background image

Cerberus P 6331-42 

 

32

propagated to other hosts through RIP broadcasts. If you choose No, this route is kept private 
and is not included in the RIP broadcasts. 
 
When you are done making changes, click on 

SAVE

 to save your changes, 

DELETE

 to delete 

the rule with the parameters you set, 

BACK

 to return to the previous screen or 

CANCEL

 to 

discard changes. 
 

NAT 

What NAT Does 

NAT changes the source IP address in a packet received from a subscriber (the inside 

local address) to another (the inside global address) before forwarding the packet to the WAN 
side. When the response comes back, NAT translates the destination address (the inside 
global address) back to the inside local address before forwarding it to the original inside host. 
Note that the IP address (either local or global) of an outside host is never changed. The 
global IP addresses for the inside hosts can be either static or dynamically assigned by the 
ISP. You may also designate servers, such as a Web server and a telnet server, on your local 
network and make them accessible to the outside world. With no servers defined, your router 
filters out all incoming inquiries, thus preventing intruders from probing your network. For more 
information on IP address translation, refer to RFC 1631, The IP Network Address Translator 
(NAT). 

Inside/outside indicates where a host is located relative to the router. The computers 

hosts of your LAN are inside, while the Web servers on the Internet are outside. Global/local 
indicates the IP address of a host in a packet as the packet traverses a router. The local 
address refers to the IP address of a host when the packet is in the local network, while the 
global address refers to the IP address of the host when the same packet is traveling in the 
WAN side. 

Note that inside/outside refers to the location of a host, while global/local refers to the IP 

address of a host used in a packet. Thus, an inside local address (ILA) is the IP address of an 
inside host of a packet when the packet is still in the local network, while an inside global 
address (IGA) is the IP address of the same inside host when the packet is on the WAN side. 
The following table summarizes this information. 
 

How NAT Works 

Each packet has two addresses – a source address and a destination address. For 

outgoing packets, the ILA is the source address on the LAN, and the IGA is the source 
address on the WAN. For incoming packets, the ILA is the destination address on the LAN, 
and the IGA is the destination address on the WAN. NAT maps private (local) IP addresses to 
globally unique ones required for communication with hosts on other networks. It replaces the 
original IP source address (and TCP or UDP source port numbers for Many-to-One and Many-
to-Many Overload NAT mapping) in each packet and then forwards it to the Internet. The 
ROUTER keeps track of the original addresses and port numbers so incoming reply packets 
can have their original values restored. 
 

NAT Mapping Types 

NAT supports five types of IP/port mapping. They are: 

One-to-One

 – In One-to-One mode, the TC3162 EVM maps one local IP address to one 

global IP address. 

Many-to-One

 – In Many-to-One mode, the TC3162 EVM maps multiple local IP addresses to 

one global IP address. 

Many-to-Many Overload

 – In Many-to-Many Overload mode, the TC3162 EVM maps multiple 

local IP addresses to shared global IP addresses. 

Summary of Contents for Cerberus P 6331-42

Page 1: ...User s Manual PENTAGRAM Cerberus P 6331 42 The latest versions of manual drivers and applications are available on www pentagram eu 2008 10 09 ...

Page 2: ...OTE Any information and technical data are subject to change without prior notification and or indication in this manual 2007 PENTAGRAM All rights reserved copying and reproduction is strictly forbidden ...

Page 3: ...NFIGURE ROUTER VIA WEB BROWSER 13 LOGIN 13 NAVIGATION 14 QUICK START WIZARD 15 INTERFACE SETUP TAB 20 ADVANCED SETUP TAB 30 ACCESS MANAGEMENT TAB 38 MAINTENANCE TAB 46 STATUS TAB 50 HELP TAB 54 TROUBLESHOOTING 55 USING LEDS TO DIAGNOSE PROBLEMS 55 PROBLEMS WITH THE WEB INTERFACE 56 PROBLEMS WITH THE LOGIN USERNAME AND PASSWORD 56 PROBLEMS WITH LAN INTERFACE 56 PROBLEMS WITH WAN INTERFACE 56 PROBLE...

Page 4: ...Cerberus P 6331 42 4 ...

Page 5: ...ynamic Host Control Protocol client and server services allow multiple users to get IP addresses automatically when the router boots up Simply set local machines as a DHCP client to accept a dynamically assigned IP address from the DHCP server and reboot Each time a local machine is powered up the router recognizes it and assigns an IP address to instantly connect it to the LAN For advanced users ...

Page 6: ...g the operation concept while sharing the same ISP account and paying for one access account No PPPoE client software is required for the local computer Automatic Reconnect and Disconnect Timeout Idle Timer functions are also provided Virtual Server You can specify which services are visible to outside users The router detects an incoming service request and forwards it to the specific local compu...

Page 7: ... source for the router as other equipment Do not repair or open the case by yourself If the router is too hot turn off the power immediately and have it repaired at a qualified service center Avoid using this product and all accessories outdoors Place the router on a stable surface Only use the power adapter that comes with the package Using a different voltage rating power adaptor may damage the ...

Page 8: ...g the device on off Default Settings Before changing configuration familiarize yourself with these default settings LAN WLAN Ports IP Address 192 168 1 100 Subnet Mask 255 255 255 0 DHCP Server Enabled DHCP Server IP Address Pool 100 IP addresses from 192 168 1 101 IP Address Lease Time 259200 seconds 72 hours User Name admin Password pentagram If you ever forget the password to log in you may nee...

Page 9: ...must be in standard EIA TIA 56A and the second in EIA TIA 568B After connecting the device to one of the ports corresponding LED will begin to blink That signals the process of the auto checking of port and the negotiation of connection speed rate Connecting via WLAN Interface Wireless Card To connect PC to Cerberus via WLAN Wireless Adapter must be properly installed and configured and both route...

Page 10: ...d user 1 Click Start Control Panel 2 Click View network status and tasks 3 Click View status for appropriate connection 4 In General tab Click the Properties button 5 In General tab select Internet Protocol Version 4 TCP IPv4 and click Properties 6 In General tab select Obtain an IP address automatically and Obtain DNS server address automatically 7 Click OK to save settings and close Internet Pro...

Page 11: ...and then Network Connections icon XP Default view 2 Double click the Local Area Connection icon 3 In General tab Click the Properties button 4 In General tab select Internet Protocol TCP IP and click Properties 5 In General tab select Obtain an IP address automatically and DNS server address automatically 6 Click OK to save settings and close Internet Protocol TCP IP Properties window ...

Page 12: ... select Obtain an IP address automatically 4 In DNS Configuration tab select Disable DNS 5 Click OK to save settings and close TCP IP Properties window To make sure that network adapter properly obtained an IP address from router s DHCP server 1 click Start Run 2 type cmd Win 2000 XP or command Win 95 98 ME and press Enter 3 in command line type ipconfig all and press Enter 4 check if the IP Addre...

Page 13: ...ed via web browser which is usually integrated with operating system Router offers clear and simple interface Login 1 Launch the Web browser 2 Type the default router s IP address http 192 168 1 100 in the address bar 3 If system password is set enter User Name and Password default admin pentagram ...

Page 14: ...uter Interface Setup configure Internet and LAN functions Advanced Setup configure advanced features Access Management manage Internet access options Maintenance set a new password set the time zone upgrade or reload firmware and run diagnostic tests on the router Status router device information system logs and performance statistics Help available help topics ...

Page 15: ...settings of you device This Wizard is a helpful guide for first time uses to the device It is strongly recommended to use Quick Start to configure your ADSL settings Click on the RUN WIZARD button to start the Quick Start wizard The Quick Start wizard will open a new browser window with the following screen Please follow the quick start step by step to configure the device Click on NEXT to continu...

Page 16: ...d and Confirmed Password fields Click on BACK to return to the previous screen on NEXT to continue or on EXIT to exit the wizard without saving Choose your Time Zone Select the appropriate time zone for your location from the dropdown list Click on BACK to return to the previous screen on NEXT to continue or on EXIT to exit the wizard without saving ...

Page 17: ...fier VPI and Virtual Channel Identifier VCI numbers assigned to you The valid range for the VPI is 0 to 255 The valid range for the VCI is 32 to 65535 0 to 31 is reserved for local management of ATM traffic PPPoA Point to Point Protocol over ATM Adaptation Layer 5 AAL5 PPPoA provides access control and billing functionality in a manner similar to dial up services using PPP The router encapsulates ...

Page 18: ... BACK to return to the previous screen on NEXT to continue or on EXIT to exit the wizard without saving Static IP Address A static IP address connection uses the same IP each time you connect to your ISP Enter VPI Virtual Path Identifier VCI Virtual Channel Identifier IP Address Subnet mask ISP Gateway and select your Connection Type from the dropdown list Your ISP should provide the above informa...

Page 19: ...IT to exit the wizard without saving Bridge Mode RFC 1483 explains two methods for Multi protocol Encapsulation over AAL5 The first method allows multiplexing of multiple protocols over just one ATM virtual circuit LLC based multiplexing The second method assumes that each individual protocol is carried over a separate ATM virtual circuit VC based multiplexing Please refer to RFC 1483 for more inf...

Page 20: ... RIP2 B RIP2 M are both sent in RIP 2 format the difference is that RIP2 M using Multicast and RIP2 B using Broadcast format RIP Direction Select this option to specify the RIP direction None is for disabling the RIP function Both means the ADSL Router will periodically send routing information and accept routing information then incorporate into routing table IN only means the ADSL router will on...

Page 21: ...s you to set up how your router connects to the Internet If you already ran the Quick Start wizard the information you provided to the wizard should be entered into the fields already After you finish the changes click on the SAVE button to save your changes ...

Page 22: ... 53 bytes 424 bits so a maximum speed of 832 Kbps gives a maximum PCR of 1962 cells sec This rate is not guaranteed because it is dependent on the line speed SCR Sustained Cell Rate Sustained Cell Rate SCR is the mean cell rate of a burst on off traffic source that can be sent at the peak rate and a parameter for burst type traffic SCR may not be greater than the PCR the system default is 0 cells ...

Page 23: ... here Dynamic Route Select the RIP type and direction from the dropdown lists Multicast Select the multicast protocol you wish to use from the dropdown list Static IP Address Select this option to set static IP information Encapsulation Select your encapsulation type from the dropdown list Static IP Address Enter the static IP Address here IP Subnet Mask Enter the IP Subnet Mask here Gateway Enter...

Page 24: ...hether the router obtains the IP address statically or dynamically Static IP Address Enter the static IP address here Only if you chose Static above IP Subnet Mask Enter the IP subnet mask here Only if you chose Static above Gateway Enter the gateway here Only if you chose Static above NAT Select whether NAT Network Address Translation is Enabled or Disabled Default Route Select whether this PVC w...

Page 25: ... IP Subnet Mask Your ADSL router will automatically calculate the subnet mask based on the IP address that you assign Unless you are implementing sub netting use the subnet mask computed by the ADSL router Dynamic Route Select the Dynamic Route from RIP1 RIP2 B and RIP2 M Please refer to Internet Dynamic Route The only difference is the interface Multicast IGMP Internet Group Multicast Protocol is...

Page 26: ...er the amount of time you wish to lease out a given IP address DNS Relay Select the DNS relay option you wish to use from the dropdown list Primary DNS Enter the primary DNS server IP address you wish to use For user discovered DNS only Secondary DNS Enter the secondary DNS server IP address you wish to use For user discovered DNS only Relay A DHCP relay is a computer that forwards DHCP data betwe...

Page 27: ...field Beacon Interval The Beacon Interval value indicates the frequency interval of the beacon Enter a value between 20 and 1000 A beacon is a packet broadcast by the Router to synchronize the wireless network RTS CTS The RTS Request To Send threshold number of bytes for enabling RTS CTS handshake Data with its frame size larger than this value will perform the RTS CTS handshake Set this attribute...

Page 28: ...tion can not obtain the SSID through passive scanning Select Yes to make the SSID visible so a station can obtain in the SSID through Passive scanning Authentication Type Appearance of next paragraph depends on this option WEP Wired Equivalent Privacy encrypts data frames before transmitting over the wireless network Select Disable to allow all wireless computers to communicate with the access poi...

Page 29: ...ociated with the wireless stations access to the ADSL Router Active Use this option to enable or disable MAC address filtering Action Select Deny Association to block access to the router MAC addresses not listed will be allowed to access the router Select Allow Association to permit access to the router MAC addresses not listed will be denied access to the router Mac Address 1 8 list of MAC addre...

Page 30: ...tically detect and block Denial of Service DoS attacks such as Ping of Death SYN Flood Port Scan and Land Attack SPI Select this option to Enable or Disable the SPI feature NOTE If you enable SPI all traffics initiate from WAN would be blocked including DMZ Virtual Server and ACL WAN side ...

Page 31: ...y A gateway does the actual forwarding of the packets Enter the gateway s IP address in the field or select which PVC you wish to act as a gateway The gateway is an immediate neighbor of your ADSL Router that will forward the packet to the destination On the LAN the gateway must be a router on the same segment as your Router over Internet WAN the gateway must be the IP address of one of the remote...

Page 32: ... refers to the IP address of a host when the packet is in the local network while the global address refers to the IP address of the host when the same packet is traveling in the WAN side Note that inside outside refers to the location of a host while global local refers to the IP address of a host used in a packet Thus an inside local address ILA is the IP address of an inside host of a packet wh...

Page 33: ...as the public IP address you use on the Internet You define NAT rules that specify exactly how and when to translate between public and private IP addresses Simply select this option to setup the NAT function for your ADSL router Virtual Circuit The Virtual Circuit VC properties of the ATM VC interface identify a unique path that your ADSL Ethernet router uses to communicate via the ATM based netw...

Page 34: ...c network It prevents outside users from getting direct access to s server that has company data Users of the public network outside the company can access only the DMZ host DMZ setting for Option selected in Number of IPs field in main NAT window DMZ Toggle the DMZ function Enabled or Disabled DMZ Host IP Address Enter the specified IP Address for DMZ host on the LAN side When you are done making...

Page 35: ...lication name or select one of predefined template Protocol Select protocol for which selected rule will be active Start Port Number End Port Number Enter the specific Start and End Port number you want to forward If it is one port only you can enter the End port number the same as Start port number For example set the FTP Virtual server you can set the start and end port number to 21 Local IP Add...

Page 36: ...P Local End IP Enter the local IP address you plan to map to Local Start IP is the starting local IP address Local End IP is the ending local IP address If the rule is for all local IPs then the Start IP is 0 0 0 0 and the End IP is 255 255 255 255 Public Start IP Public End IP Enter the Public IP Address you want to do NAT Public Start IP is the starting Public IP Address and Public End IP is the...

Page 37: ...ect which mode your ADSL connection uses from the dropdown list The option has Auto Sync up ADSL2 ADSL2 G DMT T1 413 G LITE ADSL Type Select the ADSL type you use from the dropdown list ANNEX A ANNEX I ANNEX A L ANNEX M ANNEX A I J L M When you are done making changes click on SAVE to save your changes ...

Page 38: ...er If you choose Activated you only can access via router by listed IP addresses ACL Rule Index Index number from 1 and up to 16 Active Once you choose Yes then you can access the IP via router Application Each of these labels denotes a service that you may use to remotely manage the Router Choices are Web FTP Telnet SNMP Ping ALL Interface Select the access interface Choices are WAN LAN and Both ...

Page 39: ...s extensive firewall protection by restricting connection parameters to limit the risk of intrusion and defending against a wide array of common hacker attackers Appearance of this tab is dependent on option selected from Filter Type Selection list ...

Page 40: ...ables you to filter data based on source MAC Address or source destination IP Address or Port number IP MAC Filter Set Index The IP MAC Filter Set Index from 1 to 12 and each index can set up to 6 IP MAC Filter Interface Choices from PVC0 to PVC7 and LAN ...

Page 41: ...ess only when MAC is selected in Rule Type option enter source MAC address Rule Unmatched Choices are Forward and Next Select what happens to the data in question if the rule you are currently editing is unmatched Next means that the data is then compared to the next IP filter rule Forward means that the data will be allowed into your system Note that a Forward rule should be the last rule as no d...

Page 42: ...his option to Allow Deny ICQ MSN Select this option to Allow Deny MSN YMSG Select this option to Allow Deny Yahoo messenger Real Audio Video Select this option to Allow Deny Real Audio Video URL Filter URL Filter enables you to block access to web sites based on keywords Active Select Active to enable URL Filter URL Index This is item number URL Allow you to prevent users on your network from acce...

Page 43: ...uter is called a management station and the modem is called an SNMP agent The data that can be accessed via SNMP is stored in a Management Information Database MIB on the modem Get Community Select to set the password for incoming Get and GetNext request from management station Set Community Select to set the password for incoming Set request from management station The default password is cerberu...

Page 44: ...parate icon UPnP You can choose Activated or Deactivated option from this session Auto Configured UPnP network devices can automatically configure network addressing announce their presence in the network to other UPnP devices and enable exchange of simple product and service descriptions Choose Activated option to allow UPnP enabled applications to automatically configure the ADSL Router so that ...

Page 45: ...is for people with a dynamic IP from their ISP or DHCP server that would still like to have a DNS name The Dynamic DNS service provider will give you a password or key Dynamic DNS Choose the option for Activated or Deactivated DDNS Service Provider The default Dynamic DNS service provider is www dyndns org My Host Name Type the domain name assigned to your ADSL by your Dynamic DNS provider E mail ...

Page 46: ...nges Note If you ever forget the password to log in you may press the RESET button up to 6 second to restore the factory default settings The Factory Default Settings for User Name Password are admin pentagram Time Zone The system time is the time used by the device for scheduling services You can manually set the time or connect to a NTP Network Time Protocol server If an NTP server is set you wi...

Page 47: ...isabled to use daylight savings time NTP Server Address Type the IP address or domain name of your timeserver Check with your ISP network administrator if you are unsure of this information Click on SAVE to save your changes or on CANCEL to discard changes PC s Clock Router will synchronize its clock with computer Click on SAVE to save your changes or on CANCEL to discard changes Manually Date Ent...

Page 48: ...ill restart after the upgrade After a success upload the system automatically restarts Please wait for the device to finish restarting This should take about 2 minutes or more You need to log in again if you want to access the device Current Firmware Version This filed displays the current firmware version New Firmware Location Type in the location of the file you want to upload in this field or c...

Page 49: ...Current Settings You may also reset your router to factory settings by holding the RESET button on the back panel of your router in for 10 12 second while the router is turned on Click RESTART to start this process Diagnostics The Diagnostic Test page shows the test results for the connectivity of the physical layer and protocol layer for LAN WAN sides Virtual Circuit Select which PVC you wish to ...

Page 50: ...ion Note that these fields are read only and are not meant for diagnostic purposes Except the Virtual Circuit click the drop down list and select the name of the Virtual Circuit on which the system status is to be shown Device Information Firmware Version This filed displays current firmware version MAC Address The MAC Media Access Control or Ethernet address unique to your modem ...

Page 51: ...nd status Modulation This field displays the ADSL modulation status for G dmt or T1 413 Annex Mode This field displays the ADSL annex modes for Annex A Downstream Upstream Status of SNR Margin Line Attenuation and Data Rate SNR Margin Amount of increased noise that can be tolerated while maintaining the designed BER bit error rate The SNR Margin is set by Central Office DSLAM If the SNR Margin is ...

Page 52: ...tem communication with other devices such as the results of negotiations with the ISP s computers for DNS and gateway IP addresses The device keeps a running log of events and activities occurring on the Router You can click Save Log to display a Windows File Download dialog box that enables opening or saving the contents of the log to your PC To remove all entries from the list click Clear Log Ne...

Page 53: ...f the device is rebooted You can select Ethernet ADSL to view the statistics report of LAN WAN Ethernet The Ethernet screen gives you information on how much data your router has transmitted and received across the Ethernet connection Click on REFRESH to update the screen ADSL The ADSL screen gives you information about how much data your router has transmitted or received across the ADSL connecti...

Page 54: ...31 42 54 Wireless The Wireless screen gives you information about how much data your router has transmitted or received across the WLAN connection Click on REFRESH to update the screen Help Tab Router s online help ...

Page 55: ... In this case you should contact your vendor LAN LED The LAN LED on the front panel does not light up 1 Check the Ethernet cable connections between your router and the computer or hub 2 Check for faulty Ethernet cables 3 Make sure your computer s Ethernet card is working properly 4 If these steps fail to correct the problem contact your local distributor for assistance ADSL LED The ADSL LED on th...

Page 56: ...nsitive Make sure that you enter the correct password and username using the proper casing 2 Press the RESET button for five seconds and then release it When the ADSL LED begins to blink the defaults have been restored and the router restarts Problems with LAN Interface I cannot access the router from the LAN or ping any computer on the LAN 1 Check the Ethernet LEDs on the front panel A LAN LED sh...

Page 57: ...ctions 1 The ISP provides the WAN IP address after authenticating you Authentication may be through the user name and password the MAC address or the host name 2 The username and password apply to PPPoE and PPPoA encapsulation only Make sure that you have entered the correct Service Type User Name and Password be sure to use the correct casing Problems with the Internet Access I cannot access the ...

Page 58: ...Cerberus P 6331 42 58 ...

Page 59: ...Cerberus P 6331 42 59 ...

Page 60: ...Cerberus P 6331 42 60 ...

Reviews: