manualshive.com logo in svg

CastleNet Technology Inc. ASW802, User Manual

Share
Download
CastleNet Technology Inc. ASW802 User Manual Download Page 93

SOHOSpeed ADSL2/2+ Ethernet/Wireless Gateway User’s Manual 

92

3.7.21 SSH Access Control 

The SSH Access Control page allows you to access the SOHOSpeed remotely via SSH from 
the WAN side. 

The configuration of a WAN IP address for SSH access control is very similar to the 
configuration of a WAN IP address for Web access control. Refer to ‘‘Web Access Control 
Page’’ for field descriptions and configuration procedures. 

Summary of Contents for ASW802

Page 1: ...thernet Wireless Gateway User s Manual 0 S SO OH HO OS Sp pe ee ed d A AD DS SL L2 2 2 2 E Et th he er rn ne et t W Wi ir re el le es ss s G Ga at te ew wa ay y U Us se er r s s M Ma an nu ua al l Rev...

Page 2: ...ate radio frequency energy and if not installed and used in accordance with the instructions may cause harmful interference to radio communications However there is no guarantee that interference will...

Page 3: ...epaid Seller may elect to evaluate and repair defective items at the Buyer s site Seller may charge Buyer a fee including travel expenses if needed to cover the cost of evaluation if the evaluation sh...

Page 4: ...Modify an Existing Connection 25 3 4 4 Modem Setup 26 3 5 CONFIGURING THE LAN 27 3 5 1 LAN Group Configuration 30 3 5 2 Ethernet Switch Configuration 33 3 6 CONFIGURING THE WLAN 34 3 6 1 WIRELESS Set...

Page 5: ...3 8 2 Remote Log Router 94 3 8 3 Remote Log Voice 95 3 8 4 User Management 96 3 8 5 Update SOHOSpeed 97 3 8 6 Ping Test 98 3 8 7 Modem Test 99 3 9 STATUS 100 3 9 1 Network Statistics 101 3 9 2 Connect...

Page 6: ...PCs to the Internet with just one WAN IP Address when configured in router mode with NAT enabled z Configurable through user friendly web pages z Supports Single Session IPSec and PPTP Pass Through f...

Page 7: ...idge Filtering Router Mode z RFC 1483 Route z IPoA RFC1577 z RIP 1 2 supported z DHCP RFC1541 Server Relay and Client z Network Address Translation NAT Network Address Port Translation NAPT z DNS rela...

Page 8: ...SOHOSpeed To reset the SOHOSpeed simply press the reset button for more than 10 seconds The SOHOSpeed will be reset to its factory defaults and after about 30 seconds the SOHOSpeed will become operati...

Page 9: ...ghted when a connection is established to LAN port and flashes when LAN port is sending receiving data The number of LAN ports depends on your model USB LED The LED is lighted when a connection is est...

Page 10: ...the Log In page check your browser s settings to verify that JavaScript is enabled Also if you do not get the page as shown below you may need to delete your temporary Internet files by flushing the c...

Page 11: ...tions within the SOHOSpeed security routing and filtering z Obtain the status of the SOHOSpeed z View the extensive online help The basic layout of the Home page consists of a page selection list acro...

Page 12: ...a moment to familiarize yourself with these concepts as it should make the configuration much easier 3 3 1 Wide Area Network WAN Connection On one side of the SOHOSpeed is the WAN interface also refer...

Page 13: ...t WAN connections 3 4 1 Setup a WAN Connection New Connection A new WAN connection is a virtual connection over the physical DSL connection Your SOHOSpeed can support up to eight different unique virt...

Page 14: ...d you cannot access the Internet 4 If you want to enable VLAN refer to the table below to configure the following fields z Sharing Select VLAN to enable the VLAN ID and Priority Bits fields z VLAN ID...

Page 15: ...9 To make the change permanent click Tools at the top of the page and select System Commands 10 At the System Commands page click Save All 11 To check the status click Status at the top of the page an...

Page 16: ...le timeout value When checked this field enables the following fields z Idle Timeout z Host Trigger z Valid Rx Default Gateway If checked this WAN connection acts as the default gateway to the Interne...

Page 17: ...asures the random inter arrival times of cells within an ATM connection due to cell transfer delay caused by buffering multiplexing and so on Auto PVC Auto Sensing permanent virtual circuit The overal...

Page 18: ...ssion between network hosts It usually provides a mechanism of authenticating users Logical link control LLC and virtual circuit VC are two different methods of encapsulating the PPP packet Contact yo...

Page 19: ...rol LLC and Virtual Channel VC Username Your user name for the PPPoA access provided by your DSL service provider or your ISP This field is alpha numeric and the maximum length is 64 characters It can...

Page 20: ...In this example the unique name is Static 4 The Network Address Translation NAT and the Firewall options are enabled by default Leave these in the default mode 5 In the Static Settings section select...

Page 21: ...layer followed by a header from the network layer IP followed by a header from the transport layer TCP followed by the application protocol data Two options are provided Logical Link Control LLC and V...

Page 22: ...this connection A new link has been created for this connection in the left hand column You can apply delete or cancel this connection using the buttons on this page Note The changes take effect when...

Page 23: ...VC Note If you are not sure just use the default mode 6 In the PVC Settings section enter values for the VPI and VCI Note Your DSL service provider or your ISP supplies these values In this example t...

Page 24: ...age which can be configured to a LAN group on the same page For VLAN and PVC field descriptions please refer to section 3 4 1 Classical IP over ATM Connection Setup CLIP defined in RFC 2225 provides t...

Page 25: ...oot 9 To make the change permanent click Tools at the top of the page and select System Commands 10 At the System Commands page click Save All 11 To check the status click Status at the top of the pag...

Page 26: ...ection 1 through Connection 8 Note Up to eight WAN connections of all types are supported 2 Make modifications on the individual connection page Note Some fields are disabled after initial creation 3...

Page 27: ...SOHOSpeed ADSL2 2 Ethernet Wireless Gateway User s Manual 26 3 4 4 Modem Setup The Modem Setup page allows you to select any combination of DSL training modes...

Page 28: ...be configured with static IP address dynamic IP address or be unmanaged no IP The default LAN Configuration page shows the LAN interfaces that belong to a single LAN bridge group LAN Group 1 z USB z E...

Page 29: ...click Remove WLAN moves to the Interfaces box on the left as shown in figure below Note You can configure the USB interface and WLAN interfaces to a different LAN group however the Ethernet interface...

Page 30: ...s shown in figure below with two sets of IP addresses The Ethernet and USB interfaces belong to LAN group 1 with an IP of 192 168 1 x The WLAN interface belongs to LAN group 2 with an IP of 192 168 2...

Page 31: ...ress from the DHCP server using the Release and Renew buttons Netmask The subnet mask of your Gateway PPP IP Address Enables disables PPP unnumbered feature IP Address The IP address should be differe...

Page 32: ...168 1 254 If the DHCP server runs out of DHCP addresses users do not get access to network resources If this happens you can increase the Ending IP address to the limit of 254 or reduce the lease time...

Page 33: ...he DNS that was received from the WAN side 10 10 10 5 This can be configured by enabling disabling Assign ISP DNS SNTP on the LAN Group Configuration page Note This section only applies when you have...

Page 34: ...og server z Cookie server z Print server z NTP server z WINS server 3 5 2 Ethernet Switch Configuration Ethernet switch port settings can be configured to meet the requirements of your LAN configurati...

Page 35: ...lt multiple SSID is disabled and the VLAN ID of the primary SSID is 0 When you enable multiple SSID you are prompted to change the VLAN ID of the primary SSID to a unique value between 1 4095 For more...

Page 36: ...sabled when user isolation is enabled 2 All data is sent to WAN 3 Enable disable flag No station has direct access to other stations as a result of user isolation Follow the procedure below to save ch...

Page 37: ...76 76 KDQGVKDNH ZLOO QRW EH SHUIRUPHG 7KH GHIDXOW YDOXH LV KRZHYHU ZKHQ LV HQDEOHG RQ WKH VHWXS SDJH WKH 576 WKUHVKROG YDOXH FKDQJHV WR UDJPHQWDWLRQ 7KUHVKROG 7KH PLQLPXP OHQJWK RI D IUDPH WKDW ZLOO E...

Page 38: ...mary and one secondary You can see from Figure 4 6 that Multiple SSID feature is enabled by default and a secondary SSID has been created z Secondary SSID TI Voice_SSID z VLAN ID 2 You can disable mul...

Page 39: ...he default 0 8 Click Apply to complete the settings Note The changes take effect when you click Apply however if the SOHOSpeed configuration is not saved these changes will be lost upon SOHOSpeed rebo...

Page 40: ...you can assign security to each SSID There are a few rules limitations that you should follow z WEP cannot be assigned to more than one SSID z 802 1x cannot be assigned to more than one SSID z WEP and...

Page 41: ...o enable WEP wireless security on the selected SSID Authentication Type Authentication algorithm to use when the security configuration is set to Legacy When the security configuration is set to 802 1...

Page 42: ...default setting of the Wireless Security 802 1x page Field Description Field Definition Description Select an SSID and its Security Level If multiple SSID is enabled use this drop down menu to select...

Page 43: ...ons that support WPA v 1 to connect to the AP WPA2 Enables stations that support WPA v 2 to connect to the AP AnyWPA Enables stations that support WPA v 1 and WPA v 2 to connect to the AP Enable WPA2...

Page 44: ...t page using Procedure 4 4 1 Check Enable Access List 2 Select Allow to create an allowed access list or Ban to create a banned list Note You cannot create both 3 Enter a MAC address of an allowed or...

Page 45: ...llowed Access list is enabled this station will be deleted from the Allowed Access List If the Banned Access list is enabled this station will be added to the Banned Access List 3 6 6 WDS Wireless dis...

Page 46: ...orks may exist in the same area Activate as Root This field must be checked for the root device in WDS hierarchy Only one WDS root device may exist in WDS network This field is not applicable for Crud...

Page 47: ...d play UPnP NAT and firewall traversal allow traffic to pass through the SOHOSpeed for applications using the UPnP protocol This feature requires one active WAN connection In addition the PC should su...

Page 48: ...pecified retry count it starts querying the Tertiary SNTP server If it fails to get a valid response from all the servers then the program stops Once a valid response is received from one of the serve...

Page 49: ...of times the SOHOSpeed tries to connect to an SNTP server before it tries to connect to the next server in line Time Zone The time zone in which the SOHOSpeed resides Day Light Check uncheck this opt...

Page 50: ...nity profile for each object The community profile defines the operations that can be applied to the object In the SOHOSpeed a default community name of public with access mode of read only is created...

Page 51: ...ormance monitoring z Diagnostics The TR 069 page allows you to set up connection parameters and may not be seen by the end user The figure below shows the default TR 069 page Field Description Field D...

Page 52: ...d these changes will be lost upon SOHOSpeed reboot 4 To make the change permanent click Tools at the top of the page and select System Commands 5 At the System Commands page click Save All 3 7 5 Port...

Page 53: ...link takes you to the Custom Port Forwarding page More information is available in Custom Port Forwarding Page Category Custom and user defined categories Available Rules Predefined and user defined...

Page 54: ...Rule Management page populates for you to create new rules Enter Rule Name Protocol Port Start Port End and Port Map fields then click Apply The rules you create become available in the User category...

Page 55: ...function is disabled by default By enabling DMZ you add an extra layer of security protection for hosts behind the firewall 1 On the Port Forwarding page click the DMZ link You are taken to the DMZ S...

Page 56: ...e WAN connection on which the DMZ feature is applied Select LAN Group Select the LAN Group on which the DMZ feature is applied Select a LAN IP Address Select the LAN IP address you are going to use as...

Page 57: ...IP Address You can define the source IP address from which the incoming traffic is allowed Enter 0 0 0 0 for all Source Netmask Netmask of the source IP address Enter 255 255 255 255 for all Destinat...

Page 58: ...in the given LAN group to which the IP Filters feature will be applied Block All Traffic When checked complete network access is blocked for the specific IP address Block Outgoing Ping Blocking outgoi...

Page 59: ...l Port Start Port End and Port Map fields then click Apply The rules you create appear in the Available Rules box in the User category You can view or delete the rules you create 5 Continue to add rul...

Page 60: ...s checked by default meaning this rule is automatically applied when you click Apply Source IP The LAN side source IP address assigned to outgoing traffic on which filtering is applied Source Netmask...

Page 61: ...a static IP address belonging to the SOHOSpeed s LAN subnet using the LAN Clients page Any existing static entry falling within the DHCP server s range can be deleted and the IP address is made avail...

Page 62: ...e changes will be lost upon SOHOSpeed reboot 5 To make the change permanent click Tools at the top of the page and select System Commands 6 At the System Commands page click Save All Note The firewall...

Page 63: ...s of the LAN such as a hot spot deployment from other publicly accessible LAN segments 1 Check the LAN group combinations that define which traffic will be blocked 2 Click Apply to temporarily activat...

Page 64: ...access account Password Password of the WAN access account To create a temporary user account for a remote access to your RG use TR 68 Field Description as a reference and follow procedure below 1 Ch...

Page 65: ...o add a rule enter the source MAC address destination MAC address and frame type with desired filtering type then click Add Note You can also edit a rule that you created using the Edit checkbox You c...

Page 66: ...interface of the LAN group to have the Bridge Filter Management Interface feature enabled Depending on the LAN group that is selected the interface selections are Ethernet USB and or WLAN SRC MAC The...

Page 67: ...ilters page allows you to manage the type of web content that passes through your SOHOSpeed The following web filters are disabled by default z Proxy server z Cookies z Java applets z ActiveX controls...

Page 68: ...o temporarily activate the settings Note The changes take effect when you click Apply however if the SOHOSpeed configuration is not saved these changes will be lost upon SOHOSpeed reboot 3 To make the...

Page 69: ...also enables you to receive multicast video streams from multicast servers IP hosts use Internet group management protocol IGMP to report their multicast group memberships to neighboring routers Simil...

Page 70: ...s on the LAN side In figure as shown below the WAN interface DHCP1 is enabled as the upstream IGMP interface which forwards IGMP requests from LAN group 1 to the multicast router on the network and fo...

Page 71: ...cast server in on the LAN side Hosts on the network can sent IGMP request from the WAN side through the LAN interface And the LAN interface acting as the upstream interface forwards data multicast fro...

Page 72: ...d configuration is not saved these changes will be lost upon SOHOSpeed reboot 4 To make the change permanent click Tools at the top of the page and select System Commands 5 At the System Commands page...

Page 73: ...ugh which traffic will flow towards the destination subnet Metric Defines the number of hops the between network nodes that data packets travel The default value is 0 which means that the subnet is di...

Page 74: ...OHOSpeed that a new subnet with an IP of 10 0 0 0 and a netmask of 255 255 255 0 has been added and can access the SOHOSpeed via station 192 168 1 5 The metric is 0 since the subnet is one level down...

Page 75: ...s and adds deletes or modifies routes in its own routing table accordingly The router is also expected to receive requests for its routing table and respond accordingly Use the Dynamic Routing page to...

Page 76: ...network used in the static routing example in Static Routing Page As shown in figure below you have a network with two LAN connections 192 168 1 x and 172 168 1 x and each has a router and a subnet Ho...

Page 77: ...wever if the SOHOSpeed configuration is not saved these changes will be lost upon SOHOSpeed reboot 7 To make the change permanent click Tools at the top of the page and select System Commands 8 At the...

Page 78: ...f the destination This field is required if the destination IP has been entered Protocol The selections are TCP UDP ICMP Specify and none If you choose Specify you need to enter the protocol number in...

Page 79: ...dial up and default gateway z Two LAN groups LAN group 1 and LAN group 2 z Two computers in LAN group 1 z Two computers in LAN group 2 Goal You want to reserve PPPoE for use by LAN group 1 computers o...

Page 80: ...st upon SOHOSpeed reboot 11 To make the change permanent click Tools at the top of the page and select System Commands 12 At the System Commands page click Save All 3 7 17 Ingress The Ingress page ena...

Page 81: ...Priority The selections are 0 1 2 3 4 5 6 7 Follow the procedure below to configure Ingress Layer 2 QoS settings 1 From Interface drop down box select PPPoE1 You are configuring QoS on this WAN interf...

Page 82: ...oS2 CoS3 CoS4 CoS5 and CoS6 ToS The type of service field takes values from 0 to 255 Default Non IP A static CoS can be assigned to all layer 3 incoming packets per interface that do not have an IP he...

Page 83: ...igure a static CoS for all packets received on a WAN or LAN interface Follow the procedure below to configure Ingress static QoS settings 1 At the Interface drop down box select USB You are configurin...

Page 84: ...e QoS payload database configuration will be discussed here The policy routing configuration will be discussed in Policy Routing QoS can be configured in the Ingress and Egress pages on a per interfac...

Page 85: ...tocol The selections are TCP UDP ICMP Specify and none If you choose Specify you need to enter the protocol number in the box next to the Protocol field This field cannot be configured alone additiona...

Page 86: ...e Destination IP field enter 192 168 1 5 5 In the Destination IP Mask field enter 255 255 255 255 6 In the Protocol field leave the default selection TCP 7 Click Apply to temporarily activate the sett...

Page 87: ...using the Egress page No Egress Mode The default Egress page setting for all interfaces is No Egress In this mode the domain mappings of the packets are untouched Egress Layer 2 Configuration The Egre...

Page 88: ...2 3 4 5 6 7 Class of Service The selections are in the order of descending priority CoS1 CoS2 CoS3 CoS4 CoS5 and CoS6 Egress Layer 3 Configuration The Egress Layer 3 page enables you to map CoS to ToS...

Page 89: ...TB Queue Discipline The hierachical token bucket queue discipline is a rate based shaping algorithm This algorithm rate shapes the traffic of a class over a specific interface All CoSx traffic is assi...

Page 90: ...ndwidth of which 100 kbits is given to CoS1 and another 100 kbits is given to CoS2 When there is no CoS1 or CoS2 packets CoS6 packets have the whole 300 kbits of bandwidth Example 2 Low Latency Queue...

Page 91: ...ly percentage can be assigned to the CoS2 CoS6 CoS1 is not rate controlled hence the field is not displayed When there is no CoS1 packet CoS2 CoS3 CoS4 each has 10 percent and CoS6 has 70 percent This...

Page 92: ...from a WAN IP 10 10 10 1 via Web Note The changes take effect when you click Apply however if the SOHOSpeed configuration is not saved these changes will be lost upon SOHOSpeed reboot 7 To make the c...

Page 93: ...trol page allows you to access the SOHOSpeed remotely via SSH from the WAN side The configuration of a WAN IP address for SSH access control is very similar to the configuration of a WAN IP address fo...

Page 94: ...em without saving your configuration the SOHOSpeed will revert back to the previously saved configuration z Restart Use this button to re start the system If you have not saved your configurations the...

Page 95: ...you must specify a severity level Log messages that are rated at that level or higher are sent to the syslog server and can be viewed using the syslog server application which can be downloaded from...

Page 96: ...Software debugging message Specify the level only when so directed by a technical support representative The default log level is Notice Note When you select a log level all log information within thi...

Page 97: ...the drop down list This defines where the log information will be sent You can customize the destination list using the Add and Delete buttons 3 8 4 User Management This page allows you to change you...

Page 98: ...ike this nsp ar7vw firmware upgrade img The file for web upload should have upgrade in the name The file without upgrade in the name is for upload using the serial connection 2 Click Update Gateway Th...

Page 99: ...ur SOHOSpeed configured it is a good idea to make sure you can ping the network If you can ping an IP on the WAN side successfully you should be able to surf the Internet 1 Click Ping Test from the To...

Page 100: ...ithin virtual paths to report an unavailable path or a virtual path VP that cannot be guaranteed Segment flows are processed as well as end to end flows that terminate in the management processor z F5...

Page 101: ...displayed on the page Field Description Field Definition Description Connection Select the WAN connection on which you want to run the modem test Note You will not be able to perform a modem test with...

Page 102: ...ess the Network Statistics page by clicking the Network Statistics link from the Status main page Click to view the statistics of the following four interfaces z Ethernet z USB z DSL z Wireless 3 9 2...

Page 103: ...tatus of your WAN connection from the DDNS Status page As you can see from this page the DDNS client is disabled by default for your SOHOSpeed When DDNS client is enabled the DDNS client updates every...

Page 104: ...dated The IP address of the client has been changed and an update has been sent to the DDNS server z No change The IP address of the client has not been changed z Error There is an error with the DDNS...

Page 105: ...Wireless Gateway User s Manual 104 3 9 5 Modem Status Select to view the Status and Statistics of your broadband DSL connection 3 9 6 Product Information This page shows the hardware and software info...

Page 106: ...pending upon the severity level the logged information generates log reports to a remote host if remote logging is enabled Up to 32 logs can be displayed on this page 3 9 8 WDS Report The WDS Report p...

Page 107: ...the same time You must only use 1 interface at a time 3 Make sure that your PC and the gateway is on the same network segment The SOHOSpeed s default IP address is 192 168 1 1 If you are running a Win...

Reviews:

No comments

Brands by name

Popular brands

Load more brands