background image

 

 

 

 

 

Hurricane 9000G 

                                          

802.11g ADSL Router  with VPN and Firewall 

 

User’s Manual 

Version 1.0 

 

Содержание Hurricane 9000G

Страница 1: ...Hurricane 9000G 802 11g ADSL Router with VPN and Firewall User s Manual Version 1 0 ...

Страница 2: ......

Страница 3: ... with Web Browser 15 3 4 1 Status 16 3 4 1 1 Status ADSL Status 17 3 4 1 1 1 ADSL Status WAN Status 18 3 4 1 1 2 ADSL Status ATM Status 18 3 4 1 2 Status LAN Status 19 3 4 1 2 1 LAN Status TCP Status 20 3 4 1 3 Status PPP Status 20 3 4 1 4 Status VPN Connect Status 21 3 4 1 5 Status Learned MAC Table 21 3 4 1 6 Routing Table 22 3 4 1 7 System Log 23 3 4 1 8 Security Logs 23 3 4 2 Quick Start 24 3 ...

Страница 4: ...RL Blocking 40 3 4 3 6 VPN Virtual Private Networks 41 3 4 3 7 Virtual Server 43 3 4 3 8 Advanced 44 3 4 3 8 1 ADSL 44 3 4 3 8 2 DNS 45 3 4 3 8 3 Dynamic DNS 46 3 4 3 8 4 NAT 47 3 4 3 8 5 RIP 49 3 4 3 8 6 SNMP 50 3 4 3 8 7 Static Routing 51 3 4 3 8 8 MISC Configuration 53 3 4 3 8 9 Diagnostic Test 54 3 4 4 Save Config 56 Chapter 4 57 TROUBLESHOOTING 57 PRODUCT SUPPORT AND CONTACT INFORMATION 58 ...

Страница 5: ...etwork Secondly it can block and redirect certain ports to limit the services that outside users can access For example to ensure that games and other Internet applications will run properly user can open some specific ports for outside users to access internal services in network Integrated DHCP Dynamic Host Control Protocol services client and server allow multiple users to get their IP addresse...

Страница 6: ... can now connect to Net meeting or MSN Messenger seamlessly Network Address Translation NAT Allows multi users to access outside resource such as Internet simultaneously with one IP address one Internet access account Besides many application layer gateway ALG are supported such as web browser ICQ FTP Telnet E mail News Ping and others Domain Name System DNS relay Provides an easy way to map the d...

Страница 7: ...ding IP address subnet mask as well as DNS IP address to local computers It provides an easy way to manage the local IP network Rich Packet Filtering Not only filter the packet based on IP address but also based on Port numbers and MAC address It will increase the performance in LAN and WAN also provide a higher level security control SNTP An easy way to get the network real time information from ...

Страница 8: ...802 11g ADSL Router 4 1 4 Application ...

Страница 9: ...tdoors Place the product on the stable surface Only use the power adapter that comes with the package Pls remember to switch off the router if you are a time based or volume based user 2 2 The Front LEDs LED Meaning 5 PWR Lit green when power adapter is connected 6 SYS when the router is working properly the SYS LED will flash 7 WLAN Lit green when the wireless connection is established Flashes wh...

Страница 10: ...the supplied RJ 11 telephone cable to this port when connecting to the ADSL telephone network 2 4 Cabling Through Ethernet Port The product s LAN port is wired just like a Network Adapter s port From the product directly to a PC the cable should be an Ethernet straight cable From the product to a hub or switch the cable should be an Ethernet straight through cable to a normal hub switch port or an...

Страница 11: ...connected and the LEDs are lit normally follow section 3 2 Configuring the Network Properties below to modify the network settings Since the product cannot auto detect whether your cable is correct or not please make sure you are using the right cable to a PC or a Hub ...

Страница 12: ...address which must be in the same subnet of the Router The default IP address of router is 192 168 1 254 and subnet mask is 255 255 255 0 The best and easy way is to configure the PC to get an IP address from the ADSL Router Please follow the steps below for PC s network environment installation Before taking the first step please check your PC s network components If your PC connects the ADSL Mod...

Страница 13: ... Connection Status window click Properties 4 Select Internet Protocol TCP IP and click Properties 5 Select the Obtain an IP address automatically and the Obtain DNS server address automatically radio buttons 6 Click OK to finish the configuration ...

Страница 14: ...Go to Start Settings Control Panel In the Control Panel double click on Network and Dial up Connections 2 Double click Local Area Connection 3 In the Local Area Connection Status window click Properties 4 Select Internet Protocol TCP IP and click Properties ...

Страница 15: ...cally radio buttons 6 Click OK to finish the configuration Configuring PC in Windows 95 98 ME 1 Go to Start Settings Control Panel In the Control Panel double click on Network and choose the Configuration tab 2 Select TCP IP NE2000 Compatible or the name of your Network Interface Card NIC in your PC 3 Click Properties ...

Страница 16: ... 12 4 Select the IP Address tab In this page click the Obtain an IP address automatically radio button 5 Then select the DNS Configuration tab 6 Select the Disable DNS radio button and click OK to finish the configuration ...

Страница 17: ... Protocols tab 2 Select TCP IP Protocol and click Properties 3 Select the Obtain an IP address from a DHCP server radio button and click OK 3 2 Factory Default Settings Before you configure this device you need to know the following default settings 1 Web Configuration Password There are two levels of password protection Administrator Level and User Level ...

Страница 18: ...he factory default settings 3 2 2 LAN and WAN Port Addresses The parameters of LAN and WAN ports are pre set in the factory The default values are shown below LAN Port WAN Port IP address 192 168 1 254 Subnet Mask 255 255 255 0 DHCP server function Enabled IP addresses for distribution to PCs 100 IP addresses continuing from 192 168 1 100 through 192 168 1 199 Actually it can supports up to 253 us...

Страница 19: ...ddress and Domain Name System DNS IP address it is fixed IP address IPoA VPI VCI VC based LLC based multiplexing IP address Subnet mask Gateway address and Domain Name System DNS IP address it is fixed IP address 3 4 Configuring with Web Browser The ADSL Modem Router can be configured with your Web browser The web browser is included as a standard application in following operation systems UNIX Li...

Страница 20: ...e provided links you directly to the desired setup page including Status ADSL Status LAN Status PPP Status VPN Connect Status Learned MAC Table Routing Table System Log and Security Log Quick Start Configuration WAN LAN Wireless System Firewall VPN Virtual Server and Advanced Save Config 3 4 1 Status The Status section provides and contains many items including device H W and S W information LAN W...

Страница 21: ...Chapter 3 Configuration 17 3 4 1 1 Status ADSL Status Displays the status of your ADSL connection It will refresh every two seconds ...

Страница 22: ...802 11g ADSL Router 18 3 4 1 1 1 ADSL Status WAN Status 3 4 1 1 2 ADSL Status ATM Status ...

Страница 23: ...Chapter 3 Configuration 19 3 4 1 2 Status LAN Status Displays the status of your Local Area Network LAN connection ...

Страница 24: ...802 11g ADSL Router 20 3 4 1 2 1 LAN Status TCP Status 3 4 1 3 Status PPP Status Displays the status of your PPP connection It will refresh every ten seconds ...

Страница 25: ... this page you can check connection status of Virtual Private Network VPN Once you setup your VPN tunnel the information of connection it will show on this page 3 4 1 5 Status Learned MAC Table Aging Timeout Enter the time period for the router to memorize MAC addresses ...

Страница 26: ...802 11g ADSL Router 22 3 4 1 6 Routing Table Display the current routing paths of the ADSL Router ...

Страница 27: ...nt time You can trace the historical information through this function 3 4 1 8 Security Log Display the information of security logs If hacker attacks your sever he will be isolated by the firewall function and the router will record related information Hence you know where the hacker comes from ...

Страница 28: ...l in the CD Information from the ISP then enter the proper values into this web page click the Submit button and then click the Save Config button to save all of the configuration parameters to RESTART the router After the router reboots you may check the Status web page to check whether the router is connected to the ISP or not In most cases you can access the Internet immediately If not please r...

Страница 29: ...lowing sub items to configure the ADSL Router WAN LAN Wireless System Firewall VPN Virtual Server and Advanced 3 4 3 1 WAN The screens below contain settings for the WAN interface toward Internet Select Adapter Select the item of PVCs you want to configure Then press the Submit button ...

Страница 30: ...outer 26 Virtual Circuit Virtual Circuit Enable Disable the settings of this VC Bridge If you set this device to be bridge mode select Enable if not please select Disable IGMP You can Enable or Disable this function ...

Страница 31: ...ving the scenario when the ISP only recognizing the specified MAC address Static IP Settings IP Address Enter the information provided by your ISP Subnet Mask Enter the information provided by your ISP Default Gateway Enter the gateway address provided by your ISP PPP If your encapsulation is set to be PPPoE or PPPoA the following fields must be entered Service Name This item is for identification...

Страница 32: ... LAN client and a host in the WAN side the LAN client and the WAN host will indicate their MSS during the TCP connection handshake The default value is 1492 Authentication Default at Auto Automatic Reconnect Check to enable this device to automatically re establish the PPPoE session when disconnected by ISP 3 4 3 2 LAN This screen contains settings for LAN interface attached to the LAN port Device...

Страница 33: ... segment The default value is 192 168 1 100 User Defined End Address Enter the last address of this local IP network address pool that you want the DHCP server to assign IP addresses to The default value is 192 168 1 199 With this case the DHCP pool is from 192 168 1 100 to 192 168 1 199 Therefore the local computer will get an IP address located at this range randomly Lease Time Set the lease tim...

Страница 34: ...hat of the device 3 4 3 3 2 Advanced setting Advanced wireless configuration page enables you to select Basic Rate and TX Rate Multiple choices are available in this part from at least 1M to 54M maximum 3 4 3 3 3 WLAN Security This session provides the setup function of WPA mode You can enable or disable the Wi Fi Protected Access WPA to assure your wireless environment is under protection ...

Страница 35: ...nge the default password to ensure that someone cannot adjust your settings without your permission Every time you change your password please record the password and keep it at a safe place Please note that the minimum input for password is 8 alphanumeric characters long Since it is case sensitive be sure that you remember whether a letter is in upper or lower case and make sure that your Caps Lo...

Страница 36: ...le network time protocol SNTP to get the current time from the SNTP server in outside network Please choose your local time zone and click Submit You will get the correct time information after you really establish a connection to Internet The current time of selected time zone will be shown in the Status System window ...

Страница 37: ...uration 33 Automatically adjust clock for daylight saving changes It is optional for different time zone area SNTP Server IP Address Specify the IP address if you want to use your familiar SNTP server 3 4 3 4 3 Upgrade ...

Страница 38: ...Upload to start upgrading When the procedure is completed the Router will reset automatically to make the new firmware work 3 4 3 4 4 Factory Setting If for any reason you have to reset this router back to factory default settings be careful that the current settings will be lost and the settings are reset back to its default value The factory default values is detailed in the section 3 2 Factory ...

Страница 39: ... More firewall features will be added continually please visit our web site to download latest firmware 3 4 3 5 1 Packet Filter Packet filtering function enables you to configure your router to check specified internal external user IP address from Internet access or you can disable specific service request Port number to from Internet This configuration program allows you to set up different filt...

Страница 40: ...rule After click next figure will appear Edit Check the Rule No you want to edit Then click the Edit button Delete Check the Rule No you want to delete Then click the Delete button Outgoing Incoming Determine whether the rule is for outgoing packets or for incoming packets ...

Страница 41: ...e IP Address Enter the incoming or outgoing packet s source IP address es Source Port Check the TCP or UDP packet s source port number s Destination IP Address Enter the incoming or outgoing packet s destination IP address es Destination Port Check the TCP or UDP packet s destination port number s If the DHCP server option is enabled you have to be very careful in assigning the IP addresses of fil...

Страница 42: ... Enable if you want to detect invader sneak in your computer without permitted The ADSL Router can automatically detect and block the DoS Denial of Service attack if user enables this function This kind of attack is not to achieve the confidential data of this network instead it aims to crush specific equipment or the entire network If this happens the users will not be able to access the network ...

Страница 43: ...Chapter 3 Configuration 39 3 4 3 5 4 Block WAN Request Check Enable if you want to exclude outside PING request from reaching on this router ...

Страница 44: ... Check this will block all browsing requests from PCs Block to specify the time period when you want this function activated But be noted that SNTP Time Zone function must WORK Keyword Filtering Check if you want to enable the Keyword Filtering function and click the hyper link to enter further configuration Use Domain Filtering Check if you wan to enable the Domain Filtering function and click th...

Страница 45: ... the VPN settings to establish a secure communication path with remote site based on IPsec Please check Enable and click Add button Then you will see IKE Setup page as below figure Then you can configure the rule as your security plan Active To enable this VPN tunnel setting or not ...

Страница 46: ...ion method MD5 and SHA1 authentication protocols are supported The authentication keys are a string and must be exactly 16 characters long for MD5 and 20 characters long for SHA1 The ESP can be one of following proposals ESP DES without Authentication ESP 3DES without Authentication ESP DES with MD5 ESP DES with SHA 1 ESP 3DES with MD5 ESP 3DES with SHA 1 ESP MD5 without Encryption ESP SHA 1 witho...

Страница 47: ...al server You can set up a local server with specific port number that stands for the service e g Web 80 FTP 21 Telnet 23 SMTP 25 POP3 110 DNS 53 ECHO 7 NNTP 119 When an incoming access request to the router for specified port is received it will be forwarded to the corresponding internal server For example if you set the Public Port number 21 FTP to be mapped to the IP Address 192 168 1 100 then ...

Страница 48: ...f certain internal server to which requests from the specified port is forwarded Private Port it may be the same as public port or keep it bland It depends on your application setting 3 4 3 8 Advanced There are eight items under the Advanced section ADSL DNS Dynamic DNS NAT RIP Static Routing MISC Configuration and Diagnostic Test 3 4 3 8 1 ADSL Trellis Default at Enabled Handshake Protocol Defaul...

Страница 49: ...www yahoo com and IP address The IP address is so hard to remember that you may just enter the friendly name www yahoo com and then the DNS will convert it to its equivalent IP address You can obtain Domain Name System DNS IP address automatically if ISP provides it when you logon Or your ISP may provide you with an IP address of DNS If this is the case you must enter the DNS IP address ...

Страница 50: ...namic DNS service a domain name can be translated into a dynamic IP address which is often issued by ISP for dial up service A local server such as Web server Email server or FTP server can then be easily accessed without knowing the changing IP address ...

Страница 51: ...mic Network Address Translation capability between LAN and multiple WAN connections and the LAN traffic is routed to appropriate WAN connections based on the destination IP addresses and Rout Table This eliminates the need for the static NAT session configuration between multiple LAN clients and multiple WAN connections NAT Static This option maps single WAN IP address to the local PC IP address I...

Страница 52: ...ion Name Configuration the following screen displays Session Name Enter the desired session name Interface This field allows the user to choose specific WAN interface PVC or PPP Session for NAT session NAT allows only one entry User IP per session NAPT allows many entries User IPs per session Select Add or Delete and then press the Submit button to add or delete any NAT session name setting to fro...

Страница 53: ...8 5 RIP RIP Default is Disabled Border Gateway Default is Enabled Supply Interval seconds The default value is 30 seconds Expire Timeout seconds The default value is 180 seconds Garbage Timeout seconds The default value is 120 seconds ...

Страница 54: ...802 11g ADSL Router 50 3 4 3 8 6 SNMP Simple Network Management Protocol SNMP is an optional feature that may or may not be supported by your ADSL Bridge Router ...

Страница 55: ...em Identification The System Name System Contact System Location and System OID are provided to identify the SNMP NMS The System OID is the ID number placed in all Trap reports The System Name System Contact and System Location can be up to 127characters Default value for System OID is 1 3 6 1 4 1 4900 Read Community This is the password to access public information The Read Community can be up to...

Страница 56: ... add a new static routing When you click this button the next figure appears Delete Check the item you want to delete Then click the Delete button Destination Subnet Mask Gateway Address Fill in these fields required by this Static Routing function ...

Страница 57: ...hecked by NAT algorithms in the ADSL Router then passed to the DMZ host when the packet is not sent by hacker or not limited by the virtual server list DMZ HOST IP Enter the IP address of the DMZ host DHCP Relay Default at DHCP Server DHCP Target IP Default is 0 0 0 0 IGMP Proxy Default at Disabled PPP Half Bridge Default at Disabled PPP reconnect on WAN access Default at Disabled Select Enabled i...

Страница 58: ...cessfully negotiate and establish a DSL connection with your service provider s central office equipments The test returns PASS if a DSL connection is established If this test returns FAIL please try the test again a few minutes after this test is completed Since your DSL modem need a couple of seconds to a few minutes to establish the DSL connection depending on your phone line quality If this te...

Страница 59: ...l error has occurred This test returns SKIPPED if the DSL synchronization does not return PASS Test IP connect to PPP This test returns PASS if your DSL modem has been assigned a valid IP address by your service provider through DHCP or your DSL modem is assigned a valid IP address statically If this test returns FAIL run this test again a few minutes after this test is completed If this test retu...

Страница 60: ...56 3 4 4 Save Config Click the Submit button to write settings to Router Then the system will reboot for changes to take effect ...

Страница 61: ... Network Cable connection 2 Please check your LAN Card whether it s functioning Problem Possible Solutions No WLAN LED Wireless Problem Please contact local vendor for servicing Problem Possible Solutions ADSL LED Blinking 1 Ensure that the ADSL line is activated 2 Check that the Telephone cable RJ 11 is connected to LINE Jack on your modem 3 Try to turn off the modem wait for at lease ten seconds...

Страница 62: ... to clean the virus but we are unable to assist you until the virus is cleaned Singapore Service Centre Tel 65 62965455 Fax 65 63925455 Email support fida com Address Blk 105 Boon Keng Rd 06 13 Singapore 339776 Operating Hours Mon Fri 0900 1745 hrs Sat 0900 1300 hrs Malaysia Service Centre Tel 603 8024 9151 Fax 603 8024 9161 Email support_my fida com Address 29 Jalan USJ 1 31 47600 Subang Jaya Sel...

Отзывы: