background image

 

 

 

TL-R480T+ 
Load Balance Broadband Router 

 

 

 

 

 

REV7.0.0 

1910011057 

Summary of Contents for L-R480T+

Page 1: ...TL R480T Load Balance Broadband Router REV7 0 0 1910011057 ...

Page 2: ...rcial environment This equipment generates uses and can radiate radio frequency energy and if not installed and used in accordance with the instruction manual may cause harmful interference to radio communications Operation of this equipment in a residential area is likely to cause harmful interference in which case the user will be required to correct the interference at his own expense This devi...

Page 3: ...power source Don t disassemble the product or make repairs yourself You run the risk of electric shock and voiding the limited warranty If you need service please contact us Avoid water and wet locations 安全諮詢及注意事項 請使用原裝電源供應器或只能按照本產品注明的電源類型使用本產品 清潔本產品之前請先拔掉電源線 請勿使用液體 噴霧清潔劑或濕布進行清潔 注意防潮 請勿將水或其他液體潑灑到本產品上 插槽與開口供通風使用 以確保本產品的操作可靠並防止過熱 請勿堵塞或覆蓋開口 請勿將本產品置放於靠近熱源的地方 除非有正常的通風 否則不可放在密閉位置中 請不要私自打開機殼 不要嘗試自行維修本產品 ...

Page 4: ...w of the Router 4 2 2 Features 5 2 3 Appearance 6 2 3 1 Front Panel 6 2 3 2 Rear Panel 7 Chapter 3 Quick Installation Guide 8 3 1 Configure PC 8 3 2 Login 11 Chapter 4 Configuration 17 4 1 Status 17 4 2 Quick Setup 18 4 3 Network 18 4 3 1 WAN 18 4 3 2 LAN 35 4 3 3 IPTV 39 4 3 4 MAC Address 40 4 3 5 Switch 41 4 4 User Group 48 4 4 1 Group 48 4 4 2 User 49 4 4 3 View 49 ...

Page 5: ... 6 3 MAC Filtering 78 4 6 4 Access Control 79 4 6 5 App Control 85 4 7 Services 87 4 7 1 PPPoE Server 87 4 7 2 E Bulletin 93 4 7 3 Dynamic DNS 94 4 7 4 UPnP 101 4 8 Maintenance 102 4 8 1 Admin Setup 102 4 8 2 Management 105 4 8 3 SNMP 107 4 8 4 Statistics 109 4 8 5 Diagnostics 110 4 8 6 Time 113 4 8 7 Logs 115 4 8 8 NAT Table 117 Appendix A Hardware Specifications 119 Appendix B FAQ 120 ...

Page 6: ... V Appendix C Glossary 122 ...

Page 7: ...ole Cable One Ethernet Cable Quick Installation Guide Mounting kits for installing in a standard 19 inch rack Resource CD Note Make sure that the package contains the above items If any of the listed items are damaged or missing please contact with your distributor The provided power cord may be different due to local power specifications ...

Page 8: ... menu option that is located under the Advanced menu Bold font indicates a toolbar icon menu or menu item Font indicate a button Symbols in this Guide Symbol Description Note Ignoring this type of note might result in a malfunction or damage to the device Tips This format indicates important information that helps you make better use of your device 1 3 Overview of this Guide Chapter 1 About This G...

Page 9: ... 3 Appendix B FAQ Provides the possible solutions to the problems that may occur during the installation and operation of the router Appendix C Glossary Lists the glossary used in this guide ...

Page 10: ...One Click restricting of applications to save time energy Supporting URL Filtering to prevent potential hazards from visiting the malicious Web sites Powerful Firewall Supporting One Click IP MAC Binding to avoid ARP spoofing and guarantee a network without stagnation Featured Attack Defense to protect the network from a variety of flood attacks and packet anomaly attacks Possessing MAC Filtering ...

Page 11: ... fan system design for quietness Possesses standard sized 19 inch outfit for standard rack Supports Professional 4kV common mode lightning protection Complies with IEEE 802 3 IEEE 802 3u Supports TCP IP DHCP ICMP NAT NAPT protocols Supports PPPoE SNTP HTTP DDNS UPnP NTP protocols Basic Functions Supports Static IP Dynamic IP PPPoE Russian PPPoE L2TP Russian L2TP PPTP Russian PPTP Dual Access BigPo...

Page 12: ... powered on PWR Off The router is powered off or power supply is abnormal Flashing The router works properly SYS On Off The router works improperly Off There is no device linked to the corresponding port On Green Yellow There is a device linked to the corresponding port but no activity Green light indicates the corresponding port is working as a LAN port and yellow indicates WAN port Link Act N Fl...

Page 13: ... factory defaults With the router powered on use a pin to press and hold the Reset button about 5 seconds If the SYS LED is flashing 5 times in high frequency release the Reset button It means the router is restored successfully The default management address of the router is http 192 168 0 1 and the default username and the password are both admin 2 3 2 Rear Panel The rear panel of TL R480T is sh...

Page 14: ... the basic functions of your TL R480T Load Balance Broadband Router These procedures only take you a few minutes You can access the Internet via the router immediately after it has been successfully configured 3 1 Configure PC Step 1 Click the Start menu on your desktop right click My Network Places and then select Properties shown in Figure 3 1 Figure 3 1 ...

Page 15: ...e next screen right click Local Area Connection LAN and then select Properties Figure 3 2 Step 3 On the next screen select General tab highlight Internet Protocol TCP IP and then click the Properties button Figure 3 3 ...

Page 16: ...ay need to be restarted Now you can run the Ping command in the command prompt to verify the network connection Please click the Start menu on your desktop select run tab type cmd in the field and then type ping 192 168 0 1 on the next screen and then press Enter If the result displayed is similar to the screen below the connection between your PC and the router has been established Figure 3 5 If ...

Page 17: ...e router s IP address is 192 168 0 1 your PC s IP address must be within the range of 192 168 0 2 192 168 0 254 the gateway must be 192 168 0 1 3 2 Login Once your host PC is properly configured please proceed as follows to use the Web based Utility Start your web browser and type the private IP address of the router in the URL field http 192 168 0 1 After that you will see the screen shown below ...

Page 18: ...ure 3 8 shows If it does not prompt you can click the Quick Setup on the left of the main menu Then click Next Figure 3 8 Quick Setup Select the total number of WAN ports you prefer to use as the Figure 3 9 shows Then click Next to load the WAN Port screen Figure 3 9 WAN Mode ...

Page 19: ...en click Next to load the WAN Connection Type screen Figure 3 10 WAN Port Select the connection type provided by your ISP as the Figure 3 11 shows Three popular types are provided here For other connection types please refer to the 4 3 1 WAN Figure 3 11 WAN Connection Type ...

Page 20: ...n during the process the configuration will still be continued in the background These fields are case sensitive If you have difficulty in this process please contact your ISP Figure 3 13 WAN Connection Type PPPoE Connecting 2 If your ISP assigns the IP address automatically please choose the Dynamic IP connection type to obtain the parameters for WAN port automatically The process for obtain the ...

Page 21: ...d by your ISP in Figure 3 15 Figure 3 15 WAN Connection Type Static IP Then click Next The process for configuring the network parameters is shown as Figure 3 16 If you close the screen during the process the configuration will still be continued in the background If you have difficulty in this process please contact your ISP ...

Page 22: ...16 WAN Connection Type Static IP Connecting After that you will see the next screen Click Finish to complete the quick installation or click Continue to configure other WAN ports Figure 3 17 Configuration Completed ...

Page 23: ... 4 Configuration 4 1 Status The Status page shows the system information the port connection status and other information related to this router Choose the menu Status to load the following page Figure 4 1 Status ...

Page 24: ... adjust the physical ports accordingly which can be illustrated on the following port sketch Note By default TL R480T is set to work in the mode of dual WAN ports Any change to the number of WAN ports may lead to a loss of current configurations Please be sure to backup your configurations in advance 4 3 1 2 WAN1 TL R480T provides the following six Internet connection types Static IP Dynamic IP PP...

Page 25: ... instructions of WAN1 Choose the menu Network WAN WAN1 to load the configuration page 1 Static IP If a static IP address has been provided by your ISP please choose the Static IP connection type to configure the parameters for WAN port manually Figure 4 3 WAN Static IP The following items are displayed on this screen Static IP Connection Type Select Static IP if your ISP has assigned a static IP a...

Page 26: ...NS Domain Name Server If you are not clear please consult your ISP It is not allowed to access the Internet via domain name if the Primary DNS field is blank Secondary DNS Optional If a Secondary DNS Server address is available enter it Upstream Bandwidth Specify the bandwidth for transmitting packets on the port Downstream Bandwidth Specify the bandwidth for receiving packets on the port 2 Dynami...

Page 27: ...r ISP s server Click Release to release the current IP address of WAN port Host Name Optional This field allows you to give a name for the router It is blank by default MTU MTU Maximum Transmission Unit is the maximum data unit transmitted by the physical network It can be set in the range of 576 1500 The default MTU is 1500 You are recommended to keep the default value if no other MTU value is pr...

Page 28: ...ets on the port Downstream Bandwidth Specify the bandwidth for receiving packets on the port Dynamic IP Status Status Displays the status of obtaining an IP address from your ISP Disabled indicates that the Dynamic IP connection type is not applied Connecting indicates that the router is obtaining the IP parameters from your ISP Connected indicates that the router has successfully obtained the IP ...

Page 29: ... DNS Displays the IP address of your ISP s Secondary DNS 3 PPPoE If your ISP Internet Service Provider has provided the account information for the PPPoE connection please choose the PPPoE Russian PPPoE connection type Used mainly for DSL Internet service Figure 4 5 WAN PPPoE ...

Page 30: ... the dial up connection charged on time Always on Select this option to keep the connection always on The connection can be re established automatically when it is down Time based Select this option to keep the connection on during the Active time you set PPPoE Advanced Settings Check here to enable PPPoE advanced settings Keep Alive Once PPPoE is connected the router will send keep alive packets ...

Page 31: ...are provided Connection Type Select the secondary connection type Options include Disable Dynamic IP and Static IP IP Address If Static IP is selected configure the IP address of WAN port If Dynamic IP is selected the obtained IP address of WAN port is displayed Subnet Address If Static IP is selected configure the subnet address of WAN port If Dynamic IP is selected the obtained subnet address of...

Page 32: ... your ISP Disconnected indicates that the connection has been manually terminated or the router gets no response from your ISP Please ensure that your settings are correct and your network is connected well Consult your ISP if this problem remains IP Address Displays the IP address assigned by your ISP Gateway Address Displays the Gateway Address assigned by your ISP Primary DNS Displays the IP ad...

Page 33: ... 27 4 L2TP If your ISP Internet Service Provider has provided the account information for the L2TP connection please choose the L2TP Russian L2TP connection type Figure 4 6 WAN L2TP ...

Page 34: ...sical network It can be set in the range of 576 1460 The default MTU is 1460 You are recommended to keep the default value if no other MTU value is provided by your ISP Active Mode You can select the proper Active Mode according to your need Manual Select this option to manually activate or terminate the Internet connection by the Connect or Disconnect button It is optimum for the dial up connecti...

Page 35: ...displayed Upstream Bandwidth Specify the bandwidth for transmitting packets on the port Downstream Bandwidth Specify the bandwidth for receiving packets on the port L2TP Status Status Displays the status of L2TP connection Disabled indicates that the L2TP connection type is not applied Connecting indicates that the router is obtaining the IP parameters from your ISP Connected indicates that the ro...

Page 36: ...Primary DNS Secondary DNS Displays the IP address of your ISP s Secondary DNS 5 PPTP If your ISP Internet Service Provider has provided the account information for the PPTP connection please choose the PPTP Russian PPTP connection type Figure 4 7 WAN PPTP ...

Page 37: ...ical network It can be set in the range of 576 1460 The default MTU is 1460 You are recommended to keep the default value if no other MTU value is provided by your ISP Active Mode You can select the proper Active mode according to your need Manual Select this option to manually activate or terminate the Internet connection by the Connect or Disconnect button It is optimum for the dial up connectio...

Page 38: ...ecify the bandwidth for transmitting packets on the port Downstream Bandwidth Specify the bandwidth for receiving packets on the port PPTP Status Status Displays the status of PPTP connection Disabled indicates that the PPTP connection type is not applied Connecting indicates that the router is obtaining the IP parameters from your ISP Connected indicates that the router has successfully obtained ...

Page 39: ...gPond connection please choose the BigPond connection type Figure 4 8 WAN Bigpond The following items are displayed on this screen BigPond Settings Connection Type Select BigPond if your ISP provides a BigPond connection Click Connect to dial up to the Internet and obtain the IP address Click Disconnect to disconnect the Internet and release the current IP address ...

Page 40: ...e according to your need Manual Select this option to manually activate or terminate the Internet connection by the Connect or Disconnect button It is optimum for the dial up connection charged on time Always on Select this option to keep the connection always on The connection can be re established automatically when it is down MTU MTU Maximum Transmission Unit is the maximum data unit transmitte...

Page 41: ... Please ensure that your settings are correct and your network is connected well Consult your ISP if this problem remains IP Address Displays the IP address assigned by your ISP Subnet Mask Displays the Subnet Mask assigned by your ISP Default Gateway Displays the IP address of the default gateway assigned by your ISP Note To ensure the BigPond connection re established normally please restart the...

Page 42: ... 255 255 255 0 Note If the LAN IP address is changed you must use the new IP address to login to the router To guarantee a normal communication please be sure that the Gateway address and the Subnet Mask of the Hosts are consistent with that of the router accordingly 4 3 2 2 DHCP The router with its DHCP Dynamic Host Configuration Protocol server enabled can automatically assign an IP address to t...

Page 43: ... LAN IP address The default address is 192 168 0 254 Lease Time Specify the length of time the DHCP server will reserve the IP address for each computer After the IP address expired the client will be automatically assigned a new one Default Gateway Optional Enter the Gateway address to be assigned It is recommended to enter the IP address of the LAN port of the router Default Domain Optional Ente...

Page 44: ...MAC address will always get the same IP address each time when it accesses the DHCP server Choose the menu Network LAN DHCP Reservation to load the following page Figure 4 12 DHCP Reservation The following items are displayed on this screen DHCP Reservation MAC Address Enter the MAC address of the computer for which you want to reserve the IP address IP Address Enter the reserved IP address Descri...

Page 45: ...ind the IP address and the MAC address in 4 6 1 1 IP MAC Binding then import the entries from the IP MAC binding table to the List of Reserved Address in buck by clicking Import button in Figure 4 12 DHCP Reservation 4 3 3 IPTV On this page you can configure the IPTV function The router will work with IGMP Proxy technology allowing watching IPTV via wired connection Choose the menu Network IPTV IP...

Page 46: ...Set the MAC Address for LAN port In a complex network topology with all the ARP bound devices if you want to use TL R480T instead of the current router in a network node you can just set the MAC address of TL R480T s LAN port the same to the MAC address of the previous router which can avoid all the devices under this network node to update their ARP binding tables Set the MAC Address for WAN port...

Page 47: ...sing to configure the router Then click Save to apply Note To avoid a conflict of MAC address on the LAN it is not allowed to set the MAC address of the router s LAN port to the MAC address of the current management PC 4 3 5 Switch Some basic switch port management functions are provided by TL R480T which facilitates you to monitor the traffic and manage the network effectively 4 3 5 1 Statistics ...

Page 48: ... Broadcast Displays the number of normal broadcast packets received or transmitted on the port Pause Displays the number of flow control frames received or transmitted on the port Multicast Displays the number of normal multicast packets received or transmitted on the port Undersize Displays the number of the received frames including error frames that are less than 64 bytes ...

Page 49: ... to clear the traffic statistics of the corresponding port Click the Clear All button to clear all the traffic statistics 4 3 5 2 Port Mirror Port Mirror the packets obtaining technology functions to forward copies of packets from one multiple ports mirrored port to a specific port mirroring port Usually the mirroring port is connected to a data diagnose device which is used to analyze the mirrore...

Page 50: ...t the Mirroring Port to which the traffic is copied Only one port can be selected as the mirroring port Mirrored Port Select the Mirrored Port from which the traffic is mirrored One or multiple ports can be selected as the mirrored ports The entry in Figure 4 16 indicates The outgoing packets sent by port 1 port 2 port 3 and port 5 mirrored ports will be copied to port 4 mirroring port Tips If bot...

Page 51: ... select the Ingress Egress mode 2 Select Port 3 to be the Mirroring Port to monitor all the packets of the other ports 3 Select all the other ports to be the Mirrored Ports 4 Click the Save button to apply 4 3 5 3 Rate Control On this page you can control the traffic rate for the specific packets on each port so as to manage your network flow Choose the menu Network Switch Rate Control to load the...

Page 52: ...led for port 1 The Ingress and Egress Rates are 1Mbps That is the receiving rate for all the ingress packets will not exceed 1Mbps and the transmitting rate for all the egress packets will not exceed 1Mbps 4 3 5 4 Port Config On this page you can configure the basic parameters for the ports Choose the menu Network Switch Port Config to load the following page Figure 4 18 Port Config The following ...

Page 53: ...o multiple logical LANs so as to control the communication among the ports The VLAN function can prevent the broadcast storm in LANs and enhance the network security By creating VLANs in a physical LAN you can divide the LAN into multiple logical LANs each of which has a broadcast domain of its own Hosts in the same VLAN communicate with one another as if they are in a LAN However hosts in differe...

Page 54: ...N can only be created among the LAN ports 4 4 User Group The User Group function is used to group different users for unified management so that you can perform other applications such as Bandwidth Control Session Limit and Access Control etc on per group 4 4 1 Group On this page you can define the group for management Choose the menu User Group Group to load the following page Figure 4 21 Group C...

Page 55: ...e the menu User Group User to load the following page Figure 4 22 User Configuration The following items are displayed on this screen User Config User Name Specify a unique name for the user IP Address Enter the IP Address of the user It cannot be the network address or broadcast address of the port Description Give a description to the user for identification It is optional List of User In this t...

Page 56: ...r Available Group Displays the Groups that the User can join Selected Group Displays the Groups to which this User belongs Group Name Select the name of the desired Group Group Structure Click this button to view the tree structure of this group All the members of this group will be displayed including Users and sub Groups The Group Names are displayed in bold Available Member Displays the Users a...

Page 57: ...he LAN Local Area Network security of the network since the address of LAN host never appears on the Internet 4 5 1 1 NAT Setup On this page you can configure the NAT function Choose the menu Advanced NAT NAT Setup to load the following page Figure 4 24 NAT Setup The following items are displayed on this screen NAPT Source Port Range Enter the source port range between 2049 and 65000 the span of w...

Page 58: ...Address in the first checkbox and Translated IP Address in the second checkbox TL R480T allows mapping from LAN port to WAN port Interface Select an interface for forwarding data packets DMZ Forwarding Enable or disable DMZ Forwarding The packets transmitted to the Translated IP Address will be forwarded to the host of Original IP if DMZ Forwarding is enabled Description Give a description for the...

Page 59: ...ple subnets to access the Internet via NAT Choose the menu Advanced NAT Multi Nets NAT to load the following page Figure 4 26 Multi Nets NAT The following items are displayed on this screen Multi Nets NAT Subnet Mask Enter the subnet mask to make the address range for the entry Description Give a description for the entry Status Activate or inactivate the entry list of Rules You can view the infor...

Page 60: ...Q Application Example Network Requirements The LAN subnet of TL R480T is 192 168 0 0 24 the subnet of VLAN2 under a three layer switch is 192 168 2 0 24 while the subnet of VLAN3 is 192 168 3 0 24 The IP of VLAN for cascading the switch to the router is 192 168 0 2 Now the hosts within VLAN2 and VLAN3 desire to access the Internet The network topology is shown as the following ...

Page 61: ... configured entries are as follows 2 Then set the corresponding Static Route entry enter the IP address of the interface connecting the router and the three layer switch into the Next Hop field Choose the menu Advanced Routing Static Route to load the following page The set Static Route entry is as follows ...

Page 62: ...ge Figure 4 27 Virtual Server The following items are displayed on this screen Virtual Server Name Enter a name for Virtual Server entry Up to 28 characters can be entered Interface Select an interface for forwarding data packets External Port Enter the service port or port range provided by router for accessing external network All requests from Internet to the service port s will be redirected t...

Page 63: ... indicates This is a Virtual Server entry named host all the TCP data packets from the Internet to port 65534 65535 of the router will be redirected to the port 65534 65535 of the LAN host with IP address of 192 168 0 103 and the data packets are transmitted from WAN1 port This entry is activated 4 5 1 5 Port Triggering Some applications require multiple connections like Internet games video confe...

Page 64: ...Only when the trigger port initiates connection will all the corresponding incoming ports open and provide service for the applications otherwise the incoming ports will not open Trigger Protocol Select the protocol used for trigger port Incoming Port Enter the incoming port number or range of port numbers The incoming port will open for follow up connection after the trigger port initiates connec...

Page 65: ...them by the Action buttons The first entry in Figure 4 28 indicates that This is a Port Triggering entry named host1 when the LAN host initiates a TCP request via port of 5354 the incoming port 5355 will open for TCP and UDP protocol and the data packets are transmitted from WAN1 port This entry is activated 4 5 1 6 ALG Some special protocols such as FTP H 323 SIP IPsec and PPTP will work properly...

Page 66: ...lt setting is enabled It is recommended to keep default if no special requirement PPTP ALG Enable or disable PPTP ALG The default setting is enabled It is recommended to keep default if no special requirement 4 5 2 Traffic Control Traffic Control functions to control the bandwidth by configuring rules for limiting various data flows In this way the network bandwidth can be reasonably distributed a...

Page 67: ...nt enabled WAN port s The Total bandwidth is equal to the sum of bandwidth of the enabled WAN ports Upstream Bandwidth Displays the bandwidth of each WAN port for transmitting data The Upstream Bandwidth of WAN port can be configured on WAN page Downstream Bandwidth Displays the bandwidth of each WAN port for receiving data The Downstream Bandwidth of WAN port can be configured on WAN page Note Th...

Page 68: ...cates the data stream direction WAN ALL means all WAN ports through which the data flow might pass Individual WAN port cannot be selected after WAN ALL rules are added Group Select the group to define the controlled users Mode Individual The bandwidth of each user equals to the current bandwidth of this entry Shared The total bandwidth of all controlled IP addresses equals to the current bandwidth...

Page 69: ...8 a m to 10 p m from Monday to Friday Note The premise for single rule taking effect is that the bandwidth of the interface for this rule is sufficient and not used up It is impossible to satisfy all the guaranteed bandwidth if the total guaranteed bandwidth specified by all Bandwidth Control rules for certain interface exceeds the physical bandwidth of this interface 4 5 3 Session Limit The amoun...

Page 70: ...ons Enter the max Sessions for the users Description Give a description for the entry Status Activate or inactivate the entry List of Session Limit You can view the information of the entries and edit them by the Action buttons The first entry in Figure 4 32 indicates The amount of maximum sessions for the hosts within group1 is 100 and this entry is enabled 4 5 3 2 Session List On this page you c...

Page 71: ...ce IP address and destination IP address of the packets as a whole and record the WAN port they pass through And then the packets with the same source IP address and destination IP address or destination port will be forwarded to the recorded WAN port This feature is to ensure the multi connected applications to work properly Check the box before Enable Bandwidth Based Balance Routing and select t...

Page 72: ...the entry 0 0 0 0 0 0 0 0 means any IP is acceptable Destination IP Enter the destination IP range for the entry 0 0 0 0 0 0 0 0 means any IP is acceptable Source Port Enter the source Port range for the entry which is effective only when the protocol is TCP UDP or TCP UDP The default value is 1 65535 which means any port is acceptable Destination Port Enter the destination port range for the entr...

Page 73: ...168 0 100 and 192 168 0 199 and Destination IP between 116 10 20 28 and 116 10 20 29 will be forwarded from WAN1 port regardless of the port and protocol This entry is activated d and will take effect at 8 am to 10 pm from Monday to Friday 4 5 4 3 Link Backup With Link Backup function the router will switch all the new sessions from dropped line automatically to another to keep an always on line n...

Page 74: ...in the secondary WAN list will share the traffic for the WAN in the primary WAN list under the specified condition The primary WAN list can contain one or more WAN ports while the backup WAN list contains only one WAN port Mode You can select Timing or Failover Timing Link Backup will be enabled if the specified effective time is reached All the traffic on the primary WAN will switch to the backup...

Page 75: ...u can view the information of the entries and edit them by the Action buttons The first entry in Figure 4 36 indicates WAN1 is the primary port and WAN2 is the backup port WAN2 will be enabled while WAN1 is failed This entry is enabled Note The same WAN port cannot be added to the primary and secondary WAN lists at the same time and one WAN port should be added to only one list 4 5 4 4 Protocol On...

Page 76: ...nnot be configured 4 5 5 Routing 4 5 5 1 Static Route Routing is the process of selecting optimized paths in a network along which to send network traffic Static Route is a kind of special routing configured by the administrator which is simple efficient and reliable Commonly used in small sized network with fixed topology Static Route does not change along with the network topology automatically ...

Page 77: ...ich the packet should be sent next Interface Select the physical network interface through which this route is accessible Metric Defines the priority of the route The smaller the value is the higher the priority is The default value is 0 Keep the default value if unnecessary Description Give a description for the entry Status Activate or inactivate the entry List of Rules You can view the informat...

Page 78: ...r 3 switch and they use network segments 192 168 2 0 24 and 192 168 3 0 24 respectively The IP address of the cascading LAN port between the layer 3 switch and the router is 192 168 0 2 Now the hosts within LAN1 desire to access the hosts within LAN2 and LAN3 The network topology is shown as the following Configuration procedure 1 On the Static Route page add a static routing rule for LAN2 with de...

Page 79: ...rnal network via Gateway However since ARP protocol is implemented with the premise that all the Hosts and Gateways are trusted there are high security risks during ARP Implementation Procedure in the actual complex network The attacker may send the ARP spoofing packets with false IP address to MAC address mapping entries and then the device will automatically update the ARP table after receiving ...

Page 80: ... will be sent to the device suffering attack initiatively by GARP Gratuitous ARP packets thus the error ARP information of the device will be replaced You can set the packets sending rate in the Interval field Check the box before Enable ARP Logs and the router will send ARP logs to the specified server The IP address of server is the Server IP set on 4 8 7 Logs IP MAC Binding IP Address Enter the...

Page 81: ...nding MAC address and display them on the List of Scanning Result Choose the menu Firewall Anti ARP Spoofing ARP Scanning to load the following page Figure 4 40 ARP Scanning Enter the start and the end IP addresses in the Scanning IP Range field Then click the Scan button the router will scan all the active hosts within the scanning range and display the result in the list The entries displayed on...

Page 82: ...ofing ARP List to load the following page Figure 4 41 ARP List The configurations for the entries is the same as the configuration of List of Scanning Result on 4 6 1 2 ARP Scanning page The unbound IP MAC information will be replaced by new IP MAC information or be automatically removed from the list if it has not been communicated with others for a long time This period is regarded as the aging ...

Page 83: ...DoS Denial of Service which including TCP SYN UDP ICMP and so on It is recommended to check all the Flood Defense options and specify the corresponding thresholds Keep the default settings if you are not sure Packet Anomaly Defense Packet Anomaly refers to the abnormal packets It is recommended to select all the Packet Anomaly Defense options ...

Page 84: ...ing their MAC addresses Choose the menu Firewall MAC Filtering MAC Filtering to load the following page Figure 4 43 MAC Filtering The following items are displayed on this screen General To control the access to Internet for hosts in you private network it is recommended to check the box before Enable MAC Filtering and select a filtering mode according to actual situation MAC Filtering MAC Address...

Page 85: ...s to filter the Internet URL address so as to provide a convenient way for controlling the access to Internet from LAN hosts Choose the menu Firewall Access Control URL Filtering to load the following page Figure 4 44 URL Filtering The following items are displayed on this screen General To control the access to Internet for hosts in your private network you are recommended to check the box before...

Page 86: ...d URL Effective Time Specify the time for the entry to take effect Description Give a description for the entry List of Rules You can view the information of the entries and edit them by the Action buttons Application Example Network Requirements Prevent the local hosts from accessing Internet website www aabbcc com anytime and downloading the files with suffix of exe at 8 00 20 00 from Monday to ...

Page 87: ... the menu Firewall Access Control Web Filtering to load the following page Figure 4 45 Web Filtering Check the box before Enable Web Filtering and select the web components to be filtered 4 6 4 3 Access Rules Choose the menu Firewall Access Control Access Rules to load the following page ...

Page 88: ...d to pass through the router Service Select the service for the entry Only the service belonging to the specified service type is limited by the entry For example if you select Block for Policy and only FTP for Service the packets of other service types can still pass through the router You can add new service types on 4 6 4 4 Service Interface Select interface for the entry The entry will take ef...

Page 89: ...or the entry Priority Select this option to specify the priority for the added entries The latest enabled entry will be displayed at the end of the list by default List of Rules You can view the information of the entries and edit them by the Action buttons The smaller the value is the higher the priority is The first entry in Figure 4 46 indicates The TELNET packets transmitted from the hosts wit...

Page 90: ...ewall Access Control Service to load the following page Figure 4 47 Service The following items are displayed on this screen Service Name Enter a name for the service The name should not be more than 28 characters The name will display in the drop down list of Protocol on Access Rule page Protocol Select the protocol for the service The system predefined protocols include TCP UDP and TCP UDP Dest ...

Page 91: ... Application Rules function Choose the menu Firewall App Control Control Rules to load the following page Figure 4 48 Application Rules The following items are displayed on this screen General Check the box before Enable Application Control to make the Application Control function take effect The specified application used by the specified local users will be not allowed to access the Internet if ...

Page 92: ...ective Time Specify the time for the entry to take effect Description Give a description for the entry Status Activate or inactivate the entry List of Rules You can view the information of the entries and edit them by the Action buttons The first entry in Figure 4 48 indicates The group1 is applied with Application Rules You can click View to view the limited applications in the popup checkbox The...

Page 93: ... up of users for a high efficiency in network management The PPPoE configuration can be implemented on General IP Address Pool Account Exceptional IP and List of Account pages 4 7 1 1 General On this page you can configure PPPoE function globally Choose the menu Services PPPoE Server General to load the following page Figure 4 50 General The following items are displayed on this screen General PPP...

Page 94: ...ntication Select the Authentication type It can be Local authentication and Remote authentication Select Local authentication for authentication in PPPoE server and select Remote authentication for authentication in the remote server Auth Protocol Select at least one authentication protocol for Local Authentication PAP transferring username and password in plain text in the network is used in a le...

Page 95: ...me to the IP Address Pool for identification and management purposes IP Address Range Specify the start and the end IP address for IP Pool The start IP address should not exceed the end address and the IP address ranges must not overlap List of IP Pool In this table you can view the information of IP Address Pools and edit them by the Action buttons 4 7 1 3 Account On this page you can configure t...

Page 96: ...this option to assign a static IP address to the client Dynamic Select this option to assign available IP addresses to the client automatically Static IP Address It is available on Static mode Enter a static IP address for the client IP Address Pool It is available on Dynamic mode Select an IP Address Pool to make a range to assign dynamic IPs Max Sessions Specify the maximum number of sessions fo...

Page 97: ... the account log on to the server MAC Address It is available when Manually is selected Enter the MAC address of the Host to bind with the account Session Timeout Enter a time after which the connection will be dropped To keep the connection always on enter 0 in the Session Timeout field The default is 48 If Enable Advanced Account Features is not selected the Session Timeout value is 0 by default...

Page 98: ...n to the exceptional IP address range for identification Status Activate or inactivate the entry List of Exceptional IP In this table you can view the information of Exceptional IPs and edit them by the Action buttons 4 7 1 5 List of Account On this page you can view the detailed information of all accounts you have established Choose the menu Services PPPoE Server List of Account to load the foll...

Page 99: ...it the bulletin content and specify the receiving user group Choose the menu Services E Bulletin to load the following page Figure 4 55 E Bulletin The following items are displayed on this screen General Enable E Bulletin Specify whether to enable electronic bulletin function Interval Specify the interval to release the bulletin ...

Page 100: ...t the same time Publisher Enter the name of the bulletin s publisher Description Enter the description for the bulletin Status Activate or inactivate the entry List of E Bulletin In this table you can view the existing bulletins and edit them by the Action button The No 1 entry in Figure 4 55 indicates this bulletin is released by the administrator and it is released to the Group1 from 8am to 20pm...

Page 101: ...cess the DDNS client even if the IP address of the DDNS client has changed DDNS is usually used for the Internet users to access the private website and FTP server both of which are established based on Web server The router as a DDNS client cannot provide DDNS service Prior to using this function be sure you have registered on the official websites of DDNS service providers for username password ...

Page 102: ...re WAN Port Displays the WAN port for which Dyndns DDNS is selected DDNS Status Displays the current status of DDNS service Offline DDNS service is disabled Connecting Client is connecting to the server Online DDNS works normally Authorization fails The Account Name or Password is incorrect Please check and enter it again Block This account is blocked List of DynDNS Account In this table you can v...

Page 103: ...lick Go to register to go to the website of No IP for register Password Enter the password of your DDNS account Domain Name Enter the Domain Name that you registered with your DDNS service provider Update Interval Select the interval to update DDNS service DDNS Service Activate or inactivate DDNS service here WAN Port Displays the WAN port for which No IP DDNS is selected ...

Page 104: ...t again Invalid Domain name The Domain Name is incorrect or unregistered Please check and enter it again List of No IP Account In this table you can view the existing DDNS entries or edit them by the Action button Click the Update All button to update the DDNS service manually 4 7 3 3 PeanutHull On this page you can configure PeanutHull DDNS client Choose the menu Services Dynamic DNS PeanutHull t...

Page 105: ...ssional service and Standard service DDNS Status Displays the current status of DDNS service Offline DDNS service is disabled Connecting Client is connecting to the server Online DDNS works normally Authorization fails The Account Name or Password is incorrect Please check and enter it again Domain Name Displays the domain names obtained from the DDNS server Up to 16 domain names can be displayed ...

Page 106: ...t DDNS Service Activate or inactivate DDNS service here WAN Port Displays the WAN port for which Comexe DDNS is selected DDNS Status Displays the current status of DDNS service Offline DDNS service is disabled Connecting Client is connecting to the server Online DDNS works normally Authorization fails The Account Name or Password is incorrect Please check and enter it again Domain Name Displays th...

Page 107: ...rt so that the functions limited to NAT can work normally For example MSN Messenger installed in Windows XP and Windows ME system is using UPnP protocol when audio and video communications are processing On this page you can configure UPnP service Choose the menu Services UPnP to load the following page Figure 4 60 UPnP The following items are displayed on this screen General UPnP Function Enable ...

Page 108: ...inistrator On this page you can modify the factory default user name and password of the router Choose the menu Maintenance Admin Setup Administrator to load the following page Figure 4 61 Administrator The following items are displayed on this screen Administrator Current User Name Enter the current user name of the router Current Password Enter the current password of the router New User Name En...

Page 109: ...ose the menu Maintenance Admin Setup Login Parameter to load the following page Figure 4 62 Login Parameter The following items are displayed on this screen General Web Management Port Enter the Web Management Port for the router Telnet Management Port Enter the Telnet Management Port for the router Web Idle Timeout Enter a timeout period that the router will log you out of the Web based Utility a...

Page 110: ...emotely Configuration Procedure Type 210 10 10 0 24 in the Subnet Mask field on Remote Management page and enable the entry as the following figure shows Then type the corresponding port number in Web Management Port and Telnet Management Port fields as the following figure shows Finally start the web browser and type 210 10 10 50 in the URL field to log in the Web management page of the router 4 ...

Page 111: ...e 4 63 indicates that The hosts with IP address in subnet of 192 168 2 0 24 are allowed to access the router and this entry is activated 4 8 2 Management 4 8 2 1 Factory Defaults Choose the menu Maintenance Management Factory Defaults to load the following page Figure 4 64 Factory Defaults Click the Restore to Factory Defaults button to reset all configuration settings to their default values The ...

Page 112: ...grading or modifying the configuration Import Click the Browse button to locate the update file for the device or enter the exact path to the saved file in the text box Then click the Import button to restore the saved setting Note To avoid any damage please do not power down the router while being restored Configurations may be lost if the configuration file you imported varies greatly from curre...

Page 113: ...p link com to download the updated firmware Type the path and file name of the update file into the File field Or click the Browse button to locate the update file Then click the Upgrade button to complete Note After upgrading the device will reboot automatically To avoid damage please do not turn off the device while upgrading You are suggested to backup the configuration before upgrading 4 8 3 S...

Page 114: ...ntact number or an e mail address Get Community Enter the password that allows read only access to the router s SNMP information The default password is public Set Community Enter the password that allows read write access to the router s SNMP information The default password is private SNMP Trusted Host You can restrict access to the router s SNMP information by IP address Enter the IP address of...

Page 115: ...e for transmitting data frames Packets Rx Displays the number of packets received on the interface Packets Tx Displays the number of packets transmitted on the interface Bytes Rx Displays the bytes of packets received on the interface Bytes Tx Displays the bytes of packets transmitted on the interface Advanced WAN Information Interface Displays the interface IP Fragment Rx Displays the amount of I...

Page 116: ...terval is 5 seconds Traffic Statistics Direction Select the direction in the drop down list to get the Flow Statistics of the specified direction IP Traffic Statistics This table displays the detailed traffic information of corresponding PCs Sorted by Select the rule for displaying the traffic information 4 8 5 Diagnostics 4 8 5 1 Diagnostics This router provides Ping test and Tracert test functio...

Page 117: ...n IP address or Domain name here Then select a port for testing if you select Auto the router will select the interface of destination automatically After clicking Start button the router will send Ping packets to test the network connectivity and reachability of the host and the results will be displayed in the box below ...

Page 118: ... The following items are displayed on this screen General Port Select the port to be detected Detecting Activate or inactivate Online Detection function When Online Detection is active WAN status will depend on the result of both PING and DNS Lookup When Online Detection is inactive WAN status will be detected according to physical connection status and dial up status Mode Detect automatically or ...

Page 119: ...n this page you can configure the system time and the settings here will be used for other time based functions like Access Rule PPPoE and Logs Choose the menu Maintenance Time Time to load the following page Figure 4 73 Time The following items are displayed on this screen Current Time System Time Displays the current date and time of the router Time Zone Displays the current time zone of the rou...

Page 120: ...the date and time manually Synchronize with PC S Clock With this option selected the administrator PC s clock is utilized Note If Get UTC function cannot be used properly please add an entry with UDP port of 123 to the firewall software of the PC The time will be lost when the router is restarted The router will obtain UTC time automatically from Internet 4 8 6 2 Daylight Saving Time On this page ...

Page 121: ... when Daylight Saving Time comes Start End Time Select the start time and end time of Daylight Saving Time The start time is standard time and the end time is Daylight Saving Time Date Mode Specify the DST configuration in Date mode This configuration is one off in use Time Offset Specify the time adding in minutes when Daylight Saving Time comes Start End Time Select the start time and end time o...

Page 122: ...log information with the same level Send System Logs Select Send System Logs and specify the server IP then the new added logs will be sent to the specified server The Logs of switch are classified into the following eight levels Severity Level Description emergencies 0 The system is unusable alerts 1 Action must be taken immediately critical 2 Critical conditions errors 3 Error conditions warning...

Page 123: ... interface for forwarding data packets Protocol Select the protocol which is used in the link Local IP Address Optional Enter the local IP address to be filtered Configure the options above then click Show to apply NAT Table Protocol Displays the protocol used in the current network link Local IP Address Displays the IP address of the device in LAN Local Port Displays the used port of the device i...

Page 124: ...g Time Displays the time which the link lasts Unit second Out Link Displays the WAN port which is used in the link Sorted by Select the rule for displaying the NAT Table You can click table headers to sort items ...

Page 125: ...5 ports Auto MDI MDIX One 10 100M Auto Negotiation LAN RJ45 port Auto MDI MDIX Ports One Console Port 10Base T UTP STP of Cat 3 or above 100m Transmission Medium 100Base TX UTP STP of Cat 5 or above 100m LEDs PWR SYS Link Act 100Mbps Power 100 240V 50 60Hz 0 3A Operating Temperature 0ºC to 40ºC Storage Temperature 40ºC to 70ºC Operating Humidity 10 90 RH Non condensing Operating Environment Storag...

Page 126: ... configuration of your router has been changed by others especially when the Remote Web Management function is enabled You are recommended to restore your router and reconfigure the management port number and the username as well as the password for your network security 4 If you cannot access the router even after restoring the router to its defaults or your login is dropped down just after a whi...

Page 127: ...ce port 4 Make sure that the NAT DMZ service is disabled Q4 Some function of the router need to define the IP address subnet with Subnet Mask What are the common values of the Subnet Mask Subnet Mask is a 32 bit binary address used to distinguish the network address and the host address When dividing the network the different Subnet Mask defines different subnet and each subnet owns different numb...

Page 128: ...dress DHCP Dynamic Host Configuration Protocol A protocol that automatically configure the TCP IP parameters for the all the PCs that are connected to a DHCP server DMZ Demilitarized Zone A Demilitarized Zone allows one local host to be exposed to the Internet for a special purpose service such as Internet gaming or videoconferencing DNS Domain Name Server An Internet Server that translates the na...

Page 129: ...ocol Network layer protocol in the TCP IP stack offering a connectionless Internetwork service IP provides features for addressing type of service specification fragmentation and reassembly and security ISP Internet Service Provider Company that provides Internet access to other companies and individuals IKE Internet Key Exchange IKE establishes a shared security policy and authenticates keys for ...

Page 130: ...connect to the Internet by translating those addresses into globally routable address space N NTP Server NTP Server is used for synchronising the time across computer networks POP3 Post Office Protocol 3 POP3 is intended to permit a workstation to dynamically access a maildrop on a server host in a useful fashion P PPPoE Point to Point Protocol over Ethernet PPPoE is a network protocol for encapsu...

Page 131: ...ing that error processing and retransmission be handled by other protocols UPnP Universal Plug and Play UPnP is a set of networking protocols for primarily residential networks without enterprise class devices that permits networked devices U URL Uniform Resource Locator URL describes the access method and the location of an information resource object on the Internet V VLAN Virtual Local Area Net...

Reviews: