LevelOne FBR-4000 User Manual
FBR-4000
Multi-WAN VPN Router
User Manual
V1.0
i
TABLE OF CONTENTS
1: INTRODUCTION ................................................................................................................................................ 1
INTERNET FEATURES............................................................................................................................................. 1
OTHER FEATURES ................................................................................................................................................ 3
PACKAGE CONTENTS ............................................................................................................................................ 4
PHYSICAL DETAILS ................................................................................................................................................ 4
Front Panel ..................................................................................................................................................... 4
Rear Panel ...................................................................................................................................................... 6
2: BASIC SETUP ................................................................................................................................................... 8
OVERVIEW ............................................................................................................................................................ 8
PROCEDURE ......................................................................................................................................................... 8
1. Configuring the Router for your LAN .......................................................................................................... 8
2. Installing the Router in your LAN .............................................................................................................. 12
3. Configuring the Router for Internet Access .............................................................................................. 13
4. Enable Dedicated DMZ Port ..................................................................................................................... 15
5. Configure PCs on your LAN ..................................................................................................................... 16
Macintosh Clients ......................................................................................................................................... 18
Linux Clients ................................................................................................................................................. 18
3: ADVANCED PORT .......................................................................................................................................... 19
OVERVIEW .......................................................................................................................................................... 19
PORT OPTIONS ................................................................................................................................................... 19
LOAD BALANCE ................................................................................................................................................... 21
ADVANCED PPPOE ............................................................................................................................................. 23
ADVANCED PPTP ............................................................................................................................................... 25
4: ADVANCED SETUP ........................................................................................................................................ 27
OVERVIEW .......................................................................................................................................................... 27
HOST IP ............................................................................................................................................................. 28
ROUTING ............................................................................................................................................................ 30
VIRTUAL SERVER ................................................................................................................................................ 33
SPECIAL APPLICATION ......................................................................................................................................... 36
DYNAMIC DNS .................................................................................................................................................... 38
MULTI DMZ ........................................................................................................................................................ 40
UPNP SETUP ..................................................................................................................................................... 41
NAT SETUP ........................................................................................................................................................ 42
ADVANCED FEATURE ........................................................................................................................................... 44
5: SECURITY MANAGEMENT ............................................................................................................................ 47
OVERVIEW .......................................................................................................................................................... 47
BLOCK URL ........................................................................................................................................................ 47
ACCESS FILTER .................................................................................................................................................. 49
SESSION LIMIT .................................................................................................................................................... 51
SYSFILTER EXCEPTION ....................................................................................................................................... 52
6: VPN CONFIGURATION ................................................................................................................................... 53
OVERVIEW .......................................................................................................................................................... 53
IKE GLOBAL SETUP ............................................................................................................................................ 53
IPSEC POLICY SETUP ......................................................................................................................................... 56
MESH GROUP SETUP .......................................................................................................................................... 63
VPN LOG ........................................................................................................................................................... 65
7: QOS CONFIGURATION .................................................................................................................................. 66
OVERVIEW .......................................................................................................................................................... 66
QOS SETUP ....................................................................................................................................................... 66
ii
POLICY CONFIGURATION ..................................................................................................................................... 67
8: MANAGEMENT ASSISTANT .......................................................................................................................... 70
OVERVIEW .......................................................................................................................................................... 70
ADMIN. SETUP .................................................................................................................................................... 71
SETTINGS – ADMIN. SETUP.................................................................................................................................. 71
EMAIL ALERT ...................................................................................................................................................... 73
SNMP ............................................................................................................................................................... 74
SYSLOG.............................................................................................................................................................. 75
UPGRADE FIRMWARE .......................................................................................................................................... 77
9: NETWORK INFO ............................................................................................................................................. 78
OPERATION ........................................................................................................................................................ 78
SYSTEM STATUS ................................................................................................................................................. 78
Restore Factory Defaults .............................................................................................................................. 80
WAN STATUS ..................................................................................................................................................... 81
APPENDIX A - SPECIFICATION ......................................................................................................................... 82
APPENDIX B - WINDOWS TCP/IP SETUP ........................................................................................................ 83
APPENDIX C - TROUBLESHOOTING ................................................................................................................ 89
Page 1
1: Introduction
Congratulations on the purchase of your new Multi-WAN VPN Router. The Multi-WAN VPN
Router not only provides a selection of 1~4 WAN ports – it also provides Shared Broadband
Internet Access for all LAN users.
Figure 1-1: Multi-WAN VPN Router
Internet Features
Flexible use of WAN ports
There are 4 WAN ports available for use on Multi-WAN Link Balancer. The user can decide how
many WAN ports to use by setting the web page on setup area.
Shared Broadband Internet Access
All LAN users can access the Internet through the Multi-WAN VPN Router by sharing from one
(1) up to four (4) Broadband modems and connections.
High-Performance multi ADSL Modem Support
The Multi-WAN VPN Router has four (4) WAN ports, allowing the connection of up to four (4)
Broadband modems at the same time.
This can provide a greater increase in bandwidth than is allowed by a single modem.
This flexible configuration allows each port to use a different type of modem and connection
method. Also, the Internet traffic that is shared between the 4 modems can be pre-determined.
Support for all common Connection Methods
All popular DSL, Cable Modems and connection methods are supported. These include - Fixed
IP, Dynamic IP, PPPoE and PPTP.
Page 2
Outbound Traffic Load Balancing and Failover
There are a variety of load balancing methods that allow administrators to manage the traffic from
LAN or WAN in order to maximize bandwidth - as well as smart health check methods to protect
against connection failure for failover.
PPPoE Session Management
Multiple PPPoE sessions are supported and you can choose “mapping” sessions to selected PCs
if desired.
Multiple IP Address Support
If your ISP allocates you multiple IP addresses, these are also supported and you can “map” IP
addresses to selected PCs if desired.
Special Application
This feature allows you to use some non-standard applications; for example, where the port
number used for the response is different to the port number used by the sender.
Virtual Server
This feature allows Internet users to access Internet servers on your LAN. For standard servers
such as Web, FTP or E-Mail servers, only the IP address of the server PC is required. You can
also define your own Server types if required.
Multiple DMZ
A "DMZ" PC will receive incoming connection requests which would otherwise be blocked. For
each IP address allocated by your ISP, a separate "DMZ" PC can be specified. So if your ISP has
given you multiple IP addresses, you can have multiple “DMZ” PCs. With the Multi-WAN VPN
Router, each “DMZ” PC has unrestricted 2-way Internet access, providing the ability to run
programs that are otherwise normally incompatible with NAT routers.
Access Filter
The network Administrator can use the Access Filter to gain fine control over the Internet access
and applications available to LAN users. Five (5) user groups are available and each group can
be assigned unique access rights.
Block URL
This feature can be used by the Administrator to block access to undesirable Web sites by LAN
users. You can even assign different settings for different groups of PCs.
Session Limit
With the Session Limit feature, if the number of new sessions for the system exceeds the
maximum allowance set by the Administrator in the sampling time, any new session in the system
will be dropped.
System Filter Exception
This feature ensures that every packet with an unrecognized port will be rejected so as to prevent
access to port scanning programs from hackers. However, in some situations this may incur
problems with some servers (e.g. SMTP server port 113) or WAN clients which require a
response packet to verify the availability of their communication peers.
VPN (Virtual Private Network)
Support is provided for up to 50 VPN tunnels with a failover and back-up mechanism.
Page 3
Other Features
12-Port Switching Hub
The Multi-WAN VPN Router incorporates a 12-port 10 /100BaseT switching hub, making it easy
to create or extend your LAN as needed.
DHCP Server Support
Dynamic Host Configuration Protocol provides a dynamic IP address to PCs and other devices
upon request. The Multi-WAN VPN Router can act as a DHCP Server for devices on your local
LAN.
Multi Segment LAN Support
LANs comprising of one or more segments or additional IPs are supported via the Multi-WAN
VPN Router's built-in static routing table.
Easy Setup
Setup and configuration is easily accomplished through your favorite WEB browser.
Remote Management
The Multi-WAN VPN Router can be managed from any PC on your LAN. Also, if an Internet
connection exists, it can (optionally) be configured via the Internet.
Password - protected Configuration
Optional password protection is provided to prevent unauthorized users from modifying the
configuration data and settings.
HTTP Firmware Upgrade and backup
The web management feature allows you to use HTTP upgrade for new firmware and backup
system configuration from a local or even remote site, as long as “Remote upgrade” and “Remote
web-based setup” is enabled in the Advanced feature web page.
Email Alert
The Email Alert will send a warning email message to the system administrator if any of the WAN
ports become disconnected when more than two WAN ports are enabled or if there is excessive
ping notification.
Syslog
This is a very useful feature for monitoring the device in that it can generate real time system
information on the web page or on a particular machine.
QoS Configuration.
This function will allow higher priority pass-through for specified packets such as real-time
applications like Internet phone, video conference, etc.
UPnP
When UPnP (Universal Plug & Play), is set to “Enable” - the Multi-WAN VPN Router becomes a
network device. This feature is useful for detecting and controlling network devices such as
Internet gateways.
Page 4
Package Contents
The following items are included in the Multi-WAN VPN Router package:
Multi-WAN VPN Router Unit
Power Cord
Quick Installation Guide
CD with Manual
If any of the above items are damaged or missing, please contact your dealer immediately.
Physical Details
Front Panel
Figure 1-2: Front Panel
Front Panel LED indication is as follows:
Power
OFF – No Power
ON – Normal Operation
Status
System
Packets
Blinking – Normal Operation.
ON/OFF – Error
Blinking – Packets Active
ON/OFF – No Packet
Ethernet
Green ON – 100M Linked
Yellow ON – 10M Linked
Blinking – Data Transmit / Receive.
OFF – No Linked
Page 5
Ethernet Ports and Reset Button
Ethernet Ports
WAN ports: Using Port 1 to Port 4 for connecting to Modem(s).
DMZ ports: Using Port 15 and Port 16
LAN ports: The remaining ports which are connected to PCs or a Hub.
Note:
Any port will automatically operate as an “Uplink” port if required. You can use a
normal LAN cable to connect to a normal port on another hub.
When pressed and released, the Multi-WAN VPN Router will reboot (restart)
within 1 second. It will reset to default when pushed and held for more than 3
seconds.
Some Status and Error conditions are indicated by the combinations of
LEDs, as shown below:
LED Action
Condition
Status – System & Packets flash alternatively.
Firmware Download in progress.
Status – System & Packets flash concurrently.
MAC address not assigned.
Status – System (Solid Off) & Packets (Solid On)
SDRAM error
Status – System (Solid On) & Packets (Solid On)
Timer/Interrupt error
Page 6
Rear Panel
Figure 1-3: Rear Panel
100 ~ 240VAC
Connects to AC100~240V / 50~60Hz with supplied AC power cord.
Default Settings
When the Multi-WAN VPN Router has finished booting, all configuration settings will be set to the
factory defaults, including:
IP Address set to its default value of 192.168.1.1, with a Network Mask of 255.255.255.0
DHCP Server is enabled
User Name: admin
Password cleared (no password)
TFTP Download
This setting should be used only if your Multi-WAN VPN Router becomes unusable and you are
attempting to restore it by upgrading the firmware. Follow this procedure:
1. Power-On the Multi-WAN VPN Router.
2. Use the supplied Windows utility or a TFTP client program to apply the new firmware. If using the
supplied Windows TFTP program, the screen will look like the following example:
Figure 1-4: Windows TFTP utility
Page 7
Enter the name of the firmware upgrade file located on your PC, or click the "Browse" button
to locate the file.
Enter the LAN IP address of the Multi-WAN VPN Router in the "Server IP" field.
Click "Upgrade Firmware" to send the file to the Multi-WAN VPN Router.
3. When the upgrade is finished, the Multi-WAN VPN Router should work normally. The factory
default settings will be applied.
Note:
The supplied Windows TFTP utility also allows you to perform three (3) additional operations:
Save the current configuration settings to your PC (use the "Save Configuration" button).
Restore a previously saved configuration file to the Multi-WAN VPN Router (use the "Upgrade
Firmware" button).
Set the Multi-WAN VPN Router to its default values (use the "Set to Default" button).
Page 8
2: Basic Setup
Overview
Basic Setup of your Multi-WAN VPN Router involves the following steps:
1. Attach the Multi-WAN VPN Router to a PC using any LAN port (5 to14) and configure it for your
LAN.
2. Install your Multi-WAN VPN Router in your LAN and connect the Broadband Modem(s).
3. Configure your Multi-WAN VPN Router for Internet Access.
4. Configure PCs on your LAN to use the Multi-WAN VPN Router.
Requirements
One (1) up to four (4) DSL or Cable modems, each with an ISP Internet Access account.
Network cables. Use standard 10/100BaseT network (UTP) cables with RJ45 connectors
TCP/IP network protocol must be installed on all PCs.
Procedure
1. Configuring the Router for your LAN
1. Use a standard LAN cable to connect your PC to any LAN port (5 -16) on the Multi-WAN VPN
Router. (WAN ports from Port 1 ~ 4)
2. Connect the power cord into the power outlet on the rear panel of the Multi-WAN VPN Router.
3. Power-on your PC. If your PC is already running, restart it. It will then obtain an IP address from
the Multi-WAN VPN Router.
4. Open your WEB browser.
5. In the Address or Location box enter:
HTTP://192.168.1.1
6. You will be prompted for the User Name and password, as shown below:
Figure 2-1: Password Dialog
Page 9
7. Enter admin for the "User Name" and leave the "Password" field blank.
The "User Name" is always set as admin
For security, it is highly recommended that you set a password. You may do this using the
Admin Setup screen.
8. After logging in, you will see the Administrator Password setup in the Admin Setup screen, as
shown below.
Assign a password by entering it in the "Password" and "Verify Password” Fields.
Figure 2-2: Home Screen (Admin. Setup)
Page 10
9. Select LAN & DHCP from the menu. You will see a screen like in the example below.
Figure 2-3: LAN & DHCP Setup
10. If your LAN already has a DHCP Server and you wish to continue using it, the following
configuration is required:
The DHCP Server function in the Multi-WAN VPN Router must be disabled. You will find this
setting in the LAN & DHCP screen.
Your DHCP Server must be configured to provide the Multi-WAN VPN Router's LAN IP
Address as the "Default Gateway".
Your DHCP Server must provide correct DNS addresses to any connected PCs.
11. Ensure these settings are suitable for your LAN:
See the following table for details of each setting. For most situations, the default settings will
be suitable.
Page 11
Settings – LAN & DHCP
12. Save your data, then go to Step 2, Installing the Multi-WAN VPN Router in your LAN.
LAN IP Configuration
IP Address – IP address for the Multi-WAN VPN Router, as seen
from the Local LAN. Use the default value unless the address is
already in use or your LAN is using a different IP Address range.
Subnet Mask –The default value 255.255.255.0 is standard for small
(class "C") networks. For other networks, use the Subnet Mask for
the LAN segment to which the Multi-WAN VPN Router is attached.
(The same value as the PCs on that LAN segment.)
Optional
Configuration
DHCP Server Setup – If set to “Enable”, the Multi-WAN VPN Router
will assign IP Addresses to the PCs (DHCP clients) on your LAN
when they start up. The default and recommended value is "Enable".
(Windows systems, by default, act as DHCP clients. This setting in
the Windows Internet Protocol (TCP/IP) Properties is: Obtain an IP
address automatically.)
LAN Any IP – By default this option is disabled. If you enable “LAN
Any IP”, then no matter what, the static IP address is held on the
client (your PC). The client does not need to change the IP address,
even though it has a different IP segment than the LAN segment. It
can still access the Internet through NAT.
DHCP Configuration
Lease Time – This is a finite period of time for a DHCP server to
lease an IP address to a client.
DNS Server IP for Client – An IP address of the default DNS server
for the client requesting DNS service.
Offered IP Range – The fields set the values used by the DHCP
server when allocating IP addresses to DHCP clients. This range
also determines the number of DHCP clients supported.
View DHCP List
This table shows the IP addresses which have been allocated by the
DHCP Server. For each address which has been allocated, the following
information is shown:
Free Entry – Indicates how many IP addresses the DHCP server can
allocate to DHCP clients.
Name – The "hostname" of the PC. In some cases, this may not be
known.
MAC Address – The physical address (network adapter address) of
the PC.
IP Address – The IP address that is allocated to this PC.
Type – Indicates whether the IP address is to be dynamic or static.
Status – If Dynamic, the IP address was allocated by this DHCP
Server. If Sniffed, the IP address was detected by examining the LAN
rather than allocated by the DHCP Server. In this case, the Name is
usually not known.
Time Left – The time expired since the IP address was leased.
Page 12
2. Installing the Router in your LAN
Figure 2-4: Installation Diagram
1. Ensure that the Multi-WAN VPN Router and any DSL/Cable modem(s) are powered-OFF.
Leave the modem or modems connected to their data lines.
2. Connect the Broadband modem(s) to the Multi-WAN VPN Router.
If using only one (1) Broadband modem, connect it to port 1.
Use the cable supplied with your DSL/Cable modem. If no cable was supplied, use a standard
cable.
3. Use standard LAN cables to connect PCs to the LAN ports on the Multi-WAN VPN Router.
Both 10BaseT and 100BaseT connections can be used simultaneously.
If you need to connect the Multi-WAN VPN Router to another Hub, just use a standard LAN
cable to connect any LAN port on the Multi-WAN VPN Router to a standard port on another
hub. Any LAN port on the Multi-WAN VPN Router will automatically act as an "Uplink" port
when required.
If devices are connected to the 4 WAN ports (1,2,3 & 4), the remaining ports (5 ~ 16), are
LAN ports. (You can enable Port 15 and Port 16 as dedicated DMZ ports)
4. Power-Up
Power-on the Cable or DSL modem(s).
Connect the supplied power cord to the Multi-WAN VPN Router and power-up.
5. Check the LEDs
The Power LED should be ON.
The Link/ACT LED should be ON if the corresponding WAN port is connected to a
broadband modem.
For each PC connected to the LAN ports, the corresponding LAN LED (either 10/Yellow or
100/Green) should be ON.
Page 13
3. Configuring the Router for Internet Access
Select Primary Setup from the menu. You will see a screen like in the example below.
Configure each WAN one by one through the Interface column pull-down menu.
For any of the following situations, refer to Chapter 3: Advanced Port Setup, for any further
configuration which may be required:
Using multiple WAN ports
Enabling multiple IP addresses on each WAN port
Enabling multiple PPPoE sessions
PPTP connection method
Figure 2-5: Primary Setup
Page 14
Settings – Primary Setup
Connection
Mode
Interface – A pull down menu for each WAN port that you are going to
connect to the Internet.
Connect Mode – Enable – Select this if you have connected a broadband
modem to this port. Disable – Select this if there is no broadband modem
connected to this port.
Connection
Type
Check the data supplied by your ISP and select the appropriate option.
Static IP – Select this if your ISP has provided a Fixed or Static IP address.
Enter the data into the Address Info fields.
Dynamic IP – Select this if your ISP provides an IP address automatically
when you connect. You can ignore the Address Info fields.
PPPoE – Select this if your ISP uses this method. (Usually, your ISP will
provide some PPPoE software; however, this software is not required and
should not be used.)
If this method is selected, you must complete the PPPoE dialup fields.
Note:
If using the PPTP connection method (enable PPTP Connection), select Static
IP or Dynamic IP as appropriate, according to the IP Address method used by
your ISP.
Address
Information
This is for Static IP users only. Enter the address information (IP Address,
Subnet Mask, Gateway) provided by your ISP. If your ISP provides multiple IP
address, you can use the Multi-DMZ screen to assign any additional IP
addresses.
PPPoE / PPTP
Dialup
This is for PPPoE or PPTP users only.
Enter the Username and Password provided by your ISP.
If using PPTP, enable the PPTP Connection checkbox and enter the IP
address of the PPTP server.
PPPoE Host name (Optional) – This field is used by a Host to uniquely
associate an access concentrator with a particular Host request.
Note:
There are additional PPPoE/PPTP options on the Port Options screen.
To use multiple PPPoE sessions on either port, configure settings in the
Advanced PPPoE screen.
DNS
If using a Fixed IP address, you MUST enter at least 1 DNS address.
If using a Dynamic IP, PPPoE or PPTP; DNS information is optional.
Page 15
Optional
Host name – This is required by some ISPs. If your ISP provided a Host
Name, enter it here. Otherwise, you can use the default value.
Domain name – This is required by some ISPs. If your ISP provided a
Domain Name, enter it here. Otherwise, you can use the default value.
MAC address – Some ISP records your MAC address (also called "Physical
address" or "Network Adapter address"). If so, you can enter the MAC
address expected by your ISP in this field. Otherwise, this should be left at
the default value.
Setup of the Multi-WAN VPN Router is now complete. PCs on your LAN must now be configured.
See the following section for details.
4. Enable Dedicated DMZ Port
DMZs allow computers behind the firewall to initiate requests outbound to the DMZ. Computers in the
DMZ in turn respond, forward or re-issue requests out to the Internet or other public network, as
proxy servers do
Select DMZ Setting from the Basic Configuration menu. You will see a screen like in the example
below.
Set Port15 or Port16 as dedicated DMZ port by select corresponding WAN Ports
Note:
Select LAN for Port15 and Port16, these ports will be the same as other LAN ports on the Router
Page 16
5. Configure PCs on your LAN
Overview
For each PC, the following settings may need to be configured:
TCP/IP network settings
Internet Access configuration
TCP/IP Settings
If using the default Multi-WAN VPN Router settings and the default Windows
95/98/ME/2000/XP TCP/IP settings, no changes need to be made. Just start (or restart) your
PC.
By default, the Multi-WAN VPN Router will act as a DHCP Server, automatically providing a
suitable IP Address (and related information) to each PC when the PC boots.
For all non-Server versions of Windows, the default TCP/IP setting is to act as a DHCP client. In
Windows, this setting is: Obtain an IP address automatically.
Just start (or restart) your PC and it will automatically obtain an IP address from the Multi-WAN
VPN Router.
If using fixed IP addresses on your LAN, or if you wish to check your TCP/IP settings, refer to
Appendix B – Windows TCP/IP Setup.
Internet Access
To configure your PCs to use the Multi-WAN VPN Router for Internet access, follow this procedure:
For Windows 9x/2000
1. Select Start Menu - Settings - Control Panel - Internet Options.
2. Select the Connection tab and then click the Setup button.
3. Select "I want to set up my Internet connection manually”, or “I want to connect through a local
area network (LAN)" and click Next.
4. Select "I connect through a local area network (LAN)" and click “Next”.
5. Ensure that all of the boxes on the following Local area network Internet Configuration screen are
unchecked.
6. Check the "No" option when prompted "Do you want to set up an Internet mail account now?"
7. Click Finish to close the Internet Connection Wizard.
Setup is now completed.
For Windows XP
1. Select Start Menu - Control Panel - Network Connections.
2. Select Create a new connection.
3. Click Next on the "New Connection Wizard" screen.
4. Select "Connect to the Internet" and click “Next”.
5. Select "Set up my connection manually" and click “Next”.
6. Check "Connect using a broadband connection that is always on" and click Next.
Page 17
7. Click Finish to close the New Connection Wizard.
Setup is now completed.
Accessing AOL
To access AOL (America On Line) through the Multi-WAN VPN Router, the AOL for Windows
software must be configured to use TCP/IP network access rather than a dial-up connection. The
configuration process is as follows:
Start the AOL for Windows communication software. Ensure that it is Version 2.5, 3.0 or later.
This procedure will not work with earlier versions.
Click the Setup button.
Select Create Location and change the location name from "New Locality" to " Multi-WAN VPN
Router".
Click Edit Location. Select TCP/IP for the Network field. (Leave the Phone Number field blank.)
Click Save, then OK.
Configuration is now complete.
Before clicking "Sign On", always ensure that you are using the "Multi-WAN VPN Router"
location.
Page 18
Macintosh Clients
For Macintosh users, the procedure for accessing the Internet via the Multi-WAN VPN Router is as
follows.
1. Open the TCP/IP Control Panel.
2. Select Ethernet from the Connect via pop-up menu.
3. Select Using DHCP Server from the Configure pop-up menu. The DHCP Client ID field can be left
blank.
4. Close the TCP/IP panel, saving your settings.
Note:
If using manually assigned IP addresses instead of DHCP, the required changes are:
Set the Router Address field to the Multi-WAN VPN Router‟s IP Address.
Ensure your DNS settings are correct.
Linux Clients
To access the Internet via the Multi-WAN VPN Router using Linux, it is only necessary to set the
Multi-WAN VPN Router as the "Gateway" and ensure your Name Server settings are correct.
Ensure you are logged in as "root" before attempting any changes.
Fixed IP Address
By default, most Unix installations use a fixed IP Address. If you wish to continue using a fixed IP
Address, make the following changes to your configuration.
Set your Default Gateway to the IP Address of the Multi-WAN VPN Router.
Ensure your DNS (Name server) settings are correct.
To act as a DHCP Client (recommended)
The procedure below may vary depending on your version of Linux and X -windows shell.
1. Start your X Windows client.
2. Select Control Panel - Network
3. Select the "Interface" entry for your Network card. Normally this will be called "eth0".
4. Click the Edit button, set the "protocol" to "DHCP" and save this data.
5. To apply your changes, use the "Deactivate" and "Activate" buttons if available. Otherwise, restart
your system.
Page 19
3: Advanced Port
Overview
Port Options contains some options which can be set on any WAN port. For most situations, the
default values are satisfactory.
Load Balance is only functional if you are using multiple WAN ports. It allows you to determine
the proportion of WAN traffic sent through each port.
Advanced PPPoE setup is required if you wish to use multiple sessions on each WAN port. It
can also be used to manually connect or disconnect a PPPoE session. Otherwise, this screen
can be ignored.
Advanced PPTP setup is required if using the PPTP connection method.
Port Options
Figure 3-1: Port Options
Page 20
Settings – Port Options
Interface
WAN Port – Select a particular WAN port from the pull-down menu to
setup WAN port configuration.
MTU – The Maximum Transmission Unit for the Ethernet data. This
is used to determine the packet size to be used on the WAN
interface. Normally, this does not need to be changed but if your ISP
advises you to use a particular MTU, enter it here. The default MTU
value is 1500 Bytes.
Connection Health
Check
Method – There are three methods available for checking if a WAN
port is alive or not. Multiple choices can be selected when using it.
Disable will not perform an Alive Indicator Check. By default, Health
Check is set to Enable. If the “Alive Indicator” input box is left blank,
Health Check performs an ICMP echo packet request to the specific
destination. This could be either a URL or an IP Address specified
by users in the “Alive Indicator” input box or WAN interface
gateway.
Interval – The interval time for device health check. The default
interval time is 60 seconds.
Alive Indicator – This is the IP address used to check if the WAN
connection is operating. The Multi-WAN VPN Router will contact
this system to check if the WAN connection is working or not. You
may change this address if you wish. Default is the gateway IP.
Note: This is not used for PPPoE connections.
Transparent Bridge
Option
Bridge Mode – If set to Enable, this WAN port doesn‟t use NAT &
Load Balance function when the LAN/WAN IP have the real IP
addresses on the same network segment.
NetBIOS Broadcast – If you enable the NetBIOS Broadcast, this
will allow you to access files through the Microsoft network
neighborhood.
Transparent Bridge
Options (For all
interfaces)
Traffic Management –
Strict Binding: Traffic from bridge hosts (eg. transparent to
WAN1) can only go through the specified WAN interface
(eg. WAN1).
Loose Binding: This acts as a failover mechanism for transparent
bridge mode. Traffic from bridge hosts (eg. transparent to
WAN1) can go through any WAN interface (eg. WAN2 or
other) when bind interface (eg. WAN1) is down.
Load Balancing: This acts as a load balancing mechanism for
transparent bridge mode. Traffic from bridge hosts (eg. transparent
to WAN1) can go through any WAN interface (eg. WAN1, 2 or
other) based on the loading mechanism specified in the load
balance section.
ARP Table – The ARP Table is used by the device to determine
the bridge hosts‟ location (e.g. inside/outside WAN and which
WAN). Its size can be adjusted if needed. View ARP Tables
displays ON/OFF selection of bridge mode on each WAN port.
Clear ARP Tables disables bridge mode on all WAN ports.
Page 21
Load Balance
This screen is only operational if using Internet connections on multiple WAN ports
Figure 3-2: Load Balance
Only functional when using two (2) or more WAN ports - these settings determine the proportion of
traffic sent over each port.
Page 22
Settings – Load Balance
Load Balance
Configuration
Enable – This enables your Load Balance setting options and must be
checked for other settings on this screen to be effective.
Balance Type – You can select the Balance types based on:
Bytes Tx + Rx – Traffic is measured by Bytes. (Least load)
Packets Tx + Rx – Traffic is measured by Packets. (Least load)
Sessions established – Traffic is measured by Sessions. (Least load)
IP Address – Traffic is measured by IP address. (Least load)
Auto Learning – The largest unused upload/outgoing bandwidth.
Fastest – The largest upload bandwidth.
Priority – The highest priority.
Round Robin – Continuously repeating sequence.
Weight Round Robin – In sequence with weight placed accordingly.
Loading Share – Enter the percentage (%) of traffic to be sent over each
WAN port. If one WAN port connection has a greater bandwidth than another,
the one with the greater bandwidth is given a higher percentage of traffic than
the other.
Click the "submit" button to save your changes.
NAT
Statistics
This section displays the current data about any WAN port. You can use this
information to help you "fine-tune" the settings above.
Interface
Statistics
This section displays cumulative statistics.
Use the "Restart Counters" button to restart the counters when required.
Buttons
Refresh – Update the data entered on the screen.
Restart Counters – Restart the counters used in the "Interface Statistics"
section.
Page 23
Advanced PPPoE
The Advanced PPPoE screen is required in order to use multiple PPPoE sessions on the same WAN
port.
It can also be used to manually connect or disconnect a PPPoE session.
Figure 3-3: Advanced PPPoE
Page 24
Settings – Advanced PPPoE
Select WAN Port
& Session
WAN Port – Selected WAN port only using PPPoE connection
PPPoE Session – ISPs can usually provide multiple floating real IPs for
PPPoE. Each WAN port can have up to eight (8) PPPoE sessions, each with
a different IP address if your WAN port is using PPPoE connectivity.
PPPoE Session MTU – The Maximum Transfer Unit for PPPoE packet data.
Leave it as default unless the ISP provides a different PPPoE packet data
size. The default MTU value is 1492 bytes.
WAN IP Account
User Name – Enter the PPPoE user name assigned by your ISP.
Password – Enter the PPPoE password assigned by your ISP.
Verify Password – Re-enter the PPPoE password assigned by your ISP.
Options
Specified Fix IP Address – If you have a fixed IP address, enter if here.
Otherwise, this field should be left at 0.0.0.0.
Assigned Host Name –This field is used by a Host to uniquely associate
an access concentrator with a particular Host request.
PPPoE Auto
Dialup
Auto Dialup (connect-on-demand) – If set to Enable, a connection will be
established whenever outgoing WAN traffic is detected. If not enabled,
you must establish a connection manually.
Disconnect after Idle – This determines when an idle connection will be
terminated. Enter the required time period. (-1: Always on)
Echo Time – This determines how often an Echo request is sent to the
PPPoE server. The Echo request is used to determine if the connection is
still alive. Normally, there is no need to change the default value.
Echo Retry – The number of times the Echo request will be sent, if there
is no response to the first request. Normally, there is no need to change
the default value.
Connection
Status
This displays the current connection status for each session.
Page 25
Advanced PPTP
This Advanced PPTP screen is only useful if using the PPTP connection method.
Figure 3-4: Advanced PPTP
Page 26
Settings – Advanced PPTP
WAN Port
Select the desired WAN port (click desired WAN on Connection Status). The
data of the selected port will then be displayed in the WAN IP Account
section.
PPTP MTU – Maximum transfer unit for PPTP. The default value is 1460
WAN IP Account
User Name – The PPTP user name (login name) assigned by your ISP.
Password – The PPTP password associated with the User Name above.
This is assigned by your ISP, and used to login to the PPTP Server.
Verify Password – Re-enter the PPTP password assigned by your ISP.
Server IP Address – Enter the IP address of the PPTP Server, as
provided by your ISP.
Static IP Address – If you have a fixed IP address, enter if here.
Otherwise, this field should be left at 0.0.0.0.
PPTP Auto Dialup
Auto Dialup (connect-on-demand) – If set to Enable, a connection will be
established whenever outgoing WAN traffic is detected. If not enabled,
you must establish a connection manually.
Disconnect after Idle – This determines when an idle connection will be
terminated. Enter the required time period. (-1: Always on)
Echo Time – This determines how often an Echo request is sent to the
PPTP server. The Echo request is used to determine if the connection is
still alive. Normally, there is no need to change the default value.
Echo Retry – The number of times the Echo request will be sent, if there
is no response to the first request. Normally, there is no need to change
the default value.
Connection
Status
This displays the current PPTP connection status.
Loading...