ConnectGear GR-104 User Manual Download Page 57 | Manualshive

Page: 57 / 77

background image

Example: Access Control

In the example below, LAN client A can only access websites that use Port 80. However, LAN
client B is able to access websites and any other service that uses ports between 80 and 999.

57

«
...
55
56
57
58
59
...
»

Summary of Contents for GR-104

Page 1: ...r 2 25 General Settings 25 2 1 System 27 2 1 1 Time Zone 27 2 1 2 Password Settings 29 2 1 3 Remote Management 30 2 2 WAN 32 2 2 1 Dynamic IP 33 2 2 2 Static IP Address 33 2 2 3 PPPoE PPP over Ethernet 33 2 2 4 PPTP 33 2 2 5 L2TP 34 2 2 6 Telstra Big Pond 36 2 2 7 DNS 37 2 2 8 DDNS 38 2 3 LAN 39 2 4 NAT 41 2 4 1 Port Forwarding 43 2 4 2 Virtual Server 45 2 4 3 Special Applications 48 2 4 4 ALG Set...

Page 2: ...ormation 64 3 2 Internet Connection 65 3 3 Device Status 66 3 4 Security Log 67 3 5 Active DHCP Client Table 68 3 6 Statistics 69 Chapter 4 70 Tool 70 4 1 Configuration Tools 71 4 2 Firmware Upgrade 72 4 3 Reset 73 Appendix A 74 Glossary 75 2 ...

Page 3: ...atures such as Special Applications DMZ Virtual Servers Access Control Firewall and Bridge mode Allow you to monitor the router s status such as DHCP Client Log Security Log and Device Connection Status Easy to use Web based GUI for configuration and management purposes Remote Management allows configuration and upgrades from a remote site over the Internet Minimum Requirements One External xDSL A...

Page 4: ... to your xDSL or Cable modem and is linked to the Internet 3 Reset The Reset button allows you to do one of two things 1 If problems occur with your router press the router s reset button with a pencil tip for less than 4 seconds and the router will re boot itself keeping your original configurations 2 If problems persist or you experience extreme problems or you forgot your password press the res...

Page 5: ... s power supply is on WAN 10 100M ON WAN port 100Mbps is connected Off WAN port 10Mbps is connected WAN LNK ACT ON WAN is connected Off No WAN connection Flashing WAN port has Activity ACT data being sent LAN 10 100M ON LAN port 100Mbps is connected Port 1 4 Off LAN port 10Mbps is connected LAN LNK ACT ON LAN is connected Port 1 4 Off No LAN connection Flashing LAN port has Activity ACT data being...

Page 6: ...Setup Diagram Figure 1 2 below shows a typical setup for a Local Area Network LAN Figure 1 2 6 ...

Page 7: ...o configure your PC to obtain an IP address automatically for 2a Windows 95 98 Me 2b Windows XP 2c Windows 2000 and 2d Windows NT 2a Windows 95 98 Me 1 Click the Start button and select Settings then click Control Panel The Control Panel window will appear 2 Double click Network icon The Network window will appear 3 Check your list of Network Components If TCP IP is not installed click the Add but...

Page 8: ...ows XP 1 Click the Start button and select Settings then click Network Connections The Network Connections window will appear 2 Double click Local Area Connection icon The Local Area Connection window will appear 3 Check your list of Network Components You should see Internet Protocol TCP IP on your list Select it and click the Properties button 4 In the Internet Protocol TCP IP Properties window ...

Page 9: ...Start button and select Settings then click Control Panel The Control Panel window will appear 2 Double click Network and Dial up Connections icon In the Network and Dial up Connection window double click Local Area Connection icon The Local Area Connection window will appear 3 In the Local Area Connection window click the Properties button 4 Check your list of Network Components You should see In...

Page 10: ...ur PC to obtain an IP address automatically please proceed to Step 3 2d Windows NT 1 Click the Start button and select Settings then click Control Panel The Control Panel window will appear 2 Double click Network icon The Network window will appear Select the Protocol tab from the Network window 3 Check if the TCP IP Protocol is on your list of Network Protocols If TCP IP is not installed click th...

Page 11: ...wing settings IP Address Select Obtain an IP address from a DHCP server DNS Let all fields are blank WINS Let all fields are blank Routing Let all fields are blank 7 Click OK to confirm the setting Your PC will now obtain an IP address automatically from your Broadband Router s DHCP server Note Please make sure that the Broadband router s DHCP server is the only DHCP server available on your LAN O...

Page 12: ...router s IP address into your PC s web browser and press enter 5 The login screen below will appear Enter the User Name and Password and then click OK to login Note By default the user name is admin and the password is 1234 For security reasons it is recommended that you change the password as soon as possible in General setup system password see chapter 2 6 The HOME page screen below will appear ...

Page 13: ...f you want to Reset the router because of problems or save your configurations or upgrade the firmware then the Tools section is the place to do this Menu Description Quick Setup Wizard Chapter 1 Select your Internet connection type and then input the configurations needed to connect to your Internet Service Provider ISP General Setup Chapter 2 This section contains configurations for the Broadban...

Page 14: ...r Broadband router The Firmware upgrade tool allows you to upgrade your Broadband router s firmware The RESET tool allows you to reset your Broadband router 7 Click on Quick Setup Wizard see chapter 1 to start configuring settings required by your ISP so that you can start accessing the Internet The other sections General Setup Status Information and Tools do not need to be configured unless you w...

Page 15: ... The Time Zone allows your router to base its time on the settings configured here this will affect functions such as Log entries and Firewall settings Parameter Description Set Time Zone Select the time zone of the country you are currently in The router will set its time based on your selection Time Server Address You can manually assign time server address if the default time server dose not wo...

Page 16: ...wish to end daylight Savings Time Click on NEXT to proceed to the next page step 2 Broadband Type Step 2 Broadband Type In this section you have to select one of four types of connections that you will be using to connect your broadband router s WAN port to your ISP see screen below Note Different ISP s require different methods of connecting to the Internet please check with your ISP as to the ty...

Page 17: ...ction Click on one of the WAN type and then proceed to the manual s relevant sub section 1 1 1 2 1 3 or 1 4 Click on Back to return to the previous screen 1 1 Cable Modem Choose Cable Modem if your ISP will automatically give you an IP address Some ISP s may also require that you fill in additional information such as Host Name and MAC address see screen below Note The Host Name and MAC address se...

Page 18: ... replace the WAN MAC address with the MAC address of that PC you have to be using that PC for the Clone MAC Address button to work To find out the PC s MAC address see Appendix A see Glossary for an explanation on MAC address Click OK when you have finished the configuration above Congratulations You have completed the configuration for the Cable Modem connection You can start using the router now...

Page 19: ...55 0 Click OK when you have finished the configuration above Congratulations You have completed the configuration for the Fixed IP x DSL connection You can start using the router now if you wish to use some of the advance features supported by this router see chapter 2 3 4 1 3 PPPoE Select PPPoE if your ISP requires the PPPoE protocol to connect you to the Internet Your ISP should provide all the ...

Page 20: ...r the Service name should your ISP requires it otherwise leave it blank MTU This is optional You can specify the maximum size of your transmission packet to the Internet Leave it as it is if you to not wish to set a maximum packet size Connection Type If you select Continuous the router will always connect to the ISP If the WAN line breaks down and links again the router will auto reconnect to the...

Page 21: ...during this specified period the router will automatically disconnect the connection with your ISP Note This idle timeout function may not work due to abnormal activities of some network application software computer virus or hacker attacks from the Internet For example some software sends network packets to the Internet in the background even when you are not using the Internet So please turn off...

Page 22: ...s section Parameter Description Obtain an IP address The ISP requires you to obtain an IP address by DHCP automatically before connecting to the PPTP server Use the following IP address The ISP gives you a static IP to be used to connect to the PPTP server IP Address This is the IP address that your ISP has given you to establish a PPTP connection 22 ...

Page 23: ... close the WAN connection if the time period that no one is using the Internet exceeds the Idle Time If you select Manual the router will connect to ISP only when you click Connect manually from the Web user interface The WAN connection will not disconnected due to the idle timeout If the WAN line breaks down and latter links again the router will not auto connect to the ISP Idle Time You can spec...

Page 24: ...d the configuration above Congratulations You have completed the configuration for the PPTP connection You can start using the router now if you wish to use some of the advance features supported by this router see chapter 2 3 4 24 ...

Page 25: ...tup Wizard you do NOT need to configure anything thing in the General Setup screen for you to start using the Internet The General Setup contain advanced features that allow you to configure the router to meet your network s needs such as Bridge Address Mapping Virtual Server Access Control Hacker Attack Prevention Special Applications DMZ and other functions 25 ...

Page 26: ...ISP same as the Quick Setup Wizard section 2 3 LAN You can specify the LAN segment s IP address subnet Mask enable disable DHCP and select an IP range for your LAN 2 4 NAT You can configure the Address Mapping Virtual Server and Special Applications functions in this section This allows you to specify what user packet can pass your router s NAT 2 5 Firewall The Firewall section allows you to confi...

Page 27: ...r selection 2 1 2 Password Settings Allows you to select a password in order to access the web based management website 2 1 3 Remote Management You can specify a Host IP address that can perform remote management functions Select one of the above three system settings selections and proceed to the manual s relevant sub section 2 1 1 Time Zone The Time Zone allows your router to reference or base i...

Page 28: ...t savings into account If you wish to use this function you must check tick the enable box to enable your daylight saving configuration below Start Daylight Savings Time Select the period in which you wish to start daylight Savings Time End Daylight Savings Time Select the period in which you wish to end daylight Savings Time Click Apply at the bottom of the screen to save the above configurations...

Page 29: ...er your current password for the remote management administrator to login to your Broadband router Note By default there is NO password New Password Enter your new password Confirmed Password Enter your new password again for verification purposes Note If you forget your password you ll have to reset the router to the factory default No password with the reset button see router s back panel Click ...

Page 30: ...ote Management host IP address for this router located in your company office then you are able to configure this router from your home If the Host Address is left 0 0 0 0 this means anyone can access the router s web based configuration from a remote location providing they know the password Click the Enabled box to enable the Remote Management function Note When you want to access the web based ...

Page 31: ...rface Enabled Select Enabled to enable the remote management function Click Apply at the bottom of the screen to save the above configurations You can now configure other advance sections or start using the router with the advance settings in place 31 ...

Page 32: ...ings offer the following selections for the router s WAN port Dynamic IP PPPoE PPTP Static IP Address L2TP Telstra Big Pond Bridge DNS and DDNS Parameters Description 2 2 1 Dynamic IP Your ISP will automatically give you an IP address 2 2 2 Static IP address Your ISP has given you an IP address already 2 2 3 PPPoE Your ISP requires PPPoE connection 2 2 4 PPTP Your ISP requires you to use a Point t...

Page 33: ...st Name Domain Name and MAC address see chapter 1 Cable Modem for more detail 2 2 2 Static IP Address Select Static IP address if your ISP has given you a specific IP address for you to use Your ISP should provide all the information required in this section See chapter 1 Fixed IP for more detail 2 2 3 PPPoE PPP over Ethernet Select PPPoE if your ISP requires the PPPoE protocol to connect you to t...

Page 34: ...ain an IP address The ISP requires you to obtain an IP address by DHCP automatically before connecting to the L2TP server Use the following IP address The ISP give you a static IP to be used to connect to the L2TP server IP Address This is the IP address that your ISP has given you to establish a L2TP connection Subnet Mask Enter the Subnet Mask provided by your ISP e g 255 255 255 0 34 ...

Page 35: ...not disconnected due to the idle timeout If the WAN line breaks down and latter links again the router will not auto connect to the ISP Idle Time Out You can specify an idle time threshold minutes for the WAN port This means if no packets have been sent no one using the Internet throughout this specified period then the router will automatically disconnect the connection with your ISP Note This id...

Page 36: ...elstra Big Pond connection Password Enter the Password provided by your ISP for the Telstra Big Pond connection User deside login server Select if you want to assign the IP of Telstra Big Pond s login manually server manually Login Server The IP of the Login Server Click OK when you have finished the configuration above Congratulations You have completed the configuration for the Telstra Big Pond ...

Page 37: ...lly However if there is a DNS server that you would rather use you need to specify the IP address of that DNS server here Parameters Description Domain Name Server DNS Server This is the ISP s DNS server IP address that they gave you or you can specify your own preferred DNS server IP address Secondary DNS Address optional This is optional You can enter another DNS server s IP address as a backup ...

Page 38: ... Enable Disable the DDNS function of this router Provider Select a DDNS service provider Domain name Your static domain name that use DDNS Account E mail The account that your DDNS service provider assigned to you Password Key The password you set for the DDNS service account above Click Apply at the bottom of the screen to save the above configurations You can now configure other advance sections...

Page 39: ...cription LAN IP IP address 192 168 2 1 This is the router s LAN port IP address Your LAN clients default gateway IP address IP Subnet Mask 255 255 255 0 Specify a Subnet Mask for your LAN segment 802 1d Spanning Tree Disabled If 802 1d Spanning Tree function is enabled this router will use the spanning tree protocol to prevent from network loop happened in the LAN ports 39 ...

Page 40: ...eriod that the DHCP lends an IP address to your LAN clients The DHCP will change your LAN client s IP address when this time threshold period is reached IP Address Pool You can select a particular IP address range for your DHCP server to issue IP addresses to your LAN Clients Note By default the IP range is from Start IP 192 168 2 100 to End IP 192 168 2 199 If you want your PC to have a static fi...

Page 41: ...lients in your LAN The Port Forwarding allows you to re direct a particular range of service port numbers from the Internet WAN Ports to a particular LAN IP address 2 4 2 Virtual Server You can have different services e g email FTP Web etc going to different service servers clients in your LAN The Virtual Server allows you to re direct a particular service port number from the Internet WAN Port to...

Page 42: ...2 4 4 ALG Setting You can select special applications that need Application Layer Gateway to support here Click on one of the three NAT selections and proceed to the manual s relevant sub section 42 ...

Page 43: ...rt Forwarding Enable Port Forwarding Private IP This is the private IP of the server behind the NAT firewall Note You need to give your LAN PC clients a fixed static IP address for Port Forwarding to work properly Type This is the protocol type to be forwarded You can choose to forward TCP or UDP packets only or select both to forward both TCP and UDP packets Port Range The range of ports to be fo...

Page 44: ...e Port Forwarding into the table If you want to remove some Port Forwarding settings from the Current Port Forwarding Table select the Port Forwarding settings you want to remove in the table and then click Delete Selected If you want remove all Port Forwarding settings from the table just click Delete All button Click Reset will clear your current selections Click Apply at the bottom of the scree...

Page 45: ... the Internet WAN Port to a particular LAN private IP address and its service port number See Glossary for an explanation on Port number Parameters Description Enable Virtual Server Enable Virtual Server Private IP This is the LAN client host IP address that the Public Port number packet will be sent to Note You need to give your LAN PC clients a fixed static IP address for Virtual Server to work ...

Page 46: ... to be added and then click Add Then this Virtual Server setting will be added into the Current Virtual Server Table below If you find any typo before adding it and want to retype again just click Clear and the fields will be cleared Remove Virtual Server If you want to remove some Virtual Server settings from the Current Virtual Server Table select the Virtual Server settings you want to remove i...

Page 47: ... private LAN to be accessible to Internet users The configuration below means that any request coming form the Internet to access your web server will be translated to your LAN s web server 192 168 2 2 Note For the virtual server to work properly Internet remote users must know your global IP address For websites you will need to have a fixed static global public IP address 47 ...

Page 48: ...r Port Enable the Special Application function Trigger Port This is the out going Outbound range of port numbers for this particular application Trigger Type Select whether the outbound port protocol is TCP UDP or both Public Port Enter the In coming Inbound port or port range for this type of application e g 2300 2400 47624 Note Individual port numbers are separated by a comma e g 47624 5775 6541...

Page 49: ...ve Special Application If you want to remove some Special Application settings from the Current Trigger Port Table select the Special Application settings you want to remove in the table and then click Delete Selected If you want remove all Special Appliacation settings from the table just click Delete All button Click Reset will clear your current selections Click Apply at the bottom of the scree...

Page 50: ...router will allow incoming packets for ports 2300 2400 and 47624 to be directed to that user Note Only one LAN client can use a particular special application at a time 50 ...

Page 51: ...You can select to enable Application Layer Gateway of an application and then the router will let that application correctly pass though the NAT gateway Click Apply at the bottom of the screen to save the above configurations You can now configure other advance sections or start using the router with the advance settings in place 51 ...

Page 52: ...ble and click Apply Parameters Description 2 5 1 Access Control Access Control allows you to specify which hosts users can or cannot have access to certain Internet applications 2 5 2 URL Blocking URL Blocking allow you to specify which URLs can not be accessed by users 2 5 3 DoS The Broadband router s firewall can block common hacker attacks and can log the attack activities 2 5 4 DMZ The DMZ fun...

Page 53: ... access to these services Parameters Description Filter client PCs by IP Fill IP Filtering Table to filter PC clients by IP Add PC You can click Add PC to add an access control rule for users by IP addresses Remove PC If you want to remove some PC from the IP Filtering Table select the PC you want to remove in the table and then click Delete Selected If you want remove all PCs from the table just ...

Page 54: ...will be cleared Remove PC If you want to remove some PC from the MAC Filtering Table select the PC you want to remove in the table and then click Delete Selected If you want remove all PCs from the table just click Delete All button If you want to clear the selection and re select again just click Reset You can now configure other advance sections or start using the router with the advance setting...

Page 55: ...eters Description Client PC Description The description for this client PC rule Client PC IP Addresses Enter the IP address range that you wish to apply this Access Control rule This is the user s IP address es 55 ...

Page 56: ...u can block the clients from accessing some Internet services by checking the services you want to block Protocol This allows you to select UDP TCP or both protocol type you want to block Port Range You can assign up to five port ranges The router will block clients from accessing Internet services that use these ports Apply Changes Click Apply Changes to save the setting Reset Click Reset to clea...

Page 57: ...ample Access Control In the example below LAN client A can only access websites that use Port 80 However LAN client B is able to access websites and any other service that uses ports between 80 and 999 57 ...

Page 58: ...dress or the keyword of the web site you want to block If you find any typo before adding it and want to retype again just click Reset and the field will be cleared Remove URL Keyword If you want to remove some URL keyword from the Current URL Blocking Table select the URL keyword you want to remove in the table and then click Delete Selected If you want remove all URL keyword from the table just ...

Page 59: ...You can now configure other advance sections or start using the router with the advance settings in place 59 ...

Page 60: ...rusion Detection Feature Ping of Death Protections from Ping of Death attack Discard Ping From WAN The router s WAN port will not respond to any Ping requests Port Scan Protection the router from Port Scan Sync Flood Protection the router from Sync Flood attack Click Apply at the bottom of the screen to save the above configurations You can now configure other advance sections or start using the r...

Page 61: ...particular LAN client server whereas DMZ re directs all packets regardless of services going to your WAN IP address to a particular LAN client server Parameters Description Enable DMZ Enable disable DMZ Note If there is a conflict between the Virtual Server and the DMZ setting then Virtual Server function will have priority over the DMZ function Public IP Address The IP address of the WAN port or ...

Page 62: ...You can now configure other advance sections or start using the router with the advance settings in place 62 ...

Page 63: ...tatus and Information Shows the router s system information 3 2 Internet Connection View the Broadband router s current Internet connection status and other related information 3 3 Device Status View the Broadband router s current setting status 3 4 Security Log View any attempts that have been made to illegally gain access to your network 3 5 DHCP Client Table View your LAN client s information t...

Page 64: ...ion allows you to view the router s system information Parameters Description Information You can see the router s system information such as the router s LAN MAC Address WAN MAC Address Hardware version Serial Number Boot code Version Runtime code Version 64 ...

Page 65: ...d other related information Parameters Description Internet Connection This page displays whether the WAN port is connected to a Cable DSL connection It also displays the router s WAN port WAN IP address Subnet Mask and ISP Gateway as well as the Primary DNS and Secondary DNS being used 65 ...

Page 66: ...u ve configured in the Quick Setup Wizard General Setup section Parameters Description Device Status This page shows the Broadband router s current device settings This page displays the Broadband router LAN port s current LAN IP Address MAC Address and Subnet Mask It also shows whether the DHCP Server function is enabled disabled 66 ...

Page 67: ...the Broadband router It displays any illegal attempts to access your network At the bottom of the page the security log can be saved Save to a local file for further processing or the security log can be cleared Clear or it can be refreshed Refresh to get the most updated situation When the system is powered down the security log will disappear if not saved to a local file 67 ...

Page 68: ... router s DHCP server Parameters Description DHCP Client Log This page shows all DHCP clients LAN PCs currently connected to your network The Active DHCP Client Table displays the IP address and the MAC address and Time Expired of each LAN Client Use the Refresh button to get the most updated situation 68 ...

Page 69: ...3 6 Statistics View the statistics of packets sent and received on WAN and LAN Parameters Description Statistics Shows the counters of packets sent and received on WAN and LAN 69 ...

Page 70: ...nfiguration Tools You can save the router s current configuration restore the router s saved configuration files and restore the router s factory default settings 4 2 Firmware Upgrade This page allows you to upgrade the router s firmware 4 3 Reset You can reset the router s system should any problem exist Select one of the above three Tools Settings selection and proceed to the manual s relevant s...

Page 71: ...e selection If extreme problems occur you can use the Restore to Factory Defaults selection this will set all configurations to its original default settings e g when you first purchased the router Parameters Description Configuration Tools Use the Backup tool to save the Broadband router current configuration to a file named config bin on your PC You can then use the Restore tool to restore the s...

Page 72: ...need to download the firmware file to your local hard disk and enter that file name and path in the appropriate field on this page You can also use the Browse button to find the firmware file on your PC Once you ve selected the new firmware file click Apply at the bottom of the screen to start the upgrade process You may have to wait a few minutes for the upgrade to complete Once the upgrade is co...

Page 73: ...event that the system stops responding correctly or in some way stops functioning you can perform a reset Your settings will not be changed To perform the reset click on the APPLY button You will be asked to confirm your decision The reset will be complete when the power light stops blinking Once the reset process is complete you may start using the router again 73 ...

Page 74: ...en the Command Prompt program 2 Type Ipconfig all and enter Your PC s IP address is the one entitled IP address 192 168 1 77 The router s IP address is the one entitled Default Gateway 192 168 1 254 Your PC s MAC Address is the one entitled Physical Address 00 50 FC FE 02 DB 74 ...

Page 75: ...bps Idle Timeout Idle Timeout is designed so that after there is no traffic to the Internet for a pre configured amount of time the connection will automatically be disconnected IP Address and Network Subnet Mask IP stands for Internet Protocol An IP address consists of a series of four numbers separated by periods that identifies a single unique Internet computer host in an IP network Example 192...

Page 76: ...me network without having to purchase more IP addresses from your ISP Port Network Clients LAN PC uses port numbers to distinguish one network application protocol over another Below is a list of common applications and protocol port numbers Application Protocol Port Number Telnet TCP 23 FTP TCP 21 SMTP TCP 25 POP3 TCP 110 H 323 TCP 1720 SNMP UCP 161 SNMP Trap UDP 162 HTTP TCP 80 PPTP TCP 1723 PC ...

Page 77: ...on over the Internet Both TCP and UDP are transport layer protocol TCP performs proper error detection and error recovery and thus is reliable UDP on the other hand is not reliable They both run on top of the IP Internet Protocol a network layer protocol WAN Wide Area Network A network that connects computers located in geographically separate areas e g different buildings cities countries The Int...

Reviews:

No comments

Related manuals for GR-104

Ubigate iBG1000

Brand: Samsung Pages: 52

Connect Home Pro ET-WV530

Brand: Samsung Pages: 2

Brand: 3Com Pages: 8

Brand: 3Com Pages: 2

Brand: EnGenius Pages: 2

Brand: P1 Pages: 10

Brand: ZoneAlarm Pages: 36

Brand: Digisol Pages: 82

MAX-STREAM EA9350

Brand: Linksys Pages: 45

Brand: SoundPeats Pages: 53

Brand: Cuppon Pages: 2

Brand: Sanoxy Pages: 12

Brand: Air Live Pages: 51

Brand: Gigafast Pages: 62

Brand: LB-Link Pages: 16

Brand: TECOM Pages: 12

Brand: Check Point Pages: 2

Brand: NETGEAR Pages: 103

Brands by name

0 1 2 3 4 5 6 7 8 9 A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

Popular brands

Load more brands