background image

4.5.1 Virtual Server 

 

This product’s NAT firewall filters out unrecognized packets to protect your Intranet, so all hosts 

behind this product are invisible to the outside world. If you wish, you can make some of them 

accessible by enabling the Virtual Server Mapping. 

A virtual server is defined as a 

Service Port

, and all requests to this port will be redirected to the 

computer specified by the 

Server IP

.  

Virtual Server 

can work with 

Scheduling Rules

, and give 

user more flexibility on Access control. For Detail, please refer to 

Scheduling Rule

.

 

 

For example, if you have an FTP server (port 21) at 192.168.123.1, a Web server (port 80) at 

192.168.123.2, and a VPN server at 192.168.123.6, then you need to specify the following virtual 

server mapping table: 

 

Service Port 

Server IP 

Enable 

21 192.168.123.1 

80 192.168.123.2 

1723 192.168.123.6 V 

 

33

Summary of Contents for F5D9230-4

Page 1: ...nt has been tested and found to comply with the limits for a Class B digital device pursuant to Part 15 of the FCC Rules These limits are designed to provide reasonable protection against radio interf...

Page 2: ...puter 9 Chapter 4 Configuring Wireless Broadband Router 10 4 1 Login to Configure from Wizard 11 4 2 Status 13 4 4 Basic Setting 14 4 5 Forwarding Rules 32 4 6 Security Settings 36 4 7 Advanced Settin...

Page 3: ...z Firewall All unwanted packets from outside intruders are blocked to protect your Intranet z DHCP server supported All of the networked computers can retrieve TCP IP settings automatically from this...

Page 4: ...rk by analyzing the incoming and outgoing packets and letting them pass or halting them based on the IP address of the source and destination z Domain Filter Supported Let you prevent users under this...

Page 5: ...s TZO com and dhs org z SNMP Supported The router supports basic SNMP function z Routing Table Supported Now the router supports static routing z Schedule Rule supported Customers can control some fun...

Page 6: ...a a al l ll l la a at t ti i io o on n n 2 1 Panel Layout 2 1 1 Front Panel Figure 2 1 Front Panel LED Ports Port Description PWR Power inlet WAN the port where you will connect your cable or DSL mode...

Page 7: ...e WAN port is sending or receiving data WLAN Wireless activity Green Blinking Sending or receiving data via wireless Link 1 4 Link status Green On An active station is connected to the corresponding L...

Page 8: ...ion locate this product at a proper position to gain the best transmit performance Figure 2 3 Setup of LAN and WAN connections for this product 3 Setup WAN connection Prepare an Ethernet cable for con...

Page 9: ...ally that is via DHCP server of this product After installing the TCP IP communication protocol you can use the ping command to check if your computer has successfully connected to this product The fo...

Page 10: ...le e es s ss s s B B Br r ro o oa a ad d db b ba a an n nd d d R R Ro o ou u ut t te e er r r This product provides Web based configuration scheme that is configuring by your Web browser such as Netsc...

Page 11: ...e two appearances of web user interface for general users and for system administrator To log in as an administrator enter the system password the factory setting is admin in the System Password field...

Page 12: ...If the user finishes those steps and the router shows as below It means that customers can enjoy Internet 12...

Page 13: ...working status A WAN Port Status If the WAN port is assigned a dynamic IP there may appear a Renew or Release button on the Sidenote column You can click this button to renew or release IP manually B...

Page 14: ...4 4 Basic Setting Please Select Advanced Setup to Setup 14...

Page 15: ...4 4 1 Primary Setup WAN Type Virtual Computers Press Change 15...

Page 16: ...e a correct one from the following four options A Static IP Address ISP assigns you a static IP address B Dynamic IP Address Obtain an IP address from ISP automatically C Dynamic IP Address with Road...

Page 17: ...ount and password your ISP assigned to you For security this field appears blank If you don t want to change the password leave it empty 2 PPPoE Service Name optional Input the service name if your IS...

Page 18: ...time of no activity to disconnect your PPTP session Set it to zero or enable Auto reconnect to disable this feature If Auto reconnect is enabled this product will connect to ISP automatically after s...

Page 19: ...ddress the IP address of the PPTP server 3 PPTP Account and Password the account and password your ISP assigned to you If you don t want to change the password keep it empty 3 Connection ID optional I...

Page 20: ...e 3 modes to select Connect on demand The device will link up with ISP when the clients send outgoing packets Auto Reconnect Always on The device will link upw with ISP until the connection is establi...

Page 21: ...NAT feature and allows you to setup the one to one mapping of multiple global IP address and local IP address Global IP Enter the global IP address assigned by your ISP Local IP Enter the local IP add...

Page 22: ...ttings of DHCP server include the following items 1 DHCP Server Choose Disable or Enable 2 IP pool starting Address IP pool starting Address Whenever there is a request the DHCP server will automatica...

Page 23: ...SID Broadcast The router will Broadcast beacons that have some information including ssid so that The wireless clients can know how many ap devices by scanning function in the network Therefore This f...

Page 24: ...0 1 2 8 9 A B F digits 802 1X Check Box was used to switch the function of the 802 1X When the 802 1X function is enabled the Wireless user must authenticate to this router first to use the Network se...

Page 25: ...en the WPA function is enabled the Wireless user must authenticate to this router first to use the Network service RADIUS Server IP address or the 802 1X server s domain name Select Encryption and RAD...

Page 26: ...PA2 PSK AES 1 Select Pre share Key Mode If you select HEX you have to fill in 64 hexadecimal 0 1 2 8 9 A B F digits If ASCII the length of Pre share key is from 8 to 63 2 Fill in the key Ex 12345678 2...

Page 27: ...the Network service RADIUS Server IP address or the 802 1X server s domain name Select RADIUS Shared Key If you select HEX you have to fill in 64 hexadecimal 0 1 2 8 9 A B F digits If ASCII the length...

Page 28: ...atically which Security type the client uses to encrypt 1 Select Pre share Key Mode If you select HEX you have to fill in 64 hexadecimal 0 1 2 8 9 A B F digits If ASCII the length of Pre share key is...

Page 29: ...ct automatically which Security type Wpa psk version 1 or 2 the client uses to encrypt IP address or the 802 1X server s domain name Select RADIUS Shared Key If you select HEX you have to fill in 64 h...

Page 30: ...n as defined by the IEEE802 11 standard has been made available Using WDS it is possible to wirelessly connect Access Points and in doing so extend a wired infrastructure to locations where cabling is...

Page 31: ...4 4 4 Change Password You can change Password here We strongly recommend you to change the system password for security reason 31...

Page 32: ...4 5 Forwarding Rules 32...

Page 33: ...requests to this port will be redirected to the computer specified by the Server IP Virtual Server can work with Scheduling Rules and give user more flexibility on Access control For Detail please ref...

Page 34: ...Special Applications fails to make an application work try setting your computer as the DMZ host instead 1 Trigger the outbound port number issued by the application 2 Incoming Ports when the trigger...

Page 35: ...ternet telephony and other special applications NOTE This feature should be used only when needed Non standard FTP port You have to configure this item if you want to access an FTP server whose port n...

Page 36: ...4 6 Security Settings 36...

Page 37: ...vers or DMZ host only You can select one of the two filtering policies 1 Allow all to pass except those match the specified rules 2 Deny all to pass except those match the specified rules You can spec...

Page 38: ...o prefix indicates both TCP and UDP are defined An empty implies all port addresses Packet Filter can work with Scheduling Rules and give user more flexibility on Access control For Detail please refe...

Page 39: ...ing Others are all blocked Example 2 1 2 3 100 1 2 3 119 They can do everything except read net news port 119 and transfer files via FTP port 21 Others are all allowed After Inbound Packet Filter sett...

Page 40: ...149 They are allowed to send mail port 25 receive mail port 110 and browse Internet port 80 port 53 DNS is necessary to resolve the domain name 192 168 123 10 192 168 123 20 They can do everything bl...

Page 41: ...2 168 123 100 192 168 123 119 They can do everything except read net news port 119 and transfer files via FTP port 21 Others are allowed After Outbound Packet Filter setting is configured click the sa...

Page 42: ...when someone accesses the specific URLs Privilege IPAddresses Range Setting a group of hosts and privilege these hosts to access network without restriction Domain Suffix A suffix of URL to be restric...

Page 43: ...will be record in log file 2 URL include www sina com will not be blocked but the action will be record in log file 3 URL include www google com will be blocked but the action will not be record in l...

Page 44: ...nput a keyword only In other words Domain filter can block specific website while URL Blocking can block hundreds of websites by simply a keyword URL Blocking Enable Checked if you want to enable URL...

Page 45: ...will be record in log file 2 URL include sina will be blocked but the action will be record in log file 3 URL include cnnsi will not be blocked but the action will be record in log file 4 URL include...

Page 46: ...le the controlling of which wired and wireless clients can connect to this device If a client is denied to connect to this device it means the client can t access to the Internet either Choose allow o...

Page 47: ...care its IP address C When Connection control is checked check C will allow the corresponding client to connect to this device A When Association control is checked check A will allow the correspondi...

Page 48: ...ents not listed in the Control table are denied to associate to the wireless LAN 4 Clients 1 and 3 have fixed IP addresses either from the DHCP server of this device or manually assigned ID 1 00 12 34...

Page 49: ...to perform administration task from remote host If this feature is enabled only the specified IP address can perform remote administration If the specified IP address is 0 0 0 0 any host can connect t...

Page 50: ...to detect if this packet is valid DoS Attack Detection When this feature is enabled the router will detect and log the DoS attack comes from the Internet Currently the router can detect the following...

Reviews: