwise add a specific DNS server into the Alternate DNS Server field and click OK to close the dialog boxes 6 Record the configured information in the following table TCP IP Configuration Setting IP Add...

Page 59: ...ed to verify that the HTTP Proxy feature of your web browser is disabled This is so that your browser can view the ADSL Router s HTML configuration pages Refer to Internet Explorer on page 3 8 Your computer is now configured to connect to the ADSL Router ...

Page 60: ...xactly match your operating system This is because these steps and screen shots were created using Mac OS 10 2 Mac OS 7 x and above are similar but may not be identical to Mac OS 10 2 Follow these instructions 1 Pull down the Apple Menu Click System Preferences 2 Double click the Network icon in the Systems Preferences window ...

Page 61: ... not select this Option 4 Your new settings are shown in the TCP IP tab Verify that your IP Address is now 192 168 2 xxx your Subnet Mask is 255 255 255 0 and your Default Gateway is 192 168 2 1 These values confirm that your ADSL Router is functioning 5 Close the Network window Now your computer is configured to connect to the ADSL Router ...

Page 62: ...ed This is so that your browser can view the ADSL Router s HTML configuration pages The following steps are for Internet Explorer Internet Explorer 1 Open Internet Explorer and click the Stop button Click Explorer Preferences 2 In the Internet Explorer Preferences window under Network select Proxies 3 Uncheck all checkboxes and click OK ...

Page 63: ...er such as Internet Explorer 4 0 or above Using the web management interface you may configure the ADSL Router and view statistics to monitor network activity To access the ADSL Router s management interface enter the IP address of the ADSL Router in your web browser http 192 168 2 1 The ADSL Router automatically switches to Port 88 for management access Then click LOGIN By default there is no pas...

Page 64: ...nced Setup section Setup Wizard Use the Setup Wizard if you want to quickly set up the ADSL Router Go to Setup Wizard on page 4 4 Advanced Setup Advanced Setup supports more advanced functions like hacker attack detection IP and MAC address filtering virtual server setup virtual DMZ host as well as other functions Go to Advanced Setup on page 4 7 ...

Page 65: ...sure to click the SAVE SETTINGS or NEXT button at the bottom of the page to enable the new setting Note To ensure proper screen refresh after a command entry be sure that Internet Explorer 5 0 is configured as follows Under the menu Tools Internet Options General Temporary Internet Files Settings the setting for Check for newer versions of stored pages should be Every visit to the page ...

Page 66: ...CONFIGURING THE ADSL ROUTER 4 4 Setup Wizard Getting Start Click on the Setup Wizard picture The first item in the Setup Wizard is Getting Started To configure Time Zone settings click NEXT ...

Page 67: ... select the country and the ISP Internet Service Provider Parameter Description Country Select your country Internetserviceprovider Choose your ISP Protocol Select the Internet sharing protocol you wish to use Management IP Address IP address of the device ...

Page 68: ...on Click APPLY to save your changes Your ADSL Router is now set up If you cannot make a connection to the Internet go to Troubleshooting on page A 1 Parameter Description ISP Displays ISP selected Protocol Indicates the protocol used Management IP Address IP address of the device Function Shows if DHCP is enabled or disabled ...

Page 69: ...T Shares a single ISP account with multiple users sets up virtual servers Route Sets routing parameters and displays the current routing table Firewall Configures a variety of security and specialized functions including Access Control URL blocking Internet access control scheduling Intruder detection and DMZ SNMP Community string and trap server setting ADSL Sets the ADSL operation type and shows...

Page 70: ...k the SAVE SETTINGS or NEXT button at the bottom of the page to make the new settings active Note To ensure proper screen refresh after a command entry check that Internet Explorer 5 0 is configured as follows Under the menu Tools Internet Options General Temporary Internet Files Settings the setting for Check for newer versions of stored pages should be Every visit to the page ...

Page 71: ...sed for log entries and client access control Check Enable Automatic Time Server Maintenance to automatically maintain the ADSL Router s system time by synchronizing with a public time server over the Internet Then configure two different time servers by selecting the options in the Primary Server and Secondary Server fields ...

Page 72: ...our password is lost or you cannot gain access to the user interface press the reset button colored blue on the rear panel holding it down for at least five seconds to restore the factory defaults The default is no password Enter a maximum Idle Time Out in minutes to define a maximum period of time an inactive login session will be maintained If the connection is inactive for longer than the maxim...

Page 73: ...rs on your local network However you can also manage the ADSL Router from a remote host by entering the IP address of a remote computer on this screen Check the Enabled box to enable this function Note If you check Enable and specify an IP address of 0 0 0 0 any host can manage the ADSL Router ...

Page 74: ...S Domain Name Servers are used to map a domain name e g www somesite com to the equivalent numerical IP address e g 64 147 25 20 Your ISP should provide the IP address of one or more Domain Name Servers Enter those addresses on this page ...

Page 75: ...N interface Protocols including 1483 Routing 1483 Bridging MAC Encapsulated Rouitng MER PPPoA and PPPoE with LLC SNAP and VCMux encapsulations are supported for each ATM PVC The ADSL Router supports up to 8 ATM PVCs Click on each ATM VC for WAN configuration ...

Page 76: ...the network address for each packet seen on the LAN port If the address is listed in the routing table as local it is filtered If the address is listed under the ADSL port it is forwarded Or if the address is not found then it is automatically forwarded to the default router i e the ADSL router at the head end VPI VCI See Virtual Path Identifier VPI and Virtual Circuit Identifier VCI Data flows ar...

Page 77: ... IP assigned by ISP Select Yes if the IP address was provided by your ISP IP Address If your IP address is assigned by the ISP each time you connect leave this field all zeros Otherwise enter your ISP supplied static IP address here Subnet Mask If your subnet mask is assigned by the ISP each time you connect leave this field all zeros Otherwise enter your subnet mask here Connect Type Sets connect...

Page 78: ...ING THE ADSL ROUTER 4 16 Clone MAC Address Your ISP may require that you register your MAC address with them If this is the case the MAC address of the device must be changed to the address provided by the ISP ...

Page 79: ...Address The IP address of the ADSL Router IP Subnet Mask The subnet mask of the ADSL Router DHCP Server To dynamically assign an IP address to client PCs enable the DHCP Dynamic Host Configuration Protocol Server Lease Time Set the DHCP lease time ...

Page 80: ...additional public ports to be opened for each application IP Address Pool StartIP Specify the start IP address of the DHCP pool Do not include the gateway address of the ADSL Router in the client address pool See TCP IP Configuration on page 3 1 If you attempt to include the ADSL Router gateway address 192 168 2 1 by default in the DHCP pool an error dialog box will appear If you change the pool r...

Page 81: ...se Address Mapping to allow a limited number of public IP addresses to be translated into multiple private IP addresses for use on the internal LAN network This also hides the internal network for increased privacy and security ...

Page 82: ...ding on the requested service TCP UDP port number the ADSL Router redirects the external service request to the appropriate server located at another internal IP address For example if you set Type Public Port to TCP 80 HTTP or web and the Private IP Port to 192 168 2 2 80 then all HTTP requests from outside users will be transferred to 192 168 2 2 on port 80 Therefore by just entering the IP addr...

Page 83: ...h application Specify the public port number normally associated with an application in the Trigger Port field Set the protocol type to TCP or UDP then enter the ports that the application requires The ports may be in the format 7 11 57 or in a range e g 72 96 or a combination of both e g 7 11 57 72 96 Popular applications requiring multiple ports are listed in the Popular Applications field From ...

Page 84: ...ckwards As the NAT mapping is dynamic a Refresh button is provided to refresh the NAT Mapping Table with the mots updated values The content of the NAT Mapping Table is described as follows Protocol protocol of the flow Local IP local LAN host s IP address for the flow Local Port local LAN host s port number for the flow Pseudo IP translated IP address for the flow Pseudo Port translated port numb...

Page 85: ...add a new static route to the lis Parameter Description Index Check the box of the route you wish to delete or modify Network Address Enter the IP address of the remote computer for which to set a static route Subnet Mask Enter the subnet mask of the remote network for which to set a static route Gateway Enter the WAN IP address of the gateway to the remote network ...

Page 86: ...e router If enabled this sub network information will be summarized to one piece of information covering all sub networks Table of current Interface RIP parameter Interface The WAN interface to be configured Operation Mode Disable RIP disabled on this interface Enable RIP enabled on this interface Silent Listens for route broadcasts and updates its route table It does not participate in sending ro...

Page 87: ... would cause endless retransmission of data traffic Authentication Required None No authentication Password A password authentication key is included in the packet If this does not match what is expected the packet will be discarded This method provides very little security as it is possible to learn the authentication key by watching RIP packets MD5 An algorithm that is used to verify data integr...

Page 88: ...ifies the address bits in the destination address used for routing to specific subnets Each bit that corresponds to a 1 is part of the subnet mask number each bit that corresponds to 0 is part of the host number Gateway The IP address of the router at the next hop to which frames are forwarded Interface The local interface through which the next hop of this route is reached Metric When a router re...

Page 89: ...f Death IP with zero length Smurf Attack UDP port loopback Snork Attack TCP null scan and TCP SYN flooding The firewall does not significantly affect system performance and we advise leaving it enabled to protect your network Note When you check a radio button in the Enable or disable Firewall module function field be sure to click the SAVE SETTINGS button ...

Page 90: ... the access of hosts within the local area network LAN The MAC Filtering Table allows the ADSL Router to enter up to 32 MAC addresses that are not allowed access to the WAN port The following items are on the Access Control screen 1 Click Add PC on the Access Control screen 2 Define the appropriate settings for client PC services as shown on the following screen Parameter Description Normal Filter...

Page 91: ...FIREWALL 4 29 3 Click OK and then click APPLY to save your settings Access Control Add PC ...

Page 92: ...ER 4 30 MAC Filter The ADSL Router can also limit the access of hosts within the local area network LAN The MAC Filtering Table allows the ADSL Router to enter up to 32 MAC addresses that are not allowed access to the WAN port ...

Page 93: ...he ADSL Router allows the user to block access to web sites from a particular PC by entering either a full URL address or just a keyword This feature can be used to protect children from accessing violent or pornographic web sites ...

Page 94: ...clients based on rules Each access control rule may be activated at a scheduled time Define the schedule on the Schedule Rule page and apply the rule on the Access Control page 1 Click Add Schedule Rule 2 Define the appropriate settings for a schedule rule as shown on the following screen ...

Page 95: ...FIREWALL 4 33 3 Click OK and then click APPLY to save your settings ...

Page 96: ...CONFIGURING THE ADSL ROUTER 4 34 Intrusion Detection ...

Page 97: ...re aimed at devices and networks with a connection to the Internet Their goal is not to steal information but to disable a device or network so users no longer have access to network resources The ADSL Router protects against DoS attacks including Ping of Death Ping flood attack SYN flood attack IP fragment attack Teardrop Attack Brute force attack Land Attack IP Spoofing attack IP with zero lengt...

Page 98: ... Service It is called a stateful packet inspection because it examines the contents of the packet to determine the state of the communication i e it ensures that the stated destination computer has previously requested the current communication This is a way of ensuring that all communications are initiated by the recipient computer and are taking place only with sources that are known and trusted...

Page 99: ...assword Connection Policy Fragmentation half open wait 10 sec Configures the number of seconds that a packet state structure remains active When the timeout value expires the router drops the unassembled packet freeing that structure for use by another packet TCP SYN wait 30 sec Defines how long the software will wait for a TCP session to reach an established state before dropping the session TCP ...

Page 100: ...sions Minimum number of allowed incomplete TCP UDP sessions per minute Maximum incomplete TCP UDP sessions number from same host 10 Maximum number of incomplete TCP UDP sessions from the same host Incomplete TCP UDP sessions detect sensitive time period 300 msec Length of time before an incomplete TCP UDP session is detected as incomplete Maximum half open fragmentation packet number from same hos...

Page 101: ...y from behind the firewall you can open the client up to unrestricted two way Internet access Enter the IP address of a DMZ Demilitarized Zone host on this screen Adding a client to the DMZ may expose your local network to a variety of security risks so only use this option as a last resort ...

Page 102: ...n be used to access this information Access rights to the agent are controlled by community strings To communicate with the ADSL Router the NMS must first submit a valid community string for authentication Note Up to 5 community names may be entered Parameter Description Community A community name authorized for management access Access Management access is restricted to Read Only Read or Read Wri...

Page 103: ... prevent unauthorized individuals from reading information on your system Version Sets the trap status to disabled or enabled with V1 or V2c The v2c protocol was proposed in late 1995 and includes enhancements to v1 that are universally accepted These include a get bulk command to reduce network management traffic when retrieving a sequence of MIB variables and a more elaborate set of error codes ...

Page 104: ...CONFIGURING THE ADSL ROUTER 4 42 ADSL Parameters Parameter Description Operation Mode Automatic T1 413 Issue 2 G 992 1 standard G 922 2 standard ...

Page 105: ...ADSL 4 43 Status ...

Page 106: ...re two latency paths that may be used fast and interleaved For either path a forward error correction FEC scheme is employed to ensure higher data integrity For maximum noise immunity an interleaver may be used to supplement FEC Interleaved Path FEC Correction An interleaver is basically a buffer used to introduce a delay allowing for additional error correction techniques to handle noise Interlea...

Page 107: ...ns regular ADSL frames one of which is used to provide superframe synchronization identifying the start of a superframe Some of the remaining frames are also used for special functions Received Superframes Interleaved Number of interleaved superframes received Transmitted Superframes Interleaved Number of interleaved superframes transmitted Received Superframes Fast Number of fast superframes rece...

Page 108: ...ools Check Backup and click More Configuration to save your ADSL Router s configuration to a file named config bin on your PC You can then check the Restore radio button and click More Configuration to restore the saved backup configuration file To restore the factory settings check Restore to Factory Defaults and click More Configuration You will be asked to confirm your decision ...

Page 109: ...is screen to update the firmware or user interface to the latest versions In the Upgrade Target field choose Firmware or User Interface depending on which you want to update Then click Browse to browse for the previously downloaded file ...

Page 110: ...eset Perform a reset from this page The configurations will not be changed back to the factory default settings Note If you use the reset button on the rear panel the ADSL Router performs a power reset and restores the factory settings ...

Page 111: ...STATUS 4 49 Status The Status screen displays WAN LAN connection status firmware and hardware version numbers as well as information on DHCP clients connected to your network ...

Page 112: ...settings as well as DHCP Server and Firewall status INFORMATION Displays the number of attached clients the firmware versions the physical MAC address for each media interface and for the ADSL Router as well as the hardware version and serial number ATM PVC Displays ATM connection type and status Security Log Displays illegal attempts to access your network Save Click on this button to save the se...

Page 113: ...ween the ADSL Router the external power supply and the wall outlet If the power indicator does not turn on when the power cord is plugged in you may have a problem with the power outlet power cord or external power supply However if the unit powers off after running for a while check for loose power connections power losses or surges at the power outlet If you still cannot isolate the problem then...

Page 114: ...any defective adapter or cable if necessary Network Connection Problems Cannot ping the ADSL Router from the attached LAN or the ADSL Router cannot ping any device on the attached LAN Verify that the IP addresses are properly configured For most applications you should use the ADSL Router s DHCP function to dynamically assign IP addresses to hosts on the attached LAN However if you manually config...

Page 115: ... Check that you have a valid network connection to the ADSL Router and that the port you are using has not been disabled Check the network cabling between the management station and the ADSL Router Forgot or lost the password Press the Reset button on the rear panel holding it down for at least five seconds to restore the factory defaults Troubleshooting Chart Symptom Action ...

Page 116: ...TROUBLESHOOTING A 4 ...

Page 117: ...ntions For Ethernet connections a twisted pair cable must have two pairs of wires Each wire pair is identified by two different colors For example one wire might be red and the other red with white stripes Also an RJ 45 connector must be attached to both ends of the cable Cable Types and Specifications Cable Type Max Length Connector 10BASE T Cat 3 4 5 100 ohm UTP 100 m 328 ft RJ 45 100BASE TX Cat...

Page 118: ...entation when attaching the wires to the pins Figure B 1 RJ 45 Ethernet Connector Pin Numbers RJ 45 Port Ethernet Connection Use the straight through CAT 5 Ethernet cable provided in the package to connect the Barricade to your PC When connecting to other network devices such as an Ethernet switch use the cable type shown in the following table Attached Device Port Type Connecting Cable Type MDI X...

Page 119: ...a Straight Through Wiring If the port on the attached device has internal crossover wiring MDI X then use straight through cable RJ 45 Pin Assignments Pin Number Assignment 1 Tx 2 Tx 3 Rx 6 Rx The and signs represent the polarity of the wires that make up each wire pair Straight Through Cable Pin Assignments End 1 End 2 1 Tx 1 Tx 2 Tx 2 Tx 3 Rx 3 Rx 6 Rx 6 Rx ...

Page 120: ...CABLES B 4 Crossover Wiring If the port on the attached device has straight through wiring MDI use crossover cable Crossover Cable Pin Assignments End 1 End 2 1 Tx 3 Rx 2 Tx 6 Rx 3 Rx 1 Tx 6 Rx 2 Tx ...

Page 121: ...different colors For example one wire might be red and the other red with white stripes Also an RJ 11 connector must be attached to both ends of the cable Each wire pair must be attached to the RJ 11 connectors in a specific orientation The following figure illustrates how the pins on the RJ 11 connector are numbered Be sure to hold the connectors in the same orientation when attaching the wires t...

Page 122: ... 3 Line 1 Ring Red or Blue White 4 Line 1 Tip Green or White Blue 5 Line 2 Ring Yellow or Orange White 6 Not used 1 2 3 4 5 6 Blue White White Blue R1 T1 1 2 3 4 5 6 Red Green R1 T1R2 T2 Black Yellow 1 2 3 4 5 6 Blue White White Blue R1 T1R2 T2 White Orange Orange White 6x2 Jack 6x4 Jack 6x4 Jack T Tip R Ring ...

Page 123: ...EN60950 TÜV CSA 22 2 No 950 IEEE 802 3 10 BASE T Ethernet IEEE 802 3u 100 BASE TX Fast Ethernet USB specification revision 1 1 slave Modem Standards ITU G 992 1 G dmt ITU G 992 2 G lite ITU G 994 1 G handshake ITU T 413 issue 2 ADSL full rate LAN Interface 1 RJ 45 10 BASE T 100 BASE TX port 1 USB port Auto negotiates the connection speed to 10 Mbps Ethernet or 100 Mbps Fast Ethernet and the transm...

Page 124: ... Dynamic IP Address Configuration DHCP DNS Firewall Client privileges hacker prevention and logging Stateful Packet Inspection Virtual Private Network PPTP IPSec pass through VPN pass through Internet Standards RFC 826 ARP RFC 791 IP RFC 792 ICMP RFC 768 UDP RFC 793 TCP RFC 783 TFTP RFC 1483 AAL5 Encapsulation RFC 1661 PPP RFC 1866 HTML RFC 2068 HTTP RFC 2364 PPP over ATM Temperature Operating 0 t...

Page 125: ...the capabilities of the node to which it is connected Bandwidth The difference between the highest and lowest frequencies available for network signals Also synonymous with wire speed the actual speed of the data transmission along the cable Collision A condition in which packets transmitted over the cable interfere with each other Their interference makes both signals unintelligible Collision Dom...

Page 126: ...wisted pair cable Fast Ethernet A 100 Mbps network communication system based on Ethernet and the CSMA CD access method Full Duplex Transmission method that allows two network devices to transmit and receive concurrently effectively doubling the bandwidth of that link IEEE Institute of Electrical and Electronic Engineers IEEE 802 3 Defines carrier sense multiple access with collision detection CSM...

Page 127: ...g diode used or monitoring a device or network condition Local Area Network A group of interconnected computers and support devices Media Access Control MAC A portion of the networking protocol that governs access to the transmission medium facilitating the exchange of data between network nodes MIB An acronym for Management Information Base It is a set of database objects that contains informatio...

Page 128: ...nally MDI so it can be connected with straight through twisted pair cable to any device having a crossover port MDI X Also referred to as a Daisy Chain port The RJ 45 10 100 Mbps port supports Auto MDI MDI X Switched Ports Ports that are on separate collision domains or LAN segments UTP Unshielded twisted pair cable ...

Page 129: ......

Page 130: ...Model Number ARION3100 3200 ...

Reviews: