background image

 

-82-

 

 

Figure 4-46 Access Rule 

The following items are displayed on this screen: 

 

Access Rules 

 

Policy: 

Select a policy for the entry: 

 

Block: When this option is selected, the packets obeyed the rule 

will not be allowed to pass through the router. 

 

Allow: When this option is selected, the packets obeyed the rule 

will be allowed to pass through the router. 

Service: 

Select the service for the entry. Only the service belonging to the 

specified service type is limited by the entry. For example, if you 

select “Block” for Policy and only FTP for Service, the packets of other 

service types can still pass through the router. You can add new 

service types on 

4.6.4.4 Service

Interface: 

Select interface for the entry. The entry will take effect when the 

interface to which the data is flowing is selected. WAN or LAN refers 

to all the WAN or LAN interfaces. 

Содержание L-R480T+

Страница 1: ...TL R480T Load Balance Broadband Router REV7 0 0 1910011057 ...

Страница 2: ...rcial environment This equipment generates uses and can radiate radio frequency energy and if not installed and used in accordance with the instruction manual may cause harmful interference to radio communications Operation of this equipment in a residential area is likely to cause harmful interference in which case the user will be required to correct the interference at his own expense This devi...

Страница 3: ...power source Don t disassemble the product or make repairs yourself You run the risk of electric shock and voiding the limited warranty If you need service please contact us Avoid water and wet locations 安全諮詢及注意事項 請使用原裝電源供應器或只能按照本產品注明的電源類型使用本產品 清潔本產品之前請先拔掉電源線 請勿使用液體 噴霧清潔劑或濕布進行清潔 注意防潮 請勿將水或其他液體潑灑到本產品上 插槽與開口供通風使用 以確保本產品的操作可靠並防止過熱 請勿堵塞或覆蓋開口 請勿將本產品置放於靠近熱源的地方 除非有正常的通風 否則不可放在密閉位置中 請不要私自打開機殼 不要嘗試自行維修本產品 ...

Страница 4: ...w of the Router 4 2 2 Features 5 2 3 Appearance 6 2 3 1 Front Panel 6 2 3 2 Rear Panel 7 Chapter 3 Quick Installation Guide 8 3 1 Configure PC 8 3 2 Login 11 Chapter 4 Configuration 17 4 1 Status 17 4 2 Quick Setup 18 4 3 Network 18 4 3 1 WAN 18 4 3 2 LAN 35 4 3 3 IPTV 39 4 3 4 MAC Address 40 4 3 5 Switch 41 4 4 User Group 48 4 4 1 Group 48 4 4 2 User 49 4 4 3 View 49 ...

Страница 5: ... 6 3 MAC Filtering 78 4 6 4 Access Control 79 4 6 5 App Control 85 4 7 Services 87 4 7 1 PPPoE Server 87 4 7 2 E Bulletin 93 4 7 3 Dynamic DNS 94 4 7 4 UPnP 101 4 8 Maintenance 102 4 8 1 Admin Setup 102 4 8 2 Management 105 4 8 3 SNMP 107 4 8 4 Statistics 109 4 8 5 Diagnostics 110 4 8 6 Time 113 4 8 7 Logs 115 4 8 8 NAT Table 117 Appendix A Hardware Specifications 119 Appendix B FAQ 120 ...

Страница 6: ... V Appendix C Glossary 122 ...

Страница 7: ...ole Cable One Ethernet Cable Quick Installation Guide Mounting kits for installing in a standard 19 inch rack Resource CD Note Make sure that the package contains the above items If any of the listed items are damaged or missing please contact with your distributor The provided power cord may be different due to local power specifications ...

Страница 8: ... menu option that is located under the Advanced menu Bold font indicates a toolbar icon menu or menu item Font indicate a button Symbols in this Guide Symbol Description Note Ignoring this type of note might result in a malfunction or damage to the device Tips This format indicates important information that helps you make better use of your device 1 3 Overview of this Guide Chapter 1 About This G...

Страница 9: ... 3 Appendix B FAQ Provides the possible solutions to the problems that may occur during the installation and operation of the router Appendix C Glossary Lists the glossary used in this guide ...

Страница 10: ...One Click restricting of applications to save time energy Supporting URL Filtering to prevent potential hazards from visiting the malicious Web sites Powerful Firewall Supporting One Click IP MAC Binding to avoid ARP spoofing and guarantee a network without stagnation Featured Attack Defense to protect the network from a variety of flood attacks and packet anomaly attacks Possessing MAC Filtering ...

Страница 11: ... fan system design for quietness Possesses standard sized 19 inch outfit for standard rack Supports Professional 4kV common mode lightning protection Complies with IEEE 802 3 IEEE 802 3u Supports TCP IP DHCP ICMP NAT NAPT protocols Supports PPPoE SNTP HTTP DDNS UPnP NTP protocols Basic Functions Supports Static IP Dynamic IP PPPoE Russian PPPoE L2TP Russian L2TP PPTP Russian PPTP Dual Access BigPo...

Страница 12: ... powered on PWR Off The router is powered off or power supply is abnormal Flashing The router works properly SYS On Off The router works improperly Off There is no device linked to the corresponding port On Green Yellow There is a device linked to the corresponding port but no activity Green light indicates the corresponding port is working as a LAN port and yellow indicates WAN port Link Act N Fl...

Страница 13: ... factory defaults With the router powered on use a pin to press and hold the Reset button about 5 seconds If the SYS LED is flashing 5 times in high frequency release the Reset button It means the router is restored successfully The default management address of the router is http 192 168 0 1 and the default username and the password are both admin 2 3 2 Rear Panel The rear panel of TL R480T is sh...

Страница 14: ... the basic functions of your TL R480T Load Balance Broadband Router These procedures only take you a few minutes You can access the Internet via the router immediately after it has been successfully configured 3 1 Configure PC Step 1 Click the Start menu on your desktop right click My Network Places and then select Properties shown in Figure 3 1 Figure 3 1 ...

Страница 15: ...e next screen right click Local Area Connection LAN and then select Properties Figure 3 2 Step 3 On the next screen select General tab highlight Internet Protocol TCP IP and then click the Properties button Figure 3 3 ...

Страница 16: ...ay need to be restarted Now you can run the Ping command in the command prompt to verify the network connection Please click the Start menu on your desktop select run tab type cmd in the field and then type ping 192 168 0 1 on the next screen and then press Enter If the result displayed is similar to the screen below the connection between your PC and the router has been established Figure 3 5 If ...

Страница 17: ...e router s IP address is 192 168 0 1 your PC s IP address must be within the range of 192 168 0 2 192 168 0 254 the gateway must be 192 168 0 1 3 2 Login Once your host PC is properly configured please proceed as follows to use the Web based Utility Start your web browser and type the private IP address of the router in the URL field http 192 168 0 1 After that you will see the screen shown below ...

Страница 18: ...ure 3 8 shows If it does not prompt you can click the Quick Setup on the left of the main menu Then click Next Figure 3 8 Quick Setup Select the total number of WAN ports you prefer to use as the Figure 3 9 shows Then click Next to load the WAN Port screen Figure 3 9 WAN Mode ...

Страница 19: ...en click Next to load the WAN Connection Type screen Figure 3 10 WAN Port Select the connection type provided by your ISP as the Figure 3 11 shows Three popular types are provided here For other connection types please refer to the 4 3 1 WAN Figure 3 11 WAN Connection Type ...

Страница 20: ...n during the process the configuration will still be continued in the background These fields are case sensitive If you have difficulty in this process please contact your ISP Figure 3 13 WAN Connection Type PPPoE Connecting 2 If your ISP assigns the IP address automatically please choose the Dynamic IP connection type to obtain the parameters for WAN port automatically The process for obtain the ...

Страница 21: ...d by your ISP in Figure 3 15 Figure 3 15 WAN Connection Type Static IP Then click Next The process for configuring the network parameters is shown as Figure 3 16 If you close the screen during the process the configuration will still be continued in the background If you have difficulty in this process please contact your ISP ...

Страница 22: ...16 WAN Connection Type Static IP Connecting After that you will see the next screen Click Finish to complete the quick installation or click Continue to configure other WAN ports Figure 3 17 Configuration Completed ...

Страница 23: ... 4 Configuration 4 1 Status The Status page shows the system information the port connection status and other information related to this router Choose the menu Status to load the following page Figure 4 1 Status ...

Страница 24: ... adjust the physical ports accordingly which can be illustrated on the following port sketch Note By default TL R480T is set to work in the mode of dual WAN ports Any change to the number of WAN ports may lead to a loss of current configurations Please be sure to backup your configurations in advance 4 3 1 2 WAN1 TL R480T provides the following six Internet connection types Static IP Dynamic IP PP...

Страница 25: ... instructions of WAN1 Choose the menu Network WAN WAN1 to load the configuration page 1 Static IP If a static IP address has been provided by your ISP please choose the Static IP connection type to configure the parameters for WAN port manually Figure 4 3 WAN Static IP The following items are displayed on this screen Static IP Connection Type Select Static IP if your ISP has assigned a static IP a...

Страница 26: ...NS Domain Name Server If you are not clear please consult your ISP It is not allowed to access the Internet via domain name if the Primary DNS field is blank Secondary DNS Optional If a Secondary DNS Server address is available enter it Upstream Bandwidth Specify the bandwidth for transmitting packets on the port Downstream Bandwidth Specify the bandwidth for receiving packets on the port 2 Dynami...

Страница 27: ...r ISP s server Click Release to release the current IP address of WAN port Host Name Optional This field allows you to give a name for the router It is blank by default MTU MTU Maximum Transmission Unit is the maximum data unit transmitted by the physical network It can be set in the range of 576 1500 The default MTU is 1500 You are recommended to keep the default value if no other MTU value is pr...

Страница 28: ...ets on the port Downstream Bandwidth Specify the bandwidth for receiving packets on the port Dynamic IP Status Status Displays the status of obtaining an IP address from your ISP Disabled indicates that the Dynamic IP connection type is not applied Connecting indicates that the router is obtaining the IP parameters from your ISP Connected indicates that the router has successfully obtained the IP ...

Страница 29: ... DNS Displays the IP address of your ISP s Secondary DNS 3 PPPoE If your ISP Internet Service Provider has provided the account information for the PPPoE connection please choose the PPPoE Russian PPPoE connection type Used mainly for DSL Internet service Figure 4 5 WAN PPPoE ...

Страница 30: ... the dial up connection charged on time Always on Select this option to keep the connection always on The connection can be re established automatically when it is down Time based Select this option to keep the connection on during the Active time you set PPPoE Advanced Settings Check here to enable PPPoE advanced settings Keep Alive Once PPPoE is connected the router will send keep alive packets ...

Страница 31: ...are provided Connection Type Select the secondary connection type Options include Disable Dynamic IP and Static IP IP Address If Static IP is selected configure the IP address of WAN port If Dynamic IP is selected the obtained IP address of WAN port is displayed Subnet Address If Static IP is selected configure the subnet address of WAN port If Dynamic IP is selected the obtained subnet address of...

Страница 32: ... your ISP Disconnected indicates that the connection has been manually terminated or the router gets no response from your ISP Please ensure that your settings are correct and your network is connected well Consult your ISP if this problem remains IP Address Displays the IP address assigned by your ISP Gateway Address Displays the Gateway Address assigned by your ISP Primary DNS Displays the IP ad...

Страница 33: ... 27 4 L2TP If your ISP Internet Service Provider has provided the account information for the L2TP connection please choose the L2TP Russian L2TP connection type Figure 4 6 WAN L2TP ...

Страница 34: ...sical network It can be set in the range of 576 1460 The default MTU is 1460 You are recommended to keep the default value if no other MTU value is provided by your ISP Active Mode You can select the proper Active Mode according to your need Manual Select this option to manually activate or terminate the Internet connection by the Connect or Disconnect button It is optimum for the dial up connecti...

Страница 35: ...displayed Upstream Bandwidth Specify the bandwidth for transmitting packets on the port Downstream Bandwidth Specify the bandwidth for receiving packets on the port L2TP Status Status Displays the status of L2TP connection Disabled indicates that the L2TP connection type is not applied Connecting indicates that the router is obtaining the IP parameters from your ISP Connected indicates that the ro...

Страница 36: ...Primary DNS Secondary DNS Displays the IP address of your ISP s Secondary DNS 5 PPTP If your ISP Internet Service Provider has provided the account information for the PPTP connection please choose the PPTP Russian PPTP connection type Figure 4 7 WAN PPTP ...

Страница 37: ...ical network It can be set in the range of 576 1460 The default MTU is 1460 You are recommended to keep the default value if no other MTU value is provided by your ISP Active Mode You can select the proper Active mode according to your need Manual Select this option to manually activate or terminate the Internet connection by the Connect or Disconnect button It is optimum for the dial up connectio...

Страница 38: ...ecify the bandwidth for transmitting packets on the port Downstream Bandwidth Specify the bandwidth for receiving packets on the port PPTP Status Status Displays the status of PPTP connection Disabled indicates that the PPTP connection type is not applied Connecting indicates that the router is obtaining the IP parameters from your ISP Connected indicates that the router has successfully obtained ...

Страница 39: ...gPond connection please choose the BigPond connection type Figure 4 8 WAN Bigpond The following items are displayed on this screen BigPond Settings Connection Type Select BigPond if your ISP provides a BigPond connection Click Connect to dial up to the Internet and obtain the IP address Click Disconnect to disconnect the Internet and release the current IP address ...

Страница 40: ...e according to your need Manual Select this option to manually activate or terminate the Internet connection by the Connect or Disconnect button It is optimum for the dial up connection charged on time Always on Select this option to keep the connection always on The connection can be re established automatically when it is down MTU MTU Maximum Transmission Unit is the maximum data unit transmitte...

Страница 41: ... Please ensure that your settings are correct and your network is connected well Consult your ISP if this problem remains IP Address Displays the IP address assigned by your ISP Subnet Mask Displays the Subnet Mask assigned by your ISP Default Gateway Displays the IP address of the default gateway assigned by your ISP Note To ensure the BigPond connection re established normally please restart the...

Страница 42: ... 255 255 255 0 Note If the LAN IP address is changed you must use the new IP address to login to the router To guarantee a normal communication please be sure that the Gateway address and the Subnet Mask of the Hosts are consistent with that of the router accordingly 4 3 2 2 DHCP The router with its DHCP Dynamic Host Configuration Protocol server enabled can automatically assign an IP address to t...

Страница 43: ... LAN IP address The default address is 192 168 0 254 Lease Time Specify the length of time the DHCP server will reserve the IP address for each computer After the IP address expired the client will be automatically assigned a new one Default Gateway Optional Enter the Gateway address to be assigned It is recommended to enter the IP address of the LAN port of the router Default Domain Optional Ente...

Страница 44: ...MAC address will always get the same IP address each time when it accesses the DHCP server Choose the menu Network LAN DHCP Reservation to load the following page Figure 4 12 DHCP Reservation The following items are displayed on this screen DHCP Reservation MAC Address Enter the MAC address of the computer for which you want to reserve the IP address IP Address Enter the reserved IP address Descri...

Страница 45: ...ind the IP address and the MAC address in 4 6 1 1 IP MAC Binding then import the entries from the IP MAC binding table to the List of Reserved Address in buck by clicking Import button in Figure 4 12 DHCP Reservation 4 3 3 IPTV On this page you can configure the IPTV function The router will work with IGMP Proxy technology allowing watching IPTV via wired connection Choose the menu Network IPTV IP...

Страница 46: ...Set the MAC Address for LAN port In a complex network topology with all the ARP bound devices if you want to use TL R480T instead of the current router in a network node you can just set the MAC address of TL R480T s LAN port the same to the MAC address of the previous router which can avoid all the devices under this network node to update their ARP binding tables Set the MAC Address for WAN port...

Страница 47: ...sing to configure the router Then click Save to apply Note To avoid a conflict of MAC address on the LAN it is not allowed to set the MAC address of the router s LAN port to the MAC address of the current management PC 4 3 5 Switch Some basic switch port management functions are provided by TL R480T which facilitates you to monitor the traffic and manage the network effectively 4 3 5 1 Statistics ...

Страница 48: ... Broadcast Displays the number of normal broadcast packets received or transmitted on the port Pause Displays the number of flow control frames received or transmitted on the port Multicast Displays the number of normal multicast packets received or transmitted on the port Undersize Displays the number of the received frames including error frames that are less than 64 bytes ...

Страница 49: ... to clear the traffic statistics of the corresponding port Click the Clear All button to clear all the traffic statistics 4 3 5 2 Port Mirror Port Mirror the packets obtaining technology functions to forward copies of packets from one multiple ports mirrored port to a specific port mirroring port Usually the mirroring port is connected to a data diagnose device which is used to analyze the mirrore...

Страница 50: ...t the Mirroring Port to which the traffic is copied Only one port can be selected as the mirroring port Mirrored Port Select the Mirrored Port from which the traffic is mirrored One or multiple ports can be selected as the mirrored ports The entry in Figure 4 16 indicates The outgoing packets sent by port 1 port 2 port 3 and port 5 mirrored ports will be copied to port 4 mirroring port Tips If bot...

Страница 51: ... select the Ingress Egress mode 2 Select Port 3 to be the Mirroring Port to monitor all the packets of the other ports 3 Select all the other ports to be the Mirrored Ports 4 Click the Save button to apply 4 3 5 3 Rate Control On this page you can control the traffic rate for the specific packets on each port so as to manage your network flow Choose the menu Network Switch Rate Control to load the...

Страница 52: ...led for port 1 The Ingress and Egress Rates are 1Mbps That is the receiving rate for all the ingress packets will not exceed 1Mbps and the transmitting rate for all the egress packets will not exceed 1Mbps 4 3 5 4 Port Config On this page you can configure the basic parameters for the ports Choose the menu Network Switch Port Config to load the following page Figure 4 18 Port Config The following ...

Страница 53: ...o multiple logical LANs so as to control the communication among the ports The VLAN function can prevent the broadcast storm in LANs and enhance the network security By creating VLANs in a physical LAN you can divide the LAN into multiple logical LANs each of which has a broadcast domain of its own Hosts in the same VLAN communicate with one another as if they are in a LAN However hosts in differe...

Страница 54: ...N can only be created among the LAN ports 4 4 User Group The User Group function is used to group different users for unified management so that you can perform other applications such as Bandwidth Control Session Limit and Access Control etc on per group 4 4 1 Group On this page you can define the group for management Choose the menu User Group Group to load the following page Figure 4 21 Group C...

Страница 55: ...e the menu User Group User to load the following page Figure 4 22 User Configuration The following items are displayed on this screen User Config User Name Specify a unique name for the user IP Address Enter the IP Address of the user It cannot be the network address or broadcast address of the port Description Give a description to the user for identification It is optional List of User In this t...

Страница 56: ...r Available Group Displays the Groups that the User can join Selected Group Displays the Groups to which this User belongs Group Name Select the name of the desired Group Group Structure Click this button to view the tree structure of this group All the members of this group will be displayed including Users and sub Groups The Group Names are displayed in bold Available Member Displays the Users a...

Страница 57: ...he LAN Local Area Network security of the network since the address of LAN host never appears on the Internet 4 5 1 1 NAT Setup On this page you can configure the NAT function Choose the menu Advanced NAT NAT Setup to load the following page Figure 4 24 NAT Setup The following items are displayed on this screen NAPT Source Port Range Enter the source port range between 2049 and 65000 the span of w...

Страница 58: ...Address in the first checkbox and Translated IP Address in the second checkbox TL R480T allows mapping from LAN port to WAN port Interface Select an interface for forwarding data packets DMZ Forwarding Enable or disable DMZ Forwarding The packets transmitted to the Translated IP Address will be forwarded to the host of Original IP if DMZ Forwarding is enabled Description Give a description for the...

Страница 59: ...ple subnets to access the Internet via NAT Choose the menu Advanced NAT Multi Nets NAT to load the following page Figure 4 26 Multi Nets NAT The following items are displayed on this screen Multi Nets NAT Subnet Mask Enter the subnet mask to make the address range for the entry Description Give a description for the entry Status Activate or inactivate the entry list of Rules You can view the infor...

Страница 60: ...Q Application Example Network Requirements The LAN subnet of TL R480T is 192 168 0 0 24 the subnet of VLAN2 under a three layer switch is 192 168 2 0 24 while the subnet of VLAN3 is 192 168 3 0 24 The IP of VLAN for cascading the switch to the router is 192 168 0 2 Now the hosts within VLAN2 and VLAN3 desire to access the Internet The network topology is shown as the following ...

Страница 61: ... configured entries are as follows 2 Then set the corresponding Static Route entry enter the IP address of the interface connecting the router and the three layer switch into the Next Hop field Choose the menu Advanced Routing Static Route to load the following page The set Static Route entry is as follows ...

Страница 62: ...ge Figure 4 27 Virtual Server The following items are displayed on this screen Virtual Server Name Enter a name for Virtual Server entry Up to 28 characters can be entered Interface Select an interface for forwarding data packets External Port Enter the service port or port range provided by router for accessing external network All requests from Internet to the service port s will be redirected t...

Страница 63: ... indicates This is a Virtual Server entry named host all the TCP data packets from the Internet to port 65534 65535 of the router will be redirected to the port 65534 65535 of the LAN host with IP address of 192 168 0 103 and the data packets are transmitted from WAN1 port This entry is activated 4 5 1 5 Port Triggering Some applications require multiple connections like Internet games video confe...

Страница 64: ...Only when the trigger port initiates connection will all the corresponding incoming ports open and provide service for the applications otherwise the incoming ports will not open Trigger Protocol Select the protocol used for trigger port Incoming Port Enter the incoming port number or range of port numbers The incoming port will open for follow up connection after the trigger port initiates connec...

Страница 65: ...them by the Action buttons The first entry in Figure 4 28 indicates that This is a Port Triggering entry named host1 when the LAN host initiates a TCP request via port of 5354 the incoming port 5355 will open for TCP and UDP protocol and the data packets are transmitted from WAN1 port This entry is activated 4 5 1 6 ALG Some special protocols such as FTP H 323 SIP IPsec and PPTP will work properly...

Страница 66: ...lt setting is enabled It is recommended to keep default if no special requirement PPTP ALG Enable or disable PPTP ALG The default setting is enabled It is recommended to keep default if no special requirement 4 5 2 Traffic Control Traffic Control functions to control the bandwidth by configuring rules for limiting various data flows In this way the network bandwidth can be reasonably distributed a...

Страница 67: ...nt enabled WAN port s The Total bandwidth is equal to the sum of bandwidth of the enabled WAN ports Upstream Bandwidth Displays the bandwidth of each WAN port for transmitting data The Upstream Bandwidth of WAN port can be configured on WAN page Downstream Bandwidth Displays the bandwidth of each WAN port for receiving data The Downstream Bandwidth of WAN port can be configured on WAN page Note Th...

Страница 68: ...cates the data stream direction WAN ALL means all WAN ports through which the data flow might pass Individual WAN port cannot be selected after WAN ALL rules are added Group Select the group to define the controlled users Mode Individual The bandwidth of each user equals to the current bandwidth of this entry Shared The total bandwidth of all controlled IP addresses equals to the current bandwidth...

Страница 69: ...8 a m to 10 p m from Monday to Friday Note The premise for single rule taking effect is that the bandwidth of the interface for this rule is sufficient and not used up It is impossible to satisfy all the guaranteed bandwidth if the total guaranteed bandwidth specified by all Bandwidth Control rules for certain interface exceeds the physical bandwidth of this interface 4 5 3 Session Limit The amoun...

Страница 70: ...ons Enter the max Sessions for the users Description Give a description for the entry Status Activate or inactivate the entry List of Session Limit You can view the information of the entries and edit them by the Action buttons The first entry in Figure 4 32 indicates The amount of maximum sessions for the hosts within group1 is 100 and this entry is enabled 4 5 3 2 Session List On this page you c...

Страница 71: ...ce IP address and destination IP address of the packets as a whole and record the WAN port they pass through And then the packets with the same source IP address and destination IP address or destination port will be forwarded to the recorded WAN port This feature is to ensure the multi connected applications to work properly Check the box before Enable Bandwidth Based Balance Routing and select t...

Страница 72: ...the entry 0 0 0 0 0 0 0 0 means any IP is acceptable Destination IP Enter the destination IP range for the entry 0 0 0 0 0 0 0 0 means any IP is acceptable Source Port Enter the source Port range for the entry which is effective only when the protocol is TCP UDP or TCP UDP The default value is 1 65535 which means any port is acceptable Destination Port Enter the destination port range for the entr...

Страница 73: ...168 0 100 and 192 168 0 199 and Destination IP between 116 10 20 28 and 116 10 20 29 will be forwarded from WAN1 port regardless of the port and protocol This entry is activated d and will take effect at 8 am to 10 pm from Monday to Friday 4 5 4 3 Link Backup With Link Backup function the router will switch all the new sessions from dropped line automatically to another to keep an always on line n...

Страница 74: ...in the secondary WAN list will share the traffic for the WAN in the primary WAN list under the specified condition The primary WAN list can contain one or more WAN ports while the backup WAN list contains only one WAN port Mode You can select Timing or Failover Timing Link Backup will be enabled if the specified effective time is reached All the traffic on the primary WAN will switch to the backup...

Страница 75: ...u can view the information of the entries and edit them by the Action buttons The first entry in Figure 4 36 indicates WAN1 is the primary port and WAN2 is the backup port WAN2 will be enabled while WAN1 is failed This entry is enabled Note The same WAN port cannot be added to the primary and secondary WAN lists at the same time and one WAN port should be added to only one list 4 5 4 4 Protocol On...

Страница 76: ...nnot be configured 4 5 5 Routing 4 5 5 1 Static Route Routing is the process of selecting optimized paths in a network along which to send network traffic Static Route is a kind of special routing configured by the administrator which is simple efficient and reliable Commonly used in small sized network with fixed topology Static Route does not change along with the network topology automatically ...

Страница 77: ...ich the packet should be sent next Interface Select the physical network interface through which this route is accessible Metric Defines the priority of the route The smaller the value is the higher the priority is The default value is 0 Keep the default value if unnecessary Description Give a description for the entry Status Activate or inactivate the entry List of Rules You can view the informat...

Страница 78: ...r 3 switch and they use network segments 192 168 2 0 24 and 192 168 3 0 24 respectively The IP address of the cascading LAN port between the layer 3 switch and the router is 192 168 0 2 Now the hosts within LAN1 desire to access the hosts within LAN2 and LAN3 The network topology is shown as the following Configuration procedure 1 On the Static Route page add a static routing rule for LAN2 with de...

Страница 79: ...rnal network via Gateway However since ARP protocol is implemented with the premise that all the Hosts and Gateways are trusted there are high security risks during ARP Implementation Procedure in the actual complex network The attacker may send the ARP spoofing packets with false IP address to MAC address mapping entries and then the device will automatically update the ARP table after receiving ...

Страница 80: ... will be sent to the device suffering attack initiatively by GARP Gratuitous ARP packets thus the error ARP information of the device will be replaced You can set the packets sending rate in the Interval field Check the box before Enable ARP Logs and the router will send ARP logs to the specified server The IP address of server is the Server IP set on 4 8 7 Logs IP MAC Binding IP Address Enter the...

Страница 81: ...nding MAC address and display them on the List of Scanning Result Choose the menu Firewall Anti ARP Spoofing ARP Scanning to load the following page Figure 4 40 ARP Scanning Enter the start and the end IP addresses in the Scanning IP Range field Then click the Scan button the router will scan all the active hosts within the scanning range and display the result in the list The entries displayed on...

Страница 82: ...ofing ARP List to load the following page Figure 4 41 ARP List The configurations for the entries is the same as the configuration of List of Scanning Result on 4 6 1 2 ARP Scanning page The unbound IP MAC information will be replaced by new IP MAC information or be automatically removed from the list if it has not been communicated with others for a long time This period is regarded as the aging ...

Страница 83: ...DoS Denial of Service which including TCP SYN UDP ICMP and so on It is recommended to check all the Flood Defense options and specify the corresponding thresholds Keep the default settings if you are not sure Packet Anomaly Defense Packet Anomaly refers to the abnormal packets It is recommended to select all the Packet Anomaly Defense options ...

Страница 84: ...ing their MAC addresses Choose the menu Firewall MAC Filtering MAC Filtering to load the following page Figure 4 43 MAC Filtering The following items are displayed on this screen General To control the access to Internet for hosts in you private network it is recommended to check the box before Enable MAC Filtering and select a filtering mode according to actual situation MAC Filtering MAC Address...

Страница 85: ...s to filter the Internet URL address so as to provide a convenient way for controlling the access to Internet from LAN hosts Choose the menu Firewall Access Control URL Filtering to load the following page Figure 4 44 URL Filtering The following items are displayed on this screen General To control the access to Internet for hosts in your private network you are recommended to check the box before...

Страница 86: ...d URL Effective Time Specify the time for the entry to take effect Description Give a description for the entry List of Rules You can view the information of the entries and edit them by the Action buttons Application Example Network Requirements Prevent the local hosts from accessing Internet website www aabbcc com anytime and downloading the files with suffix of exe at 8 00 20 00 from Monday to ...

Страница 87: ... the menu Firewall Access Control Web Filtering to load the following page Figure 4 45 Web Filtering Check the box before Enable Web Filtering and select the web components to be filtered 4 6 4 3 Access Rules Choose the menu Firewall Access Control Access Rules to load the following page ...

Страница 88: ...d to pass through the router Service Select the service for the entry Only the service belonging to the specified service type is limited by the entry For example if you select Block for Policy and only FTP for Service the packets of other service types can still pass through the router You can add new service types on 4 6 4 4 Service Interface Select interface for the entry The entry will take ef...

Страница 89: ...or the entry Priority Select this option to specify the priority for the added entries The latest enabled entry will be displayed at the end of the list by default List of Rules You can view the information of the entries and edit them by the Action buttons The smaller the value is the higher the priority is The first entry in Figure 4 46 indicates The TELNET packets transmitted from the hosts wit...

Страница 90: ...ewall Access Control Service to load the following page Figure 4 47 Service The following items are displayed on this screen Service Name Enter a name for the service The name should not be more than 28 characters The name will display in the drop down list of Protocol on Access Rule page Protocol Select the protocol for the service The system predefined protocols include TCP UDP and TCP UDP Dest ...

Страница 91: ... Application Rules function Choose the menu Firewall App Control Control Rules to load the following page Figure 4 48 Application Rules The following items are displayed on this screen General Check the box before Enable Application Control to make the Application Control function take effect The specified application used by the specified local users will be not allowed to access the Internet if ...

Страница 92: ...ective Time Specify the time for the entry to take effect Description Give a description for the entry Status Activate or inactivate the entry List of Rules You can view the information of the entries and edit them by the Action buttons The first entry in Figure 4 48 indicates The group1 is applied with Application Rules You can click View to view the limited applications in the popup checkbox The...

Страница 93: ... up of users for a high efficiency in network management The PPPoE configuration can be implemented on General IP Address Pool Account Exceptional IP and List of Account pages 4 7 1 1 General On this page you can configure PPPoE function globally Choose the menu Services PPPoE Server General to load the following page Figure 4 50 General The following items are displayed on this screen General PPP...

Страница 94: ...ntication Select the Authentication type It can be Local authentication and Remote authentication Select Local authentication for authentication in PPPoE server and select Remote authentication for authentication in the remote server Auth Protocol Select at least one authentication protocol for Local Authentication PAP transferring username and password in plain text in the network is used in a le...

Страница 95: ...me to the IP Address Pool for identification and management purposes IP Address Range Specify the start and the end IP address for IP Pool The start IP address should not exceed the end address and the IP address ranges must not overlap List of IP Pool In this table you can view the information of IP Address Pools and edit them by the Action buttons 4 7 1 3 Account On this page you can configure t...

Страница 96: ...this option to assign a static IP address to the client Dynamic Select this option to assign available IP addresses to the client automatically Static IP Address It is available on Static mode Enter a static IP address for the client IP Address Pool It is available on Dynamic mode Select an IP Address Pool to make a range to assign dynamic IPs Max Sessions Specify the maximum number of sessions fo...

Страница 97: ... the account log on to the server MAC Address It is available when Manually is selected Enter the MAC address of the Host to bind with the account Session Timeout Enter a time after which the connection will be dropped To keep the connection always on enter 0 in the Session Timeout field The default is 48 If Enable Advanced Account Features is not selected the Session Timeout value is 0 by default...

Страница 98: ...n to the exceptional IP address range for identification Status Activate or inactivate the entry List of Exceptional IP In this table you can view the information of Exceptional IPs and edit them by the Action buttons 4 7 1 5 List of Account On this page you can view the detailed information of all accounts you have established Choose the menu Services PPPoE Server List of Account to load the foll...

Страница 99: ...it the bulletin content and specify the receiving user group Choose the menu Services E Bulletin to load the following page Figure 4 55 E Bulletin The following items are displayed on this screen General Enable E Bulletin Specify whether to enable electronic bulletin function Interval Specify the interval to release the bulletin ...

Страница 100: ...t the same time Publisher Enter the name of the bulletin s publisher Description Enter the description for the bulletin Status Activate or inactivate the entry List of E Bulletin In this table you can view the existing bulletins and edit them by the Action button The No 1 entry in Figure 4 55 indicates this bulletin is released by the administrator and it is released to the Group1 from 8am to 20pm...

Страница 101: ...cess the DDNS client even if the IP address of the DDNS client has changed DDNS is usually used for the Internet users to access the private website and FTP server both of which are established based on Web server The router as a DDNS client cannot provide DDNS service Prior to using this function be sure you have registered on the official websites of DDNS service providers for username password ...

Страница 102: ...re WAN Port Displays the WAN port for which Dyndns DDNS is selected DDNS Status Displays the current status of DDNS service Offline DDNS service is disabled Connecting Client is connecting to the server Online DDNS works normally Authorization fails The Account Name or Password is incorrect Please check and enter it again Block This account is blocked List of DynDNS Account In this table you can v...

Страница 103: ...lick Go to register to go to the website of No IP for register Password Enter the password of your DDNS account Domain Name Enter the Domain Name that you registered with your DDNS service provider Update Interval Select the interval to update DDNS service DDNS Service Activate or inactivate DDNS service here WAN Port Displays the WAN port for which No IP DDNS is selected ...

Страница 104: ...t again Invalid Domain name The Domain Name is incorrect or unregistered Please check and enter it again List of No IP Account In this table you can view the existing DDNS entries or edit them by the Action button Click the Update All button to update the DDNS service manually 4 7 3 3 PeanutHull On this page you can configure PeanutHull DDNS client Choose the menu Services Dynamic DNS PeanutHull t...

Страница 105: ...ssional service and Standard service DDNS Status Displays the current status of DDNS service Offline DDNS service is disabled Connecting Client is connecting to the server Online DDNS works normally Authorization fails The Account Name or Password is incorrect Please check and enter it again Domain Name Displays the domain names obtained from the DDNS server Up to 16 domain names can be displayed ...

Страница 106: ...t DDNS Service Activate or inactivate DDNS service here WAN Port Displays the WAN port for which Comexe DDNS is selected DDNS Status Displays the current status of DDNS service Offline DDNS service is disabled Connecting Client is connecting to the server Online DDNS works normally Authorization fails The Account Name or Password is incorrect Please check and enter it again Domain Name Displays th...

Страница 107: ...rt so that the functions limited to NAT can work normally For example MSN Messenger installed in Windows XP and Windows ME system is using UPnP protocol when audio and video communications are processing On this page you can configure UPnP service Choose the menu Services UPnP to load the following page Figure 4 60 UPnP The following items are displayed on this screen General UPnP Function Enable ...

Страница 108: ...inistrator On this page you can modify the factory default user name and password of the router Choose the menu Maintenance Admin Setup Administrator to load the following page Figure 4 61 Administrator The following items are displayed on this screen Administrator Current User Name Enter the current user name of the router Current Password Enter the current password of the router New User Name En...

Страница 109: ...ose the menu Maintenance Admin Setup Login Parameter to load the following page Figure 4 62 Login Parameter The following items are displayed on this screen General Web Management Port Enter the Web Management Port for the router Telnet Management Port Enter the Telnet Management Port for the router Web Idle Timeout Enter a timeout period that the router will log you out of the Web based Utility a...

Страница 110: ...emotely Configuration Procedure Type 210 10 10 0 24 in the Subnet Mask field on Remote Management page and enable the entry as the following figure shows Then type the corresponding port number in Web Management Port and Telnet Management Port fields as the following figure shows Finally start the web browser and type 210 10 10 50 in the URL field to log in the Web management page of the router 4 ...

Страница 111: ...e 4 63 indicates that The hosts with IP address in subnet of 192 168 2 0 24 are allowed to access the router and this entry is activated 4 8 2 Management 4 8 2 1 Factory Defaults Choose the menu Maintenance Management Factory Defaults to load the following page Figure 4 64 Factory Defaults Click the Restore to Factory Defaults button to reset all configuration settings to their default values The ...

Страница 112: ...grading or modifying the configuration Import Click the Browse button to locate the update file for the device or enter the exact path to the saved file in the text box Then click the Import button to restore the saved setting Note To avoid any damage please do not power down the router while being restored Configurations may be lost if the configuration file you imported varies greatly from curre...

Страница 113: ...p link com to download the updated firmware Type the path and file name of the update file into the File field Or click the Browse button to locate the update file Then click the Upgrade button to complete Note After upgrading the device will reboot automatically To avoid damage please do not turn off the device while upgrading You are suggested to backup the configuration before upgrading 4 8 3 S...

Страница 114: ...ntact number or an e mail address Get Community Enter the password that allows read only access to the router s SNMP information The default password is public Set Community Enter the password that allows read write access to the router s SNMP information The default password is private SNMP Trusted Host You can restrict access to the router s SNMP information by IP address Enter the IP address of...

Страница 115: ...e for transmitting data frames Packets Rx Displays the number of packets received on the interface Packets Tx Displays the number of packets transmitted on the interface Bytes Rx Displays the bytes of packets received on the interface Bytes Tx Displays the bytes of packets transmitted on the interface Advanced WAN Information Interface Displays the interface IP Fragment Rx Displays the amount of I...

Страница 116: ...terval is 5 seconds Traffic Statistics Direction Select the direction in the drop down list to get the Flow Statistics of the specified direction IP Traffic Statistics This table displays the detailed traffic information of corresponding PCs Sorted by Select the rule for displaying the traffic information 4 8 5 Diagnostics 4 8 5 1 Diagnostics This router provides Ping test and Tracert test functio...

Страница 117: ...n IP address or Domain name here Then select a port for testing if you select Auto the router will select the interface of destination automatically After clicking Start button the router will send Ping packets to test the network connectivity and reachability of the host and the results will be displayed in the box below ...

Страница 118: ... The following items are displayed on this screen General Port Select the port to be detected Detecting Activate or inactivate Online Detection function When Online Detection is active WAN status will depend on the result of both PING and DNS Lookup When Online Detection is inactive WAN status will be detected according to physical connection status and dial up status Mode Detect automatically or ...

Страница 119: ...n this page you can configure the system time and the settings here will be used for other time based functions like Access Rule PPPoE and Logs Choose the menu Maintenance Time Time to load the following page Figure 4 73 Time The following items are displayed on this screen Current Time System Time Displays the current date and time of the router Time Zone Displays the current time zone of the rou...

Страница 120: ...the date and time manually Synchronize with PC S Clock With this option selected the administrator PC s clock is utilized Note If Get UTC function cannot be used properly please add an entry with UDP port of 123 to the firewall software of the PC The time will be lost when the router is restarted The router will obtain UTC time automatically from Internet 4 8 6 2 Daylight Saving Time On this page ...

Страница 121: ... when Daylight Saving Time comes Start End Time Select the start time and end time of Daylight Saving Time The start time is standard time and the end time is Daylight Saving Time Date Mode Specify the DST configuration in Date mode This configuration is one off in use Time Offset Specify the time adding in minutes when Daylight Saving Time comes Start End Time Select the start time and end time o...

Страница 122: ...log information with the same level Send System Logs Select Send System Logs and specify the server IP then the new added logs will be sent to the specified server The Logs of switch are classified into the following eight levels Severity Level Description emergencies 0 The system is unusable alerts 1 Action must be taken immediately critical 2 Critical conditions errors 3 Error conditions warning...

Страница 123: ... interface for forwarding data packets Protocol Select the protocol which is used in the link Local IP Address Optional Enter the local IP address to be filtered Configure the options above then click Show to apply NAT Table Protocol Displays the protocol used in the current network link Local IP Address Displays the IP address of the device in LAN Local Port Displays the used port of the device i...

Страница 124: ...g Time Displays the time which the link lasts Unit second Out Link Displays the WAN port which is used in the link Sorted by Select the rule for displaying the NAT Table You can click table headers to sort items ...

Страница 125: ...5 ports Auto MDI MDIX One 10 100M Auto Negotiation LAN RJ45 port Auto MDI MDIX Ports One Console Port 10Base T UTP STP of Cat 3 or above 100m Transmission Medium 100Base TX UTP STP of Cat 5 or above 100m LEDs PWR SYS Link Act 100Mbps Power 100 240V 50 60Hz 0 3A Operating Temperature 0ºC to 40ºC Storage Temperature 40ºC to 70ºC Operating Humidity 10 90 RH Non condensing Operating Environment Storag...

Страница 126: ... configuration of your router has been changed by others especially when the Remote Web Management function is enabled You are recommended to restore your router and reconfigure the management port number and the username as well as the password for your network security 4 If you cannot access the router even after restoring the router to its defaults or your login is dropped down just after a whi...

Страница 127: ...ce port 4 Make sure that the NAT DMZ service is disabled Q4 Some function of the router need to define the IP address subnet with Subnet Mask What are the common values of the Subnet Mask Subnet Mask is a 32 bit binary address used to distinguish the network address and the host address When dividing the network the different Subnet Mask defines different subnet and each subnet owns different numb...

Страница 128: ...dress DHCP Dynamic Host Configuration Protocol A protocol that automatically configure the TCP IP parameters for the all the PCs that are connected to a DHCP server DMZ Demilitarized Zone A Demilitarized Zone allows one local host to be exposed to the Internet for a special purpose service such as Internet gaming or videoconferencing DNS Domain Name Server An Internet Server that translates the na...

Страница 129: ...ocol Network layer protocol in the TCP IP stack offering a connectionless Internetwork service IP provides features for addressing type of service specification fragmentation and reassembly and security ISP Internet Service Provider Company that provides Internet access to other companies and individuals IKE Internet Key Exchange IKE establishes a shared security policy and authenticates keys for ...

Страница 130: ...connect to the Internet by translating those addresses into globally routable address space N NTP Server NTP Server is used for synchronising the time across computer networks POP3 Post Office Protocol 3 POP3 is intended to permit a workstation to dynamically access a maildrop on a server host in a useful fashion P PPPoE Point to Point Protocol over Ethernet PPPoE is a network protocol for encapsu...

Страница 131: ...ing that error processing and retransmission be handled by other protocols UPnP Universal Plug and Play UPnP is a set of networking protocols for primarily residential networks without enterprise class devices that permits networked devices U URL Uniform Resource Locator URL describes the access method and the location of an information resource object on the Internet V VLAN Virtual Local Area Net...

Отзывы: