Datamax MA100-1010 User Manual

! ! ! !
"!
+
170908
Datamax+ (MA100-1010)
HSPA 4-Port Ethernet Router with GPS, RS232 & Wi-Fi
User Manual
CHOOSE WELL... CHOOSE WISELY... CHOOSE MAXON...
* Not to scale
www.maxon.com.au
This document is the sole and exclusive property of Maxon Australia.
Not to be distributed or divulged without prior written agreement.
! ! ! !
#!
+,-./(01(203+/3+4
CONTACT INFORMATION ..................................................................... 3!
RF EXPOSURE COMPLIANCE ....................................................................... 4!
Caution ................................................................................................ 4!
REVISION HISTORY ................................................................................... 7!
1.! Introduction .................................................................................... 8!
1.1.! Specifications .......................................................................... 10!
2.! Installation Introduction ............................................................... 14!
2.1.! General .................................................................................... 14!
2.2.! Package Contents .................................................................... 14!
2.3.! Installation and Cable Connection ........................................... 14!
2.4.! Accessories List ....................................................................... 15!
2.5.! SIM card Installation ............................................................... 15!
2.6.! Antenna Installation ................................................................ 15!
2.7.! Power ...................................................................................... 16!
2.8.! Indicator Lights Introduction .................................................. 16!
2.9.! Reset Button ............................................................................ 17!
3.! Configuration and Management .................................................... 18!
3.1.! Management and configuration ............................................... 21!
3.1.1.!Setting ................................................................................ 21!
3.1.2.!Wireless ............................................................................... 40!
3.1.3.!Services ............................................................................... 53!
3.1.4.!VPN ..................................................................................... 61!
3.1.5.!Security ............................................................................... 74!
3.1.6.!Access Restrictions ................................................................ 78!
3.1.7.!NAT ..................................................................................... 81!
3.1.8.!QoS Setting .......................................................................... 84!
3.1.9.!Applications .......................................................................... 86!
3.1.10.! Administration ................................................................. 88!
3.1.11.! Status ............................................................................ 94!
4.! Chapter 4 Appendix ..................................................................... 107!
! ! ! !
$!
CONTACT INFORMATION
In keeping with Maxon's dedicated customer support policy, we encourage you to contact us.
TECHNICAL:
Hours of Operation: Monday to Friday 8.30am to 5.30pm* Telephone: +61 2 8707 3000 Facsimile: +61 2 8707 3001 Email: support@maxon.com.au * Public holidays excluded
%&'(%)!
Hours of Operation: Monday to Friday 8.30am to 5.30pm* Telephone: +61 2 8707 3000 Facsimile: +61 2 8707 3001 Email: sales@maxon.com.au * Public holidays excluded
*(+%,-()!! www.maxon.com.au
Maxon has also added for the benefit of developers and integrators, a forum on our website that can be accessed to discuss this product and/or technical matters in relation to your applications. All questions raised within this portal will be answered.
!
./012)!! www.maxon.com.au/forum!!
&330(%%)!
Maxon Australia Pty Ltd 36a Gibson Avenue, Padstow Sydney, NSW, Australia 2211
4/%-&'!&330(%%!
Maxon Australia Pty Ltd Po Box 1, Revesby North, Sydney, NSW Australia 2212
! ! ! !
5!
RF EXPOSURE COMPLIANCE
The use of this device in any other type of host configuration may not comply with the RF exposure requirements and should be avoided. During operation, a 20 cm separation distance should be maintained between the antenna, whether extended or retracted, and the user’s/bystander’s body (excluding hands, wrists, feet, and ankles) to ensure RF exposure compliance.
Caution
Change or modification without the express consent of Maxon Electronics Australia Pty. Ltd. voids the user’s authority to use the equipment. These limits are designed to provide reasonable protection against harmful interference in an appropriate installation. The modem is a transmitting device with similar output power to a mobile phone. This equipment generates, uses, and can radiate radio frequency energy and, if not used in accordance with instructions, can cause harmful radiation to radio communication. The modem is approved for use with the antenna: ANT-8530. Unauthorized antennas, modifications, or attachments could impair call quality, damage the device, or result in violation of RF exposure regulations.
However, there is no guarantee that interference will not occur in a particular installation. If the equipment does cause harmful interference in radio and television reception, which can be determined by turning the equipment on and off, the user is encouraged to try to correct the interference by one or more of the following measures:
! Re-orient or relocate the receiving radio or TV antenna
! Increase the separation distance between the equipment and
the receiver
! Contact Maxon Australia Technical Support for assistance.
! ! ! !
6!
Notes The user is cautioned that changes or modifications not expressly approved by Maxon Australia could void the warrantee.
* The product needs to be supplied by a limited power source or the power supply provided. Otherwise, safety will not be ensured
! ! ! !
7!
Potentially Unsafe Areas
Posted Facilities: Turn off this device in any facility or area when
posted notices require you to do so.
Blasting Areas: Turn off your device where blasting is in progress. Observe restrictions and follow any regulations or rules.
Potentially Explosive Atmospheres: Turn off your device when you are in any area with a potentially explosive atmosphere. Obey all signs and instructions. Sparks in such areas could cause an explosion or fire, resulting in bodily injury or death. Areas with a potentially explosive atmosphere are often but not always clearly marked. They include:
! fuelling areas such as gas or petrol stations ! below deck on boats ! transfer or storage facilities for fuel or chemicals ! vehicles using liquefied petroleum gas, such as propane or
butane
! areas when the air contains chemicals or particles such as
grain, dust or metal powders
! avoid using the modem in areas that emit electromagnetic
waves or enclosed metallic structures e.g. lifts or any other area where you would normally be advised to turn off your engine
! ! ! !
8!
REVISION HISTORY
Product
Datamax+ HSPA Ethernet Router with RS232 & wifi.
Model
MA100-1010
Document Type
PDF
Current Version Number
1.1
Status of the Document
Public Release
Revision Date
May 2014
Total Number of Pages
109
- Revision History
Level
Date
History
1.0
July 2013
Release Version
1.1
May 2014
Minor updates
1.2
Jan 2015
Removed reference to RS422/RS485
! ! ! !
9!
1. Introduction
MA100-1010 is a HSPA+ Ethernet router providing data communications via the public cellular network.
The MA100-1010 utilises an industrial 32-bit CPU embedded with an embedded operating system. The device supports RS232 connection, four Ethernet ports and Wi-Fi that conveniently and transparently connect one device to a cellular network, allowing you to connect to your existing serial and Ethernet devices with minimal configuration.
The MA100-1010 has been widely used within M2M applications, such as intelligent transportation, smart grid, industrial automation and telemetry.
Features and Benefits
Designed for Industrial Application
Industrial cellular module EM820W
High-powered industrial 32bit CPU
Industrial GPS module
Supports low power consumption mode, including sleep mode.
Metal housing.
Voltage range: 5~35VDC
Auto recovery functionality, including online detection, and auto
redial.
Ethernet port: 1.5KV magnetic isolation protection
RS232: 15KV ESD protection
! ! ! !
:!
SIM port: 15KV ESD protection
Power port 2.5mm Barrel connector: reverse-voltage and
overvoltage protection
Antenna port SMA Female
Supports IP Stack Auto mode
IP / web based user interface for remote management,
maintenance and configuration.
Standard and Convenience
Supports standard RS232, Ethernet ports and Wi-Fi.
Supports standard WAN port and PPPOE protocol that can
connect to ADSL directly
Supports intellectual mode, establishes communication state automatically when powered on
Provide management software for remote management
Convenient configuration and maintenance interface!;WEB or CLI<
High-performance
Supports multiple WAN access methods, including static IP, DHCP, L2TP, PPTP, PPPOE, 3G/HSPA/4G.
Supports GPS function
Supports double link backup between 3G and WAN(PPPOE, ADSL)
Supports VPN client(PPTP, L2TP, OPENVPN, IPSEC and GRE)
Supports VPN server(PPTP, L2TP, OPENVPN, IPSEC and GRE)
Supports local and remote firmware upgrade, import and export
config file.
Supports NTP, RTC embedded.
Supports multiple DDNS provider service.
Supports VLANs, MAC Address clone, PPPoE Server
WIFI support 802.11b/g/n. support AP, client, Adhoc, Repeater,
and Bridge.
WIFI support WEP, WPA, WPA2 encryption, Support RADIUS authentication and MAC address filter.
Support DHCP server and client, firewall, NAT, DMZ host , URL block, QoS, ttraff, statistics, real time link speed statistics etc.
Full protocol support, such as TCP/IP, UDP, ICMP, SMTP, HTTP, POP3,
! ! ! !
"=!
OICQ, TELNET, FTP), SNMP, SSHD, etc.
Schedule Reboot, Schedule Online and Offline.
Router chart is as follows
!
!
!
!
1.1. Specifications
2"55657#(48"9%:%97;%&'(
4;7'<7#<(7'<(-7'<
-7'<=%<;>
+?(8&="#
@?( $"'$%;%A%;B(
C,+,D,?E(FG4EH2CD,(HI1I(@0J+/@
12-%>*?32&>@%34&>@%14&!>@%4&A! 96=>":==>#"==2@B! 96=>:==>":==>#"==2@B;CDEFCGHI<! J%296=>:==>"9==>":==2@B! J40%>(3J(!?'&%%!"#
@%14&)6K872LDM! ;1DICHN!MDOON<! @%34&)8K#2LDM! ;3CPGICHN!MDOON<! 12-%)$95Kbps!;3'>1'<! @%4&A)! #"!2LDM! ;3CPGICHN!MDOON<!
6K872LDM1DICHN!
MDOON)!
<24dBm
<-109 dBm
FG4(48"9%:%97;%&'(
I;"K(
2&';"';(
J4%!2CNQIO!
,GNQMERFHI!J4%!SCNQIO!
0OTOFUOR!-VDO!
6=WTXHGGIO! J4%!'"("686K5#2@B)?>&!TCNO! %+&%)!*&&%Y(JZ/%Y2%&%YJ&J&Z! %QDDCRE!J&','(/!
2H[K!QDNHEO! RHEO!
5!@B!
&TTQRHTV!
4CMFEFCG)!#K6S!?4(! %+&%)!#K=S!?4(!
(SLONNON!DRCTOMMFG\!
MVMEOS!!!
?OIIQIHR!
4CPOR!
0%#$#!!
,GNFTHECR!
3&-&!
5!DCREM!
MPFETX!
*,.,!
"=>"==
2!
J4%!2CNQIO!!
! ! ! !
""!
&T^QFMFEFCG!
?CIN!MEHREM)!#:%! *HRS!MEHREM)!#:%! &FNON!MEHREM)!_"%! @CE!MEHREM)!_"%!
%OGMFEFUFEV!
-RHT`FG\)!W"7=N+S! 0OHT^QFMFEFCG)!W"7=N+S! ?CIN!MEHREM)!W"55N+S!
-FSFG\! HTTQRHTV!
02%)!$=GM! ::a)!_7=GM! JRHGQIHRFEV)!#"GM!
-FSO!DQIMO!
?CG]F\QRHLIOY!=K#6!EC!"===@B!
HI1I(48"9%:%97;%&'(
I;"K(
2&';"';(
%EHGNHRN!
,(((9=#K""L>\>G!
+HGNPFNEX!
,(((9=#K""L>\)!652LDM!;SH[<! ,(((9=#K""G)!"6=2LDM!;SH[<!
%OTQRFEV!
*(4Y!*4&Y!*4&#Y!OETK!! *4%!;CDEFCGHI<!
-b!DCPOR!
#"K6N+S""\),#7N+S""L)!
0b!MOGMFEFUFEV!
_W8#N+Sc652DLM!
(
! ! ! !
"#!
L7#<=7#"(4B$;"K(
I;"K(
2&';"';(
?41!
,GNQMERFHI!$#LFEM!?41!
.'&%@!
92+;([EOGNHLIO!EC!752+<!
%30&2!
752+!
I';"#:79"(+B8"(
I;"K(
2&';"';(
*&Z!
"!"=>"==!2LDM!*&Z!DCRE;0d56<Y!HQEC!23,>23,bY!"K6ef! SH\GOEFT!FMCIHEFCG!DRCEOTEFCG!
'&Z!
5!"=>"==!2LDM!(EXORGOE!DCREM;0d56<Y!HQEC!23,>23,bY!"K6ef! SH\GOEFT!FMCIHEFCG!DRCEOTEFCG!
%ORFHI!!
"!0%#$#!DCREY!"6ef!(%3!DRCEOTEFCG! 3HEH!LFEM)!6Y!7!Y8Y!9! %ECD!LFEM)!"Y!"K6;CDEFCGHI<Y!#! 4HRFEV)!GCGOY!OUOGY!CNNY!MDHTO;CDEFCGHI<Y!SHR`;CDEFCGHI<! +HQN!RHEO)!#5==g""6#==!LDM!
,GNFTHECR!
h4CPORhY!h%VMEOShY!h/GIFGOhY!hJ4%hY!h!'CTHI!ZOEPCR`!hY! h*&ZhY!h*,.,hYh%F\GHI!%EROG\EXh!
&GEOGGH!
?OIIQIHR)!%EHGNHRN!%2&!]OSHIO!FGEOR]HTOY!6=!CXS! *,.,)!%EHGNHRN!%2&!SHIO!FGEOR]HTOY!6=!CXS! J4%)!MEHGNHRN!%2&!]OSHIO!FGEOR]HTOM!
%,2>1,2!
%EHGNHRN!$f>"K9f!QMOR!THRN!FGEOR]HTOY!"6ef!(%3!DRCEOTEFCG!
4CPOR!
%EHGNHRN!$W4,Z!DCPOR!iHT`Y!ROUORMOWUCIEH\O!HGN!CUORUCIEH\O! DRCEOTEFCG!
0OMOE!
0OMECRO!EXO!RCQEOR!EC!FEM!CRF\FGHI!]HTECRV!NO]HQIE!MOEEFG\M!
(
! ! ! !
"$!
G&="#(I'86;(
I;"K(
2&';"';(
%EHGNHRN!
4CPOR!
3?!"#f>"K6&!
4CPOR!0HG\O!
3?!6g$6f!
?CGMQSDEFCG!
_76=S&!;"#f<!
G>B$%975(2>7#79;"#%$;%9$(
I;"K(
2&';"';(
@CQMFG\!
,RCGY!DRCUFNFG\!,4$=!DRCEOTEFCG!
3FSOGMFCGM!
#=7["$6[#9!SS!
*OF\XE!
8:=\!
/'A%#&'K"';75(.%K%;$(
I;"K(
2&';"';(
/DORHEFG\!
-OSDORHEQRO!
-35~+75ºC-31~+167
%ECRH\O!
-OSDORHEQRO!
W5=gA96j?W5=gA"96!
/DORHEFG\!
@QSFNFEV!
:6a!;!ZCGWTCGNOGMFG\<!
! ! ! !
"5!
2. Installation Introduction!
2.1. General
kCQ!MXCQIN!ROUFOP!EXO!RCQEOR!TCG]F\QRHEFCG!FSSONFHEOIV!H]EOR!FGMEHIIHEFCG!EC!
OGMQRO!HII!MOEEFG\M!HRO!HM!NOMFRONK!.HFIQRO!EC!NC!MC!SHV!ROMQIE!FG!QGHQEXCRFBON!HTTOMM!EC!
VCQR!O^QFDSOGEK!
2.2. Package Contents
ZHSO!
lQHGEFEV!
0OSHR`!
0CQEOR!XCME!
"!!?OIIQIHR!HGEOGGH!;2HIO!%2&<!
"!!*,.,!HGEOGGH!;.OSHIO!%2&<!
"!!J4%!HGEOGGH!;2HIO!%2&<!
"!!ZOEPCR`!THLIO!
"!!?CGMCIO!THLIO!
"!
CDEFCGHI!
4CPOR!HNHDEOR!
"!!2HGQHI!?3!
"!
!
?OREF]FTHEFCG!THRN!
"!
!
2HFGEOGHGTO!THRN!
"!
!
2.3. Installation and Cable Connection
(
! ! ! !
"6!
2.4. Accessories List
Name
Quantity
Router
1
Cellular Antenna
1
GPS Antenna
1
WIFI Antenna
1
Network cable
1
Serial cable
1
Power Lead
1
Stator
2
2.5. SIM card Installation
Power off the router, and press the eject button next to the SIM card tray with a small object such as a ballpoint pen. The SIM card tray will eject from the face of the modem. Place the SIM card into the SIM card tray (Ensure that the side of the SIM card with the metal connection points is facing away from the tray), and then insert the SIM card tray back into the SIM card outlet.
2.6. Antenna Installation
Attach the SMA male connector of the cellular antenna into the female SMA interface on the router labeled “Antenna”. Attach the SMA male connector of the WIFI antenna into the female SMA interface on the router labeled “WIFI”.
The router supports an RS232 interface and a 10/100M Ethernet interface. These two interfaces both utilize an RJ45 connector, with the RS232 interface labeled “Console” and the 10/100M Ethernet interface labeled “ETH”.
Plug the RJ45 end of the serial cable into the RJ45 outlet of the router labeled “console”, and plug the DB9F end of the serial cable into the RS232 serial interface of the user’s device.
! ! ! !
"7!
The pin-out connections of the serial cable are as follows:
RJ45
DB9F
1
8
2 6 3
2
4
1
5
5
6
3
7 4 8
7
The signal definition of the DB9F serial communication interface is as follows:
2.7. Power
The input supply voltage range is 5~35VDC. We recommend using the standard DC 12VDC/1.5A power adaptor available from Maxon.
2.8. Indicator Lights Introduction
The router provides following indicator lights: “Power”, “System”, “Online”, “GPS”, “Local Network”, “WAN”, “WIFI”, “Signal Strength”.
Pin
RS232 signal
Direction
1
DCD
Output
2
RXD
Output
3
TXD
Input
4
DTR
Input
5
GND
6
DSR
output
7
RTS
input
8
CTS
output
! ! ! !
"8!
!
,GNFTHECR!
'F\XE!
%EHEO!
,GERCNQTEFCG!
4CPOR!
/Z!
0CQEOR!FM!DCPORON!CG!
/..!
0CQEOR!FM!DCPORON!C]]!
%VMEOS!
+',Ze!
0CQEOR!FM!QD!HGN!PCR`FG\!
/..!
0CQEOR!FM!GCE!TQRROGEIV!PCR`FG\!
/GIFGO!
/Z!
0CQEOR!XHM!IC\\ON!CG!GOEPCR`!
/..!
0CQEOR!XHMGmE!IC\\ON!CG!GOEPCR`!
J4%! /Z!
*'&Z!FM!GCE!HTEFUO!
/..!
*'&Z!FM!HTEFUO!
'CTHI!
ZOEPCR`!
/..!
-XO!TCRROMDCGNFG\!FGEOR]HTO!C]!MPFETX!FM!GCE! TCGGOTEON!
/Z!>!
+',Ze!
-XO!TCRROMDCGNFG\!FGEOR]HTO!C]!MPFETX!FM! TCGGOTEON!>?CSSQGFTHEFG\!
*&Z!
/..!
-XO!*&Z!FGEOR]HTO!FM!QGDIQ\\ON!
/Z!>!
+',Ze!
-XO!*&Z!FGEOR]HTO!FM!!DIQ\\ON!FG>NHEH!FM!
ERHUORMFG\!EXO!*&Z!FGEOR]HTO!
*,.,! /..!
*,.,!FM!GCE!HTEFUO!
/Z!!
*,.,!FM!HTEFUO!
%F\GHI!
%EROG\EX!
/GO!
'F\XE!/Z!
%F\GHI!MEROG\EX!FM!POH`!
-PC!
'F\XEM!
/Z!
%F\GHI!MEROG\EX!FM!SONFQS!
-XROO! 'F\XEM!
/Z!
%F\GHI!MEROG\EX!FM!\CCN!
2.9. Reset Button
The modems “Reset” button is used to restore the modem to its original factory default settings. To restore the router to factory default settings, the user needs to press the “Reset” button and hold it in for 15s, the router will then restore its original factory default settings and restart automatically. Note that the reset button is recessed to prevent accidental resets – to press, use a small blunt object such as a ballpoint pen.
!
! ! ! !
"9!
3. Configuration and Management
Datamax+ is configured via a web interface. In order to access the Datamax+ web interface you will need a computer with a spare Ethernet LAN port. The LAN card configuration should have the Internet Protocol TCP/IP set to obtain an IP Address automatically and obtain DNS server address automatically. To check these settings go to your LAN adaptor properties and check your Interment Protocol TCP/IP settings, it should look as follows:
! ! ! !
":!
Connection Steps:
1. Connect the Ethernet cable supplied with your router to your computer Ethernet LAN port
2. Your computer will get an IP address from the Datamax+ DHCP range automatically.
3. In your web browser type 192.168.1.1 in the Address (URL) field (The Default IP Address of the Ethernet port is 192.168.1.1). The router will prompt you to change the login credentials, the default username and password are both “admin”.
!
&]EOR!HTTOMM!EC!EXO!FG]CRSHEFCG!SHFG!DH\O!
! ! ! !
#=!
!
!
! ! ! !
#"!
3.1. Management and configuration
3.1.1. Setting
The Setup screen is the first screen users will see when accessing the router. Most users will be able to configure the router and get it work properly using only the settings on this screen. Some Internet Service Providers (ISPs) will require users to enter specific information, such as User Name, Password, IP Address, Default Gateway Address, or DNS IP Address. This information can be obtained from your ISP, if required.
3.1.1.1. Basic Setting
WAN Connection Type There are seven configuration options for the WAN interface: Disabled; Static IP; Automatic Configuration using one of DHCP, PPPOE, PPTP, L2TP, 3G/UNMTS/4G/LTE
!
C%$7M5"<(
!
-XO!*&Z!DCRE!FM!GCE!QMON!
!
4;7;%9(IG(
!
WAN IP Address: IP address of the WAN interface Subnet Mask: subnet mask of the WAN interface Gateway: the default gateway address Static DNS1/DNS2/DNS3: upstream DNS server IP addresses
! ! ! !
##!
Note that for use in your own internal network, your network administrator can supply these details. Where you are using an ISP or other upstream service provider, that supplier can supply you with the required details.
!
,6;&K7;%9(2&':%N6#7;%&'OCL2G(
!
,4!HNNROMMY!GOESHM`!HGN!NO]HQIE!\HEOPHV!C]!*&Z!DCRE!HRO!HII!MOE!!HQECSHEFTHIIV!UFH!
3@?4!!
!
GGG0/(
!
User Name: Your username (typically supplied by your ISP) Password: Your password (typically supplied by your ISP) Service Name: If required by your ISP, otherwise leave blank. PPP Compression (MPPC): If your ISP supports compression and you wish
you use it, it can be enabled here T-Home VDSL VLAN 7/8 Tagging: If your ISP supports VDSL, you can enable it here. MPPE Encryption: if your connection requires Microsoft point to point encryption, shared key is entered here. Single Line Multi Link: enable single line link or disable multi-link
!
! ! ! !
#$!
I'A75%<(GGG(87$$=&#<(9>7#79;"#$(5%$;P(
n;NCQLIO!^QCEHEFCG!SHR`<
o;^QCEHEFCG!SHR`<!
p;^QOMEFCG!SHR`<!
<;LRHT`OE<!
c;HE!MF\G<!
q;MOSF!TCICG<!
r;DFDO!MF\G<!
,;QDDOR!THMO!,<!
!
! ! ! !
#5!
GG+G(
-XO!*&Z!FGEOR]HTO!TROHEOM!H!44-4!TCGGOTEFCG!EC!QMO!FGMEOHN!C]!nRHPs!HTTOMMK!
!
Use DHCP: automatic (“yes”) or manual(“no”) configuration of IP address, subnet mask and default gateway. Gateway (PPTP Server): The IP address of the PPTP server (your ISP will provide this)
User Name: your username as supplied by your ISP Password: your password as supplied by your ISP PPTP Encryption: encrypt (secure) packets over the PPTP link – your ISP will
advise if this is required. Disable Packet Reordering: This option can increase link throughput, however your ISP must support this function. Additional PPTP Options: any extra options that your ISP requires that are not listed elsewhere can be set here.
! ! ! !
#6!
!
.)+G(
-XO!*&Z!IFG`!PFII!LO!H!IHVOR!#!EQGGOIFG\!DRCECTCI!IFG`!TCGGOTEON!HTRCMM!EXO!*&Z!
FGEOR]HTO!HM!NO]FGONK!
!
User Name: your username as supplied by your ISP or network administrator
Password: your password as supplied by your ISP or network administrator Gateway (L2TP Server): The IP address of the L2TP server you wish to
connect to
Require CHAP: Force CHAP based authentication Refuse PAP: Prevent PAP based authentication Require Authentication: L2TP server requires authentication!
!
QFRJD+4RSFR.+/(
-XO!*&Z!TCGGOTEFCG!PFII!LO!#J>$J>5J!CG!EXO!3HEHSH[K!
!
User Name: your username (if any) as supplied by your mobile service provider Password: your password (if any) as supplied by your mobile service provider
! ! ! !
#7!
Dial String: the number to dial to get a data connection as supplied by your mobile service provider
APN: access point name as supplied by your mobile service provider PIN: if your SIM card is PIN protected, you can enter the PIN here
!
Connection type
!
Connection type: Auto, Force 4G, Force 3G, Force 2G, Prefer 3G, Prefer 2G options. In most cases Auto is preferred, however in some circumstances and locations, you can gain reliability and/or speed advantages by forcing particular connection options.
!
T""8(0'5%'"(
!
This function is used to monitor your WAN connectivity so that “broken” connections can be re-established, or alternate connections established.
!
Detection Method:
None: do not monitor connectivity.
Ping: Send ICMP Echo requests to the primary and backup detection
server address
Route: Detect connection with route method, when choose this
method, users should also configure "Detection Interval", "Primary Detection Server IP" and "Backup Detection Server IP" items.
PPP: Detect connection with PPP method, when choose this method,
users should also configure "Detection Interval" item.
Detection Interval: time (in seconds) to wait between detection attempts.
! ! ! !
#8!
Primary Detection Server IP: the primary (first) server that should be reachable and respond to the configured detection method Backup Detection Server IP: the backup (second) server that should be reachable via the WAN interface and respond to the configured detection method
Note: Both the primary and backup detection servers should be stable and reliable – if these servers fail to respond correctly in a timely manner, the modem will attempt to drop and re-establish the connection. During this time, no incoming or outgoing traffic can be send/received.!
!
Connection Strategy
!
Connection Strategy:
‘Connect on Demand’ only connects to your mobile service provider when there is outgoing data being sent. The connection is dropped when there is no WAN traffic for the ‘Max Idle Time’ period. While this saves power and possibly reduces mobile service provider charges, your equipment (including the Datamax modem) will not be reachable via the WAN interface when the connection has been dropped. ‘Keep Alive’ tries to maintain a WAN connection at all times, allowing you to interrogate your equipment at any time, rather than waiting for it to report to you.
!
!
Force reconnect: Enabling this option forces the Datamax to drop the WAN connection and then re-establish it at the defined interval.
Time: the time between forced reconnects.
STP
!
! ! ! !
#9!
STP (Spanning Tree Protocol) allows for multiple redundant links while preventing routing loops – packets do not “ping-pong” from router to router.
!
! ! ! !
#:!
Optional Configuration
!
Router Name: set router name Host Name: the host name part of the FQDN of the Datamax Domain Name: the domain part of the FQDN of the Datamax MTU: Maximum (user) data size in packets sent. Usually “auto”, however
depending on your ISP and/or local network settings, you may need to reduce this – please contact your network administrator and/or ISP.
Router Internal Network Settings
Router IP
!
Local IP Address: IP address of the routers LAN interface Subnet Mask: the subnet mask of the routers LAN interface Gateway: the default gateway address for LAN clients Local DNS: Normally set to auto to use the nameservers your upstream
provider supplies (eg, by DHCP), however you may wish to use your own nameservers to resolve host names on your private network.
!
! ! ! !
$=!
Network Address Server Settings (DHCP)
The Datamax can act as a DHCP server for (W)LAN connected devices. It can also act as a DHCP forwarder where you are utilizing a central DHCP server for multiple sites (subnets).
!
!
DHCP Type: select DHCP Server or DHCP Forwarder as appropriate When you select DHCP Forwarder, you will see input fields for the IP address of the remote DHCP server as below:
!
DHCP Server: enable or disable the DHCP server Start IP Address: the first (lowest) IP address to issue when a DHCP request
comes in – make sure you exclude the Datamax IP address! Maximum DHCP Users: the maximum number of concurrent DHCP leases allowed Client Lease Time: the time the IP address is leased for in minutes. After this amount of time, the client will need to acquire a new lease if it wishes to remain connected. Static DNS (1-3): If you wish to use your own DNS servers, you can enter their IP addresses here. Leave blank to use WAN configured DNS servers.
! ! ! !
$"!
WINS: if you are using a WINS server for name resolution, you can enter its IP address here. DNSMasq: users' domain name in the field of local search, increase the expansion of the host option, to adopt DNSMasq can assign IP addresses and DNS for the subnet, if select DNSMasq, dhcpd service is used for the subnet IP address and DNS.
Time Settings
Select time zone of your location. To use local time, leave the checkmark in the box next to Use local time.
!
NTP Client: Get the system time from NTP server Time Zone: Time zone options Summer Time (DST): set it depends on users' location Server IP/Name: IP address of NTP server, up to 32 characters. If blank,
the system will find a server by default
Adjust Time
!
Where you are not using NTP, or the NTP server is currently unreachable, you can set the routers real-time clock here. Click the “get” button to refresh the browser page with the current router time and “Set” to set the current router time.
3.1.1.2. Dynamic DNS
For users that have a dynamically assigned IP address, a DNS server that supports dynamic DNS updates will allow you to refer to your devices by name and have them continue to connect correctly even when the IP address of the device changes. The Datamax+ router supports dynamic DNS updates, automatically updating the DNS server when the WAN interface IP address assignment changes.
! ! ! !
$#!
DDNS Service: The Maxon MA100-1010 router currently supports DynDNS, freedns, Zoneedit, NO-IP, 3322, easyDNS, TZO, DynSIP and Custom based on the user.
!
!
User Name: your DDNS server username Password: your DDNS server password Host Name: the FQDN of the DDNS server Type: select the appropriate value (list varies depending on the setting of
“DDNS Service”) Wildcard: support wildcard or not, the default is OFF. ON means *.host.3322.org is equal to host.3322.org Do not use external ip check: enable or disable the function of 'do not use external ip check'
!
!
Force Update Interval: How often (in days) to force a DDNS update, even if the IP address hasn’t changed.
!
! ! ! !
$$!
Status
!
DDNS Status shows DDNS specific log information
!
3.1.1.3. Clone MAC Address
Some ISPs lock service provision to a MAC address. By cloning the MAC address, you can insert the Datamax into the network path without needing to update your MAC address with your ISP.
!
Clone MAC address can clone three parts: Clone LAN MAC, Clone WAN MAC, Clone Wireless MAC.
Note: MAC addresses are 48 characters, they cannot be set to a multicast address, and the first byte must be even. The MAC address value of network bridge br0 is determined by the lower order bits of wireless MAC address and LAN port MAC address.
!
3.1.1.4. Advanced Router
Operating Mode: Gateway and Router
!
! ! ! !
$5!
If the Datamax is acting as your primary gateway to the internet, select “gateway”, otherwise select “router”.
Dynamic Routing
!
If you want the router to participate in dynamic routing protocols such as RIP etc running on your network(s), you should enable this option. To enable the Dynamic Routing feature for the WAN side, select WAN. To enable this feature for the LAN and wireless side, select LAN&WLAN. To enable the feature for both the WAN and LAN, select Both. To disable the Dynamic Routing feature for all network interfaces, keep the default setting, Disable.
Note:Dynamic Routing is not available in Gateway mode
!
! ! ! !
$6!
Static Routing
!
Select set number: the routing table entry number Route Name: naming rules makes your life easier! Metric: the “cost” of this route – lower numbers are preferred routes. Destination LAN NET: the new route destination address Subnet Mask: the subnet mask for the new route Gateway: IP address of the gateway device that forwards packets to the
destination host or network. Interface: The interface that has the gateway attached (LAN/WLAN, WAN, or loopback)
Show Routing Table
!
!
! ! ! !
$7!
3.1.1.5. VLANs
!
VLAN’s allow you to specify which ports are “bridged” – that is, where broadcast traffic will be shared for example – rather than routed. This allows you to create separate subnets on each LAN port (or group of LAN ports). Note that although there are 15 VLAN’s available, there are only 5 ports (4 x LAN, 1 x WAN). Note also that the WAN port should be on a separate VLAN or routing to the WAN may not work.
!
! ! ! !
$8!
3.1.1.6. Networking
!
Bridging-Create Bridge: creates a new empty network bridge for later use. STP means Spanning Tree Protocol and with PRIO users are able to set the bridge priority order. The lowest number has the highest priority. Bridging - Assign to Bridge: allows users to assign any valid interface to a network bridge. Consider setting the Wireless Interface options to Bridged if they want to assign any Wireless Interface here. Any system specific bridge setting can be overridden here in this field.
Current Bridging Table: shows current bridging table
Create steps as below:
Click 'Add' to create a new bridge, configuration is as below:
!
Create bridge option: the first br0 means bridge name. STP means to on/off spanning tree protocol. Prio means priority level of STP, the smaller the number, the higher the level. MTU means maximum transfer unit, default is 1500, delete if it is not need. And then click 'Save' or 'Add'. Bridge properties are as below:
! ! ! !
$9!
!
Enter relevant bridge IP address and subnet mask, click 'Add' to
create a bridge.
Note: Only create a bridge can apply it.
!
Assign to Bridge option: to assign different ports to created bridge. For example: assign port (wireless port) is ra0 in br1 bridge as below:
Prio means priority level: work if multiple ports are within the same
bridge. The smaller the number, the higher the level. Click 'Add' to take it effect.
Note: corresponding interface of WAN ports interface should not be
binding, this bridge function is basically used for LAN port, and should not be binding with WAN port
If bind success, bridge binding list in the list of current bridging table is
as below:
!
To make br1 bridge has the same function with DHCP assigned address, users need to set multiple DHCP function, see the introduction of multi-channel DHCPD:
!
! ! ! !
$:!
!
Port Setup: Set the port property, the default is not set
Choose not bridge to set the port's own properties, detailed properties are as below: MTU: maximum transfer unit Multicast forwarding: enable or disable multicast forwarding Masquerade/NAT: enable or disable Masquerade/NAT IP Address: set ra0's IP address, and do not conflict with other ports or bridge Subnet Mask: set the port's subnet mask
!
Multiple DHCPD: using multiple DHCP service. Click 'Add' in multiple
DHCP server to appear relevant configuration. The first means the
! ! ! !
5=!
name of port or bridge (do not be configured as eth0), the second means whether to on DHCP. Start means start address, Max means maximum assigned DHCP clients, Leasetime means the client lease time, the unit is second, click 'Save' or 'Apply' to put it into effect after setting.
Note: You can only create one DHCP instance at a time – please press
“Save” or “Apply” after each instance creation to be able to specify the next instance.
3.1.2. Wireless
3.1.2.1. Basic Settings
!
Wireless Network“Enable” or “Disable” the WiFi of the router. Wireless ModeAP, Client, Adhoc, Repeater, Repeater Bridge. Wireless Network Mode MixedSupport 802.11b, 802.11g, 802.11n wireless devices.
! ! ! !
5"!
BG-MixedSupport 802.11b, 802.11g wireless devices. B-onlyOnly supports the 802.11b standard wireless devices. G-onlyOnly supports the 802.11g standard wireless devices. NG-MixedSupport 802.11g, 802.11n wireless devices. N-onlyOnly supports the 802.11g standard wireless devices.
8021.11n Transmission ModeIn the wireless network mode "N-only", you
can select:
Greenfield: If no other WiFi coverage is in the area, this mode will increase throughput. However, when this mode is used where other WiFi is present, throughput will decrease.
Mixed:When other WiFi coverage is in the area, this mode reduces
errors. However, when used where no other WiFi is available, this decreases throughput. Wireless Network Name(SSID): The SSID is the network name shared among all devices in a wireless network. The SSID must be identical for all devices in the wireless network. It is case-sensitive and must not exceed 32 alphanumeric characters, which may be any keyboard character. Make sure this setting is the same for all devices in your wireless network. Wireless Channel:A total of 1-13 channels to choose more than one
wireless device environment, please try to avoid using the same channel with other devices.
Channel Width:20MHZ and 40MHZ。 Extension Channel:Channel for 40MHZ, you can choose upper or lower. Wireless SSID Broadcast
EnableSSID is announced and advertised by the router DisableSSID is not advertised – you cannot “browse” this network to
connect, you must know it exists.
Network Configuration BridgedBridge to the router, under normal circumstances, please
select the bridge.
Unbridged:There is no bridge to the router, IP addresses need to
manually configure.
! ! ! !
5#!
!
Virtual Interfaces:Click Add to add a virtual interface. Add successfully, click on the remove, you can remove the virtual interface
!
AP Isolation:This setting isolates wireless clients so access to and from
other wireless clients are stopped.
Note:Save your changes, after changing the "Wireless Mode", "Wireless
Network Mode", "wireless width", "broadband" option, please click on this button, and then configure the other options.
!
3.1.2.2. Wireless Security
Wireless security options used to configure the security of your wireless network. This route is a total of seven kinds of wireless security mode. Disabled by default, not safe mode is enabled. Such as changes in Safe Mode, click Apply to take effect immediately.
!
! ! ! !
5$!
!
WEP:Is a basic encryption algorithm is less secure than WPA. Use of WEP
is discouraged due to security weaknesses, and one of the WPA modes should be used whenever possible. Only use WEP if you have clients that can only support WEP (usually older, 802.11b-only clients).
Authentication TypeOpen or shared key Default Transmit KeySelect the key form Key 1 - Key 4 key. EncryptionThere are two levels of WEP encryption, 64-bit (40-bit) and
128-bit. To utilize WEP, select the desired encryption bit, and enter a passphrase or up to four WEP key in hexadecimal format. If you are using 64-bit (40-bit), then each key must consist of exactly 10 hexadecimal characters or 5 ASCII characters. For 128-bit, each key must consist of exactly 26 hexadecimal characters. Valid hexadecimal characters are "0"-"9" and "A"-"F". ASCII/HEX: ASCII, the keys is 5 bit ASCII characters/13bit ASCII characters. HEX, the keys is 10bit/26 bit hex digits.
PassphraseThe letters and numbers used to generate a key. Key1-Key4Manually fill out or generated according to input the pass
phrase.
! ! ! !
55!
!
WPA Personal/WPA2 Personal/WPA2 Person Mixed:TKIP/AES/TKIP+AESdynamic encryption keys. TKIP + AES, self-
applicable TKIP or AES. WPA Person Mixed, allows WPA Personal and WPA2 Personal client mix. WPA Shared Key:Between 8 and 63 ASCII character or hexadecimal digits. Key Renewal Interval(in seconds):1-99999。
!
WPA Enterprise/WPA2 Enterprise/WPA2 Enterprise Mixed: WPA Enterprise uses an external RADIUS server to perform user authentication.
WPA Algorithms: AES/TKIP/TPIP+AES. Radius Auth Sever Address:The IP address of the RADIUS server. Radius Auth Server Port:The RADIUS Port (default is 1812)。 Radius Auth Shared Secret:The shared secret from the RADIUS server。 Key Renewal Interval(in seconds): 1-99999
! ! ! !
56!
!
802.1x: 802.1x for user to connect to a wireless access point and cable converter to provide the certification. It will limit without obtaining the user credentials to connect to the Internet, credentials - for example, a separate server authentication user name and password. Peap: PEAP (Protected Extensible Authentication Protocol) is a version of EAP, the authentication protocol used in wireless networks and Point-to­Point connections. PEAP is designed to provide more secure authentication for 802.11 WLANs (wireless local area networks) that support 802.1X port access control. Here is PEAP-EAP-MS-CHAPv2.
1. Enter the User.
2. Enter the Password. TTLS: TTLS uses the TLS channel to exchange "attribute-value pairs" (AVPs), much like RADIUS. (In fact, the AVP encoding format is very similar to RADIUS.) The general encoding of information allows a TTLS server to validate AVPs against any type of authentication mechanism. TTLS implementations today support all methods defined by EAP, as well as several older methods (CHAP, PAP, MS-CHAP and MS-CHAPv2). TTLS can easily be extended to work with new protocols by defining new attributes to support new protocols.
1. Enter the User.
2. Enter the Password.
! ! ! !
57!
3. Enter the Public Server Certificate.
(
3.1.2.3. Wireless MAC Filter
The Wireless MAC Filter allows you to control which wireless-equipped PCs may or may not communicate with the router depending on their MAC addresses. For information how to get MAC addresses from Windows-PCs, see MAC Address Cloning for detailed instructions
!
Use Filter:Disabled by default. Select Enable to open the Wireless MAC Filter Filter Mode
Prevent client listed from accessing the wireless network:”blacklist” mode – listed devices are prevented from accessing
via WiFi, all other devices are allowed access. Permit only client listed to accessing the wireless network”whitelist”
mode – only listed devices can access the WiFi, all other devices are denied access
You can edit (add, remove etc) device MAC addresses by clicking the “Edit MAC Filter List” button.
!
! ! ! !
58!
3.1.2.4. Advanced Settings
The Wireless Advanced Settings screen allows you to customize data
transmission settings. In most cases, these setting can be left at the defaults
!
Basic Rate:The default value is set to Default. Depending on the wireless
mode you have selected, a default set of supported data rates will be selected. The default setting will ensure maximum compatibility with all devices. You may also choose to enable all data rates by selecting ALL. For compatibility with older Wireless-B devices, select 1-2Mbps. MIMO-Transmission Fixed Rate:The default setting is Auto. The range is
from 13.5 to 270Mbps. The rate of data transmission should be set depending on the speed of your wireless network. You can select from a range of transmission speeds, or keep the default setting, Auto, to have the router automatically use the fastest possible data rate and enable
! ! ! !
59!
the Auto-Fallback feature. Auto-Fallback will negotiate the best possible connection speed between the router and a wireless client Transmission Fixed Rate:The default setting is Auto. The range is from 1
to 54Mbps. The rate of data transmission should be set depending on the speed of your wireless network. You can select from a range of transmission speeds, or keep the default setting, Auto, to have the router automatically use the fastest possible data rate and enable the Auto­Fallback feature. Auto-Fallback will negotiate the best possible connection speed between the router and a wireless client. CTS Protection ModeThe default value is disabled. When set to Auto, a
protection mechanism will ensure that your Wireless-B devices will connect to the Wireless-G router when many Wireless-G devices are present. However, performance of your Wireless-G devices may be decreased.
Frame Burst:The default value is disabled. Frame burst allows packet
bursting which will increase overall network speed though this is only recommended for approx 1-3 wireless clients, Anymore clients and there can be a negative result and throughput will be affected.
Beacon Interval:The default value is 100. Enter a value between 1 and
65,535 milliseconds. The Beacon Interval value indicates the frequency interval of the beacon. A beacon is a packet broadcast by the router to synchronize the wireless network. 50 is recommended in poor reception.
DTIM Interval:The default value is 1. This value, between 1 and 255,
indicates the interval of the Delivery Traffic Indication Message (DTIM). A DTIM field is a countdown field informing clients of the next window for listening to broadcast and multicast messages. When the router has buffered broadcast or multicast messages for associated clients, it sends the next DTIM with a DTIM Interval value. Its clients hear the beacons and awaken to receive the broadcast and multicast messages.
Fragmentation ThresholdThis value should remain at its default setting
of 2346. The range is 256-2346 bytes. It specifies the maximum size for a packet before data is fragmented into multiple packets. If you experience a high packet error rate, you may slightly increase the Fragmentation Threshold. Setting the Fragmentation Threshold too low may result in poor network performance. Only minor modifications of this value are recommended.
! ! ! !
5:!
RTS Threshold:This value should remain at its default setting of 2347. The
range is 0-2347 bytes. Should you encounter inconsistent data flow, only minor modifications are recommended. If a network packet is smaller than the preset RTS threshold size, the RTS/CTS mechanism will not be enabled. The router sends Request to Send (RTS) frames to a particular receiving station and negotiates the sending of a data frame. After receiving an RTS, the wireless station responds with a Clear to Send (CTS) frame to acknowledge the right to begin transmission.
Max Associated Clients1-128.
AP IsolationThe default value is Off. This setting isolates wireless clients
so access to and from other wireless clients are stopped.
TX Antenna/ RX Antenna:Values are Auto, Left, Right, default value is
Auto. This is used in conjunction with external antennas to give them optimum performance. On some router models left and right antennas may be reversed depending on you point of view. Preamble:Values are Long and Short, default value is Long. If your
wireless device supports the short preamble and you are having trouble getting it to communicate with other 802.11b devices, make sure that it is set to use the long preamble. Wireless GUI Access: The default value is Enabled. The setting allows access to the routers setup (GUI) from wireless clients. Disable this if you wish to block all wireless clients from accessing the setup pages.
!
Radio Time Restrictions: The Radio Times Restriction facility constitutes a time switch for the radio. By default, the time switch is not active and the WLAN is permanently on. Enable the time switch, if you want to turn off the WLAN during some hours of the day. Hours during which the WLAN is on are marked in green, while red indicates that the radio is off. Clicking on the respective hour toggles between on and off.
! ! ! !
6=!
!
Wireless Multimedia Support Settings: Enable support of Wi-Fi Multimedia feature. Configuring QoS options consists of setting parameters on existing queues for different types of wireless traffic. You can configure different minimum and maximum wait times for the transmission of packets in each queue based on the requirements of the media being sent. Queues automatically provide minimum transmission delay for Voice, Video, multimedia, and mission critical applications, and rely on best-effort parameters for traditional IP data No-Acknowledgement: This refers to the acknowledge policy used at the MAC level. Enabling no-acknowledgement can result in more efficient throughput but higher error rates in a noisy Radio Frequency (RF) environment EDCA AP Parameters (AP to Client): This affects traffic flowing from the access point to the client station EDCA STA Parameters (Client to AP): This affects traffic flowing from the client station to the access point.
Background: Priority is low.
! ! ! !
6"!
High throughput. Bulk data that requires maximum throughput and is not time-sensitive is sent to this queue (FTP data, for example).
Best Effort: Priority is Medium.
Medium throughput and delay. Most traditional IP data is sent to this queue.
Video:Priority is High.
Minimum delay. Time-sensitive video data is automatically sent to this queue.
Voice:Priority is High.
Time-sensitive data like VoIP and streaming media are automatically sent to this queue.
CWmin: Minimum Contention Window. This parameter is input to the algorithm that determines the initial random backoff wait time ("window") for retry of a transmission. The value specified here in the Minimum Contention Window is the upper limit (in milliseconds) of a range from which the initial random backoff wait time is determined.
The first random number generated will be a number between 0 and the number specified here. If the first random backoff wait time expires before the data frame is sent, a retry counter is incremented and the random backoff value (window) is doubled. Doubling will continue until the size of the random backoff value reaches the number defined in the Maximum Contention Window. Valid values for the "cwmin" are 1, 3, 7, 15, 31, 63, 127, 255, 511, or 1024. The value for "cwmin" must be lower than the value for "CWmax".
Cmax:Maximum Contention Window. The value specified here in the
Maximum Contention Window is the upper limit (in milliseconds) for the doubling of the random backoff value. This doubling continues until either the data frame is sent or the Maximum Contention Window size is reached. Once the Maximum Contention Window size is reached, retries will continue until a maximum number of retries allowed is reached. Valid values for the "cwmax" are 1, 3, 7, 15, 31, 63, 127, 255, 511, or 1024. The value for "cwmax" must be higher than the value for "CWmin".
AIFSN:The Arbitration Inter-Frame Spacing Number specifies a wait time
(in milliseconds) for data frames.
! ! ! !
6#!
TXOP(b)/ TXOP(a/g):Transmission Opportunity for "a" "b" and "g" modes
is an interval of time when a WME AP has the right to initiate transmissions onto the wireless medium (WM). This value specifies (in milliseconds) the Transmission Opportunity (TXOP) for AP; that is, the interval of time when the WMM AP has the right to initiate transmissions on the wireless network.
3.1.2.5. WDS
WDS (Wireless Distribution System) is a Wireless Access Point mode that enables wireless bridging in which WDS APs communicate only with each other only (without allowing for wireless clients or stations to access them), and/or wireless repeating in which APs communicate both with each other and with wireless stations (at the expense of half the throughput). This firmware currently supports one types of WDS, LAN.
!
.,3O;B8"(HC4(
-XFM!FM!EXO!OHMFOMEY!HGN!TQRROGEIV!SCME!TCSSCGY!EVDO!C]!*3%!QMON!]CR!IFG`FG\!'&ZMK!
,E!FM!UORV!MFSDIO!EC!MOEQD!HGN!RO^QFROM!GC!O[ERH!RCQEFG\!DRCECTCIM!CR!`GCPION\O!C]!
! ! ! !
6$!
GOEPCR`FG\K!%FSDIV!DQEY!FE!FM!DQRO!LRFN\FG\K!&!MFSDIO!O[HSDIO!PCQIN!LO!O[EOGNFG\!EXO!
RHG\O!C]!HG!O[FMEFG\!&4!LV!MOEEFG\!QD!H!#GN!&4!HGN!TCGGOTEFG\!FE!EC!EXO!]FRME!QMFG\!'&ZW
EVDO!*3%K!
"K!2H`O!MQRO!VCQ!HRO!QMFG\!EXO!MHSO!*FROIOMM!%OEEFG\M!CG!LCEX!RCQEORM!HGN!GCE!HGV!
EVDO!C]!*FROIOMM!%OTQRFEVK!
#K!.FGN!H!NRCDWNCPG!MOIOTEFCG!EXHE!XHM!3FMHLION!NFMDIHVONK!?IFT`!EXFM!HGN!MOIOTE!'&ZY!NC!
EXO!MHSO!CG!EXO!CEXOR!RCQEORK!
$K!/G!EXO!]FRME!RCQEORY!EH`O!EXO!GQSLORM!GO[E!EC!*FROIOMM!2&?!HGN!OGEOR!EXOS!FG!EC!EXO!
MOTCGN!RCQEOR!CG!EXO!MHSO!IFGO!EXHE!VCQ!MOE!EC!h'&ZhK!
5K!-H`O!EXO!*FROIOMM!2&?!]RCS!EXO!MOTCGN!RCQEOR!HGN!OGEOR!EXOS!CG!EXO!]FRME!RCQEORK!
6K!?XOT`!]CR!HGV!EVDFG\!ORRCRM!HGN!EXOG!TIFT`!%HUO!%OEEFG\MK!
7K!JC!EC!EXO!*FROIOMM!%EHEQM!DH\OK!kCQ!MXCQIN!MOO!*3%!'FG`!HGN!EXO!*FROIOMM!2&?!C]!
EXO!CEXOR!RCQEOR!IFMEONY!PFEX!H!MF\GHI!ROHNFG\K!,]!EXO!MF\GHI!FM!h=N+Sh!EXOG!EXORO!SHV!LO!
MCSOEXFG\!PRCG\K!?XOT`!VCQR!HGEOGGH!TCGGOTEFCGM!HGN!TCG]F\QRHEFCG!MOEEFG\MY!HGN!ERV!
H\HFGK!
8K!/GTO!VCQ!XHUO!H!\CCN!MF\GHI!;W8=N+S!EC!W$=N+SY!W8=N+S!LOFG\!ICPOME<Y!VCQ!THG!
TXHG\O!EXO!,GEORGOE!?CGGOTEFCG!-VDO!CG!EXO!+HMFT!%OEQD!DH\O!C]!EXO!MOTCGN!RCQEOR!EC!
3FMHLION!HGN!MOE!EXO!Gateway!EC!EXO!'&Z!,4!&NNROMM!C]!EXO!]FRME!RCQEORK!kCQ!THG!GCP!
RQG!GCRSHI!EOMEM!EC!TXOT`!F]!VCQ!HRO!TCGGOTEON!;IF`O!DFG\<K!
.U7B(HC4P!3O]HQIE!FM!NFMHLION*(
3&;"*3%!FM!CGIV!HUHFIHLIO!FG!&4!SCNOK!&IMC!*FROIOMM!OGTRVDEFCG!*4&#!HGN!*FROIOMM!
GOEPCR`!SCNO!+W/GIV!HRO!GCE!MQDDCREON!QGNOR!*3%K!
!
3.1.3. Services
3.1.3.1. Services
3@?4!?IFOGE!
!
4";(!"'<ν$$P(EXO!3@?4!MORUOR!THG!HQECSHEFTHIIV!FNOGEF]V!EXO!MDOTF]FT!FNOGEF]FOR!C]!
EXO!TCSDQEOR!RQGGFG\!TOREHFG!CDORHEFG\!MVMEOSM!EC!MOGNY!MQTX!HM!EXO!3@?4!MORUOR!THG!
FNOGEF]V!EXO!3@?4!TIFOGE!RQGGFG\!EXO!CDORHEFG\!MVMEORS!FM!*FGNCPM!#===!CR!*FGNCPM!
! ! ! !
65!
:9K!,NOGEF]FTHEFCG!FNOGEF]FOR!3@?4!CDEFCG!THG!LO!HMMF\GON!EC!3@?4!TIFOGEM!LHMON!CG!
MDOTF]FT!CDORHEFG\!MVMEOSK!
@"V6"$;(IGP(,4!HNNROMM!C]!EXO!RO^QOME!
!
! ! ! !
66!
CL2G(4"#A"#(
3@?4N!HMMF\GM!,4!HNNROMMOM!EC!QMORM!ICTHI!NOUFTOMK!*XFIO!EXO!SHFG!TCG]F\QRHEFCG!FM!CG!
EXO!MOEQD!DH\O!QMORM!THG!DRC\RHS!MCSO!GF]EV!MDOTFHI!]QGTEFCGM!XOROK!
!
J$"(3!@,D(:&#(95%"';(5"7$"(C-P(-XO!3@?4!MORUOR!PFII!HEEOSDE!EC!HMMF\G!EXO!MHSO!,4!
HNNROMM!EC!OUORV!TIFOGE!FE!EHI`M!EC!;LHMON!CG!2&?!HNNROMM<K!%OEEFG\!EXFM!CDEFCG!MHUOM!
2&?>,4!HMMF\GSOGEM!LOEPOOG!ROLCCEM!C]!EXO!RCQEORK!
J$"<(<&K7%'P(QMORM!THG!MOIOTE!XORO!PXFTX!NCSHFG!EXO!3@?4!TIFOGEM!MXCQIN!\OE!HM!EXOFR!
ICTHI!NCSHFGK!-XFM!THG!LO!EXO!*&Z!NCSHFG!MOE!CG!EXO!%OEQD!MTROOG!CR!EXO!'&Z!NCSHFG!
PXFTX!THG!LO!MOE!XOROK!
.,3(C&K7%'P(QMORM!THG!NO]FGO!XORO!EXOFR!ICTHI!'&Z!NCSHFG!PXFTX!FM!QMON!HM!ICTHI!
NCSHFG!]CR!3Z%SHM^!HGN!3@?4!MORUFTO!F]!TXCMO!HLCUOK!
4;7;%9(."7$"$P(F]!QMORM!PHGE!EC!HMMF\G!TOREHFG!XCMEM!H!MDOTF]FT!HNNROMM!EXOG!EXOV!THG!
NO]FGO!EXOS!XOROK!-XFM!FM!HIMC!EXO!PHV!EC!HNN!XCMEM!PFEX!H!]F[ON!HNNROMM!EC!EXO!RCQEORtM!
ICTHI!3Z%!MORUFTO!;3Z%SHM^<K!
,<<%;%&'75(CL2G<(08;%&'$P(MCSO!O[ERH!CDEFCGM!QMORM!THG!MOE!LV!OGEORFG\!EXOS!
!
! ! ! !
67!
C34D7$V(
3Z%SHM^!FM!H!ICTHI!3Z%!MORUORK!,E!PFII!ROMCIUO!HII!XCME!GHSOM!`GCPG!EC!EXO!RCQEOR!]RCS!
NXTD!;NVGHSFT!HGN!MEHEFT<!HM!POII!HM!]CRPHRNFG\!HGN!THTXFG\!3Z%!OGERFOM!]RCS!ROSCEO!
3Z%!MORUORMK!Local+DNS!OGHLIOM!3@?4!TIFOGEM!CG!EXO!'&Z!EC!ROMCIUO!MEHEFT!HGN!NVGHSFT!
3@?4!XCMEGHSOMK!
!
Local&DNS:!OGHLIOM!3@?4!TIFOGEM!CG!EXO!'&Z!EC!ROMCIUO!MEHEFT!HGN!NVGHSFT!3@?4!
XCMEGHSOM!
3&(C34(@"M%'<P(PXOG!OGHLIONY!FE!THG!
DROUOGE!HG!O[EORGHI!HEEHT`OR!EC!HTTOMM!EXO!RCQEORtM!FGEORGHI!*OL!FGEOR]HTOK!,E!FM!H!
MOTQRFEV!SOHMQRO!
,<<%;%&'75(C34D7$V(08;%&'$P(MCSO!O[ERH!CDEFCGM!QMORM!THG!MOE!LV!OGEORFG\!EXOS!FG!
&NNFEFCGHI!3Z%!/DEFCGMK!
1&#("W7K85"P((
$;7;%9(755&97;%&'P(NXTDW
XCMEu&+)?3)(.)"")##)$$Y":#K"79K=K"=YSVXCMEYSVXCMEKNCSHFGY"#X!
K7W(5"7$"('6KM"#P!NXTDWIOHMOWSH[u#!
CL2G($"#A"#(IG(#7'N"P!NXTDWRHG\Ou":#K"79K=K""=Y":#K"79K=K"""Y"#X!
!
43DG(
!
.&97;%&'P(O^QFDSOGE!ICTHEFCG!
! ! ! !
68!
2&';79;P!TCGEHTE!EXFM!O^QFDSOGE!SHGH\OSOGE!
37K"P!NOUFTO!GHSO!
@0(2&KK6'%;BP(%Z24!0/!TCSSQGFEV!GHSOY!EXO!NO]HQIE!FM!DQLIFTY!/GIV!EC!ROHNK!
@H(2&KK6'%;BP(%Z24!0*!TCSSQGFEV!GHSOY!EXO!NO]HQIE!FM!DRFUHEOY!0OHNWPRFEO!
DORSFMMFCGM!
!
44LC(
(GHLIFG\!%%@N!HIICPM!QMORM!EC!HTTOMM!EXO!'FGQ[!/%!C]!EXOFR!RCQEOR!PFEX!HG!%%@!TIFOGE!
!
44L(+2G(1&#=7#<%'NP(OGHLIO!CR!NFMHLIO!EC!MQDDCRE!EXO!-?4!]CRPHRNFG\!
G7$$=&#<(.&N%'P(HIICPM!IC\FG!PFEX!EXO!RCQEOR!DHMMPCRN!;QMORGHSO!FM!admin<!
G&#;P(DCRE!GQSLOR!]CR!%%@N!;NO]HQIE!FM!##<!
,6;>&#%U"<(T"B$P(XORO!QMORM!DHMEO!EXOFR!DQLIFT!`OVM!EC!OGHLIO!`OVWLHMON!IC\FG!;SCRO!
MOTQRO!EXHG!H!MFSDIO!DHMMPCRN<!
!
4B$;"K(5&N(
(GHLIO!%VMIC\N!EC!THDEQRO!MVMEOS!SOMMH\OMK!+V!NO]HQIE!EXOV!PFII!LO!TCIIOTEON!FG!EXO!
ICTHI!]FIO!>UHR>IC\>SOMMH\OMK!-C!MOGN!EXOS!EC!HGCEXOR!MVMEOSY!OGEOR!EXO!,4!HNNROMM!C]!H!
ROSCEO!MVMIC\!MORUORK!
!
4B$5&N(06;(D&<"P(EPC!IC\!SCNO!
3";P(EXO!IC\!FG]CRSHEFCG!CQEDQE!EC!H!MVMIC\!MORUOR!
2&'$&5"P(EXO!IC\!FG]CRSHEFCG!CQEDQE!EC!TCGMCIO!DCRE!
@"K&;"(4"#A"#P(F]!TXCCMO!GOE!SCNOY!QMORM!MXCQIN!FGDQE!H!MVMIC\!MORUORmM!,4!&NNROMM!
HGN!RQG!H!MVMIC\!MORUOR!DRC\RHS!CG!FEK!
! ! ! !
69!
!
+"5'";(
!
+"5'";P(OGHLIO!H!EOIGOE!MORUOR!EC!TCGGOTE!EC!EXO!RCQEOR!PFEX!EOIGOEK!-XO!QMORGHSO!FM!
admin!HGN!EXO!DHMMPCRN!FM!EXO!RCQEORtM!DHMMPCRNK!
3&;"P(,]!QMORM!QMO!EXO!RCQEOR!FG!HG!QGERQMEON!OGUFRCGSOGE!;]CR!O[HSDIO!HM!H!DQLIFT!
XCEMDCE<Y!FE!FM!MERCG\IV!ROTCSSOGNON!EC!QMO!%%@N!HGN!NOHTEFUHEO!EOIGOEK!
!
H,3(+#7::%9(2&6';"#(
!
+;#7::(C7"K&'P(OGHLIO!CR!NFMHLIO!PHG!ERH]]FT!TCQGEOR!]QGTEFCG!
!
3.1.3.2. PPPoE Server
GGG&/(4"#A"#(
!
@GOGGG&/4"#A"#(C7"K&'P(OGHLIO!CR!NFMHLIO!444C(!MORUOR!!
!
@GOGGG&/4"#A"#(08;%&'$(
! ! ! !
6:!
!
GGG0/(4"#A"#(I':"#:79"P(444C(!MORUOR!FGEOR]HTO!EC!EXO!CQEMFNOY!CGIV!EC!MQDDCRE!EXO!'&Z!
DCRE!
25%"';(IGX$YP(,4!RHG\O!HMMF\GM!EC!EXO!444C(!TIFOGE!FG!EXO!]CRSHE)![[[K[[[K[[[K[[[W[[[!
C":57;"(2&K8#"$$%&'P(OGHLIO!CR!NFMHLIO!3O]IHEO!?CSDROMMFCG!
-4C(2&K8#"$$%&'P(OGHLIO!CR!NFMHLIO!+%3!?CSDROMMFCG!
.Z4(4;79(2&K8#"$$%&'P(OGHLIO!CR!NFMHLIO!'v%!%EHT!?CSDROMMFCG!
DGG2(2&K8#"$$%&'P(OGHLIO!CR!NFMHLIO!244?!?CSDROMMFCG!
DGG/(GGG&/(/'9#B8;%&'P(OGHLIO!CR!NFMHLIO!244(!444C(!(GTRVDEFCG!
4"$$%&'(.%K%;(8"#(D,2P(NO]HQIE!FM!"=!
.2G(/9>&(I';"#A75P(EFSO!FGEORUHI!EC!MOE!EXO!EXO!'?4!THIFLRHEFCG!DXHMO!ROMDCGMO!
.2G(/9>&(17%56#"P(ROIOHMO!444C(!CUOR!]HFIQRO!EFSOMY!EXO!444C(!TIFOGE!PFII!GOON!
EC!ROTCGGOTE!
I<5"(+%K"P(MOE!!FNIO!EFSOY!FNIO!EFSO!HE!EXO!HDDRCDRFHEO!EFSO!EC!ROIOHMO!EXO!444C(!
,6;>"';%97;%&'P(FGTIQNFG\!ICTHI!HGN!0HNFQM!;0OSCEO!&QEXOGEFTHEFCG!3FHI!,G!1MOR<!
!
.&975(J$"#(D7'7N"K"';2L,G(4"9#";$(
!
J$"#P(MOE!444/(!TIFOGEtM!QMOR!GHSO!
! ! ! !
7=!
G7$$=&#<P(MOE!444/(!TIFOGEtM!QMOR!DHMMPCRN!
IG(,<<#"$$P(MOE!444/(!TIFOGEtM!QMOR!,4!HNNROMM!
/'7M5"P(OGHLIO!CR!NFMHLIO!EXFM!MOEEFG\!
!
@7<%6$(
!
@7<%6$(4"#A"#(IGP(MOE!EXO!0OSCEO!&QEXOGEFTHEFCG!3FHI!,G!1MORW%ORUOR!,4!
@7<%6$(,6;>"';%97;%&'(G&#;P(MOE!EXO!0OSCEO!&QEXOGEFTHEFCG!3FHI!FG!1MORW
&QEXOGEFTHEFCG!4CRE!
@7<%6$(,99&6';%'N(G&#;P(MOE!EXO!0OSCEO!&QEXOGEFTHEFCG!3FHI!FG!1MORW&TTCQGEFG\!4CRE!
@7<%6$(4>7#"<(T"BP(ERHGMHTEFCGM!LOEPOOG!EXO!TIFOGE!HGN!0&3,1%!HTTCQGEFG\!MORUOR!HRO!
HQEXOGEFTHEON!EXRCQ\X!EXO!QMO!C]!H!MXHRON!MOTROEY!PXFTX!FM!GOUOR!MOGE!CUOR!EXO!
GOEPCR`K!
!
! ! ! !
7"!
3.1.4. VPN
3.1.4.1. PPTP
GG+G(4"#A"#(
!
-#&7<97$;($688&#;P!OGHLIO!CR!NFMHLIO!LRCHNTHME!MQDDCRE!C]!44-4!MORUOR!
1 "(DGG/(/'9#B8;%&'P!OGHLIO!C]!NFMHLIO!]CRTO!244(!OGTRVDEFCG!C]!44-4!NHEH!
C34[RC34)RHI34[RHI34)P!MOE!3Z%">3Z%#>*,Z%">*,Z%#!
4"#A"#(IGP!FGDQE!,4!HNNROMM!C]!EXO!RCQEOR!HM!44-4!MORUORY!NF]]OR!]RCS!'&Z!HNNROMM!
25%"';(IGX$YP!,4!HNNROMM!HMMF\GM!EC!EXO!TIFOGEY!EXO!]CRSHE!FM![[[K[[[K[[[K[[[W[[[!
2L,G(4"9#";$P!QMOR!GHSO!HGN!DHMMPCRN!C]!EXO!TIFOGE!QMFG\!44-4!MORUFTO!
3&;"P!TIFOGE!,4!SQME!LO!NF]]OROGE!PFEX!,4!HMMF\GON!LV!RCQEOR!3@?4K!
!!!!!!!-XO!]CRSHE!C]!?@&4!%OTROEM!FM!QMOR!w!DHMMPCRN!wK!
!
! ! ! !
7#!
GG+G(25%"';(
!
4"#A"#(IG(&#(C34(37K"P(44-4!MORUORmM!,4!&NNROMM!CR!3Z%!ZHSO!
@"K&;"(46M'";P(EXO!GOEPCR`!C]!EXO!ROSCEO!44-4!MORUOR!
@"K&;"(46M'";(D7$\P(MQLGOE!SHM`!C]!ROSCEO!44-4!MORUOR! DGG/(/'9#B8;%&'P(OGHLIO!CR!NFMHLIO!2FTRCMC]E!4CFGEWECW4CFGE!(GTRVDEFCG!
D+JP(SH[FSQS!-RHGMSFMMFCG!1GFE!
D@JP(SH[FSQS!0OTOFUO!1GFE!
3,+P(GOEPCR`!&NNROMM!-RHGMIHEFCG!
J$"#(37K"P(QMOR!GHSO!EC!IC\FG!44-4!%ORUORK!
G7$$=&#<P(DHMMPCRN!EC!IC\!FGEC!44-4!%ORUORK!
!
! ! ! !
7$!
3.1.4.2. L2TP
.)+G(4"#A"#(
!
1 "(DGG/(/'9#B8;%&'P!OGHLIO!CR!NFMHLIO!]CRTO!244(!OGTRVDEFCG!C]!'#-4!NHEH!
4"#A"#(IGP!FGDQE!,4!HNNROMM!C]!EXO!RCQEOR!HM!44-4!MORUORY!NF]]OR!]RCS!'&Z!HNNROMM!
25%"';(IGX$YP!,4!HNNROMM!HMMF\GM!EC!EXO!TIFOGEY!EXO!]CRSHE!FM![[[K[[[K[[[K[[[W
[[[K[[[K[[[K[[[!
2L,G(4"9#";$P!QMOR!GHSO!HGN!DHMMPCRN!C]!EXO!TIFOGE!QMFG\!'#-4!MORUFTO!
3&;"P!TIFOGE!,4!SQME!LO!NF]]OROGE!PFEX!,4!HMMF\GON!LV!RCQEOR!3@?4K!
!!!!!!!-XO!]CRSHE!C]!?@&4!%OTROEM!FM!QMOR!w!DHMMPCRN!wK!
!
! ! ! !
75!
.)+G(25%"';(
!
F7;"=7BX.)+G(4"#A"#YP('#-4!MORUORmM!,4!&NNROMM!CR!3Z%!ZHSO!
@"K&;"(46M'";P(EXO!GOEPCR`!C]!ROSCEO!44-4!MORUOR!
@"K&;"(46M'";(D7$\P(MQLGOE!SHM`!C]!ROSCEO!44-4!MORUOR!
DGG/(/'9#B8;%&'P(OGHLIO!CR!NFMHLIO!2FTRCMC]E!4CFGEWECW4CFGE!(GTRVDEFCG!
D+JP(SH[FSQS!ERHGMSFMMFCG!QGFE!
D@JP(SH[FSQS!ROTOFUO!QGFE!
3,+P(GOEPCR`!HNNROMM!ERHGMIHEFCG!
J$"#(37K"P!QMOR!GHSO!EC!IC\FG!'#-4!%ORUOR!
G7$$=&#<P(DHMMPCRN!EC!IC\FG!'#-4!%ORUOR!
@"V6%#"(2L,GP(OGHLIO!CR!NFMHLIO!MQDDCRE!TXHD!HQEXOGEFTHEFCG!DRCECTCI!
@":6$"(G,GP(OGHLIO!CR!NFMHLIO!RO]QMO!EC!MQDDCRE!EXO!DHD!HQEXOGEFTHEFCG!
@"V6%#"(,6;>"';%97;%&'P(OGHLIO!CR!NFMHLIO!MQDDCRE!HQEXOGEFTHEFCG!DRCECTCI!
!
! ! ! !
76!
3.1.4.3. OPENVPN
0G/3!G3(4"#A"#(
!
4;7#;(+B8"P!*&Z!14WWWWMEHRE!H]EOR!CGWIFGOY!%VMEOSWWWWMEHRE!PXOG!LCCE!QD!
!
2&':%N(A%7P(J1,WWWW4H\O!TCG]F\QRHEFCGY!?CG]F\!.FIOWWWWTCG]F\!.FIO!TCG]F\QRHEFCG!
4"#A"#(K&<"P!0CQEOR!;-1Z<WRCQEO!SCNOY!+RFN\O!;-&4<WWWWLRFN\O!SCNO!
@&6;"#(X+J3YP(
!
3";=&#\P(GOEPCR`!HNNROMM!HIICPON!LV!/4(Zf4Z!MORUOR!
3";K7$\P!GOESHM`!HIICPON!LV!/4(Zf4Z!MORUOR!
-#%<N"(X+,GYP(
!
CL2GOG#&WB(K&<"P(OGHLIO!CR!NFMHLIO!3@?4W4RC[V!SCNO!
G&&5($;7#;(IGP(DCCI!MEHRE!,4!C]!EXO!TIFOGE!HIICPON!LV!/4(Zf4Z!MORUOR!
G&&5("'<(IGP!DCCI!OGN!,4!C]!EXO!TIFOGE!HIICPON!LV!/4(Zf4Z!MORUOR!
F7;"=7BP!EXO!\HEOPHV!C]!EXO!TIFOGE!HIICPON!LV!/4(Zf4Z!MORUOR!
3";K7$\P(GOESHM`!C]!EXO!TIFOGE!HIICPON!LV!/4(Zf4Z!MORUOR!
!
G&#;P(IFMEOG!DCRE!C]!/4(Zf4Z!MORUOR!
+6''"5(G#&;&9&5P(1?4!CR!-?4!C]!/4(Zf4Z!EQGGOI!DRCECTCI!
! ! ! !
77!
/'9#B8;%&'(2%8>"#P(+ICP]FMX!?+?&(%W"#9!?+?&(%W":#!?+?&(%W#67!?+?&(%W
6"#!?+?!
L7$>(,5N&#%;>KP(@HMX!HI\CRFEXS!DRCUFNOM!H!SOEXCN!C]!^QFT`!HTTOMM!EC!NHEHY!FGTIQNFG\! %@&"%@C%@&6"#236!
,<A7'9"<(08;%&'$(
!
J$"(.Z0(2&K8#"$$%&'P!OGHLIO!CR!NFMHLIO!QMO!'v/!TCSDROMMFCG!]CR!NHEH!ERHGM]OR!
@"<%#"9;(<":765;(F7;"=7BP!OGHLIO!CR!NFMHLIO!RONFROTE!NO]HQIE!\HEOPHV!
,55&=(25%"';(;&(25%"';P(OGHLIO!CR!NFMHLIO!HIICP!TIFOGE!EC!TIFOGE!
,55&=(<685%97;"(9'P(OGHLIO!CR!NFMHLIO!HIICP!NQDIFTHEO!TG!
+J3(D+J(4";;%'NP(MOE!EXO!UHIQO!C]!-1Z!2-1!
+2G(D44P(2%%!C]!-?4!NHEH!
+.4(2%8>"#P(-'%!;-RHGMDCRE!'HVOR!%OTQRFEV<!OGTRVDEFCG!MEHGNHRN!MQDDCREM!&(%W"#9!%@&!
HGN!&(%W#67!%@&!
25%"';(9&''"9;($9#%8;P(NO]FGO!MCSO!TIFOGE!MTRFDE!LV!QMOR!MOI]!
2,(2"#;P(?&!TOREF]FTHEO!
G6M5%9(4"#A"#(2"#;P(MORUOR!TOREF]FTHEO!
! ! ! !
78!
G#%A7;"(4"#A"#(T"BP(EXO!`OV!MOE!LV!EXO!MORUOR!
CL(G/DP(4(2!C]!EXO!MORUOR!
,<<%;%&'75(2&':%NP(HNNFEFCGHI!TCG]F\QRHEFCGM!C]!EXO!MORUOR!
22COC%#(C/1,J.+(:%5"P(CEXOR!]FIO!HDDRCHTXOM!
+.4(,6;>(T"BP(HQEXCRFEV!`OV!C]!-RHGMDCRE!'HVOR!%OTQRFEV!
2"#;%:%97;"(@"A&\"(.%$;P!TCG]F\QRO!MCSO!ROUC`O!TOREF]FTHEOM!
! ! ! !
79!
0G/3!G3(25%"';(
!
4"#A"#(IGR37K"P(,4!HNNROMM!CR!NCSHFG!GHSO!C]!/4(Zf4Z!MORUOR!
G&#;P(IFMEOG!DCRE!C]!/4(Zf4Z!TIFOGE!
+6''"5(C"A%9"P!-1ZWWWW0CQEOR!SCNOY!-&4WWWW+RFN\O!SCNO!
+6''"5(G#&;&9&5P!134!HGN!-?4!DRCECTCI! /'9#B8;%&'(2%8>"#P(+ICP]FMX!?+?&(%W"#9!?+?&(%W":#!?+?&(%W#67!?+?&(%W
6"#!?+?!
L7$>(,5N&#%;>KP(@HMX!HI\CRFEXS!DRCUFNOM!H!SOEXCN!C]!^QFT`!HTTOMM!EC!NHEHY!FGTIQNFG\!
%@&"Y!%@CY!%@&6"#Y!236!
'$2"#;+B8"(A"#%:%97;%&'P(MQDDCRE!GM!TOREF]FTHEO!EVDO!
!
J$"(.Z0(2&K8#"$$%&'P(OGHLIO!CR!NFMHLIO!QMO!'v/!TCSDROMMFCG!]CR!NHEH!ERHGM]OR!
3,+P(OGHLIO!CR!NFMHLIO!Z&-!EXRCQ\X!]QGTEFCG!
! ! ! !
7:!
-#%<N"(+,G(;&(M#]P(OGHLIO!CR!NFMHLIO!LRFN\O!-&4!EC!LR=!
.&975(IG(,<<#"$$P(MOE!,4!HNNROMM!C]!ICTHI!/4(Zf4Z!TIFOGE!
+J3(D+J(4";;%'NP(MOE!2-1!UHIQO!C]!EXO!EQGGOI!
+2G(D44P(SMM!C]!-?4!NHEH!
+.4(2%8>"#P(-'%!;-RHGMDCRE!'HVOR!%OTQRFEV<!OGTRVDEFCG!MEHGNHRN!MQDDCREM!&(%W"#9!%@&!HGN!&(%W#67!
%@&!
+.4(,6;>(T"BP(HQEXCRFEV!`OV!C]!-RHGMDCRE!'HVOR!%OTQRFEV!
,<<%;%&'75(2&':%NP!HNNFEFCGHI!TCG]F\QRHEFCGM!C]!/4(Zf4Z!MORUOR!
G&5%9B(M7$"<(@&6;%'NP(FGDQE!MCSO!NO]FGON!RCQEFG\!DCIFTV!
!
2,(2"#;P(?&!TOREF]FTHEO!
G6M5%9(25%"';(2"#;P(TIFOGE!TOREF]FTHEO!
G#%A7;"(25%"';(T"BP(TIFOGE!`OV!
!
! ! ! !
8=!
3.1.4.4. IPSEC
2&''"9;(4;7;6$(7'<(2&';#&5(
%XCP!,4%(?!TCGGOTEFCG!HGN!MEHEQM!C]!TQRROGE!RCQEOR!CG!,4%(?!DH\OK!
!
37K"P!EXO!GHSO!C]!,4%(?!TCGGOTEFCG!
+B8"P(-XO!EVDO!HGN!]QGTEFCG!C]!TQRROGE!,4%(?!TCGGOTEFCG!
2&KK&'('7K"P!ICTHI!MQLGOEY!ICTHI!HNNROMMY!CDDCMFEO!OGN!HNNROMM!HGN!CDDCMFEO!OGN!
MQLGOE!C]!TQRROGE!TCGGOTEFCG!
4;7;6$P(TCGGOTEFCG!MEHEQM)!TICMONY!GO\CEFHEFG\Y!OMEHLIFMX!
25&$"<P(EXFM!TCGGOTEFCG!NCOM!GCE!IHQGTX!H!TCGGOTEFCG!RO^QOME!EC!CDDCMFEO!OGN!
3"N&;%7;%'NP(EXFM!TCGGOTEFCG!IHQGTX!H!RO^QOME!EC!CDDCMFEO!OGNY!FM!QGNOR!GO\CEFHEFG\Y!
EXO!TCGGOTEFCG!XHM!GCE!LOOG!OMEHLIFMXON!VOE!
/$;7M5%$>P(EXO!TCGGOTEFCG!XHM!LOOG!OMEHLIFMXONY!OGHLION!EC!QMO!EXFM!EQGGOI!
,9;%&'P(EXO!HTEFCG!C]!EXFM!TCGGOTEFCGY!TQRROGE!FM!EC!NOIOEOY!ONFEY!ROTCGGOTE!HGN!OGHLIO!
C"5";"P(EC!NOIOEO!EXO!TCGGOTEFCGY!HIMC!PFII!NOIOEO!,4%(?!F]!,4%(?!XHM!MOE!QD!
/<%;P!EC!ONFE!EXO!TCG]F\QRO!FG]CRSHEFCG!C]!EXFM!TCGGOTEFCGY!ROICHN!EXFM!TCGGOTEFCG!EC!
SH`O!EXO!TCG]F\QRHEFCG!O]]OTE!H]EOR!ONFE!
@"9&''"9;P(EXFM!HTEFCG!PFII!ROSCUO!TQRROGE!EQGGOIY!HGN!ROWIHQGTX!EQGGOI!OMEHLIFMX!
RO^QOME!
/'7M5"P(PXOG!EXO!TCGGOTEFCG!FM!OGHLIOY!FE!PFII!IHQGTX!EQGGOI!OMEHLIFMX!RO^QOME!PXOG!
EXO!MVMEOS!ROLCCE!CR!ROTCGGOTEY!CEXORPFMO!EXO!TCGGOTEFCG!PFII!GCE!NC!FE!
,<<P(EC!HNN!H!GOP!,4%(?!TCGGOTEFCG!
!
,<<(IG4/2(9&''"9;%&'(&#("<%;(IG4/2(9&''"9;%&'(
+B8"P(EC!TXCCMO!,4%(?!SCNO!HGN!ROIOUHGE!]QGTEFCGM!FG!EXFM!DHREY!MQDDCREM!EQGGOI!SCNO!
TIFOGEY!EQGGOI!SCNO!MORUOR!HGN!ERHGM]OR!SCNO!TQRROGEIV!!
(
2&''"9;%&'P(EXFM!DHRE!TCGEHFGM!LHMFT!HNNROMM!FG]CRSHEFCG!C]!EXO!EQGGOI!
! ! ! !
8"!
!
37K"P(EC!FGNFTHEO!EXFM!TCGGOTEFCG!GHSOY!SQME!LO!QGF^QO!
/'7M5"<P!,]!OGHLIOY!EXO!TCGGOTEFCG!PFII!MOGN!EQGGOI!TCGGOTEFCG!RO^QOME!PXOG!FE!FM!
ROLCCE!CR!ROWTCGGOTEFCGY!CEXORPFMO!FE!FM!GC!GOON!F]!NFMHLIO!!
.&975(H,3(I';"#:79"P(ICTHI!HNNROMMM!C]!EXO!EQGGOI!!
@"K&;"(L&$;(,<<#"$$P!,4>NCSHFG!GHSO!C]!OGN!CDDCMFEOq!EXFM!CDEFCG!THG!GCE!]FII!FG!F]!
QMFG\!EQGGOI!SCNO!MORUOR!
.&975(46M'";P(,4%OT!ICTHI!DRCEOTEM!MQLGOE!HGN!MQLGOE!SHM`Y!FKOK!":#K"79K"K=>#5q!EXFM!
CDEFCG!THG!GCE!]FII!FG!F]!QMFG\!ERHGM]OR!SCNO!
@"K&;"(46M'";P(,4%OT!CDDCMFEO!OGN!DRCEOTEM!MQLGOE!HGN!MQLGOE!SHM`Y!
FKOK":#K"79K8K=>#5q!EXFM!CDEFCG!THG!GCE!]FII!FG!F]!QMFG\!ERHGM]OR!SCNO!
.&975(ICP!EQGGOI!ICTHI!OGN!FNOGEF]FTHEFCGY!,4!HGN!NCSHFG!GHSO!HRO!HUHFIHLIO!
@"K&;"(ICP!EQGGOI!CDDCMFEO!OGN!FNOGEF]FTHEFCGY!,4!HGN!NCSHFG!GHSO!HRO!HUHFIHLIO!!
C";"9;%&'P(EXFM!DHRE!TCGEHFGM!TCG]F\QRO!FG]CRSHEFCG!C]!TCGGOTEFCG!NOEOTEFCG!
!
/'7M5"(CGC(C";"9;%&'P(OGHLIO!CR!NFMHLIO!EXFM!]QGTEFCGY!EFT`!SOHGM!OGHLIO!
+%K"(I';"#A75P(MOE!EFSO!FGEORUHI!C]!TCGGOTE!NOEOTEFCG!;343<!
+%K"&6;P!MOE!EXO!EFSOCQE!C]!TCGGOTE!NOEOTEFCG!
,9;%&'P(MOE!EXO!HTEFCG!C]!TCGGOTE!NOEOTEFCG!
,<A7'9"<(4";;%'N$P!EXFM!DHRE!TCGEHFGM!ROIOUHGE!MOEEFG\!C]!,e(Y!(%4Y!GO\CEFHEFCG!SCNOY!
OETK!
! ! ! !
8#!
!
/'7M5"(,<A7'9"<(4";;%'N$P(OGHLIO!EC!TCG]F\QRO!"ME!HGN!#GN!DXHMO!FG]CRSHEFCGY!
CEXORPFMO!FE!!
PFII!HQECSFT!GO\CEFHEFCG!HTTCRNFG\!EC!CDDCMFEO!OGN!
IT/(/'9#B8;%&'P(,e(!DXHMON!OGTRVDEFCG!SCNO!
IT/(I';"N#%;BP(,e(!DXHMON!FGEO\RFEV!MCIQEFCG!
IT/(F#&68;B8"P!3@!O[TXHG\O!HI\CRFEXS!
IT/(.%:";%K"P!MOE!,e(!IF]OEFSOY!TQRROGE!QGFE!FM!XCQRY!EXO!NO]HQIE!FM!=!
/4G(/'9#B8;%&'P((%4!OGTRVDEFCG!EVDO!
/4G(I';"N#%;BP((%4!FGEO\RFEV!MCIQEFCG!
/4G(T"B5%:"P(MOE!(%4!`OVIF]OY!TQRROGE!QGFE!FM!XCQRY!EXO!NO]HQIE!FM!=!
IT/(7NN#"$$%A"(K&<"(755&="<P(GO\CEFHEFCG!SCNO!HNCDE!H\\ROMMFUO!SCNO!F]!EFT`q!FE!FM!
SHFG!
SCNO!F]!GCGWEFT`!
3"N&;%7;"(87B5&7<(9&K8#"$$%&'P(-FT`!EC!OGHLIO!4.%Y!GCGWEFT`!EC!NFHLIO!4.%!
,6;>"';%97;%&'P!TXCCMO!QMO!MXHRO!OGTRVDEFCG!CDEFCG!CR!TOREF]FTHEO!HQEXOGEFTHEFCG!
CDEFCGK!?QRROGE!FM!CGIV!EC!TXCCMO!QMO!MXHRO!OGTRVDEFCG!CDEFCGK!
!!
!
! ! ! !
8$!
3.1.4.5. GRE
J0(!;JOGORFT!0CQEFG\!(GTHDMQIHEFCG<!DRCECTCI!FM!H!GOEPCR`!IHVOR!DRCECTCI!;MQTX!HM!
,4!HGN!,4b<!NHEH!DHT`OEM!HRO!OGTHDMQIHEONY!MC!EXOMO!OGTHDMQIHEON!NHEH!DHT`OEM!EC!
HGCEXOR!GOEPCR`!IHVOR!DRCECTCI!;,4<ERHGMSFMMFCGK!J0(!-QGGOI!;EQGGOI<!EOTXGCIC\VY!
'HVOR!-PC!-QGGOIFG\!4RCECTCI!f4Z!;fFREQHI!4RFUHEO!ZOEPCR`<K!

!
F@/(+6''"5P((OGHLIO!CR!NFMHLIO!J0(!]QGTEFCG!
!
36KM"#%PFETX!CG>C]]!J0(!EQGGOI!HDD! 4;7;6$%PFETX!CG>C]]!MCSOCGO!J0(!EQGGOI!HDD! 37K"J0(!EQGGOI!GHSO! +>#&6N>-XO!J0(!DHT`OE!ERHGMSFE!FGEOR]HTO! G""#(H7'(IG(,<<#-XO!ROSCEO!*&Z!HNNROMM! G""#(46M'";-XO!ROSCEO!\HEOPHV!ICTHI!MQLGOEY!O\)!":#K"79K"K=>#5! G""#(+6''"5(IG-XO!ROSCEO!EQGGOI!FD!HNNROMM! .&975(+6''"5(IG-XO!ICTHI!EQGGOI!FD!HNNROMM! .&975(3";K7$\ZOESHM`!C]!ICTHI!GOEPCR`!
!
T""875%A":(GHLIO!CR!NFMHLIO!J0(!eOODHIFUO!]QGTEFCG!
! ! ! !
85!
@";#B(;%K"$J0(!`OODHIFUO!NOEOTE!]HFI!ROERFOM! I';"#A75-XO!EFSO!FGEORUHI!C]!J0(!`OODHIFUO!DHT`OE!MOGE! 17%5(,9;%&'-XO!HTEFCG!PCQIN!LO!O[OT!H]EOR!`OODFG\!HIFUO!]HFION!
?IFT`!CG!n!%"=(F@/(;6''"5$s!`OVM!THG!UFOP!EXO!FG]CRSHEFCG!C]!J0(!
(
!
3.1.5. Security
3.1.5.1. Firewall
kCQ!THG!OGHLIO!CR!NFMHLIO!EXO!]FROPHIIY!]FIEOR!MDOTF]FT!,GEORGOE!NHEH!EVDOMY!HGN!
DROUOGE!HGCGVSCQM!,GEORGOE!RO^QOMEMY!QIEFSHEOIV!OGXHGTO!GOEPCR`!MOTQRFEVK!
1%#"=755(G#&;"9;%&'(
!
.FROPHII!OGXHGTO!GOEPCR`!MOTQRFEV!HGN!QMO!%4,!EC!TXOT`!EXO!DHT`OEM!FGEC!EXO!
GOEPCR`K!-C!QMO!]FROPHII!DRCEOTEFCGY!TXCCMO!EC!OGHLIO!CEXORPFMO!NFMHLIONK!/GIV!OGHLIO!
EXO!%4,!]FROPHIIY!VCQ!THG!QMO!CEXOR!]FROPHII!]QGTEFCGM)!]FIEORFG\!DRC[VY!LICT`!*&Z!
RO^QOMEMY!OETK!
,<<%;%&'75(1%5;"#$(
!
1%5;"#(G#&WBP(*HG!DRC[V!MORUOR!SHV!RONQTO!EXO!MOTQRFEV!C]!EXO!\HEOPHVY!.FIEORFG\!4RC[V!
PFII!RO]QMO!HGV!HTTOMM!EC!HGV!PHG!DRC[V!MORUORK ?IFT`!EXO!TXOT`!LC[!EC!OGHLIO!EXO!
]QGTEFCG!CEXORPFMO!NFMHLIONK(
1%5;"#(2&&\%"$P(?CC`FOM!HRO!EXO!POLMFEO!C]!NHEH!EXO!NHEH!MECRON!CG!VCQR!TCSDQEORK!
*XOG!VCQ!FGEORHTE!PFEX!EXO!MFEO!YEXO!TCC`FOM!PFII!LO!QMONK!?IFT`!EXO!TXOT`!LC[!EC!OGHLIO!
EXO!]QGTEFCG!CEXORPFMO!NFMHLIONK(
! ! ! !
86!
1%5;"#(^7A7(,885";$P(,]!RO]QMO!EC!dHUHY!VCQ!!SHV!GCE!LO!HLIO!EC!CDOG!POL!DH\OM!QMFG\!EXO!
dHUH!DRC\RHSSFG\KK!?IFT`!EXO!TXOT`!LC[!EC!OGHLIO!EXO!]QGTEFCG!CEXORPFMO!NFMHLIONK!(
1%5;"#(,9;%A"?P(,]!RO]QMO!EC!&TEFUObY!VCQ!!SHV!GCE!LO!HLIO!EC!CDOG!POL!DH\OM!QMFG\!EXO!
&TEFUOb!DRC\RHSSFG\K!?IFT`!EXO!TXOT`!LC[!EC!OGHLIO!EXO!]QGTEFCG!CEXORPFMO!NFMHLIONK(
G#"A"';(H,3(@"V6"$;(
!
-5&9\(,'&'BK&6$(H,3(@"V6"$;$(X8%'NYP(+V!MOIOTEFG\!n+ICT`!&GCGVSCQM!*&Z!
0O^QOMEM!;DFG\<s!LC[!EC!OGHLIO!EXFM!]OHEQROY!VCQ!THG!DROUOGE!VCQR!GOEPCR`!]RCS!EXO!
4FG\!CR!NOEOTEFCG!C]!CEXOR!,GEORGOE!QMORMK!MC!EXHE!!SH`O!2CRO!NF]]FTQIE!EC!LROH`!FGEC!
VCQR!GOEPCR`K -XO!NO]HQIE!MEHEO!C]!EXFM!]OHEQRO!FM!OGHLION!YTXCCMO!EC!NFMHLIO!HIICP!
HGCGVSCQM!,GEORGOE!RO^QOMEMK(
1%5;"#(IC/3+(XG&#;([[QYP((GHLIO!EXFM!]OHEQRO!THG!DROUOGE!!DCRE!""$!]RCS!LOFG\!MTHGGON!
]RCS!CQEMFNOK!?IFT`!EXO!TXOT`!LC[!EC!OGHLIO!EXO!]QGTEFCG!CEXORPFMO!NFMHLIONK!(
-5&9\(H,3(43DG(799"$$P(-XFM!]OHEQRO!DROUOGEM!EXO!%Z24!TCGGOTEFCG!RO^QOMEM!]RCS!
EXO!*&ZK(
&]EOR!?CSDIOEO!EXO!TXHG\OMY!TIFT`!EXO!47A"(4";;%'N$!LQEECG!EC!MHUO!VCQR!TXHG\OMK!?IFT`!
EXO!27'9"5(2>7'N"$(LQEECG!EC!THGTOI!QGMHUON!TXHG\OMK!
IK8"<"(H,3(C&4R-#6;": "(
(
.%K%;($$>(,99"$$P(-XFM!]OHEQRO!IFSFEM!EXO!HTTOMM!RO^QOME!]RCS!EXO!*&Z!LV!MMXY!HGN!DOR!
SFGQEO!QD!EC!HTTODE!EPC!TCGGOTEFCG!RO^QOMEM!CG!EXO!MHSO!,4K!&GV!GOP!HTTOMM!RO^QOME!
PFII!LO!HQECSHEFTHIIV!NRCDDONK!
.%K%;(+"5'";(,99"$$P(-XFM!]OHEQRO!IFSFEM!EXO!HTTOMM!RO^QOME!]RCS!EXO!*&Z!LV!-OIGOEY!
HGN!DOR!SFGQEO!QD!EC!HTTODE!EPC!TCGGOTEFCG!RO^QOMEM!CG!EXO!MHSO!,4K!&GV!GOP!HTTOMM!
RO^QOME!PFII!LO!HQECSHEFTHIIV!NRCDDONK!
! ! ! !
87!
.%K%;(GG+G(4"#A"#(,99"$$P(*XOG!LQFIN!H!44-4!%ORUOR!FG!EXO!RCQEORY!EXFM!]OHEQRO!IFSFEM!
EXO!HTTOMM!RO^QOME!]RCS!EXO!*&Z!LV!MMXY!HGN!DOR!SFGQEO!QD!EC!HTTODE!EPC!TCGGOTEFCG!
RO^QOMEM!CG!EXO!MHSO!,4!K!&GV!GOP!HTTOMM!RO^QOME!PFII!LO!HQECSHEFTHIIV!NRCDDONK!
.%K%;(.)+G(4"#A"#(,99"$$P(*XOG!LQFIN!H!'#-4!%ORUOR!FG!EXO!RCQEORY!EXFM!]OHEQRO!IFSFEM!
EXO!HTTOMM!RO^QOME!]RCS!EXO!*&Z!LV!MMXY!HGN!DOR!SFGQEO!QD!EC!HTTODE!EPC!TCGGOTEFCG!
RO^QOMEM!CG!EXO!MHSO!,4K!&GV!GOP!HTTOMM!RO^QOME!PFII!LO!HQECSHEFTHIIV!NRCDDONK!
.&N(D7'7N"K"';(
-XO!RCQEOR!THG!`OOD!IC\M!C]!HII!FGTCSFG\!CR!CQE\CFG\!ERH]]FT!]CR!VCQR!,GEORGOE!
TCGGOTEFCGK!
!
.&NP!-C!`OOD!HTEFUFEV!IC\MY!MOIOTE!(GHLIOK!-C!MECD!IC\\FG\Y!MOIOTE!3FMHLIOK!*XOG!MOIOTE!
OGHLIOY!EXO!]CIICPFG\!DH\O!PFII!HDDOHRK!
!
.&N(."A"5P(%OE!EXFM!EC!EXO!RO^QFRON!IC\!IOUOIK!%OE!'C\!'OUOI!XF\XOR!EC!IC\!SCRO!HTEFCGMK!
08;%&'$P!*XOG!MOIOTE!(GHLIOY!EXO!TCRROMDCGNFG\!TCGGOTEFCG!PFII!LO!ROTCRNON!FG!EXO!
iCQRGHIY!EXO!NFMHLION!HRO!GCE!ROTCRNONK!
I'9&K%'N(.&NP(-C!MOO!H!EOSDCRHRV!IC\!C]!EXO!0CQEORtM!SCME!ROTOGE!FGTCSFG\!ERH]]FTY!
TIFT`!EXO!,GTCSFG\!'C\!LQEECGK!!
(
06;N&%'N(.&NP(-C!MOO!H!EOSDCRHRV!IC\!C]!EXO!0CQEORtM!SCME!ROTOGE!CQE\CFG\!ERH]]FTY!TIFT`!
EXO!/QE\CFG\!'C\!LQEECGK!
! ! ! !
88!
!
?IFT`!EXO!47A"(4";;%'N$!LQEECG!EC!MHUO!VCQR!TXHG\OMK!?IFT`!EXO!27'9"5(2>7'N"$!LQEECG!
EC!THGTOI!QGMHUON!TXHG\OMK!
!
3.1.5.2. VPN Pass-through
fFREQHI!4RFUHEO!ZOEPCR`FG\!;f4Z<!FM!EVDFTHIIV!QMON!]CR!PCR`WROIHEON!GOEPCR`FG\K!.CR!f4Z!EQGGOIMY!
EXO!RCQEOR!MQDDCREM!/4(Zf4Z!4HMMWEXRCQ \XY!4 4 - 4 !4HMMWEX RC Q\ X! HG N!'#-4!4HMMWEXRCQ\X K!
!
IG4"9(4HMMWEXRCQ\X,GEORGOE!4RCECTCI!%OTQRFEV!;,4%OT<!FM!H!MQFEO!C]!DRCECTCIM!QMON!EC!
FSDIOSOGE!MOTQRO!O[TXHG\O!C]!DHT`OEM!HE!EXO!,4!IHVORK!-C!HIICP!,4%OT!EQGGOIM!EC!DHMM!
EXRCQ\X!EXO!RCQEORY!,4%OT!4HMMWEXRCQ\X!FM!OGHLION!LV!NO]HQIEK!-C!NFMHLIO!,4%OT!4HMMW
EXRCQ\XY!MOIOTE!3FMHLIOK! GG+G(4HMMWEXRCQ\X4CFGEWECW4CFGE!-QGGOIFG\!4RCECTCI!FM!EXO!SOEXCN!QMON!EC!OGHLIO!
f4Z!MOMMFCGM!EC!H!*FGNCPM!Z-!5K=!CR!#===!MORUORK!-C!HIICP!44-4!EQGGOIM!EC!DHMM!
EXRCQ\X!EXO!RCQEORY!44-4!4HMMWEXRCQ\X!FM!OGHLION!LV!NO]HQIEK!-C!NFMHLIO!44-4!4HMMW
EXRCQ\XY!MOIOTE!3FMHLIOK! .)+G(4HMMWEXRCQ\X'HVOR!-PC!;#<!-QGGOIFG\!4RCECTCIY!HG!O[EOGMFCG!EC!EXO!444!
DRCECTCI!EXHE!OGHLIOM!,%4M!EC!CDORHEO!fFREQHI!4RFUHEO!ZOEPCR`M!;f4ZM<K!'#-4!SOR\OM!EXO!
LOME!]OHEQROM!C]!EPC!CEXOR!EQGGOIFG\!DRCECTCIM)!44-4!]RCS!2FTRCMC]E!HGN!'#.!]RCS!
?FMTC!%VMEOSMK!-C!HIICP!'#-4!EQGGOIM!EC!DHMM!EXRCQ\X!EXO!RCQEORY!'#-4!4HMMWEXRCQ\X!FM!
OGHLION!LV!NO]HQIEK!-C!NFMHLIO!'#-4!4HMMWEXRCQ\XY!MOIOTE!3FMHLIOK!
?IFT`!EXO!47A"(4";;%'N$!LQEECG!EC!MHUO!VCQR!TXHG\OMK!?IFT`!EXO!27'9"5(2>7'N"$(LQEECG!
EC!THGTOI!QGMHUON!TXHG\OMK!
!
! ! ! !
89!
3.1.6. Access Restrictions
3.1.6.1. WAN Access
1MO!HTTOMM!ROMERFTEFCGMY!VCQ!THG!LICT`!CR!HIICP!MDOTF]FT!EVDOM!C]!,GEORGOE!
HDDIFTHEFCGMK!kCQ!THG!MOE!!MDOTF]FT!4?WLHMON!,GEORGOE!HTTOMM!DCIFTFOMK!-XFM!]OHEQRO!HIICPM!
VCQ!EC!TQMECSFBO!QD!EC!EOG!NF]]OROGE!,GEORGOE!&TTOMM!4CIFTFOM!]CR!DHREFTQIHR!4?MY!PXFTX!
HRO!FNOGEF]FON!LV!EXOFR!,4!CR!2&?!HNNROMMOMK!!
!
-PC!CDEFCGM!FG!EXO!NO]HQIE!DCIFTV!RQIOM)!h.FIEORh!HGN!hROiOTEhK!,]!MOIOTE!h3OGVsY!VCQ!
PFII!!NOGV!MDOTF]FT!TCSDQEORM!EC!HTTOMM!HGV!,GEORGOE!MORUFTO!HE!H!DHREFTQIHR!EFSO!DORFCNK!
,]!VCQ!TXCCMO!EC!h]FIEORsY!FE!PFII!LICT`!MDOTF]FT!TCSDQEORM!EC!HTTOMM!EXO!MDOTF]FT!MFEOM!HE!H!
MDOTF]FT!EFSO!DORFCNK!kCQ!THG!MOE!QD!"=!,GEORGOE!HTTOMM!DCIFTFOM!]FIEORFG\!MDOTF]FT!4?M!
HTTOMM!,GEORGOE!MORUFTOM!HE!H!DHREFTQIHR!EFSO!DORFCNK!
,99"$$(G&5%9BP(kCQ!SHV!NO]FGO!QD!EC!"=!HTTOMM!DCIFTFOMK!?IFT`!3OIOEO!EC!NOIOEO!H!DCIFTV!
CR!%QSSHRV!EC!MOO!H!MQSSHRV!C]!EXO!DCIFTVK!
4;7;6$P((GHLIO!CR!NFMHLIO!H!DCIFTVK!
G&5%9B(37K"P(kCQ!SHV!HMMF\G!H!GHSO!EC!VCQR!DCIFTVK!
G2$P!-XO!DHRE!FM!QMON!EC!ONFE!TIFOGE!IFMEY!EXO!MERHEO\V!FM!CGIV!O]]OTEFUO!]CR!EXO!4?!FG!EXO!
IFMEK!
(
C7B$P(?XCCMO!EXO!NHV!C]!EXO!POO`!VCQ!PCQIN!IF`O!VCQR!DCIFTV!EC!LO!HDDIFONK!
+%K"$P((GEOR!EXO!EFSO!C]!EXO!NHV!VCQ!PCQIN!IF`O!VCQR!DCIFTV!EC!LO!HDDIFONK!
! ! ! !
8:!
(
H"M$%;"(-5&9\%'N(MB(J@.(,<<#"$$P(kCQ!THG!LICT`!HTTOMM!EC!TOREHFG!POLMFEOM!LV!
OGEORFG\!EXOFR!10'K!
H"M$%;"(-5&9\%'N(MB(T"B=&#<P(kCQ!THG!LICT`!HTTOMM!EC!TOREHFG!POLMFEO!LV!EXO!
`OVPCRNM!TCGEHFGON!FG!EXOFR!POLDH\O(
(
! ! ! !
9=!
$";(68(I';"#'";(799"$$(8&5%9B(
"K %OIOTE!EXO!DCIFTV!GQSLOR!;"W"=<!FG!EXO!NRCDWNCPG!SOGQK!
#K .CR! EX FM!DCIFTV!FM!OGHLIONY!TIFT`!EXO !RH NFC !LQEECG!GO[E!EC!h( GHL IOh!
$K (GEOR!H!GHSO!FG!EXO!4CIFTV!ZHSO!]FOINK!
5K ?IFT`!EXO!(NFE!'FME!C]!4?M!LQEECGK!
6K /G! EXO! 'FME! C]!4?M!MTROOGY!MDOTF]V! 4?M! LV!,4!HNNROMM!CR!2&?! HNNROMMK!(GEOR!EXO!HDDRCDRFHEO!,4!
HNNROMMOM! FGEC! EXO! ,4! ]FOINMK! ,]! VCQ! XHUO! H! RHG\O! C]! ,4! HNNROMMOM! EC! ]FIEORY! TCSDIOEO! EXO!
HDDRCDRFHEO!,4!0HG\O!]FOINMK!(GEOR!EXO!HDDRCDRFHEO!2&?!HNNROMMOM!FGEC!EXO!2&?!]FOINMK!
7K ?IFT`! EXO! &DDIV! LQEECG! EC! MHUO! VCQR! TXHG\OMK! ?IFT`! EXO! ?HGTOI! LQEECG! EC! TH GTOI! VCQR! QGMHUON!
TXHG\OMK!?IFT`!EXO!?ICMO!LQEECG!EC!ROEQRG!EC!EXO!.FIEORM!MTROOGK!
8K ,]! VCQ! PHGE!EC!LICT`!EXO!IFMEON ! 4?M! ]RCS! ,GEORGOE! HTTOMM! NQRFG\!EXO!NOMF\GHEON!NHVM! HGN!EFSOY!
EXOG!`OOD ! EXO!NO]HQIE!MOEEFG\Y!3OGVK!,]!VCQ!PHGE!EXO!IFMEON!4?M! EC!XHUO!,GEORGOE! ]FIEORON!NQRFG\!
EXO!NOMF\GHEON!NHVM!HGN!EFSOY!EXOG!TIFT`!EXO!RHNFC!LQEECG!GO[E!EC!.FIEORK!
9K %OE!EX O!NHVM!PXOG!HTTOMM!PFII!LO!]FIEORONK!%OIOTE!OUORV!NHV!CR!EXO!HDDRCDRFHEO!NHVM!C]!EXO!POO`K!
:K %OE! EXO! EFSO!PXOG!HTTOMM!PFII!LO!]FIEORONK!%OIOTE! #5!@CQRMY!CR!TXOT`! EXO!LC[!GO[E!EC! .RCS! HGN!
QMO!EXO!NRCDWNCPG!LC[OM!EC!NOMF\GHEO!H!MDOTF]FT!EFSO!DORFCNK!
"=K ?IFT`!EXO!&NN!EC!4CIFTV!LQEECG!EC!MHUO!VCQR!TXHG\OM!HGN!HTEFUO!FEK!
""K -C!TROHEO!CR!ONFE!HNNFEFCGHI!DCIFTFOMY!RODOHE!MEODM!"W:K!
"#K -C!NOIOEO!HG!,GEORGOE!&TTOMM!4CIFTVY!MOIOTE!EXO!DCIFTV!GQSLORY!HGN!TIFT`!EXO!3OIOEO!LQEECGK!!
3&;"P(
"-XO!NO]HQIE!]HTECRV! UHIQO!C]!DCIFTV!RQIOM!FM!h]FIEORONhK!,]! EXO!QMOR!TXCCMOM!EXO!NO]HQIE!DCIFTV!
RQIOM! ]CR! hRO]QMOhY! HGN! ONFEFG\! MERHEO\FOM! EC! MHUO! CR! NFROTEIV! EC! MHUO! EXO! MOEEFG\MK! ,]! EXO!
MERHEO\V!ONFEON! FM! EXO! ]FRMEY! FE! PFII!LO!HQECSHEFTHIIV! MHUON! FGEC! EXO! MOTCGNY! F]! GCE! EXO! ]FRMEY!
`OOD!EXO!CRF\FGHI!GQSLORK!
#-QRG!C]]!EXO!DCPOR!C]!EXO!RCQEOR!CR!ROLCC E!EXO!RCQEOR!THG!THQMO!H!EOSDCRHRV!]HFIQRO&]EOR!
EXO!]HFIQRO!C]!EXO!RCQEORY!F]!THGGCE!HQECSHEFTHIIV!MVGTXRCG FBON! Z-4! EFSO! MORUORY! VCQ! GOON!
EC! ROTHIFLRHEO! EC! OGMQRO! EXO! TCRROTE! FSDIOSOGEHEFCG! C]! EXO! RO IOUH GE! DORFCN! TCGERCI!
]QGTEFCGK!
3.1.6.2. Packet Filter
-C!LICT`!MCSO!DHT`OEM!\OEEFG\!,GEORGOE!HTTOMM!CR!LICT`!MCSO!,GEORGOE!DHT`OEM!
\OEEFG\!ICTHI!GOEPCR`!HTTOMMY!VCQ!THG!TCG]F\QRO!]FIEOR!FEOSM!EC!LICT`!EXOMO!DHT`OEMK!
4HT`OE!.FIEOR!
!!!4HT`OE!]FIEOR!]QGTEFCG!FM!ROHIFBON!LHMON!CG!,4!HNNROMM!CR!DCRE!C]!DHT`OEMK!
! ! ! !
9"!
!
/'7M5"(G79\";(1%5;"#P((GHLIO!CR!NFMHLIO!nDHT`OE!]FIEORs!]QGTEFCG!
G&5%9BP(-XO!]FIEOR!RQIOmM!DCIFTVY!VCQ!THG!TXCCMO!EXO!]CIICPFG\!CDEFCGM!
!!3FMTHRN!-XO!.CIICPFG\WW3FMTHRN!DHT`OEM!TCG]CRS!EC!EXO!]CIICPFG\!RQIOMY!&TTODE!HII!
CEXOR!DHT`OEM!
/GIV!&TTODE!-XO!.CIICPFG\WW!&TTODE!CGIV!EXO!NHEH!DHT`OEM!TCG]CRS!EC!EXO!]CIICPFG\!
RQIOMY!3FMTHRN!HII!CEXOR!DHT`OEM!
!
C%#"9;%&'(
%'86;P(DHT`OE!]RCS!*&Z!EC!'&Z!!
&6;86;P!DHT`OE!]RCS!'&Z!EC!*&Z!!
!
G#&;&9&5P(DHT`OE!DRCECTCI!EVDO!
4&6#9"(G&#;$P(DHT`OEtM!MCQRTO!DCRE!
C"$;%'7;%&'(G&#;$P!DHT`OEtM!NOMEFGHEFCG!DCRE!
4&6#9"(IGP(DHT`OEtM!MCQRTO!,4!HNNROMM!
C"$;%'7;%&'(IGP!DHT`OEtM!NOMEFGHEFCG!,4!HNNROMM!
!
ZCEO)!h%CQRTO!4CREh!Yh3OMEFGHEFCG!4CREh!Yh%CQRTO!,4h!Yh3OMEFGHEFCG!,4h!TCQIN!GCE!LO!HII!
OSDEV!YVCQ!XHUO!EC!FGDQE!HE!IOHME!CGO!C]!EXOMO!]CQR!DHRHSOEORMK!
3.1.7. NAT
3.1.7.1. Port Forwarding
4CRE!.CRPHRNFG\!HIICPM!VCQ!EC!MOE!QD!DQLIFT!MORUFTOM!CG!VCQR!GOEPCR`Y!MQTX!HM!
POL!MORUORMY!]ED!MORUORMY!OWSHFI!MORUORMY!CR!CEXOR!MDOTFHIFBON!,GEORGOE!HDDIFTHEFCGMK!
! ! ! !
9#!
%DOTFHIFBON!,GEORGOE!HDDIFTHEFCGM!HRO!HGV!HDDIFTHEFCGM!EXHE!QMO!,GEORGOE!HTTOMM!EC!
DOR]CRS!]QGTEFCGM!MQTX!HM!UFNOCTCG]OROGTFG\!CR!CGIFGO!\HSFG\K!*XOG!QMORM!MOGN!EXFM!
EVDO!C]!RO^QOME!EC!VCQR!GOEPCR`!UFH!EXO!,GEORGOEY!EXO!RCQEOR!PFII!]CRPHRN!EXCMO!
RO^QOMEM!EC!EXO!HDDRCDRFHEO!4?K!,]!VCQ!PHGE!EC!]CRPHRN!H!PXCIO!RHG\O!C]!DCREMY!MOO!4CRE!
0HG\O!.CRPHRNFG\K!!
!
,885%97;%&'P((GEOR!EXO!GHSO!C]!EXO!HDDIFTHEFCG!FG!EXO!]FOIN!DRCUFNONK(
G#&;&9&5P(?XCMO!EXO!RF\XE!DRCECTCI!-?4Y134!CR!+CEXK!%OE!EXFM!EC!PXHE!EXO!HDDIFTHEFCG!
RO^QFROMK(
4&6#9"(3";P(.CRPHRN!CGIV!F]!MOGNOR!SHETXOM!EXFM!FD>GOE!;O[HSDIO!":#K"79K"K=>#5<K(
G&#;(:#&KP((GEOR!EXO!GQSLOR!C]!EXO!O[EORGHI!DCRE!;EXO!DCRE!GQSLOR!MOOG!LV!QMORM!CG!
EXO!,GEORGOE<K(
IG(,<<#"$$P((GEOR!EXO!,4!&NNROMM!C]!EXO!4?!RQGGFG\!EXO!HDDIFTHEFCGK(
G&#;(;&P((GEOR!EXO!GQSLOR!C]!EXO!FGEORGHI!DCRE!;EXO!DCRE!GQSLOR!QMON!LV!EXO!
HDDIFTHEFCG<K(
/'7M5"P(?IFT`!EXO!(GHLIO!TXOT`LC[!EC!OGHLIO!DCRE!]CRPHRNFG\!]CR!EXO!HDDIFTHEFCGK(
?XOT`!HII!UHIQOM!HGN!TIFT`!47A"(4";;%'N$(EC!MHUO!VCQR!MOEEFG\MK!?IFT`!EXO!27'9"5(
9>7'N"$(LQEECG!EC!THGTOI!VCQR!QGMHUON!TXHG\OMK!
!
3.1.7.2. Port Range Forward
4CRE!0HG\O!.CRPHRNFG\!HIICPM!VCQ!EC!MOE!QD!DQLIFT!MORUFTOM!CG!VCQR!GOEPCR`Y!MQTX!
HM!POL!MORUORMY!]ED!MORUORMY!OWSHFI!MORUORMY!CR!CEXOR!MDOTFHIFBON!,GEORGOE!HDDIFTHEFCGMK!
%DOTFHIFBON!,GEORGOE!HDDIFTHEFCGM!HRO!HGV!HDDIFTHEFCGM!EXHE!QMO!,GEORGOE!HTTOMM!EC!
DOR]CRS!]QGTEFCGM!MQTX!HM!UFNOCTCG]OROGTFG\!CR!CGIFGO!\HSFG\K!*XOG!QMORM!MOGN!EXFM!
EVDO!C]!RO^QOME!EC!VCQR!GOEPCR`!UFH!EXO!,GEORGOEY!EXO!RCQEOR!PFII!]CRPHRN!EXCMO!
RO^QOMEM!EC!EXO!HDDRCDRFHEO!4?K!,]!VCQ!CGIV!PHGE!EC!]CRPHRN!H!MFG\IO!DCREY!MOO!4CRE!
.CRPHRNFG\K!
! ! ! !
9$!
!
,885%97;%&'P((GEOR!EXO!GHSO!C]!EXO!HDDIFTHEFCG!FG!EXO!]FOIN!DRCUFNONK(
4;7#;P((GEOR!EXO!GQSLOR!C]!EXO!]FRME!DCRE!C]!EXO!RHG\O!VCQ!PHGE!EC!LO!MOOG!LV!QMORM!CG!
EXO!,GEORGOE!HGN!]CRPHRNON!EC!VCQR!4?K(
/'<P((GEOR!EXO!GQSLOR!C]!EXO!IHME!DCRE!C]!EXO!RHG\O!VCQ!PHGE!EC!LO!MOOG!LV!QMORM!CG!
EXO!,GEORGOE!HGN!]CRPHRNON!EC!VCQR!4?K(
G#&;&9&5P(?XCMO!EXO!RF\XE!DRCECTCI!-?4Y134!CR!+CEXK!%OE!EXFM!EC!PXHE!EXO!HDDIFTHEFCG!
RO^QFROMK(
IG(,<<#"$$P((GEOR!EXO!,4!&NNROMM!C]!EXO!4?!RQGGFG\!EXO!HDDIFTHEFCGK(
/'7M5"P(?IFT`!EXO!(GHLIO!TXOT`LC[!EC!OGHLIO!DCRE!]CRPHRNFG\!]CR!EXO!HDDIFTHEFCGK(
?XOT`!HII!UHIQOM!HGN!TIFT`!47A"(4";;%'N$!EC!MHUO!VCQR!MOEEFG\MK!?IFT`!EXO!27'9"5(
9>7'N"$!LQEECG!EC!THGTOI!VCQR!QGMHUON!TXHG\OMK!
!
3.1.7.3. Port Triggering
4CRE!-RF\\ORFG\!HIICPM!VCQ!EC!NC!DCRE!]CRPHRNFG\!PFEXCQE!MOEEFG\!H!]F[ON!4?K!+V!
MOEEFG\!4CRE!-RF\\ORFG\!RQIOMY!VCQ!THG!HIICP!FGLCQGN!ERH]]FT!EC!HRRFUO!HE!H!MDOTF]FT!'&Z!
XCMEY!QMFG\!DCREM!NF]]OROGE!EXHG!EXCMO!QMON!]CR!EXO!CQELCQGN!ERH]]FTK!-XFM!FM!THIION!DCRE!
ERF\\ORFG\!MFGTO!EXO!CQELCQGN!ERH]]FT!ERF\\ORM!EC!PXFTX!DCREM!FGLCQGN!ERH]]FT!FM!NFROTEONK!
!
,]!VCQ!PHGE!EC!]CRPHRN!DCREM!EC!H!4?!PFEX!H!MEHEFT!,4!HNNROMMY!MOO!4CRE!.CRPHRNFG\!
CR!4CRE!0HG\O!.CRPHRNFG\K!!
,885%97;%&'P((GEOR!EXO!GHSO!C]!EXO!HDDIFTHEFCG!FG!EXO!]FOIN!DRCUFNONK(
! ! ! !
95!
+#%NN"#"<(G&#;(@7'N"P((GEOR!EXO!GQSLOR!C]!EXO!]FRME!HGN!EXO!IHME!DCRE!C]!EXO!RHG\OY!
PXFTX!MXCQIN!LO!ERF\\ORONK!,]!H!4?!MOGNM!CQELCQGN!ERH]]FT!]RCS!EXCMO!DCREMY!FGTCSFG\!
ERH]]FT!CG!EXO!.CRPHRNON!0HG\O!PFII!LO!]CRPHRNON!EC!EXHE!4?K(
1&#=7#<"<(G&#;(@7'N"P((GEOR!EXO!GQSLOR!C]!EXO!]FRME!HGN!EXO!IHME!DCRE!C]!EXO!RHG\OY!
PXFTX!MXCQIN!LO!]CRPHRNON!]RCS!EXO!,GEORGOE!EC!EXO!4?Y!PXFTX!XHM!ERF\\ORON!EXO!
-RF\\ORON!0HG\OK(
/'7M5"(P?IFT`!EXO!(GHLIO!TXOT`LC[!EC!OGHLIO!DCRE!ERF\\ORFG\!]CR!EXO!HDDIFTHEFCGK(
?XOT`!HII!UHIQOM!HGN!TIFT`!%HUO!%OEEFG\M!EC!MHUO!VCQR!MOEEFG\MK!?IFT`!EXO!?HGTOI!
TXHG\OM!LQEECG!EC!THGTOI!VCQR!QGMHUON!TXHG\OMK!
!
3.1.7.4. DMZ
-XO!32v!;3O2FIFEHRFBON!vCGO<!XCMEFG\!]OHEQRO!HIICPM!CGO!ICTHI!QMOR!EC!LO!O[DCMON!
EC!EXO!,GEORGOE!]CR!QMO!C]!H!MDOTFHIWDQRDCMO!MORUFTO!MQTX!HM!,GEORGOE!\HSFG\!CR!
UFNOCTCG]OROGTFG\K!32v!XCMEFG\!]CRPHRNM!HII!EXO!DCREM!HE!EXO!MHSO!EFSO!EC!CGO!4?K!-XO!
4CRE!.CRPHRNFG\!]OHEQRO!FM!SCRO!MOTQRO!LOTHQMO!FE!CGIV!CDOGM!EXO!DCREM!VCQ!PHGE!EC!
XHUO!CDOGONY!PXFIO!32v!XCMEFG\!CDOGM!HII!EXO!DCREM!C]!CGO!TCSDQEORY!O[DCMFG\!EXO!
TCSDQEOR!MC!EXO!,GEORGOE!THG!MOO!FEK!
!
&GV!4?!PXCMO!DCRE!FM!LOFG\!]CRPHRNON!SQME!MXCQIN!XHUO!H!GOP!MEHEFT!,4!HNNROMM!
HMMF\GON!EC!FE!LOTHQMO!FEM!,4!HNNROMM!SHV!TXHG\O!PXOG!QMFG\!EXO!3@?4!]QGTEFCGK!
CDZ(L&$;(IG(,<<#"$$P(-C!O[DCMO!CGO!4?!EC!EXO!,GEORGOEY!MOIOTE!(GHLIO!HGN!OGEOR!EXO!
TCSDQEORtM!,4!HNNROMM!FG!EXO!32v!@CME!,4!&NNROMM!]FOINK!-C!NFMHLIO!EXO!32vY!`OOD!EXO! NO]HQIE!MOEEFG\3FMHLIO!
?XOT`!HII!UHIQOM!HGN!TIFT`!47A"(4";;%'N$(EC!MHUO!VCQR!MOEEFG\MK!?IFT`!EXO!27'9"5(
9>7'N"$!LQEECG!EC!THGTOI!VCQR!QGMHUON!TXHG\OMK!
!
3.1.8. QoS Setting
3.1.8.1. Basic
+HGNPFNEX! SHGH\OSOGE! DRFCRFEFBOM! EXO! ERH]]FT! CG! VCQR! RCQEORK! ,GEORHTEFUO! ERH]]FT!
! ! ! !
96!
;EOIODXCGVY!LRCPMFG\Y!EOIGOEY!OETK<!\OEM!DRFCRFEV!HGN!LQI`!ERH]]FT!;]FIO!ERHGM]ORY!4#4<!\OEM!
ICP! DRFCRFEVK! -XO! SHFG! \CHI! FM! EC! HIICP! LCEX! EVDOM! EC! IFUO! MFNOWLV! MFNO! PFEXCQE!
QGFSDCREHGE!ERH]]FT!NFMEQRLFG\!SCRO!TRFEFTHI!EXFG\MK!&II!C]!EXFM!FM!SCRO!CR!IOMM!HQECSHEFTK!
lC%! HIICPM! TCGERCI! C]! EXO! LHGNPFNEX! HIICTHEFCG! EC! NF]]OROGE! MORUFTOMY! GOESHM`MY! 2&?!
HNNROMMOM!HGN!EXO!]CQR!'&Z!DCREMK!
!
J85%'\(X\M8$Y,G!CRNOR!EC!QMO!LHGNPFNEX!SHGH\OSOGE!;lC%<!VCQ!SQME!OGEOR!
LHGNPFNEX!UHIQOM!]CR!VCQR!QDIFG`K!-XOMO!HRO!\OGORHIIV!9=a!EC!:=a!C]!VCQR!SH[FSQS!
LHGNPFNEXK! C&='5%'\(X\M8$Y,G!CRNOR!EC!QMO!LHGNPFNEX!SHGH\OSOGE!;lC%<!VCQ!SQME!OGEOR!
LHGNPFNEX!UHIQOM!]CR!VCQR!NCPGIFG`K!-XOMO!HRO!\OGORHIIV!9=a!EC!:=a!C]!VCQR!
SH[FSQS!LHGNPFNEXK!
!
3.1.8.2. Classify
3";K7$\(G#%&#%;B(
!
kCQ!SHV!MDOTF]V!DRFCRFEV!]CR!HII!ERH]]FT!]RCS!H!\FUOG!,4!HNNROMM!CR!,4!0HG\OK!
! ! ! !
97!
!
?XOT`!HII!UHIQOM!HGN!TIFT`!47A"(4";;%'N$(EC!MHUO!VCQR!MOEEFG\MK!?IFT`!EXO!27'9"5(9>7'N"$!
LQEECG!EC!THGTOI!VCQR!QGMHUON!TXHG\OMK!
!
3.1.9. Applications
3.1.9.1. Serial Applications
!!-XORO!FM!H!TCGMCIO!DCRE!CG!EXO!2H[CG!2&"==W"="=K!ZCRSHIIVY!EXFM!DCRE!FM!QMON!EC!
NOLQ\!EXO!RCQEORK!-XFM!DCRE!THG!HIMC!LO!QMON!HM!H!MORFHI!DCREK!-XO!RCQEOR!XHM!OSLONNON!
H!MORFHI!EC!-?4!DRC\RHSK!-XO!NHEH!MOGE!EC!EXO!MORFHI!DCRE!FM!OGTHDMQIHEON!LV!-?4>,4!
DRCECTCI!MEHT`!HGN!EXOG!FM!MOGE!EC!EXO!NOMEFGHEFCG!MORUORK!-XFM!]QGTEFCG!THG!PCR`!HM!H!
2H[CG!3-1!;3HEH!-ORSFGHI!1GFE<K!4IOHMO!RO]OR!PPPKSH[CGKTCSKHQ!]CR!SCRO!FG]CRSHEFCG!
HLCQE!EXFM!DRCNQTEK!
!
! !
!!!! -76<#7;"P(-XO!MORFHI!DCREmM!LHQNRHEO!
!!! C7;7M%;P(-XO!MORFHI!DCREmM!NHEHLFE!
!!!! G7#%;BP(!-XO!MORFHI!DCREmM!DHRFEV!
!!(( 4;&8M%;P(-XO!MORFHI!DCREmM!MECDLFE!
!!! 15&=(2&';#&5P(-XO!MORFHI!DCREmM!]ICP!TCGERCI!EVDOK!
!!! /'7M5"(4"#%75(+2G(16'9;%&'P((GHLIO!EXO!MORFHI!EC!-?4!]QGTEFCG!
!!! G#&;&9&5(+B8"P!-XO!DRCECTCI!EVDO!EC!ERHGMSFE!NHEHK!
! ! ! !
98!
!!!!!! 134;3-1<!x!3HEH!ERHGMSFE!PFEX!134!DRCECTCI!Y!PCR`!HM!H!2H[CG!
3-1!PXFTX!XHM!HDDIFTHEFCG!DRCECTCI!HGN!XOHR!LOHE!SOTXHGFMSK!
4QRO!134!x!3HEH!ERHGMSFE!PFEX!MEHGNHRN!134!DRCECTCIK!
-?4;3-1<!WW!3HEH!ERHGMSFE!PFEX!-?4!DRCECTCI!Y!PCR`!HM!H!2H[CG!
3-1!PXFTX!XHM!HDDIFTHEFCG!DRCECTCI!HGN!XOHR!LOHE!SOTXHGFMSK!
4QRO!-?4!WW!3HEH!ERHGMSFE!PFEX!MEHGNHRN!-?4!DRCECTCIY!RCQEOR!FM!
EXO!TIFOGEK!
-?4!%ORUOR!WW!3HEH!ERHGMSFE!PFEX!MEHGNHRN!-?4!DRCECTCIY!RCQEOR!FM!
EXO!MORUORK!
-?%-!WW!3HEH!ERHGMSFE!PFEX!-?4!DRCECTCIY!1MFG\!H!TQMECS!NHEH!
!!! 4"#A"#(,<<#"$$P!-XO!NHEH!MORUFTO!TOGEORmM!,4!&NNROMM!CR!NCSHFG!GHSOK!
!!! 4"#A"#(G&#;P(-XO!NHEH!MORUFTO!TOGEORmM!IFMEOGFG\!DCREK!
!! C"A%9"(ICP(-XO!RCQEORmM!FNOGEFEV!,3K!
! C"A%9"(36KM"#P(-XO!RCQEORmM!DXCGO!GQSLORK!
!!!!! L"7#;M"7;(I';"#A75P((-XO!EFSO!FGEORUHI!EC!MOGN!XOHRE!LOHE!DHT`OEK!-XFM!FEOS!FM!
UHIFN!CGIV!PXOG!VCQ!TXCCMO!134;3-1<!CR!-?4;3-1<!!DRCECTCI!EVDOK!
!!!! !+2G(4"#A"#(.%$;"'(G&#;P!!-XFM!FEOS!FM!UHIFN!PXOG!4RCECTCI!-VDO!FM!n-?4!%ORUORs!
!!!! 26$;&K(L"7#;M"7;(G79\";(P(-XFM!FEOS!FM!UHIFN!PXOG!4RCECTCI!-VDO!FM!n-?%-s!
!!!! 26$;&K(@"N%$;#7;%&'(G79\";$P(-XFM!FEOS!FM!UHIFN!PXOG!4RCECTCI!-VDO!FM!n-?%-s!
(
3.1.9.2. GPS Settings
!
/'7M5"(FG4(GHLIO!CR!NFMHLIO!J4%!]QGTEFCG!! FG4(06;86;(I';"#:79"-XFM!FEOS!MOIOTEM!EXO!J4%!CQEDQE!FGEOR]HTO!FGTIQNFG\!GOEPCR`!
HGN!MORFHI!DCRE!!
G#&;&9&5-?4!SCNO!CR!134!SCNO! FG4(2"';"#(,<<#"$$-XO!J4%!TOGEORmM!,4!&NNROMM!CR!NCSHFG!GHSO!!
! ! ! !
99!
FG4(2"';"#(.%$;"'%'N(G&#;-XO!J4%!TOGEORmM!IFMEOGFG\!DCREK!! FG4(I':&#K7;%&'(J8<7;"(I';"#A75-XO!EFSO!FGEORUHI!LOEPOOG!EPC!J4%!FG]CRSHEFCG!
QDNHEOY!QGFE!FM!MOTCGN!!
FG4(48""<(+>#"$>>&5<-XO!J4%!MDOON!EXROMXCIN!C]!QDNHEO!J4%!FG]CRSHEFCG! C"A%9"(IC-XO!,3!C]!EXFM!NOUFTO!
,88"'<(;>"(<"A%9"(IC(;&(;>"(;7%5(&:(FG4(%':&#K7;%&'P!*XOEXOR!HDDOGN!EXO!,3!EC!EXO!
J4%!FG]CRSHEFCG! FG4(I':&#K7;%&'(2&';"';$:J4%!TCGEOGEM!MOIOTEFCG!
!
*XOG!J4%!CQEDQE!FGEOR]HTO!FM!MORFHI!DCREY!PO!MXCQIN!MOE!EXO!]CIICPFG\!MORFHI!DCRE!
MOEEFG\M)!
!
!
3.1.10. Administration
3.1.10.1. Management
-XO!2HGH\OSOGE!MTROOG!HIICPM!VCQ!EC!TXHG\O!EXO!RCQEORtM!MOEEFG\MK!/G!EXFM!DH\O!VCQ!
PFII!]FGN!SCME!C]!EXO!TCG]F\QRHLIO!FEOSM!C]!EXO!RCQEOR!TCNOK!!
!
-XO!GOP!DHMMPCRN!SQME!GCE!O[TOON!$#!TXHRHTEORM!FG!IOG\EX!HGN!SQME!GCE!FGTIQNO!
HGV!MDHTOMK!(GEOR!EXO!GOP!DHMMPCRN!H!MOTCGN!EFSO!EC!TCG]FRS!FEK! 3&;":3O]HQIE!QMORGHSO!FM!HNSFGK!
,E!FM!MERCG\IV!ROTCSSOGNON!EXHE!VCQ!TXHG\O!EXO!]HTECRV!NO]HQIE!DHMMPCRN!C]!EXO!
RCQEORY!PXFTX!FM!HNSFGK!&II!QMORM!PXC!ERV!EC!HTTOMM!EXO!RCQEORtM!POLWLHMON!QEFIFEV!CR!
%OEQD!*FBHRN!PFII!LO!DRCSDEON!]CR!EXO!RCQEORtM!DHMMPCRNK!!
H"M(,99"$$(
! ! ! !
9:!
-XFM!]OHEQRO!HIICPM!VCQ!EC!SHGH\O!EXO!RCQEOR!QMFG\!OFEXOR!@--4!DRCECTCI!CR!EXO!@--4%!
DRCECTCIK!,]!VCQ!TXCCMO!EC!NFMHLIO!EXFM!]OHEQROY!H!SHGQHI!ROLCCE!PFII!LO!RO^QFRONKkCQ!
THG!HIMC!HTEFUHEO!CR!GCE!EXO!RCQEOR!FG]CRSHEFCG!POL!DH\OK!,EtM!GCP!DCMMFLIO!EC!
DHMMPCRN!DRCEOTE!EXFM!DH\O!;MHSO!QMORGHSO!HGN!DHMMPCRN!EXHG!HLCUO<K!
!
G#&;&9&5:-XFM!]OHEQRO!HIICPM!VCQ!EC!SHGH\O!EXO!RCQEOR!QMFG\!OFEXOR!@--4!DRCECTCI!CR!
EXO!@--4%!DRCECTCI! ,6;&O@":#"$>&NiQMEM!EXO!*OL!J1,!HQECSHEFT!RO]ROMX!FGEORUHIK!=!NFMHLIOM!EXFM!]OHEQRO!
TCSDIOEOIV!
/'7M5"(I':&(4%;"(GHLIO!CR!NFMHLIO!EXO!IC\FG!MVMEOS!FG]CRSHEFCG!DH\O! I':&(4%;"(G7$$=&#<(G#&;"9;%&'(GHLIO!CR!NFMHLIO!EXO!DHMMPCRN!DRCEOTEFCG!
]OHEQRO!C]!EXO!MVMEOS!FG]CRSHEFCG!DH\O!
!
@"K&;"(,99"$$-XFM!]OHEQRO!HIICPM!VCQ!EC!SHGH\O!EXO!RCQEOR!]RCS!H!ROSCEO!
ICTHEFCGY!UFH!EXO!,GEORGOEK!-C!NFMHLIO!EXFM!]OHEQROY!`OOD!EXO!NO]HQIE!MOEEFG\Y!3FMHLIOK!-C!
OGHLIO!EXFM!]OHEQROY!MOIOTE!(GHLIOY!HGN!QMO!EXO!MDOTF]FON!DCRE!;NO]HQIE!FM!9=9=<!CG!VCQR!
4?!EC!ROSCEOIV!SHGH\O!EXO!RCQEORK!kCQ!SQME!HIMC!TXHG\O!EXO!RCQEORtM!NO]HQIE!
DHMMPCRN!EC!CGO!C]!VCQR!CPGY!F]!VCQ!XHUOGtE!HIROHNVK!
-C!ROSCEOIV!SHGH\O!EXO!RCQEORY!OGEOR!XEED)>>[[[K[[[K[[[K[[[)9=9=!;EXO![tM!RODROMOGE!
EXO!RCQEORtM!,GEORGOE!,4!HNNROMMY!HGN!9=9=!RODROMOGEM!EXO!MDOTF]FON!DCRE<!FG!VCQR!POL!
LRCPMORtM!HNNROMM!]FOINK!kCQ!PFII!LO!HM`ON!]CR!EXO!RCQEORtM!DHMMPCRNK!
,]!VCQ!QMO!XEEDM!VCQ!GOON!EC!MDOTF]V!EXO!QRI!HM!XEEDM)>>[[[K[[[K[[[K[[[)9=9=!;GCE!HII!
]FRSPHROM!NCOM!MQDDCRE!EXFM!PFEXCQE!ROLQFINFG\!PFEX!%%'!MQDDCRE<K!
! ! ! !
:=!
44L(D7'7N"K"';:kCQ!THG!HIMC!OGHLIO!%%@!EC!ROSCEOIV!HTTOMM!EXO!RCQEOR!LV!%OTQRO!
%XOIIK!ZCEO!EXHE!%%@!NHOSCG!GOONM!EC!LO!OGHLIO!FG!%ORUFTOM!DH\OK!
3&;"(
,]!EXO!0OSCEO!0CQEOR!&TTOMM!]OHEQRO!FM!OGHLIONY!HGVCGO!PXC!`GCPM!EXO!RCQEORtM!
,GEORGOE!,4!HNNROMM!HGN!DHMMPCRN!PFII!LO!HLIO!EC!HIEOR!EXO!RCQEORtM!MOEEFG\MK!
+"5'";(D7'7N"K"';(GHLIO!CR!NFMHLIO!ROSCEO!-OIGOE!]QGTEFCG!
!
2#&'-XO!TRCG!MQLMVMEOS!MTXONQIOM!O[OTQEFCG!C]!'FGQ[!TCSSHGNMK!kCQtII!GOON!EC!QMO!
EXO!TCSSHGN!IFGO!CR!MEHREQD!MTRFDEM!EC!HTEQHIIV!QMO!EXFMK!
!
_])*[W:&!IFSFEON!9=#K"[!MORUOR!GOONON!EC!]QI]FII!*4&!XHGNMXH`O!RO^QFROSOGEM!EC!
HIICP!*FGNCPM!b4!TIFOGEM!EC!PCR`!PFEX!*4&K!
!
IG(1%5;"#(4";;%'N$(X7<`6$;(;>"$"(:&#(G)GY,]!VCQ!XHUO!HGV!DOORWECWDOOR!;4#4<!
HDDIFTHEFCGM!RQGGFG\!CG!VCQR!GOEPCR`!DIOHMO!FGTROHMO!EXO!SH[FSQS!DCREM!HGN!ICPOR!
EXO!-?4>134!EFSOCQEMK!-XFM!FM!GOTOMMHRV!EC!SHFGEHFG!RCQEOR!MEHLFIFEV!LOTHQMO!DOORWECW
DOOR!HDDIFTHEFCGM!CDOG!SHGV!TCGGOTEFCGM!HGN!NCGtE!TICMO!EXOS!DRCDORIVK!?CGMFNOR!
QMFG\!EXOMO)!!
D7W%K6K(G&#;$P(5=:7!
+2G(+%K"&6;P($7==!MOT!
JCG(+%K"&6;P("#=!MOT!
!
! ! ! !
:"!
3.1.10.2. Keep Alive
49>"<65"(@"M&&;(
!
a&6(97'($9>"<65"(#"N657#(#"M&&;$(:&#(;>"(#&6;"#(P((
0O\QIHRIV!H]EOR![[[!MOTCGNMK!
&E!H!MDOTF]FT!NHEO!EFSO!OHTX!POO`!CR!OUORVNHVK!
3&;"(
.CR!NHEO!LHMON!ROLCCEM!?RCG!SQME!LO!HTEFUHEONK!%OO!2HGH\OSOGE!]CR!?RCG!
HTEFUHEFCGK!
!
3.1.10.3. Commands
2&KK7'<$:kCQ!HRO!HLIO!EC!RQG!TCSSHGN!IFGOM!NFROTEIV!UFH!EXO!*OL!FGEOR]HTOK!
!
@6'(2&KK7'<kCQ!THG!RQG!TCSSHGN!IFGOM!UFH!EXO!POL!FGEOR]HTOK!.FII!EXO!EO[E!HROH!
PFEX!VCQR!TCSSHGN!HGN!TIFT`!0QG!?CSSHGNM!EC!MQLSFEK! 4;7#;68:kCQ!THG!MHUO!MCSO!TCSSHGN!IFGOM!EC!LO!O[OTQEON!HE!MEHREQDtM!RCQEORK!.FII!EXO!
EO[E!HROH!PFEX!TCSSHGNM!;CGIV!CGO!TCSSHGN!LV!RCP<!HGN!TIFT`!%HUO!%EHREQDK! 4>6;<&=':kCQ!THG!MHUO!MCSO!TCSSHGN!IFGOM!EC!LO!O[OTQEON!HE!MXQENCPGtM!RCQEORK!
.FII!EXO!EO[E!HROH!PFEX!TCSSHGNM!;CGIV!CGO!TCSSHGN!LV!RCP<!HGN!TIFT`!%HUO!
%XQENCPGK! 1%#"=755(HTX!EFSO!EXO!]FROPHII!FM!MEHREONY!FE!THG!RQG!MCSO!TQMECS!FDEHLIOM!
FGMERQTEFCGMK!.FII!EXO!EO[E!HROH!PFEX!]FROPHIItM!FGMERQTEFCGM!;CGIV!CGO!TCSSHGN!LV!RCP<!
HGN!TIFT`!%HUO!.FROPHIIK!
! ! ! !
:#!
26$;&K(49#%8;:?QMECS!MTRFDE!FM!MECRON!FG!>ESD>TQMECSKMX!]FIOK!kCQ!THG!RQG!FE!
SHGQHIIV!CR!QMO!TRCG!EC!THII!FEK!.FII!EXO!EO[E!HROH!PFEX!MTRFDEtM!FGMERQTEFCGM!;CGIV!CGO!
TCSSHGN!LV!RCP<!HGN!TIFT`!%HUO!?QMECS!%TRFDEK!
!
3.1.10.4. Factory Defaults
!
@"$";(#&6;"#($";;%'N$?IFT`!EXO!kOM!LQEECG!EC!ROMOE!HII!TCG]F\QRHEFCG!MOEEFG\M!EC!EXOFR!
NO]HQIE!UHIQOMK!-XOG!TIFT`!EXO!&DDIV!%OEEFG\M!LQEECGK!
3&;"(
&GV!MOEEFG\M!VCQ!XHUO!MHUON!PFII!LO!ICME!PXOG!EXO!NO]HQIE!MOEEFG\M!HRO!ROMECRONK!
&]EOR!ROMECRFG\!EXO!RCQEOR!FM!HTTOMMFLIO!QGNOR!EXO!NO]HQIE!,4!HNNROMM!":#K"79K"K"!
HGN!EXO!NO]HQIE!DHMMPCRN!HNSFGK!
!
3.1.10.5. Firmware Upgrade
!
1%#K=7#"(J8N#7<"ZOP!]FRSPHRO!UORMFCGM!THG!LO!DRCUFNON!LV!2H[CGK!,]!EXO!0CQEOR!
FM!GCE!O[DORFOGTFG\!NF]]FTQIEFOMY!EXOG!EXORO!FM!GC!GOON!EC!NCPGICHN!H!SCRO!ROTOGE!
]FRSPHRO!UORMFCGY!QGIOMM!EXHE!UORMFCG!XHM!H!GOP!]OHEQRO!EXHE!VCQ!PHGE!EC!QMOK!
3&;"(
*XOG!VCQ!QD\RHNO!EXO!0CQEORtM!]FRSPHROY!VCQ!ICMO!FEM!TCG]F\QRHEFCG!MOEEFG\MY!MC!
SH`O!MQRO!VCQ!PRFEO!NCPG!EXO!0CQEOR!MOEEFG\M!LO]CRO!VCQ!QD\RHNO!FEM!]FRSPHROK!
+&(68N#7<"(;>"(@&6;"#b$(:%#K=7#"P((
"K!3CPGICHN!EXO!]FRSPHRO!QD\RHNO!]FIO!]RCS!EXO!POLMFEOK!
#K!?IFT`!EXO!+RCPMOKKK!LQEECG!HGN!TXCMO!EXO!]FRSPHRO!QD\RHNO!]FIOK!
$K!?IFT`!EXO!1D\RHNO!LQEECG!HGN!PHFE!QGEFI!EXO!QD\RHNO!FM!]FGFMXONK!
3&;"(
1D\RHNFG\!]FRSPHRO!SHV!EH`O!H!]OP!SFGQEOMK!
3C!GCE!EQRG!C]]!EXO!DCPOR!CR!DROMM!EXO!ROMOE!LQEECGy!
! ! ! !
:$!
,:;"#(:57$>%'Nc(#"$";(;&,]!VCQ!PHGE!EC!ROMOE!EXO!RCQEOR!EC!EXO!NO]HQIE!MOEEFG\M!]CR!EXO!
]FRSPHRO!UORMFCG!VCQ!HRO!QD\RHNFG\!ECY!TIFT`!EXO!.FRSPHRO!3O]HQIEM!CDEFCGK!
!
3.1.10.6. Backup
!
-79\68(4";;%'N$kCQ!SHV!LHT`QD!VCQR!TQRROGE!TCG]F\QRHEFCG!FG!THMO!VCQ!GOON!EC!
ROMOE!EXO!RCQEOR!LHT`!EC!FEM!]HTECRV!NO]HQIE!MOEEFG\MK!?IFT`!EXO!+HT`QD!LQEECG!EC!LHT`!QD!
VCQR!TQRROGE!TCG]F\QRHEFCGK! @"$;&#"(4";;%'N$?IFT`!EXO!+RCPMOKKK!LQEECG!EC!LRCPMO!]CR!H!TCG]F\QRHEFCG!]FIO!EXHE!FM!
TQRROGEIV!MHUON!CG!VCQR!4?K!?IFT`!EXO!0OMECRO!LQEECG!EC!CUORPRFEO!HII!TQRROGE!
TCG]F\QRHEFCGM!PFEX!EXO!CGOM!FG!EXO!TCG]F\QRHEFCG!]FIOK!
3&;"(
/GIV!ROMECRO!TCG]F\QRHEFCGM!PFEX!]FIOM!LHT`ON!QD!QMFG\!EXO!MHSO!]FRSPHRO!HGN!EXO!
MHSO!SCNOI!C]!RCQEORK!
!
! ! ! !
:5!
3.1.11. Status
3.1.11.1. Router
!
@&6;"#(37K"P!GHSO!C]!EXO!RCQEORY!MOEEFG\!LHMFT!MOEEFG\!EC!SCNF]V!
@&6;"#(D&<"5P(SCNOI!C]!EXO!RCQEORY!QGHUHFIHLIO!EC!SCNF]V!
1%#K=7#"(!"#$%&'P(MC]EPHRO!UORMFCG!FG]CRSHEFCG!
D,2(,<<#"$$P(2&?!HNNROMM!C]!*&ZY!MOEEFG\!?ICGO!2&?!&NNROMM!EC!SCNF]V!
L&$;(37K"P(XCME!GHSO!C]!EXO!RCQEORY!MOEEFG\!LHMFT!MOEEFG\!EC!SCNF]V!
H,3(C&K7%'(37K"P(NCSHFG!GHSO!C]!*&ZY!MOEEFG\!LHMFT!MOEEFG\!EC!SCNF]V!
.,3(C&K7%'(37K"P!NCSHFG!GHSO!C]!'&ZY!QGHUHFIHLIO!EC!SCNF]V!
26##"';(+%K"P(ICTHI!EFSO!C]!EXO!MVMEOS!
J8;%K"P(CDORHEFG\!QDEFSO!HM!ICG\!HM!EXO!MVMEOS!FM!DCPORON!CG!
!
+&;75(,A7%57M5"P(EXO!RCCS!]CR!ECEHI!HUHFIHLIO!C]!0&2!;EXHE!FM!DXVMFTHI!SOSCRV!SFGQM!
MCSO!ROMORUO!HGN!EXO!`ORGOI!C]!LFGHRV!TCNO!LVEOM<!
1#""P(]ROO!SOSCRVY!EXO!RCQEOR!PFII!ROLCCE!F]!EXO!SOSCRV!FM!IOMM!EXHG!6==`+!
J$"<P(QMON!SOSCRVY!ECEHI!HUHFIHLIO!SOSCRV!SFGQM!]ROO!SOSCRV!
! ! ! !
:6!
-6::"#$P!QMON!SOSCRV!]CR!LQ]]ORMY!!
279>"<P!EXO!SOSCRV!QMON!LV!XF\XWMDOON!THTXO!SOSCRV!
,9;%A"P(HTEFUO!QMO!C]!LQ]]OR!CR!THTXO!SOSCRV!DH\O!]FIO!MFBO(
I'79;%AO)!GCE!C]EOG!QMON!FG!H!LQ]]OR!CR!THTXO!SOSCRV!DH\O!]FIO!MFBO!
!
IG(1%5;"#(D7W%K6K(G&#;$P!DROMOE!FM!5=:7Y!HUHFIHLIO!EC!ROWSHGH\OSOGE!
,9;%A"(IG(2&''"9;%&'$P(ROHI!EFSO!SCGFECR!HTEFUO!,4!TCGGOTEFCGM!C]!EXO!MVMEOSY!TIFT`!EC!
MOO!EXO!EHLIO!HM!LICP)!
!
,9;%A"(IG(2&''"9;%&'$P(ECEHI!HTEFUO!,4!TCGGOTEFCGM!
G#&;&9&5P(TCGGOTEFCG!DRCECTCI!
+%K"&6;$P(TCGGOTEFCG!EFSOCQEMY!QGFE!FM!MOTCGN!
4&6#9"(,<<#"$$P(MCQRTO!,4!HNNROMM!
@"K&;"(,<<#"$$P(ROSCEO!,4!HNNROMM!
4"#A%9"(37K"P!TCGGOTEFG\!MORUFTO!DCRE!
4;7;6$P(NFMDIHVON!MEHEQM!
! ! ! !
:7!
!
3.1.11.2. WAN
!
2&''"9;%&'(+B8"P(NFMHLIONY!MEHEFT!,4Y!HQECSHEFT!TCG]F\QRHEFCGW3@?4Y!444/(Y!44-4Y!
'#-4Y!$J>12-%!
2&''"9;%&'(J8;%K"P(TCGGOTEFG\!QDEFSOq!,]!NFMTCGGOTEY!NFMDIHV!ZCE!HUHFIHLIO!
!
IG(,<<#"$$P(,4!HNNROMM!C]!RCQEOR!*&Z!
46M'";(D7$\P(MQLGOE!SHM`!C]!RCQEOR!*&Z!
F7;"=7BP(EXO!\HEOPHV!C]!RCQEOR!*&Z!
C34[c(C34)c(C34QP(3Z%">3Z%#>3Z%$!C]!RCQEOR!*&Z!
!
@"K7%'%'N(."7$"(+%K"P(ROSHFGFG\!IOHMO!EFSO!C]!,4!HNNROMM!FG!3@?4!PHV!
CL2G(@"5"7$"P(ROIOHMO!3@?4!HNNROMM!
CL2G(@"'"=P(ROGOP!,4!HNNROMM!FG!3@?4!PHVY!NO]HQIE!FM!"!NHV!
!
.&N%'(4;7;6$P(TCGGOTEFCG!MEHEQM!C]!*&Z!
C%$9&''"9;%&'P(NFMTCGGOTE!
2&''"9;%&'P(TCGGOTE!!
!
! ! ! !
:8!
D&<65"(+B8"P(SCNQIO!EVDO!FG!$J>12-%!PHV!
4%N'75(4;7;6$P!MF\GHI!FGEOGMFEV!C]!EXO!SCNQIO!FG!$J>12-%!PHV!
3";=&#\P!GOEPCR`!EVDO!C]!EXO!SCNQIO!FG!$J>12-%!PHV!
!
!
+&;75(15&=P!]ICP!]RCS!DCPORWC]]!IHME!EFSO!QGEFI!GCP!MEHEFMEFTMY!NCPGICHN!HGN!QDICHN!
NFROTEFCG!
D&';>5B(15&=P(EXO!]ICP!C]!H!SCGEXY!QGFE!FM!2+!
.7$;(D&';>P!EXO!]ICP!C]!IHME!SCGEX!
3"W;(D&';>P!EXO!]ICP!C]!GO[E!SCGEX!
!
!
-79\68P(LHT`QD!NHEH!HNSFGFMERHEFCG!
@"$;&#"P(ROMECRO!NHEH!HNSFGFMERHEFCG!
C"5";"P(NOIOEO!NHEH!HNSFGFMERHEFCG!
! ! ! !
:9!
!
3.1.11.3. LAN
!
D,2(,<<#"$$P(2&?!&NNROMM!C]!EXO!'&Z!DCRE!(EXORGOE!!
IG(,<<#"$$P(,4!&NNROMM!C]!EXO!'&Z!DCRE!!
46M'";(D7$\P(%QLGOE!2HM`!C]!EXO!'&Z!DCRE!!
F7;"=7BP(JHEOPHV!C]!EXO!'&Z!DCRE!
.&975(C34P(3Z%!C]!EXO!'&Z!DCRE!
!
L&$;(37K"P!XCME!GHSO!C]!'&Z!TIFOGE!
IG(,<<#"$$P(,4!HNNROMM!C]!EXO!TIFOGE!
D,2(,<<#"$$P!2&?!HNNROMM!C]!EXO!TIFOGE!
2&''*(2&6';P!TCGGOTEFCG!TCQGE!THQMON!LV!EXO!TIFOGE!
@7;%&P!EXO!RHEFC!C]!5=:7!TCGGOTEFCG!
!
C32G(4"#A"#P(OGHLIO!CR!NFMHLIO!EXO!RCQEOR!PCR`!HM!H!3@?4!MORUOR!
CL2G(C7"K&'P(EXO!H\ROOSOGE!HIICTHEON!QMFG\!3@?4!FGTIQNFG\!3Z%2HM^!HGN!Q3@?4N!
4;7#;%'N(IG(,<<#"$$P(EXO!MEHREFG\!,4!&NNROMM!C]!EXO!3@?4!MORUORmM!&NNROMM!DCCI!
/'<%'N(IG(,<<#"$$P(EXO!OGNFG\!,4!&NNROMM!C]!EXO!3@?4!MORUORmM!&NNROMM!DCCI!
25%"';(."7$"(+%K"P(EXO!IOHMO!EFSO!C]!3@?4!TIFOGE!
! ! ! !
::!
!
L&$;(37K"P(XCME!GHSO!C]!'&Z!TIFOGE!
IG(,<<#"$$P!,4!HNNROMM!C]!EXO!TIFOGE!
D,2(,<<#"$$P(2&?!HNNROMM!C]!EXO!TIFOGE!
/W8%#"$P!EXO!O[DFRV!EXO!TIFOGE!ROGEM!EXO!,4!HNNROMM!
C"5";"P(TIFT`!EC!NOIOEO!3@?4!TIFOGE!
!
I';"#:79"P(EXO!FGEOR]HTO!HMMF\GON!LV!NFHIWQD!MVMEOS!
J$"#(37K"P(QMOR!GHSO!C]!444C(!TIFOGE!
.&975(IGP(,4!HNNROMM!HMMF\GON!LV!444C(!TIFOGE!
C"5";"P(TIFT`!EC!NOIOEO!444C(!TIFOGE!
!
I';"#:79"P(EXO!FGEOR]HTO!HMMF\GON!LV!NFHIWQD!MVMEOS!
.&975(IGP!EQGGOI!,4!HNNROMM!C]!ICTHI!'#-4!
@"K&;"(IGP!EQGGOI!,4!HNNROMM!C]!'#-4!MORUOR!
C"5";"P(TIFT`!EC!NFMTCGGOTE!'#-4!
!
I';"#:79"P(EXO!FGEOR]HTO!HMMF\GON!LV!NFHIWQD!MVMEOS!
J$"#(37K"P(QMOR!GHSO!C]!EXO!TIFOGE!
.&975(IGP(EQGGOI!,4!HNNROMM!C]!'#-4!TIFOGE!
@"K&;"(IGP(,4!HNNROMM!C]!'#-4!TIFOGE!
C"5";"P(TIFT`!EC!NOIOEO!'#-4!TIFOGE!
! ! ! !
"==!
!
I';"#:79"P(EXO!FGEOR]HTO!HMMF\GON!LV!NFHIWQD!MVMEOS!
.&975(IGP!EQGGOI!,4!HNNROMM!C]!ICTHI!44-4!
@"K&;"(IGP!EQGGOI!,4!HNNROMM!C]!44-4!MORUOR!
C"5";"P(TIFT`!EC!NFMTCGGOTE!44-4!
!
I';"#:79"P(EXO!FGEOR]HTO!HMMF\GON!LV!NFHIWQD!MVMEOS!
J$"#(37K"P!QMOR!GHSO!C]!EXO!TIFOGE!
.&975(IGP(EQGGOI!,4!HNNROMM!C]!44-4!TIFOGE!
@"K&;"(IGP(,4!HNNROMM!C]!44-4!TIFOGE!
C"5";"P!TIFT`!EC!NOIOEO!44-4!TIFOGE!
!
3.1.11.4. Wireless
(
D,2(,<<#"$$P!2&?!HNNROMM!C]!PFROIOMM!TIFOGE!
@7<%&P(NFMDIHV!PXOEXOR!RHNFC!FM!CG!CR!GCE!
D&<"P(PFROIOMM!SCNO!
3";=&#\P(PFROIOMM!GOEPCR`!SCNO!
44ICP(PFROIOMM!GOEPCR`!GHSO!
Loading...