Internet Broadband Router

Transcription

1 Internet Broadband Router XRT-501 User s Manual

2 Copyright Copyright (C) 2008 PLANET Technology Corp. All rights reserved. The products and programs described in this User s Manual are licensed products of PLANET Technology, This User s Manual contains proprietary information protected by copyright, and this User s Manual and all accompanying hardware, software, and documentation are copyrighted. No part of this User s Manual may be copied, photocopied, reproduced, translated, or reduced to any electronic medium or machine-readable form by any means by electronic or mechanical. Including photocopying, recording, or information storage and retrieval systems, for any purpose other than the purchaser's personal use, and without the prior express written permission of PLANET Technology. Disclaimer PLANET Technology does not warrant that the hardware will work properly in all environments and applications, and makes no warranty and representation, either implied or expressed, with respect to the quality, performance, merchantability, or fitness for a particular purpose PLANET has made every effort to ensure that this User s Manual is accurate; PLANET disclaims liability for any inaccuracies or omissions that may have occurred.information in this User s Manual is subject to change without notice and does not represent a commitment on the part of PLANET. PLANET assumes no responsibility for any inaccuracies that may be contained in this User s Manual. PLANET makes no commitment to update or keep current the information in this User s Manual, and reserves the right to make improvements to this User s Manual and/or to the products described in this User s Manual, at any time without notice.if you find information in this manual that is incorrect, misleading, or incomplete, we would appreciate your comments and suggestions. FCC Compliance Statement This equipment generates and uses radio frequency energy and if not installed and used properly, that is, in strict accordance with the instructions provided with the equipment, may cause interference to radio and TV communication. The equipment has been tested and found to comply with the limits for a Class A computing device in accordance with the specifications in Subpart B of Part 15 of FCC rules, which are designed to provide reasonable protection against such interference in a residential installation. However, there is no guarantee that interference will not occur in a particular installation. If you suspect this equipment is causing interference, turn your Ethernet Switch on and off while your radio or TV is showing interference, if the interference disappears when you turn your Ethernet Switch off and reappears when you turn it back on, there is interference being caused by the Ethernet Switch. You can try to correct the interference by one or more of the following measures: 1. Reorient the receiving radio or TV antenna where this may be done safely. 2. To the extent possible, relocate the radio, TV or other receiver away from the Switch. 3. Plug the Ethernet Switch into a different power outlet so that the Switch and the receiver are on different branch circuits. 2

3 If necessary, you should consult the place of purchase or an experienced radio/television technician for additional suggestions. CE mark Warning The is a class A device, In a domestic environment, this product may cause radio interference, in which case the user may be required to take adequate measures. WEEE To avoid the potential effects on the environment and human health as a result of the presence of hazardous substances in electrical and electronic equipment, end users of electrical and electronic equipment should understand the meaning of the crossed-out wheeled bin symbol. Do not dispose of WEEE as unsorted municipal waste and have to collect such WEEE separately. Trademarks The PLANET logo is a trademark of PLANET Technology. This documentation may refer to numerous hardware and software products by their trade names. In most, if not all cases, these designations are claimed as trademarks or registered trademarks by their respective companies. Revision User s Manual for PLANET Internet Broadband Router: Model: XRT-501v1 Rev: 1.0 (Feb. 2008) Part No.: 2081-B

4 TABLE OF CONTENTS Chapter1 Introduction Features Package Contents Physical Details Requirements Physical Installation Configuration Chapter2 General Setup Setup Wizard Step1) Choose your ISP type Cable mode(tv-style cable) DSL/ADSL modem(phone-type cable) PPPoE PPTP L2TP Dynamic (no user name and password) Telstra Bigpond Cable (Australia) SingTel RAS Other Step2) DNS Step3) Test Internet Connection LAN Password Status Connection Details - Fixed/Dynamic IP Address Connection Status - PPPoE Connection Status - PPTP Connection Status - L2TP Connection Status - Telstra Big Pond Connection Details - SingTel RAS Chapter3 Advance Features Access Control Services Access Control Log DDNS(Dynamic DNS) Advanced Internet Communication Applications Special Applications DMZ Multi-DMZ URL Filter

5 3.5 Define Schedule User Groups Virtual Servers QoS Streaming Accelerator IGMP Packet Captuer Utility WAN Port Configuation Chapter 4 Administrator Config File Logs Network Diagnostics Options PC Database Remote Administration Routing Security Upgrade Firmware Logout Appendix A Glossary EC Declaration

6 Chapter1 Introduction Congratulations on purchasing PLANET XRT-501. This XRT-501 is a cost-effective IP Sharing Router that enables multiple users to share the Internet through an ADSL or cable modem. Simply configure your Internet connection settings in XRT-501 and plug your PC to the LAN port and you're ready to share files and access the Internet. As your network grows, you can connect another hub or switch to the router s LAN ports, allowing you to easily expand your network. XRT-501 provides a total solution for the Small Business (SMB) and the Small Office/Home Office (SOHO) markets, giving you an instant network today, and the flexibility to handle tomorrow's expansion and speed. 1.1 Features Internet Access Features All Gigabit Ports Support With 5 Auto-negotiation, Auto MDI/MDI-X Ethernet ports. XRT-501 eliminates most cabling inconvenience. One WAN port, 10/100/1000Base-T is connected to your DSL or Cable modem. The other 4 LAN port, 10/100/1000Base-T are used to connect to local LAN. Shared Internet Access All users on the LAN can access the Internet through the XRT-501 using only a single external IP Address. The local (invalid) IP Addresses are hidden from external sources. This process is called NAT (Network Address Translation). Fixed, PPPoE, Dynamic, and Direct Connection Support Various WAN connections are supported by XRT-501. Advanced Internet Functions Internet Communication Applications. XRT-501 supports for Internet communication applications, such as interactive Games, Telephony, and Conferencing applications, which are often difficult to use when behind a Firewall Special Internet Applications. Using non-standard connections or port numbers are normally blocked by the Firewall. The ability to define and allow such applications is provided, to enable such applications to be used normally. Virtual Servers Support. This feature allows Internet users to access Internet servers on your LAN. The required setup is quick and easy. DMZ. Support. XRT-501 can translate public IP addresses to private IP address to allow unrestricted 2-way communication with Servers or individual users on the Internet. This provides the most flexibility to run programs, which are incompatible with Firewalls. URL Filter. Keyword based URL Filter to block access to undesirable Web sites by LAN users. Firewall. It supports Stateful Packet Inspection firewall for DoS (Denial of Service) attacks. Dynamic DNS Support. When used with the Virtual Servers feature, allows users to connect to Servers on your LAN using a Domain Name, even if you have a dynamic IP address which changes every time you connect. VPN Pass through Support. PCs with VPN (Virtual Private Networking) software using PPTP, L2TP and IPSec are transparently supported - no configuration is required. Access Control.Using the Access Control feature, you can assign LAN users to different groups, and determine which Internet services are available to each group. Password protected Configuration. Optional password protection is provided to prevent unauthorized users from modifying the configuration data and settings. 6

7 LAN Features DHCP Server Support. Dynamic Host Configuration Protocol provides a dynamic IP address to PCs and other devices upon request. XRT-501 can act as a DHCP Server for devices on your local LAN and WLAN. PC database. All LAN users can be added manually or discovered automatically by XRT-501, through this built-in user database, administrators are able to have a centralized networking management. Routing. LANs containing one or more segments are supported via RIP1 (Routing Information Protocol) support and built-in static routing table. Configuration & Management Easy Setup. Built-In configuration wizard helps users to complete network installation in a very short time via standard Internet browsers such as Microsoft Internet Explorer, Netscape Communicator etc. Remote Management.XRT-501 can be managed from any PC on LAN or via Internet anywhere around the world. UPnP Support. UPnP (Universal Plug and Play) allows automatic discovery and configuration of the XRT-501. UPnP is by supported by Windows ME, XP, or later. Logs. It provides system log and security log, and log can be saved or mail to a specific account. Configuration File Upload/Download. Save (download) the configuration data from the Broadband Router to your PC, and restore (upload) a previously-saved configuration file to the Broadband Router. Packet Capture Utility. XRT-501 provides Easy Installation Utility via enable the capture packet function on the Web UI for monitor the LAN or WAN traffic, and also sends capture log to the specific client which installed capture tool. 1.2 Package Contents XRT-501 Unit Power Adapter Quick Installation Guide CD-ROM include User s Manual and Utility 1.3 Physical Details Weight 400g Dimensions 141 x100 x 27 mm Front Panel Front Panel LED definition 7

8 Power Status (Red) LAN WAN ON Power on OFF No power. ON Error condition. OFF Normal operation. BLINKING This LED blinks during start up. 10 Corresponding LAN port is using 10Mpbs 100 ON Corresponding LAN port is using 100Mpbs 1000 Corresponding LAN port is using 1000Mpbs 10 Corresponding LAN port connection is no 100 OFF active connection Data is being transmitted or received via the 100 FLASHING corresponding LAN port Corresponding WAN (hub) port is using 10Mpbs 100 Corresponding WAN (hub) port is using ON 100Mpbs 1000 Corresponding WAN (hub) port is using 1000Mpbs. 10 Corresponding WAN port connection is no 100 OFF active connection Data is being transmitted or received via the 100 FLASHING WAN port Rear Panel Rear Panel Port and Button Definition Port RESET This button has two (2) functions: Reboot When pressed and released, XRT-501 will reboot (restart). Clear All Data Hold the button longer than 5 seconds then release, 8

9 this can be clear ALL data and restore ALL settings to the factory default values. WAN LAN (1-4) 12VDC Connect your xdsl or Cable modem and is linked to the Internet. Connect your LAN s PCs, printer servers, hubs and switches etc. DC Power in. 1.4 Requirements DSL or Cable modem for broadband Internet access. Network cables. Use standard 10/100/1000BaseT network (UTP) cables with RJ45 connectors. TCP/IP network protocol installed on each PC. 1.5 Physical Installation Setup your network as shown in the setup diagram below 1. Use standard LAN cables to connect PCs to the Switching Hub ports on the XRT-501, or you can directly connect PCs to XRT-501, you may use 10Base-T, 100Base-TX, or 1000Base-T connections, and all connection types can be used simultaneously. 2. If required, connect any port to a normal port on another Hub, using a standard LAN cable. Any LAN port on the XRT-501 will automatically function as an "Uplink" port when required. 9

10 3. Connect the DSL or Cable modem to the WAN port on the XRT-501. Use the cable supplied with your DSL/Cable modem. If no cable was supplied, use a standard cable. 4. Connect the supplied Power Adapter and power on. 5. Check the LEDs The Power LED should be ON. Status LED should flash, and then turn off. If it stays on, there is a hardware error. For each LAN connection, one of the LAN LEDs (10, 100, or 1000) should be ON (provided the PC is also ON.) One of the WAN LEDs (10, 100, or 1000) should be ON, provided the Broadband modem is powered up. 1.6 Configuration Then, you need to setup your LAN PC clients, so that it can obtain an IP address automatically. By default the XRT-501 s DHCP server is enabled, so you can obtain an IP address automatically. Note Please make sure that the XRT-501 s DHCP server is the only DHCP server available on your LAN. If there is another DHCP on your network, then you ll need to switch one of the DHCP servers off. Step1 Configure your PC to obtain an IP address automatically This section will show you how to configure your PC s so that it can obtain an IP address automatically for either Windows 98/Me, 2000 or later operating systems. For other operating systems (Macintosh, Sun, etc.), please follow the manufacturer s instructions. The following is a step-by-step illustration on how to configure your PC to obtain an IP address automatically for 2a) Windows XP, 2b) Windows 2000, and 2c) Windows 98/Me 2a) Configuring PC in Windows XP 1. Go to Start / Control Panel (in Classic View). In the Control Panel, double-click on Network Connections 2. Double-click Local Area Connection. 10

11 3. In the Local Area Connection Status window, click Properties. 4. Select Internet Protocol (TCP/IP) and click Properties. 11

12 5. Select the Obtain an IP address automatically and the Obtain DNS server address automatically radio buttons. 6. Click OK to finish the configuration. 2b) Configuring PC in Windows Go to Start / Settings / Control Panel. In the Control Panel, double-click on Network and Dial-up Connections. 2. Double-click Local Area Connection. 3. In the Local Area Connection Status window click Properties. 4. Select Internet Protocol (TCP/IP) and click Properties. 5. Select the Obtain an IP address automatically and the Obtain DNS server address automatically radio buttons. 6. Click OK to finish the configuration. 12

13 2c) Configuring PC in Windows 98/Me 1. Go to Start / Settings / Control Panel. In the Control Panel, double-click on Network and choose the Configuration tab. 2. Select TCP/IP NE2000 Compatible, or the name of your Network Interface Card (NIC) in your PC. 3. Select the Obtain an IP address automatically radio button. 4. Then select the DNS Configuration tab. 5. Select the Disable DNS radio button and click OK to finish the configuration. 13

14 Step2 Configuring with Web Browser Once your PC has obtained an IP address from your router, please start your Web Browser. In the Address box, enter then press <enter> The login screen below will appear. Enter the User Name and Password and then click <OK> to login. Note By default, the user name and password both are admin. For security reasons it is recommended to change the password at the first login and memorize it. 14

15 Chapter2 General Setup 2.1 Setup Wizard The following picture is XRT-501 s home screen: This section intends to help you setup the XRT-501 as fast as possible. The setup includes Wizard setup, and different type of Internet connection. For more information about the settings, please also refer to the user s manual in the supplied CD-ROM. In the Setup Wizard you are required to fill in only the information necessary to access the Internet. Once you click on the Wizard, you will see the screen below. Step1) Choose your ISP type In this section you have to select one of these types of connections that you will be using to connect your XRT-501 s WAN port to your ISP (see screen below). 15

16 Note Different ISP s require different methods of connecting to the Internet, please check with your ISP as to the type of connection it requires. Parameter Cable Modem Your ISP will automatically give you an IP address DSL/ADSL Your ISP has given you an IP address already Telstra Bigpond For Telstra BigPond (Australia) use only. Cable SingTel RAS For SingTel RAS (Singapore) use Other You can directly to setup the ISP type with Specified (Fixed) or Dynamic IP Address Click on one of the WAN types and then proceed to the manual s relevant sub-section (2.1.1, 2.1.2, 2.1.3, 2.1.4, or 2.1.5). Click on Back to return to the previous screen Cable mode(tv-style cable) Choose Cable Modem if you re ISP will automatically give you an IP address. Some ISP s may also require that you fill in additional information such as MAC address (see screen below). 16

17 Parameter Host Name Domain Name Clone MAC Address MAC(physical) Address Some ISP's may also require you to use a particular Hostname, Domain name, or MAC (physical) address. If required, please enter Hostname, Domain name provided by your ISP. Use Clone MAC address" button to copy the MAC (physical) address from your PC to the XRT-501. Your ISP may require a particular MAC address in order for you to connect to the Internet. This MAC address is the PC s MAC address that your ISP had originally connected your Internet connection to. Type in this MAC address in this section or use the Clone MAC Address button to replace the WAN MAC address with the MAC address of that PC (you have to be using that PC for the Clone MAC Address button to work). Note The MAC address section is optional and you can skip this section if your ISP does not require these settings for you to connect to the Internet DSL/ADSL modem(phone-type cable) In this section you have to select one of these DSL/ADSL types that you will be using to connect your XRT-501 s WAN port to your ISP (see screen below). 17

18 Parameter PPPoE Your ISP requires you to use a Point-to-Point Protocol over Ethernet (PPPoE) connection PPTP Your ISP requires you to use a Point-to-Point Tunneling Protocol (PPTP) connection L2TP Layer 2 Tunneling Protocol is a common connection method used in xdsl connections Your ISP will automatically give you an IP address. Dynamic PPPoE Select Dial-Up xdsl (PPPoE) if you re ISP requires the PPPoE protocol to connect you to the Internet. Your ISP should provide all the information required in this section. Parameter 18

19 User Name Enter the User Name provided by your ISP for the PPPoE connection. Password Enter the Password provided by your ISP for the PPPoE connection. Connect behavior Auto-disconnect Timeout period Select the connection behaviors that you wish it be to Automatic Connect, Manual Connect, or Keep alive. You can specify an idle time threshold (minutes) for the WAN port. This means if no packets have been sent (no one using the Internet) during this specified period, the router will automatically disconnect the connection with your ISP PPTP Select PPTP if your ISP requires the PPTP protocol to connect you to the Internet. Your ISP should provide all the information required in this section. Parameter PPTP Server Login User Name Login Password Connect behavior Auto-disconnect Timeout period Specify PPTP Server Name or IP address that you want to connect to. Enter the User Name provided by your ISP for the PPTP connection. Enter the Password provided by your ISP for the PPTP connection. Select the connection behaviors that you wish it be to Automatic Connect, Manual Connect, or Keep alive. You can specify an idle time threshold (minutes) for the WAN port. This means if no packets have been sent (no one using the Internet) during this specified period, the router will automatically disconnect the connection with your ISP. 19

20 L2TP Select L2TP if your ISP requires the L2TP protocol to connect you to the Internet. Your ISP should provide all the information required in this section. Parameter L2TP Sever Login User Name Login Password Connect behavior Auto-disconnect Timeout period Specify L2TP Server Name or IP address that you want to connect to. Enter the User Name provided by your ISP for the L2TP connection. Enter the Password provided by your ISP for the L2TP connection. Select the connection behaviors that you wish it be to Automatic Connect, Manual Connect, or Keep alive. You can specify an idle time threshold (seconds) for the WAN port. This means if no packets have been sent (no one using the Internet) during this specified period, the router will automatically disconnect the connection with your ISP. 20

21 Dynamic (no user name and password) Parameter Dynamic IP Address Your IP Address is allocated automatically, when you connect to you ISP Telstra Bigpond Cable (Australia) This connection is only for Telstra BigPond (Australia) use. For this connection method, the following data is required, and these information provided by your ISP. User Name Password Big Pond Server IP address 21

22 2.1.4 SingTel RAS This connection is only for SingTel RAS (Singapore) use. For this connection method, the following data is required, and these information provided by your ISP. User Name Password RAS Plan Other Parameter Specified (Fixed) IP Address The IP Address provided by your ISP, and related information. 22

23 Dynamic IP Address Your IP Address is allocated automatically, when you connect to you ISP. Step2) DNS A Domain Name System (DNS) server is like an index of IP addresses and Web addresses. If you type a Web address into your browser, such as a DNS server will find that name in its index and the matching IP address. Most ISPs provide a DNS server for speed and convenience. If your Service Provider connects you to the Internet with dynamic IP settings, it is likely that the DNS server IP address is provided automatically. However, if there is a DNS server that you would rather use, you need to specify the IP address of that DNS server here. Automatic Fixed Parameter It will detect the DNS server automatically This is the ISP s DNS server IP address that they gave you; or you can specify your own preferred DNS server IP address Step3) Test Internet Connection 23

24 Select Test Internet Connection, and then click <Finish> when you have finished the configuration above. It will run the test and check the Internet connection can be established or not. Congratulations! You have completed the connection configuration after test successful, and now you can start using the router. 2.2 LAN Use the LAN link on the main menu to reach the LAN screen. An example screen is shown below. You can specify the LAN segment s IP address, subnet Mask,enable/disable DHCP and select an IP range for your LAN, you also can check DHCP client list in here. Parameter TCP/IP IP Address This is the XRT-501 s LAN port IP address, and your LAN clients default gateway IP address. (For XRT-501 s default LAN IP address is ) 24

25 Subnet Mask DHCP Server The default value is standard for small (class "C") networks. For other networks, use the Subnet Mask for the LAN segment to which the XRT-501 is attached (the same value as the PCs on that LAN segment). If Enabled, the XRT-501 will allocate IP Addresses to PCs (DHCP clients) on your LAN automatically when they start up.the default (and recommended) value is Enabled. If you are already using a DHCP Server, this setting must be Disabled, and the existing DHCP server must be re-configured to treat the XRT-501 as the default Gateway. See thefollowing section for further details. The Start IP Address and Finish IP Address fields set the values used by the DHCP server when allocating IP Addresses to DHCP clients. This range also determines the number of DHCP clients supported.see the following section for further Buttons Save Cancel details on using DHCP. Save the data on screen. The "Cancel" button will discard any data you have entered and reload the file from the XRT-501. What DHCP Does A DHCP (Dynamic Host Configuration Protocol) Server allocates a valid IP address to a DHCP Client (PC or device) upon request. The client request is made when the client device starts up (boots). The DHCP Server provides the Gateway and DNS addresses to the client, as well as allocating an IP Address. The XRT-501 can act as a DHCP server. Windows 95/98/ME and other non-server versions of Windows will act as a DHCP client. This is the default Windows setting for the TCP/IP network protocol. However, Windows uses the term Obtain an IP Address automatically instead of "DHCP Client". You must NOT have two or more DHCP Servers on the same LAN segment. (If your LAN does not have other Routers, this means there must only be one DHCP Server on your LAN.) 25

26 Using the XRT-501's DHCP Server This is the default setting. The DHCP Server settings are on the LAN screen. On this screen, you can: Enable or Disable the XRT-501's DHCP Server function. Set the range of IP Addresses allocated to PCs by the DHCP Server function. Note You can assign Fixed IP Addresses to some devices while using DHCP, provided that the Fixed IP Addresses are NOT within the range used by the DHCP Server. Using another DHCP Server You can only use one DHCP Server per LAN segment. If you wish to use another DHCP Server, rather than the XRT-501's, the following procedure is required. Disable the DHCP Server feature in the XRT-501. This setting is on the LAN screen. Configure the DHCP Server to provide the XRT-501's IP Address as the Default Gateway. To Configure your PCs to use DHCP This is the default setting for TCP/IP under Windows 98/Me, 2000 or later operating systems.see 1.6 Configuration for the procedure to check these settings. 2.3 Password The Password settings function allows you to design password to the XRT-501. Parameter Current assword Password Enter the current password for verification. Type a new password in order to access the Web-Based 26

27 Verify Password management website. Re-Type the password for confirmation. 2.4 Status Use the Status link on the main menu to check XRT-501 system status and concurrent hardware information. 27

28 Parameter Internet Connection Method Broadband Modem Internet Connection Internet IP Address WAN MTU This indicates the current connection method, as set in the Setup Wizard. This shows the connection status of the modem. Current connection status: Active,Idle,Unknown, and Failed. If there is an error, you can click the "Connection Details" button to find out more information. This IP Address is allocated by the ISP (Internet Service Provider). Displays the current value of MTU. LAN IP Address The IP Address of the XRT-501. Network Mask The Network Mask (Subnet Mask) for the IP Address above. DHCP Server This shows the status of the DHCP Server function - either "Enabled" or "Disabled". For additional information about the PCs on your LAN, and the IP addresses allocated to them, use the PC Database option on the Advanced menu. System Device Name Firmware Version Buttons This displays the current name of the XRT-501. The current version of the firmware installed in the XRT-501. "Connection Details" Button System Data System Data Restart Refresh Screen Click this button to open a Sub-Window and view a detailed description of the current connection. Depending on the type of connection, a "log" may also be available. Display all system information in a sub-window. Display all system log in a sub-window. Clicking this button will restart (reboot) the XRT-501. All existing connections though the XRT-501 will be terminated, but will usually re-connect automatically. Update the data displayed on screen. 28

29 Connection Details - Fixed/Dynamic IP Address If your access method is "Direct" (no login), a screen like the following example will be displayed when the "Connection Details" button is clicked. Parameter Internet Physical Address IP Address Network Mask Default Gateway DNS IP Address DHCP Client The hardware address of this device, as seen by remote devices on the Internet.(This is different as the hardware address by the devices on the local LAN.) The IP Address of this device, as seen by Internet users. This address is allocated by your ISP (Internet Service Provider). The Network Mask associated with the IP Address above. The IP Address of the remote Gateway or Router associated with the IP Address above. The IP Address of the Domain Name Server which is currently used. This will show "Enabled" or "Disabled", depending on whether or not this device is functioning as a DHCP client. If "Enabled", the "Remaining lease time" field indicates when the IP Address allocated by the DHCP Server will expire. The lease is automatically renewed on expiry; 29

30 Buttons use the "Renew" button if you wish to manually renew the lease immediately. Release/Renew Button will display EITHER "Release" OR "Renew" Refresh This button is only useful if the IP address shown above is allocated automatically on connection. (Dynamic IP address). If you have a Fixed (Static) IP address, this button has no effect. If the ISP's DHCP Server has NOT allocated an IP Address for the XRT-501, this button will say "Renew". Clicking the "Renew" button will attempt to re-establish the connection and obtain an IP Address from the ISP's DHCP Server. If an IP Address has been allocated to XRT-501 (by the ISP's DHCP Server), this button will say "Release". Clicking the "Release" button will break the connection and release the IP Address. Update the data shown on screen. Connection Status - PPPoE If using PPPoE (PPP over Ethernet), a screen like the following example will be displayed when the "Connection Details" button is clicked. 30

31 Parameter Internet Physical Address IP Address Network Mask PPPoE Link Status The hardware address of this device, as seen by remote devices on the Internet. ((This is different as the hardware address by the devices on the local LAN.) The IP Address of this device, as seen by Internet users. This address is allocated by your ISP (Internet Service Provider). The Network Mask associated with the IP Address above. This indicates whether or not the connection is currently established. If the connection does not exist, the "Connect" button can be used to establish a connection. If the connection currently exists, the "Disconnect" button can be used to break the connection. Connection Log Connection Log The Connection Log shows status messages relating to the existing connection. The most common messages are listed in the table below. The "Clear Log" button will restart the Log, while the Refresh button will update the messages shown on screen. Buttons Connect Disconnect Clear Log Refresh If not connected, establish a connection to your ISP. If connected to your ISP, hang up the connection. Delete all data currently in the Log. This will make it easier to read new messages. Update the data on screen. Connection Log Messages Parameter Connection Log Messages 31

32 Connect on Demand Connection attempt has been triggered by the "Connect automatically, as required" setting. Manual connection Connection attempt started by the "Connect" button. Reset physical connection Preparing line for connection attempt. Connecting to remote server Remote Server located Start PPP PPP up successfully Idle time-out reached Disconnecting Error: Remote Server not found Error: PPP Connection failed Error: Connection to Server lost Error: Invalid or unknown packet type Attempting to connect to the ISP's server. ISP's Server has responded to connection attempt. Attempting to login to ISP's Server and establish a PPP connection. Able to login to ISP's Server and establish a PPP connection. The connection has been idle for the time period specified in the "Idle Time-out" field. The connection will now be terminated. The current connection is being terminated, due to either the "Idle Time-out" above, or "Disconnect" button being clicked. ISP's Server did not respond. This could be a Server problem, or a problem with the link to the Server. Unable to establish a PPP connection with the ISP's Server. This could be a login problem (name or password) or a Server problem. The existing connection has been lost. This could be caused by a power failure, a link failure, or Server failure. The data received from the ISP's Server could not be processed. This could be caused by data corruption (from a bad link), or the Server using a protocol which is not supported by this device. Connection Status - PPTP If using PPTP (Peer-to-Peer Tunneling Protocol), a screen like the following example will be displayed when the "Connection Details" button is clicked. 32

33 Parameter Connection Physical Address IP Address PPTP Status The hardware address of this device, as seen by remote devices on the Internet. (This is different as the hardware address by the devices on the local LAN.) The IP Address of this device, as seen by Internet users. This address is allocated by your ISP (Internet Service Provider). This indicates whether or not the connection is currently established. If the connection does not exist, the "Connect" button can be used to establish a connection. If the connection currently exists, the "Disconnect" button can be used to break the connection. Connection Log Connection Log The Connection Log shows status messages relating to the existing connection.the "Clear Log" button will restart the Log, while the Refresh button will update the messages shown on screen. Buttons Connect If not connected, establish a connection to your ISP. 33

34 Disconnect Clear Log Refresh If connected to your ISP, hang up the connection. Delete all data currently in the Log. This will make it easier to read new messages. Update the data on screen. Connection Status - L2TP If using L2TP, a screen like the following example will be displayed when the "Connection Details" button is clicked. Parameter Connection Physical Address IP Address Connection Status The hardware address of this device, as seen by remote devices on the Internet. (This is different as the hardware address by the devices on the local LAN.) The IP Address of this device, as seen by Internet users. This address is allocated by your ISP (Internet Service Provider). This indicates whether or not the connection is currently established. If the connection does not exist, the "Connect" button can be used to establish a connection. If the connection currently exists, the "Disconnect" button can be used to break the connection. 34

35 Connection Log Connection Log The Connection Log shows status messages relating to the existing connection. The "Clear Log" button will restart the Log, while the Refresh button will update the messages shown on screen. Buttons Connect Disconnect Clear Log Refresh If not connected, establish a connection to your ISP. If connected to your ISP, hang up the connection. Delete all data currently in the Log. This will make it easier to read new messages. Update the data on screen. Connection Status - Telstra Big Pond An example screen is shown below. Parameter Connection Physical Address IP Address The hardware address of this device, as seen by remote devices. (This is different as the hardware address by the devices on the local LAN.) The IP Address of this device, as seen by Internet users. 35

36 Connection Status This address is allocated by your ISP (Internet Service Provider). This indicates whether or not the connection is currently established. If the connection does not exist, the "Connect" button can be used to establish a connection. If the connection currently exists, the "Disconnect" button can be used to break the connection. Normally, it is not necessary to use the Connect and Disconnect buttons unless the setting "Connect automatically, as required" is disabled. Connection Log Connection Log The Connection Log shows status messages relating to the existing connection. Buttons Connect Disconnect Clear Log Refresh If not connected, establish a connection to Telstra Big Pond. If connected to Telstra Big Pond, terminate the connection. Delete all data currently in the Log. This will make it easier to read new messages. Update the data on screen. Connection Details - SingTel RAS If using the SingTel RAS access method, a screen like the following example will be displayed when the "Connection Details" button is clicked. 36

37 Parameter Internet RAS Plan Physical Address IP Address Network Mask Default Gateway DNS IP Address DHCP Client Buttons Release/Renew Button will display EITHER "Release" OR "Renew" The RAS Plan which is currently used. The hardware address of this device, as seen by remote devices on the Internet. (This is different as the hardware address by the devices on the local LAN.) The IP Address of this device, as seen by Internet users. This address is allocated by your ISP (Internet Service Provider). The Network Mask associated with the IP Address above. The IP Address of the remote Gateway or Router associated with the IP Address above. The IP Address of the Domain Name Server which is currently used. This will show "Enabled" or "Disabled", depending on whether or not this device is functioning as a DHCP client. If "Enabled" the "Remaining lease time" field indicates when the IP Address allocated by the DHCP Server will expire. The lease is automatically renewed on expiry; use the "Renew" button if you wish to manually renew the lease immediately. This button is only useful if the IP address shown above is allocated automatically on connection. (Dynamic IP address). If you have a Fixed (Static) IP address, this button has no effect. If the ISP's DHCP Server has NOT allocated an IP Address for the XRT-501, this button will say "Renew". Clicking the "Renew" button will attempt to re-establish the connection and obtain an IP Address from the ISP's DHCP Server. If an IP Address has been allocated to the XRT-501 (by the ISP's DHCP Server), this button will say "Release". Clicking the "Release" button will break the connection and release the IP Address. 37

38 Refresh Update the data shown on screen. Chapter3 Advance Features If you have already configured the Wizard, you do NOT need to configure anything for you to start using the Internet. Advance features that allow you to configure the router to meet your network s needs such as: Special Applications, DMZ, Virtual Servers, Qos, and Firewall options etc. Below is a general description of what advance functions are available for the XRT-501. Parameter 3.1 Access Control To restrict the level of Internet Access available to PCs on your LAN 3.2 Dynamic DNS You can configure DDNS service in this section. 3.3 Internet This section allows you to configure the Communication Applications, Special Applications, DMZ, and Mulit-DMZ functions relating to Internet access. 3.4 URL Filiter This section allow you to restrict access to some Web sites from particular PCs by entering a full URL address or just keyword of the Web site. 3.5 Schedule Two separate sessions or periods can be defined. 3.6 User Groups This section allow you to configure PCs to different group and using the specify service. 3.7 Virtual Servers You can configure the Virtual Server in this section. This 38

39 allows you to specify what user/packet can pass your router s NAT. 3.8 QoS You can configure the QoS control by four level. 3.9 Streaming Thist will get accelerate via enable this function. Accelerator 3.10 IGMP IGMP (Internet Group Multicast Protocol): It is a session-layer protocol used to establish membership in a multicast group Packet Capture It provides the feauture can monitor the LAN or WAN traffic WAN Port This section allows you to select the connection method in order to establish a connection with your ISP (same as the Wizard section) Select one of the above advance features selections and proceed to the manual s relevant subsection. 3.1 Access Control The Access Control feature allows administrators to restrict the level of Internet Access available to PCs on your LAN. With the default settings, everyone has unrestricted Internet access. To use this feature: Set the desired restrictions on the "Default" group. All PCs are in the "Default" group unless explicitly moved to another group. Set the desired restrictions on the other groups ("Group 1", "Group 2", "Group 3" and "Group 4") as needed. Assign PC to the groups as required. Note Restrictions are imposed by blocking "Services", or types of connections. All common Services are Pre-Defined.If required, you can also define your own Services. 39

40 Parameter Group Group Internet Access Restrictions Select the desired Group. The screen will update to display the settings for the selected Group. Groups are named "Default", "Group 1", "Group 2", "Group 3" and "Group 4", and cannot be re-named. Select the desired options for the current group: None:Nothing is blocked. Use this to create the least restrictive group. Block all Internet access: All traffic via the WAN port is blocked. Use this to create the most restrictive group. Block selected Services: You can select which Services are to block. Use this to gain fine control over the Internet access for a group. Block by Schedule Services If Internet access is being blocked, you can choose to apply the blocking only during scheduled times. If access is not blocked, no Scheduling is possible, and this setting has no effect. You can define or modify the Schedule using the Schedule option on the Advanced menu. This lists all defined Services. Select the Services you 40

41 wish to block. To select multiple services, hold the CTRL key while selecting. (On the Macintosh, hold the SHIFT key rather than CTRL.) Edit Service List Button If you wish to define additional Services, or manage the Service list, click this button to open the "Services" screen. Buttons Edit Service List Save Cancel View Log Clear Log Refresh If you wish to define additional Services, or manage the Service list, click this button to open the "Services" screen. Save the data on screen. Reverse any changes made since the last "Save". Click this to open a sub-window where you can view the "Access Control" log. This log shows attempted Internet accesses which have been blocked by the Access Control feature. Click this to clear and restart the "Access Control" log, making new entries easier to read. Update the data on screen Services This screen is displayed when the Edit Service List button on the Access Control screen is clicked. 41

42 Parameter Available Services Available Services "Delete" button Add New Service Name Type Start Port Finish Port ICMP Type Buttons This lists all the available services. Use this to delete any Service you have added. Pre-defined Services can not be deleted. Enter a descriptive name to identify this service. Select the protocol (TCP, UDP, ICMP) used to the remote system or service. For TCP and UDP Services, enter the beginning of the range of port numbers used by the service. If the service uses a single port number, enter it in both the "Start" and "Finish" fields. For TCP and UDP Services, enter the end of the range of port numbers used by the service. If the service uses a single port number, enter it in both the "Start" and "Finish" fields. For ICMP Services, enter the type number of the required service. 42

43 Delete Add Cancel Delete the selected service from the list. Add a new entry to the Service list, using the data shown in the "Add New Service" area on screen. Clear the " Add New Service " area, ready for entering data for a new Service Access Control Log To check the operation of the Access Control feature, an Access Control Log is provided. Click the View Log button on the Access Control screen to view this log. This log shows attempted Internet accesses which have been blocked by the Access Control function. Parameter Date/Time Name Source IP address MAC address Destination Port Date and Time of the attempted access. If known, the name of the PC whose access was blocked. The IP Address of the PC or device whose access request was blocked The hardware or physical address of the PC or device whose access request was blocked The destination URL or IP address It shows the port number. 3.2 DDNS(Dynamic DNS) Dynamic DNS (Domain Name Server) This free service is very useful when combined with the Virtual Server feature. It allows Internet users to connect to your Virtual Servers using a URL, rather than an IP Address. This also solves the problem of having a dynamic IP address. With a dynamic IP address, your IP address may change whenever you connect, which makes it difficult to connect to you. The Service works as follows: You must register for the service at one of the listed DDNS Service Providers. After registration, follow the service provider's procedure to request a Domain Name and have it allocated to you. Enter your DDNS data on the XRT-501's DDNS screen. The XRT-501 will then automatically ensure that your current IP Address is recorded at the DDNS server. If the DDNS Service provides software to perform this "IP address update"; you 43

44 should disable the "Update" function, or not use the software at all. From the Internet, users will be able to connect to your Virtual Servers (or DMZ PC) using your Domain Name. Select Advanced on the main menu, then Dynamic DNS, to see a screen like the following: Parameter DDNS Service DDNS Service Web Site Button DDNS Status Select the desired DDNS Service provider. Click this button to open a new window and connect to the Web site for the selected DDNS service provider. This message is returned by the DDNS Server. Normally, this message should be something like "Update successful" (current IP address was updated on the DDNS server). If the message is "No host", this indicates the host name entered was not allocated to you. If you see some other error message, you need to contact the DDNS Service and correct the problem. DDNS Data User Name Password/Key Domain Name Buttons Enter your Username for the DDNS Service. Enter your current password for the DDNS Service. Enter the domain name allocated to you by the DDNS Service. If you have more than one name, enter the name you wish to use. 44

45 Save Cancel Save the data on screen. Reverse any changes made since the last "Save". 3.3 Advanced Internet This section allows configuration of all advanced features relating to Internet access. Communication Applications Special Applications DMZ Multi-DMZ An example screen is shown below Communication Applications Most applications are supported transparently by the XRT-501. But sometimes it is not clear which PC should receive an incoming connection. This problem could arise with the Communication Applications listed on this screen. If this problem arises, you can use this screen to set which PC should receive an incoming connection, as described below. Parameter 45

46 Communication Applications Select an Application This lists applications which may generate incoming connections, where the destination PC (on your local LAN) is unknown. Send incoming calls to This lists the PCs on your LAN.If necessary, you can add PCs manually, using the "PC Database" option on the advanced menu. For each application listed above, you can choose a destination PC.There is no need to "Save" after each change; you can set the destination PC for each application, then click "Save" Special Applications If you use Internet applications which use non-standard connections or port numbers, you may find that they do not function correctly because they are blocked by the XRT-501's firewall. In this case, you can define the application as a "Special Application". Special Applications Screen This screen can be reached by clicking the Special Applications button on the Internet screen. You can then define your Special Applications. You will need detailed information about the application; this is normally available from the supplier of the application. Also, note that the terms "Incoming" and "Outgoing" on this screen refer to traffic from the client (PC) viewpoint 46

47 Parameter Checkbox Name Incoming Ports Use this to Enable or Disable this Special Application as required. Enter a descriptive name to identify this Special Application. Type: Select the protocol (TCP or UDP) used when you receive data from the special application or service. (Note: Some applications use different protocols for outgoing and incoming data). Start: Enter the beginning of the range of port numbers used by the application server, for data you receive. If the application uses a single port number, enter it in both the "Start" and "Finish" fields. Finish:Enter the end of the range of port numbers used by the application server, for data you receive. Outgoing Ports Type:Select the protocol (TCP or UDP) used when you send data to the remote system or service. Start:Enter the beginning of the range of port numbers used by the application server, for data you send to it. If the application uses a single port 47

48 number, enter it in both the "Start" and "Finish" fields. Finish: Enter the end of the range of port numbers used by the application server, for data you send to it. If the application uses a single port number, enter it in both the "Start" and "Finish" fields. Buttons Save Cancel Save the data on screen. Reverse any changes made since the last "Save". Using a Special Application Configure the Special Applications screen as required. On your PC, use the application normally. Remember that only one PC can use each Special application at any time. Also, when one PC is finished using a particular Special Application, there may need to be a "Time-out" before another PC can use the same Special Application. The "Time-out" period may be up to 3 minutes. Note If an application still cannot function correctly, try using the "DMZ" feature. 48