Lynx L-210 User Manual

Web Interface User’s Guide

ADSL Ethernet & USB Combo Router

1. Introduction..............................................................................................................................3

1.1 Features..........................................................................................................................3

2. Your gateway at a glance......................................................................................................... 5

2.1 Ports and buttons.............................................................................................................5

2.2 LED description...............................................................................................................5

3. Installing your Lynx L-210 ........................................................................................................6

4. Setting up your Lynx L-210 ...................................................................................................... 7

4.1 Log into your Lynx L-210................................................................................................. 7

4.2 Quick Start....................................................................................................................... 7

4.3 Setup (for advance user)................................................................................................. 8

4.3.1 Wide Area Network connection...............................................................................9

4.3.2 Local Area Network connection............................................................................... 9

4.4 Configuring the WAN....................................................................................................... 9

4.4.1 New Connection...................................................................................................... 9

4.4.2 Modify an Existing Connection.............................................................................. 16

4.4.3 Modem setup ........................................................................................................ 16

4.5 Configuring the LAN...................................................................................................... 16

4.5.1 Enable/Disable DHCP...........................................................................................17

4.5.2 Changing the Lynx L-210 IP address.................................................................... 18

4.5.3 Firewall/NAT Services........................................................................................... 19

4.6 Advanced (for advance user only)................................................................................. 19

4.6.1 UPnP.....................................................................................................................19

4.6.2 Port Forwarding.....................................................................................................20

4.6.3 Advanced Security................................................................................................21

4.6.4 Access Control...................................................................................................... 22

4.6.5 LAN clients............................................................................................................ 22

4.6.6 MAC Address Filters............................................................................................. 22

4.6.7 Multicast................................................................................................................ 24

4.6.8 Static Routing........................................................................................................ 25

4.6.9 Dynamic Routing................................................................................................... 25

4.7 Tools.............................................................................................................................. 26

4.7.1 System Commands............................................................................................... 26

4.7.2 User Management................................................................................................. 27

4.7.3 Update Firmware...................................................................................................27

4.7.4 Ping Test............................................................................................................... 27

4.7.5 Modem Test..........................................................................................................28

4.8 Status............................................................................................................................ 28

4.8.1 Network Statistics..................................................................................................28

4.8.2 Connection Status................................................................................................. 28

4.8.3 DHCP Clients........................................................................................................ 29

4.8.4 Modem Status....................................................................................................... 29

4.8.5 Product Information............................................................................................... 29

4.8.6 System Log........................................................................................................... 29

5. Appendix A: Troubleshooting................................................................................................. 30

5.1 The Lynx L-210 is not functional....................................................................................30

5.2 I can’t connect to the Lynx L-210................................................................................... 30

5.3 The DSL Link LED continues to blink but does not go solid........................................... 30

5.4 The DSL Link LED is always off.....................................................................................31

6. Lynx L-210 terms................................................................................................................... 32

1. Introduction

The Lynx L-210 is the perfect high-speed WAN bridge/router. This full-featured product is specifically designed to connec t to the Internet and directly c onnect to your local area network vi a high speed 10/100 Mbps Ethernet. The Lynx L-210 has also full NAT firewall and DMZ services to block unwanted users from accessing your network.

For game users, the Lynx L-210 had already pre configured for several low latency game ports. Just click on the game you are playing on line a n d the rest is done for you

The Lynx L-210 is fully co mpatible with all PCs; as lon g as the PC supports an Et hernet interface and is running a TCP/IP protoc ol st ac k, your PC c an hav e hi gh -sp eed WA N ac ces s . So, plug in t he Lynx L-210 (refer to eas y start guide), conf igure it (per your IS P’s requirement s) and enjoy the fas t Internet access like nev er before.

1.1 Features

ADSL/ATM Support

• ANSI T1.413 issue 2, ITU-T G.992.1 (G.dmt) and G.992.2 (G.lite) compliant

• ADSL2, ADSL2+, RE-ADSL compliant

• Rate Adaptive modem at 32 Kbps steps

• Dynamic Adaptive Equalisation to improve Carrier’s service area

• Bridge Tap Mitigation support

• ATM Layer with Traffic shaping QoS Support (UBR, CBR, VBR-rt, VBR-nrt)

• AAL ATM Attributes - AAL5

• Multiple PVC up to 8 support (Bridge Support)

• Spectral compatibility with POTS

• F5 OAM Loopback/Send and Receive

Encapsulation Support

• RFC2684 Bridge and Routed LLC and VC Mux support

• RFC2364 PPPoA Client support

• RFC2516 PPPoE Client support

• RFC2225/RFC1577 Classical IP Support

• Transparent Bridge Support

Network Support

• Static IP, Dynamic RIP routing support

• IP/TCP/UDP/ICMP/ARP/RARP Application Support

• Network Address Translation (NAT)

• Port Mapping/Forwarding

• Easy setup of Port Forwarding rules for popular Games/Applicat ion

• NAT Application Level Gateway for popular applications

• DHCP Server/Relay/client

• DNS Relay Agent

• DMZ support

• Single Session IP Sec and PPTP/L2TP VPN pass through support

• PPP Always on with configurable timeout

• PPP Dial on Demand

• Universal Plug and Play Support

Management Support

• Web Based HTTP management GUI

• TFTP/FTP Support for Firmware Upgrade

• Web Based Firmware Upgrade (Local)

• Soft Factory Reset Button via Web GUI

• Diagnostic Test (DSL, OAM, Network, Ping Test)

• Telnet/CLI (Read Only)

• Syslog Support

Security Support

• NAT for basic Firewall support

• Packet Filtering Firewall Support

• Stateful Packet Inspection Support

• Protection against Denial of Service attacks

• Password Authentication to Modem

External Connectors

• 1 x RJ-11 Telephone socket for ADSL line

• 1 x RJ45 for 10/100Base-T Ethernet (MDI-X)

• 1 x USB 1.1 Type B

• 1 x DC Jack for Power Input

• 1 x Factory Default Reset Button

2. Your gateway at a glance

The Lynx L-210 may have different ports and LEDs. Let’s take a look at the different options. Depending upon your model, it may have some or all of the features listed below

2.1 Ports and buttons

Reset and Restore to Factory Defaults: The restore to factory defaults feat ure will s et t he Ly nx L-

210 to its factory default configuration by res etting the Lynx L-210. You may need to place the Lynx L-210 into its factory defaults if the configuration is changed, you loose the abilit y to interface to the Lynx L-210 via the we b int erf ace, or f ollo wing a s oft war e up grad e,. T o res et t he Ly nx L- 210, si mply press the reset button f or about ~ 10 seconds . The Lynx L-210 will be reset to its factory defaults and after about 30 ~ 40 seconds the Lynx L-210 will become operational again.

LAN (local area network) port(s): connect to Ethernet network devices, such as a PC, hub, switch, or routers. Some Lynx L-210 came with a single LAN connection and some come with four LAN connections. Depending on the connection, you may need a cross over cable or a strait through cable.

Power is where you connect the power. Make sure to observe the proper power requirements. The require power is 9 volts.

USB (universal serial port): connects to a PC’s USB port. The Lynx L-210 only supports Window’s based PCs via an RNDIS driv er (included in the software).

DSL port: This is the WAN interface that connects directly to your phone line.

2.2 LED description

1. PWR/POWER

Lights up when power is supplied to the Lynx L-21 0.

2. ETH/ACT

Lights up when the Ethernet cable is prop erly connected from your Lynx L-210 to the Ethernet Card.

Flickers when the ADSL is transmitting/receiving data.

3. USB

Lights up when the USB connection is established.

Flickers when the ADSL is transmitting/receiving data

4. DSL

Lights up when the DSL connection is established.

Flickers when the Lynx L-210 is trying to establish a connection with the ADSL

Service Provider.

5. PPP/Internet

ights up when the PPP connection is establis hed.

3. Installing your Lynx L-210

1. Locate an optimum location for the Lynx L-210.

2. For connections to the Ethe rnet and DSL interfaces, pleas e refer to the easy start guid e.

3. Connect the AC Power Adapter. Depending upon the t ype of network, you may want to put the power supply on an uninterrupt ible supply. Only use the power ad apter supplied with the Lynx L-210. A different adapter may damage the product.

Now that the hardware inst allation is complete, proceed to Chapter 4: Setting up your Lynx L-210

4. Setting up your Lynx L-210

This section will guide you through your Lynx L-210’s configuration. The Lynx L-210 is shipped with a standard PPP configuration.

4.1 Log into your Lynx L-210

To configure your Lynx L-210, open your web browser. You may get an error message at this point; this is normal. Do not panic!. Continue following these directions. Type the default IP address (192.168.1.1) Press the Enter key and the following screen, shown in Figure 1 will appear. The default user name is admin (case sensitive) and the password is admin (case sensitive).

Note: Before setting up your Lynx L-210, make sure you have followed the easy start guide. You should have your computers configured for DHCP mode and have proxies disabled on your browser. Also if you access the Lynx L-210, and instead of getting a login screen, the browser instead displays a login redirection screen, you should check your browser's setting, and verify that JavaScript support is enabled. Also, if you do not get the screen shown in Figure 1, you may need to delete your temporary Internet files (basically flush the cached web pages).

Figure 1 (Log-in screen)

4.2 Quick Start

The first screen (Figure 2) that appears (after the log in screen) is the Quick Start screen. By default the Lynx L-210 has being configured to PPP connection and user would only need to enter the username and password (as spec ified by the local ISP) to make connection to the inter net.

The Quick Start page is meant for basic users whom only require easy and seamless connectivity to the internet without wo rrying about any other advance configuration sett i ng.

Important:

After clicking on Connec t, pleas e be su re to “Save S ett ings” t o regis ter the usernam e / pas sword or any other changes.

Figure 2 (Quick Start page)

4.3 Setup (for advance user)

From this screen the us er can setup the Lynx L-210 (config ure the LAN and WAN connection(s ), configure the advanced c onfiguration op tions within the Lynx L-210 (secu rity, routing, and f iltering), access tools that are helpful for debug purposes, obtain the status of the modem, and view the extensive online help.

To setup your Lynx L-210 with a basic configuration, select Setup. Figure 3 illustrates the setup page. The page is broken into two s ubsections the WAN configuration and the LAN configuration.

Before configuring the Lynx L-210, there are several concepts that you shoul d be familiar with on how your new Lynx L-210 works. Please take a moment to familiarize yourself with these concepts, as it should make the configuratio n much easier.

Figure 3 (Setup page)

4.3.1 Wide Area Network connection

On the other side of the Lynx L-210 is where your Wide Area Network (WAN) connection; also referred to as a broadb and connection. This WAN connect ion is different for every WAN sup plier. Most of the configuration you will perform will be in this area. Local Area Network Connection(s)

4.3.2 Local Area Network connection

On one side of your Lynx L-210, you have your own Local Area network (LAN) connections. This is where you plug in your local computers to the Lynx L-210. The Lynx L-210 is normally configured to automatically provide all the PC's on your network with Internet addresses.

4.4 Configuring the WAN

Before the gateway will pass any data between the LAN interface(s) and the WAN interface, the WAN side of the modem must be configured. Depending upon your DSL service provider or your ISP, you will need some (or all) of the information outlined below before you can properly configure the WAN:

• Your DSL line VPI and VCI

• Your DSL encapsulation type and multiplexing

• Your DSL training mode (default is MMODE)

• For PPPoA or PPPoE users, you also need these values from your ISP:

o Your username and pas sword

• For RFC 1483 users, you may need these values from your ISP:

o Your DSL fixed Internet I P address o Your Subnet Mask o Your Default Gateway o Your primary DNS IP address

Since multiple users can use the Ly nx L-210, the Lynx L-210 can simultaneous ly support multiple connection types; henc e, the user must set up different pr ofiles for each connection. The Ly nx L210 supports the followi ng protocols:

• DHCP

• RFC2364 / PPPoA

• RFC2516 / PPPoE

• Static

• Bridged

• RFC1577 / CLIP

4.4.1 New Connection

A new connection is basically a virtual connection. Your Lynx L-210 can support up to 8 different (unique) virtual connections. If you have multiple different virtual connections, you may need to utilize the static and dynamic routing c apabilities of the modem to pass data correctly.

4.4.1.1 Bridged gateway profile and Connection

A pure bridged connect ion does not as sign and IP address to the WAN interf ace. NAT and firewal l rules are not enabled. This connection method makes the Lynx L-210 act as a hub, and just passes packets across t he WAN interface to the LAN interface.

To configure the Lynx L-210 as a bridge, click on Setup and t hen click on New Connection. The default PPPoE connection setup is displayed. At the Type field select Bridge and the Bridge connection setup page is displayed (see Figure 4). Give your Bridge conn ection a unique name; the name must not have spaces and cannot begin wit h numbers. In this case the uniq ue name is called Bridge. Select the encapsul ation type (LLC or VC); if you are not s ure just use the default mode. Select the VPI and VCI settings; your DSL service provider or your ISP will supply these; in this case the DSL service prov ider is using 0,100. Also select the quality of service (QOS); leave the default value if you are unsur e or the ISP did not provide this information.

Figure 4 (Bridge Connect ion Setup)

To complete the connection you must now click the apply button. The apply button will temporarily save this connection. To make the change permanent, you need to click on Save Settings. At the system commands page, click on Save All.

4.4.1.2 PPPoA Connection Setup

PPPoA is also known as RFC 2364. It is a method of encapsulating PPP packets over ATM cells which are carried over t he DSL line. PPP or Point-to-Point proto col is a method of establishing a network connection / session between network hosts. It usually provides a mechanism of authenticating users. LLC and VC are two different methods of encapsulating the PPP packet. Contact your ISP to make sure which enc apsulation is being supported.

By selecting PPPoA, you are forcing your Lynx L-210 to terminate the PPPoA connection. The advantage is that the P PPoA termination is done within the Lynx L-210 and not on your PC; this frees up your PC resources and allows multiple users to utilize the PPPoA connecti on.

To configure the gateway for PPPoA, click on Setup and then click on New Connection. The default PPPoE connection setup is displayed. At the Type field select PPPoA and the PPPoA connection setup page is displayed; figure 5 illustrates a typical PPPoA configuration. Give your PPPoA connection a unique name; the name must not have spaces and cannot begin with numbers. In this case the unique name is called PPPoA1. Select the encapsulation type (LLC or VC); if you are not sure just use the default mode. Select the VPI and VCI settings; your DSL

service provider or your ISP will supply these; in this case the DSL service provider is using 0,100. Also select the quality of servic e (QOS); leav e the default value if you are unsur e or the ISP did not provide this information.

Following is a description of the dif ferent options:

a. Username: The username for the PPPoA access; this is provided by your DSL service

provider or your ISP.

b. Password: The password for the PPPoA access; this is provided by your DSL service

provider or your ISP.

c. On-Demand: Enables on-demand mode. The connection will disconnect if no activity is

detected after the spec ified idle timeout value.

d. Idle Timeout: Specifies that PPPoA connection should disconnect if the link has no activity

detected for n seconds. This field is used in conjunction with the On-Demand feature. To ensure that the link is always active, enter a 0 in this field.

e. Keep Alive: When on-demand option is not enable, this value specifies the time to wait

without being connect ed to your provider before terminating t he connection. To ensure that

the link is always active, enter a 0 in this field. f. Set Rout e: Specify this connection as the defa ult-route. g. MRU: Maximum Receive Unit the DSL connection can receive. It is a ne gotiated value that

asks the provider to send packets of no more than n bytes. The maximum specified value is

1500 although some DSL/ISP providers require a larger value. The minimum MRU value is

128.

Figure 5 (PPPoA Connection Setup)

To complete the connection you must now click the apply button. The apply button will temporarily save this connection. To make the change permanent you need to click on Save Setting (at the side of the page). At the sys tem commands page, click on Save All.

4.4.1.3 PPPoE Connection Setup

PPPoE is also known as RF C 2516. It is a method of encapsulat ing PPP packets over Ethernet. PPP or Point-to-Point protocol is a method of establishing a network connection/session between network hosts. It usually provides a mechanism of authenticating users.

To configure the gateway for PPPoE, click on Setup and then click on New Connection. The default PPPoE connection setup is displayed. At the Type field select PPPoE and the PPPoE connection setup page is displayed; figure 6 illustrates a typical PPPoE configuration. Give your PPPoE connection a unique name; the name must not have spaces and cannot begin with numbers. In this case the unique name is called PPPoE1. Select the encapsulation type (LLC or VC); if you are not sure just use the default mode. Select the VPI and VCI settings; your DSL service provider or your ISP will supply these; in this case the DSL service provider is using 0,100. Also select the quality of servic e (QOS); leav e the default value if you are unsur e or the ISP did not provide this information.

Following is a description of the dif ferent options:

a. Username: The username for the PPPoE access; this is provided by your DSL service

provider or your ISP.

b. Password: The password for the PPPoE access; this is provided by your DSL service

provider or your ISP.

c. On-Demand: Enables on-demand mode. The connection will disconnect if no activity is

detected after the spec ified idle timeout value.

d. Idle Timeout: Specifies t hat PPPoE connection should disconnect if the link has no ac tivity

detected for n seconds. This field is used in conjunction with the On-Demand feature. To ensure that the link is always active, enter a 0 in this field.

e. Keep Alive: When on-demand option is not enable, this value specifies the time to wait

without being connect ed to your provid er before termi nating the co nnection. T o ensure that

the link is always active, enter a 0 in this field. f. Set Rout e: Specify this connection as the defa ult-route. g. MRU: Maximum Receive Unit t he DSL connec tion can rec eive. It is a neg otiated value t hat

asks the provider to send pack et s of no more t han n bytes . The maxim um s pecif ied v alue is

1500 although some DSL/ISP pr ovide rs req uire a l arg er v alue. T h e mi nimum MRU v al ue is

128.

h. Enforce MRU: Check this box if you experience problems accessing the Internet over a

PPPoE connection. This feature will force all TCP traffic to conform with PPP MRU by

changing TCP Maximum Segment Size to PPP MRU.

Figure 6 (PPPOE Connection Setup)

4.4.1.4 DHCP Connection Setup

Dynamic Host Configuration Prot ocol (DHCP) allows the Ly nx L-210 to automatically obtain the IP address from the server. This option is commonly used in situations where IP is dynamically assigned and is not known prior to assignment.

To configure the Lynx L-210 for a DHCP connection, click on Setup and then click on New

Connection. The default DHCP connection s etup is displayed. At the Type fiel d select DHCP and

the DHCP connection setup page is displayed; figure 7 illustrates a typical DHCP configuration. Give your DHCP connection a unique name; the na me must not have spaces and cannot begin with numbers. In this case the uniqu e name is called DHCP1. Select the encaps ulation type (LLC or VC); if you are not sure just use the default mode. Select the VPI and VCI settings; your DSL service provider or your ISP will supply these; in this case the DSL service provider is using 0,100. Also select the quality of servic e (QOS); leav e the default value if you are unsur e or the ISP did not provide this information.

If your DSL line is connected and your DSL/IPS provider is supporting DHCP, you can click the renew button and the gateway will retrieve an IP addres s, Subnet mask, and Gateway addres s. At anytime, you can renew th e DHCP address by c licking on the rene w button; in most cases you will never have to use this button.

Figure 7 (DHCP Connecti on Setup)

To complete the connection you must now click the apply button. The apply button will temporarily save this connection. To make the change permanent you need to click on Save Settings (at the side of the page). At the system commands page, click on Save All.

4.4.1.5 Static Connection Setup

Static is used wheneve r a known static IP is assigned. The acc ompanying informat ion such as the Subnet mask and the gat eway should also be specified. Up to three Domain Name Server (DNS) addresses can also be specified. These servers would enable you to have access to other web servers. Valid IP addresses rang e is f rom 0.0.0.0 to 255.255.255.255.

To configure the Lynx L-210 for a Static connection, click on Setup and then click on New

Connection. The default Static connection setup is dis played. At the Type field select Static and

the Static connection setup page is displ ayed; f igur e 8 illus trat es a t ypic al St atic conf iguration. Give your Static connection a unique name; the name must not have spaces and cannot begin with numbers. In this case the uni que name is called STATIC1. Select the encaps ulation type (LLC o r VC); if you are not sure just use the default mode. Select the VPI and VCI settings; your DSL service provider or yo ur ISP will supply these; i n this case the DSL servic e provider is using 0,35. Also select the quality of servic e (QOS); leav e the default value if you are unsur e or the ISP did not provide this information. You c an als o ena ble Net work Addr ess Translat ion (NA T) and t he Fi re wall options. If you are unsure, leave these in the default mode.

Based upon the informat ion your DSL/ ISP prov ided, enter your ass igned IP addr ess, Subn et Mask, Default Gateway (if provided), and Domain Name Services (DNS) values (if provided). For the static configuration, you c an als o selec t a bri dge c onnect ion or a routed conn ection. Since stat ic IP address is typically used to host WEB servers, you may want to use a bridge connection.

Figure 8 (Static IP Connection Setup)

To complete the connection you must now click the apply button. The apply button will temporarily save this connection. To make the change permanent you need to click on Save Settings (at the side of the page). At the system commands page, click on Save All.

4.4.1.6 Classical IP over ATM (CLIP, defined in RFC1577) Connection Setup

The Classical IP over ATM (CLIP) support provides the ability to transmit IP packets over an ATM network, CLIP support will encapsulate IP in an AAL5 packet data unit (PDU) frame using RFC1577and it utilizes an ATM aware version of the ARP protocol (ATMARP. support only allows for PVC support; it does not support SVC).

To configure the Lynx L-210 for a CLIP connection, click on Setup and then click on New

Connection. The def ault CLI P connec tion s etup is dis played. A t the Ty pe fiel d selec t CLIP and the

CLIP connection setup pag e is dis pl aye d; f igure 9 ill us t rates a t ypic al CLI P c onfigu r ation. G iv e yo ur CLIP connection a uni que name; the na me must not have sp aces and cannot begin with num bers. In this case the unique name is called CLIP1. Select the VPI an d VCI settings; your DSL service provider or your ISP will s upply these; in this case the DSL servic e provider is using 0,101. Also select the quality of service (QOS); leave the default value if you are unsure or the ISP did not provide this information. You can also en able Network A ddress Trans lation (NAT) an d the Firewall options. If you are unsure, leave these in the default mode.

Figure 9 (CLIP Connection Setup)

To complete the connection you must now click the apply button. The apply button will temporarily save this connection. To make the change permanent you need to click on Save Settings (at the side of the page). At the system commands page, click on Save All.

4.4.2 Modify an Existing Connection

To modify an existing connection, click setup and then click the connection you want to modify. The connections are listed as Connection 0 through Connec tion 7

As a note, if you delete the connect ion, to make the change perm anent you need to click on Save

Settings (at the side of the page). At the system commands pag e, click on Save All.

4.4.3 Modem setup

To configure the DSL modulation t ype, Click setup. Under WAN Setup, select Modem Setup. This will bring up the modem setup screen. Leav e t he def ault v alue if you are uns ure or t he DS L/ ISP did not provide this information. For most all cases, this screen should not be modified.

The apply button will temporarily save this connection. To make the change permanent you need to click on Save Settings (at the side of the page). At the sys tem commands page, click on Save All.

4.5 Configuring the LAN

By default, your Lynx L-210 has DHCP server ( LAN side) enabled. If you already have a DHCP server running on your network, you must disable one of the two DHCP servers; if you plug a

second DHCP server into the net work, you will experience network errors and t he network will not function normally.

4.5.1 Enable/Disable DHCP

To enable or disable DHCP, Click setup. Under LAN Setup, select DHCP Configuration. This will bring up the screen shown in Figure 10.

The Start IP Address is where the DHCP server starts issuing IP add resses. This value must be greater than the Lynx L-210 IP address value. For example if the Lynx L-210 IP address is

192.168.1.1 (default) than the starting IP address must be 192.168.1. 2 (or higher). The End IP Address is whe re the DHCP server stops issuing IP addr esses. The ending address

cannot exceed a subnet limit of 254. Hence the max value for our default gateway is

192.168.1.254. If the DHCP server runs out of DHCP addresses, users will not get access to network resources. If this happens you can increas e the Ending IP address (to the limit of 255) or reduce the lease time.

The Lease Time is the amount of time a network user will be allowed connection to the Lynx L-210 with their current dy namic IP addr ess . The am ount of time is in uni ts of minut es; t he defa ult v alue is 3600 minutes (60 hours).

Note: If you change the start or end values, make sure the values are still within the same subnet as the gateways IP addres s. In other words, if the gateways IP address is 192. 168.1.1 (default) and you change the DHCP start/end I P addresses t o be 192.128.1 .2/192.128.1. 100, you will not be able to communicate to the Lynx L-210 if your PC has DHCP enabled.

Figure 10 (DHCP Server configurat io n)

In addition to the DHCP server feature, the Lynx L-210 supports the DHCP r elay function. When the Lynx L-210 is configured as DHCP server, it assigns t he IP address es to the LA N clients . When the Lynx L-210 is configured as DHCP relay, it is responsible for forwarding the requests and responses negotiating b etween the DHCP clients and the serv er. See figure 11.

Figure 11 (Example of a DHCP Relay configuration)

By turning off the DHCP server and rel ay the network administrat or must carefully configure the IP address, Subnet Mask and DNS settings of every computer on your network. Do not assign the same IP address to more than one computer and your Lynx L-210 must be on the same subnet as all the other computers.

The apply button will temporarily save this connection. To make the change permanent you need to click on Save Settings (at the side of the page). At the sys tem commands page, click on Save All.

4.5.2 Changing the Lynx L-210 IP address

You can change the Lynx L-210’s IP address by, clicking Setup and under LAN Setup, select Management. This will bring up the screen shown in Figure 12.

4.5.2.1 Static IP address assignment

Your Lynx L-210’s default IP address and s ubnet mask are 192.168.1.1/ 255.255.255. 0; this subnet mask will allow the Lynx L-210 to support 254 users. If you want to support a larger number of users you can change the s ubnet mask; but remember. T he DHCP serv er is defaulted t o only give out 255 IP addresses . Further remember that if you change your gateways’ IP address and yo u have DHCP enabled, the DHCP configuration must reside within the same subnet

The default gateway is the routing device used to forward all traffi c that is not addressed to a station within the local subnet. Your ISP will provide you with the default gateway Address. Figure 12 shows a default gateway address of 203.125.64.1 because this was the default gateway defined when the CLIP connection was configured.

The hostname can be any alphanumeric word that does not contain spaces . The domain name is used to in conjunction with the host name to uniquel y identify the gate way. To access the Lynx L210’s web pages the user c an type 192.168.1.1 (the def a ult IP address) or type mygateway.ar7.

Figure 12 (Management IP ad dress)

The apply button will temporarily save this connection. To make the change permanent you need to click on Save Settings (at the side of the page). At the sys tem commands page, click on Save All.

4.5.3 Firewall/NAT Services

You can enable or disable Firewall and NAT by clicking on Setup and under LAN Setup, select Firewall/NAT Services. By uns electing the “Enable Firewall and NAT Services” button the fi rewall and NAT services is disabled for all WA N connections.

The apply button will temporarily save this connection. To make the change permanent you need to click on Save Settings (at the side of the page). At the sys tem commands page, click on Save All.

4.6 Advanced (for advance user only)

The Lynx L-210 supports a host of advanc ed features . For basic Lynx L-210 func tionality, t he user does not need to utilize these advanced features. The features help with routing, security, port configuration, and plug an d play capability.

4.6.1 UPnP

UPnP NAT and Firewall Trav ers al allo w t raf fic to pas s- thr u t he Lyn x L-21 0 for a pplic at ions using t h e UPnP protocol. This feature requires one active DSL connection. In presence of multiple DSL connections, select the one over which the incoming traffic will be present, for example the default Internet connection.

To enable UPnP, you mus t first have a WAN connection conf igured. Once a WAN connection is configured, click Advanced and under Advanced, select UPnP. This will bring up the screen shown in Figure 13. You must enable UPnP and then select which connection will utilize UPnP. In this case the PPPoA connection is enabled.

Figure 13 (Management IP ad dress)

The apply button will temporarily save this connection. To make the change permanent you need to click on Save Settings (at the side of the page). At the sys tem commands page, click on Save All.

4.6.2 Port Forwarding

Using the Port Forwarding page, you can provide local services (for example web hosting) for people on the Internet or play Internet games. When users send this type of request to your network via the Internet, the Lynx L-210 will forward those requests to the appropriate PC. Port forwarding can be used with DHCP a ssigned addresses but re member that a DHCP address is dynamic (not static). For exampl e, if you were configuring a Net meeting server, you would want to assign this server a static IP address so that the IP address is not reassigned. Also remember that if an Internet user is trying to ac cess an Internet application, they must use the WAN IP address. The port forwarding will translate the WAN IP address into a LAN IP address.

To configure a service, game, or other application select the exte rnal connection (for example the Internet connection), from the Home screen, click Advanced and under Advanced, select Port Forwarding. Next selec t the c ompute r hos ting th e serv ice and ad d the c orrespo nding fi rewall rule. I f you want to add a custom application, select the User category, click New and fill in the port, protocols and description for your application.

For example, if you want to host a Netmeeting session, from the Home screen, click Advanced and under Advanced, select Port Forwarding. First select the IP address f or your Netmeeting server. Next select the Audio/Video c ategory and add Netmeeting to the applied rules box. To view the management rules, highlight Netmeeting and select view; this will display the pre configured protocols and ports that Netmeeting will use. Now assuming that your WAN connection is correct, you can run Netmeeting fr om your server and call users t hat are on the Internet . If you know your WAN IP address, users can call you.

Figure 13 (Port Forwardin g : Netmeeting)

The apply button will temporarily save this connection. To make the change permanent you need to click on Save Settings (at the side of the page). At the sys tem commands page, click on Save All.

4.6.3 Advanced Security

In the presence of t he firewall, anonymous Int ernet traffic is blocked. Using the advanced securit y features, you can redirec t this traffic to a dedic ated computer on your l ocal network (DMZ) or ope n the access from the Inter net to t he Lynx L-210' s man agem ent port s ( web, t elnet). The Ly nx L- 210's firewall and NAT services (port forwarding, acc ess control) can be dis abled for all interf aces by unchecking the "Enable Firewa ll and NAT Service"

To enable any of the a dvanced security features, click Adv anced and configure the option under Firewall. Figure 14 illustrates the typical advanced security in Access Control configuration.

Figure 14 (Access Control)

The apply button will temporarily save this connection. To make the change permanent you need to click on Save Settings (at the side of the page). At the sys tem commands page, click on Save All.

4.6.3.1 DMZ configuration

Setting a computer (on your local network) as a DMZ forwards any network traffic that is not redirected to anoth er computer via the port-forwarding feature to the computer's IP ad dress. This opens the access to the DMZ computer from the Internet.

4.6.3.2 Enable Web from WAN

Enabling the Web from WAN on your local network allows Web requests that come from the Internet to be re-routed t o a Web Se rver that is on a dif ferent s ubnet. This is differe nt that t he Web server rule that is c onfigurable via the port-for warding page. In this case, the web server is on a different subnet.

4.6.3.3 Enable Remote Telnet

Enabling the Remote W eb on your loc al network allows telnet requests that come from t he Intern et to be re-routed to a tel net Server that is on a different LAN IP subnet. This is different that the telnet server rule th at is configur able via the port-forwar ding page. I n this case, t he telnet se rver is on a different subnet.

4.6.3.4 Enable Incoming ICMP Ping

Enabling the Incoming Internet Cont rol Message Protocol (ICMP) Ping will allow Echo r equests to come into the gateway. The gateway will respond with an ICMP Echo response message. The option allows the DSL provide r or ISP to determine the following:

a. The s tatus of the network. b. Trac king and isolating hardware an d software problems. c. Testing, measuring, and managing networks.

4.6.4 Access Control

Access control can also be called port blocking. Specific types of traffic that is destined to a selected LAN IP address can be blocked. To enable any of the Access Control features, click Advanced and under Advanc ed, select Access Control. A page similar t o the port-forwar ding page appears. Similar to the port-f orwarding page, an IP address can be added t o a rule. All Access Control rules have precede nce over rules that were added v i a the port-forwarding page.

The apply button will temporarily save this connection. To make the change permanent you need to click on Save Settings (at the side of the page). At the sys tem commands page, click on Save All.

4.6.5 LAN clients

To add a LAN client, click Advanced and under Adv anced, select LAN Cli ents. If DHCP is used, all DHCP clients are automatically as signed. If a fixed IP addr ess server is on the LA N and you want this server to be visible via the WAN, you must add its IP address. Once the IP address has been added to you can apply Port Forwarding and Access Control rules to t his IP add ress.

The apply button will temporarily save this connection. To make the change permanent you need to click on Save Settings (at the side of the page). At the sys tem commands page, click on Save All.

4.6.6 MAC Address Filters

The MAC filtering mechanism provides a way for the users to define rules to allow/deny frames

through the bridge based on source MAC address, destination MAC address and/or frame type. When bridge filtering is enabled, each frame is examined against the defined filter rules sequentially, and when a mat ched is determi ned, the ap propriate f iltering act ion (determine d by the access type selected ... i.e. allow or deny) is performed. The user should note that the MAC filter will only examined frames from interfaces that are part of the bridge itself. Twenty filter rules are supported with MAC filtering. T o enable MAC Filters, click A dvanced and under Advanced, s elect MAC Filters. Figure 15 illustrates a typical Bridge filter configuration.

The User Interface fo r MAC Filter allows the user to ad d/edit/delete, as well as, enabl es the filter rules. To add rules, simply def ine the source MAC address, destination MAC address and frame type with desired filt ering t ype (i.e. allo w/deny ), an d pres s t he “Ad d” but ton. The MAC addr ess must be in a xx-xx-xx-xx-xx-xx f ormat, with 0 0-00-00-00 -00-00 as “ don’t c are”. Blanks can be used in t he MAC address space, and would be considered also as “don’t care”.

To edit/modify an existing filter rule, select the desired rule created previously from “Add” in the “Edit” select box. The selected filter rule will appear on top section, as with the “Add” filter rule. Make the desired change to the MAC address, frame t ype and/or access type, and press “Apply”.

To delete filter rule(s), select the filter rule entry to delete in the “Delete” sel ection box. Note that multiple deletions are possible. Once all the desired filter rule(s) is/ are selected for deletion, press the “Apply” button. T he “Select All” select box can also be used to delete the entire f ilter rule. It provides a quick method of selecting all filter rules for deletion.

The “Enable MAC Filters” button allow the user to enable or disable MAC filtering. It can be set/unset during any add/edit/delete operation. It can also be set/unset independently by just pressing the “Apply” button.

Figure 15 (MAC Filters)

Note: The MAC filter table c ontains 3 hidden rules. These rules are ent ered automatically by the system to ensure the user does not "lock" t hem out of the system. The first rule allo ws any and all

ARP frames through the sy stem. The second rule all ows all IPv4 frames wit h the destination MAC address of the bridge to go through. The third rule allows all IPv4 frames with the source MAC address of the bridge to go through.

Note: On a windows based machine, to find a MAC address, at a dos prompt type ipconfig /all.

The apply button will temporarily save this connection. To make the change permanent you need to click on Save Settings (at the side of the page). At the sys tem commands page, click on Save All.

4.6.7 Multicast

Multicasting is a form of limited broadcast. UDP is used to send datagrams to all hosts that belong to what is called a "hos t group." A hos t group is a set of zero or more host s identified by t he same destination IP address. T he following statements apply to host group s.

a. Anyone can join or leave a host group at will.

b. There a re no restrictions on a host' s location.

c. There are no restrictions on the number of members that may belong to a host group.

d. A host may belo n g to multiple host groups.

e. Non-group members may send UDP datagrams to the host group.

Multicasting is useful whe n data needs to be sent to more than one other device. For instance, if one device is responsible f or acquiring data that many other devices need, then multicasting is a natural fit. Note that us ing multicasting as opposed t o sending the same data t o individual devices uses less network band width.

To enable Multicasting, click on Advanced and under Advanced, select Muliticast. Figure 16 illustrates a typical Multicast configuration.

Figure 16 (Multicast)

The apply button will temporarily save this connection. To make the change permanent you need to click on Save Settings (at the side of the page). At the sys tem commands page, click on Save All.

4.6.8 Static Routing

If the Lynx L-210 is co nnected to more than one network, you m ay need to set up a static route between them. A st atic ro ute is a p re-def ined pathw ay that netwo rk inf ormation must tr avel to r each a specific host or network. You can use static routing to all ow different IP domain users t o access the Internet through the Lynx L-210.

The New Destination IP is the address of the remote LAN network or host to which you want to assign a static rout e. Enter the IP address of the host for which you wish to creat e a static route here. For a standard Clas s C IP domain, the network address is the firs t three fields of the New Destination IP, while the l ast field should be 0. The Subnet Mask identi fies which portion of an IP address is the network portion, and which portion is the host portion. For a full Class C Subnet, the Subnet Mask is 255.255.2 55.0. The Gat eway IP addres s should be the I P address of t he gateway device that allows for contact between the Gateway and the remote network or host. The Hop Count determines the maximum number of steps between network nodes that data packets will travel. A node is any device on the network (such as a router or switch)

To enable Static Routing, f rom t he H om e sc ree n, cl ick Adv anced and un der A dv ance d, s elect St at ic Routing. Figure 17 illustrates a typical Static Route.

Figure 17 (Static Routing)

The apply button will temporarily save this connection. To make the change permanent you need to click on Save Settings (at the side of the page). At the sys tem commands page, click on Save All.

4.6.9 Dynamic Routing

Dynamic Routing allows the Lynx L- 210 to automatic ally adjust to physic al changes in the net work. The Lynx L-210, using th e RI P prot oc ol, det ermin es t he net wo rk pa c kets ’ rout e bas ed o n t he f e wes t number of hops between the source and the destination. The RIP protocol regularly broadcasts routing information to other Lynx L-210s on the network.

The Direction determines the direction that RIP routes will be updated. Selecting In means that the Lynx L-210 will only incorporate received RIP information. Selecting Out means that the Lynx L-210

will only send out RIP information. Selecting both means that the Lynx L-210 will incorporate received RIP information and send out updated RIP information.

The protocol is dependent upon the entire network. Most networks support Rip v1. If RIP v1 is selected, routing data will be sent in RIP v1 format. If Rip V2 is selected, routing data will be sent in RIP v2 format using subnet broadcasting. If Rip V1 Compatible is selected, routing data will be sent in RIP v2 format using multicasting.

To enable Dynamic Routing, click Advanced and under Advanced, select Dynamic Routing. Figure 18 illustrates a typical Dynamic Route.

Figure 18 (Dynamic Routing)

The apply button will temporarily save this connection. To make the change permanent you need to click on Save Settings (at the side of the page). At the sys tem commands page, click on Save All.

4.7 Tools

The Lynx L-210 supports a host of tools that will allow you to customize and debug your Lynx L-

210.

4.7.1 System Commands

To make the changes permanent you need to click on Tools (at the top of the page) and s elect System Commands. The following commands are used to configure the gateway:

a. Save all: Press this button in order to permanently save the cur rent configuration of the

Lynx L-210. If you do re-start the system without saving your configurat ion, the Lynx L210 will revert back to the previously saved configuration.

b. Restart: Use this button t o re-st art t he syst em. If you hav e n ot saved your c onfigu rat ions,

the Lynx L-210 will revert back to the previously saved configuration upon re-starting.

NOTE: Connectivity to the unit will be lost. You can reconnect after the unit reboots.

Restore Defaults: Use this butt on to restore factory default configuration.

NOTE: Connectivity to the unit will be lost. You can reconnect after the unit reboots.

4.7.2 User Management

You can change your Lynx L-210’s username and password by clicking on User Management. From here you can change t he login name and password. Y ou can also change the idle timeo ut; you will need to log back onto the Lynx L-210 once the ti meout expires.

If you forget your password, you can press and hold the reset to factory defaults button for 10 seconds (or more). The Lynx L-210 will reset to its factory default configuration and all custom configurations will be lost.

The apply button will temporarily save this connection. To make the change permanent you need to click on Save Settings (at the side of the page). At the sys tem commands page, click on Save All.

4.7.3 Update Firmware

You can remotely upgrade t he Lynx L - 210’s f irmware, clicking on Update Fi rm war e und er th e Tools page. This will bring up the screen shown in Figure 19. The upgrade file shall be in *.img f ormat .

To upgrade the firmware, click browse, find the firmware file to download. Make sure this is the correct file. Click on upgrade firmware (as shown in Figure 19). Once the upgrade is complete the Lynx L-210 will reboot. You will need to log back onto the Lynx L-210 after the firmware upgrade is completed.

The firmware upgrade s hou ld take about 5 minutes to complete.

Note: Do not remove power from the Lynx L-210 during the firmware upgrade procedure.

Figure 19 (Update Firmware)

4.7.4 Ping Test

Once you have your Lynx L-210 configured, it is a good idea to make sure you can ping the network. You can get t o the Ping page under the Tools tit le, by clicking on Ping Test. Type th e target address that you want to ping. If you have your P C connected to the Lynx L-210 via the

default DHCP configurat ion, you should be able to Ping the network address 192.168.1.1. I f your ISP has provided their serv er address you can try to ping the address. If the pings for both the WAN and the LAN side complete, and you have the proper protocols configured, you should be able to surf the Internet.

By default when you select ping test, the Lynx L-210 will ping itself 3 times. As shown in Figure 20, the Lynx L-210 passed the Ping test; this basically means that the TCP/IP protocol is up and running. If this first Ping tes t does n ot p ass , t he TCP/IP prot oc ol is not lo aded f or s ome reas on ; you should restart the Lynx L-210.

Figure 20 (Ping test)

4.7.5 Modem Test

The Modem Test is used to check whether your Lynx L-210 is properly connected to the WAN Network. This test may take a few seconds to complete. To perform the test, select your connection from the list and press t he Test button. Before running t his test, make sure you have a v alid DSL link; if the DSL link is not connected, this test will always fail.

Also the DSLAM must support this feature; not all DSLAMs have F4 and F5 support.

4.8 Status

The Status section allows you to v i ew the Status/Statistics of different connections and interfaces

4.8.1 Network Statistics

Select to view the Statis tics of different interfaces - Ether n et/USB/DSL.

4.8.2 Connection Status

Select to view the Status of different connections.

4.8.3 DHCP Clients

Select to view the list of DHCP client s.

4.8.4 Modem Status

Select to view the Status and Statistics of your broadba nd ( D SL) connection.

4.8.5 Product Information

You can display the Lynx L-210’s driver and run-time information by going under Status title and click on Product Information. Figure 21 illustrates the typical product information, which is provided.

Figure 21 (Product Information)

4.8.6 System Log

You can display the Lynx L-2 10’s log by going under the St atus title, click System log. From her e you can view all logged information. Depending upon the severity level, this logged info will generate log reports to a remote host (if remote logging is enabled).

5. Appendix A: Troubleshooting

Below is a list of commonly asked ques tions. Before calling t echnical support , please look thro ugh these issues to see if they help to s olv e your p ro blem.

5.1 The Lynx L-210 is not functional

1. Check to see that the power LED is green and than the network cables are installed

correctly. Refer to the easy start guide for more details.

2. Check to see that the ETH/LAN and PPP/WAN LEDs are green.

3. Chec k to see that the DSL LED is green

4. Make sure y ou are not connecting the USB and th e Ethernet port at the same time. You

must only use 1 interface at a time.

5. Check the settings on your PC. Again, refer t o the easy start guide for more details

6. Chec k the Lynx L-210’s settings.

7. From your P C, can you PING the Lynx L-210? Assuming that the Lynx L-210 has DHCP

enabled and your PC is on the same subnet as the gateway, you should be able to PING

the gateway.

8. Can you PING the WAN IP ? Your IS P should hav e prov ided th e IP addr ess of their serve r.

If you can ping the Lynx L-210 and your prot ocols are configured co rrectly, you should b e

able to ping the ISP s network. If you cannot P ING the ISPs network, make su re you are

using the correct protocols wit h t he correct VPI/VCI values.

9. Make sure NAT is enabled for your connection. If NAT is disabled the Ly nx L-210 will not

route frames correctly (exc ept in Bridge connection).

5.2 I can’t connect to the Lynx L-210

1. Check to see that the power LED is green and that the network cables are installed

correctly; see the easy start guide for more details.

2. Make sure y ou are not connecting the USB and th e Ethernet port at the same time. You

must only use 1 interface at a time.

3. Make sure that your PC and th e Lynx L-21 0 is on the s ame networ k segment. The Lynx L-

210’s default IP address is 19 2.168.1.1. If you are r unning a Windows bas ed PC, you can

open a DOS window and type IPCONFIG; make sure that the network adapter that is

connected to the gateway is within the same 192.168.1.x subnet.

4. Also, your PC’s Subnet Mask should match the gateways subnet mask. The gateway has a

default subnet mask of 255.255.255.0.

5. If this st ill does not work, pres s the res et but ton f o r 10 s econds . Thi s will place t h e gate way

into its factory default state. Go t hrou gh the above procedures again.

6. Make sure NAT is enabled for your connection. If NAT is disabled the Ly nx L-210 will not

route frames correctly (exc ept in Bridge connection).

5.3 The DSL Link LED continues to blink but does not go solid

1. This means that the DSL l ine is trying to train but for some reason it cannot establish a v alid connection. The main cause of this is that you are too far away from the central office. Contact your DSL service provider for further assistance.

2. Verify that the phone line i s connec ted direct ly to the wall a nd to the lin e input on t he Lynx L-

210.

3. Make sure that for ev ery parallel phone line connected to telephone or fax to install with a micro filter.

Common Problems and Solutions

5.4 The DSL Link LED is always off

1. Make sure you have DS L service. You should get some kind of information from you r ISP that states that DSL service is installed. You can usually tell if the service is installed by listening to the phone line; you will hear some high-pitched noise. If you do not hear highpitched noise, contact your ISP.

2. Verify that the phone line i s connec ted direct ly to the wall a nd to the lin e input on t he Lynx L-

210. If the phone line is connec ted to t he phon e side of the Lynx L- 210 or y ou hav e a splitt er installed on the phone line, the DSL light will not come on.

6. Lynx L-210 terms

What is a firewall?

A firewall is protection bet ween th e Internet and your loc al network. It acts similarl y to the fire wall in your car, protecting the interior of the car from the engine. Your car's firewall has very s m all opening that allow desired connections from the engine into the cabin (gas pedal connection, etc), but if something happens to your engine, you are protected.

The firewall in the Lynx L-210 is very similar. Only the desired connections that you allow are passed through the firewall. These connections are normally originating from the local network; such as web browsing, checking your email, downloading a file, and playing a game. However, in some cases, you can allow incoming connections so that you can run programs like a web server.

What is NAT?

NAT stands for Network Address Translation. Another name for it is Connection Sharing. What does this mean? Your ISP provides you with a single network address for you t o access the Internet through. However, you m ay have several machines on yo ur local network that wa nt to access the Internet at the same time. The Lynx L-210 provides NAT functionality that converts your local network addresses t o the single network addr ess provided by your ISP. It keeps track of all these connections and makes sure that the correct information gets to the correct local machine. Occasionally, there ar e certain programs that don't work well through NAT. Some games, and s ome specialty applications h ave a bit of trouble. The Lynx L-210 cont ains special funct ionality to handle the vast majority of these troublesome programs and games. NAT does cause problems when you want to run a SERVER though. When running a server, please see the DMZ section below.

What is a DMZ?

DMZ really stands for Demilitarized Zone. It is a way of separating out part of your local network so that is more open to the I nternet. Suppose that you want to r un a web-server, or a game server. Normal servers like these are blocked from working by the NAT functionality. The solution is to "isolate" the single local comput er int o a DMZ. T his makes the sin gle c omputer l ook lik e it is d irect ly on the Internet, and others can access this machine.

Your machine isn't really directly connected to the Internet, and it really has an internal local network address. When you provide the servers network address to others, you must prov ide the address of the Lynx L-210. The Lynx L-210 "fakes" the c onnection to your machine. You should use the DMZ when you want to run a server that others will access from the Internet. Internal programs and servers (like print servers, etc) should NOT be conn ec ted to the DMZ

What is a Gateway?

The Internet is so large that a single network cannot handle all of the traffic and still deliver a reasonable level of service. To overc ome this limitation, the network is broken down into smaller segments or subnets that can deliver good performance f or the stations attached t o that segment. This segmentation solves the pr oblem of supporting a large number of stations, but introduces the problem of getting traffic f ro m one subnet to another.

To accomplish this, devices called ro ut ers or gat e ways are pl ac ed bet wee n s egment s . If a machin e wishes to contact anot her device on the sam e segment, it transmits to that station direct ly using a simple discovery techniqu e. If the t arget stat ion does not exis t on the sam e segment as the sourc e station, then the source actually has no idea how to get to the target.

One of the configurat ion p aram et ers t ra ns mit t ed to e ac h n et work d evi ce is its def ault g ate wa y. T his address is configured by the net work administ rators a nd it informs each p ersona l comput er or ot her network device wh ere to send data if the target st ation does not res ide on the same s ubnet as the source. If your machine can reach all stations on t he same subnet (usually a buil ding or a sector within a building), but cannot communicate outside of this area, it is usually because of an incorrectly configured default gateway.

Lynx: constellation introduced by J. Hevelius in 1687. The Lynx is a nocturnal wildcat with superb eyesight. The observers of this constellation would have to be “lynx-eyed” to see it.

Lynx L-210 User Manual

Specifications and Main Features

Frequently Asked Questions

User Manual