HotBrick VPN 800 - 2 User Manual

Dual WAN Firewall Router
VPN 800 / 2
User’s Guide
HotBrick Network Solutions
HotBrick Network Solutions
TABLE OF CONTENTS
Internet Features ..........................................................................................................................1
Other Features..............................................................................................................................3
Package Contents ........................................................................................................................4
Physical Details ............................................................................................................................4
Overview........................................................................................................................................8
Procedure......................................................................................................................................8
Overview......................................................................................................................................18
Port Options................................................................................................................................19
Load Balance ..............................................................................................................................20
Advanced PPPoE........................................................................................................................22
Advanced PPTP..........................................................................................................................24
Overview......................................................................................................................................25
Host IP Setup ..............................................................................................................................25
Virtual Server ..............................................................................................................................28
Custom Virtual Server................................................................................................................30
Special Application ....................................................................................................................32
Dynamic DNS..............................................................................................................................34
Multi DMZ ....................................................................................................................................37
UPnP............................................................................................................................................39
NAT ..............................................................................................................................................40
Advanced Features ....................................................................................................................41
5: SECURITY MANAGEMENT ……………………………………………………………………………..44
Overview......................................................................................................................................44
Block URL ...................................................................................................................................44
Access Filter ...............................................................................................................................46
Session Limit ..............................................................................................................................48
System Filter Exception……….……………………………………………………………………….49
6: VPN CONFIGURATION …...……………………………………………………………………………..50
Overview......................................................................................................................................50
IPSec Global Setting ..................................................................................................................51
Policy Setup................................................................................................................................53
7: QOS CONFIGURATION ………………………………………………………………………………….58
Overview ………………………………………………………………………………………………...58
QoS Setup ...................................................................................................................................58
Policy Configuration...................................................................................................................59
8: MANAGEMENT ASSISTANT ........................................................................................................61
Overview......................................................................................................................................61
SNMP ...........................................................................................................................................61
Email Alert...................................................................................................................................62
Syslog..........................................................................................................................................64
Admin Password ........................................................................................................................66
Upgrade Firmware......................................................................................................................67
i
HotBrick Network Solutions
9: ADVANCED LAN CONFIGURATION ………………………………………………………………...68
Overview......................................................................................................................................68
Existing DHCP Server ………………………………………………………………………………...68
Routing........................................................................................................................................68
10: OPERATION AND STATUS .......................................................................................................71
Operation.....................................................................................................................................71
System Status.............................................................................................................................71
WAN Status.................................................................................................................................74
NAT Status ..................................................................................................................................75
Overview......................................................................................................................................78
TCP/IP Settings...........................................................................................................................78
Overview......................................................................................................................................84
General Problems.......................................................................................................................84
Internet Access...........................................................................................................................84
Copyright 2004. All Rights Reserved. Document Version: 1.4 All trademarks and trade names are the properties of their respective owners.
ii
HotBrick Network Solutions

1: Introduction

Congratulations on the purchase of your new HotBrick VPN 800/2 Firewall Router. The VPN 800/2 Firewall Router provides Shared Broadband Internet Access and VPN tunnels for LAN users.
Figure 1-1: VPN 800/2 Firewall Router

Internet Features

Shared Broadband Internet Access All LAN users can access the Internet through the VPN 800/2 Firewall Router, by sharing one (1)
or two (2) Broadband modems and connections.
High-Performance Dual Modem Support The VPN 800/2 Firewall Router has two (2) WAN ports, allowing connection of two (2) Broadband
modems. This gives twice the bandwidth of a single modem. Flexible configuration allows each port to use a different type of modem and connection method. Also, you can determine how the Internet traffic is shared between the 2 modems.
Supports all common Connection Methods All popular DSL and Cable Modems and connection methods are supported, including Fixed IP,
Dynamic IP, PPPoE, and PPTP.
Page 1
HotBrick Network Solutions
PPPoE Session Management Multiple PPPoE sessions are supported and you can choose to “map” sessions to individual PCs
if desired.
Multiple IP Address Support If your ISP allocates you multiple IP addresses, these are also supported and you can “map” IP
addresses to individual PCs if desired.
Special Applications This feature allows you to use some non-standard applications, where the port number used for
the response is different to the port number used by the sender.
Virtual Servers This feature allows Internet users to access Internet servers on your LAN. For standard servers
such as Web, FTP or E-Mail servers, only the IP address of the server PC is required. You can also define you own Server types if required.
Multiple DMZ A "DMZ" PC will receive incoming connection requests, which would otherwise be blocked. For
each IP address allocated by your ISP, a separate "DMZ" PC can be specified. So if your ISP has given you multiple IP addresses, you can have multiple “DMZ” PCs. Each “DMZ” PC has unrestricted 2-way Internet access, providing the ability to run programs that are otherwise incompatible with NAT routers like the Load Balancer.
Access Filter The network Administrator can use the Access Filter to gain fine control over the Internet access
and applications available to LAN users. Five (5) user groups are available, and each group can have different access rights.
Block URL Use this feature to block access to undesirable Web sites by LAN users. You can even have
different settings for different groups of PCs.
Session Limit With Session Limit feature, if the numbers of new sessions for system exceed the maximum in
the sampling time, any new session in the system will be drop.
System Filter Exception With firewall exception, the packets will not be processed by firewall or NAT module, but be
processed directly by system protocol stack.
Page 2
HotBrick Network Solutions

Other Features

8-Port Switching Hub The VPN 800/2 Firewall Router incorporates with 8-port 10 /100BaseT switching hub, making it
easy to create or extend your LAN.
DHCP Server Support Dynamic Host Configuration Protocol provides a dynamic IP address to PCs and other devices
upon request. The VPN 800/2 Firewall Router acts as a DHCP Server for devices on your local LAN.
Multi Segment LAN Support LANs containing one or more segments are supported, via the VPN 800/2 Firewall Router's built-
in static routing table.
ARP proxy The ARP proxy feature allows you to assign an external (Internet) IP address to the VPN 800/2
Firewall Router's LAN port. This allows Servers on your LAN to have external (Internet) IP addresses.
Easy Setup Use your favorite WEB browser for configuration.
Remote Management The VPN 800/2 Firewall Router can be managed from any PC on your LAN. And, if the Internet
connection exists, it can also (optionally) be configured via the Internet.
Password - protected Configuration Optional password protection is provided to prevent unauthorized users from modifying the
configuration data and settings.
HTTP Firmware Upgrade and backup The web management feature allows you to use HTTP upgrade new firmware and backup
system configuration from local or even from remote site. As long as you enable “Remote upgrade” and “Remote web-based setup” from Advanced feature web page.
Email Alert It will send a warning email to the system administrator, if one of the WAN ports was
disconnected when both WAN ports are enabled.
Syslog It can generate real time system information on the web page or a particular machine. It is useful
to monitor the device.
QoS Configuration.
This function will make some specified packets with higher priority for pass-through. Especially you use real-time applications like Internet phone, videoconference, etc.
UPnP To “Enable” UpnP (Universal Plug & Play), the load balancer will become one of the network
devices. It is useful to discovery and control network devices, such as Internet gateway.
Page 3
HotBrick Network Solutions

Package Contents

The following items should be included:
The VPN 800/2 Firewall Router Unit
Power Cord.
Quick Installation Guide
CD-ROM containing the on-line manual.
If any of the above items are damaged or missing, please contact your dealer immediately.

Physical Details

Front Panel

Figure 1-2: Front Panel VPN 800/2 Firewall Router
Operation of the Front Panel LEDs is as follows:
LAN LED
100M (Green)
10M (Yellow)
WAN LED
Status LED
WAN Status
LAN Status
ON – The corresponding LAN port is using 100BaseT. OFF – No physical connection. ON – The corresponding LAN port is using 10BaseT. OFF – No physical connection. Green : 100M Yellow: 10M Flash: Active
Green Flash: WAN Active Yellow: Error Green Flash: LAN Active
Reset Button
Yellow: Error Blinking – Data in/out When pressed the reset button around 3 seconds, and release it. The VPN 800/2
Firewall Router will reset to factory default value.
Page 4
HotBrick Network Solutions
Also, some Status and Error conditions are indicated by combinations of LEDs, as shown below
LED Action Condition
WAN, LAN Status LEDs flash alternatively. Firmware Download in progress. WAN & LAN LEDs flash concurrently. MAC address not assigned.
Caution:
To re-plug the VPN 800/2 Firewall Router,it should be apart from unplug time more than 20 seconds.
Page 5

Rear Panel VPN 800/2 Firewall Router

Figure 1-3: Rear Panel VPN 800/2 Firewall Router
HotBrick Network Solutions
AC power socket
Connect the supplied power here.
Default Settings
When the VPN 800/2 Firewall Router has finished booting, all configuration settings will be set to the factory defaults, including:
IP Address set to its default value of 192.168.1.1, with a Network Mask of 255.255.255.0
DHCP Server is enabled
User Name: admin
Password cleared (no password)
TFTP Download
This setting should be used only if your VPN 800/2 Firewall Router is unusable, and you wish to restore it by downloading new firmware. Follow this procedure:
1. Power On the VPN 800/2 Firewall Router.
2. Use the supplied Windows utility or a TFTP client program applies the new firmware. If using the supplied Windows TFTP program, the screen will look like the following example.
Figure 1-4: Windows TFTP utility VPN F 800/2 Firewall Router
Enter the name of the firmware upgrade file on your PC, or click the "Browse" button to locate
the file.
Enter the LAN IP address of the VPN 800/2 Firewall Router in the "Server IP" field.
Click "Download" to send the file to the VPN 800/2 Firewall Router.
3. When downloading is finished. It should then work normally, using the default settings.
Page 6
HotBrick Network Solutions
Note:
The supplied Windows TFTP utility also allows you to perform three (3) other operations:
Save the current configuration settings to your PC (use the "Upload" button).
Restore a previously saved configuration file to the VPN 800/2 Firewall Router (use the
"Download" button).
VPN 800/2 Firewall Router to its default values (use the "Set to Default" button).
Page 7
HotBrick Network Solutions

2: Basic Setup

Overview

Basic Setup of your HotBrick VPN 800/2 Firewall Router involves the following steps:
1. Attach the HotBrick VPN 800/2 Firewall Router to one (1) PC, and configure it for your LAN.
2. Install your HotBrick VPN 800/2 Firewall Router in your LAN, and connect the Broadband Modem or Modems.
3. Configure your HotBrick VPN 800/2 Firewall Router Internet Access.
4. Configure PCs on your LAN to use the VPN 800/2 Firewall Router.

Requirements

One (1) or two (2) DSL or Cable modems, each with an Internet Access account with an ISP.
Network cables. Use standard 10/100BaseT network (UTP) cables with RJ45 connectors
TCP/IP network protocol must be installed on all PCs.

Procedure

1: Configuring the VPN 800/2 Firewall Router for your LAN

1. Use a standard LAN cable to connect your PC to any Hub port on the VPN 800/2 Firewall Router.
2. Connect the power cord and power up the VPN 800/2 Firewall Router. Only use the power cord provided; using a different one may cause hardware damage.
3. Start your PC. If your PC is already running, restart it. It will then obtain an IP address from the VPN 800/2 Firewall Router.
4. Start your WEB browser.
5. In the Address or Location box enter:
HTTP://192.168.1.1
6. You will be prompted for the User Name and password, as shown below.
Figure 2-1: Password Dialog
Page 8
HotBrick Network Solutions
7. Enter admin for the "User Name" and leave the "Password" blank.
The "User Name" is always admin
You can and should set a password, using the following Admin Password screen.
No Response?
Is your PC using a Fixed IP address? If so, you must configure your PC to use an IP address within the range 192.168.1.2 to
192.168.1.254, with a Network Mask of 255.255.255.0. See Appendix B – Windows TCP/IP Setup for details.
Check that the VPN 800/2 Firewall Router is properly installed, LAN connection is OK, and it is powered ON.
8. After the login, you will then see the Admin Password screen, as shown below. Assign a password by entering it in the "Password" and "Verify Fields.
Figure 2-2: Home Screen (Admin Password) VPN 800 /2
Page 9
HotBrick Network Solutions
9. Select LAN & DHCP from the menu. You will see a screen like the example below.
Figure 2-3: LAN & DHCP
10. Ensure these settings are suitable for your LAN:
The default settings are suitable for many situations.
See the following table for details of each setting.
11. Save your data, then go to Step 2, Installing the VPN 800/2 Firewall Router in your LAN.
Settings – LAN & DHCP
LAN IP Configuration
IP address - for the VPN 800/2 Firewall Router, as seen from the local LAN.
Use the default value unless the address is already in use or your LAN is using a different IP address range. In the latter case, enter an unused IP Address from within the range used by your LAN.
Subnet Mask -The default value 255.255.255.0 is standard for small (class "C") networks. For other networks, use the Subnet Mask for the LAN segment to which the VPN 800/2 Firewall Router is attached (the same value as the PCs on that LAN segment).
Page 10
HotBrick Network Solutions
DHCP Server Configuration
DHCP IP Address Range
ARP Proxy
DHCP Server Setup - If enabled, the VPN 800/2 Firewall Router will allocate IP Addresses to PCs (DHCP clients) on your LAN when they start up. The default and recommended value is "Enable". (Windows systems, by default, act as DHCP clients. This setting is called Obtain an IP address automatically.)
DHCP Server Setup - If you are already using a DHCP Server, the DHCP Server setting must be disabled, and the existing DHCP server must be set to provide the IP address of the VPN 800/2 Firewall Router as the Default Gateway.
Client Lease Time – It is a finite period of time for a DHCP server lease an IP address to a client.
Client Default DNS – An IP address of the default DNS server for the client requesting DHCP service.
Offered Range fields set the values used by the DHCP server when allocating IP Addresses to DHCP clients. This range also determines the number of DHCP clients supported.
Free Entries indicates how many DHCP entries are not currently allocated, and still available.
Enable this ONLY if the LAN port has an IP address in the same address range as the WAN port(s). This means that all PCs using this Gateway must have valid fixed external (Internet) IP addresses.
LAN Any IP Setup
DHCP Client List
If enabled, enter the IP address range used on your LAN. By default is disabled. If you enable “LAN any IP”, that means no matter what
static IP address hold on the client (your PC). The clients do not need to change the IP address, even though it has different IP segment than LAN segment, it still can access Internet through NAT.
This table shows the IP addresses which have been allocated by the DHCP Server function. For each address, which has been allocated, the following information is shown.
Name – The "hostname" of the PC. In some cases, this may not be known.
MAC Address – The physical address (network adapter address) of the PC.
IP Address – The IP address allocated to this PC.
Type – Indicates IP address to be dynamic or static.
Status – If Dynamic, the IP address was allocated by this DHCP Server.
If Sniffed, the IP address was detected by examining the LAN, rather than allocated by the DHCP Server. In this case, the Name is usually not known.
Time Left – The time expired since which IP address is leased.
Page 11
HotBrick Network Solutions

2. Installing the HotBrick VPN 800/2 Firewall Router in your LAN

1. Ensure the HotBrick VPN 800/2 Firewall Router and the DSL/Cable modem are powered OFF. Leave the modem or modems connected to their data line.
2. Connect the Broadband modem or modems to the VPN 800/2 Firewall Router.
If using only one (1) Broadband modem, connect it to the "WAN 1" port.
Use the cable supplied with your DSL/Cable modem. If no cable was supplied, use a
standard cable.
3. Use standard LAN cables to connect PCs to the Switching Hub ports on the VPN 800/2 Firewall Router.
Both 10BaseT and 100BaseT connections can be used simultaneously.
If you need to connect the VPN 800/2 Firewall Router to another Hub, just use a standard
LAN cable to connect any port on the VPN 800/2 Firewall Router to a standard port on another hub. Any LAN port on the VPN 800/2 Firewall Router will automatically act as an "Uplink" port when required.
4. Power Up
Power on the Cable or DSL modem or modems.
Connect the supplied power cord to the VPN 800/2 Firewall Router and power up.
5. Check the LEDs
The Power LED should be ON.
The WAN – Link LED should be ON, if the corresponding WAN port is connected to a
broadband modem.
The Error LED will flash during start up, but will then turn off. If it stays on, there is an error
condition.
For each PC connected to the LAN ports, the corresponding LAN LED (either 10 or 100)
should be ON.

3. Configuring the HotBrick VPN 800/2 Firewall Router for Internet Access

Select Primary Setup from the menu, to see a screen like the example below.
Configure WAN 1 and/or WAN 2 as required.
For any of the following situations, refer to Chapter 3: Advanced Port Setup for any further
configuration, which may be required.
Using both ports
Multiple IP addresses on either port
Multiple PPPoE sessions
PPTP connection method
Page 12
HotBrick Network Solutions
Figure 2-4: Primary Setup Screen VPN 800/2 Firewall Router
Settings – Primary Setup
Connection Mode
Select the appropriate setting:
Enable – Select this if you have connected a broadband modem to this port.
Disable – Select this if there is no broadband modem connected to this port.
Backup – Use this if you have a broadband modem on each port, and wish to normally use only one. Select Enable for the primary port, and Backup for the secondary port. The Backup port will only be used if the primary port fails.
Page 13
HotBrick Network Solutions
Connection Type
Address Info
PPPoE / PPTP Dialup
Check the data supplied by your ISP, and select the appropriate option.
Static IP – Select this if your ISP has provided a Fixed or Static IP address. Then enter the data into the Address Info fields.
Dynamic IP – Select this if your ISP provides an IP address automatically, when you connect. You can ignore the Address Info fields.
PPPoE – Select this if your ISP uses this method. (Usually, your ISP will provide some PPPoE software. This software is no longer required, and should not be used.) If this method is selected, you must complete the PPPoE dialup fields.
Note:
If using the PPTP connection method, select Static IP or Dynamic IP, as appropriate, according to the IP address method used by your ISP.
This is for Static IP users only. Enter the address information provided by your ISP. If your ISP provided multiple IP address, you can use the Multi-DMZ screen to assign the additional IP addresses.
This is for PPPoE and PPTP users only.
Enter the Username and Password provided by your ISP.
If using PPTP, enable the PPTP Connection checkbox, and enter the IP
address of the PPTP server.
Host name (Optional For PPPoE),This field is used by a Host to uniquely associate an access concentrator to a particular Host request.
Note:
There are additional PPPoE/PPTP options on the Port Options screen. To use multiple PPPoE sessions on either port, configure the Advanced
PPPoE screen.
DNS
Optional
Setup of the HotBrick VPN 800/2 Firewall Router is now complete. PCs on your LAN must now be configured. See the following section for details.
If using a Fixed IP address, you MUST enter at least 1 DNS address. If using Dynamic IP or PPPoE, DNS information is optional.
Host name – This is required by some ISPs. If your ISP provided a Host Name, enter it here. Otherwise, you can use the default value.
Domain name – This is required by some ISPs. If your ISP provided a Domain Name, enter it here. Otherwise, you can use the default value.
MAC address – Some ISP's record your MAC address (also called "Physical address" or "Network Adapter address"). If so, you can enter the MAC address expected by your ISP in this field. Otherwise, this should be left at the default value.
Page 14
HotBrick Network Solutions

4: Configure PCs on your LAN

Overview
For each PC, the following may need to be configured:
TCP/IP network settings
Internet Access configuration
TCP/IP Settings
If using the default VPN 800/2 Firewall Router settings, and the default Windows 95/98/ME/2000/XP TCP/IP settings, no changes need to be made. Just start (or restart) your PC.
By default, the VPN 800/2 Firewall Router will act as a DHCP Server, automatically providing a suitable IP Address (and related information) to each PC when the PC boots.
For all non-Server versions of Windows, the default TCP/IP setting is to act as a DHCP client. In Windows, this is called Obtain an IP address automatically. Just start (or restart) your PC and it will obtain an IP address from the VPN 800/2 Firewall Router.
If using fixed IP addresses on your LAN, or you wish to check your TCP/IP settings, refer to Appendix B – Windows TCP/IP Setup.
Internet Access
To configure your PCs to use the VPN 800/2 Firewall Router for Internet access, follow this procedure:
For Windows 9x/2000
1. Select Start Menu - Settings - Control Panel - Internet Options.
2. Select the Connection tab, and click the Setup button.
3. Select "I want to set up my Internet connection manually, or I want to connect through a local area network (LAN)" and click Next.
4. Select "I connect through a local area network (LAN)" and click Next.
5. Ensure all of the boxes on the following Local area network Internet Configuration screen are unchecked.
6. Check the "No" option when prompted "Do you want to set up an Internet mail account now?".
7. Click Finish to close the Internet Connection Wizard. Setup is now completed.
For Windows XP
1. Select Start Menu - Control Panel - Network and Internet Connections.
2. Select Set up or change your Internet Connection.
3. Select the Connection tab, and click the Setup button.
4. Cancel the pop-up "Location Information" screen.
5. Click Next on the "New Connection Wizard" screen.
6. Select "Connect to the Internet" and click Next.
Page 15
HotBrick Network Solutions
7. Select "Set up my connection manually" and click Next.
8. Check "Connect using a broadband connection that is always on" and click Next.
9. Click Finish to close the New Connection Wizard. Setup is now completed.
Accessing AOL
To access AOL (America On Line) through the VPN 800/2 Firewall Router, the AOL for Windows software must be configured to use TCP/IP network access, rather than a dial-up connection. The configuration process is as follows:
Start the AOL for Windows communication software. Ensure that it is Version 2.5, 3.0 or later. This procedure will not work with earlier versions.
Click the Setup button.
Select Create Location, and change the location name from "New Locality" to "VPN 800/2
Firewall Router".
Click Edit Location. Select TCP/IP for the Network field. (Leave the Phone Number blank.)
Click Save, then OK.
Configuration is now complete.
Before clicking "Sign On", always ensure that you are using the "VPN 800/2 Firewall Router" location.

Macintosh Clients

From your Macintosh, you can access the Internet via the VPN 800/2 Firewall Router. The procedure is as follows.
1. Open the TCP/IP Control Panel.
2. Select Ethernet from the Connect via pop-up menu.
3. Select Using DHCP Server from the Configure pop-up menu. The DHCP Client ID field can be left blank.
4. Close the TCP/IP panel, saving your settings.
Note:
If using manually assigned IP addresses instead of DHCP, the required changes are:
Set the Router Address field to the VPN 800/2 Firewall Router IP Address.
Ensure your DNS settings are correct.

Linux Clients

To access the Internet via the VPN 800/2 Firewall Router, it is only necessary to set the VPN 800/2 Firewall Router as the "Gateway", and ensure your Name Server settings are correct.
Ensure you are logged in as "root" before attempting any changes.
Page 16
HotBrick Network Solutions
Fixed IP Address
By default, most Unix installations use a fixed IP Address. If you wish to continue using a fixed IP Address, make the following changes to your configuration.
Set your Default Gateway to the IP Address of the VPN 800/2 Firewall Router.
Ensure your DNS (Name server) settings are correct.
To act as a DHCP Client (recommended)
The procedure below may vary according to your version of Linux and X -windows shell.
1. Start your X Windows client.
2. Select Control Panel - Network
3. Select the "Interface" entry for your Network card. Normally, this will be called "eth0".
4. Click the Edit button, set the "protocol" to "DHCP", and save this data.
5. To apply your changes Use the "Deactivate" and "Activate" buttons, if available. OR, restart your system.
Page 17
HotBrick Network Solutions

3: Advanced Port Setup

Overview

Port Options contains some options, which can be set on either or both WAN ports. For most situations, the default values are satisfactory.
Load Balance screen is only functional if you are using both WAN ports. It allows you to determine the proportion of WAN traffic sent through each port.
Advanced PPPoE setup is required if you wish to use multiple sessions on one or both of the WAN ports. It can also be used to manually connect or disconnect a PPPoE session. Otherwise, this screen can be ignored.
Advanced PPTP setup is required if using the PPTP connection method.

Port Options

Figure 3-1: Port Options
Page 18
Settings – Port Options
HotBrick Network Solutions
Connection Validation
PPPoE / PPTP Connection Options
Health Check – Disable will not do Alive Indicator Check. By default health check is enable. Health checking is performing an ICMP echo request and HTTP packets to the specific destination that could be either: 1. Name or IP Address user specified in the “Alive Indicator” input box or gateway of WAN interface if “Alive Indicator” input box is left blank.
Alive Indicator – This is the IP address used to check if the WAN connection is operating. The VPN 800/2 Firewall Router will contact this system to check if the WAN connection is working. Change this address if you wish. Default is the gateway IP. Note: This is not used for PPPoE connections.
MTU – The Maximum Transmission Unit is used when determining the packet size to be used on the WAN interface. Normally, this does not need to be changed, but if your ISP advises you to use a particular MTU, enter it here.
Auto Dialup – If set to Enable a connection will be established whenever outgoing WAN traffic is detected. If not Enabled, you must establish a connection manually.
Auto Disconnect – This determines when an idle connection will be terminated. Enter the required time period.
Echo Time – This determines how often an Echo request is sent to the PPPoE server. The Echo request is used to determine if the connection is still valid. Normally, there is no need to change the default value.
Transparent Bridge Option
Echo Retry – The number of time the Echo request will be sent, if there is no response to the first request. Normally, there is no need to change the default value.
Bridge Mode – If set to Enable, this WAN port doesn’t use NAT & Load Balance function when LAN/WAN IP have the real IP addresses on the same network segment.
NetBIOS Broadcast – This function can allow you access files through Microsoft network neighborhood. If you enable the NetBIOS Broadcast function.
Traffic Management –
Strict Binding: traffic from bridge hosts(eg.
transparent to wan1) can only go thru that specified wan(eg. wan1) interface.
Loose Binding: Traffic from bridge hosts (eg.
transparent to wan1) can go thru alternative wan(eg. wan2) interface when bind interface (eg. wan1) is down, it's acting like a fail over mechanism for transparent bridge mode.
Balancing:
Traffic from bridge hosts (eg. transparent to wan1) can
Load
go thru either wan(eg. wan1 or wan2) interface based on loading mechanism specified in the load balance section, it's acting like a load balancing mechanism for transparent bridge mode.
ARP Table – ARP table is used by the device to determine the bridge hosts’ location (eg, inside/outside wan and which wan) its’ size can be adjusted if needed.
Page 19
HotBrick Network Solutions

Load Balance

This screen is only operational if using Internet connections on both WAN ports.
Figure 3-2: Load Balance
These settings are only functional if using both WAN ports. If using both WAN ports, these settings determine the proportion of traffic sent over each port.
Page 20
Settings – Load Balance
HotBrick Network Solutions
Load Balance Configuration
NAT Statistics
Interface Statistics
Buttons
Enable – Use this to enable your Load Balance settings. Unless this is checked, the other settings on this screen have no effect.
Balance Type – Select the desired option:
Bytes rx+tx – Traffic is measured by Bytes.
Packets rx+tx – Traffic is measured by Packets.
Sessions established – Traffic is measured by Sessions.
IP Address – Traffic is measured by IP Address.
Loading Share on WAN 1 – Enter the percentage (%) of traffic to be sent
over WAN 1. If one WAN port connection has greater bandwidth than the other, the one with the greater bandwidth should be given a higher percentage of traffic than the other.
Click the "Update" button to save your changes. This section displays the current data about WAN 1 and WAN 2. You can use this
information to help you "fine-tune" the settings above. This section displays cumulative statistics. Use the "Restart Counters" button to restart these counters when required.
Update – Save the settings on this screen.
Refresh – Update the data on screen.
Restart Counters – Restart the counters used in the "Interface Statistics"
section.
Page 21
HotBrick Network Solutions

Advanced PPPoE

The screen is required in order to use multiple PPPoE sessions on the same WAN port. It can also be used to manually connect or disconnect a PPPoE session.
Settings – Advanced PPPoE
Select WAN Port & Session
WAN IP Account
Select the desired WAN Port and Session, then click the "Select" button. The data for the selected Port/Session will then be displayed in the WAN IP Account section.
Session MTU - The Maximum Transfer Unit for PPPoE packets data. Leave it as default, unless the ISP offers different PPPoE packets data size.
User Name – Enter the PPPoE user name assigned by your ISP.
Password – Enter the PPPoE password assigned by your ISP.
Verify Password – Re-enter the PPPoE password assigned by your ISP.
IP Address – If you have a fixed IP address, enter if here. Otherwise, this
field should be left at 0.0.0.0.
Host Name – This field is used by a Host to uniquely associate an access concentrator to a particular Host request.
Figure 3-3: Advanced PPPoE
Page 22
HotBrick Network Solutions
Action
Connection Status
Use the "Connect" and "Disconnect" buttons to establish or terminate a connection on this session, if required.
This displays the current connection status for each session.
Page 23
Loading...
+ 62 hidden pages