background image

                                                                                         

1 WAN + 4 Ports Ethernet SOHO Router                                                       P 31 

in DMZ are more compatible with Internet applications. Certainly, they seem to be dangerous in comparison 

with those other computers in LAN. 

 

SOHO Router generally allows a computer in LAN to be logically exposed to Internet with unrestricted 2-way 

communication capability. This is very useful whenever you encounter some incompatible issues (especially for 

online game or audio/video conference), most likely to turn-on DMZ feature could can avoid this problems. 

 

The single DMZ host (shown in the following) is allowed due to the single WAN IP address condition. (for 

example, WAN connection type is DHCP client, PPPoE PPTP and PPP) 

 

 

 

 

4.8 Multiple DMZ Host 

In case, WAN connection type is static and there are a range of IP address assigned to WAN interface instead 

of single IP only (please refer to section 3.1). Then SOHO Router allow 8 computers in LAN to become DMZ 

host. 

 

Summary of Contents for OER-305

Page 1: ...1 WAN 4 Ports Ethernet SOHO Router P 0 OKEYNET OER 305 1 WAN Port 4 Port Ethernet IP Sharing Router User Manual ...

Page 2: ... of the FCC Rules These limits are designed to provide reasonable protection against radio interference in a commercial environment This equipment can generate use and radiate radio frequency energy and if not installed and used in accordance with the instructions in this manual may cause harmful interference to radio communications Operation of this equipment in a residential area is likely to ca...

Page 3: ...ON 12 3 1 WEB BASED CONFIGURATION 12 3 1 1 Device Information 13 3 1 2 Administration 13 3 1 3 EZ Setup WAN 15 3 1 4 EZ Setup LAN 19 3 2 TELNET CONFIGURATION 23 CHAPTER 4 FIREWALLAND ADVANCED FUNCTIONS 24 4 1 ACCESS CONTROL 24 4 2 MAC FILTER 25 4 3 SERVICE TIME ALLOCATION 26 4 4 LAN PC MANAGEMENT 27 4 5 URL KEYWORD BLOCKING 28 4 6 VIRTUAL SERVER 29 4 7 DMZ 30 4 8 MULTIPLE DMZ HOST 31 4 9 AUTO 2 WA...

Page 4: ...1 WAN 4 Ports Ethernet SOHO Router P 3 ...

Page 5: ...ruder hacker Figure 1 1 Since all incoming data packets have been inspected analyzed all unwanted packet may be filtered out and be recorded as an intrusion event This SOHO Router can also be configured to block some internal LAN user s access to the Internet for management purpose Figure 1 1 Secure Internet Access via Cable DSL Modem 1 1 Features Connects to 10 100M Broadband cable or DSL modem o...

Page 6: ...al Server Port forwarding function Internet servers WWW FTP E mail in LAN could be virtually exposed to WAN for outside Internet user This is a useful and secure network deployment for Internet servers DMZ De Militarized Zone Host Administrator can totally expose a host PC in LAN to the Internet without any firewall protection mechanism This option allows the two way communication between the loca...

Page 7: ...ower LED illuminates whenever power is good Status ready The Status LED blink once per second when it is working normally or it will blink faster or be off in case the SOHO Router is something wrong WAN Indicators Lnk Act Lnk link ON means WAN ADSL Cable modem is connected correctly Act activity Blinking means data communication is happened 10 100 Indicates 10 or 100Mbps wire speed corresponding t...

Page 8: ... 7 1 4 2 Rear Panel Reset It is the factory default button Hold it down continuously more than 5 seconds to reset the hardware setting into factory default The LAN IP becomes default 192 168 8 1 Power Where you will plug the Power adapter ...

Page 9: ...gure 2 1 If the Link Act LED is always off please check the power feeding and the connection cable between the Cable DSL modem and WAN port Figure 2 1 The hardware connection of WAN interface for SOHO Router 2 2 Hardware Connection to LAN Connect the network cable from your computer s Ethernet port to one of SOHO Router s 4 LAN ports Figure 2 2 If it is correctly connected the responding Link Act ...

Page 10: ...ork setting PC then the communication between router and administrator s PC could be possible The following description assumes router is on factory default condition If not please hold the reset button down for more than 5 seconds Router s LAN IP will become 192 168 8 1 and the DHCP server for LAN user is on offered IP range from 192 168 8 17 to 192 168 8 128 by default Follow the procedures to s...

Page 11: ...s the IP Address tab Select Obtain an IP address automatically Step3 Press ok to continue System may request to restart After restart the connection between router window is established Please check it as follows Windows 9x Me Start control panel Run Type winicfg and then press ok button ...

Page 12: ...NT4 Please change to MS DOS command window and type ipconfig all to check Ethernet adapter information All Ethernet adapter information is showed in this window Check if you get an IP address like 192 16 8 x and the default gateway is the default IP of router If all the steps are finished the network should be working now In case there is something wrong please refer to Chapter 5 for troubleshooti...

Page 13: ...nding to login none could succeed to login at that time SOHO Router will pop up an alert message Similarly the following description assumes SOHO Router is on factory default condition 3 1 Web Based Configuration Open the web browser and type http 192 168 8 1 in the browser s address box This IP address is SOHO Router s LAN interface address One moment later the main page is shown as below This pa...

Page 14: ...detailed status of SOHO Router and display the current WAN s information about dial up duration and traffic bytes count You can press the Clear button to clear the WAN traffic counter And you can press the Refresh button to refresh the last update 3 1 2 Administration Press the Administration option on the left frame of this page to assign change the setting ...

Page 15: ...nly when both firmware are the same Version Otherwise SOHO Router will deny the Restore operation for reliability consideration Administrator Reset to Default Type in your old password and new password and confirm it Then press OK to send this request Auto Logout Whenever administrator is idle more than a specified time default is 300 seconds SOHO Router will logout automatically for security Upgr...

Page 16: ...event records This function provide administrator a convenient diagnostic method for troubleshooting Furthermore it also provide a detailed intruder hacker information You can press Refresh to upgrade these events and press Back to the Administration page Clone MAC Duplicate the MAC address of administrator s PC into WAN MAC of SOHO Router Restart System Force SOHO Router to restart immediately 3 ...

Page 17: ...HO Router WAN IP address ranges eg 255 255 255 248 means the range contains 8 IP address WAN Gateway ISP will provide the Gateway IP Address WAN 1st DNS DNS Domain Name Server ISP will provide this address WAN 2nd DNS The second DNS Then press Save Restart button B DHCP Client Connection DHCP Client connection means that ISP will dynamically assign theIP address and other setting For the Domain Na...

Page 18: ... dial up service If they do choose PPPoE option then fills in Your PPPoE account and PPPoE password The PPPoE Service Name may be optional It depends on the ISP Dial on Demand Choose this option router will attempt to connect with ISP if 1 there is at least one LAN user would like to access Internet and 2 the current WAN connection is on disconnected condition Auto disconnect when idled over sec f...

Page 19: ...and Auto disconnect Description on off off The PPPoE connection will be kept alive used to host serves in LAN no matter the idle timer is expired or not or even WAN is disconnected on on Activate the PPPoE connection when needed and disconnect the PPPoE connection if idle timer is expired off on The PPPoE connection is activated manually by administrator but it is terminated automatically if idle ...

Page 20: ...TP password are provided by ISP The PPTP connection ID is left blank for most application Check with your ISP for correct setting if there are some problems Dial on Demand Choose this option router will attempt to connect with ISP if 1 there is at least one LAN user would like to access Internet and 2 the current WAN connection is on disconnected condition Auto disconnect when idled over sec fill ...

Page 21: ... same subnet again by DHCP release renew IP 1 DHCP Server Enabled Choose this option if you want router to offer IP setting to LAN computers automatically IP pool from 192 168 8 x to 192 168 8 x Whenever there is a request the DHCP server will offer unused IP from the IP address pool to the requesting computer End address must be greater than starting address Lease time the assigned IP will be val...

Page 22: ...edefined IP Those computers will be identified by their MAC address Offer cyclical gateway it is a very simple mechanism for Internet WAN traffic distribution evenly among those routers up to 4 within a network 1 This application is used only for those network have more routers in the same subnet 2 There is one and only one DHCP server allowed in a specific subnet Please choose either one gateway ...

Page 23: ...ernet SOHO Router P 22 Please press Save Restart button to save all those settings 2 DHCP Server Disabled Disable DHCP Server function of router You just have to fill in LAN IP Address and then press Save Restart button ...

Page 24: ...ectly Then it is possible to use the Telnet configuration Similarly Telnet 192 168 8 1 to enter the configuration main menu In general the Telnet configuration is menu driven operation to simply the user interface As a result only basic configuration function is implemented For firewall Advanced and Wireless setting please use WEB configuration directly Press enter the password to login Then the m...

Page 25: ...ss capability Press Access Control item under the Advanced item then there are 3 options shown below 1 Respond to Ping from WAN Allow or Deny responding if there is any PING packet sent to WAN of SOHO Router This is very useful to avoid Internet intruder hacker from probing computer Most likely hacker will not have any willing to start attack due to no PING response 2 Web Management from WAN This ...

Page 26: ...from checking retrieving outside Internet e Mail account periodically This is very useful when WAN connection type is Dial On Demand like PPPoE PPP Then SOHO Router could auto disconnect at normal condition Otherwise the periodical e Mail checking from LAN user will cause SOHO Router keep WAN connection alive forever Certainly at this situation the LAN user can only use e Mail server inside if POP...

Page 27: ...Windows system C WINIPCFG for Win9x Me Or lookup the router s DHCP client list for desired computer s MAC address 4 3 Service Time Allocation Service Time Allocation allow administrator to control the SOHO Router s LAN to WAN service is available or disabled at some moment This feature is implemented by two kinds of mechanism ...

Page 28: ... It could protect children from surfing Internet continuously for more than a pre defined period X In the meanwhile SOHO Router will still stop service until period Y is expired The other mechanism is simply dependent on a daily time zone This means the SOHO Router s LAN to WAN service is on or off according to a predefined daily schedule table 4 4 LAN PC Management ...

Page 29: ...Cs with a precise service time schedule Most offen it is used by parent to control their children s PC Press Save Restart button after setup 4 5 URL Keyword Blocking In order to prevent LAN user from access several specific websites SOHO Router provide this function to perform such filtering mechanism Administrator could enter the URL keywords which website to be rejected Then SOHO Router will rej...

Page 30: ...ternet As a result SOHO Router provide Virtual Server functions to meet such applications In addition SOHO Router also protect the servers and all other computers in LAN simultaneously Since all the Internet servers always handle the fixed TCP UDP service port number like WWW is TCP 80 FTP is TCP 21 Thus any packets from WAN which destination port number is matched with SOHO Router virtual server ...

Page 31: ...ized Zone is a zone which is not protected by firewall It means all computers in DMZ are dangerous and subject to be attacked accessed by Internet intruder hacker However the advantage is that all computers in DMZ are totally exposed to Internet thus all of them gain the full access privilege right to outside Internet In such case most Internet applications may be much more compatible with them be...

Page 32: ...unter some incompatible issues especially for online game or audio video conference most likely to turn on DMZ feature could can avoid this problems The single DMZ host shown in the following is allowed due to the single WAN IP address condition for example WAN connection type is DHCP client PPPoE PPTP and PPP 4 8 Multiple DMZ Host In case WAN connection type is static and there are a range of IP ...

Page 33: ...ion SOHO environment please refer to Figure 4 2 Home user is less popular due to the a range of WAN IP address Because IP address is another more and more important and expensive resources now Some ISP provides leased line service DSL is more common to subscribers meanwhile could offer a range of IP address for subscription In this case there are two type of connection configuration One is Bridgin...

Page 34: ...e 4 1 configuration Because SOHO Router can actually receive only one IP address s packets instead of 5 IP address s packets In such condition bridging mode option could be used to support Multiple DMZ if PC1 PC4 are moved Behind the SOHO Router The following Figure 4 2 is a typical Router to Router Multi DMZ configuration ...

Page 35: ...s for compatibility improvement under the firewall protection However there is some inconvenience for administrator to manage lots of PC at home or in a SOHO environment For example In spite of Virtual Server or DMZ functions administrator must know the specific LAN PC s IP address in advance Then administrator could fill it into the WEB page for Virtual Server or DMZ Nevertheless if another LAN P...

Page 36: ... don t use that trigger port for more than 5 6 minutes 4 10 Dynamic DNS For most dial up ADSL and Cable modem user it is not easy to get a fixed WAN IP address when Gate200 connect with the Internet whenever SOHO Router s WAN connection type is PPPoE DHCP client or PPTP client then SOHO Router WAN IP is obtained from ISP side dynamically As a result it is very difficult to host a Web server or FTP...

Page 37: ...ould be disabled by default when dynamic DNS is never used or other dynamic DNS service provider is preferred 1 After 5 minutes later update event will occur whenever got a new WAN IP 2 To enable this function it is necessary to apply for a dynamic DNS account as your registered URL name 3 Please visit www DynDns org for more detailed information 4 11 UPnP Universal Plug and Play Universal Plug an...

Page 38: ...1 WAN 4 Ports Ethernet SOHO Router P 37 ...

Page 39: ...indows9x ME series run winipcfg NT4 2000 XP series ipconfig to check the client side by clicking on the Start button then select Run The PC should have 1 IP address 192 168 8 xxx xxx is from 17 to 128 2 Submask 255 255 255 0 3 Default Gateway IP 192 168 8 1 3 WAN can t obtain and IP address from a Cable or DSL modem in WAN Ensure if the WAN LED is correctly illuminated refer to Appendix C for corr...

Page 40: ...t out to the Internet NAT has 2 functions It adds a level security since the IP address of a PC connected to the private LAN is never transmitted on the Internet NAT allows SOHO Router to be used with low cost Internet accounts such as DSL or cable modems where only one IP address is provided by ISP Users can have many private addresses behind this single address provided by ISP 4 If all fails in ...

Page 41: ...tform compatible Yes any platform that supports Ethernet and TCP IP is compatible with SOHO Router like Windows 9x Me NT4 2000 XP Linux iMac Unix 11 Can I use my own public IPs and Domain or I have to use the IPs that provided by this router You can customize your own IPs through configuration of this router 12 What does the advanced features of SOHO Router The router s advanced features of the ro...

Page 42: ...signed by the operating system when there is a request for service Port numbers for server applications are pre assigned by the Internet Assigned Numbers Authority IANA and do not change Following is a short list of some well known port numbers Table A 1 Well Known TCP ports Port No Name TCP Description 20 FTP DATA FTP data 21 FTP FTP command 23 TELNET Terminal Connection 25 SMTP SMTP 53 DOMAIN Na...

Page 43: ...rated Typical Application B 1 Home User Application Figure B 1 Home user application DSL Cable modem B 2 SOHO environment Application Figure B 2 SOHO environment application Simple IP sharing Figure B 3 SOHO environment application DHCP Server in SOHO Router ...

Page 44: ...1 WAN 4 Ports Ethernet SOHO Router P 43 Figure B 4 SOHO environment application DHCP Server in LAN ...

Page 45: ...from one end of the cable to the other All 8 wires are used Table C 1 To determine which wire is wire number 1 hold the cable so that the end of the plastic RJ 45 tip the part that goes into a wall jack first is facing away from you Face the clip down so that the copper side faces up the springy clip will now be parallel to the floor when looking down on the copper side wire 1 is on the far left C...

Page 46: ...ecomes 1 1 2 2 3 3 6 6 C 3 3 Connection between Hub and Hub In a crossover cable the orders of the wires change from one end to the other Wire 1 becomes 3 and 2 becomes 6 The crossover cable is used in connecting hubs directly Table C 3 Crossover Cabling Wire Becomes 1 3 2 6 3 1 6 2 ...

Page 47: ...ddress Type in your customized IP address The default IP address of this product is 192 168 8 1 So you just can type in one IP Address like 192 168 8 xxx xxx can be numbers from 1to 253 Set the Subnet Mask as 255 255 255 0 In the New Gateway tab add IP address of this product The default IP Address of this product is 192 168 8 1 ...

Page 48: ...1 WAN 4 Ports Ethernet SOHO Router P 47 Change to DNS configuration tab enable DNS and add DNS values that provided by your ISP into DNS Server Search Order Click ok to finish ...

Page 49: ...P category 5 switched 10 100 Mbps auto MDIX LED indication Power Ready WAN Link Act 10 100 LAN Link Act 10 100 x4 Button Factory default setting Environmental Power Input External DC 5V 2A Dimensions 155 x 70 x 28 mm TBD Unit Weight 150g Certification FCC class B CE mark Operating Temperature 0 C to 40 C 32 F to 104 F Storage Temperature 20 C to 70 C 4 F to 157 F Operating Humidity 10 to 85 non co...

Reviews: