QNO QVF8034 User Manual Download Page 130

Page: 130 / 209

2WAN 4LAN SMB Multi-WAN VPN QoS Router

124

IPSec Setup

If there is any encryption mechanism, the encryption mechanism of these two VPN

channel settings must be identical in order to establish connection. And the transmission

data must be encrypted with IPSec key, which is also known as the encryption "key". The

device provides the following two types of encryption management modes: Manual and IKE

automatic encryption mode- IKE with Preshared Key (automatic). If the Group VPN is

selected or the dynamic IP address of the Remote Security Gateway Type is applied,

Aggressive Mode will be enabled automatically without the option of Manual mode.

Encryption Management Protocol

：

Perfect Forward Secrecy:

When users check the PFS option, make sure to activate

the PFS feature of the VPN device and that VPN Client as well.

Phase 1/Phase 2 DH Group:

This option allows users to select Diffie-Hellman

Summary of Contents for QVF8034

Page 1: ...English User s Manual 2WAN 4LAN SMB Multi WAN VPN QoS Router...

Page 2: ...cted by copyright of our country clauses of international copyright and other regulations of intellectual property When the user copies the Manual this statement of intellectual property must also be...

Page 3: ...and or distributors hereby declares that no liability will be born for any guarantee and condition of the corresponding information The guarantee and condition include tacit guarantee and condition a...

Page 4: ...Status 12 5 1 2 Physical Port Status 13 5 1 3 System Information 14 5 1 4 Firewall Status 15 5 1 5 VPN Status 16 5 1 6 Log Setting Status 16 5 2 Change and Set Login Password and Time 16 5 2 1 Passwor...

Page 5: ...splay All VPN Summary 93 10 1 2 Add a New VPN Tunnel 97 10 1 3 PPTP Setting 126 10 1 4 VPN Pass Through 128 10 2 QnoKey 130 10 2 1 QnoKey Summary 130 10 2 2 Qnokey Group Setup 131 10 2 3 Qnokey Accoun...

Page 6: ...g Backup 166 13 4 SNMP 167 13 5 System Recover 169 XIV Log 171 14 1 System Log 171 14 2 System Statistic 177 14 3 Traffic Statistic 178 14 4 IP Port Statistic 181 XV Log out 184 Appendix I User Interf...

Page 7: ...rnet connectability for the broadband market Router has the function of VPN virtual network connection It is equipped with a virtual private network hardware acceleration mode including IPSec DES 3DES...

Page 8: ...nication between all offices and branches of an organization It helps to free enterprises from increasing hacker intrusion With an exclusive independent operation platform users are able to set up and...

Page 9: ...ers the function of a standard PPTP server which is equipped with connection setting status Each WAN port can be set up with multiple DDNS at the same time It is also capable of establishing VPN conne...

Page 10: ...management and maintenance making the user network settings be done at one time The main process is as below 1 Hardware installation 2 Login 3 Verify device specification and set up password and time...

Page 11: ...nize the Router time with WAN 4 Set WAN connection Verify WAN connection setting bandwidth allocation and protocol binding Connect to WAN Configure bandwidth to optimize data transmission 5 Set LAN co...

Page 12: ...Mode multiple WAN IP DDNS and MAC Clone DMZ Forwarding UpnP Routing Mode multiple WAN IP DDNS and MAC Clone 9 Management and maintenance settings Syslog SNMP and configuration backup Monitor Router w...

Page 13: ...on Ethernet is running at 100Mbps Green LED off Ethernet is running at 10Mbps Connect Green Green LED on WAN is connected and gets the IP address Reset Action Description Press Reset Button For 5 Secs...

Page 14: ...using damage or danger Each Router comes with a set of rack installation accessories including 2 L shaped brackets and 8 screws Users can rack mount the device onto the chassis Please refer to the fig...

Page 15: ...router to connect to the Internet LAN Connection The LAN port can be connected to a Switching Hub or directly to a PC Users can use servers for monitoring or filtering through the port after Physical...

Page 16: ...ter cmd to commend DOS and enter ipconfig for getting Default Gateway address as the graphic below 192 168 1 1 Make sure Default Gateway is also the default IP address of Router Attention When not get...

Page 17: ...login password in the setting later Attention For security we strongly suggest that users must change password after login Please keep the password safe or you can not login to Router Press Reset but...

Page 18: ...ted for users reference 5 1 1 WAN Status IP Address Indicates the current IP configuration for WAN port Default Gateway Indicates current WAN gateway IP address from ISP DNS Server Indicates the curre...

Page 19: ...tion such as PPPoE or PPTP is selected Disconnect and Connect will appear DMZ IP Address Indicates the current DMZ IP address 5 1 2 Physical Port Status The status of all system ports including each c...

Page 20: ...X iniferface WAN LAN DMZ link status Up Down physical port status Port Enabled Port Disabled priority high or normal speed status 10Mbps or 100Mbps duplex status Half Full auto negotiation Enabled or...

Page 21: ...resent time Please note To have the correct time users must synchronize the device with the remote NTP server first 5 1 4 Firewall Status SPI Stateful Packet Inspection Indicates whether SPI Stateful...

Page 22: ...Network PPTP Server Indicates if PPTP server is enabled 5 1 6 Log Setting Status Syslog Server Indicates if Syslog Server is Enabled or Disabled E mail Alert Indicates if Email Alert is Enabled or Di...

Page 23: ...New Password Input the new password again for verification Apply Click Apply to save the configuration Cancel Click Cancel to leave without making any change This action will be effective before Apply...

Page 24: ...me Daylight Saving If there is Daylight Saving Time in your area input the date range The device will adjust the time for the Daylight Saving period automatically External NTP Server If you have your...

Page 25: ...Multi WAN VPN QoS Router 19 After the changes are completed click Apply to save the configuration Click Cancel to leave without making any change This action will be effective before Apply to save the...

Page 26: ...contains the basic settings For most users completing this general setting is enough for connecting with the Internet However some users need advanced information from their ISP Please refer to the fo...

Page 27: ...2WAN 4LAN SMB Multi WAN VPN QoS Router 21 6 1 1 Host Name and Domain Name...

Page 28: ...uire it 6 1 2 LAN Setting This is configuration information for the device current LAN IP address The default configuration is 192 168 1 1 and the default Subnet Mask is 255 255 255 0 It can be change...

Page 29: ...Intranet the Internet is still accessible without making any changes to internal PCs Users can make changes according to their actual network structure 6 1 3 WAN DMZ Settings WAN Setting Interface An...

Page 30: ...an IP address automatically If having a different connection mode please refer to the following introduction for selection of appropriate configurations Users can also set up their own DNS IP address...

Page 31: ...ule for disconnection of this WAN service Line Dropped Scheduling Input how long the WAN service may be disconnected before the newly added connections should go through another WAN to connect with th...

Page 32: ...55 255 248 Issued 16 static IP addresses 255 255 255 240 Default Gateway Input the default gateway issued by ISP For ADSL users it is usually an ATU R IP address As for optical fiber users please inpu...

Page 33: ...ction can be minimized Line Dropped Period Input the time rule for the disconnection of this WAN service Line Dropped Scheduling Input how long the WAN service may be disconnected before the newly add...

Page 34: ...th the Internet the device will automatically make a dial connection If the line has been idle for a period of time the system will break the connection automatically The default time for automatic br...

Page 35: ...n be minimized Line Dropped Period Input the time rule for the disconnection of this WAN service Line Dropped Scheduling Input how long the WAN service may be disconnected before the newly added conne...

Page 36: ...ovided by the ISP when the PC is installed Contact ISP for relevant information Subnet Mask Input the subnet mask of the static IP address issued by ISP such as Issued eight static IP addresses 255 25...

Page 37: ...on for WAN connection service For example the optical fiber service will be disconnected from 0 00 am to 6 00 am Although there is a standby system in the device at the moment of WAN disconnection all...

Page 38: ...without making any changes Transparent Bridge If all Intranet IP addresses are applied as Internet IP addresses and users don t want to substitute private network IP addresses for all Intranet IP addr...

Page 39: ...255 240 Default Gateway Address Input the default gateway of the static IP address issued by ISP For ADSL users it is usually an ATU R IP address DNS Server Input the DNS IP address set by ISP At leas...

Page 40: ...be minimized Line Dropped Period Input the time rule for the disconnection of this WAN service Line Dropped Scheduling Input how long the WAN service may be disconnected before the newly added connec...

Page 41: ...dvanced configuration modification Click Edit to enter the advanced configuration page The DMZ configuration can be classified by Subnet and Range Subnet The DMZ and WAN located in different Subnets F...

Page 42: ...ections to achieve load balancing for external connections The network bandwidth is set by what users input for it For example if the upload bandwidth of both WANs is 512Kbit sec the automatic load ra...

Page 43: ...ddresses or servers that are configured in the connection rule will follow the rule for external connections those which are not configured in the rule will still follow the device Auto Load Balance s...

Page 44: ...document importation has been selected click Import and then at the bottom of the configuration window click Apply The device will then dispatch the traffic to the assigned destination IP through the...

Page 45: ...other words traffic to that destination IP will be transmitted through the WAN or WAN group under China Netcom strategy 6 2 2 Network Detection Service This is a detection system for network external...

Page 46: ...tart When Fail 1 Generate the Error Condition in the System Log If an ISP connection failure is detected an error message will be recorded in the System Log This line will not be removed therefore the...

Page 47: ...The local default communication gateway location such as the IP address of an ADSL router will be input automatically by the device Therefore users just need to check the option if this function is ne...

Page 48: ...Balance mode is selected the device will select sessions or IP and the WAN bandwidth will automatically allocate connections to achieve load balancing for external connections The network bandwidth is...

Page 49: ...other words the first WAN WAN1 cannot be configured with the Protocol Binding rule This is to avoid a condition where all WANs are assigned to specific Intranet IP or Service Ports and destination IP...

Page 50: ...be restricted to WAN1 the external static IP address 210 1 1 1 210 1 1 1 should be input If a range of destinations is to be assigned input the range such as 210 11 1 1 210 11 255 254 This means the...

Page 51: ...ollowing figure will be displayed Users can choose to sort the list by priorities or by interface Click Refresh and the page will be refreshed click Close and the dialogue box will be closed Add or Re...

Page 52: ...ket format such as TCP or UDP for the Service Ports users want to activate Port range In the boxes input the range of Service Ports users want to add Add To List Click the button to add the configurat...

Page 53: ...rts or assign specific destination IP addresses to a WAN user choose for external connections Example 1 How do I set up Auto Load Balance Mode to assign the Intranet IP 192 168 1 100 to WAN2 for the I...

Page 54: ...n the figure below select HTTP TCP 80 80 from the pull down option list Service and then in the boxes for Source IP input 192 168 1 150 to 200 Retain the original numbers 0 0 0 0 in the boxes of Desti...

Page 55: ...etain the original numbers 0 0 0 0 in the boxes of Destination IP Which means to include all Internet IP addresses Select WAN2 from the pull down option list Interface and then click Enable Finally cl...

Page 56: ...s or to specific destination Service Ports and to specific destination IP addresses through an assigned WAN to the Internet After being assigned the specific WAN will only support those assigned Intra...

Page 57: ...ace and then click Enable Finally click Add New and the rule will be added to the mode After the rule is set up only packets that go to Port 80 will be transmitted through WAN2 while other traffics wi...

Page 58: ...d New and the rule will be added to the mode The second rule Select All Port TCP UDP 1 65535 from the pull down option list Service and then in the boxes of Source IP input 192 168 1 0 0 which means t...

Page 59: ...by choosing the number of ports speed priority and duplex and enable disable the auto negotiation feature for connection setting of each port Mirror Port Users can configure LAN 1 as mirror port by c...

Page 60: ...nd 100Mbps Duplex Status This feature allows users to select the network hardware connection speed working mode for the Ethernet The options are full duplex and half duplex Auto Neg The Auto Negotiati...

Page 61: ...for the intranet so that all VLAN group can visit this server Set one of the network ports as VLAN All Connect the server to VLAN All so that computers of different VLAN groups can be connected to thi...

Page 62: ...ps Duplex Status half duplex or full duplex Auto Neg Enabled Disabled and VLAN Statistics The packet data of this specific port will be displayed Data include receive transmit packet count receive tra...

Page 63: ...DHCP service in NT servers It benefits users by freeing them from the inconvenience of recording and configuring IP addresses for each PC respectively When a computer is turned on it will acquire an...

Page 64: ...he lease from this IP The default initial IP is 192 168 1 100 DNS Domain Name Service This is for checking the DNS from which an IP address has been leased to a PC port Input the IP address of this se...

Page 65: ...Available The amount of IP still available in the DHCP server Total IP The total IP which the DHCP server is configured to lease Host Name The name of the current computer IP Address The IP address ac...

Page 66: ...Binding function to make sure that users can not add extra PCs for Internet access or change private IP addresses There are two methods for setting up this function Block MAC address not on the list...

Page 67: ...2WAN 4LAN SMB Multi WAN VPN QoS Router 61 Internet access When this method is applied please fill out Static IP with 0 0 0 0 as the figure below IP MAC Binding...

Page 68: ...0 in the boxes The boxes cannot be left empty 2 If users want DHCP to assign a static IP for a PC every single time users should input the IP address users want to assign to this computer in the boxe...

Page 69: ...how New IP user This function can reduce administrator s effort on checking MAC addresses one by one for the binding Furthermore it is easy to make mistakes to fill out MAC addresses on the list manua...

Page 70: ...d of configuring each IP respectively which takes more time and is more prone to error IP Group Select a group to which the modification is to be made Add Group Click Add Group to crate a new IP group...

Page 71: ...to specific applications or services and also to enable other users to share bandwidth as well as to ensure stable and reliable network transmission To maximize the bandwidth efficiency network admin...

Page 72: ...2WAN 4LAN SMB Multi WAN VPN QoS Router 66 8 1 1 The Maximum Bandwidth provided by ISP...

Page 73: ...upstream bandwidth for each IP would be 1024Kbit 50 20Kbit Sec Thus 20Kbit Sec can be input for Mini Rate Downstream bandwidth can be calculated in the same way Attention The unit of calculation in t...

Page 74: ...lection or multiple selections Service Port Select what bandwidth control is to be configured in the QoS rule If the bandwidth for all services of each IP is to be controlled select All TCP UDP 1 6553...

Page 75: ...rver for external connection has been built in the device this option is to control the bandwidth for the traffic coming from outside to this Server Server in LAN Downstream If there are web sites bui...

Page 76: ...ccupy too much bandwidth users can select the Share Bandwidth Mode so that no matter how much users use FTPs to download information the total occupied bandwidth is fixed Enable Activate the rule Add...

Page 77: ...th as 60 the highest and 10 the lowest If you set the service port 80 as High priority the router will give 60 bandwidth to the port 80 In the other hand if you give the port 21 as Low priority the de...

Page 78: ...y Internet caf s This rule can be used to control the bandwidth for connections from outside to the game server of a caf to update data In this way game players inside the caf will not be affected Pri...

Page 79: ...Control function Single IP cannot exceed __ session This option enables the restriction of maximum external sessions to each Intranet PC When the number of external sessions reaches the limit to allow...

Page 80: ...this user is connected with will be removed and the user will not be able to connect with the Internet for five minutes New connections cannot be made until the delay time ends Scheduling If Always is...

Page 81: ...rule Add to list Add this rule to the list Delete selected item Remove the rules selected from the Service List Apply Click Apply to save the configuration Cancel Click Cancel to leave without making...

Page 82: ...ed maximum threshold Each IP s downstream bandwidth threshold for all WAN Input the allowed maximum threshold If any IP s bandwidth is over maximum threshold its maximum bandwidth will remain WAN1 __k...

Page 83: ...AN 4LAN SMB Multi WAN VPN QoS Router 77 Applied Time If Always is selected the rule will be executed around the clock If From is selected the rule will be executed according to the configured time ran...

Page 84: ...settings to ensure network security 9 1 General Policy The firewall is enabled by default If the firewall is set as disabled features such as SPI DoS and outbound packet responses will be turned off a...

Page 85: ...2WAN 4LAN SMB Multi WAN VPN QoS Router 79 Firewall This feature allows users to turn on off the firewall...

Page 86: ...value is set as activated in order to decline the outbound responses Remote Management To enter the device web based UI by connecting to the remote Internet this feature must be activated In the fiel...

Page 87: ...shold value and the blocking duration to effectively deal with external attack The threshold value should be adjusted from high to low LAN Threshold When all packet values from internal attack or from...

Page 88: ...ress into the trust domain and it will not block items such as Java ActiveX Cookies contained in the web pages from the trust domains Apply Click Apply to save the configuration Cancel Click Cancel to...

Page 89: ...LAN SMB Multi WAN VPN QoS Router 83 In addition if Blocked QQ is activated users can set the exempted QQ number list Press Exempted QQ Number button and enter the QQ number into the exempted QQ number...

Page 90: ...te selected item Delete the selected rule in the list 9 3 Access Rule Users may turn on off the setting to permit or forbid any packet to access internet Users may select to set different network acce...

Page 91: ...affic from the WAN to the LAN is denied by default All traffic from the LAN to the DMZ is allowed by default All traffic from the DMZ to the LAN is denied by default All traffic from the WAN to the DM...

Page 92: ...ority of each network access rule The device will follow the rule priorities one by one so please make sure the priority for all the rules can suit the setting rules Edit Define the network access rul...

Page 93: ...rvice Port Management If the service that users wish to manage does not exist in the drop down menu press Service Management to add the new service From the pop up window enter a service name and comm...

Page 94: ...ned time Apply this rule Select Always to apply the rule on a round the clock basis If From is selected the activation time is introduced as below to This control rule has time limitation The setting...

Page 95: ...bsite such as www sex com to have it blocked Domain Name Enter the websites to be controlled such as www playboy com Add to list Click Add to list to create a new website to be controlled Delete selec...

Page 96: ...for English keyword Enter keywords Add to List Add this new service item content to the list Delete selected item Delete the service item content from the list Apply Click Apply to save the modified...

Page 97: ...to list Delete selected item Users can select one or more rules and click to delete Content Filter Scheduling Select Always to apply the rule on a round the clock basis Select from and the operation w...

Page 98: ...t from and the operation will run according to the defined time to Select Always to apply the rule on a round the clock basis If From is selected the activation time is introduced as below Day Control...

Page 99: ...93 X VPN Virtual Private Network 10 1 VPN 10 1 1 Display All VPN Summary This VPN Summary displays the real time data with regard to VPN status These data include all tunnel numbers PPTP IPSec QnoKey...

Page 100: ...Through Advanced setting users may adjust the tunnel number of IPSec and QnoKey This shows how many VPN tunnels are in use or available Detail Push this button to display the following information wit...

Page 101: ...tunnel page Or users can select the page number directly to view all VPN tunnel statuses such as 3 5 10 20 or All Tunnel No To set the embedded VPN feature please select the tunnel number It supports...

Page 102: ...h Gro up Displays settings such as encryption DES 3DES authentication MD5 SHA1 and Group 1 2 5 If users select Manual setting for IPSec Phase 2 DH group will not display Local Group Displays the setti...

Page 103: ...this group for remote VPN Connection secure group setting Remote Client Status Click on Detail List and more information such as Group Name IP address and the connection time will be displayed Contro...

Page 104: ...SMB Multi WAN VPN QoS Router 98 Gateway to Gateway Click Add to enter the setting page of Gateway to Gateway Client to Gateway Click Add to enter the setting page of Client to Gateway Gateway to Gatew...

Page 105: ...tunnel can thus be successfully enabled Interface From the pull down menu users can select the Interface for this VPN tunnel Enabled Click to activate the VPN tunnel This option is set to activate by...

Page 106: ...DN refers to the combination of host name and domain name and can be retrieved from the Internet i e vpn server com This IP address and domain name must be identical to those of the VPN secure gateway...

Page 107: ...or VPN connection the device will start authentication and respond to VPN tunnel connection If users select this option to link to VPN enter E Mail address to the empty field for E Mail authentication...

Page 108: ...his VPN tunnel is connected computers with the IP address of 192 168 1 0 254 can establish connection Remote Group Setup This remote gateway authentication type Remote Security Gateway Type must be id...

Page 109: ...P address will be displayed under the remote gateway of Summary Or users can choose IP by Multiple DNS Resolved and IP address can be translated through DNS When users finish the setting the correspon...

Page 110: ...layed under the remote gateway of Summary Or users can choose IP by Multiple DNS Resolved and IP address can be translated through DNS When users finish the setting the corresponding IP address will b...

Page 111: ...ish the setting the corresponding IP address will be displayed under the remote gateway of Summary 4 Dynamic IP Domain Name FQDN Authentication If users use dynamic IP address to connect with the devi...

Page 112: ...his VPN tunnel is connected computers with the IP address of 192 168 2 1 can establish connection 2 Subnet This option allows local computers in this subnet can be connected to the VPN tunnel Referenc...

Page 113: ...ides the following two encrypted Key Managements They are Manual and IKE automatic encryption mode IKE with Preshared Key automatic By using the drop down menu select the desired encryption mode as il...

Page 114: ...to activate the PFS function of the VPN device and the VPN Client as well Phase 1 Phase 2 DH Group This option allows users to select Diffie Hellman groups Group 1 Group 2 Group 5 Phase 1 Phase 2 Encr...

Page 115: ...of Pre shared Key the example here is set as test and the system will automatically translate what users entered as exchange password and authentication mechanism during the VPN tunnel connection This...

Page 116: ...d to enhance the security control if dynamic IP is used for connection Use IP Header Compression Protocol If this option is selected in the connected VPN tunnel the device supports IP Payload Compress...

Page 117: ...y a group of clients the individual setting for remote clients can be reduced Only one tunnel will be set and used by a group of clients which allows easy setting 1 Situation in Tunnel Tunnel No Set t...

Page 118: ...Addr USER FQDN Authentication Dynamic IP address Email address name 1 IP only If users decide to use IP only entering the IP address is the only way to gain access to this tunnel The WAN IP address w...

Page 119: ...PN If the remote VPN gateway requires connection to the device for VPN connection this device will start authentication and respond to this VPN tunnel connection if users select this option to link to...

Page 120: ...nnected computers with the IP address of 192 168 1 0 can establish connection 5 Subnet This option allows local computers in this subnet to be connected to the VPN tunnel Reference When this VPN tunne...

Page 121: ...ay authentication type comes with five operation modes which are IP only IP Domain Name FQDN Authentication IP E mail Addr USER FQDN Authentication Dynamic IP Domain Name FQDN Authentication Dynamic I...

Page 122: ...ntication If users select IP address and E mail enter the IP address and E mail address to gain access to this tunnel and the WAN IP address will be automatically filled into this space Users don t ne...

Page 123: ...Mail authentication IPSec Setup If there is any encryption mechanism the encryption mechanism of these two VPN tunnels must be identical in order to create connection And the transmission data must b...

Page 124: ...hen PFS is enabled hackers using brute force to capture the key will not be able to get the Phase 2 key in such a short period of time Perfect Forward Secrecy When users check the PFS option don t for...

Page 125: ...valid time of the VPN connection so as to guarantee security Preshared Key For the Auto IKE option enter a password of any digit or characters in the text of Pre shared Key the example here is set as...

Page 126: ...eration mode The connection is the same to most of the VPN devices Aggressive Mode This mode is mostly adopted by remote devices The IP connection is designed to enhance the security control if dynami...

Page 127: ...nsmission time for each DPD message packet and the default value is 10 seconds Situation in Group VPN Group No Two Group VPN settings at most Group Name Displays the current VPN tunnel connection name...

Page 128: ...el is connected computers with the IP address of 192 168 1 0 can establish connection 8 Subnet This option allows local computers in this subnet can be connected to the VPN tunnel Reference When this...

Page 129: ...main name to be authenticated FQDN refers to the combination of host name and domain name that are available on the Internet i e vpn Server com The domain name must be identical to the status setting...

Page 130: ...types of encryption management modes Manual and IKE automatic encryption mode IKE with Preshared Key automatic If the Group VPN is selected or the dynamic IP address of the Remote Security Gateway Ty...

Page 131: ...Phase1 SA Life Time The life time for this exchange code is 28800 seconds or 8 hours by default This allows the automatic generation of other exchange passwords within the valid time of the VPN connec...

Page 132: ...c IP address AH Hash Calculation For AH Authentication Header users may select MD5 DSHA 1 NetBIOS Broadcast If this option is selected the connected VPN tunnel allows the passage of NetBIOS broadcast...

Page 133: ...2WAN 4LAN SMB Multi WAN VPN QoS Router 127 Enabled PPTP Server When this option is selected the point to point tunnel protocol PPTP server can be enabled...

Page 134: ...t field Enter Range End Enter the value into the last field Username Please enter the name of the remote user Password Confirm Password Enter the password and confirm again by entering the new passwor...

Page 135: ...ource port the second connection needs to change source port from UDP 500 to the other random port If choosing Fixed Source Port the second connection will still keep the connection with UDP 500 PPTP...

Page 136: ...splay the page that summarizes the current status information of QnoKey as illustrated below QnoKey Tunnel Number Displays how many tunnels are applied and the total tunnel number of QnoKey tunnel Thr...

Page 137: ...using QnoKey Show Table Displays the list of all QnoKey users Delete Deletes one user name group setting rule Go to page Goes to the page where summarized information is needed Entries per page Each s...

Page 138: ...rt to make connection facilitating management If WAN1 is selected QnoKey group users can connect through only WAN1 If both WAN 1and WAN 2 are selected QnoKey group users are allowed to make connection...

Page 139: ...Key and Lock Key Setting this feature on QnoKey can enhance VPN security Select Do Nothing to do no change after the Key is lost Select Clear Key to clean up the QnoKey settings when the VPN connecti...

Page 140: ...Account List Click Show List to show the Account List page applying this rule Group Account ID Displays the group ID to which the user belongs to Enabled Click this option to activate QnoKey user QnoK...

Page 141: ...s device provides three major convenient functions 1 Smart Link IPSec VPN Easy VPN setup replaces the conventional complicated VPN setup process by entering Server IP User Name and Password 2 Central...

Page 142: ...her English or Chinese Password Confirm Password Must be identical to that of the remote client end Please enter the password and confirm again IP Address Subnet Mask Refers to the specific network IP...

Page 143: ...ave the network setting or push Cancel to keep the settings unchanged 10 3 2 QVM Status Account Displays the remote client user Green means connection blue waiting for connection and red for QVM disco...

Page 144: ...on Disconnect and Disable this feature Enable this QVM to enter the status of waiting for connection Config Click Edit to enter the setting items to be changed 10 3 3 QVM Client Settings Select QVM fe...

Page 145: ...at most 3 backup IP addresses or domain names for backup Once the connection is dropped the function will be automatically enabled to backup the VPN connection and ensure data transition security Adv...

Page 146: ...dual broadband connection As the result the linking problem between different ISP networks will be solved As the figure showed above Caf A has only one ISP service Because of narrow bandwidth between...

Page 147: ...Caf A want to access to another ISP network the link speed won t be restricted 11 1 Virtual Route Server PPTP Server The Chapter introduces how to configure a Virtue Route server Virtue Route builds P...

Page 148: ...P Range Please enter PPTP IP address range so as to provide the remote users with an entrance IP into the local network Enter Range Start Enter the value into the last field Enter Range End Enter the...

Page 149: ...nd PPTP address 11 2 Virtual Route Client Enabled To activate the function Binding Interface To select which WAN port is bound WAN1 WAN2 Binding Network To select the binding network Netcome or Self D...

Page 150: ...dows system Follow the text format in the figure below to key in the destination IPs users want to assign For example if the destination IP address range users want to designate is 140 115 1 1 140 115...

Page 151: ...Notepad which is included with Windows system For example if the destination port users want to designate is TCP 3724 3724 key in TCP 3724 3724 in Notepad The next destination port should be keyed in...

Page 152: ...2WAN 4LAN SMB Multi WAN VPN QoS Router 146...

Page 153: ...device actual WAN IP addresses directly to the Intranet virtual IP addresses as follows If the DMZ Host function is selected to cancel this function users must input 0 in the following DMZ Private IP...

Page 154: ...et up in the configuration this web page will be accessible from the Internet by keying in the device actual IP address such as http 211 243 220 43 At this moment the device actual IP will be converte...

Page 155: ...nt Service Port Management The services in the list mentioned above are frequently used services If the service users want to activate is not in the list we recommend that users use Service Port Manag...

Page 156: ...elected item To remove the selected services Apply Click the Apply button to save the modification Cancel Click the Cancel button to cancel the modification This only works before Apply is clicked Clo...

Page 157: ...o the device Such as 2004 2005 Add to list Add the service to the active service list Delete selected item Remove selected services Show Table Click to show all the setting in the list Apply Click the...

Page 158: ...or name that maps with UPnP such as 192 168 1 100 Enabled Activate this function Service Port Management Add or remove service ports from the management list Add to List Add to active service content...

Page 159: ...tion of Routing Information Protocol is RIP There are two kinds of RIP in the IP environment RIP I and RIP II Since there is usually only one router in a network ordinarily just Static Routing will be...

Page 160: ...function Receive RIP versions Use Up Down button to select one of None RIPv1 RIPv2 Both RIPv1 and v2 as the TX function for transmitting dynamic RIP Transmit RIP versions Use Up Down button to select...

Page 161: ...count for the IP If there are two routers under the device users should input 2 for the router layer the default is 1 Max is 15 Interface This is to select WAN port or LAN port for network connection...

Page 162: ...resses For example if there are more than 2 web servers requiring public IP addresses administrators can map several public IP addresses directly to internal private IP addresses Example Users have fi...

Page 163: ...Internet One to One NAT function Range Length The numbers of final IP addresses of actual Internet IP addresses Please do not include IP addresses in use by WANs Add to List Add this configuration to...

Page 164: ...ddresses and for dynamic IP remote control For example the actual IP address of an ADSL PPPoE time based system or the actual IP of a cable modem will be changed from time to time To overcome this pro...

Page 165: ...address such as abc qnoddns org cn as a user name for QnoDDNS Password The password which is set up for DDNS Dynamic Domain Name Input the website address which has been applied from DDNS Examples are...

Page 166: ...2WAN 4LAN SMB Multi WAN VPN QoS Router 160 Register for Qno DDNS 1 Please go to Qno website and register the product at http www qno cn en register...

Page 167: ...re to input an available e mail address so that the password sent from the system to activate QnoDDNS service can be received after the domain name registration 3 Rules for Applying a Domain Name The...

Page 168: ...2WAN 4LAN SMB Multi WAN VPN QoS Router 162...

Page 169: ...ut the network card physical address MAC address 00 xx xx xx xx xx here The device will adopt this MAC address when requesting IP address from ISP Select the WAN port to which the configuration is to...

Page 170: ...is in Chapter 5 2 13 1 Diagnostic The device provides a simple online network diagnostic tool to help users troubleshoot network related problems This tool includes DNS Name Lookup Domain Name Inquir...

Page 171: ...to start the test The result will be displayed on this screen 13 2 Firmware Upgrade Users may directly upgrade the device firmware on the Firmware Upgrade page Please confirm all information about the...

Page 172: ...2WAN 4LAN SMB Multi WAN VPN QoS Router 166 13 3 Setting Backup...

Page 173: ...ackup all parameter settings Click Export and select the location to save the config exp file 13 4 SNMP Simple Network Management Protocol SNMP refers to network management communications protocol and...

Page 174: ...ystem Location Define the location of the device i e Taipei Get Community Name Set the name of the group or community that can view the device SNMP data The default setting is Public Set Community Nam...

Page 175: ...t computer Apply Press Apply to save the settings Cancel Press Cancel to keep the settings unchanged 13 5 System Recover Users can restart the device with System Recover button Restart As the figure b...

Page 176: ...2WAN 4LAN SMB Multi WAN VPN QoS Router 170 Return to Factory Default Setting If clicking Return to Factory Default Setting the dialog block will pop out if the device will return to factory default...

Page 177: ...XIV Log From the log management and look up we can see the relevant operation status which is convenient for us to facilitate the setup and operation 14 1 System Log Its system log offers three optio...

Page 178: ...2WAN 4LAN SMB Multi WAN VPN QoS Router 172 System Log Enabled If this option is selected the System Log feature will be enabled...

Page 179: ...nd type To apply this feature enter the system log server name or the IP address into the empty system log server field E mail Alert Enabled If this option is selected E mail Warning will be enabled M...

Page 180: ...ssing this button Log Setting Alert Log The device provides the following warning message Click to activate these features Syn Flooding IP Spoofing Win Nuke Ping of Death Unauthorized Login Attempt Sy...

Page 181: ...oE and so on Deny Policies If remote users fail to enter the system because of the access rules for instance message will be recorded in the system log Allow Policies If remote users enter the system...

Page 182: ...o the Internet This log includes LAN IP destination IP and service port that is applied It is illustrated as below Incoming Packet Log View system packet log of those entering the firewall The log inc...

Page 183: ...current operation information such as port location device name current WAN link status IP address MAC address subnet mask default gateway DNS number of received sent total packets number of received...

Page 184: ...2WAN 4LAN SMB Multi WAN VPN QoS Router 178 14 3 Traffic Statistic Six messages will be displayed on the Traffic Statistic page to provide better traffic management and control...

Page 185: ...i WAN VPN QoS Router 179 By Inbound IP Address The figure displays the source IP address bytes per second and percentage By outbound IP Address The figure displays the source IP address bytes per seco...

Page 186: ...180 By Outbound Port The figure displays the network protocol type destination IP address bytes per second and percentage By Inbound Port The figure displays the network protocol type destination IP a...

Page 187: ...ministrators to inquire a specific IP or from a specific port about the addresses that this IP had visited or the users source IP who used this service port This facilitates the identification of webs...

Page 188: ...address that users want to inquire and then the entire destination IP connected to remote devices as well as the number of ports will be displayed Specific Port Status Enter the service port number i...

Page 189: ...2WAN 4LAN SMB Multi WAN VPN QoS Router 183...

Page 190: ...Router 184 XV Log out On the top right corner of the web based UI there is a Logout button Click on it to log out of the web based UI To enter next time open the Web browser and enter the IP address u...

Page 191: ...an find how to setup quickly and understand the Router capability at the same time Router overall interface is as below Category Sub category Chapter Home V Device Spec Verification Status Display and...

Page 192: ...ced Function XI Advanced Setting DMZ Forwarding 11 1 DMZ Host Port Range Forwarding UPnP 11 2 UPnP Universal Plug and Play Routing 11 3 Routing One to One NAT 11 4 One to One NAT DDNS 11 5 DDNS MAC Cl...

Page 193: ...PTP Setup PPTP Status 10 1 3 PPTP Status VPN Pass Through 10 1 4 VPN Pass Through QnoKey 10 2 QnoKey Summary 10 2 1 10 2 3 QnoKey Group and Client QVM VPN 10 3 QVM VPN QVM Setup 10 3 1 QVM VPN Server...

Page 194: ...2WAN 4LAN SMB Multi WAN VPN QoS Router 188 Appendix II Troubleshooting...

Page 195: ...Router 189 1 Block BT Download To block BT and prevent downloading by users go to the Firewall Content Filter and select Enable Website Block by Keywords followed by the input of torrent This will pre...

Page 196: ...es recently the internet transmission speed was brought down and the Session bulky increase result in the massive processing load of the device The following guides users to block this virus correspon...

Page 197: ...2WAN 4LAN SMB Multi WAN VPN QoS Router 191 Use the same method to add UDP UDP135 139 and TCP 445 445 Ports c Enhance the priority level of these three to the highest...

Page 198: ...tes to Qno products and provides users with solutions by introducing users how to set up the device a Log into the device web based UI and enter Firewall Access Rule b Click Add New Rule under Access...

Page 199: ...essary specific time setting may be undertaken Click Apply to move to the next step c Input the following IP address in Dest IP with repeat operation 121 14 75 115 60 28 234 117 60 28 235 119 222 28 1...

Page 200: ...ayers within the local network can be obtained Their account and information are stolen The following describes how to prevent such virus attack First let us get down to the definition of ARP Address...

Page 201: ...in the shop experience temporal disconnection or failure of going online It can be resolved by restarting the device however the problem repeats shortly after Cafe Administrators can use arp a command...

Page 202: ...Enter the ping 192 168 1 1 Gateway IP address as illustrated If there are cases of packet loss of the ping LAN IP and lf later there is connection it is possible that the system is attacked by ARP To...

Page 203: ...s on the device end On every PC start or operate cmd to enter the dos operation Enter arp s 192 168 1 1 0a 0f d4 9e fb 0b so as to finish the binding of pc01 as illustrated For other host devices with...

Page 204: ...o make a two way binding of the IP address and MAC address from both of the PC and device ends in order to carry out the prevention work However this is more complicated because the search for the IP...

Page 205: ...not recommended because the inquiry of IP MAC addresses of all hosts creates heavy workload Another method to bind IP and MAC is more recommended because of easy operation reducing workload and time e...

Page 206: ...MAC address corresponding to the PC are displayed Enter the Name of the computer and click on Enabled with the display of the icon and push the option on the top right corner of the screen to confirm...

Page 207: ...ARP This can better shelter the network from being attacked 2 Cyber caf administrators should check the LAN virus install anti virus software Ginshan Virus Reixin must update the virus codes and condu...

Page 208: ...es such management sharing as C and D Single device user can directly close Server service 7 Do not open QQ or the link messages sent by MSN online chatting tools in a causal manner Do not open or exe...

Page 209: ...s bandwidth forum refer to the examples of the FTP server or contact the technical department of Qno s dealers as well as the Qno s Mainland technical center Qno Official Website http www Qno com tw...

Search results

Summary of Contents for QVF8034

Reviews:

Related manuals for QVF8034

Brands by name

Popular brands

QNO QVF8034, User Manual

Search results

Summary of Contents for QVF8034

Reviews:

Related manuals for QVF8034

Brands by name

Popular brands