The device FBR-2000 2-WAN Broadband Router Administration and monitoring control is set
by the System Administrator. The System Administrator can add or modify System settings
and monitoring mode. The sub Administrators can only read System settings but not modify
them. In System, the System Administrator can:
(1) Add and change the sub Administrator‟s names and passwords;
(2) Back up all Multi-Homing Gateway settings into local files;
(3) Set up alerts for Hackers invasion.
What is System?
“System” is the managing of settings such as the privileges of packets that pass through the
FBR-2000 2-WAN Broadband Router and monitoring controls. Administrators may manage,
monitor, and configure Multi-Homing Gateway settings. All configurations are “read-only” for
all users other than the Administrator; those users are not able to change any settings for the
Multi-Homing Gateway.
The eleven sub functions under System are Admin, Setting, Date/Time, Multiple Subnet,
Hack Alert, Route Table, DHCP, DNS Proxy, Dynamic DNS, Logout and Software Update.
Admin: has control of user access to the Multi-Homing Gateway. He/she can add/remove
users and change passwords.
Setting: TheAdministrator may use this function to backup Multi-Homing Gateway
configurations and export (save) them to an “Administrator” computer or anywhere on the
network; or restore a configuration file to the device; or restore the Multi-Homing Gateway
back to default factory settings. Under Setting, the Administrator may enable e-mail alert
notification. This will alert Administrator(s) automatically whenever the Multi-Homing Gateway
has experienced unauthorized access or a network hit (hacking or flooding). Once enabled,
an IP address of a SMTP(Simple Mail Transfer protocol) Server is required. Up to two e-mail
addresses can be entered for the alert notifications.
Date/Time: This function enables the Multi-Homing Gateway to be synchronized either with
an Internet Server time or with the client computer‟s clock.
- 1 -
Page 9
Multiple Subnet This function allows local port to set multiple subnet works and connect with
the internet through different WAN 1 IP Addresses.
Hacker Alert When abnormal conditions occur, the Multi-Homing Gateway will send an e-mail
alert to notify the Administrator, and also display warning messages in the Event window of
Alarm.
Route Table Use this function to enable the Administrator to add static routes for the
networks when the dynamic route is not efficient enough.
DHCP Administrator can configure DHCP (Dynamic Host Configuration Protocol) settings for
the LAN (LAN) network.
DNS-Proxy The Multi-Homing Gateway Administrator may use the DNS Proxy function to
make the Multi-Homing Gateway act as a DNS Server for the Internal and DMZ network. All
DNS requests to a specific Domain Name will be routed to the Multi-Homing Gateway‟s IP
address. For example, let‟s say an organization has their mail server (i.e., mail.MH200.com)
in the DMZ network (i.e. 192.168.10.10). The outside Internet world may access the mail
server of the organization easily by its domain name, providing that the Administrator has set
up Virtual Server or Mapped IP settings correctly. However, for the users in the Internal
network, their WAN DNS server will assign them a public IP address for the mail server. So
for the Internal network to access the mail server (mail.MH2000.com), they would have to go
out to the Internet, then come back through the Multi-Homing Gateway to access the mail
server. Essentially, the internal network is accessing the mail server by a real public IP
address, while the mail server serves their request by a NAT address and not a real one.
This odd situation occurs when there are servers in the DMZ network and they are binded to
real IP addresses. To avoid this, set up DNS Proxy so all the Internal network computers will
use the Multi-Homing Gateway as a DNS server, which acts as the DNS Proxy.
Dynamic DNS The Dynamic DNS (require Dynamic DNS Service) allows you to alias a
dynamic IP address to a static hostname, allowing your device to be more easily accessed by
specific name. When this function is enabled, the IP address in Dynamic DNS Server will be
automatically updated with the new IP address provided by ISP
- 2 -
Page 10
Language The software provides English version, German version, Traditional Chinese
Version and Simplified Chinese Version for you to choose.
Permitted IP Only the authorized IP address is permitted to manage the Multi-Homing
Gateway.
Logout Administrator logs out the Multi-Homing Gateway. This function protects your
system while you are away.
Software Update: Administrators may visit distributor‟s web site to download the latest
firmware. Administrators may update the device firmware to optimize its performance and
keep up with the latest fixes for intruding attacks.
- 3 -
Page 11
Admin
On the left hand menu, click on Setup, and then select Admin below it. The current list of
Administrator(s) shows up.
Settings of the Administration table
Administrator Name: The username of Administrators for the Multi-Homing Gateway. The user admin cannot be removed.
Privilege: The privileges of Administrators (Admin or Sub Admin)
The username of the main Administrator is Administrator with read / write privilege.
Sub Admins may be created by the Admin by clicking
read only privilege.
Configure: Click Modify to change the “Sub Administrator‟s” password and click Remove to
delete a “Sub Administrator.”
New Sub Admin
- 4 -
. Sub Admins have
Page 12
Adding a new Sub Administrator
Step 1. In the Admin window, click the New Sub Admin button to create a new Sub
Administrator.
Step 2. In the Add New Sub Administrator window:
Sub Admin Name: enter the username of new Sub Admin.
Password: enter a password for the new Sub Admin.
Confirm Password: enter the password again.
Step 3. Click OK to add the user or click Cancel to cancel the addition.
- 5 -
Page 13
Changing the Sub-Administrator’s Password
Step 1. In the Admin window, locate the Administrator name you want to edit, and click on
Modify in the Configure field.
Step 2. The Modify Administrator Password window will appear. Enter in the required
information:
Password: enter original password.
New Password: enter new password
Confirm Password: enter the new password again.
Step 3. Click OK to confirm password change or click Cancel to cancel it.
- 6 -
Page 14
Removing a Sub Administrator
Step 1. In the Administration table, locate the Administrator name you want to edit, and click
on the Remove option in the Configure field.
Step 2. The Remove confirmationpop-up box will appear.
Step 3. Click OK to remove that Sub Admin or click Cancel to cancel.
- 7 -
Page 15
Settings
TheAdministrator may use this function to backup the FBR-2000 2-WAN Broadband Router
configurations and export (save) them to an “Administrator” computer or anywhere on the
network; or restore a configuration file to the device; or restore the Multi-Homing Gateway
back to default factory settings.
Entering the Settings window
Click Setting in the System menu to enter the Settings window. The Multi-Homing
Gateway Configuration settings will be shown on the screen.
- 8 -
Page 16
Exporting Multi-Homing Gateway Gateway settings
Step 1. Under Multi-Homing Gateway Configuration, click on the Download button next
to Export System Settings to Client.
Step 2. When the File Download pop-up window appears, choose the destination place in
which to save the exported file. The Administrator may choose to rename the file
if preferred.
- 9 -
Page 17
Importing Multi-Homing Gateway settings
Step 1. Under Multi-Homing Gateway Configuration, click on the Browse button next to
Import System Settings. When the Choose File pop-up window appears, select the file to which contains the saved Multi-Homing Gateway Settings, then click OK.
Step 2. Click OK to import the file into the Multi-Homing Gateway or click Cancel to cancel
importing.
- 10 -
Page 18
Restoring Factory Default Settings
Step 1. Select Reset Factory Settings under Multi-Homing Gateway Configuration.
Step 2. Click OK at the bottom-right of the screen to restore the factory settings.
- 11 -
Page 19
Enabling E-mail Alert Notification
Step 1. Select Enable E-mail Alert Notification under E-Mail Settings. This function will
enable the Multi-Homing Gateway to send e-mail alerts to the System Administrator
when the network is being attacked by hackers or when emergency conditions
occur.
Step 2. Device Name: Enter the Device Name.
Step 3. Sender Address(Required by some ISPs): Enter the Sender Address.(Some ISPs
need Required.)
Step 4. SMTP Server IP: Enter SMTP server‟s IP address.
Step 5. E-Mail Address 1: Enter the first e-mail address to receive the alarm notification.
Step 6. E-Mail Address 2: Enter the second e-mail address to receive the alarm notification.
(Optional)
Step 7. Click OK on the bottom-right of the screen to enable E-mail alert notification.
- 12 -
Page 20
Web Management (WAN Interface)(Remote UI management)
The administrator can change the port number used by HTTP port anytime.
(Remote UI management)
Step 1.Set Web Management (WAN Interface). The administrator can change the port
number used by HTTP port anytime.
- 13 -
Page 21
MTU (set networking packet length)
The administrator can modify the networking packet length.
Step 1.MTU Setting. The administrator can modify the networking packet length.
- 14 -
Page 22
To-Multi-Homing Gateway Packets Log
Select this option to the device‟s To-Multi-Homing Gateway Packets Log. Once this
function is enabled, every packet to this appliance will be recorded for system manager to
trace.
- 15 -
Page 23
Multi-Homing Gateway Reboot
Select this option to the device‟s Multi-Homing Gateway Reboot. Once this function is
enabled, the Multi-Homing Gateway will be reboot.
Step 1. Click Setting in the Administration menu to enter the settings window.
Step 2. Reboot Multi-Homing Gateway:Click Reboot.
Step 3. A confirmation pop-up box will appear.
Step 4. Follow the confirmation pop-up box, click OK to restart Multi-Homing Gateway
or click Cancel to discard changes.
- 16 -
Page 24
Date/Time
Synchronizing the Multi-Homing Gateway with the System Clock
Admin can configure the FBR-2000 Multi-Homing Gateway date and time by either syncing
to an Internet Network Time Server (NTP) or by syncing to your computer clock.
Follow these steps to sync to an Internet Time Server
Step 1. Enable synchronization by checking the box.
Step 2. Click the down arrow to select the offset time from GMT.
Step 3. Enter the Server IP Address or Server name with which you want to
synchronize.
Step 4. Update system clock every 5 minutes You can set the interval
time to synchronize with outside servers. If you set it to 0, it means
the device will not synchronize automatically.
Follow this step to sync to your computer clock.
Step 1. Click on the Sync button.
Click the OK button below to apply the setting or click Cancel to discard
changes.
- 17 -
Page 25
- 18 -
Page 26
Multiple Subnet
NAT mode
Multiple Subnet allows local port to set multiple subnet works and connect with the internet
through different WAN 1 IP Addresses.
For instance:The lease line of a company applies several real IP Addresses 168.85.88.0/24,and
the company is divided into R&D department, service, sales department, procurement
department, accounting department, the company can distinguish each department by
different subne works for the purpose of convenient management. The settings are as the
following:
1.R&D department subnet work:192.168.1.11/24(Internal) 168.85.88.253(WAN 1)
2. Service department subnet work: 192.168.2.11/24(Internal) 168.85.88.252(WAN 1)
3.Sales depam ent subnet work: 192.168.3.11/24(Internal) 168.85.88.251(WAN 1)
4.Procurement department subnet work
192.168.4.11/24(Internal) 168.85.88.250(WAN 1)
5.Accounting department subnet work
192.168.5.11/24(Internal) 168.85.88.249(WAN 1)
The first department(R&D department) was set while setting interface IP, the other four
ones have to be added in Multiple Subnet,after completing the settings, each deparm ent
use the different WAN IP Address to connect to the internet. The settings of each
department are as the following
Service IP Address:192.168.2.1
Subnet Mask:255.255.255.0
Default Gateway:192.168.2.11
The other departments are also set by groups, this is the function of Multiple Subnet.
- 19 -
Page 27
Multiple Subnet settings
Click Multiple Subnet in the System menu to enter Multiple Subnet window.
Multiple Subnet
WAN Interface IP / Forwarding Mode:Display WAN Port IP Address and
Forwarding Mode.
Alias IP of Int. Interface / Netmask: Local port IP Address and subnet
Mask.
Modify:Modify the settings of Multiple Subnet. Click Modify to modify the
parameters of Multiple Subnet or click Delete to delete settings.
- 20 -
Page 28
Add Multiple Subnet NAT Mode.
Step 1. Click the Add button below to add Multiple Subnet.
Step 2. Enter the IP Address in the website name column of the new window.
Alias IP of LAN Interface: Enter Local port IP Address.
Netmask:Enter Local port subnet Mask.
WAN Interface IP
Add WAN 1 or WAN2 IP
Forwarding Mode
Click the NAT button below to setting.
Step 3. Click OK to add Multiple Subnet or click Cancel to discard changes.
- 21 -
Page 29
Modify Multiple Subnet
Step 1. Find the IP Address you want to modify and click Modify
Step 2. Enter the new IP Address in Modify Multiple Subnet window.
Step 3. Click the OK button below to change the setting or click Cancel to discard changes.
- 22 -
Page 30
Delete Multiple Subnet
Step 1.Find the IP Address you want to delete and click Delete.
Step 2.A confirmation pop-up box will appear, click OK to delete the setting or click Cancel to
discard changes.
- 23 -
Page 31
Routing Mode
Multiple Subnet allows local port to set Multiple Subnet Routing Mode works and connect
with the internet through different WAN IP Addresses.
For example, the leased line of a company applies several real IP Addresses 192.168.2.0/24 and
the company is divided into R&D, Customer Service, Sales, Procurement, and Accounting
Department. The company can distinguish each department by different subnet works for
the purpose of convenient management.
The settings are as the following:
- 24 -
Page 32
Step 1. Click System Configuration on the left side menu bar, then click Multiple
Subnet below it. Enter Multiple Subnet window.
Step 2. The definition of Multiple Subnet :
Forwarding Mode:Display Forwarding Mode which is NAT Mode or Routing
Mode.
WAN Interface IP: Display WAN Port IP Address.
Alias IP of Int. Interface / Subnet Mask: Local port IP Address and subnet
Mask.
Modify:Modify the settings of Multiple Subnet. Click Modify to modify the
parameters of Multiple Subnet or click Delete to delete settings.
- 25 -
Page 33
Adding a Multiple Subnet Routing Mode
Step 1. Click the Add button below to add Multiple Subnet.
Step 2. Enter the IP Address in Add Multiple Subnet window.
Forwarding Mode : Click the Routing button below to setting
WAN Interface IP : Add WAN IP.
Alias IP of LAN Interface: Enter Local port IP Address.
Netmask:Enter Local port subnet Mask.
Step 3. Click OK to add Multiple Subnet or click Cancel to discard changes.
- 26 -
Page 34
Step 4: Adding a new Incoming Policy. In the incoming window, click the New Entry button.
- 27 -
Page 35
Modify a Multiple Subnet Routing Mode
Step 1. Find the IP Address you want to modify in Multiple Subnet menu, then click Modify button, on the right side of the service providers, click OK.
Step 2. Enter the new IP Address in Modify Multiple Subnet window.
Step 3. Click the OK button below to change the setting or click Cancel to discard changes.
- 28 -
Page 36
Removing a Multiple Subnet Routing Mode
Step 1. Find the IP Address you want to delete in Multiple Subnet menu, then click Delete button, on the right side of the service providers, click OK.
Step 2. A confirmation pop-up box will appear, click OK to delete the setting or click Cancel to
discard changes.
- 29 -
Page 37
Hacker Alert
The Administrator can enable the device‟s auto detect functions in this section. When
abnormal conditions occur, the Multi-Homing Gateway will send an e-mail alert to notify the
Administrator, and also display warning messages in the Event window of Alarm.
Auto Detect functions
Detect SYN Attack: Select this option to detect TCP SYN attacks that
hackers send to server computers continuously to block or cut down all the
connections of the servers. These attacks will prevent valid users from
connecting to the servers.
【SYN Flood Threshold( Total) Pkts/Sec】: The System Administrator can
enter the maximum number of SYN packets per second that is allow to enter
- 30 -
Page 38
the network/Multi-Homing Gateway.
【SYN Flood Threshold( Per Source IP) Pkts/Sec】: The System
Administrator can enter the maximum number of SYN packets per second
from attacking source IP Address that is allow to enter the
network/Multi-Homing Gateway.
【SYN Flood Threshold Blocking Time ( Per Source IP) Seconds】: The
System Administrator can enter the blocking time when the number of SYN
packets per second from attacking source IP Address that is allow to enter
the network/Multi-Homing Gateway exceed the maximum number (define as
above). After blocking for certain seconds, the device will start to calculate
the max number of SYN packets per second from attacking source IP
Address, if the max number still exceed the define value, it will block the
attacking IP Address continuously.
Detect ICMP Attack: Select this option to detect ICMP flood attacks. When
hackers continuously send PING packets to all the machines of the LAN
networks or to the Multi-Homing Gateway via broadcasting, your network is
experiencing an ICMP flood attack.
【ICMP Flood Threshold( Total) Pkts/Sec】: The System Administrator can
enter the maximum number of ICMP packets per second that is allow to
enter the network/Multi-Homing Gateway.
【ICMP Flood Threshold( Per Source IP) Pkts/Sec】: The System
Administrator can enter the maximum number of ICMP packets per second
from attacking source IP Address that is allow to enter the network /
Multi-Homing Gateway.
【ICMP Flood Threshold Blocking Time ( Per Source IP) Seconds】: The
System Administrator can enter the blocking time when the number of ICMP
packets per second from attacking source IP Address that is allow to enter
the network / Multi-Homing Gateway exceed the maximum number (define
as above). After blocking for certain seconds, the device will start to
calculate the max number of ICMP packets per second from attacking
source IP Address, if the max number still exceed the define value, it will
block the attacking IP Address continuously.
- 31 -
Page 39
Detect UDP Attack: The same as ICMP Flood.
【UDP Flood Threshold( Total) Pkts/Sec】: The System Administrator can
enter the maximum number of UDP packets per second that is allow to enter
the network/Multi-Homing Gateway.
【UDP Flood Threshold( Per Source IP) Pkts/Sec】: The System
Administrator can enter the maximum number of UDP packets per second
from attacking source IP Address that is allow to enter the
network/Multi-Homing Gateway.
【UDP Flood Threshold Blocking Time ( Per Source IP) Seconds】: The
System Administrator can enter the blocking time when the number of UDP
packets per second from attacking source IP Address that is allow to enter
the network/Multi-Homing Gateway exceed the maximum number (define as
above). After blocking for certain seconds, the device will start to calculate
the max number of UDP packets per second from attacking source IP
Address, if the max number still exceed the define value, it will block the
attacking IP Address continuously.
Detect Ping of Death Attack: Select this option to detect the attacks of tremendous
trash data in PING packets that hackers send to cause System malfunction This
attack can cause network speed to slow down, or even make it necessary to restart
the computer to get a normal operation.
Detect IP Spoofing Attack: Select this option to detect spoof attacks. Hackers
disguise themselves as trusted users of the network in Spoof attacks. They use a
fake identity to try to pass through the Multi-Homing Gateway System and invade the
network.
Detect Port Scan Attack: Select this option to detect the port scans hackers use to
continuously scan networks on the Internet to detect computers and vulnerable ports
that are opened by those computers.
Detect Tear Drop Attack: Select this option to detect tear drop attacks. These are
packets that are segmented to small packets with negative length. Some Systems
treat the negative value as a very large number, and copy enormous data into the
System to cause System damage, such as a shut down or a restart.
Filter IP Source Route Option: Each IP packet can carry an optional field that
specifies the replying address that can be different from the source address
- 32 -
Page 40
specified in packet‟s header. Hackers can use this address field on disguised
packets to invade LAN networks and send LAN networks‟ data back to them.
Detect Land Attack: Some Systems may shut down when receiving packets with
the same source and destination addresses, the same source port and destination
port, and when SYN on the TCP header is marked. Enable this function to detect
such abnormal packets.
After enabling the needed detect functions, click OK to activate the changes.
- 33 -
Page 41
Route Table
In this section, the Administrator can add static routes for the networks.
Entering the Route Table screen
Click System on the left side menu bar, then click Route Table below it. The Route Table
window appears, in which current route settings are shown.
Route Table functions
Interface: Destination network , LAN or WAN 1/2 networks.
Destination IP: IP address of destination network.
- 34 -
Page 42
NetMask: Netmask of destination network.
Gateway: Gateway IP address for connecting to destination network.
Configure: Change settings in the route table.
Adding a new Static Route
Step 1. In the Route Table window, click the New Entry button.
Step 2. In the Add New Static Route window, enter new static route information.
Step 3. In the Interface field‟s pull-down menu, choose the network to connect (Internal,
WAN 1 or WAN 2).
Step 4. Click OK to add the new static route or click Cancel to cancel.
- 35 -
Page 43
Modifying a Static Route:
Step 1. In the Route Table menu, find the route to edit and click the corresponding Modify
option in the Configure field.
Step 2. In the Modify Static Route window, modify the necessary routing addresses.
Step 3. Click OK to apply changes or click Cancel to cancel it.
- 36 -
Page 44
Removing a Static Route
Step 1. In the Route Table window, find the route to remove and click the corresponding
Remove option in the Configure field.
Step 2. In the Remove confirmation pop-up box, click OK to confirm removing or click
Cancel to cancel it.
- 37 -
Page 45
DHCP
In the section, the Administrator can configure DHCP (Dynamic Host Configuration Protocol)
settings for the LAN (LAN) network.
Entering the DHCP window
Step 1. Click System on the left hand side menu bar, then click DHCP below it. The DHCP
window appears in which current DHCP settings are shown on the screen.
DHCP Address functions
Enable DHCP Support:Enable /Disable DCHP Support Domain Name:Enter the Domain Name of DHCP
Automatically Get DNS:Automatically detect DNS Server.
- 38 -
Page 46
DNS Server 1 : Enter the distributed IP address of DNS Server1.
DNS Server 2 : Enter the distributed IP address of DNS Server2.
WINS Server 1 : Enter the distributed IP address of WINS Server1.
WINS Server 2 : Enter the distributed IP address of WINS Server2.
Internal Interface :
Client IP Address Range 1: Enter the starting and the ending IP address
dynamically assigning to DHCP clients.
Client IP Address Range 2: Enter the starting and the ending IP address
dynamically assigning to DHCP clients. (Optional)
DMZ Interface :
Client IP Address Range 1: Enter the starting and the ending IP address
dynamically assigning to DHCP clients.
Client IP Address Range 2: Enter the starting and the ending IP address
dynamically assigning to DHCP clients. (Optional)
Leased Time: Enter the leased time for DHCP.
- 39 -
Page 47
Enabling DHCP Support
Step 1. In the Dynamic IP Address window, click Enable DHCP Support.
Step 2.
Enable DHCP Support:Enable /Disable DCHP Support Domain Name:Enter the Domain Name of DHCP
Automatically Get DNS:Automatically detect DNS Server.
DNS Server 1 : Enter the distributed IP address of DNS Server1.
DNS Server 2 : Enter the distributed IP address of DNS Server2.
WINS Server 1 : Enter the distributed IP address of WINS Server1.
WINS Server 2 : Enter the distributed IP address of WINS Server2.
Internal Interface :
Client IP Address Range 1: Enter the starting and the ending IP address dynamically
assigning to DHCP clients.
Client IP Address Range 2: Enter the starting and the ending IP address dynamically
assigning to DHCP clients. (Optional)
DMZ Interface :
Client IP Address Range 1: Enter the starting and the ending IP address dynamically
assigning to DHCP clients.
Client IP Address Range 2: Enter the starting and the ending IP address dynamically
assigning to DHCP clients. (Optional)
Leased Time: Enter the leased time for DHCP.
Step 3. Click OK to enable DHCP support.
- 40 -
Page 48
- 41 -
Page 49
Dynamic DNS
The Dynamic DNS (require Dynamic DNS Service) allows you to alias a dynamic IP
address to a static hostname, allowing your device to be more easily accessed by specific
name. When this function is enabled, the IP address in Dynamic DNS Server will be
automatically updated with the new IP address provided by ISP.
Click Dynamic DNS in the System menu to enter Dynamic DNS window.
1. The nouns in Dynamic DNS window:Update Status【Connecting; Update succeed; Update fail;
Unidentified error】
Domain name:Enter the password provided by ISP.
WAN IP Address:IP Address of the WAN port.
Modify:Modify dynamic DNS settings. Click Modify to change the DNS
parameters; click Delete to delete the settings.
2. How to use dynamic DNS:
The Multi-Homing Gateway provides 3 service providers, users have to regidter first to
use this function. For the usage regulations, see the providers‟ websites.
How to register:First, Click Dynamic DNS in the System menu to enter Dynamic DNS
window, then click Add button,on the right side of the service providers, click Register, the
service peroviders‟ website will appear, please refer to the website for the way of registration.
- 42 -
Page 50
- 43 -
Page 51
How to register:Firstly, Click Dynamic DNS in the System menu to enter Dynamic DNS
window, then click Add button,on the right side of the service providers, click Register, the
service providers‟ website will appear, please refer to the website for the way of registration.
- 44 -
Page 52
Dynamic DNS settings
Step 1: Click Add button.
Step 2: Click the information in the column of the new window.
Service providers:Select service providers.
Register:to the service providers‟ website.
WAN IP Address:IP Address of the WAN port.
automatically fill in the WAN 1/2 IP:Check to automatically fill in the
WAN 1/2 IP.。
User Name:Enter the registered user name.
Password:Enter the password provided by ISP(Internet Service Provider).
Domain name:Your host domain name provided by ISP.
Step 4: Click OK to add dynamic DNS or click Cancel to discard changes.
- 45 -
Page 53
Modify dynamic DNS
Step 1: Find the item you want to change and click Modify.
Step 2: Enter the new information in the Modify Dynamic DNS window.
Step 3: Click OK to change the settings or click Cancel to discard changes.
- 46 -
Page 54
Delete Dynamic DNS
Step 1: Find the item you want to change and click Delete.
Step 2: A confirmation pop-up box will appear, click OK to delete the settings or click Cancel
to discard changes.
- 47 -
Page 55
Language
Admins can configure the Multi-Homing Gateway Select the Language version.
Step 1. Select the Language version (English Version/German Version/
Traditional Chinese Version or Simplified Chinese Version).
Step 2. Click 【OK】to set the Language version or click Cancel to discard
changes.
- 48 -
Page 56
Permitted IPs
Only the authorized IP address is permitted to manage the Multi-Homing Gateway.
- 49 -
Page 57
Add Permitted IP Address
Step 1. Click New Entry button.
Step 2. In IP Address field, enter the LAN IP address or WAN IP address.
IP address:Enter the LAN IP address or WAN IP address.
Netmask:Enter the netmask of LAN/WAN.
Ping:Select this to allow the external network to ping the IP Address of the
Firewall.
Http:Check this item, Web User can use HTTP to connect to the Setting
window of Multi-Homing Gateway.
Step 3.Click OK to add Permitted IP or click Cancel to discard changes.
- 50 -
Page 58
Modify Permitted IP Address
Step 1.In the table of Permitted IPs,highlight the IP you want to modify, and then click
Modify.
Step 2. In Modify Permitted IP, enter new IP address.
Step 3. Click OK to modify or click Cancel to discard changes.
- 51 -
Page 59
Remove Permitted IP addresses
Step 1.In the table of Permitted IPs, highlight the IP you want to remove, and then click
Remove.
Step 2. In Remove Permitted IP, enter new IP address.
Step 3. In the confirm window, click OK to remove or click Cancel to discard changes.
- 52 -
Page 60
Logout
Select this option to the device‟s Logout the Multi-Homing Gateway. This function protects
your system while you are away.
Step 1. Click Logout the Multi-Homing Gateway.
Step 2. Click OK to logout or click Cancel to discard the change.
- 53 -
Page 61
Software Update
Under Software Update, the admin may update the device‟s software with a newer software.
- 54 -
Page 62
Interface
In this section, the Administrator can set up the IP addresses for the office network. The
Administrator may configure the IP addresses of the LAN network, the WAN 1/2 network, and
the DMZ network. The netmask and gateway IP addresses are also configured in this
section.
- 55 -
Page 63
LAN
Entering the Interface menu:
Click on Interface in the left menu bar. Then click on LAN below it. The current settings of
the interface addresses will appear on the screen.
- 56 -
Page 64
Configuring the Interface Settings
Internal Interface
Using the LAN Interface, the Administrator sets up the LAN network. The LAN network will
use a private IP scheme. The private IP network will not be routable on the Internet.
IP Address: The private IP address of the Multi-Homing Gateway‟s LAN network is the IP
address of the LAN port of the device. The default IP address is 192.168.1.1.
If the new LAN IP Address is not 192.168.1.1, the Administrator needs to set the IP Address
on the computer to be on the same subnet as the Multi-Homing Gateway and restart the
System to make the new IP address effective. For example, if the Multi-Homing Gateway‟s
new LAN IP Address is 172.16.0.1, then enter the new LAN IP Address 172.16.0.1 in the URL
field of browser to connect to Multi-Homing Gateway.
NetMask: This is the netmask of the LAN network. The default netmask of the device is
255.255.255.0.
Ping: Select this to allow the LAN network to ping the IP Address of the Multi-Homing
Gateway. If set to enable, the device will respond to ping packets from the LAN network.
Http: Select this to allow the device WEBUI to be accessed from the LAN network.
- 57 -
Page 65
WAN
Entering the Interface menu
Click on Interface in the left menu bar. Then click on WAN below it. The current
settings of the interface addresses will appear on the screen.
Balance Mode:
Auto: The Multi-Homing Gateway distributes the WAN 1/2 download by proportion
automatically according to the WAN download bandwidth. (For users who are using various
download bandwidth.)
Round-Robin: The Multi-Homing Gateway distributes the WAN 1/2 download bandwidth 1:1,
in other words, it selects the agent by order. (For users who are using same download
- 58 -
Page 66
bandwidths.)
By Traffic: The Multi-Homing Gateway distributes the WAN 1/2 download bandwidth by traffic.
(For users who are connected to the Internet via a fixed WAN IP address.By Session: The Multi-Homing Gateway distributes the WAN 1/2 download bandwidth by
session. (For users who are connected to the Internet via a fixed WAN IP address.
By Packet: The Multi-Homing Gateway distributes the WAN 1/2 download bandwidth by
packet and saturated connection. (For users who are connected to the Internet via a fixed
WAN IP address.
WAN No: Set the WAN 1/2 order.
Connect Mode: Display the current connection mode: PPPoE, Dynamic IP Address (Cable
Modem User) or Static IP Address.
IP Address: Display the current WAN IP Address.
Saturated Connections: Set the number for saturation whenever session numbers reach it,
the Multi-Homing Gateway switches to the next agent on the list. This function is only
applicable for By Session mode.
Enable: Display Ping/Http functions of WAN 1/2 to show if they are enabled or disabled.
Configure: Click Modify to modify WAN 1/2 settings.
Priority: Set priority of WAN 1/2 for Internet Access.
- 59 -
Page 67
WAN 1/2 Interface
Using the WAN 1/2 Interface, the Administrator sets up the WAN 1/2 network. These IP
Addresses are real public IP Addresses, and are routable on the Internet.
For PPPoE (ADSL User): This option is for PPPoE users who are required to enter a
username and password in order to connect, such as ADSL users.
Current Status: Displays the current line status of the PPPoE connection.
IP Address: Displays the IP Address of the PPPoE connection
Username: Enter the PPPoE username provided by the ISP.
Password: Enter the PPPoE password provided by the ISP.
IP Address provided by ISP:
Dynamic: Select this if the IP address is automatically assigned by the ISP.
Fixed: Select this if you were given a static IP address. Enter the IP address that is
given to you by your ISP.
Max. Upstream/Downstream Bandwidth: The bandwidth provided by ISP.
Service-On-Demand:
Auto Disconnect: The PPPoE connection will automatically disconnect after a length
of idle time (no activities). Enter in the amount of idle minutes before disconnection.
Enter „0‟ if you do not want the PPPoE connection to disconnect at all.
Ping: Select this to allow the WAN 1 network to ping the IP Address of the
Multi-Homing Gateway. This will allow people from the Internet to be able to ping the
Multi-Homing Gateway. If set to enable, the device will respond to echo request packets from the WAN 1/2 network.
Http: Select this to allow the device WEBUI to be accessed from the WAN 1 network.
This will allow the WEBUI to be configured from a user on the Internet. Keep in mind
that the device always requires a username and password to enter the WEBUI.
- 60 -
Page 68
- 61 -
Page 69
For Dynamic IP Address (Cable Modem User): This option is for users who are
automatically assigned an IP address by their ISP, such as cable modem users. The
following fields apply:
IP Address: The dynamic IP address obtained by the Multi-Homing Gateway from the
ISP will be displayed here. This is the IP address of the WAN 1 (WAN) port of the
device.
MAC Address: This is the MAC Address of the device.
Hostname: This will be the name assign to the device. Some cable modem ISP
assign a specific hostname in order to connect to their network. Please enter the
hostname here. If not required by your ISP, you do not have to enter a hostname.
Ping: Select this to allow the WAN 1 network to ping the IP Address of the
Multi-Homing Gateway. This will allow people from the Internet to be able to ping the
Multi-Homing Gateway. If set to enable, the device will respond to echo request
packets from the WAN 1 network.
Max. Upstream/Downstream Bandwidth: The bandwidth provided by ISP.
Http: Select this to allow the device WEBUI to be accessed from the WAN 1 network.
This will allow the WebUI to be configured from a user on the Internet. Keep in mind
that the device always requires a username and password to enter the WebUI.
- 62 -
Page 70
- 63 -
Page 71
For Static IP Address:This option is for users who are assigned a static IP Address from
their ISP. Your ISP will provide all the information needed for this section such as IP
Address, Netmask, Gateway, and DNS. Use this option also if you have more than one
public IP Address assigned to you.
IP Address: Enter the static IP address assigned to you by your ISP. This will be
the public IP address of the WAN 1 port of the device.
Netmask: This will be the Netmask of the WAN 1 network. (i.e. 255.255.255.0)
Default Gateway: This will be the Gateway IP address.
Domain Name Server (DNS): This is the IP Address of the DNS server.
Max. Upstream/Downstream Bandwidth: The bandwidth provided by ISP.
Ping: Select this to allow the WAN 1 network to ping the IP Address of the
Multi-Homing Gateway. This will allow people from the Internet to be able to ping the
Multi-Homing Gateway. If set to enable, the device will respond to echo request packets from the WAN 1 network.
WebUI: Select this to allow the device WEBUI to be accessed from the WAN 1
network. This will allow the WebUI to be configured from a user on the
Internet. Keep in mind that the device always requires a username and
password to enter the WebUI.
- 64 -
Page 72
- 65 -
Page 73
DMZ
The Administrator uses the DMZ Interface to set up the DMZ network. The DMZ network
consists of server computers such as FTP, SMTP, and HTTP (web). These server computers
are put in the DMZ network so they can be isolated from the Internal (LAN) network traffic.
Broadcast messages from the Internal network will not cross over to the DMZ network to cause
congestions and slow down these servers. This allows the server computers to work
efficiently without any slowdowns.
DMZ Interface: Display DMZ NAT Mode /DMZ TRANSPARENT Mode functions of DMZ to
show if they are enabled or disabled.
IP Address: The private IP address of the Multi-Homing Gateway‟s DMZ interface. This will
be the IP address of the DMZ port. The IP address the Administrator chooses will be a
private IP address and cannot use the same network as the WAN or Internal network.
- 66 -
Page 74
NetMask: This will be the netmask of the DMZ network.
Ping: Select this to allow the DMZ network to ping the IP Address of the Multi-Homing
Gateway. This will allow people from the Internet to be able to ping the Multi-Homing
Gateway. If set to enable, the device will respond to echo request packets from the DMZ network.
Http: Select this to allow the device WEBUI to be accessed from the DMZ network. This will
allow the WebUI to be configured from a user on the Internet. Keep in mind that the device
always requires a username and password to enter the WebUI.
- 67 -
Page 75
Address
The Multi-Homing Gateway allows the Administrator to set Interface addresses of the Internal
network, Internal network group, WAN network, WAN network group, DMZ and DMZ group.
What is the Address Table?
An IP address in the Address Table can be an address of a computer or a sub network. The
Administrator can assign an easily recognized name to an IP address. Based on the network
it belongs to, an IP address can be an internal IP address, WAN IP address or DMZ IP
address. If the Administrator needs to create a control policy for packets of different IP
addresses, he can first add a new group in the Internal Network Group or the WAN Network
Group and assign those IP addresses into the newly created group. Using group addresses
can greatly simplify the process of building control policies.
With easily recognized names of IP addresses and names of address groups shown in the
address table, the Administrator can use these names as the source address or destination
address of control policies. The address table should be built before creating control policies,
so that the Administrator can pick the names of correct IP addresses from the address table
when setting up control policies.
- 68 -
Page 76
LAN
Entering the LAN window
Step 1. Click LAN under the Address menu to enter the LAN window. The current setting
information such as the name of the LAN network, IP and Netmask addresses will
show on the screen.
- 69 -
Page 77
Adding a new LAN Address
Step 1. In the LAN window, click the New Entry button.
Step 2. In the Add New Address window, enter the settings of a new LAN network address.
Step 3. Click OK to add the specified LAN network or click Cancel to cancel the changes.
- 70 -
Page 78
Modifying an LAN Address
Step 1. In the LAN window, locate the name of the network to be modified. Click the
Modify option in its corresponding Configure field. The Modify Address window
appears on the screen immediately.
Step 2. In the Modify Address window, fill in the new addresses.
Step 3. Click OK to save changes or click Cancel to discard changes.
- 71 -
Page 79
Removing an LAN Address
Step 1. In the LAN window, locate the name of the network to be removed. Click the
Remove option in its corresponding Configure field.
Step 2. In the Remove confirmation pop-up box, click OK to remove the address or click
Cancel to discard changes.
- 72 -
Page 80
LAN Group
Entering the LAN Group window
The LAN Addresses may be combined together to become a group.
Click LAN Group under the Address menu to enter the LAN Group window. The current
setting information for the LAN network group appears on the screen.
- 73 -
Page 81
Adding an LAN Group
Step 1. In the LAN Group window, click the New Entry button to enter the Add New
Address Group window.
Step 2. In the Add New Address Group window:
Available Address: list the names of all the members of the LAN network.
Selected Address: list the names to be assigned to the new group.
Name: enter the name of the new group in the open field.
Step 3. Add members: Select names to be added in Available Address list, and click the
Add>> button to add them to the Selected Address list.
Step 4. Remove members: Select names to be removed in the Selected Address list, and
click the <<Remove button to remove these members from Selected Address list.
Step 5. Click OK to add the new group or click Cancel to discard changes.
- 74 -
Page 82
Modifying an LAN Group
Step 1. In the LAN Group window, locate the network group desired to be modified and click
its corresponding Modify option in the Configure field.
Step 2. A window displaying the information of the selected group appears:
Available Address: list names of all members of the LAN network.
Selected Address: list names of members which have been assigned to this group.
Step 3.Add members: Select names in Available Address list, and click the Add>> button
to add them to the Selected Address list.
Step 4. Remove members: Select names in the Selected Address list, and click the
<<Remove button to remove these members from the Selected Address list.
Step 5. Click OK to save changes or click Cancel to discard changes.
- 75 -
Page 83
Removing an LAN Group
Step 1. In the LAN Group window, locate the group to be removed and click its
corresponding Remove option in the Configure field.
Step 2. In the Remove confirmation pop-up box, click OK to remove the group or click
Cancel to discard changes.
- 76 -
Page 84
WAN
Entering the WAN window
Click WAN under the Address menu to enter the WAN window. The current setting
information, such as the name of the WAN network, IP and Netmask addresses will show on
the screen.
- 77 -
Page 85
Adding a new WAN Address
Step 1. In the WAN window, click the New Entry button.
Step 2. In the Add New Address window, enter the settings for a new WAN network
address.
Step 3. Click OK to add the specified WAN network or click Cancel to discard changes.
- 78 -
Page 86
Modifying an WAN Address
Step 1. In the WAN table, locate the name of the network to be modified and click the
Modify option in its corresponding Configure field.
Step 2. The Modify Address window will appear on the screen immediately. In the Modify
Address window, fill in new addresses.
Step 3. Click OK to save changes or click Cancel to discard changes.
- 79 -
Page 87
Removing an WAN Address
Step 1. In the WAN table, locate the name of the network to be removed and click the
Remove option in its corresponding Configure field.
Step 2. In the Remove confirmation pop-up box, click OK to remove the address or click
Cancel to discard changes.
- 80 -
Page 88
WAN Group
Entering the WAN Group window
Click the WAN Group under the Address menu bar to enter the WAN window. The current
settings for the WAN network group(s) will appear on the screen.
- 81 -
Page 89
Adding an WAN Group
Step 1. In the WAN Group window, click the New Entry button and the Add New Address
Group window will appear.
Step 2. In the Add New Address Group window the following fields will appear:
Name: enter the name of the new group.
Available Address: List the names of all the members of the WAN network.
Selected Address: List the names to assign to the new group.
Step 3.Add members: Select the names to be added in the Available Address list, and
click the Add>> button to add them to the Selected Address list.
Step4. Remove members: Select the names to be removed in the Selected Address list,
and click the <<Remove button to remove them from the Selected Address list.
Step5. Click OK to add the new group or click Cancel to discard changes.
- 82 -
Page 90
Modify an WAN Group
Step 1. In the WAN Group window, locate the network group to be modified and click its
corresponding Modify button in the Configure field.
Step 2. A window displaying the information of the selected group appears:
Available Address: list the names of all the members of the WAN network.
Selected Address: list the names of the members that have been assigned to this
group.
Step3.Add members: Select the names to be added in the Available Address list, and
click the Add>> button to add them to the Selected Address list.
Step 4.Remove members: Select the names to be removed in the Selected Address list,
and click the <<Remove button to remove them from the Selected Address list.
Step 5. Click OK to save changes or click Cancel to discard changes.
- 83 -
Page 91
Removing an WAN Group
Step 1. In the WAN Group window, locate the group to be removed and click its
corresponding Modify option in the Configure field.
Step 2. In the Remove confirmation pop-up box, click OK to remove the group or click
Cancel to discard changes.
- 84 -
Page 92
DMZ
Entering the DMZ window:
Click DMZ under the Address menu to enter the DMZ window. The current setting
information such as the name of the internal network, IP, and Netmask addresses will show
on the screen.
- 85 -
Page 93
Adding a new DMZ Address:
Step 1. In the DMZ window, click the New Entry button.
Step 2. In the Add New Address window, enter the settings for a new DMZ address.
Step 3. Click OK to add the specified DMZ or click Cancel to discard changes.
- 86 -
Page 94
Modifying a DMZ Address:
Step 1. In the DMZ window, locate the name of the network to be modified and click the
Modify option in its corresponding Configure field.
Step 2. In the Modify Address window, fill in new addresses.
Step 3. Click OK on save the changes or click Cancel to discard changes.
- 87 -
Page 95
Removing a DMZ Address:
Step 1. In the DMZ window, locate the name of the network to be removed and click the
Remove option in its corresponding Configure field.
Step 2. In the Remove confirmation pop-up box, click OK to remove the address or click
Cancel to discard changes.
- 88 -
Page 96
DMZ Group
Entering the DMZ Group window:
Click DMZ Group under the Address menu to enter the DMZ window. The current settings
information for the DMZ group appears on the screen.
- 89 -
Page 97
Adding a DMZ Group:
Step 1. In the DMZ Group window, click the New Entry button.
Step 2. In the Add New Address Group window:
Available Address: list names of all members of the DMZ.
Selected Address: list names to assign to a new group.
Step 3. Name: enter a name for the new group.
Step 4. Add members: Select the names to be added from the Available Address list, and
click the Add>> button to add them to the Selected Address list.
Step 5. Remove members: Select names to be removed from the Selected Address list,
and click the <<Remove button to remove them from the Selected Address list.
Step 6. Click OK to add the new group or click Cancel to discard changes.
- 90 -
Page 98
- 91 -
Page 99
Modifying a DMZ Group:
Step 1. In the DMZ Group window, locate the DMZ group to be modified and click its
corresponding Modify button in the Configure field.
Step 2. A window displaying information about the selected group appears:
Available Address: list the names of all the members of the DMZ.
Selected Address: list the names of the members that have been assigned to this
group.
Step3.Add members: Select names to be added from the Available Address list, and
click the Add>> button to add them to the Selected Address list. Step 4.Remove members: Select names to be removed from the Selected Address list,
and click the <<Remove button to remove them from Selected Address list.
Step5. Click OK to save changes or click Cancel to cancel editing.
- 92 -
Page 100
Removing a DMZ Group:
Step 1. In the DMZ Group window, locate the group to be removed and click its
corresponding Remove option in the Configure field.
Step 2. In the Remove confirmation pop-up box, click OK to remove the group.
- 93 -
Loading...
+ hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.