background image

Cerberus P 6311-072 

 

38 

Direction

 – Choices  are 

Both

Incoming

  and 

Outgoing

.  Select  which direction  of data 

flow you wish to apply the filters to. Note that 

Incoming and Outgoing

 are from the point 

of  view  of  your  router,  relative  to  the  interface  you  select. 

For  WAN

,  data  coming  from 

outside  your  system  is  considered  Incoming  and  data  leaving  your  system  is  Outgoing. 

For  LAN

,  data  leaving  your  system  is  considered  Incoming  and  data  entering  your 

system is Outgoing. 

IP / MAC Filter Rule Index

 – Select the IP / MAC Filter Rule Index you wish to modify. 

Rule  Type

  –  Select  filtering  by 

IP

  or 

MAC

  address.  Appearance  of  next  paragraphs 

depends on option you select from this list.

 

Active

 – Toggle this rule index on or off with 

Yes

 or 

No

, respectively. 

Source  IP  Address

  –  Enter  the  source  IP  address  you  wish  to  deny  access  to  your 

system. 

Subnet Mask

 – Enter the subnet mask of the source IP address. 

Port  Number

  –  Enter  the  port  number  of  the  source  IP  address.  Note  that  0  means  all 

that ports are allowed. 

Destination IP Address

 – Enter the destination IP address that you wish to deny access 

to your system. 

Subnet Mask

 – Enter the subnet mask of the destination IP address. 

Port Number

 – Enter the port number of the destination IP address. Note that 0 means 

that all ports are allowed. 

Protocol

 – Select the protocol to filter. Choices are 

TCP

UDP

, and 

ICMP

MAC  Address

  (only  when 

MAC

  is  selected  in 

Rule  Type

  option)  –  enter  source  MAC 

address. 

Rule Unmatched

 – Choices are 

Forward

 and 

Next

. Select what happens to the data in 

question if the rule you are currently editing is unmatched. 

 

Next

 means that the data is then compared to the next IP filter rule. 

 

Forward

 means that the data will be allowed into your system. Note that a 

Forward

 

rule  should  be  the  last  rule,  as  no  data  will  be  compared  to  rules  after  a 

Forward

 

rule. 

IP / MAC Filter Set Index

 – Select the IP / MAC filter set you wish to view. 

 
Please follow below steps to set your IP Filter: 

 

IP / MAC Filter Set Editing:

 Choose your 

IP / MAC Filter Set Index

, Interface and 

Direction options. Remember, Interface and Direction functions are affected with IP / 
MAC  Filter  Set  Index.  EX:  if  your  1

st

  index  set  of  IP  /  MAC  filter  set  PVC0  as 

Interface  and  Outgoing  as  Direction,  so  the  list  of  1

st

  IP  /  MAC  Filter  will  be  PVC0 

and Outgoing as their settings 

 

IP  /  MAC  Filter  Rule  Editing:

  Select  the 

IP  /  MAC  Filter  Rule  Index

  (up  to  6 

numbers for  each set index), select  IP  as  a 

Rule Type

  and choose 

Active

  option. 

As  an  example, 

Source  IP  Address

  is  192.168.1.10, 

Subnet  Mask

  is 

255.255.255.255, 

Destination  IP  Address

  & 

Subnet  Mask

  is  0.0.0.0, 

Port 

Number

 is 80. And, 

Protocol

 sets TCP. From this setting, it filters 192.168.1.14, so 

it  cannot  access  the  web.  Notice,  each  IP  /  MAC  Filter  Set  Index  can  has  up  to  6 
filters IP. At “

Rule Unmatched

” option, you must choose 

NEXT

 until the last filter IP 

choose 

Forward

 

After every setting is done, click 

SAVE

 to continue next IP / MAC Filter Editing. 

 

Summary of Contents for Cerberus P 6311-072

Page 1: ...2007 08 01 User s Manual PENTAGRAM Cerberus P 6311 072 The latest versions of manual drivers and applications are available on www pentagram eu ...

Page 2: ...OTE Any information and technical data are subject to change without prior notification and or indication in this manual 2007 PENTAGRAM All rights reserved copying and reproduction is strictly forbidden ...

Page 3: ...CONFIGURE ROUTER VIA WEB BROWSER 13 LOGIN 13 NAVIGATION 14 QUICK START WIZARD 15 INTERFACE SETUP TAB 20 ADVANCED SETUP TAB 27 ACCESS MANAGEMENT TAB 35 MAINTENANCE TAB 42 STATUS TAB 46 HELP TAB 50 TROUBLESHOOTING 51 USING LEDS TO DIAGNOSE PROBLEMS 51 PROBLEMS WITH THE WEB INTERFACE 51 PROBLEMS WITH THE LOGIN USERNAME AND PASSWORD 52 PROBLEMS WITH LAN INTERFACE 52 PROBLEMS WITH WAN INTERFACE 52 PROB...

Page 4: ...Cerberus P 6311 072 4 ...

Page 5: ...G are supported such as web browser ICQ FTP Telnet E mail News Net2phone Ping NetMeeting IP phone and others This protocol is used to enable simple and robust connectivity among stand alone devices and PCs from many different vendors and it makes setting up a network simple and affordable UPnP architecture leverages TCP IP and the Web to enable proximity networking in addition to control and data ...

Page 6: ...he router ensuring important data like gaming packets customer information or management information move through the router ay lightning speed even under heavy load The QoS features are configurable by source IP address destination IP address protocol and port You can throttle the speed at which different types of outgoing data pass through the router to ensure P2P users don t saturate upload ban...

Page 7: ... qualified service center Avoid using this product and all accessories outdoors Place the router on a stable surface Only use the power adapter that comes with the package Using a different voltage rating power adaptor may damage the router Front LEDs LED Action Description PPP Steady light PPPoA PPPoE connection established ADSL Off No ADSL signal Steady light ADSL signal is established Blinking ...

Page 8: ...ult settings USB Use this port to connect router to computer via USB LINE RJ 11 Connect the supplied RJ 11 telephone cable to this port when connecting to the ADSL telephone network Default Settings Before changing configuration familiarize yourself with these default settings IP Address 192 168 1 100 Subnet Mask 255 255 255 0 DHCP Server Enabled DHCP Server IP Address Pool 100 IP addresses from 1...

Page 9: ...just simply connect ADSL router and PC through the Ethernet cable Once you establish Internet connection you could browse the Web through the Ethernet cable Configure TCP IP This part will help you to configure your computer to communicate with router properly Computer must be equipped with network adapter connected directly to router You can also connect to router via network hub switch Default I...

Page 10: ...d user 1 Click Start Control Panel 2 Click View network status and tasks 3 Click View status for appropriate connection 4 On General tab Click the Properties button 5 On General tab select Internet Protocol Version 4 TCP IPv4 and click Properties 6 On General tab select Obtain an IP address automatically and Obtain DNS server address automatically 7 Click OK to save settings and close Internet Pro...

Page 11: ...and then Network Connections icon XP Default view 2 Double click the Local Area Connection icon 3 On General tab Click the Properties button 4 On General tab select Internet Protocol TCP IP and click Properties 5 On General tab select Obtain an IP address automatically and DNS server address automatically 6 Click OK to save settings and close Internet Protocol TCP IP Properties window ...

Page 12: ...Address tab select Obtain an IP address automatically 4 On DNS Configuration tab select Disable DNS 5 Click OK to save settings and close TCP IP Properties window To make sure that network adapter properly obtained an IP address from router s DHCP server click Start Run and type cmd Win 2000 XP or command Win 95 98 ME In command line type ipconfig all and check that value of the IP Address is 192 ...

Page 13: ...onfigured via web browser which is usually integrated with operating system Router offers clear and simple interface Login 1 Launch the Web browser 2 In address bar enter the default IP address http 192 168 1 100 3 If system password is set enter username and password default admin pentagram ...

Page 14: ...outer Interface Setup configure Internet and LAN functions Advanced Setup configure advanced features Access Management manage Internet access options Maintenance set a new password set the time zone upgrade or reload firmware and run diagnostic tests on the router Status router device information system logs and performance statistics Help available help topics ...

Page 15: ... settings of you device This Wizard is a helpful guide for first time uses to the device It is strongly recommended to use Quick Start to configure your ADSL settings Click on the RUN WIZARD button to start the Quick Start wizard The Quick Start wizard will open a new browser window with the following screen Please follow the quick start step by step to configure the device Click on NEXT to contin...

Page 16: ...rd and Confirmed Password fields Click on BACK to return to the previous screen on NEXT to continue or on EXIT to exit the wizard without saving Choose your Time Zone Select the appropriate time zone for your location from the dropdown list Click on BACK to return to the previous screen on NEXT to continue or on EXIT to exit the wizard without saving ...

Page 17: ...fier VPI and Virtual Channel Identifier VCI numbers assigned to you The valid range for the VPI is 0 to 255 The valid range for the VCI is 32 to 65535 0 to 31 is reserved for local management of ATM traffic PPPoA Point to Point Protocol over ATM Adaptation Layer 5 AAL5 PPPoA provides access control and billing functionality in a manner similar to dial up services using PPP The router encapsulates ...

Page 18: ...n BACK to return to the previous screen on NEXT to continue or on EXIT to exit the wizard without saving Static IP Address A static IP address connection uses the same IP each time you connect to your ISP Enter VPI Virtual Path Identifier VCI Virtual Channel Identifier IP Address Subnet mask ISP Gateway and select your Connection Type from the dropdown list Your ISP should provide the above inform...

Page 19: ...XIT to exit the wizard without saving Bridge Mode RFC 1483 explains two methods for Multi protocol Encapsulation over AAL5 The first method allows multiplexing of multiple protocols over just one ATM virtual circuit LLC based multiplexing The second method assumes that each individual protocol is carried over a separate ATM virtual circuit VC based multiplexing Please refer to RFC 1483 for more in...

Page 20: ... RIP2 B RIP2 M are both sent in RIP 2 format the difference is that RIP2 M using Multicast and RIP2 B using Broadcast format RIP Direction Select this option to specify the RIP direction None is for disabling the RIP function Both means the ADSL Router will periodically send routing information and accept routing information then incorporate into routing table IN only means the ADSL router will on...

Page 21: ...s you to set up how your router connects to the Internet If you already ran the Quick Start wizard the information you provided to the wizard should be entered into the fields already After you finish the changes click on the SAVE button to save your changes ...

Page 22: ... 53 bytes 424 bits so a maximum speed of 832 Kbps gives a maximum PCR of 1962 cells sec This rate is not guaranteed because it is dependent on the line speed SCR Sustained Cell Rate Sustained Cell Rate SCR is the mean cell rate of a burst on off traffic source that can be sent at the peak rate and a parameter for burst type traffic SCR may not be greater than the PCR the system default is 0 cells ...

Page 23: ... here Dynamic Route Select the RIP type and direction from the dropdown lists Multicast Select the multicast protocol you wish to use from the dropdown list Static IP Address Select this option to set static IP information Encapsulation Select your encapsulation type from the dropdown list Static IP Address Enter the static IP Address here IP Subnet Mask Enter the IP Subnet Mask here Gateway Enter...

Page 24: ...whether the router obtains the IP address statically or dynamically Static IP Address Enter the static IP address here Only if you chose Static above IP Subnet Mask Enter the IP subnet mask here Only if you chose Static above Gateway Enter the gateway here Only if you chose Static above NAT Select whether NAT Network Address Translation is Enabled or Disabled Default Route Select whether this PVC ...

Page 25: ...tting IP Subnet Mask Your ADSL router will automatically calculate the subnet mask based on the IP address that you assign Unless you are implementing sub netting use the subnet mask computed by the ADSL router Dynamic Route Select the Dynamic Route from RIP1 RIP2 B and RIP2 M Please refer to Internet Dynamic Route The only difference is the interface Multicast IGMP Internet Group Multicast Protoc...

Page 26: ...ter the amount of time you wish to lease out a given IP address DNS Relay Select the DNS relay option you wish to use from the dropdown list Primary DNS Enter the primary DNS server IP address you wish to use For user discovered DNS only Secondary DNS Enter the secondary DNS server IP address you wish to use For user discovered DNS only Relay A DHCP relay is a computer that forwards DHCP data betw...

Page 27: ...atically detect and block Denial of Service DoS attacks such as Ping of Death SYN Flood Port Scan and Land Attack SPI Select this option to Enable or Disable the SPI feature NOTE If you enable SPI all traffics initiate from WAN would be blocked including DMZ Virtual Server and ACL WAN side ...

Page 28: ...ay A gateway does the actual forwarding of the packets Enter the gateway s IP address in the field or select which PVC you wish to act as a gateway The gateway is an immediate neighbor of your ADSL Router that will forward the packet to the destination On the LAN the gateway must be a router on the same segment as your Router over Internet WAN the gateway must be the IP address of one of the remot...

Page 29: ...local network while the global address refers to the IP address of the host when the same packet is traveling in the WAN side Note that inside outside refers to the location of a host while global local refers to the IP address of a host used in a packet Thus an inside local address ILA is the IP address of an inside host of a packet when the packet is still in the local network while an inside gl...

Page 30: ...resses Simply select this option to setup the NAT function for your ADSL router Virtual Circuit The Virtual Circuit VC properties of the ATM VC interface identify a unique path that your ADSL Ethernet router uses to communicate via the ATM based network with the telephone company central office equipment Nat Status This filed shows the current status of the NAT function for the current VC Number o...

Page 31: ...ompany data Users of the public network outside the company can access only the DMZ host DMZ setting for Option selected in Number of IPs field in main NAT window DMZ Toggle the DMZ function Enabled or Disabled DMZ Host IP Address Enter the specified IP Address for DMZ host on the LAN side When you are done making changes click on SAVE to save your changes or on BACK to return to the previous scre...

Page 32: ...cation name or select one of predefined template Protocol Select protocol for which selected rule will be active Start Port Number End Port Number Enter the specific Start and End Port number you want to forward If it is one port only you can enter the End port number the same as Start port number For example set the FTP Virtual server you can set the start and end port number to 21 Local IP Addre...

Page 33: ...Local End IP Enter the local IP address you plan to map to Local Start IP is the starting local IP address Local End IP is the ending local IP address If the rule is for all local IPs then the Start IP is 0 0 0 0 and the End IP is 255 255 255 255 Public Start IP Public End IP Enter the Public IP Address you want to do NAT Public Start IP is the starting Public IP Address and Public End IP is the e...

Page 34: ...lect which mode your ADSL connection uses from the dropdown list The option has Auto Sync up ADSL2 ADSL2 G DMT T1 413 G LITE ADSL Type Select the ADSL type you use from the dropdown list ANNEX A ANNEX I ANNEX A L ANNEX M ANNEX A I J L M When you are done making changes click on SAVE to save your changes ...

Page 35: ...r If you choose Activated you only can access via router by listed IP addresses ACL Rule Index Index number from 1 and up to 16 Active Once you choose Yes then you can access the IP via router Application Each of these labels denotes a service that you may use to remotely manage the Router Choices are Web FTP Telnet SNMP Ping ALL Interface Select the access interface Choices are WAN LAN and Both U...

Page 36: ...es extensive firewall protection by restricting connection parameters to limit the risk of intrusion and defending against a wide array of common hacker attackers Appearance of this tab is dependent on option selected from Filter Type Selection list ...

Page 37: ...ables you to filter data based on source MAC Address or source destination IP Address or Port number IP MAC Filter Set Index The IP MAC Filter Set Index from 1 to 12 and each index can set up to 6 IP MAC Filter Interface Choices from PVC0 to PVC7 and LAN ...

Page 38: ...ress only when MAC is selected in Rule Type option enter source MAC address Rule Unmatched Choices are Forward and Next Select what happens to the data in question if the rule you are currently editing is unmatched Next means that the data is then compared to the next IP filter rule Forward means that the data will be allowed into your system Note that a Forward rule should be the last rule as no ...

Page 39: ...this option to Allow Deny ICQ MSN Select this option to Allow Deny MSN YMSG Select this option to Allow Deny Yahoo messenger Real Audio Video Select this option to Allow Deny Real Audio Video URL Filter URL Filter enables you to block access to web sites based on keywords Active Select Active to enable URL Filter URL Index This is item number URL Allow you to prevent users on your network from acc...

Page 40: ...est from management station The default password is public When you are done making changes click on SAVE to save your changes UPnP UPnP Universal Plug and Play is a distributed open networking standard that uses TCP IP for simple peer to peer network connectivity between devices An UPnP device can dynamically join a network obtain an IP address convey its capabilities and learn about other device...

Page 41: ...uter using a DNS like address for instance myhost dhs org where my host is a name of your choice that will never change instead of using an IP address that changes each time you reconnect Your friends or relatives will always be able to call you even if they don t know your IP address First of all you need to have registered a dynamic DNS account with www dyndns org This is for people with a dynam...

Page 42: ...nges Note If you ever forget the password to log in you may press the RESET button up to 6 second to restore the factory default settings The Factory Default Settings for User Name Password are admin pentagram Time Zone The system time is the time used by the device for scheduling services You can manually set the time or connect to a NTP Network Time Protocol server If an NTP server is set you wi...

Page 43: ...ed to use daylight savings time NTP Server Address Type the IP address or domain name of your timeserver Check with your ISP network administrator if you are unsure of this information Click on SAVE to save your changes or on CANCEL to exit without saving PC s Clock Router will synchronize its clock with computer Click on SAVE to save your changes or on CANCEL to exit without saving Manually Date ...

Page 44: ...ally restarts Please wait for the device to finish restarting This should take about 2 minutes or more You need to log in again if you want to access the device Current Firmware Version This filed displays the current firmware version New Firmware Location Type in the location of the file you want to upload in this field or click Browse to find it New Romfile Location Type in the location of the R...

Page 45: ...ding the DEFAULT button on the back panel of your router in for 10 12 second while the router is turned on Click RESTART to start this process Diagnostics The Diagnostic Test page shows the test results for the connectivity of the physical layer and protocol layer for LAN WAN sides Virtual Circuit Select which PVC you wish to test from the dropdown list The router will automatically run diagnostic...

Page 46: ...tion Note that these fields are read only and are not meant for diagnostic purposes Except the Virtual Circuit click the drop down list and select the name of the Virtual Circuit on which the system status is to be shown Device Information Firmware Version This filed displays current firmware version MAC Address The MAC Media Access Control or Ethernet address unique to your modem ...

Page 47: ...G dmt or T1 413 Annex Mode This field displays the ADSL annex modes for Annex A Downstream Upstream Status of SNR Margin Line Attenuation and Data Rate SNR Margin Amount of increased noise that can be tolerated while maintaining the designed BER bit error rate The SNR Margin is set by Central Office DSLAM If the SNR Margin is increased bit error rate performance will improve but the data rate will...

Page 48: ... with the ISP s computers for DNS and gateway IP addresses The device keeps a running log of events and activities occurring on the Router You can click Save Log to display a Windows File Download dialog box that enables opening or saving the contents of the log to your PC To remove all entries from the list click Clear Log New entries will begin accumulating If the device is rebooted the logs are...

Page 49: ...if the device is rebooted You can select Ethernet ADSL to view the statistics report of LAN WAN Ethernet The Ethernet screen gives you information on how much data your router has transmitted and received across the Ethernet connection Click on REFRESH to update the screen ADSL The ADSL screen gives you information about how much data your router has transmitted or received across the ADSL connect...

Page 50: ...Cerberus P 6311 072 50 Help Tab Router s online help ...

Page 51: ...our router and the computer or hub 2 Check for faulty Ethernet cables 3 Make sure your computer s Ethernet card is working properly 4 If these steps fail to correct the problem contact your local distributor for assistance ADSL LED The ADSL LED on the front panel does not light up 1 Check the telephone wire and connections between the router ADSL port and the wall jack 2 Make sure that the telepho...

Page 52: ...PC connected If it is off check the cables between your router and the PC Make sure you have uninstalled any software firewall for troubleshooting 2 Make sure that the IP address and the subnet mask is consistent between the router and the workstation Problems with WAN Interface Initialization of the ADSL connection failed 1 Check the cable connections between the ADSL port and the wall jack The A...

Page 53: ...and Password be sure to use the correct casing Problems with the Internet Access I cannot access the Internet 1 Make sure the router is turned on and connected to the network 2 If the ADSL LED is off refer to Section ADSL LED of this troubleshooting 3 Verify your WAN settings 4 Make sure you entered the correct user name and password Internet connection disconnects 1 If you use PPPoA or PPPoE enca...

Page 54: ...Cerberus P 6311 072 54 NOTES ...

Reviews: