For content and procedures available in this document, OPEN Networks Pty Ltd does not warrant or assume any legal liability or
responsibility for the accuracy, completeness, or usefulness of any information, apparatus, product, or process disclosed.
Revision: v1.2
Date Released: February, 2007
Congratulations on the purchase of your iConnect625W. Fully-featured, it is the perfect
high-speed ADSL/ADSL2+ router, specifically designed to connect your PC or LAN to the
Internet and connects to your local area network (LAN) via a high speed 10/100 Mbps
Ethernet port.
The iConnect625W’s extensive routing and bridging functions render it a flexible and
scaleable platform for multiple users to access the Internet. Features include port
forwarding and VPN pass-through, along with the ability to enable public or private
Intranet solutions through a single IP address, using its RIP v 1 / 2 routing engine or NAPT
features.
The highest levels of security are implemented in the iConnect625W, including Stateful
Packet Inspection firewall support for a full suite of security options against malicious
intruders.
The iConnect625W is fully compatible with all computers that support an Ethernet
interface and are running a TCP/IP protocol stack. So, plug in the iConnect625W (refer to
the Quick Start Guide), configure it, as per your Internet Service Provider's (ISP)
instructions and enjoy fast Internet access as never before!
5
iConnect 625W ADSL Router User Guide
1.1 Features
iConnect625W Features
WAN Protocols (PPPoE, DHCP, Static, PPPoA, CLIP,
Bridged)
Port Mapping / Forwarding
PPP on-demand enhancement
Network Support
Secure HTTP Server (HTTPS)
IGMP over multiple PVC for video
Enhanced QoS architecture (Ingress, Egress, Shaper) and
Policy Routing
DMZ Support
Address
Translation &
Security
Gateway Services
Element
Management
WLAN Support
NAT / NAPT for basic Firewall support
UPnP Internet Gateway Device (IGD)
Application Level Gateways (ALGs)
Stateful Packet Inspection (SPI) support
Protection Against Denial of Service
Packet Filtering Firewall support
Password Authentication to modem
DHCP Client / Server / Relay
Dynamic DNS Support
IGMP Proxy
Customer-extendible Configuration Manager
Web service and Reference Web Pages
SNMP Agent and Standard MIB Support
Remote Management
Telnet, secure shell, TFTP, FTP
Diagnostics and Test Capabilities
IEEE 802.11, 802.11b and 802.11g compliant
Complies to Wireless Ethernet Compatibility Alliance (WECA),
Wireless Fidelity (WI-FI tm) standards
Support 802.11b and 802.11g simultaneously
Security (WEP, 802.1x, WPA, WPA2)
WDS
Multiple SSID
Operating Range of more than 300 metres (open air)
6
iConnect 625W ADSL Router User Guide
2. iConnect625W Overview
2.1 Important Safety Instructions
WARNING!
BEFORE USING YOUR DEVICE, BASIC SAFETY INSTRUCTIONS SHOULD ALWAYS BE FOLLOWED
TO REDUCE THE RISK OF FIRE, ELECTRIC SHOCK AND INJURY TO PERSON, INCLUDING THE
FOLLOWING:
1. Read and understand all instructions.
2. Follow all warnings and instructions marked on the product.
3. When cleaning this product, do not use liquid cleaners or aerosol cleaners. Use a damp cloth
for cleaning.
4. Do not use this router in high humidity or high temperatures.
5. Do not open or repair the device yourself. If this router is too hot, turn off the power
immediately and have it repaired at a qualified service centre.
6. Avoid using this product and all accessories outdoors.
7. Place this router on a stable surface.
8. Only use the power adaptor that comes with the package. Using a different voltage-rating
adaptor may damage this router.
9. Slots and openings on the sides and top of the device are provided for ventilation. To protect it
from overheating, these openings must not be blocked or covered. The opening should never
be blocked by placing the product on the bed, sofa, rug or other similar surface. This product
should never be placed near or over a radiator or heat register. This product should not be
placed in a built-in installation unless proper ventilation is provided.
10. Do not allow anything sharp to rest on the cables. Do not locate this product where the cord
could be damaged by persons walking on it.
11. Do not overload wall outlet extension cords, as this can result in the risk of fire or electric
shock.
12. To reduce the risk of electric shock, do not disassemble this product. Instead, when some
repair work is required, take the unit to the place of purchase. Opening or removing covers on
the router will void the warranty that comes with the product.
13. Unplug this product from the wall outlet and refer servicing to the place of purchase under the
following conditions:
a. When the power supply cord or plug is damaged or frayed;
b. If liquid has been spilled onto the product;
c. If the product has been exposed to rain or water;
d. If the product does not operate normally by following the operating instructions. Adjust
only those controls that are covered by the operating instructions because improper
adjustment of other controls may result in damage and will often require extensive
work by a qualified technician to restore the product to normal operation;
e. If the product has been dropped or damaged;
f. If the product exhibits a distinct change in performance.
SAVE THESE INSTRUCTIONS
7
iConnect 625W ADSL Router User Guide
2.2 System Requirements
2.2.1 Hardware
Pentium® MMX 233MHz or greater computer;
CD-ROM drive;
Network adapter - Ethernet with TCP/IP Protocol (required only if you
are connecting to the Ethernet port of your router);
2.2.2 Software
OS-Independent Ethernet connections.
2.3 Package Contents
The iConnect625W router contains the following items:
The LED status can help you diagnose problems with the gateway. The LED status
definitions are described in the table below.
1
2
3
4
5
LED LED Status LED Description
Power is supplied to the iConnect625W
router.
The iConnect625W Ethernet cable is
properly connected to the Ethernet port.
• No power is supplied to the
iConnect625W router;
• No Ethernet connection;
• Wrong type of Ethernet cable used.
1
2
3
POWER
ETHERNET
E1 - E4
WIRELESS
Steadily Lit Up
Off No power is supplied to the iConnect625W.
Steadily Lit Up
Flickering The Ethernet is transmitting / receiving data.
Off
Steadily Lit Up The wireless access point is enabled.
Off The wireless access point is disabled.
4
5
DSL
INTERNET
The iConnect625W is trying to establish
Flickering
Steadily Lit Up ADSL connection is established.
Steadily Lit Up The Internet connection is established.
Off The Internet connection is not established.
9
connection with the ADSL Service Provider
or the iConnect625W router is transmitting /
receiving data.
iConnect 625W ADSL Router User Guide
2.4.2 The Rear Ports
The rear panel holds ports that help to power up and connect the iConnect625W router to
the network.
3
5
4
1 2
6
LED Meaning
1
POWER SWITCH
2
3
4
5
6
POWER
RESET
Ethernet
ANTENNA
1 — 4
DSL
Power ON / OFF switch.
Connect the supplied power adaptor to this jack. Make sure to observe the
proper power requirements.
After the device is powered on, press it to reset the device or restore to
factory default settings.
Connect the Ethernet cable to one of the four LAN ports when connecting to
a computer or an office/home network of 10Mbps or 100Mbps.
Connect the supplied telephone cable to this port when connecting to the
ADSL/telephone network.
This is the antenna.
10
iConnect 625W ADSL Router User Guide
3. Setting Up Your iConnect625W Router
The iConnect625W router can be configured with your Web Browser. A Web Browser is
included as a standard application in the following operating systems: Linux, Mac OS,
Windows 98 ME/2000/XP/Vista. The product provides a very easy and user-friendly
interface for configuration.
Computers must have an Ethernet interface installed properly and be connected to the
router either directly or through an external repeater hub. It must also have TCP/IP
installed and configured to obtain an IP address through a DHCP server or a fixed IP
address that must be in the same subnet as the router.
The default IP address of the router is 192.168.1.254 and the subnet mask is
255.255.255.0 (i.e. any attached computer must be in the same subnet, and have an IP
address in the range of 192.168.1.1 to 192.168.1.253). The best and easiest way to
configure the computer is to get an IP address automatically from the router using DHCP.
If you encounter any problems accessing the router’s web interface it may also be
advisable to disable any kind of software firewall on your computers, as they can cause
problems accessing the 192.168.1.254 IP address of the router. Users should make their
own decisions on how to best protect their network.
Please follow the steps provided in the following section to install and configure your
computer network environment. Before you begin, it is advisable to check your computer’s
network components to ensure that the TCP/IP protocol stack and Ethernet network
adapter are installed. If they are not installed, please refer to your Windows or other
operating system manuals to install them.
11
iConnect625W ADSL/ADSL2+ Router User Guide
3.1 Default Settings
This section will guide you through your iConnect625W router configuration via the web
interface. The iConnect625W router is shipped with a standard PPP configuration.
The following table lists the default settings for your iConnect625W router. These settings
may change depending on your ISP. Please check with your ISP for more information.
Setting Default Value
Login Username
Login Password
WAN
DHCP Configuration
root
øP3N (the first character is a zero: zero-P-3-N)
Username
Password
Protocol
VPI
VCI
DHCP Server function is set to Enabled.
Start IP
End IP
Lease Time
<blank> Enter your username as
supplied by your ISP.
<blank> Enter your password as
supplied by your ISP.
PPPoE
The PPPoE function is enabled to
automatically get the WAN port from
the ISP but you have to set the
username and password first for this
to happen.
8
35
192.168.1.100
192.168.1.200
604800 seconds (or 7 days)
Management IP
(LAN)
If you ever forget your login password, you may press the RESET button for
up to 10 seconds to restore the factory default settings.
TIP
IP address
Subnet Mask
IP addresses
for distribution
to PCs
Ensure that your computer is configured for DHCP mode and that proxies
are disabled on your browser.
You must also ensure that Java Script support is enabled in the browser
settings so that the browser does not display a login redirection screen.
If any screen other than the Login screen appears, you may need to delete
your temporary Internet files, i.e. basically flush cached web page(s).
192.168.1.254
255.255.255.0
101 IP addresses continuing from
192.168.1.100 through 192.168.1.200.
12
iConnect625W ADSL/ADSL2+ Router User Guide
3.2 Factory Default Settings
You can restore your Factory Defaults by resetting the iConnect625W to the default
configuration.
Follow the steps below to restore the Factory Default Settings.
Step 1:Ensure that the iConnect625W router has been powered on for a minimum of
10 seconds.
Step 2:Using a blunt implement such as a pencil or paperclip, press the Reset button
for 10 seconds.
During this time, the reset is in progress. DO NOT power the iConnect625W off
whilst it resets.
Step 3:After 10 seconds, you may release it. The iConnect625W will be reset to its
factory defaults once the indicator lights have returned to green (non-blinking).
13
iConnect625W ADSL/ADSL2+ Router User Guide
3.3 Logging Into Your iConnect625W
Use the following procedure to log into your iConnect625W router.
Step 1: Open a web browser, and enter the following address in the Address bar:
http://192.168.1.254, then click Go. The following appears:
Step 2: Enter the username and password of root and øP3N (zero-P-3-N) in the User
name and Password fields. These fields are case sensitive .
Step 3: Click the Log In button.
Congratulations! You have now successfully logged into the iConnect625W router!
If you have problems logging into the router, please refer to Section 4 to configure
your network connection.
14
iConnect625W ADSL/ADSL2+ Router User Guide
4. PC Network Connection
This section demonstrates the steps required to configure your network connections for
the DHCP server to obtain an IP address automatically and to activate DNS Configuration,
depending on your PC's Operating System (OS).
4.1 Configuring Network Computers Using Windows XP
Step 1: Click Start / Control Panel (in Classic View). From the Control Panel window,
double-click Network Connections. The following appears:
Step 2: Double-click the Local Area Network connection name required.
Step 3: Click Properties. The following appears:
Step 4: Ensure the General tab is active, and highlight Internet Protocol (TCP/IP),
then click Properties. The following appears:
15
iConnect625W ADSL/ADSL2+ Router User Guide
Step 5: Highlight the Obtain an IP address automatically and the Obtain DNS server
address automatically radio buttons, then click OK to complete the
configuration.
16
iConnect625W ADSL/ADSL2+ Router User Guide
4.2 Configuring Computers in Windows 2000
Step 1: Click Start / Settings / Control Panel. From the Control Panel window,
double-click Network and Dial-up Connections. The following appears:
Step 2: Double-click the Local Area Connection name as required. The following
appears:
Step 3: From the Local Area Connection Status window, click Properties. The
following appears:
Step 4: Highlight Internet Protocol (TCP/IP) and click Properties. The following
appears:
17
iConnect625W ADSL/ADSL2+ Router User Guide
Step 5: Highlight the Obtain an IP address automatically and the Obtain DNS server
address automatically radio buttons and click the OK buttonto complete the
configuration.
18
iConnect625W ADSL/ADSL2+ Router User Guide
4.3 Configuring Computers In Windows 98/ME
Step 1: Click Start / Settings / Control Panel. From the Control Panel window,
double-click Network and highlight the Configuration tab to make it active.
The following appears:
Step 2: Highlight TCP / IP -> NE2000 Compatible, or the name of any Network
Interface Card (NIC) in your PC, and click the Properties button. The following
appears:
Step3: Highlight the IP Address tab to make it active, then highlight the Obtain an IP
address automatically radio button.
Step 4: Highlight the DNS Configuration tab to make it active. The following appears:
19
iConnect625W ADSL/ADSL2+ Router User Guide
Step 5: Highlight the Disable DNS radio button, then click the OK button to complete
the configuration.
20
iConnect625W ADSL/ADSL2+ Router User Guide
4.4 Configuring Computers In Windows Vista
Step 1: Click Windows logo / Control Panel / Network and Sharing Center as
shown:
Step 2:The following page appears. Click the Manage network connections link.
21
iConnect625W ADSL/ADSL2+ Router User Guide
Step 3: The Network Connections page appears. Double click on the active Local
Area Connection icon.
Step 4: The Local Area Connection Status page appears. Click the Properties
button.
Step 5: Under the Local Area Connection Properties page, highlight TCP/IPv4 and
click the Properties button.
22
iConnect625W ADSL/ADSL2+ Router User Guide
Step 6: Highlight the Obtain an IP address automatically and the Obtain DNS server
address automatically radio buttons and click the OK buttonto complete the
configuration.
23
iConnect625W ADSL/ADSL2+ Router User Guide
5. Understanding The Web Interface
5.1 Web Interface Components
The buttons, commands and menus make up the browser-based user interface. Please
read the following carefully before you commence configuration of the iConnect625W
router.
5.1.1 Buttons
Please take note of the definitions for the buttons as follows:
Apply
o Click to implement configuration changes. Clicking the Apply button does
not save the changes when the router is restarted.
Cancel
o Click the Cancel button to revert to the last saved configuration.
5.1.2 Menus
At the configuration homepage, the navigation tabs at the top of the screen directs you to
the desired configuration page.
There are seven menu items/tabs on the web interface. These include:
Home
Setup
Advanced
Wireless
Tools
Status
Help
The functions for each menu tab are described in detail in the following sections.
24
iConnect625W ADSL/ADSL2+ Router User Guide
6. Home
The Home page allows access to all the menu tabs for iConnect625W configuration. Its
basic layout consists of a page selection list of option tabs across the top of the browser
window.
The centre part of the screen provides descriptions of the option tabs supported on the
web interface pages.
The lower centre part of the page displays the iConnect625W status, connection
information, firmware version and other useful information.
Step 1:To access the Home page, click the Home tab at the top of the screen. The
following appears:
The following table provides a brief description of each of the tabs and their functions.
Tab Function
Setup
Advanced
Wireless
Tools
Status
Help
Configuration of new and existing LAN and WAN settings.
Configuration of advanced options within the iConnect625W such as
SNTP, routing and filtering.
Configuration of wireless features.
Access tools and diagnostics to assist in debugging.
Status views of the modem network to all connections and interfaces.
View the extensive online Help topics.
Buttons Function
Log Out
Refresh
Click on this button to log out of the router.
Clicking on this button refreshes the details on the screen.
25
iConnect625W ADSL/ADSL2+ Router User Guide
7. Setup
The Setup page consists of two subsections: LAN Setup and WAN Setup. Using the
appropriate links provided on the left menu, you can configure these settings as required.
The LAN Setup consists of LAN configuration. This is where local hosts are connected.
The iConnect625W router is configured to automatically provide all the hosts on the LAN
network with IP addresses.
The WAN Setup consists of the setup of various connection types: PPPoA, PPPoE,
Static, DHCP, Bridged connection, CLIP connection and modem setups. The WAN
interface is also referred to as a broadband connection. It is different for every WAN
service provider used.
Step 1: To access the setup page, click the Setup tab on the top navigation panel. The
following page appears:
Refer to the following sections on how to configure LAN and WAN Setups.
26
iConnect625W ADSL/ADSL2+ Router User Guide
7.1 LAN Setup
By default, your iConnect625W has the DHCP server (LAN side) enabled. If you already
have a DHCP server running on your network, you must disable one of them. If you
connect a second DHCP server into the network, you will experience network errors and
the network will not function normally.
7.1.1 LAN Configuration
The LAN Group Configuration allows you to configure settings for each defined LAN
group. You can view the status of advanced services that can be applied to this LAN
group. A green status indicates that the services have been enabled, while a red status
indicates that the service is currently disabled.
The iConnect625W provides LAN Configuration for multiple LAN groups. Up to five LAN
Groups are supported:
LAN Group 1
LAN Group 2
LAN Group 3
LAN Group 4
LAN Group 5
It is possible to assign any LAN interface to any bridge group but the Ethernet interface
needs to be in LAN Group 1.
The following interfaces are not valid until multiple SSID is enabled and the
secondary SSIDs are configured:
SSID1 (corresponds to the first secondary SSID)
SSID2 (corresponds to the second secondary SSID)
SSID3 (corresponds to the third secondary SSID)
To setup LAN Configuration, follow the steps below.
Step 1: From the top menu, click the Setup tab.
Step 2: Click the LAN Configuration link on the left menu. The following appears:
27
iConnect625W ADSL/ADSL2+ Router User Guide
Step 2: The Ethernet interface is defaulted to LAN Group 1 and should always remain
in this group. Click the Configure link within the LAN Group 1 box. The LAN Group 1 Configuration page appears:
Step 3: The Use the following Static IP address radio button is highlighted by default.
The default IP Address field is set to: 192.168.1.254. Change this
28
iConnect625W ADSL/ADSL2+ Router User Guide
field to a different IP Address, if required.
Step 4: The default Netmask field is set to: 255.255.255.0.
Step 5: The Enable DHCP Server radio button is highlighted by default. Enter a
different Start IP in the field if the default value: 192.168.1.100 does not apply.
This address is the beginning of the range from which the DHCP Server starts
issuing IP addresses.
Step 6: Enter the End IP field if the default value: 192.1.168.200 does not apply. This
address is the end of the range from which the DHCP Server issues IP
addresses.
Step 7: The Lease Time field is defaulted to 604800 seconds (or 7 days).
Step 8: Click the Apply button.
Step 9: To save your configuration, please refer to the section under Save / Restart
Menu.
29
iConnect625W ADSL/ADSL2+ Router User Guide
The following table lists the LAN Group Configuration fields and their definitions.
Field Definition
Unmanaged
Obtain an IP
Address
Automatically
PPP IP Address
Use the
Following Static
IP Address
Unmanaged is a state when the LAN group is not configured
and no IP address has been assigned to the bridge.
Highlight the radio button to select this option if the
iConnect625W router is acting as a DHCP client. When this
option is enabled, your iConnect625W router will request an
IP address from the DHCP server on the LAN side.
IP Address
You can retrieve or renew an IP address
from the DHCP server using the Release
and Renew buttons.
Netmask
This is the subnet mask of your
iConnect625W router.
Check this checkbox if PPP is providing addressing. The IP
address should be different from, but in the same netmask as
the WAN-side IP address.
This is the default setting. It enables you to change the IP
address of the iConnect625W router.
IP Address
Enter a static IP address. The default IP
address for the iConnect625W router is
192.168.1.254.
Netmask
Default Gateway
Host Name
Domain
Enter the static subnet mask. The default
Netmask for the iConnect625W router is
255.255.255.0. This subnet allows the
router to support 254 users. If you want
to support a larger number of users, you
can change the subnet mask.
The default gateway is the routing device
used to forward all traffic that is
addressed to a station within the local
subnet. Enter the default gateway as
specified by your ISP. Otherwise leave
this field blank and it will be automatically
populated when an ISP connection is
made.
The host name is used in conjunction
with the domain name to uniquely identify
your iConnect625W router. The
hostname can be any alphanumeric
character that does not contain spaces.
The domain name is used in conjunction
with the host name to uniquely identify
the iConnect625W.
Enable DHCP
Server
Highlighting this option turns on the DHCP server. This needs
to be disabled if a DHCP server is already running on the
LAN. The DHCP server (LAN side) is defaulted to Enabled.
30
iConnect625W ADSL/ADSL2+ Router User Guide
Field Definition
Assign ISPDNS,
SNTP
Enables/disables the Assign ISPDNS,
SNTP feature. The default is set to
disabled.
Start IP
This address is the beginning of the range
from which the DHCP server starts issuing
IP addresses. You need to ensure the
iConnect625W Management IP Address
and any statistically defined addresses
are not within the DHCP start and end
address ranges. The default Start IP
address is 192.168.1.100.
End IP
This is where the DHCP server stops
issuing IP addresses. The ending address
cannot exceed a subnet limit of 253. This
means that the maximum value for the
default gateway is 192.168.1.254. If the
DHCP server runs out of DHCP
addresses, users do not get access to
network resources. If this happens, you
can increase the End IP addresses (to the
limit of 254) or reduce the lease time.
Enable DHCP
Relay
Server and Relay
Off
Lease Time
The Lease Time is the amount of time that
a network user is allowed to maintain a
network connection to the router using the
dynamic IP address. The client will
automatically renew the address after this
time has elapsed or a new IP address is
issued. If the LAN computer does not
renew the address after the lease period,
the lease information will be removed from
the DHCP database. This database can
be viewed under Tools>DHCP Clients.
The lease time is in units of seconds.
The default value is set to 604800
seconds (or 7 days).
Highlighting this option configures the iConnect625W to
forward the DHCP request to a remote DHCP server. Enter
the remote DHCP server address in the Relay IP field.
Relay IP
The IP address of the DHCP relay server.
This will disable the iConnect625W's DHCP server and relay
functionality.
31
iConnect625W ADSL/ADSL2+ Router User Guide
7.2 Setting Up a WAN Connection
A new WAN connection is a virtual connection over the physical DSL connection. Your
iConnect625W can support up to 8 different (unique) virtual connections. If you have
multiple different virtual connections, you may need to use the static and dynamic routing
capabilities of your iConnect625W to pass data correctly.
Before the router can pass any data between the LAN and WAN interfaces, the WAN Setup must be configured and you must ensure that you have a DSL connection.
Depending on your ISP, you will need some or all of the information outlined below before
you can properly configure the WAN Setup.
The iConnect625W supports the following connection types:
PPPoE
PPPoA
Bridged
Static
DHCP
CLIP
Follow the steps to access the Setup page.
Step 1: To access the WAN Setup, click the Setup tab. The following page appears:
Step 2: Click on New Connection or Modem to setup your WAN configuration.
The following sections will provide steps on how to configure each connection type.
32
iConnect625W ADSL/ADSL2+ Router User Guide
7.2.1 PPPoE Connection Setup
PPP, or Point-to-Point Protocol, is a method of establishing a network connection/session
between network hosts. It provides secure login, and traffic metering among other
advanced features.
PPPoE (PPP over Ethernet) is a protocol for encapsulating PPP frames in Ethernet
frames. It provides the ability to connect to a network of hosts over a simple bridging
access device to a remote access concentrator.
It was designed to bring the security and metering benefits of PPP to Ethernet
connections such as DSL. PPPoE allows ADSL users to be authenticated by the ISP’s
systems. Most broadband connections are Ethernet, hence PPP over Ethernet. It also
allows for ISPs to provide multiple services over multiple PPP sessions, i.e., rated
services, broadband specific content (movies, etc.), metered services, etc.
To configure PPPoE connection, follow the steps provided below.
Step 1: To begin, click the Setup tab on the top menu. Click the New Connection link.
The default PPPoE Connection Setup page appears:
Step 2: MyConnection is the default name displayed in the Name field. Enter a unique
name for your PPPoE connection. The name must not have spaces and cannot
begin with numbers.
Step 3: From the Type drop-down list, PPPoE is the default setting.
Step 4: The NAT and Firewall checkboxes are enabled by default under the Options
field. Leave these in the default mode.
33
iConnect625W ADSL/ADSL2+ Router User Guide
NAT enables the IP address on the LAN side to be translated to IP address on
the WAN side. If NAT is disabled, you cannot access the Internet.
Step 5: If you want to enable VLAN, refer to the table at the end of this section as a
reference to configure the following fields:
Sharing: Select VLAN to enable the VLAN ID and Priority Bits fields.
VLAN ID: Enter the VLAN ID.
Priority Bits: Select the Priority Bits of the VLAN.
Step 6: Enter your Username and Password in the respective fields under the PPP
Settings section as shown, as provided by your ISP.
Step 7: In the PVC Settings section, enter the values for the VPI and VCI if they differ
from the default values: 8 and 35 respectively, as provided by your ISP.
If you need to use the VPI and VCI values in an existing connection, you will
need to open it and edit the settings. It is not possible to have more than one
connection using the same VPI/VCI values.
Step 8: Select the Quality of Service (QOS). Leave the default value as is if you are
unsure or if the ISP did not provide this information.
Step 9: Click the Apply button and the Save / Restart Menu link on the left menu. The
following screen appears:
34
iConnect625W ADSL/ADSL2+ Router User Guide
Step 10: Click the Save All button. The following screen appears. Click the OK button
to save the settings.
Step 11: MyConnection has been created for this connection in the left-hand menu.
You can connect, disconnect, apply, delete or cancel this connection using the
buttons at the bottom of the MyConnection page.
35
iConnect625W ADSL/ADSL2+ Router User Guide
The following table lists the PPPoE ConnectionSetup page fields and describes each of
the options:
Field Description
Network Address Translation is a feature that enables you
NAT
to use private IP addresses on your computer or your LAN.
This is set to Enabled by default for standard operation.
Firewall
VLAN Settings
This is set to Enabled by default for standard operation.
The following options are available:
• Disable: Disables connection sharing;
• Enable: Enables connection sharing;
Sharing
• VLAN: The VLAN ID and Priority Bits
fields are activated when VLAN is
selected, which enables you to create
VLAN.
Multiple connections over the same PVC
are supported, which requires the WAN
network to have VLAN support and for the
DSLAMS and routers on the ISP to handle
VLAN Tags.
VLAN ID
Extended support is also available, which
allows multiple connections to be placed
over the single PVC without VLAN support
(VLAN Tag of 0 in this special case). In
this mode of operation, a received packet
is flooded on all the connections that
reside over it.
PPP Settings
Priority is given to a VLAN connection
Priority Bits
from 0-7. All packets sent over the VLAN
connection have the priority bits set to the
configured level.
Each of the fields for PPP Settings is described as follows.
Your user name for the PPPoE access
provided by your ISP. This field is
Username
alphanumeric and the maximum limit is
64 characters. It cannot start with a
number.
Your password for the PPPoE access
provided by your ISP. This field is
Password
alphanumeric and the maximum number
of characters allowed is 128 characters.
It cannot start with a number.
36
iConnect625W ADSL/ADSL2+ Router User Guide
Field Description
Specifies that the PPPoE connection
should disconnect if the link has no
activity detected for n seconds. This field
is in conjunction with the On-Demand
Idle Timeout
feature and is enabled only when the On Demand checkbox is checked. To
ensure that the link is always active,
enter a 0 in this field. You can also enter
a value larger than 10 (secs).
When the On Demand option is not
enabled, this value specifies the time to
wait without being connected to your
Keep Alive
provider before terminating the
connection. To ensure that the link is
always active, enter a 0 in this field. You
can also enter any positive integer
values into this field.
This defines the authentication protocol
for your ISP. This is set to Auto by
default.
Auto
The authentication is
automatic.
Authentication
Stands for Challenge
CHAP
Handshake Authentication
Protocol.
MTU
On-Demand
Default
Gateway
PAP
Stands for Password
Authentication Protocol.
This is the Maximum Transmissi on Unit
that the DSL connection can transmit. It
is a negotiated value that packets no
more than n bytes can be sent to the
service provider. The PPPoE interface
default is 1492 (max) and PPPoA is
1500 (max). The minimum MTU value is
64.
If selected, this enables on-demand
connectivity to the Internet. Your
Internet connection is activated when
traffic is generated from LAN clients.
The connection disconnects if no activity
is detected after the specified timeout
value. When checked, this field enables
the following fields:
• Idle Timeout;
• Host Trigger;
• Valid Rx.
If checked, this WAN connection acts as
the default gateway to the Internet.
37
iConnect625W ADSL/ADSL2+ Router User Guide
Field Description
This feature is enabled by default. It
forces all TCP traffic to conform with the
Enforce MTU
PPP MTU by changing the TCP
maximum segment size to the PPP
MTU. If it is disabled, you may have
issues accessing some Internet sites.
Debug
Check this checkbox to enable PPPoE
connection debugging facilities.
PPP Unnumbered is a special feature. It
enables the ISP to designate a block of
PPP
Unnumbered
public IP addresses to the customer
where it is statically assigned on the LAN
side. PPP Unnumbered is essentially like
a bridged connection.
This field is used in conjunction with the
On-Demand feature and is enabled only
when the On Demand field is checked.
When the On-Demand feature is
enabled and Valid Rx is unchecked, only
packets going from the LAN side to the
WAN side keep the link active. After the
iConnect625W times out, no packets can
Valid Rx
be received from the WAN side to the
LAN side.
If Valid Rx is checked, the incoming
packets can keep the PPPoE WAN
connection active. There is one
condition: these incoming packets
should belong to a connection initiated
from a LAN-side device.
38
iConnect625W ADSL/ADSL2+ Router User Guide
Field Description
This field is used in conjunction with the
On-Demand feature and is enabled only
when the On Demand field is checked.
There are 3 types of packets:
• LAN packets (Type 1): packets
are generated by the
iConnect625W from the LAN to
the WAN.
• Proxied packets (Type 2):
packets are generated by the
iConnect625W after receiving
packets from the LAN side, such
as DNS Proxy.
• Locally generally packets (Type
3): packets are generated by the
iConnect625W such as Voice,
SNMP, etc.
When the On-Demand feature is
enabled and Host Trigger is unchecked,
only the flow of Type 1 packets keeps
Host Trigger
the link active, i.e. if the iConnect625W
has not received Type 1 packets for x
amount of time (as specified in the
Timeout field), the connection times out.
If Host Trigger is checked, Type 2 and
Type 3 packets can keep the link active
as well. You can configure the packets
using the Trigger Traffic page, which is
accessed by clicking the Configure
button next to Host Trigger.
The following fields can be used to
identify the traffic of Type 2 and/or Type 3 packets that will keep the link alive:
• Source Port (the character * is
used to denote any port);
• Destination Port (the character *
is used to denote any port);
• Protocol (TCP, UDP, ICMP, or
Specify the protocol number)
The LAN field is associated with the PPP
Unnumbered field and is enabled when
LAN
the latter field is checked. You can
specify the LAN group the packets need
to go to when the PPP Unnumbered
feature is activated.
39
iConnect625W ADSL/ADSL2+ Router User Guide
Field Description
The Permanent Virtual Circuit is a fixed virtual circuit
PVC Settings
between two users. It is the public data network equivalent
to a leased line. No call setup or clearing of procedures are
needed.
The VPI (Virtual Path Identifier) defines the
virtual path settings for the ADSL
VPI
connection between you and your ISP.
The VPI value entered here must be based
on the information provided by your ISP.
The VCI (Virtual Channel Identifier) defines
the virtual channel settings for the ADSL
VCI
connection between you and your ISP.
The VCI value entered here must be based
on the information provided by your ISP.
QoS is a characteristic of data transmission
that measures how accurately and how
quickly a message or data is transferred
from a source host to a destination host
QoS
over a network. The 3 QoS options are:
• UBR, CBR and VBR.
The QoS selected must be based on the
information provided by your ISP. This is
set to UBR by default.
UBR is the bandwidth
allocation service that does
not guarantee any throughput
UBR
levels and uses only available
bandwidth. UBR is often used
when transmitting data that
can tolerate delays.
CBR is the bandwidth service
that requires the user to
determine a fixed bandwidth
requirement at the time the
CBR
connection is set up so that
the data can be sent in a
steady stream. CBR service is
often used when transmitting
fixed-rate uncompressed
video.
40
iConnect625W ADSL/ADSL2+ Router User Guide
Field Description
VBR is the bandwidth service
that allows users to specify a
throughput capacity (i.e., a
peak rate) and a sustained
VBR
rate but data is not sent
evenly. VBR is often used
when transmitting compressed
packetized voice and video
data, such as video
conferencing.
The Peak Cell Rate, measured in cells/sec,
PCR
is the cell rate that the source may never
exceed.
Sustained Cell Rate, measured in cells/sec,
SCR
is the average cell rate over the duration of
the connection.
The Maximum Burst Size is a traffic
MBS
parameter that specifies the maximum
number of cells that can be transmitted at
the PCR.
CDVT
The Cell Delay Variation Tolerance is the
maximum amount of cell delay variation
that can be accommodated. Cell delay
variation measures the random inter-arrival
times of cells within an ATM connection
due to cell transfer delay caused by
buffering, multiplexing and so on.
41
iConnect625W ADSL/ADSL2+ Router User Guide
Field Description
Connect
The overall operation of the auto-sensing
PVC feature relies on end-to-end OAM
pings to defined PVCs. There are two
groups of PVCs:
• Customer default PVCs - defined by
the ISP and the backup PVCs. It
must have 0/35 as the first default
PVC.
• Backup list of PVCs - it must be of
the following VPI/VCI: 0/35, 8/35,
0/43, 0/51, 0/59, 8/43, 8/51 and
8/59. These are defined in XLM and
are configurable.
The Auto-sensing PVC feature itself is also
configurable in that the auto-search
mechanism can be disabled.
Upon DSL synchronization, end-to-end
OAM pings will be conducted for every
Auto PVC
defined PVC. The result of the pings will be
recorded in an array for later use to
determine the usability of the particular
PVC for connectivity. This list helps the
PVC to manage the available PVC for use,
and needs to be synchronised with
connections made without auto-sensing
PVC.
Once the connection is established, the
PVC is stored in flash as the default PVC.
Therefore upon reboot, this PVC is
automatically chosen as the PVC for that
connection.
The list of default PVCs and backup PVCs
need to be global for the management of all
connections, non auto-sensing PVC
connection and auto-sensing connections.
These lists allow end users to establish
connectivity without keeping track of the
PVC used.
Click Connect to authenticate to your ISP via PPPoE and
connect to the Internet.
Disconnect
Apply
Delete
Cancel
Click Disconnect to break your Internet connection.
Applies the changes made to the connection.
Deletes the connection.
Cancels the changes made to the connection.
42
iConnect625W ADSL/ADSL2+ Router User Guide
7.2.2 PPPoA Connection Setup
PPPoA (Point-to-Point Protocol over ATM) is a network protocol for encapsulating PPP
packets in ATM cells that are carried over the DSL line. It is used mainly with ADSL
services and is compliant with RFC 2364.
PPP is a method of establishing a network connection/session between network hosts. It
usually provides a mechanism of authenticating users. Logical Link Control (LLC) and
Virtual Circuit (VC) are two different methods of encapsulating the PPP packet. Contact
your ISP to determine which encapsulation is being used on your DSL connection.
To configure PPPoA connection, follow the steps below.
Step 1: To begin, click the Setup tab on the top menu. Click the New Connection link.
The default PPPoE Connection Setup page appears:
Step 2: Enter a unique name for your PPPoA connection in the Name field. The name
must not have spaces and cannot begin with numbers.
Step 3: From the Type drop-down list, select PPPoA. The default PPPoA page
appears:
43
iConnect625W ADSL/ADSL2+ Router User Guide
Step 4: The NAT and Firewall checkboxes are checked by default under the Options
field. Leave these in the default mode.
Step 5: If you want to enable VLAN, refer to the table at the end of this section as a
reference to configure the following fields:
Sharing: Select VLAN to enable the VLAN ID and Priority Bits fields.
VLAN ID: Enter the VLAN ID.
Priority Bits: Select the Priority Bits of the VLAN.
Step 6: In the PPP Settings section, select the Encapsulation Type (LLC or VC) by
highlighting the appropriate radio button. The default is set to VC. Your ISP
should be providing the Encapsulation Type. If you are unsure, maintain the
default mode.
Step 7: Enter your Username and Password in the respective fields as shown below,
as provided by your ISP.
44
iConnect625W ADSL/ADSL2+ Router User Guide
Step 8: In the PVC Settings section, enter the VPI and VCI values, as provided by your
ISP. These are defaulted to '8' and '35', respectively,
If you need to use the VPI and VCI values in an existing connection, you will need to open
it and edit the settings. It is not possible to have more than one connection using the
same VPI/VCI values.
Step 9: Select the QoS. Leave the default value if you are unsure or if the ISP did not
provide this information.
Step 10: Click the Apply button.
Step 11: To save your configuration, please refer to the section under Save / Restart
Menu.
The following table lists the PPPoA Connection Setup screen fields and describes each of
the options:
Field Description
NAT
Firewall
PPP Settings
Network Address Translation is a feature that enables you to use
private IP addresses on your computer or your LAN. This is set to
Enabled by default for standard operation.
Select to enable security for this connection. This is set to Enabled by
default for standard operation.
Each of the fields for PPP Settings is described as follows.
Encapsulation is the technique used by layered
Encapsulation
protocols in which a layer adds header information
to the protocol data unit (PDU) from the layer
above. Two options are provided: LLC and VC.
45
iConnect625W ADSL/ADSL2+ Router User Guide
Field Description
With LLC encapsulation, a link control
header is added to the Ethernet packet that
LLC
identifies the protocol type (Ethernet). This
allows multiple protocols to be transmitted
over the ATM VC.
With VC multiplexing, .no link control header
VC
is needed as the ATM VC is assumed to be
carrying a single protocol.
Your user name for the PPPoA access provided by
Username
your ISP. This field is alphanumeric and the
maximum length is 64 characters. It cannot start
with a number.
Your password for the PPPoA access provided by
Password
your ISP. This field is alphanumeric and the
maximum length is 128 characters. It cannot start
with a number.
Specifies that the PPPoA connection should
disconnect if the link has no activity detected for n
seconds. This field is in conjunction with the On-
Idle Timeout
Demand feature and is enabled only when the On
Demand checkbox is checked. To ensure that the
link is always active, enter a 0 in this field. You can
also enter a value larger than 10 (secs).
Keep Alive
Authentication
MTU
On-Demand
Default
Gateway
When the On Demand option is not enabled, this
value specifies the time to wait without being
connected to your provider before terminating the
connection. To ensure that the link is always active,
enter a 0 in this field. You can also enter any
positive integer value in this field.
This defines the authentication protocol for your
ISP. This is set to Auto by default.
Auto
CHAP
PAP
The authentication is automatic.
Stands for Challenge Handshake
Authentication Protocol.
Stands for Password Authentication
Protocol.
This is the Maximum Transmissi on Unit that the
DSL connection can transmit. It is a negotiated
value that packets no more than n bytes can be
sent to the service provider. The PPPoE interface
default is 1492 (max) and PPPoA is 1500 (max).
The minimum MTU value is 64.
If selected, this enables on-demand mode. The
connection disconnects if no activity is detected
after the specified timeout value.
If checked, this WAN connection acts as the default
gateway to the Internet.
46
iConnect625W ADSL/ADSL2+ Router User Guide
Field Description
PVC Settings
Debug
Check this checkbox to enable PPP connection
debugging facilities.
PPP Unnumbered is a special feature. It enables
PPP
Unnumbered
the ISP to designate a block of public IP addresses
to the customer where it is statically assigned on
the LAN side. PPP Unnumbered is essentially like a
bridged connection.
The LAN field is associated with the PPP
LAN
Unnumbered field. The packets need to go through
a specific LAN group when the PPP Unnumbered
feature is activated.
The PVC Settings are not mandatory except for the VPI and VCI fields.
The VPI defines the virtual path settings for the
VPI
ADSL connection between you and your ISP. The
VPI value entered here must be based on the
information provided by your ISP.
The VCI (Virtual Channel Identifier) defines the
virtual channel settings for the ADSL connection
VCI
between you and your ISP. The VCI value entered
here must be based on the information provided by
your ISP.
Connect
Disconnect
Apply
Delete
Cancel
This field defines QoS at the ATM layer. Three
different Quality Of Service options are available in
the iConnect625W: UBR, CBR and VBR (refer to
QoS
the previous section under the PPPoE table for the
definitions). The QoS selected here must be based
on the information provided by your ISP. This is set
to UBR by default.
Click Connect to authenticate to your ISP via PPPoA and connect to
the Internet.
Click Disconnect to break your Internet connection.
Applies the changes made to the connection.
Deletes the connection.
Cancels the changes made to the connection.
For VLAN and PVC field descriptions, please refer to the table under PPPoE section.
47
iConnect625W ADSL/ADSL2+ Router User Guide
7.2.3 Static Connection Setup
A Static Connection type is used whenever an ISP provides a Static IP address. Your ISP
should provide the information for the Subnet Mask and the Gateway. Up to three
Domain Name Server (DNS) addresses can be identified. These servers would enable
you to have access to other web servers using the host name.
To configure Static connection, follow the steps provided below.
Step 1: To begin, click the Setup tab on the top menu. Click the New Connection link.
The default PPPoE Connection Setup page appears:
Step 2: From the Type drop-down list, select Static. The following page appears:
48
iConnect625W ADSL/ADSL2+ Router User Guide
Step 3: Enter a unique name for your Static connection in the Name field. The name
must not have spaces and cannot begin with numbers.
Step 4: The NAT and Firewall checkboxes are checked by default under the Options
field. Leave these in the default mode.
Step 5: Select the Encapsulation Type (LLC or VC) by highlighting the appropriate
radio button. The default is set to LLC. If you are unsure about the option, leave
the default setting as it is.
Step 6: In the IP Address field, enter your assigned IP address based on the
information provided by your ISP.
Step 7: In the Mask field, enter the Subnet Mask based on the information provided by
your ISP.
Step 8: In the Default Gateway field, enter the Default Gateway based on the
information provided by your ISP.
Step 9: In the DNS1, DNS2 and DNS3 fields, enter the Domain Name Services values
based on the information provided by your ISP.
Step 10: For the static configuration in the Mode option, the default mode is set to
Bridged. You can select the Routed connection, if this is applicable.
Step 11: In the PVC Settings section, the VPI and VCI are defaulted to 8 and 35,
respectively. Make the changes in these fields, as provided by your ISP, if
required.
If you need to use the VPI and VCI values in an existing connection, you will need to open
it and edit the settings. It is not possible to have more than one connection using the
same VPI/VCI values.
Step 12: Select the QoS. Leave the default value if you are unsure or if the ISP did not
provide this information. The PCR, SCR, MBS and CDVT fields are enabled /
disabled based depending on the selection for QoS. Your ISP should provide
these values.
Step 13: Click the Apply button.
Step 14: To save your configuration, please refer to the section under Save / Restart
Menu.
49
iConnect625W ADSL/ADSL2+ Router User Guide
The following table lists the Static Connection Setup screen fields and their definitions:
Field Description
Network Address Translation is a feature that enables you to use
NAT
private IP addresses on your computer or your LAN. This is set to
Enabled by default for standard operation.
Firewall
Static
Settings
Select to enable security for this connection. This is set to Enabled by
default for standard operation.
Each of the fields for Static Settings is described as follows.
LLC or VC and two different methods of
encapsulating multiple sessions. The default is set to
LLC.
With LLC encapsulation, a link control
header is added to the Ethernet packet that
Encapsulation
LLC
identifies the protocol type (Ethernet). This
allows multiple protocols to be transmitted
over the ATM Virtual Circuit (VC).
With VC multiplexing, no link control header
VC
is needed as the ATM VC is assumed to be
carrying a single protocol.
This is the static IP address that will be assigned to
IP Address
the WAN interface of the iConnect625W router. The
information is based on the details provided by your
ISP.
A Mask is used to determine which subnet an IP
address belongs to. This is the Subnet Mask that will
Mask
be assigned to the WAN interface of the
iConnect625W router. The information is based on
the details provided by your ISP.
Apply
Delete
Cancel
The Default Gateway is the host to which local
Default
Gateway
computers send data that is destined for a non-local
machine. On the iConnect625W router, configure the
default gateway to reach all computers that are not in
the same local IP subnet.
DNS service is used to translate a Domain Name into
DNS 1 - DNS 3
a corresponding IP address. The DNS server name
should be obtained from your ISP.
Mode
Select either the Routed or Bridged mode option.
Applies the changes made to the connection.
Deletes the connection.
Cancels the changes made to the connection.
For VLAN and PVC field descriptions, please refer to the table under PPPoE section.
50
iConnect625W ADSL/ADSL2+ Router User Guide
7.2.4 DHCP Connection Setup
Dynamic Host Configuration Protocol (DHCP) allows the iConnect625W to obtain an IP
address automatically from the server. With dynamic addressing, a device may have a
different IP address every time it connects to the network. Before configuration begins,
please check with your ISP to ensure that this mode is supported.
To configure DHCP connection, follow the steps provided below.
Step 1: To begin, click the Setup tab on the top menu. Click the New Connection link.
The default PPPoE Connection Setup page appears:
Step 2: From the Type drop-down list, select DHCP. The following page appears:
51
iConnect625W ADSL/ADSL2+ Router User Guide
Step 3: Enter a unique name for your DHCP connection in the Name field. The name
must not have spaces and cannot begin with numbers.
Step 4: The NAT and Firewall checkboxes are checked by default under the Options
field. Leave these in the default mode.
Step 5: Select the Encapsulation Type (LLC or VC) by highlighting the appropriate
radio button. The default is set to LLC. If you are unsure about the option, leave
the default setting as it is.
Step 6: If your DSL line is connected and your ISP supports DHCP, click the Renew
button to retrieve an IP address, Subnet Mask and Default Gateway address.
Alternatively, you can click the Release button at any time to release the DHCP
address.
You can renew the DHCP address at any time by clicking the Renew button. This is not
required in most cases as the process runs automatically.
Step 7: From the PVC Settings section, the VPI and VCI are defaulted to 8 and 35,
respectively. Make the changes in these fields, if required, based on the
information from your ISP.
If you need to use the VPI and VCI values in an existing connection, you will need to open
it and edit the settings. It is not possible to have more than one connection using the
same VPI/VCI values.
Step 8: Select the QoS. Leave the default value if you are unsure or if the ISP did not
provide this information.
The PCR, SCR, MBS and CDVT fields could be enabled/disabled depending
on the QoS section. Your ISP should provide these values.
Step 9: Click the Apply button.
Step 10: To save your configuration, please refer to the section under Save / Restart
Menu.
52
iConnect625W ADSL/ADSL2+ Router User Guide
The following table lists the DHCP Connection Setup screen fields and their definitions:
Field Description
Network Address Translation is a feature that enables you to use
NAT
private IP addresses on your computer or your LAN. This is set to
Enabled by default for standard operation.
Firewall
DHCP
Settings
Select to enable security for this connection. This is set to Enabled by
default for standard operation.
Each of the fields for DHCP Settings is described as follows.
LLC and VC are two different methods of
encapsulating multiple sessions. The default is set to
LLC.
With LLC encapsulation, a link control
header is added to the Ethernet packet that
Encapsulation
LLC
identifies the protocol type (Ethernet). This
allows multiple protocols to be transmitted
over the ATM Virtual Circuit (VC).
With VC multiplexing, no link control header
VC
is needed as the ATM VC is assumed to be
carrying a single protocol.
IP Address
This is the static IP address assigned by the DHCP
server.
A Mask is used to determine which subnet an IP
address belongs to. This is the Subnet Mask that will
Mask
be assigned to the WAN interface of the
iConnect625W router. The information is based on
the details provided by your ISP.
Renew
Release
Apply
Delete
Cancel
Gateway
Default
Gateway
The Gateway is the IP address of your gateway.
If this field is enabled/checked, this WAN connection
will act as the default gateway to the Internet.
It may be necessary on occasion to get a new IP address or to update
the DHCP options sent by your ISP's DHCP server. Pressing this
button renews the DHCP lease.
Clicking this button releases the current network settings from the
iConnectAccess264W router.
Applies the changes made to the connection.
Deletes the connection.
Cancels the changes made to the connection.
For VLAN and PVC field descriptions, please refer to the table under PPPoE section.
53
iConnect625W ADSL/ADSL2+ Router User Guide
7.2.5 Bridged Connection Setup
In Bridge mode, Ethernet frames are bridged over ATM VC. The Ethernet frames are
encapsulated using either LLC Encapsulation or VC Multiplexing. Since the Ethernet
packets are bridged, the router's only functionality is to pass the Ethernet packets to and
from the ISP and the local network.
Your ISP assigns the IP addresses of the local network, either statically or dynamically. If
your ISP provides bridged service, you may select the Bridged connection type.
In this setting, the NAT and firewall rules are disabled. This connection method makes the
iConnect625W act as a transparent hub and passes packets across from the WAN
interface to the LAN interface transparently.
To configure Bridge connection, follow the steps provided below.
Step 1: To begin, click the Setup tab on the top menu. Click the New Connection link.
The default PPPoE Connection Setup page appears:
54
iConnect625W ADSL/ADSL2+ Router User Guide
Step 2: From the Type drop-down list, select Bridge. The following page appears:
Step 3: Enter a unique name for your Bridged connection in the Name field. The name
must not have spaces and cannot begin with numbers.
Step 4: Select the Encapsulation Type (LLC or VC) by highlighting the appropriate
radio button. The default is set to LLC. If you are unsure about the option, leave
the default setting as it is.
Step 5: In the Select LAN field, select the appropriate LAN Group you wish to
configure for Bridge mode.
Step 6: The VPI and VCI values are defaulted to 8 and 35, respectively. Make the
changes in these fields as provided by your ISP, if required.
If you need to use the VPI and VCI values in an existing connection, you will need to open
it and edit the settings. It is not possible to have more than one connection using the
same VPI/VCI values.
Step 7: Select the QoS. Leave the default value if you are unsure or if the ISP did not
provide this information.
The PCR, SCR, MBS and CDVT fields could be enabled/disabled depending
on the QoS section. Your ISP should provide these values.
Step 8: Click the Apply button.
Step 9: To save your configuration, please refer to the section under Save / Restart
Menu.
55
iConnect625W ADSL/ADSL2+ Router User Guide
The following table lists the Bridge Connection Setup screen and their definitions:
Field Description
Each of the fields for Bridge Settings is described as follows.
LLC and VC are two different methods of
encapsulating multiple sessions. The default is set to
LLC.
With LLC encapsulation, a link control
header is added to the Ethernet packet that
Encapsulation
LLC
identifies the protocol type (Ethernet). This
allows multiple protocols to be transmitted
over the ATM Virtual Circuit (VC).
With VC multiplexing, .no link control header
VC
is needed as the ATM VC is assumed to be
carrying a single protocol.
Bridge
Settings
Select the LAN Group (as defined in the LAN
Configuration screen) for the bridged connection. The
options are:
• LAN Group 1
• LAN Group 2
• LAN Group 3
• LAN Group 4
Select LAN
• LAN Group 5
• None
Apply
Delete
Cancel
The Bridge connection is added to the LAN Group
configuration, unless you have selected the option:
None. In this case, the connection will be added to
the Interfaces box instead.
Applies the changes made to the connection.
Deletes the connection.
Cancels the changes made to the connection.
For VLAN and PVC field descriptions, please refer to the table under PPPoE section.
56
iConnect625W ADSL/ADSL2+ Router User Guide
7.2.6 CLIP Connection Setup
Classical IP Over ATM as defined in RFC1577 provides the ability to transmit IP packets
over an ATM network. CLIP support encapsulates IP in an AAL5 Packet Data Unit (PDU)
frame using RFC 1577 and it sends out an ARP request to a CLIP-enable ARP server,
which returns the ATM address.
To configure CLIP connection, follow the steps provided below.
Step 1: To begin, click the Setup tab on the top menu. Click the New Connection link.
The following page appears if no prior connection has been configured:
Step 2: From the Type drop-down list, select CLIP. The following page appears:
57
iConnect625W ADSL/ADSL2+ Router User Guide
Step 3: Enter a unique name for your Bridged connection in the Name field. The name
must not have spaces and cannot begin with numbers.
Step 4: The NAT and Firewall checkboxes are checked by default under the Options
field. Leave these in the default mode.
Step 5: In the IP Address field, enter your assigned IP address based on the
information provided by your ISP.
Step 6: In the Mask field, enter the Subnet Mask based on the information provided by
your ISP.
Step 7: In the ARP Server field, enter the ARP Server address based on the
information provided by your ISP.
Step 8: In the Default Gateway field, the Default Gateway is blank. Enter this field
based on the information provided by your ISP.
Step 9: In the PVC Settings section, the VPI and VCI values are defaulted to 8 and 35,
respectively. Make the changes in these fields, as provided by your ISP, if
required.
If you need to use the VPI and VCI values in an existing connection, you will need to open
it and edit the settings. It is not possible to have more than one connection using the
same VPI/VCI values.
Step 10: Select the QoS. Leave the default value if you are unsure or if the ISP did not
provide this information.
The PCR, SCR, MBS and CDVT fields could be enabled/disabled depending
on the QoS section. Your ISP should provide these values.
Step 11: Click the Apply button.
Step 12: To save your configuration, please refer to the section under Save / Restart
Menu.
58
iConnect625W ADSL/ADSL2+ Router User Guide
The following table lists the CLIP Connection Setup screen and their definitions:
Field Description
Network Address Translation is a feature that enables you to use
NAT
private IP addresses on your computer or your LAN. This is set to
Enabled by default for standard operation.
Firewall
CLIP
Settings
Select to enable security for this connection. This is set to Enabled by
default for standard operation.
Each of the fields for CLIP Settings is described as follows.
LLC andVC are two different methods of
encapsulating multiple sessions. The default is set to
LLC.
With LLC encapsulation, a link control
header is added to the Ethernet packet that
Encapsulation
LLC
identifies the protocol type (Ethernet). This
allows multiple protocols to be transmitted
over the ATM Virtual Circuit (VC).
With VC multiplexing, .no link control header
VC
is needed as the ATM VC is assumed to be
carrying a single protocol.
IP Address
Mask
ARP Server
The CLIP Server IP Address provided by
your ISP.
The CLIP Server Subnet Mask provided by
your ISP.
The Address Resolution Protocol (ARP)
Server IP Address provided by your ISP.
Apply
Delete
Cancel
Default Gateway
If checked, this WAN connection acts as the
default gateway to the Internet.
Applies the changes made to the connection.
Deletes the connection.
Cancels the changes made to the connection.
For VLAN and PVC field descriptions, please refer to the table under PPPoE section.
59
iConnect625W ADSL/ADSL2+ Router User Guide
7.2.7 Modify an Existing Connection
Follow the steps below to modify an existing connection.
Step 1: To begin, click the Setup tab on the top menu, and click the connection you
wish to modify from the left hand menu.
Step 2: Edit as applicable on the individual connection page.
Step 3: Click the Apply button.
Step 4: To save your configuration, please refer to the section under Save / Restart
Menu.
60
iConnect625W ADSL/ADSL2+ Router User Guide
7.2.8 Delete an Existing Connection
Follow the steps below to delete a WAN connection.
Step 1: To begin, click the Setup tab on the top menu, and click the connection you
wish to delete from the left hand menu.
Step 2: Click the Delete button on the applicable connection you wish to remove.
The changes take effect when you click Delete. However, if the iConnect625W
router configuration is not saved, these changes will be lost when you reboot the
iConnect625W router.
Step 3: To save your configuration, please refer to the section under Save / Restart
Menu.
61
iConnect625W ADSL/ADSL2+ Router User Guide
7.2.9 Modem Setup
To configure the ADSL modulation types, follow the steps below.
Step 1: To begin, click the Setup tab on the top menu. Click the Modem link. The
following page appears:
Step 2: The Modulation Type checkboxes are defaulted to the above settings as
shown. It is recommended that the default settings remain.
The iConnect625W router is pre-configured to detect the ADSL modulation type
automatically. In most cases, this screen should not be modified.
Step 3: If any modulation type has been amended, click the Apply button.
Step 4: To save your configuration, please refer to the section under Save / Restart
Menu.
62
iConnect625W ADSL/ADSL2+ Router User Guide
The following table lists the Modem screen fields and their definitions:
Field Description
There are multiple combinations of ADSL modulation modes to be selected.
No Mode
ADSL_G.dmt
ADSL_G.lite
ADSL_G.dmt.bis
ADSL_G.dmt.bis.DELT
ADSL_2plus
ADSL_2plus_DELT
ADSL re-adsl
ADSL re-adsl DELT
ADSL_ANSI_T1.413
MULTI_MODE
ADSL_G.dmt.bis_AnxM
ADSL2plus_AnxM
No mode is defaulted to disabled.
G.dmt stands for G Discrete Multi-Tone. It supports ITU-U
ADSL over POTS (G.992.1).
It support ITU-T ADSL over POTS (G.992.2)
It supports ITU-T ADSL 2 over POTS (G.992.3)
It supports ADSL G.DMT.bis DELT
It supports ITU-T ADSL 2+ over POTS (G.992.5) and
speeds up to 24Mbps.
It supports ADSL 2+ and speeds up to 24Mbps.
It supports ITU-T RE-ADSL 2 over POTS (G.992.3).
It supports ADSL re-adsl DELT.
This applies to ANSI T1.413-1998.
Multi-Mode is automatically detected.
It supports ITU-T ADSL 2 G.992.3 Annex M.
It supports ITU-T ADSL 2+ G.992.5 Annex M.
63
iConnect625W ADSL/ADSL2+ Router User Guide
8. Advanced
The iConnect625W supports a host of advanced networking and routing features including
the setup of your LAN and WAN interfaces, security, port configuration, user management,
restarting the router and plug and play capability.
In addition, it allows you to performance advanced configuration functions for existing
connection such as enabling and disabling voice, voice provision, UPnP, SNTP, SNMP
and so on.
There should be at least one WAN connection configured before implementing advanced
WAN configuration features. Similarly, at least one LAN group must be defined before
advanced LAN configuration features can be implemented.
The features include:
Universal Plug and Play (UPnP)
Simple Networking Timing Protocol (SNTP)
Simple Network Management Protocol (SNMP)
Port Forwarding
IP Filters
LAN Clients
LAN Isolation between LAN groups
Remote Web Access
Bridge Filters
Dynamic DNS Client
Internet Group Management Protocol (IGMP) Proxy
Static Routing
Dynamic Routing
Policy Database
Ingress
Egress
Shaper
SSH Access Control
To access the Advanced configuration screen, follow the steps below.
Step 1: Click the Advanced tab to access the advanced configuration features. The
following page appears:
64
iConnect625W ADSL/ADSL2+ Router User Guide
Step 2: Please refer to the sections below on how to configure the advanced features.
65
iConnect625W ADSL/ADSL2+ Router User Guide
8.1 UPnP
UPnP is a networking architecture that provides compatibility among networking
equipment, software and peripherals such as game consoles, digital cameras and other
systems that connect by TCP/IP. It can be supported on any operating system, and
boasts device-driver independence and zero-configuration networking.
UPnP is a standard that uses Internet and Web protocols to enable the iConnect625W to
plug into a network and automatically recognise each other. This feature is set to
Disabled by default in the iConnect625W.
This feature requires one active WAN connection. In the presence of multiple WAN
connections, select a connection on which the incoming traffic is present, for example, the
default WAN connection.
Follow the steps below to enable UPnP.
Step 1: From the Advanced tab, click the UPnP link on the left menu. The following
page appears:
Step 2: Check the Enable UPnP checkbox. This enables the WAN connection and LAN
connection fields.
Step 3: Select the required WAN Connection that will use UPnP by highlighting the
appropriate item from the drop-down list.
66
iConnect625W ADSL/ADSL2+ Router User Guide
Step 4: Select the LAN Connection that will use UPnP by highlighting the appropriate
item from the drop-down list.
Step 5: Click the Apply button to apply the settings.
Step 6: To save your configuration, please refer to the section under Save / Restart
Menu.
67
iConnect625W ADSL/ADSL2+ Router User Guide
8.2 SNTP
SNTP ensures that the computer clock time can be synchronised in a network of
computers to the millisecond to the public SNTP servers. It uses the UDP protocol on port
123 to communicate between clients and servers.
When the SNTP feature is enabled, your iConnect625W starts verifying the time clock
information from the primary SNTP server. If it does not get a valid response within the
Timeout period, it makes additional attempts based on the number on the value of the
Retry Count field before it moves to the Secondary SNTP server. If there is no valid
response either for this server, it moves on to the Tertiary SNTP server. If it does not get a
valid response from all the servers, the program stops.
When it does receive a valid response from one of the servers, the program goes to sleep
for a few minutes as specified in the Polling Interval field before starting the whole process
again.
Follow the steps below to configure SNTP.
Step 1: From the Advanced tab, click the SNTP link on the left menu. The following
page appears:
Step 2: Check the Enable SNTP checkbox as shown below.
68
iConnect625W ADSL/ADSL2+ Router User Guide
Step 3: Enter the Primary SNTP Server address as required in the Primary SNTP
Server field.
Step 4: Enter the Secondary SNTP Server address as required in the Secondary
SNTP Server field.
Step 5: Enter the Tertiary SNTP Server address as required in the Tertiary SNTP field.
Step 6: Enter a Timeout limit (in seconds) into the Timeout field. The default is set to
5sec.
Step 7: Enter a time (in minutes) in the Polling Interval field. The default is set to
30mins.
Step 8: Enter the number of times to retry connecting to the server in the Retry Count
field. The default value is 2.
Step 9: Select the Time Zone from the drop-down list. The time zone refers to the
location where the router is operating.
Step 10: Check the Day Light checkbox to activate daylight saving time (DST), if it is
applicable.
Step 11: Click the Apply button to save the settings.
Step 12: To save your configuration, please refer to the section under Save / Restart
Menu.
69
iConnect625W ADSL/ADSL2+ Router User Guide
The following table lists the SNTP screen fields and their definitions:
Field Description
Enable SNTP
Primary SNTP Server
Secondary SNTP
Server
Tertiary SNTP Server
Timeout
Polling Interval
Retry Count
Check this checkbox to enable the iConnect625W to
synchronise the system time to the public SNTP servers.
The IP address or the host name of the primary SNTP
server. Refer to your ISP for this information. The default
setting is 0.0.0.0.
The IP address or host name of the secondary SNTP server.
Refer to your ISP for this information. The default setting is
0.0.0.0.
The IP address or host name of the tertiary SNTP server.
Refer to your ISP for this information. The default setting is
0.0.0.0.
The time in seconds that the iConnect625W will wait for an
SNTP server to respond. If the router fails to connect to an
SNTP server within the timeout period, it retries the
connection. The default is set to 5 seconds.
The amount of time (in minutes) that the iConnect625W
checks the time between a successful connection with an
SNTP server and a new attempt to connect to an SNTP
server. The default setting is 30 minutes.
The number of retries before a backup server is polled, i.e.
the number of times the router tries to connect to an SNTP
server before it tries to connect to the next server in line. The
default setting is set to 2.
Time Zone
Daylight
The time zone where the router resides.
Select this option to enable daylight saving time (DST). DST
is not automatically enabled or disabled. This function needs
to be enabled manually.
70
iConnect625W ADSL/ADSL2+ Router User Guide
8.3 SNMP
SNMP is used to remotely monitor the state of the network and collect information about
Internet traffic events and device status into a database. It is a troubleshooting and
management tool that uses UDP protocol on Port 161 to communicate between clients
and servers. For example, SNMP can be used to monitor the amount of traffic passing
through the network.
Step 1: From the Advanced tab, click the SNMP link on the left menu. The SNMP
Management page appears:
Step 2: Check the Enable SNMP Agent and Enable SNMP Traps checkboxes to
enable this feature as shown.
71
iConnect625W ADSL/ADSL2+ Router User Guide
Step 3: Enter an administrative name for the device in the Name field.
Step 4: Enter the physical location of the iConnect625W router in the Location field.
Step 5: Enter a contact for the iConnect625W in the Contact field.
Step 6: Enter a community name in the Name field under the Community section. The
default is set to Public. Step 7: The Access Right is defaulted to the ReadOnly option. The alternative option
is the ReadWrite option from the drop-down list.
Step 8: Enter the Trap Community name in the Trap Community field. This should
match the Community Name on the server receiving the traps.
Step 9: Select the Trap Version of the SNMP to use from the drop-down list.
Step 10: Click the Apply button to apply the settings.
Step 11: To save your configuration, please refer to the section under Save / Restart
Menu.
72
iConnect625W ADSL/ADSL2+ Router User Guide
The following table lists the SNMP screen fields and their definitions:
Field Description
Enable SNMP Agent
Enable SNMP Traps
Name
Location
Contact
Community
Check this checkbox to enable SNMP on this device. Enter the
SNMP settings in the Community section of the screen.
Check this checkbox to enable SNMP trap service. Enter the
SNMP trap settings in the Traps section of the screen.
This is an administrative name that is assigned for the
iConnect625W router.
This is the physical location of the iConnect625W router.
This is the contact person and/or contact information for the
iConnect625W router.
SNMP defines a community as a relationship between an
SNMP agent and one or more SNMP managers.
The default community name is set to Public with read-only access mode created in the
Name
configuration file. SNMP supports up to 3
communities including the default community
name Public.
The SNMP Read Only Community
Read Only
Access
Rights
Read Write
string is like a user ID or password
that allows access to the router's
statistics.
The SNMP Read Write Community
string allows a remote device to
read information from a device and
to modify the settings on that
device.
Traps
Trap is an event notification. There are 4 standard traps that
are supported in the iConnect625W router:
• WarmStartTrap;
• LinkUpTrap;
• LinkDownTrap;
• AuthenticationFailureTrap.
Destination IP
This is the Destination IP Address of
the host to receive the SNMP traps.
This is the community name of the
Trap Community
trap. It should match the community
name on the server receiving the
traps.
Select the version of the SNMP to
Trap Version
use from the drop-down list:
• SNMP v1
• SNMP v2
73
iConnect625W ADSL/ADSL2+ Router User Guide
8.4 Port Forwarding
Port Forwarding allows you to provide local services (for example, web hosting) for users
on the Internet or to play Internet games. When users send this type of request to your
network via the Internet, the iConnect625W router forwards these requests to the
appropriate computer. Hence, it allows you to direct incoming traffic to specific LAN hosts
based on a protocol port number and protocol.
Port Forwarding can be used with dynamic DHCP-assigned addresses and is
configurable per LAN group. For example, if you were configuring a Netmeeting server,
you would want to assign this server to a static IP address so that the IP address is not
re-assigned.
If Internet users are trying to access an Internet application, they must use the WAN IP
address. Port Forwarding translates the WAN IP address into a LAN IP address.
Before Port Forwarding can be configured, you must ensure that you have a LAN IP
Address configured in LAN Clients.
To configure Port Forwarding, follow the steps below.
Step 1: From the Advanced tab, click the Port Forwarding link on the left menu. The
following page appears:
Step 2: From the WAN Connection drop-down list, select the connection type for
which you wish to which port forwarding is applied.
Step 3: Check the Allow Incoming Ping (ICMP) checkbox if you wish to monitor the
connectivity between the IP devices. This is optional.
Step 4: From the Select LAN Group drop-down list, LAN group 1 is the default setting
that was previously configured under Setup>LAN Configuration. Step 5: For the LAN IP drop-down list, select the IP address for which you
74
iConnect625W ADSL/ADSL2+ Router User Guide
wish to host the service.
It is recommended that the Static IP Addresses rather than the DHCP IP
Addresses be used for Port Forwarding.
Step 6: If you wish to add a new LAN IP address, click the New IP button. The LAN
Clients page appears:
Step 7: Follow the instructions under the LAN Clients section for details on entering
the fields.
Step 8: To add a new rule for this connection, highlight the appropriate category radio
button for your configuration in the Category section, for example, Servers.
75
iConnect625W ADSL/ADSL2+ Router User Guide
Step 9: Select the Available Rules for a given category. The Available Rules window
displays the common Internet services within the selected category. Rules for
each service can be viewed by clicking the View button.
The Rule Management page appears:
Step 10: Click the Add button. The rule then appears in the Applied Rules section of
the screen. Continue to add rules as they apply from each category.
76
iConnect625W ADSL/ADSL2+ Router User Guide
Step 11: Click the Apply button to apply the settings.
Step 12: To save your configuration, please refer to the section under Save / Restart
Menu.
77
iConnect625W ADSL/ADSL2+ Router User Guide
The following table lists the Port Forwarding screen fields and their definitions:
Field Description
WAN Connection
Allow Incoming Ping
Select LAN Group
LAN IP
New IP
DMZ
Custom Port
Forwarding
Category
Select a defined WAN connection.
Ping is a protocol used mainly for monitoring the connectivity
between IP devices. Enabling this function allows remote
devices to use ping to check connectivity to your device.
Enable this function for monitoring purposes.
Select the LAN Group where the computer of the port to be
forwarded to is a member. LAN Groups can be managed or
created under Setup>LAN Configuration.
This is the IP address to which the selected ports are
forwarded. It is recommended that a static IP address be used.
This should be defined under the LAN Clients screen.
Clicking on this link leads to the LAN Client screen. Static
addresses not listed under the LAN IP drop-down list can be
added here.
This links to the Demilitarised (DMZ) screen. Please refer to
the section on DMZ for details on this function.
Clicking on this link leads to the Custom Port Forwarding
screen.
Please refer to the section on Custom Port Forwarding for
details on this function.
With Port Forwarding, you can provide local services (for
example web hosting) for users on the Internet or play Internet
games. This is the Category section of the Port Forwarding
screen. To configure a service or game, select the external
connection (for e.g. the Internet connection), select the
computer hosting the service and add the corresponding
firewall rule.
A number of pre-defined categories and rules are available
here. These are Games, VPN, Audio/Video, Apps, Servers and
Users.
E.g. Web servers specify the following port forwarding profile.
The categories available for Port Forwarding include: Games,
VPN, Audio/Video, Apps (or applications), Servers and Users.
78
iConnect625W ADSL/ADSL2+ Router User Guide
Field Description
Available Rules
Internet users are able to play Internet
games when this function is configured.
Games
Examples of the games list include
Aliens and Predators, Doom, Dune
2000, etc.
VPN
The default VPN settings are: IPSEC
L2TP and PPTP.
Net2Phone, Netmeeting and Quick
Audio/Video
Time 4 Server can be configured for
Audio/Video services.
Various applications are set as defaults
Apps
under this category, including: VNC,
Win2K terminals, PcAnywhere, etc.
The default servers include: Web
Servers
Servers, FTP server, Telnet Server, and
so on.
Users
New user rules can be added here.
Each category has Available Rules that are pre-defined or
user-defined. Default rules such as Netmeeting is available
under the Audio/Video category and Web Server is an
available rule under the Servers category.
View
Add
Remove
Applied Rules
To view the profile allocated for each category and available
rule, click the View button.
The Add button allows users to add the applied rule as
required.
To delete an existing applied rule, click the Remove button.
This specifies the applied Port Forwarding rule for the selected
WAN Connection and the LAN IP.
8.4.1 Allow Incoming Ping
Enabling the Incoming Internet Control Message Protocol (ICMP) Ping will allow Echo
requests to come into the gateway. The gateway will respond with an ICMP Echo
response message. The option allows the DSL provider or ISP to determine the following:
The status of the network;
Tracking and isolating hardware and software problems;
Testing, measuring and managing networks.
8.4.2 DMZ
Setting a computer on your local network as DMZ forwards any network traffic that is not
redirected to another computer via the Port Forwarding feature to the computer's IP
address. This opens access to the DMZ computer from the Internet.
The DMZ feature is disabled by default.
79
iConnect625W ADSL/ADSL2+ Router User Guide
Follow the steps below to enable DMZ.
Step 1: From the Port Forwarding screen, click the DMZ link next to the New IP
button. The following page appears:
Step 2: Check the Enable DMZ checkbox. This is configurable per LAN segment.
Step 3: From the Select Your WAN Connection drop-down list, select the connection
type for which you wish to add the DMZ.
Step 4: From the Select LAN Group drop-down list, select the LAN group for which
you wish to enable the DMZ.
It is recommended that the Static IP Addresses rather than the DHCP IP
Addresses be used for the DMZ host.
Step 5: Select the DMZ Host IP Address from the Select a LAN IP Address drop-
down list. If your IP Address is not listed, click the LAN Clients link provided
and follow the instructions under the LAN Clients screen.
Step 6: Click the Apply button to apply the settings.
Step 7: To save your configuration, please refer to the section under Save / Restart
Menu.
80
iConnect625W ADSL/ADSL2+ Router User Guide
The following table lists the DMZ Settings screen fields and their definitions:
Field Description
Enable DMZ
Select your WAN
Connection
Select LAN Group
Select a LAN IP
Address
LAN Clients
Enables/Disables the DMZ feature. The default is set to
disabled.
List of WAN connections defined in the WAN Setup for which
the DMZ feature is applied.
Select the LAN Group for which you wish to enable the DMZ
from the drop-down list.
This option refers to the Host computer to act as the DMZ.
This link leads to the LAN Client page. Static addresses that
are not listed under the LAN IP drop-down list can be added
here.
81
iConnect625W ADSL/ADSL2+ Router User Guide
8.4.3 Custom Port Forwarding
The Custom Port Forwarding feature is only required when specifying IP Subnets or IP
Addresses not listed under LAN Clients. This feature allows you to create up to 15
custom Port Forwarding entries to support specific services or applications, such as
concurrent NAT/NAPT operation.
To configure Custom Port Forwarding, follow the steps below.
Step 1: From the Port Forwarding screen, click the Custom Port Forwarding link
provided. The following page appears:
Step 2: From the Connection drop-down list, select the connection name for which you
wish to configure port forwarding.
Step 3: Enter a unique name for the rule in the Application field.
Step 4: Select the protocol from the Protocol drop-down list. The options are: TCP,
UDP, TCP and UDP.
Step 5: Identify the traffic by entering the Source IP Address and Source Netmask.
Step 6: Enter the Destination IP Address and Destination Netmask of the server to
which the traffic is being forwarded.
Step 7: Enter the Destination Port Start and Destination Port End fields.
Step 8: Enter the Destination Port on which the server will respond, in the Destination
Port Map field.
Step 9: Click the Apply button to apply the settings.
Step 10: To save your configuration, please refer to the section under Save / Restart
Menu.
82
iConnect625W ADSL/ADSL2+ Router User Guide
The following table lists the Custom Port Forwarding screen fields and their definitions:
Field Description
Connection
Enable
Application
Protocol
Source IP Address
Source Netmask
Destination IP
Destination Netmask
Destination Port
Start
Destination Port End
The name of the WAN connection on which you wish to
customise Port Forwarding.
This checkbox is enabled by default.
Enter a unique name of the application for which your ports
must be opened.
Select the protocol for your traffic. The options are: TCP, UDP
or TCP and UDP.
This is the IP address from which the incoming traffic is
allowed. You may enter 0.0.0.0 for all.
The Network Mask of the interface forwarding the traffic or
0.0.0.0 for all.
This is the LAN-side IP address of the device that is receiving
the traffic.
The LAN-side destination network mask of the device that is
receiving the traffic.
The starting destination port number that is made open for this
application.
The ending destination port number that is made open for this
application.
Destination Port Map
Wildcard (*) entries are allowed for IP Address/Netmask and Port range fields.
The destination port number to which traffic is forwarded on
the LAN-side. There are two types of port mapping:
• One-to-One where one port is mapped to another;
• Multiple-to-One where multiple ports are mapped to
one port.
83
iConnect625W ADSL/ADSL2+ Router User Guide
8.5 IP Filters
IP Filters allows you to block network access based on a user's computer IP Address on
the local LAN. You can use this option to block specific traffic (for e.g., block web access)
or any traffic from a computer on your local network.
If the Block All Traffic checkbox is checked, all network traffic from that computer will be
blocked. You can also add, edit or delete IP Filter rules without using the pre-defined
rules.
You will need to use Custom IP Filters when specifying IP subnets or IP address that is
not listed under LAN Clients. Otherwise, new filters can be defined in the User Category
of the Available Rules, and then mapped to the appropriate WAN connection and LAN IP.
To configure IP Filters, follow the steps below.
Step 1: From the Advanced tab, click the IP Filters link provided. The following page
appears:
Step 2: From the Select LAN Group drop-down list, select the LAN Group for which
you wish to add the rule.
Step 3: From the LAN IP drop-down list, select the IP address for which you wish to
apply the rule. If your IP address is not listed, click the New IP button and follow
the instructions under the LAN Clients screen.
It is recommended that Static IP Addresses rather than DHCP IP Addresses be
used for IP Filtering.
Step 4: In the Category area of the screen, highlight the appropriate radio button for
the category. The Available Rules area displays common Internet services
within the category selected. Rules for each service can be viewed by clicking
the View button.
84
iConnect625W ADSL/ADSL2+ Router User Guide
Step 5: To add a rule for this connection, highlight the service or application from the
Available Rules window and click the Add button. The rule will appear in the
Applied Rules area of the screen.
Step 6: Click the Apply button to apply the settings.
Step 7: To save your configuration, please refer to the section under Save / Restart
Menu.
85
iConnect625W ADSL/ADSL2+ Router User Guide
The following table lists the IP Filters screen fields and their definitions:
Field Description
Select the LAN Group where the computer of the port to be
Select LAN Group
forwarded to is a member. LAN Groups can be managed or
created under Setup>LAN Configuration.
This is the IP address to which the selected ports are filtered. It
LAN IP
is recommended that a static IP address be used. This should
be defined under the LAN Clients screen.
Clicking on this link leads to the LAN Client screen. Static
New IP
addresses not listed under the LAN IP drop-down list can be
added here.
Block All Traffic
Block Outgoing Ping
Custom IP Filters
Category
Checking this checkbox blocks all IP traffic from the specified
LAN IP Address.
Highlighting this option blocks all ICMP traffic from the
specified LAN IP Address. This feature can be used if you host
has a virus that attempts a Ping-Of-Death Denial of Service
attack.
Use this link to create filtering rules that are not pre-defined.
A database of pre-defined IP Filters allow you to apply one or
more filtering rules to one or more defined LAN groups. The
categories and rules available include: Games, VPN, Audio/Video, Apps, Servers and Users.
E.g. Web servers specify the following profile.
The categories available for IP Filters include: Games, VPN,
Audio/Video, Apps (or applications), Servers and Users.
Internet users are able to play
Internet games when this
Games
function is configured.
Examples of the games list
include Aliens and Predators,
Doom, Dune 2000, etc.
VPN
The default VPN settings are:
IPSEC L2TP and PPTP.
Net2Phone, Netmeeting and
Audio/Video
Quick Time 4 Server can be
configured for Audio/Video
services.
86
iConnect625W ADSL/ADSL2+ Router User Guide
Field Description
Available Rules
Applied Rules
Various applications are set
as defaults under this
Apps
category, including: VNC,
Win2K terminal, PcAnywhere,
etc.
The default servers include:
Servers
Web Servers, FTP server,
Telnet Server, and so on.
Users
New user rules can be added
here.
Each category has Available Rules that are pre-defined.
Default rules such as Netmeeting is available under the
Audio/Video category and Web Server is an available rule
under the Servers category.
This specifies the applied IP filtering for the selected LAN IP
Address.
87
iConnect625W ADSL/ADSL2+ Router User Guide
8.6 LAN Clients
All current DHCP clients are automatically registered in the LAN Client database as a
dynamic address if DHCP is used. If a static IP address is used on a LAN device and you
wish to apply IP rules to this address, you must add the IP address to the LAN Clients list.
Once the IP address has been added, Port Forwarding and Access Control rules can be
added to this IP address.
To configure LAN Clients, follow the steps below.
Step 1: From the Advanced tab, click the LAN Clients link provided. The following
page appears:
Step 2: From the Select LAN Connection drop-down list, select the LAN group for
which you wish to apply the LAN Client.
Step 3: To add the LAN Client Address, enter the LAN IP Address in the Enter IP
Address field, e.g. 192.168.1.101.
88
iConnect625W ADSL/ADSL2+ Router User Guide
Step 4: Enter the LAN's host name in the Host Name field if required. This is an
optional field.
Step 5: Enter the MAC address of the LAN Client in the MAC Address field.
Step 6: Click the Apply button to apply the settings. The IP address is allocated and it
shows up in the list of LAN clients as a Static Type.
Step 7: To reserve an IP entry, check the Reserve checkbox.
Step 8: Click the Apply button to apply the amended settings.
Step 9 To save your configuration, please refer to the section under Save / Restart
Menu.
89
iConnect625W ADSL/ADSL2+ Router User Guide
The following table lists the LAN Clients screen fields and their definitions:
Field Description
Select LAN
Connection
Enter IP Address
Hostname
MAC Address
Select the LAN Group to which you are adding the new LAN
client.
The IP address of the server / host that you want to use for
Port Forwarding or Access Control must be defined here.
An optional hostname can be assigned to the above address.
All MAC addresses of the host can be assigned here.
90
iConnect625W ADSL/ADSL2+ Router User Guide
8.7 LAN Isolation
LAN Isolation allows you to disable the flow of packets between two LAN groups. This
allows you to secure information in the private portions of the LAN from other publicly
accessible LAN segments.
Follow the steps below to block traffic from one LAN to another using LAN Isolation.
Step 1: From the Advanced tab, click the LAN Isolation link provided. The following
page appears:
Step 2: If you wish to disable traffic between LAN groups, check the Disable traffic
between LAN group 1 and LAN group 2 checkbox as required.
Step 3: Click the Apply button to apply the settings.
Step 4: To save your configuration, please refer to the section under Save / Restart
Menu.
91
iConnect625W ADSL/ADSL2+ Router User Guide
8.8 Remote Web Access
The Remote Web Access page allows you to give temporary permission to a user to
access your router from the WAN side. From the moment the account is enabled, the
user is expected to log in within 20 minutes or the account expires. Once the user is
logged in, an inactive session of more than 20 minutes will log the user out and the
account expires.
To enable a temporary user account for remote access, follow the steps below.
Step 1: From the Advanced tab, click the Remote Web Access link provided. The
following page appears:
Step 2: Check the Enable Remote Web Access checkbox to give the account read
and write access to the iConnect625W router.
92
iConnect625W ADSL/ADSL2+ Router User Guide
Step 3: Enter a unique user name in the User Name field for the WAN access account
as shown above.
Step 4: Enter the user password in the Password field for the WAN access account as
shown above.
Step 5: The default port number in the Port field is 51003. This is the port number to be
opened for the temporary WAN access.
Step 6: Click the Apply button to apply the settings.
Step 7: To save your configuration, please refer to the section under Save / Restart
Menu.
93
iConnect625W ADSL/ADSL2+ Router User Guide
8.9 Bridge Filters
The Bridge filtering mechanism enables users to define rules which allow/deny access
through the iConnect625W, via the hardware (MAC Address) of network devices.
The User Interface for Bridge Filter allows the following functionality:
When bridge filtering is enabled, each frame is examined against every defined filter rule
in sequence. When a match is found, the appropriate filtering action (allow/deny) is
performed.
To enable Bridge Filters, follow the steps below.
Step 1: From the Advanced tab, click the Bridge Filters link provided. The following
page appears:
Step 2: Check the Enable Bridge Filters checkbox to enable this feature as shown
and click the Apply button.
94
iConnect625W ADSL/ADSL2+ Router User Guide
Step 3: Check the Bridge Filter Management Interface checkbox as shown below to
enable the Bridge Filter Management Interface field. This ensures that you do
not get locked out of the iConnect625W on the interface of the LAN group
specified in the next two fields.
Step 4: Select the LAN group from the Select LAN drop-down list.
Step 5: Enter the source MAC address in the SRC MAC field. It must be in xx-xx-xx-xx-
xx-xx format.
Step 6: Select the source port from the SRC Port drop-down list. You can choose from
Any, Ethernet, WLAN or WAN Bridge Connection Port for the particular bridge,
if available.
95
iConnect625W ADSL/ADSL2+ Router User Guide
Step 7: Enter the destination MAC address in the Dest MAC field.
Step 8: Select the destination port from the Dest Port drop-down list.
Entering 00-00-00-00-00-00 in the Source or Destination MAC fields means that
ALL MAC addresses are matched.
Step 9: Select the protocol to be filtered from the Protocol drop-down list. You can
choose from the following options: PPPoE Session, PPPoE Discovery, IPX-
Ethernet II, RARP, IPv6, IPv4 and Any.
Step 10: Select the mode from the Mode drop-down list. The options are Allow or Deny.
Step 11: Click the Add button.
A maximum of 20 MAC filter rules can be supported with bridge filtering.
Step 11: Click the Apply button to apply the settings.
Step 12: To save your configuration, please refer to the section under Save / Restart
Menu.
96
iConnect625W ADSL/ADSL2+ Router User Guide
8.9.1 Editing Bridge Filters
Follow the steps below to edit an existing bridge filter.
Step 1: From the Bridge Filter screen, highlight the Edit radio button from existing
filter rules and edit the rule, as shown below.
Step 2:Make the required changes to the MAC Address, Protocol and Mode options
and click the Apply button to apply the settings.
Step 3: To save your configuration, please refer to the section under Save / Restart
Menu.
97
iConnect625W ADSL/ADSL2+ Router User Guide
8.9.2 Deleting Filter Rules
Follow the steps below to delete an existing bridge filter.
Step 1: From the Bridge Filter screen, check the Delete checkbox for the rule to be
removed as shown in the image below.
Step 2: Click the Apply button to apply the settings.
Step 3: To save your configuration, please refer to the section under Save / Restart
Menu.
98
iConnect625W ADSL/ADSL2+ Router User Guide
8.10 Dynamic DNS Client
Dynamic DNS allows you to register with a Dynamic DNS provider. Each time you
connect to the Internet, your ISP assigns a different IP address to your iConnect625W
router.
The Dynamic DNS feature allows you to register your iConnect625W router with a DNS
server and access it each time using the same host name. It is useful in web hosting and
FTP services.
To enable Dynamic DNS Client, follow the steps below.
Step 1: From the Advanced tab, click the Dynamic DNS Client link provided. The
following page appears:
Step 2: The Connection field is defaulted to the iConnect625W's WAN connection
over which your router will be accessed. Select another connection from the
Connection drop-down list.
99
iConnect625W ADSL/ADSL2+ Router User Guide
Step 3: Select the DynDNS for the DDNS Server option. If there are different DDNS
service providers, select the other options provided as shown below.
Step 4: Check the DDNS Client checkbox to enable the DDNS client feature for the
WAN connection.
Step 5: Enter your User Name and Password fields using the same user name and
password you have specified during the registration of the DNS hostname.
These fields are mandatory.
Step 6: Enter the domain name of the DNS server into the Domain Name field.
Step 7: Click the Apply button to apply the settings.
Step 8: To save your configuration, please refer to the section under Save/Restart
Menu.
100
Loading...
+ hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.