background image

Cerberus P 6331-4A 

 

46

Direction

 – Choices are 

Both

Incoming

 and 

Outgoing

. Select which direction of data 

flow you wish to apply the filters to. Note that 

Incoming 

and

 Outgoing

 are from the point 

of view of your router, relative to the interface you select. 

For WAN

, data coming from 

outside your system is considered Incoming and data leaving your system is Outgoing. 

For LAN

, data leaving your system is considered Incoming and data entering your 

system is Outgoing. 

IP / MAC Filter Rule Index

 – Select the IP / MAC Filter Rule Index you wish to modify. 

Rule Type

 – Select filtering by 

IP

 or 

MAC

 address. Appearance of next paragraphs 

depends on option you select from this list.

 

Active

 – Toggle this rule index on or off with 

Yes

 or 

No

, respectively. 

Source IP Address

 – Enter the source IP address you wish to deny access to your 

system. 

Subnet Mask

 – Enter the subnet mask of the source IP address. 

Port Number

 – Enter the port number of the source IP address. Note that 0 means all 

that ports are allowed. 

Destination IP Address

 – Enter the destination IP address that you wish to deny access 

to your system. 

Subnet Mask

 – Enter the subnet mask of the destination IP address. 

Port Number

 – Enter the port number of the destination IP address. Note that 0 means 

that all ports are allowed. 

Protocol

 – Select the protocol to filter. Choices are 

TCP

UDP

, and 

ICMP

MAC Address

 (only when 

MAC

 is selected in 

Rule Type

 option) – enter source MAC 

address. 

Rule Unmatched

 – Choices are 

Forward

 and 

Next

. Select what happens to the data in 

question if the rule you are currently editing is unmatched. 

 

Next

 means that the data is then compared to the next IP filter rule. 

 

Forward

 means that the data will be allowed into your system. Note that a 

Forward

 

rule should be the last rule, as no data will be compared to rules after a 

Forward

 

rule. 

IP / MAC Filter Set Index

 – Select the IP / MAC filter set you wish to view. 

 
Please follow below steps to set your IP Filter: 

 

IP / MAC Filter Set Editing:

 Choose your 

IP / MAC Filter Set Index

, Interface and 

Direction options. Remember, Interface and Direction functions are affected with IP / 
MAC Filter Set Index. EX: if your 1

st

 index set of IP / MAC filter set PVC0 as 

Interface and Outgoing as Direction, so the list of 1

st

 IP / MAC Filter will be PVC0 

and Outgoing as their settings 

 

IP / MAC Filter Rule Editing:

 Select the 

IP / MAC Filter Rule Index

 (up to 6 

numbers for each set index), select IP as a 

Rule Type

 and choose 

Active

 option. 

As an example, 

Source IP Address

 is 192.168.1.10, 

Subnet Mask

 is 

255.255.255.255, 

Destination IP Address

 & 

Subnet Mask

 is 0.0.0.0, 

Port 

Number

 is 80. And, 

Protocol

 sets TCP. From this setting, it filters 192.168.1.14, so 

it cannot access the web. Notice, each IP / MAC Filter Set Index can has up to 6 
filters IP. At “

Rule Unmatched

” option, you must choose 

NEXT

 until the last filter IP 

choose 

Forward

 

After every setting is done, click 

SAVE

 to continue next IP / MAC Filter Editing. 

 

Summary of Contents for Cerberus P 6331-4A

Page 1: ...Installation and User s Manual PENTAGRAM Cerberus P 6331 4A The latest versions of manual drivers and applications are available on www pentagram eu 2007 09 12 ...

Page 2: ...OTE Any information and technical data are subject to change without prior notification and or indication in this manual 2007 PENTAGRAM All rights reserved copying and reproduction is strictly forbidden ...

Page 3: ...NFIGURE ROUTER VIA WEB BROWSER 13 LOGIN 13 NAVIGATION 14 QUICK START WIZARD 15 INTERFACE SETUP TAB 20 ADVANCED SETUP TAB 30 ACCESS MANAGEMENT TAB 43 MAINTENANCE TAB 51 STATUS TAB 55 HELP TAB 59 TROUBLESHOOTING 60 USING LEDS TO DIAGNOSE PROBLEMS 60 PROBLEMS WITH THE WEB INTERFACE 60 PROBLEMS WITH THE LOGIN USERNAME AND PASSWORD 61 PROBLEMS WITH LAN INTERFACE 61 PROBLEMS WITH WAN INTERFACE 61 PROBLE...

Page 4: ...Cerberus P 6331 4A 4 ...

Page 5: ...ynamic Host Control Protocol client and server services allow multiple users to get IP addresses automatically when the router boots up Simply set local machines as a DHCP client to accept a dynamically assigned IP address from the DHCP server and reboot Each time a local machine is powered up the router recognizes it and assigns an IP address to instantly connect it to the LAN For advanced users ...

Page 6: ...g the operation concept while sharing the same ISP account and paying for one access account No PPPoE client software is required for the local computer Automatic Reconnect and Disconnect Timeout Idle Timer functions are also provided Virtual Server You can specify which services are visible to outside users The router detects an incoming service request and forwards it to the specific local compu...

Page 7: ...umidity or high temperatures Do not use the same power source for the router as other equipment Do not repair or open the case by yourself If the router is too hot turn off the power immediately and have it repaired at a qualified service center Avoid using this product and all accessories outdoors Place the router on a stable surface Only use the power adapter that comes with the package Using a ...

Page 8: ...cable to this port when connecting to the ADSL telephone network ON OFF Power switch button PWR Connect the supplied power adapter to this jack Default Settings Before changing configuration familiarize yourself with these default settings LAN WLAN Ports IP Address 192 168 1 100 Subnet Mask 255 255 255 0 DHCP Server Enabled DHCP Server IP Address Pool 100 IP addresses from 192 168 1 101 IP Address...

Page 9: ...ired with RJ 45 connectors In case of straight cable both connectors must be crimped in standard EIA TIA 568B In case of Crossover cable one connector must be in standard EIA TIA 56A and the second in EIA TIA 568B After connecting the device to one of the ports corresponding LED will begin to blink That signals the process of the auto checking of port and the negotiation of connection speed rate C...

Page 10: ...d user 1 Click Start Control Panel 2 Click View network status and tasks 3 Click View status for appropriate connection 4 In General tab Click the Properties button 5 In General tab select Internet Protocol Version 4 TCP IPv4 and click Properties 6 In General tab select Obtain an IP address automatically and Obtain DNS server address automatically 7 Click OK to save settings and close Internet Pro...

Page 11: ...and then Network Connections icon XP Default view 2 Double click the Local Area Connection icon 3 In General tab Click the Properties button 4 In General tab select Internet Protocol TCP IP and click Properties 5 In General tab select Obtain an IP address automatically and DNS server address automatically 6 Click OK to save settings and close Internet Protocol TCP IP Properties window ...

Page 12: ... select Obtain an IP address automatically 4 In DNS Configuration tab select Disable DNS 5 Click OK to save settings and close TCP IP Properties window To make sure that network adapter properly obtained an IP address from router s DHCP server 1 click Start Run 2 type cmd Win 2000 XP or command Win 95 98 ME and press Enter 3 in command line type ipconfig all and press Enter 4 check if the IP Addre...

Page 13: ...ed via web browser which is usually integrated with operating system Router offers clear and simple interface Login 1 Launch the Web browser 2 Type the default router s IP address http 192 168 1 100 in the address bar 3 If system password is set enter User Name and Password default admin pentagram ...

Page 14: ...uter Interface Setup configure Internet and LAN functions Advanced Setup configure advanced features Access Management manage Internet access options Maintenance set a new password set the time zone upgrade or reload firmware and run diagnostic tests on the router Status router device information system logs and performance statistics Help available help topics ...

Page 15: ...settings of you device This Wizard is a helpful guide for first time uses to the device It is strongly recommended to use Quick Start to configure your ADSL settings Click on the RUN WIZARD button to start the Quick Start wizard The Quick Start wizard will open a new browser window with the following screen Please follow the quick start step by step to configure the device Click on NEXT to continu...

Page 16: ...d and Confirmed Password fields Click on BACK to return to the previous screen on NEXT to continue or on EXIT to exit the wizard without saving Choose your Time Zone Select the appropriate time zone for your location from the dropdown list Click on BACK to return to the previous screen on NEXT to continue or on EXIT to exit the wizard without saving ...

Page 17: ...fier VPI and Virtual Channel Identifier VCI numbers assigned to you The valid range for the VPI is 0 to 255 The valid range for the VCI is 32 to 65535 0 to 31 is reserved for local management of ATM traffic PPPoA Point to Point Protocol over ATM Adaptation Layer 5 AAL5 PPPoA provides access control and billing functionality in a manner similar to dial up services using PPP The router encapsulates ...

Page 18: ... BACK to return to the previous screen on NEXT to continue or on EXIT to exit the wizard without saving Static IP Address A static IP address connection uses the same IP each time you connect to your ISP Enter VPI Virtual Path Identifier VCI Virtual Channel Identifier IP Address Subnet mask ISP Gateway and select your Connection Type from the dropdown list Your ISP should provide the above informa...

Page 19: ...IT to exit the wizard without saving Bridge Mode RFC 1483 explains two methods for Multi protocol Encapsulation over AAL5 The first method allows multiplexing of multiple protocols over just one ATM virtual circuit LLC based multiplexing The second method assumes that each individual protocol is carried over a separate ATM virtual circuit VC based multiplexing Please refer to RFC 1483 for more inf...

Page 20: ... RIP2 B RIP2 M are both sent in RIP 2 format the difference is that RIP2 M using Multicast and RIP2 B using Broadcast format RIP Direction Select this option to specify the RIP direction None is for disabling the RIP function Both means the ADSL Router will periodically send routing information and accept routing information then incorporate into routing table IN only means the ADSL router will on...

Page 21: ...s you to set up how your router connects to the Internet If you already ran the Quick Start wizard the information you provided to the wizard should be entered into the fields already After you finish the changes click on the SAVE button to save your changes ...

Page 22: ... 53 bytes 424 bits so a maximum speed of 832 Kbps gives a maximum PCR of 1962 cells sec This rate is not guaranteed because it is dependent on the line speed SCR Sustained Cell Rate Sustained Cell Rate SCR is the mean cell rate of a burst on off traffic source that can be sent at the peak rate and a parameter for burst type traffic SCR may not be greater than the PCR the system default is 0 cells ...

Page 23: ... here Dynamic Route Select the RIP type and direction from the dropdown lists Multicast Select the multicast protocol you wish to use from the dropdown list Static IP Address Select this option to set static IP information Encapsulation Select your encapsulation type from the dropdown list Static IP Address Enter the static IP Address here IP Subnet Mask Enter the IP Subnet Mask here Gateway Enter...

Page 24: ...hether the router obtains the IP address statically or dynamically Static IP Address Enter the static IP address here Only if you chose Static above IP Subnet Mask Enter the IP subnet mask here Only if you chose Static above Gateway Enter the gateway here Only if you chose Static above NAT Select whether NAT Network Address Translation is Enabled or Disabled Default Route Select whether this PVC w...

Page 25: ... IP Subnet Mask Your ADSL router will automatically calculate the subnet mask based on the IP address that you assign Unless you are implementing sub netting use the subnet mask computed by the ADSL router Dynamic Route Select the Dynamic Route from RIP1 RIP2 B and RIP2 M Please refer to Internet Dynamic Route The only difference is the interface Multicast IGMP Internet Group Multicast Protocol is...

Page 26: ...er the amount of time you wish to lease out a given IP address DNS Relay Select the DNS relay option you wish to use from the dropdown list Primary DNS Enter the primary DNS server IP address you wish to use For user discovered DNS only Secondary DNS Enter the secondary DNS server IP address you wish to use For user discovered DNS only Relay A DHCP relay is a computer that forwards DHCP data betwe...

Page 27: ...ield Beacon Interval The Beacon Interval value indicates the frequency interval of the beacon Enter a value between 20 and 1000 A beacon is a packet broadcast by the Router to synchronize the wireless network RTS CTS The RTS Request To Send threshold number of bytes for enabling RTS CTS handshake Data with its frame size larger than this value will perform the RTS CTS handshake Set this attribute ...

Page 28: ...tion can not obtain the SSID through passive scanning Select Yes to make the SSID visible so a station can obtain in the SSID through Passive scanning Authentication Type Appearance of next paragraph depends on this option WEP Wired Equivalent Privacy encrypts data frames before transmitting over the wireless network Select Disable to allow all wireless computers to communicate with the access poi...

Page 29: ...ociated with the wireless stations access to the ADSL Router Active Use this option to enable or disable MAC address filtering Action Select Deny Association to block access to the router MAC addresses not listed will be allowed to access the router Select Allow Association to permit access to the router MAC addresses not listed will be denied access to the router Mac Address 1 8 list of MAC addre...

Page 30: ...tically detect and block Denial of Service DoS attacks such as Ping of Death SYN Flood Port Scan and Land Attack SPI Select this option to Enable or Disable the SPI feature NOTE If you enable SPI all traffics initiate from WAN would be blocked including DMZ Virtual Server and ACL WAN side ...

Page 31: ...y A gateway does the actual forwarding of the packets Enter the gateway s IP address in the field or select which PVC you wish to act as a gateway The gateway is an immediate neighbor of your ADSL Router that will forward the packet to the destination On the LAN the gateway must be a router on the same segment as your Router over Internet WAN the gateway must be the IP address of one of the remote...

Page 32: ... refers to the IP address of a host when the packet is in the local network while the global address refers to the IP address of the host when the same packet is traveling in the WAN side Note that inside outside refers to the location of a host while global local refers to the IP address of a host used in a packet Thus an inside local address ILA is the IP address of an inside host of a packet wh...

Page 33: ...as the public IP address you use on the Internet You define NAT rules that specify exactly how and when to translate between public and private IP addresses Simply select this option to setup the NAT function for your ADSL router Virtual Circuit The Virtual Circuit VC properties of the ATM VC interface identify a unique path that your ADSL Ethernet router uses to communicate via the ATM based netw...

Page 34: ...c network It prevents outside users from getting direct access to s server that has company data Users of the public network outside the company can access only the DMZ host DMZ setting for Option selected in Number of IPs field in main NAT window DMZ Toggle the DMZ function Enabled or Disabled DMZ Host IP Address Enter the specified IP Address for DMZ host on the LAN side When you are done making...

Page 35: ...rver rules Application Enter application name or select one of predefined template Start Port Number End Port Number Enter the specific Start and End Port number you want to forward If it is one port only you can enter the End port number the same as Start port number For example set the FTP Virtual server you can set the start and end port number to 21 Local IP Address Enter the IP Address for th...

Page 36: ...P Local End IP Enter the local IP address you plan to map to Local Start IP is the starting local IP address Local End IP is the ending local IP address If the rule is for all local IPs then the Start IP is 0 0 0 0 and the End IP is 255 255 255 255 Public Start IP Public End IP Enter the Public IP Address you want to do NAT Public Start IP is the starting Public IP Address and Public End IP is the...

Page 37: ...vated or Deactivated Summary Click on QoS Settings Summary button to open summary window Rule Parameters set in this paragraph describes which packets will apply to this rule Rule Index Select QoS rule to edit Active Choose whether selected QoS rule will be Activated or Deactivated Application Choose application protocol for this Rule IGMP SIP H 323 MGCP SNMP DNS DHCP RIP RSTP RTCP or RTP Physical...

Page 38: ...ion This paragraph describes what action will be taken when rule parameters are true IPP DS Field Select packet priority standard IPP TOS or DSCP IP Precedence Remarking Will change IPP TOS of a packet to selected value 0 7 Type of Service Remarking Will change additional ToS parameter of a packet to selected DSCP Remarking Will change DSCP of a packet to selected value 0 63 802 1p Remarking Will ...

Page 39: ... transmit tagged or untagged frames A tag field containing VLAN and or 802 1p priority information can be inserted into an Ethernet frame If a port has an 802 1Q compliant device attached such as another switch these tagged frames can carry VLAN membership information between switches thus letting a VLAN span multiple switches However it is important to ensure ports with non 802 1Q compliant devic...

Page 40: ...ssign In this screen you can assign PVID VLAN ID to each ATM VC and WLAN or Ethernet LAN port When you are done making changes click on SAVE to save your changes CANCEL to discard changes or NEXT to go to VLAN Group Setting screen ...

Page 41: ...lected PVID VLAN ID Frames will be assigned VLAN ID displayed here ATM Select VC which will be assigned to this VLAN group Port and select which VC will sent tagged frames Tagged Ethernet Select Ethernet port which will be assigned to this VLAN group Wireless LAN Select whether WLAN will be assign to this VLAN group Port and whether frames transmitted via WLAN will be Tagged VLAN Group Summary Lis...

Page 42: ...ect which mode your ADSL connection uses from the dropdown list The option has Auto Sync up ADSL2 ADSL2 G DMT T1 413 G LITE ADSL Type Select the ADSL type you use from the dropdown list ANNEX A ANNEX I ANNEX A L ANNEX M ANNEX A I J L M When you are done making changes click on SAVE to save your changes ...

Page 43: ...er If you choose Activated you only can access via router by listed IP addresses ACL Rule Index Index number from 1 and up to 16 Active Once you choose Yes then you can access the IP via router Application Each of these labels denotes a service that you may use to remotely manage the Router Choices are Web FTP Telnet SNMP Ping ALL Interface Select the access interface Choices are WAN LAN and Both ...

Page 44: ...s extensive firewall protection by restricting connection parameters to limit the risk of intrusion and defending against a wide array of common hacker attackers Appearance of this tab is dependent on option selected from Filter Type Selection list ...

Page 45: ...ables you to filter data based on source MAC Address or source destination IP Address or Port number IP MAC Filter Set Index The IP MAC Filter Set Index from 1 to 12 and each index can set up to 6 IP MAC Filter Interface Choices from PVC0 to PVC7 and LAN ...

Page 46: ...ess only when MAC is selected in Rule Type option enter source MAC address Rule Unmatched Choices are Forward and Next Select what happens to the data in question if the rule you are currently editing is unmatched Next means that the data is then compared to the next IP filter rule Forward means that the data will be allowed into your system Note that a Forward rule should be the last rule as no d...

Page 47: ...his option to Allow Deny ICQ MSN Select this option to Allow Deny MSN YMSG Select this option to Allow Deny Yahoo messenger Real Audio Video Select this option to Allow Deny Real Audio Video URL Filter URL Filter enables you to block access to web sites based on keywords Active Select Active to enable URL Filter URL Index This is item number URL Allow you to prevent users on your network from acce...

Page 48: ...uter is called a management station and the modem is called an SNMP agent The data that can be accessed via SNMP is stored in a Management Information Database MIB on the modem Get Community Select to set the password for incoming Get and GetNext request from management station Set Community Select to set the password for incoming Set request from management station The default password is cerberu...

Page 49: ...parate icon UPnP You can choose Activated or Deactivated option from this session Auto Configured UPnP network devices can automatically configure network addressing announce their presence in the network to other UPnP devices and enable exchange of simple product and service descriptions Choose Activated option to allow UPnP enabled applications to automatically configure the ADSL Router so that ...

Page 50: ...is for people with a dynamic IP from their ISP or DHCP server that would still like to have a DNS name The Dynamic DNS service provider will give you a password or key Dynamic DNS Choose the option for Activated or Deactivated DDNS Service Provider The default Dynamic DNS service provider is www dyndns org My Host Name Type the domain name assigned to your ADSL by your Dynamic DNS provider E mail ...

Page 51: ...ges Note If you ever forget the password to log in you may press the DEFAULT button up to 6 second to restore the factory default settings The Factory Default Settings for User Name Password are admin pentagram Time Zone The system time is the time used by the device for scheduling services You can manually set the time or connect to a NTP Network Time Protocol server If an NTP server is set you w...

Page 52: ...isabled to use daylight savings time NTP Server Address Type the IP address or domain name of your timeserver Check with your ISP network administrator if you are unsure of this information Click on SAVE to save your changes or on CANCEL to discard changes PC s Clock Router will synchronize its clock with computer Click on SAVE to save your changes or on CANCEL to discard changes Manually Date Ent...

Page 53: ...ill restart after the upgrade After a success upload the system automatically restarts Please wait for the device to finish restarting This should take about 2 minutes or more You need to log in again if you want to access the device Current Firmware Version This filed displays the current firmware version New Firmware Location Type in the location of the file you want to upload in this field or c...

Page 54: ...urrent Settings You may also reset your router to factory settings by holding the DEFAULT button on the back panel of your router in for 10 12 second while the router is turned on Click RESTART to start this process Diagnostics The Diagnostic Test page shows the test results for the connectivity of the physical layer and protocol layer for LAN WAN sides Virtual Circuit Select which PVC you wish to...

Page 55: ...ion Note that these fields are read only and are not meant for diagnostic purposes Except the Virtual Circuit click the drop down list and select the name of the Virtual Circuit on which the system status is to be shown Device Information Firmware Version This filed displays current firmware version MAC Address The MAC Media Access Control or Ethernet address unique to your modem ...

Page 56: ...nd status Modulation This field displays the ADSL modulation status for G dmt or T1 413 Annex Mode This field displays the ADSL annex modes for Annex A Downstream Upstream Status of SNR Margin Line Attenuation and Data Rate SNR Margin Amount of increased noise that can be tolerated while maintaining the designed BER bit error rate The SNR Margin is set by Central Office DSLAM If the SNR Margin is ...

Page 57: ...tem communication with other devices such as the results of negotiations with the ISP s computers for DNS and gateway IP addresses The device keeps a running log of events and activities occurring on the Router You can click Save Log to display a Windows File Download dialog box that enables opening or saving the contents of the log to your PC To remove all entries from the list click Clear Log Ne...

Page 58: ...f the device is rebooted You can select Ethernet ADSL to view the statistics report of LAN WAN Ethernet The Ethernet screen gives you information on how much data your router has transmitted and received across the Ethernet connection Click on REFRESH to update the screen ADSL The ADSL screen gives you information about how much data your router has transmitted or received across the ADSL connecti...

Page 59: ...31 4A 59 Wireless The Wireless screen gives you information about how much data your router has transmitted or received across the WLAN connection Click on REFRESH to update the screen Help Tab Router s online help ...

Page 60: ...ur router and the computer or hub 2 Check for faulty Ethernet cables 3 Make sure your computer s Ethernet card is working properly 4 If these steps fail to correct the problem contact your local distributor for assistance ADSL LED The ADSL LED on the front panel does not light up 1 Check the telephone wire and connections between the router ADSL port and the wall jack 2 Make sure that the telephon...

Page 61: ...PC connected If it is off check the cables between your router and the PC Make sure you have uninstalled any software firewall for troubleshooting 2 Make sure that the IP address and the subnet mask is consistent between the router and the workstation Problems with WAN Interface Initialization of the ADSL connection failed 1 Check the cable connections between the ADSL port and the wall jack The A...

Page 62: ...cess I cannot access the Internet 1 Make sure the router is turned on and connected to the network 2 If the ADSL LED is off refer to Section ADSL LED of this troubleshooting 3 Verify your WAN settings 4 Make sure you entered the correct user name and password 5 For wireless stations check that both the router and wireless station s are using the same ESSID channel and WEP keys if WEP encryption is...

Reviews: