Planet XRT-401F User Manual

Page 1

Internet Broadband Router

XRT-401F

Page 2

Copyright (C) 2012 PLANET Technology Corp. All rights reserved. The products and programs described in this User’s Manual are licensed products of PLANET Technology, This User’s Manual contains proprietary information protected by copyright, and this User’s Manual and all accompanying hardware, software, and documentation are copyrighted. No part of this User’s Manual may be copied, photocopied, reproduced, translated, or reduced to any electronic medium or machine-readable form by any means by electronic or mechanical. Including photocopying, recording, or information storage and retrieval systems, for any purpose other than the purchaser's personal use, and without the prior express written permission of PLANET Technology.

Disclaimer

PLANET Technology does not warrant that the hardware will work properly in all environments and applications, and makes no warranty and representation, either implied or expressed, with respect to the quality, performance, merchantability, or fitness for a particular purpose PLANET has made every effort to ensure that this User’s Manual is accurate; PLANET disclaims liability for any inaccuracies or omissions that may have occurred. Information in this User’s Manual is subject to change without notice and does not represent a commitment on the part of PLANET. PLANET assumes no responsibility for any inaccuracies that may be contained in this User’s Manual. PLANET makes no commitment to update or keep current the information in this User’s Manual, and reserves the right to make improvements to this User’s Manual and/or to the products described in this User’s Manual, at any time without notice. If you find information in this manual that is incorrect, misleading, or incomplete, we would appreciate your comments and suggestions.

FCC Compliance Statement

This equipment generates and uses radio frequency energy and if not installed and used properly, that is, in strict accordance with the instructions provided with the equipment, may cause interference to radio and TV communication. The equipment has been tested and found to comply with the limits for a Class A computing device in accordance with the specifications in Subpart B of Part 15 of FCC rules, which are designed to provide reasonable protection against such interference in a residential installation. However, there is no guarantee that interference will not occur in a particular installation. If you suspect this equipment is causing interference, turn your Ethernet Switch on and off while your radio or TV is showing interference, if the interference disappears when you turn your Ethernet Switch off and reappears when you turn it back on, there is interference being caused by the Ethernet Switch. You can try to correct the interference by one or more of the following measures:

1. Reorient the receiving radio or TV antenna where this may be done safely.

2. To the extent possible, relocate the radio, TV or other receiver away from the Switch.

3. Plug the Ethernet Switch into a different power outlet so that the Switch and the receiver are on

different branch circuits.

If necessary, you should consult the place of purchase or an experienced radio/television technician for additional suggestions.

Page 3

Energy Saving Note of the Device

This power required device does not support Stand by mode operation. For energy saving, please remove the DC-plug to disconnect the device from the power circuit. Without remove the DC-plug, the device wills still consuming power from the power circuit. In the view of Saving the Energy and reduce the unnecessary power consuming, it is strongly suggested to switch off or remove the DC-plug for the device if this device is not intended to be active.

CE mark Warning

The is a class A device, In a domestic environment, this product may cause radio interference, in which case the user may be required to take adequate measures.

WEEE

To avoid the potential effects on the environment and human health as a result of the presence of hazardous substances in electrical and electronic equipment, end users of electrical and electronic equipment should understand the meaning of the crossed-out wheeled bin symbol. Do not dispose of WEEE as unsorted municipal waste and have to collect such WEEE separately.

Trademarks

The PLANET logo is a trademark of PLANET Technology. This documentation may refer to numerous hardware and software products by their trade names. In most, if not all cases, these designations are claimed as trademarks or registered trademarks by their respective companies.

Revision

User’s Manual for PLANET Internet Broadband Router: Model: XRT-401Fv2 Rev: 1.0 (March. 2012) Part No.: EM-XRT401Fv2 (2081-B40110-000)

Page 4

TABLE OF CONTENTS

UChapter 1 IntroductionU .................................................................................................... 6

U1.1 FeaturesU................................................................................................................. 6

U1.2 Minimum RequirementsU ....................................................................................... 7

U1.3 Product SpecificationU ...........................................................................................8

U1.4 Getting StartedU.................................................................................................... 10

UChapter 2 Quick SetupU .................................................................................................. 17

U2.1 Dynamic IPU .......................................................................................................... 19

U2.2 Static IPU................................................................................................................ 20

U2.3 PPPoEU ..................................................................................................................21

U2.4 PPTPU .................................................................................................................... 22

U2.5 L2TPU .....................................................................................................................23

UChapter 3 Advance FeaturesU ........................................................................................ 25

U3.1 AdminU................................................................................................................... 26

U3.1.1 ManagementU ........................................................................................... 27

U3.1.2 System SettingsU ..................................................................................... 28

U3.1.3 Firmware UpgradeU.................................................................................. 29

U3.1.4 Configuration and ToolU .......................................................................... 30

U3.1.5 Log SettingU ............................................................................................. 31

U3.2 WANU ..................................................................................................................... 32

U3.2.1 Dynamic IPU.............................................................................................. 33

U3.2.2 Static IPU ................................................................................................... 35

U3.2.3 PPPoE (PPP over Ethernet)U ...................................................................36

U3.2.4 PPTPU........................................................................................................ 38

U3.2.5 L2TPU ........................................................................................................ 41

U3.2.6 BigPond (Australia)U................................................................................ 43

U3.3 LANU ...................................................................................................................... 44

U3.3.1 LAN SettingsU........................................................................................... 44

U3.3.2 DHCP Client ListU..................................................................................... 45

U3.3.3 VLAN SettingsU ........................................................................................ 46

U3.3.4 Broadcast Storm ControlU....................................................................... 48

U3.3.5 IGMPU ........................................................................................................ 48

U3.4 NATU ...................................................................................................................... 50

U3.4.1 Virtual ServerU ..........................................................................................51

U3.4.2 Port TriggeringU ....................................................................................... 52

U3.4.3 Port MappingU .......................................................................................... 54

U3.4.4 PassthroughU ........................................................................................... 55

U3.4.5 DMZU ......................................................................................................... 56

U3.5 FirewallU ................................................................................................................ 57

U3.5.1 Firewall OptionsU ..................................................................................... 58

U3.5.2 Client FilteringU ........................................................................................ 59

U3.5.3 URL FilteringU........................................................................................... 60

Page 5

U3.5.4 MAC FilteringU ..........................................................................................61

U3.6 RoutingU ................................................................................................................ 62

U3.6.1 Routing TableU ......................................................................................... 62

U3.6.2 Static RoutingU .........................................................................................63

U3.6.3 Dynamic RoutingU.................................................................................... 64

U3.7 QoSU ...................................................................................................................... 65

U3.7.1 IP basedU .................................................................................................. 65

U3.7.2 Port basedU............................................................................................... 66

U3.7.3 DSCPU ....................................................................................................... 67

U3.8 OtherU .................................................................................................................... 69

U3.8.1 UPnPU ....................................................................................................... 69

U3.8.2 DDNSU ....................................................................................................... 71

U3.9 StatusU................................................................................................................... 72

U3.9.1 System StatusU.........................................................................................72

U3.9.2 System LogU............................................................................................. 73

UAppendix AU .................................................................................................................... 74

UAppendix BU .................................................................................................................... 75

UGlossaryU ........................................................................................................................... 1

Page 6

Chapter 1 Introduction

With the growth of the Internet activities, high-speed Internet access, on-line gaming and Triple-Play Internet application are often can be seen in our daliy life. To respond this trends of Internet activities, the PLANET XRT-401F Broadband Router is an ideal solution to provide the high speed Internet access, easy-to-use, and worry-free for surfing on the internet.

With easy integration and full compatibility of existing network infrastructures, the PLANET XRT-401F comprises a 4-Port 10/100Mbps switch to allow the users quickly and easily transmiting the data through the single high-speed Internet connection.

The XRT-401F provides QoS and IGMP features to make the network services smooth. Traffic priority can be assigned by the router to guarantee some important and specific transmissions, especially for real-time streaming multimedia applications such as the on-line gaming, VoIP, and IPTV to keep the bandwidth usage smoothly.

Via the user-friendly management interface, users can setup and configure the router very easily, just follow the wizard to guide you the setup procedure step by step. Furthermore, the Router not only provides basic router functions such as DHCP server, Virtual Server, DMZ, and UPnP, but also provides full security functions including Firewall and NAT / NAPT (Network Address/Port Translation) features, to protect your network from internet intruders and attacks.

1.1 Features

 Internet Access Features

 Shared Internet Access: All users on the LAN can access the Internet through the

XRT-401F using only a single external IP Address. The local (invalid) IP Addresses are hidden from external sources. This process is called NAT (Network Address Translation).

 Multiple WAN Connection: On the Internet (WAN port) connection, the XRT-401F

supports Dynamic IP Address (IP Address is allocated on connection), Fixed IP Address, PPPoE, PPTP and L2TP.

 Bridge and Router Application: The XRT-401F supports two application modes.

Currently, it comes pre-configured with Router mode. Note that, Router mode and Bridge mode cannot be used simultaneously.

 Advanced Internet Functions

 Quick Setup: Built-In configuration wizard helps users to complete network installation in

a very short time via standard Internet browsers such as Microsoft Internet Explorer, Netscape Communicator…etc.

 QoS: Quality of service can classify the network packet based on the port base and DSCP;

it can provide the best effect for real-time streaming multimedia applications such as the on-line gaming, VoIP, and IPTV.

 Virtual Servers: This feature allows Internet users to access Internet servers on your

LAN. The required setup is quick and easy.

Page 7

 Universal Plug and Play (UPnP): UPnP allows automatic discovery and configuration

of the Broadband Router. UPnP is supported by Windows ME, XP, or later.

 User Friendly Interface: The XRT-401F can be managed and controlled through Web

UI.

 DMZ Support: The XRT-401F can translate public IP addresses to private IP address to

allow unlimited 2-Way communication with the servers or individual users on the Internet. It provides the most flexibility to run programs smoothly for programs that might be restricted in NAT environment.

 Client / URL / MAC Filtering: The Filtering function can block the unallowable LAN users

accessing to Internet. Or you can use the keyword based URL Filter to block access to undesirable Web sites by LAN users.

 RIP1/2 Routing: It supports RIPv1/2 routing protocol for routing capability.  VPN Pass through Support: PCs with VPN (Virtual Private Networking) software are

transparently supported - no configuration is required.

 LAN Features

 4-Port Switch: The XRT-401F incorporates a 4-port 10/100Base-TX switching hub,

making it easy to create or extend your LAN.

 DHCP Server Support: Dynamic Host Configuration Protocol provides a dynamic IP

address to PCs and other devices upon request. The XRT-401F can act as a DHCP Server for devices on your local LAN.

1.2 Minimum Requirements

 One External xDSL (ADSL) or Cable modem with an Ethernet port (RJ-45)  Network Interface Card (NIC) for each Personal Computer (PC)  PCs with a Web-Browser (Internet Explorer 7.0 or higher, or Firefox 3.6 or higher)

Page 8

1.3 Product Specification

FUNCTIONAL SPECIFICATIONS

Product

Model

Hardware

Standard

WAN

Ports

LAN

LED Indicators

Button

Software

Protocol and Features

Internet Broadband Router XRT-401F

IEEE 802.3, IEEE 802.3u 10/100Base-TX standard 1 x 10/100Base-TX, Auto-Negotiation, Auto MDI/MDI-X 4 x 10/100Base-TX, Auto-Negotiation, Auto MDI/MDI-X PWR, WAN, LAN1-4 1 x RESET button

Router and Bridge mode Static Routing and RIPv1/2 DMZ and Virtual Server QoS IGMP v1/v2 VLAN SNTP DHCP Server / Client UPnP and DDNS

VPN

Security

IPSec / PPTP / L2TP VPN Pass-Through Built-in NAT Firewall

Client / URL / MAC Filtering Password protection for system management

Management

Web-based configuration Quick Setup Wizard Local and Remote Log

Environment Specification

Dimension (W x D x H)

Power

Temperature / Humidity

168 x 100 x 29 mm 5V DC, 1A Operating: 0~50 degree C, 5%~ 90% (non-condensing),

Storage: -10~70 degree C, 0~95% (non-condensing)

Page 9

Top Panel LED definition

LED Description

PWR

OFF When the router is powered off.

Data is being transmitted or received via the corresponding WAN

Flashing

ON When the router is powered on, and in ready state.

WAN

port.

ON The port is up.

Data is being transmitted or received via the corresponding LAN

Flashing

LAN1-4

port.

ON The port is up.

Rear Panel Port and Button Definition

Port Description

LAN (1-4)

Connect your LAN’s PCs, printer servers, hubs and switches etc.

WAN

RESET

5V DC

Connect your xDSL or Cable modem and is linked to the Internet. One push and release, the Router will reboot

At power on status, press more than 10 seconds and release for reset to factory default setting.

DC Power in.

Page 10

1.4 Getting Started

This is a step-by-step instruction on how to start using the router and get connected to the Internet.

1) Setup your network as shown in the setup diagram below.

2) Then, you need to setup your LAN PC clients so that it can obtain an IP address automatically. By default the XRT-401F’s DHCP server is enabled so that you can obtain an IP address automatically.

Note

Please make sure that the XRT-401F’s DHCP server is the only DHCP server available on your LAN. If there is another DHCP on your network, then you’ll need to switch one of the DHCP servers off.

Step1Î Configure your PC to obtain an IP address automatically

This section will show you how to configure your PC’s so that it can obtain an IP address automatically for either Windows 98/Me, 2000 or later operating systems. For other operating systems (Macintosh, Sun, etc.), please follow the manufacturer’s instructions. The following is a step-by-step illustration on how to configure your PC to obtain an IP address automatically for

a) Windows Vista, b)Windows XP, c) Windows 2000

Page 11

a) Configuring PC in Windows Vista

1. Go to Start / Control Panel / Network and Internet / Network and Sharing Center. Double-click on

Network Connections.

2. Double-click

Local Area Connection.

3. In the

Local Area Connection Status window, click Properties.

Page 12

4. Select

Internet Protocol Version 4 (TCP/IPv4) and click Properties.

5. Select the

radio buttons.

6. Click

OK to finish the configuration.

Obtain an IP address automatically and the Obtain DNS server address automatically

Page 13

b) Configuring PC in Windows XP

1. Go to Start / Control Panel (in Classic View). In the Control Panel, double-click on

Network Connections

2. Double-click

3. In the

Local Area Connection Status window, click Properties.

Local Area Connection.

Page 14

4. Select

Internet Protocol (TCP/IP) and click Properties.

5. Select the

Obtain an IP address automatically and the Obtain DNS server address

automatically radio buttons.

6. Click

OK to finish the configuration.

Page 15

c) Configuring PC in Windows 2000

1. Go to Start / Settings / Control Panel. In the Control Panel, double-click on Network and

Dial-up Connections.

2. Double-click

3. In the

4. Select

Local Area Connection Status window click Properties.

Internet Protocol (TCP/IP) and click Properties.

Local Area Connection.

5. Select the

Obtain an IP address automatically and the Obtain DNS server address

automatically radio buttons.

6. Click

OK to finish the configuration.

Page 16

Step2Î Configuring with Web Browser

Once your PC has obtained an IP address from your router, enter the default IP address

“http: //192.168.0.1” (XRT-401F’s LAN IP address) into your PC’s web browser and press

<enter>

Save this address in your Favorites for future reference.

At the User name prompt, type And the Password prompt, type Click

“OK”.

“admin”. “admin”. You can change these later if you wish.

Page 17

Chapter 2 Quick Setup

The Wizard section is designed to get you using XRT-401F as quick as possible. In the Wizard, you are required to fill in only the information necessary to access the Internet. Once you click on the

Wizard in the web page, you should see the screen below.

Step 1) Host Settings

The Host Settings allows your router to set up Host name and Domain name, it also can set up its Time Zone and Daylight Saving Time, these will affect functions such as Log entries and Firewall settings.

Parameter Description

Host Name Time Zone

Daylight Savings

Function Mode

Note

Click on

In this setup wizard, we set it as Router mode

NEXT to proceed to the next page (step 2) WAN Settings.

This is optional. You can specify a Host name for XRT401F. Select the time zone of the country where you currently are.

The router will set its time based on your selection. The XRT -401F can also t ake Daylight savings into account. If you wish

to use this function, you must select the enable box to enable your daylight saving configuration.

By default, XRT-401F is set as Router mode. If set to Bridge mode will turn the Router into 5-port Ethernt Switch where WAN port comes to Port # 5.

Page 18

Step 2) WAN Settings

In this section you have to select one of these types of connections that you will be using to connect your XRT-401F’s WAN port to your ISP (see screen below).

Note

Different ISP’s require different methods of connecting to the Internet, please check with your ISP as to the type of connection it requires.

Parameter Description

Dynamic IP Static IP

PPPoE PPTP L2TP

Dual Acces

Click on one of the WAN types and then proceed to the manual’s relevant sub-section (

2.3, 2.4 or 2.5). Click on Back to return to the previous screen.

Your ISP will automatically give you an IP address. Your ISP has given you an IP address already Your ISP requires you to use a Point-to-Point Protocol over Ethernet

(PPPoE) connection. Your ISP requires you to use a Point-to-Point Tunneling Protocol

(PPTP) connection. Layer 2 Tunneling Protocol is a common connection method used in

xDSL connections. This mode only active for Russia ISP that support dual layer Access

to the Internet.

2.1, 2.2,

Page 19

2.1 Dynamic IP

Choose Dynamic IP if your ISP will automatically give you an IP address. Some ISP’s may also require that you fill in additional information such as MAC address (see screen below).

Note

The MAC address section is optional and you can skip this section if your ISP does not require these settings for you to connect to the Internet.

Parameter Description

MAC Cloning MAC Address

If you want to clone your PC’s MAC address to XRT-401F, you must enable it first.

Your ISP may require a particular MAC address in order for you to connect to the Internet. This MAC address is the PC’s MAC address that your ISP had originally connected your Internet connection to. Type in this MAC address in this section or use the the WAN MAC address with the MAC address of that PC (you have to be using that PC for the Clone MAC Address button to work).

Clone MAC Address button to replace

Page 20

2.2 Static IP

Select Static IP if your ISP has given you a specific IP address to use. Your ISP should provide all the information required in this section.

Parameter Description

IP address assigned by your ISP

Subnet Mask

ISP Gateway Address

This is the IP address that your ISP has given you.

Enter the Subnet Mask provided by your ISP. (e.g. 255.255.255.0)

This is the ISP’s IP address gateway.

Page 21

2.3 PPPoE

Select PPPoE if your ISP requires the PPPoE protocol to connect you to the Internet. Your ISP should provide all the information required in this section.

Parameter Description

User Name

Password Retype Password Service Name

MTU

Maximum Idle Time

Enter the User Name provided by your ISP for the PPPoE connection.

Enter the Password provided by your ISP for the PPPoE connection. Re-enter the Password for confirmation. This is optional. Enter the Service name should your ISP requires it,

otherwise leave it blank. This is optional. You can specify the maximum size of your

transmission packet to the Internet. Leave it as it is if you do not wish to set a maximum packet size. (The default settings is 1492)

You can specify an idle time threshold (seconds) for the WAN port. This means if no packets have been sent (no one using the Internet) during this specified period, the router will automatically disconnect the connection with your ISP. (The default settings is 300 seconds)

Page 22

2.4 PPTP

Select PPTP if your ISP requires the PPTP protocol to connect you to the Internet. Your ISP should provide all the information required in this section.

Parameter Description

PPTP Account

PPTP Password Retype Password Service IP Address My IP Address

My Subnet Mask

Gateway Address MTU

Maximum Idle Time

Enter the PPTP Account provided by your ISP for the PPTP connection.

Enter the Password provided by your ISP for the PPTP connection. Re-enter the Password for confirmation. Specify PPTP Server IP address that you want to connect to. This is the IP address that your ISP has given you to establish a

PPTP connection. Enter the Subnet Mask provided by your ISP.

(e.g. 255.255.255.0) This is the ISP’s IP address gateway.

This is optional. You can specify the maximum size of your transmission packet to the Internet. Leave it as it is if you do not wish to set a maximum packet size. (The default setting is 1460)

Page 23

2.5 L2TP

Select L2TP if your ISP requires the L2TP protocol to connect you to the Internet. Your ISP should provide all the information required in this section.

Parameter Description

L2TP Account

L2TP Password Retype Password Service IP Address My IP Address

My Subnet Mask Gateway Address MTU

Maximum Idle Time

Enter the L2TP Account provided by your ISP for the PPTP connection.

Enter the Password provided by your ISP for the L2TP connection. Re-enter the Password for confirmation. Specify L2TP Server IP address that you want to connect to. This is the IP address that your ISP has given you to establish a

L2TP connection. Enter the Subnet Mask provided by your ISP. (e.g. 255.255.255.0)

This is the ISP’s IP address gateway. This is optional. You can specify the maximum size of your

transmission packet to the Internet. Leave it as it is if you do not wish to set a maximum packet size. (Default setting is 1460)

Page 24

Step 3) DNS

A Domain Name System (DNS) server is like an index of IP addresses and Web addresses. If you type a Web address into your browser, such as www.router.com, a DNS server will find that name in its index and the matching IP address. Most ISPs provide a DNS server for speed and convenience. If your Service Provider connects you to the Internet with dynamic IP settings, it is likely that the DNS server IP address is provided automatically. However, if there is a DNS server that you would rather use, you need to specify the IP address of that DNS server here.

Parameter Description

Static DNS Server Primary DNS Address

Secondary DNS Address

Click on <

Finish> when you have finished the configuration above.

Now! You have completed the connection configuration. You can start using the router now.

Select “Enabled” to allow configuring DNS manually. This is the ISP’s DNS server IP address that they gave you; or

you can specify your own preferred DNS server IP address This is optional. You can enter another DNS server’s IP

address as a backup. The secondary DNS will be used if the above DNS fail.

Page 25

Chapter 3 Advance Features

If you have already configured the Wizard, you do NOT need to configure anything for you to start using the Internet. Advance features that allow you to configure the router to meet your network’s needs such as: Firewall setup, Port Mapping, DMZ, Virtual Servers, QoS, and VLAN option. Below is a general description of what advance functions are available for this broadband router.

Parameter Description

3.1 Admin

3.2 WAN

3.3 LAN

This section allows you to set XRT-401F’s system settings, password and Remote Management Administrator, it also allows you to check system status and log, and provide you the configuration tools.

This section allows you to select the connection method in order to establish a connection with your ISP (same as the Wizard section)

You can specify the LAN segment’s IP address, subnet Mask, enable/disable DHCP and select an IP range for your LAN, you also can check DHCP client list in here.

3.4 NAT

You can configure the Virtual Server, Special Applications, Port Mapping, ALG and DMZ functions in this section. This allows you to specify what user/packet can pass your router’s NAT.

3.5 Firewall

The Firewall section allows you to configure Firewall, Client Filtering, URL Filtering and MAC Control.

3.6 Routing

You can configure Static Routing in this section, and check the concurrent Routing Table.

3.7 QoS

You can assign the bandwidth for specific LAN / WAN port. Each LAN Port will follow the bandwidth you assigned.

3.8 Other

You can configure UPnP and DDNS service in this section.

3.9 Status

Select one of the above advance features selections and proceed to the manual’s relevant

You can check system information in here, including system status and concurrent hardware information.

subsection.

Page 26

3.1 Admin

This section allows you to set XRT-401F’s system settings, password and Remote Management Administrator, it also allows you to check system status and log, and provide you the configuration tools.

Parameter Description

3.1.1 System Status

You can check system information in here, including system status and concurrent hardware information.

3.1.2 System Settings

3.1.3 Administrator

Settings

3.1.4 Firmware Upgrade

3.1.5 Configuration Tools

3.1.6 System Log

This section Includes Host Name, Domain Name, Time Zone, Daylight Saving and NAT enable/disable.

Allows you to set user name, password and the idle time out, you can specify a Host IP address that can perform remote management functions.

This section allows you to upgrade the router’s firmware and display the concurrent firmware version.

This section allows you to backup or restore the router’s configuration. It also allows you to restart router or reset it to factory default setting.

This section shows the current system and security log of XRT-401F, you also can specify a syslog server to save the log remotely.

Page 27

3.1.1 Management

The Management Settings function allows you to design user name, password and the idle time, it also can allow you to configure Remote Management function.

Parameter Description

User Name

Current password

New Password

Re-type Password

Enable

IP Address

Port

Password Settings

To specify a login name, the default is admin. Enter the current password for verification. Max. length is 12

characters. Type a new password in order to access the web-based

management website. Re-type the password for confirmation.

Remote Management

To enable Remote Management function. This is the IP address of the host in the Internet that will have

management / configuration access to XRT-401F from a remote site. If the IP Address is

can access the router’s web console from a remote location The port number of remote management web interface. For

example, port 8080 means, from the Internet, you are required

0.0.0.0, this means anyone

to use the URL: access / remote management to this Router.

U http://XRT401’s_WAN_IP:8080/U to have the

Page 28

3.1.2 System Settings

The system screen allows you to specify a time zone, Host Name, Function mode, and enable or disable NAT function of XRT-401F.

Parameter Description

Host Name

Set Time Zone

Daylight Saving

Host Name

NAPT Function Mode

Optional. You can specify a Host name for XRT-401F. Select the time zone of the country where you are currently

are. The router will set its time based on your selection. The XRT-401F can also take Daylight savings into

account. If you wish to use this function, you must select the enable box to enable your daylight saving configuration.

Optional. You can specify a Host name for XRT-401F. Select to enable or disable NAT / NAPT function. The XRT-401F supports two mode for your application, select

the Router mode to act as a Router / Gateway which provides the firewall function to protect your private network. To select the Bridge mode, the XRT-401F will act as a pure 5-Port Ethernet Switch. The default mode is Router.

Page 29

3.1.3 Firmware Upgrade

This page allows you to upgrade the router’s firmware.

Parameter Description

Firmware Upgrade

This tool allows you to upgrade XRT-401F’s system firmware. To upgrade the firmware of your Broadband router, you need to download the firmware file to your local hard disk, and enter that file name and path in the appropriate field on this page. You can also use the on your PC.

Browse button to find the firmware file

Page 30

3.1.4 Configuration and Tool

The Configuration Tools screen allows you to save (Backup) the router’s current configuration setting. Saving the configuration settings provides an added protection and convenience, if the problems occur with the router and you have to reset to factory default. When you save the

configuration setting (

Backup) you can re-load the saved configuration into the router through the

Restore selection. If extreme problems occur, you can use the Restore to Factory Defaults

selection, this will set all configurations to its original default settings (e.g. when you first purchased the router). You also can

Restart the router’s system if any problems exist.

Parameter Description

Restore Factory Default If extreme problems occur, you can use the Restore Factory

Default selection, this will set all configurations to its original

default settings (e.g. when you first purchased the Router).

Backup Settings Backup the configuration settings provide an added protection

and convenience, if the problems occur with the router and you

Restore Settings

Reboot

have to reset to factory default. When you save the configuration setting (Backup) you can

reload the saved configuration into the router through the

Restore Settings selection.

In the event that the system stops responding correctly or in some way stops functioning, you can perform a reset.

settings will not be changed.

Your

Page 31

3.1.5 Log Setting

Parameter Description

Remote Log

Log Server

Email Log

Send Email to

SMTP Server

Select <Enabled> to allow saving the log to Syslog Server. Enter the IP address of your Syslog Server. Select <Enabled> to allow mailing the log to specific user.

By default, it is Disabled. Enter the mail address that your want to mail log to. Enter the address or IP address of the SMTP (Simple Mail

Transport Protocol) Server you use for outgoing E-mail.

Page 32

3.2 WAN

Use the WAN Settings screen if you have already configured the Wizard section and you would like to change your Internet connection type. The WAN Settings screen allows you to specify the type of WAN port connect you want to establish with your ISP. The WAN settings offer the following selections for the router’s WAN port,

L2TP.

Dynamic IP, Static IP Address, PPPoE, PPTP, and

Parameter Description

3.2.1 Dynamic IP

3.2.2 Static IP

3.2.3 PPPoE

3.2.4 PPTP

3.2.5 L2TP

Your ISP will automatically give you an IP address Your ISP has given you an IP address already Your ISP requires PPPoE connection Your ISP requires you to use a Point-to-Point Tunneling Protocol

(PPTP) connection. Your ISP requires L2TP connection.

Page 33

3.2.1 Dynamic IP

Choose the Dynamic IP selection if you’re ISP will automatically give you an IP address. Some ISP’s may also require that you fill in additional information such as MAC address (see chapter 2 “

Dynamic IP” for more detail).

Parameter Description

MTU

Static DNS Server

Primary DNS Address

Secondary DNS

Address

This is optional. You can specify the maximum size of your transmission packet to the Internet. Leave it as it is if you do not wish to set a maximum packet size. (The default settings is

1500) Select “Enabled” to allow configuring DNS manually. This is the ISP’s DNS server IP address that they gave you; or

you can specify your own preferred DNS server IP address This is optional. You can enter another DNS server’s IP address

as a backup. The secondary DNS will be used if the above DNS fail.

MAC Cloning

MAC Address

If you want to clone your PC’s MAC address to XRT-401F, you must enable it first.

Your ISP may require a particular MAC address in order for you to connect to the Internet. This MAC address is the PC’s MAC

Page 34

address that your ISP had originally connected your Internet connection to. Type in this MAC address in this section or use the

Clone MAC Address button to replace the WAN MAC

address with the MAC address of that PC (you have to be using that PC for the Clone MAC Address button to work).

Page 35

3.2.2 Static IP

Select St atic IP address if you’re ISP has given you one or more IP address for you to use. Your ISP should provide all the information required in this section. (See chapter 2 “

detail)

Static IP” for more

Parameters Description

Static IP

Does ISP provide more

IP addresses?

More IP address

Your ISP has given you an IP address already, and you must type in the related IP address such as

IP Address, Subnet

Mask and Gateway.

Select <Yes> if you’re ISP provide more than one IP address.

Type the other IP address that ISP provide to you, This IP address will be useful in DMZ function. Max IP address allowed is 6 separated IP address.

Page 36

3.2.3 PPPoE (PPP over Ethernet)

Select PPPoE if your ISP requires the PPPoE protocol to connect you to the Internet. Your ISP should provide all the information required in this section. (See chapter 2 “PPPoE” for more detail)

Parameter Description

PPPoE

MTU

Connection Mode

Your ISP requires PPPoE connection, and you must type in the User Name, Password that your ISP provide.

This is optional. You can specify the maximum size of your transmission packet to the Internet. Leave it as it is if you do not wish to set a maximum packet size. (The default settings is

1492) Select the desired option:

Keep-alive (maintain connection)

The connection will never be disconnected by this device. If disconnected by your ISP, the connection will be re-established immediately. (However, this does not ensure that your Internet IP address will remain unchanged.)

Auto-Connect

An Internet connection is automatically made when required,

Page 37

and disconnected when idle for the time period specified by the "Maximum Idle Time (60~3600)".

Manual-on

You must manually establish and terminate the connection.

Static DNS Server

Primary DNS Address

Secondary DNS

Address

MAC Cloning

MAC Address

Select “Enabled” to allow configuring DNS manually. This is the ISP’s DNS server IP address that they gave you; or

you can specify your own preferred DNS server IP address This is optional. You can enter another DNS server’s IP address

as a backup. The secondary DNS will be used if the above DNS fail.

If you want to clone your PC’s MAC address to XRT-401F, you must enable it first.

Clone MAC Address button to replace the WAN MAC

address with the MAC address of that PC (you have to be using that PC for the Clone MAC Address button to work).

Page 38

3.2.4 PPTP

Select PPTP if your ISP requires the PPTP protocol to connect you to the Internet. Your ISP should provide all the information required in this section.

Page 39

Parameter Description

WAN Interface Settings

Dynamic IP

Static IP

To configure WAN Interface IP The ISP requires you to obtain an IP address by DHCP before

connecting to the PPTP server.

Clone MAC Address

Select <Enabled> to allow replacing the WAN MAC address with a specific MAC address.

MAC Address

The ISP gives you a static IP to be used to connect to the PPTP server. You must type in the related IP address such as

Clone MAC Address” button to replace the WAN

PPTP Settings

PPTP Account

PPTP Password

Retype Password

PPTP Server

Connection ID

MTU

Address, Subnet Mask and Gateway.

Enter the PPTP Account provided by your ISP for the PPTP connection.

Enter the Password provided by your ISP for the PPTP connection.

Re-enter the Password for confirmation. If your LAN has a PPTP gateway, then enter that PPTP

gateway IP address or domain name here. If you do not have a PPTP gateway then enter the ISP’s Gateway IP address above or domain name.

This is the ID given by ISP. This is optional. This is optional. You can specify the maximum size of your

transmission packet to the Internet. Leave it as it is if you do not wish to set a maximum packet size. (The default settings is

1460)

Maximum Idle Time

Connection Mode

Select the desired option:

Keep-alive (maintain connection)

Page 40

The connection will never be disconnected by this device. If disconnected by your ISP, the connection will be reestablished immediately. (However, this does not ensure that your Internet IP address will remain unchanged.)

Auto-Connect

An Internet connection is automatically made when required, and disconnected when idle for the time period specified by the "Maximum Idle Time (60~3600)".

Manual-on

You must manually establish and terminate the connection.

MPPE

Select <Enabled> to enable “Microsoft Point to Point Encryption” ability.

Page 41

3.2.5 L2TP

Select L2TP if your ISP requires the L2TP protocol to connect you to the Internet. Your ISP should provide all the information required in this section.

Parameter Description

WAN Interface Settings

Dynamic IP

MAC Cloning

To configure WAN Interface IP The ISP requires you to obtain an IP address by DHCP before

connecting to the L2TP server.

Select <Enabled> to allow replacing the WAN MAC address with

Page 42

a specific MAC address.

MAC Address

Static IP

L2TP Settings

L2TP Account

L2TP Password

Retype Password

L2TP Server

MTU

or use the “ MAC address with the MAC address of that PC.

The ISP gives you a static IP to be used to connect to the PPTP server. You must type in the related IP address such as

Clone MAC Address” button to replace the WAN

Address, Subnet Mask and Gateway.

Enter the L2TP Account provided by your ISP for the L2TP connection.

Enter the Password provided by your ISP for the L2TP connection.

Re-enter the Password for confirmation. Gateway IP address or domain name here. If you do not have a

L2TP gateway then enter the ISP’s Gateway IP address above or domain name.

This is optional. You can specify the maximum size of your transmission packet to the Internet. Leave it as it is if you do not

Maximum Idle Time

Connection Mode

wish to set a maximum packet size. (The default settings is

1460) You can specify an idle time threshold (seconds) for the WAN

port. This means if no packets have been sent (no one using the Internet) during this specified period, the router will automatically disconnect the connection with your ISP.

Select the desired option:

Keep-alive (maintain connection)

Auto-Connect

An Internet connection is automatically made when required, and disconnected when idle for the time period specified by the "Maximum Idle Time (60~3600)".

Manual-on

You must manually establish and terminate the connection.

Page 43

3.2.6 BigPond (Australia)

Select BigPond if your ISP requires the BigPond protocol to connect you to the Internet. Your ISP should provide all the information required in this section.

Parameter Description

BigPond Account

BigPond Password

Retype Password

BigPond Server

MTU

Enter the L2TP Account provided by your ISP for the BigPond connection.

Enter the Password provided by your ISP for the BigPond connection.

Re-enter the Password for confirmation. Gateway IP address or domain name here. If you do not have a

BigPond gateway then enter the ISP’s Gateway IP address above or domain name.

This is optional. You can specify the maximum size of your transmission packet to the Internet. Leave it as it is if you do not wish to set a maximum packet size. (The default settings is

1500)

Page 44

3.3 LAN

The LAN Port screen below allows you to specify a private IP address for your router’s LAN ports as well as a subnet mask for your LAN segment.

3.3.1 LAN Settings

Parameter Default Description

IP address

IP Subnet Mask

DHCP Server

IP Pool

Starting/Ending

192.168.0.1 This is the router’s LAN port IP address (Your

LAN clients default gateway IP address)

255.255.255.0 Specify a Subnet Mask for your LAN segment Enabled You can enable or disable the DHCP server. By

enabling the DHCP server the router will automatically give your LAN clients an IP address. If the DHCP is not enabled then you’ll have to manually set your LAN client’s IP addresses; make sure the LAN Client is in the same subnet as this broadband router if you want the router to be your LAN client’s

The IP range is

192.168.0.2

from

default gateway. You can select a particular IP address range for

your DHCP server to issue IP addresses to your

Address

Lease Time

to 192.168.0.100. Eight Hours The DHCP when enabled will temporarily give

LAN Clients.

your LAN clients an IP address. In the Lease Time setting you can specify the time period that the DHCP lends an IP address to your LAN

Page 45

clients. The DHCP will change your LAN client’s IP address when this time threshold period is

DNS Proxy Enable

reached Select <Enabled> that all DNS requests to a specific

Domain Name will be routed to the XRT-401F’s IP address. If you want to use the DNS Proxy function of the device, the end user’s main DNS server IP address should be the same IP Address as the device.

3.3.2 DHCP Client List

You can check your current status of the DHCP client here, it also allow you to add the client IP address with specific MAC address manually.

Parameter Description

DHCP Client List

Host Name

IP Address

MAC Address

Remainging Time

Static

Static Client

Host Name

IP Address

MAC Address

The DHCP client list allows you to see which clients are connected to the Router via IP address, host name, remaing time and MAC address. You can select static to fixed it

You can specify the current client to be a static client.

This is optional; you can specify a host name for your static client.

Fill in the IP address which you wish to be a static client. Fill in the MAC address which you wish to be a static client.

Page 46

3.3.3 VLAN Settings

By default, the VLAN setting is disabled, however, you can turn it on for purpose, or setup the port based priority base on the VLN setting here.

The default setting is that, All the ports, say port 1 to port 4 is bound to WAN interface. And WAN interface is bound to port 5 of the Router (where now, it is physically with printing WAN) So, all the network traffic that is going to Internet, all with going out through the WAN port. Unless VLAN is enabled yet the port’s VLAN is being disabled. And once turn it on, you can base on PVID to separate the LAN. For example as the figure below, port 1 is connected with IP Phone, port 2 is connected with Video device, and port 3, and port 4 is normal data ports. You can just change the PVID of port #1 to 4, port #2 to 5. Then, ports #1, #2, are being separated from port 3 and port 4. At the same time, you can also set the priority for port #1 to 7, port #2 to 4, and then for port # 3, port # 4 to 0, then, the Router will schedule the network packets base on the priority for packet out from that dedicated LAN port.

Page 47

Parameter Default Description

VLAN Enable

Port VLAN Enable

PVID

Priority

WAN

1. Different VLAN will have different PVID. Those ports with the same PVID will still see each other.

2. WAN should use different VID to LAN VID.

Note

3. Due to the Router is a single port WAN Router, ONLY ONE WAN check box is allowed. By default, it is set on port 5.

4. This Router support port based VLAN at Router mode, yet at Bridge mode there

Disable

Enable will turn on the port based VLAN. [After enabled, the options will show up.]

Enabled

The port joins to the WAN VLAN group. To disable will make the port isolated from the WAN.

1 The VLAN ID of the selected port.

1 for LAN 1 -4 2 for WAN at port 5

4 Disabled

The priority of the selected port. By default, the check box only enabled for port #5.

are two different VLAN types, port based and 802.1q tagged VLAN for choice

Page 48

3.3.4 Broadcast Storm Control

A broadcast storm means that the network is overwhelmedwith constant broadcast or multicast traffic. Broadcaststorms can eventually lead to a complete loss of network connectivity as the packets proliferate.This page can set the broadcast and the multicast storm control parameter,you can limit the broadcast and multicast per second through this port,the default value is 255.Tick the Enabled blank to adjust those parameter.

3.3.5 IGMP

The Internet Group Management Protocol (IGMP) is a Hcommunications protocolH used to manage the membership of HInternet ProtocolH HmulticastH groups. IGMP is used by HIPH HhostsH and adjacent HmulticastH HroutersH to establish multicast group memberships.

HIGMPH Snooping is the process of listening to IGMP HtrafficH, its feature that allows the HswitchH

to "listen in" on the IGMP conversation between HhostsH and HroutersH by processing the Hlayer 3H HpacketsH IGMP packets sent in a HmulticastH HnetworkH. When IGMP snooping is enabled in a switch it analyses all the IGMP packets between hosts connected to the switch and multicast routers in the network. When a switch hears an IGMP report from a host for a given multicast group, the switch adds the host's port number to the multicast table list for that group. And, when the switch hears an IGMP leave, it removes the host's port from the multicast table list. IGMP snooping can very effectively reduce multicast traffic from streaming and other bandwidth intensive IP applications. While a switch that does not understand multicast will

Page 49

broadcast the multicast traffic to all the ports in a collision domain (a LAN), a switch using IGMP snooping will only forward multicast traffic to the hosts interested in that traffic. This reduction of multicast traffic reduces the packet processing at the switch (at the cost of needing additional memory to handle the multicast tables) and also reduces the workload at the end hosts since their network cards (or Hoperating systemH) will not have to receive and filter all the multicast traffic generated in the network.

Page 50

3.4 NAT

Network Address Translation (NAT) allows multiple users at your local site to access the Internet through a single Public IP Address or multiple Public IP Addresses. NAT provides Firewall protection from hacker attacks and has the flexibility to allow you to map Private IP Addresses to Public IP Addresses for key services such as Websites and FTP. To meet various field applications, XRT-401F NAT function can be disabled to as a regular router. If NAT is disabled, all LAN side workstations must have valid IP addresses for Internet access. If the router is used for routing application, not for Internet access, then the NAT function can be disabled.

Parameter Description

3.4.1 Virtual Server

3.4.2 Port Triggering

3.4.3 Port Mpping

3.4.4 Passthrough

You can have different services (e.g. email, FTP, Web etc.) going to different service servers/clients in your LAN. The Virtual Server allows you to re-direct a particular service port number (from the Internet/WAN Port) to a particular LAN IP address and its service port number.

Some applications require multiple connections, such as Internet games, video conferencing, Internet telephony and others. In this section you can configure the router to support these types of applications.

You can have different services (e.g. email, FTP, Web etc.) going to different service servers/clients in your LAN. The Port Forwarding allows you to re-direct a particular range of service port numbers (from the Internet/WAN Ports) to a particular LAN IP address.

You can select special applications that need “Passthrough” to support here.

3.4.5 DMZ

The DMZ function allows you to re-direct all packets going to your WAN port IP address to a particular IP address in your LAN.

Page 51

3.4.1 Virtual Server

Use the Virtual Server function when you want different servers/clients in your LAN to handle different service/Internet application type (e.g. Email, FTP, Web server etc.) from the Internet. Computers use numbers called port numbers to recognize a particular service/Internet application type. The Virtual Server allows you to re-direct a particular service port number (from the Internet/WAN Port) to a particular LAN private IP address and its service port number.

Parameter Description

Enable

Private IP

Private Port

Type

Public Port

To enable the rule of Virtual Server. This is the LAN client/host IP address that the Public Port

number packet will be sent to.

Note: You need to give your LAN PC clients a fixed/static IP

address for Virtual Server to work properly. This is the port number (of the above Private IP host) that the

below Public Port number will be changed to when the packet enters your LAN (to the LAN Server/Client IP)

Select the port number protocol type (TCP, UDP or both). If you are unsure, then leave it to the default both protocols.

Enter the service (service/Internet application) port number from the Internet that will be re-directed to the above Private IP address host in your LAN

Comment

The description of this setting.

Page 52

3.4.2 Port Triggering

Parameter Description

Enable

Trigger Port

Trigger Type

Public Port

Public Type

Comment

To enable the rule of Port Triggering. This is the out going (Outbound) range of port numbers for this

particular application Select whether the outbound port protocol is “TCP”, “UDP” or

both. Enter the In-coming (Inbound) port or port range for this type of

application (e.g. 2300-2400, 47624)

Note: Individual port numbers are separated by a comma

(e.g. 47624, 5775, 6541 etc.). To input a port range use a “dash” to separate the two port number range (e.g. 2300-2400)

Select the Inbound port protocol type: “TCP”, “UDP” or both The description of this setting.

Example: Special Applications

If you need to run applications that require multiple connections, then specify the port (outbound) normally associated with that application in the "Trigger Port" field. Then select the protocol type (TCP or UDP) and enter the public ports associated with the trigger port to open them up for inbound traffic.

Page 53

Example:

ID Trigger Port Trigger Type Public Port Public Type Comment

1 28800 UDP 2300-2400,47624 TCP MSN Game Zone 2 6112 UDP 6112 UDP Battle.net

In the example above, when a user trigger’s port 28800 (outbound) for MSN Game Zone then the router will allow incoming packets for ports 2300-2400 and 47624 to be directed to that user.

Note

Only one LAN client can use a particular special application at a time.

Page 54

3.4.3 Port Mapping

The Port Mapping allows you to re-direct a particular range of service port numbers (from the Internet/WAN Ports) to a particular LAN IP address. It helps you to host some servers behind the router NAT firewall.

Parameter Description

Enable

Comment

Server IP

Type

Mapping Ports

To enable the rule of Port Mapping The description of this setting. This is the private IP of the server behind the NAT firewall.

Note: You need to give your LAN PC clients a fixed/static IP

address for Port Forwarding to work properly. This is the protocol type to be forwarded. You can choose to

forward “TCP” or “UDP” packets only or select “both” to forward both “TCP” and “UDP” packets.

The range of ports to be forward to the private IP.

Page 55

3.4.4 Passthrough

You can select applications such as PPTP/IPSex/L2TP VPN, FTP and H323 Netmetting that need “Passthrough” to support. It can let these applications correctly pass though the NAT Router.

Enable

Parameter Description

You can select to enable “Passthrough” of an application and then the router will let that application correctly pass though the NAT gateway.

Page 56

3.4.5 DMZ

If you have a local client PC that cannot run an Internet application (e.g. Games) properly from behind the NAT firewall, then you can open the client up to unrestricted two-way Internet access by defining a DMZ Host. The DMZ function allows you to re-direct all packets going to your WAN port IP address to a particular IP address in your LAN. The difference between the virtual server and the DMZ function is that the virtual server re-directs a particular service/Internet application (e.g. FTP, websites) to a particular LAN client/server, whereas DMZ re-directs all packets (regardless of services) going to your WAN IP address to a particular LAN client/server.

Parameter Description

Enable

Public IP Address

IP Address of Virtual DMZ

Action

Enable/disable DMZ The IP address of the WAN port or any other Public IP

addresses given to you by your ISP Input the IP address of a particular host in your LAN that will

receive all the packets originally going to the WAN port/Public IP address above.

Press <Add> to add DMZ rule.

Page 57

3.5 Firewall

XRT-401F provides extensive firewall protection by restricting connection parameters, thus limiting the risk of hacker attack, and defending against a wide array of common Internet attacks.

Parameter Description

3.5.1 Firewall Options

3.5.2 Client Filtering

3.5.3 URL Filtering

3.5.4 MAC Filtering

XRT-401F's firewall can block common hacker attacks and can log the attack activities.

Client Filtering allows you to specify which hosts users can or cannot access to certain Internet applications by IP address.

URL Filtering allow you to specify which URLs can not be accessed by users.

MAC Filtering allows you to specify which hosts users can or cannot access to Internet by MAC address.

Page 58

3.5.1 Firewall Options

XRT-401F's firewall can block common hacker attacks, including Denial of Service, Ping of Death, Port Scan and Sync Flood. If Internet attacks occur the router can log the events.

Firewall Options

Parameter Description

Enable

Discard Ping From WAN

Deny to Ping the Gateway

Drop Port Scan Packets

Allow to Scan Security Port

(113)

Discard NetBIOS Packets

Deny Fragment Packets

Send ICMP packets when

error

IP Spoofing

Select it to enable Firewall Options function. The router’s WAN port will not respond to any Ping

requests The router’s LAN port will not respond to any Ping requests Protection the router from Port Scan. Select to allow Identification Protocol (Port 113) to be

scanned. Select to not allow NetBIOS protocol to pass through router Select to deny Fragment Packets passing through. Select to allow sending ICMP error packets to the node

that send out the wrong packets. Protection the router from IP Spoofing attack.

Smurf Attack

Ping of Death

Land Attack

Snork Attack

UDP Port Loop

Protection the router from Smurf Attack attack. Protection the router from Ping of Death attack. Protection the router from Land Attack attack. Protection the router from Snork Attack attack. Protection the router from UDP Port Loop attack.

Page 59

TCP Sync Flood

Protection the router from Sync Flood attack.

ICMP Flood

Protection the router from ICMP Flood Packet attack.

3.5.2 Client Filtering

You can filter Internet access for local clients based on IP addresses, application types, (i.e.,HTTP port), and time of day.

Parameter Description

Enable Client Filter

Port

Type

Block Time

Day

Time

Select to enable “Client Filtering” function. Enter the IP address range that you wish to apply this

rule. You can assign the specific port ranges. The router will

block clients from accessing Internet services that use these ports.

This allows you to select UDP, TCP or both protocols that you want to block.

Select <Always> router will block the access forever. Select <Block> router will block the access according to the time schedule.

Select a certain days in the week to block the access. Select a certain time in a day that you want to block.

Comment

Enable

The description of this setting. To enable the rule of Client Filtering

Page 60

3.5.3 URL Filtering

You can deny or allow the access for some Web sites from particular PCs by entering a full URL address or just keyword of the Web site.

Parameter Description

URL Filter Control Enable/disable URL Blocking

Deny Internet access for the following URL address Allow Internet access for the following URL address

URL filter string

Enable

Enter the IP address range that you wish to apply this rule.

You can enter the full URL address or the keyword of the web site you want to block.

To enable the rule of URL Filtering.

Page 61

3.5.4 MAC Filtering

You can filter Internet access for local clients based on MAC Address. The MAC address filter enables you to allow or restrict specified nodes from communicating with other nodes.

Parameters Description

MAC Address Control

Configure MAC Address

Check “Enabled” to enable MAC Filtering. Select MAC address connects to Internet.

Fill in or “MAC Address” and “Comment” of the PC, or select the MAC Address from “Action”, and then click “Add”.

Deny or Allow the Internet access for the following

Page 62

3.6 Routing

This section allows you to configure XRT-401F’s static route and check the current routing table. The routing is only for internal routing using, so you do not need to disable NAT function, and there are two ways to manage the device’s routing information, it includes

3.6.1 Routing Table

The routing table displays the current routing information in system.

Parameter Description

Destination LAN IP

Subnet Mask

The IP address where packets will go to. The subnet masks of the destination IP address.

RIP and Static.

Gateway

The gateway that the packets will pass by during transmission.

Page 63

3.6.2 Static Routing

This page is used to configure the routing information. Here you can add / delete IP routes. A static route is a pre-determined pathway that network information must travel to reach a specific host or network. (For example: Destination Network IP: 192.168.100.1, Subnet Mask:

255.255.255.0, Gateway IP: 192.168.0.2)

Parameter Description

Destination LAN IP, Subnet

Mask

Gateway

Add

Specify the destination LAN IP where the packets will be routing to packets will be routing to.

Specify the other gateway IP that will route the packets to the destination.

Click “Add” to add this routing information.

Page 64

3.6.3 Dynamic Routing

Dynamic Routing can be used to cache routes learned by routing protocols, thus allowing the automation of static routing maintenance. The router, using the RIP (Routing Information Protocol) protocol, determines the network packet's route based on the fewest number of hops between the source and the destination. In this case, you could automatically adjust to physical changes in the network layout.

Parameter Description

Working Mome

Listen Mode Select the RIP version, and to start or stop RIP based on

Supply Mode

Specify your XRT-401F work as Router or Gateway.

the Global RIP mode selected. This parameter determines if the XRT-401F includes the

router to this remote node in its RIP broadcasts or RIP Multicast. Select the Mode you want to use.

Page 65

3.7 QoS

By configuring the QoS, you can assign the bandwidth for specific LAN / WAN port. Each LAN Port will follow the bandwidth you assigned. The QoS can smooth your network usage for Triple-Play applications such as the VoIP, IPTV and Internet.

3.7.1 IP based

When select this mode, it means the QoS rule by IP, you can set the total bandwidth or specified the bandwidth with the IP range or single IP address. Tick the Enable Rate Control and set that parameter.

Page 66

Parameter Description

Total upload bandwidth

Total download bandwidth

IP Address

Mode

Upload

Download

Rules Listing

Specify the total upload bandwidth. Specify the total download bandwidth. You can set the IP range or the single IP address. Select the Independent or the Share mode.

Independent mode: Means the above IP address have the independent bandwidth with the below rule. Share mode: Means the above IP address share the bandwidth with the below rule.

Set the upload bandwidth. Set the download bandwidth. You can check the rule status you just set on this item

3.7.2 Port based

When enabled, you can key in the max / guarantee transmit bandwidth in Kbps, for example, if the WAN upload bandwidth is 2Mbps, then, key in 2048, and if the LAN 1 is a PC that want to limit the PC receiving rate below 1Mbps, then, key in 1024. That is, key in a number that number will be the maximum bandwidth that the Router will give to the connected devices. And keep it in 0 for un-limits at the transmit rate. .

Note

This option can cowork with VLAN priority (refer to section 3.3.3) options to have an optimal network packet transmission.

Page 67

3.7.3 DSCP

The XRT-401F also supports DSCP (Differentiated Services Code Point) that can help to recognize and provide the QoS features to the network packts. When turned on, the Router will look up the DS (Differentiated Services) field for packet priority.

It will help to forward the packets that contain the priority information accordingly. The DSCP value can be from 0 (lowest priority) to 63 (highest priority). The Router can base on the priority to put the packets into three Weighted Queue, where each queue can have its buffer level from 1 to 15.

Page 68

Below is a reference table for the values. And also the reference about IP precedence level

DSCP Name

DS Field Value

Binary Decimal

CS0 000 000 0 0

CS1 001 000 8 1 AF11 001 010 10 1 AF12 001 100 12 1 AF13 001 110 14 1

CS2 010 000 16 2 AF21 010 010 18 2 AF22 010 100 20 2 AF23 010 110 22 2

CS3 011 000 24 3 AF31 011 010 26 3 AF32 011 100 28 3 AF33 011 110 30 3

IP Precedence

CS4 100 000 32 4 AF41 100 010 34 4 AF42 100 100 36 4 AF43 100 110 38 4

CS5 101 000 40 5

EF 101 110 46 5 CS6 110 000 48 6 CS7 111 000 56 7

IP Procedence Level:

Priority Level Traffic Type

0 (lowest) Best Effort

1 Background 2 Standard (Spare) 3 Excellent Load (Business Critical) 4 Controlled Load (Streaming Multimedia) 5 Voice and Video (Interactive Media and Voice) 6 Layer 3 Network Control Reserved Traffic

7 (highest) Layer 2 Network Control Reserved Traffic

Page 69

3.8 Other

3.8.1 UPnP

With UPnP (Universal Plug and Play), all PCs in you Intranet will discover this router automatically. So you do not have to do any configuration for your PC and can access the Internet through this router easily. UPnP allows automatic discovery and configuration of equipment attached to your LAN. UPnP is supported by Windows ME, XP, or later. It provides compatibility with networking equipment, software and peripherals of the over 400 vendors that cooperate in the Universal Plug and Play forum.

Parameter Description

Enable UPnP

Advertise Time (60 ~ 1800)

UPnP Table

The table displays the current UPnP Port Mapping information in system.

After you enable the UPnP feature, all client systems that support UPnP, like Windows XP can discover this router automatically and access the Internet through this router without any configuration.

When UPnP service is working, router will broadcast a message to LAN that the specific port number has been used in a period of time. The maximum timing is up to

1800 seconds.

Parameter Description

Remote Host

It shows the IP address of the remote Host.

External Port

It shows the external port number

Page 70

Internal Port, Internal Client

It shows the internal port number and client.

Protocol

Description

It shows the protocol. It describes this setting.

Page 71

3.8.2 DDNS

DDNS (Dynamic DNS) allows you to map the static domain name to a dynamic IP address. You

must get an account, password and your static domain name from the DDNS service providers. DDNS provides you on the Internet with a method to tie their domain name to a computer or server. DDNS allows your domain name to follow your IP address automatically by having your DNS records changed when your IP address changes.

Parameters Description

Enable / Disable

Host Name

DDNS Server

User Name

Password

DDNS Retry Time

Enable/Disable the DDNS function of this router Your static domain name that use DDNS. Select a DDNS service provider. The account that your DDNS service provider assigned to

you. The password you set for the DDNS service account

above. To set up the time schedule to refresh DDNS setting.

Page 72

3.9 Status

3.9.1 System Status

The section allows you to check XRT-401F system status and concurrent hardware information.

Parameter Description

INTERNET

GATEWAY

INFORMATION

This item shows XRT-401F’s current device settings, including the current

WAN IP Address, Subnet Mask,

Gateway, DNS and Connection Type.

This item displays XRT-401F’s current device settings, Including

IP Address, Subnet Mask, DHCP Server, NAT

and Firewall Status.

This item displays XRT-401F hardware device Settings, including

Connected Clients, Runtime Code

Version and MAC Address.

Page 73

3.9.2 System Log

The Logs record various types of activity on XRT-401F. This data is useful for troubleshooting, but enabling all logs will generate a large amount of data and adversely affect performance. Since only a limited amount of log data can be stored in XRT-401F, log data can also be e-mailed to your PC or sent to a Syslog Server. The Log displays events occurring within the router by time and date, and also views the description of the event. The user can use the to change the log page listed in the window. The user can click settings, click local PC.

Clear to clear the log events and click download to download the log file on your

First Page, Prev Page, Next Page and Last Page buttons

Setting to configure your log

Page 74

Appendix A

How to Manually find your PC’s IP and MAC address

1) In Window’s open the Command Prompt program

2) Type ipconfig /all and <enter>

• Your PC’s IP address is the one entitled IP address (192.168.0.7)

• The router’s IP address is the one entitled

• Your PC’s MAC Address is the one entitled

Default Gateway (192.168.0.1)

Physical Address (00-48-54-12-41-44)

Page 75

Appendix B

About Bridge Mode

This Router supports Bridge mode and the difference between Bridge mode and Router mode is as following table.

Features \ Mode Bridge Router Remark

Physical Ports

IP Subnet

Operating

Router Features Not support WAN

LAN Features

Management

Feature

WAN port comes to port 5 of the Router

One IP Subnet

The Router won’t route any more

Port Based VLAN

802.1q-based VLAN Only LAN local

management

WAN port

Two IP Subnets

The Router route toward the two IP Subnets

NAT

Firewall

Routing

DHCP Serve Port Based VLAN

LAN local management WAN remote management

Page 76

Glossary

Default Gateway (Router): Every non-router IP device needs to configure a default gateway’s IP

address. When the device sends out an IP packet, if the destination is not on the same network, the device has to send the packet to its default gateway, which will then send it out towards the destination.

DHCP: Dynamic Host Configuration Protocol. This protocol automatically gives every computer on

your home network an IP address.

DNS Server IP Address: DNS stands for Domain Name System, which allows Internet servers

to have a domain name (such as www.Broadbandrouter.com) and one or more IP addresses (such as 192.34.45.8). A DNS server keeps a database of Internet servers and their respective domain names and IP addresses, so that when a domain name is requested (as in typing "

Uwww.planet.com.tw"U into your Internet browser), the user is sent to the proper IP address. The

DNS server IP address used by the computers on your home network is the location of the DNS server your ISP has assigned to you.

DSL Modem: DSL stands for Digital Subscriber Line. A DSL modem uses your existing phone

lines to transmit data at high speeds.

Ethernet: A standard for computer networks. Ethernet networks are connected by special cables

and hubs, and move data around at up to 10/100 million bits per second (Mbps).

Idle Timeout: Idle Timeout is designed so that after there is no traffic to the Internet for a

preconfigured amount of time, the connection will automatically be disconnected.

IP Address and Network (Subnet) Mask: IP stands for Internet Protocol. An IP address

consists of a series of four numbers separated by periods that identifies a single, unique Internet computer host in an IP network. Example: 192.168.0.1. It consists of 2 portions: the IP network address, and the host identifier. The IP address is a 32-bit binary pattern, which can be represented as four cascaded decimal numbers separated by “ aaa.aaa.aaa.aaa”, where each “aaa” can be anything from 000 to 255, or as four cascaded binary numbers separated by “bbbbbbbb.bbbbbbbb.bbbbbbbb.bbbbbbbb”, where each “b” can either be 0 or 1. A network mask is also a 32-bit binary pattern, and consists of consecutive leading 1’s followed by consecutive trailing 0’s, such as 11111111.11111111.11111111.00000000. Therefore sometimes a network mask can also be described simply as “x” number of leading 1’s. When both are represented side by side in their binary forms, all bits in the IP address that correspond to 1’s in the network mask become part of the IP network address, and the remaining bits correspond to the host ID.

Page 77

For example, if the IP address for a device is, in its binary form,11011001.10110000.

10010000.00000111, and if its network mask is, 11111111.11111111.11110000.00000000 It means the device’s network address is 11011001.10110000.10010000.00000000, and its host ID is, 00000000.00000000.00000000.00000111. This is a convenient and efficient method for routers to route IP packets to their destination.

ISP Gateway Address: (see ISP for definition). The ISP Gateway Address is an IP address

forthe Internet router located at the ISP's office.

ISP: Internet Service Provider. An ISP is a business that provides connectivity to the Internet for

individuals and other businesses or organizations.

LAN: Local Area Network. A LAN is a group of computers and devices connected together in a

relatively small area (such as a house or an office). Your home network is considered a LAN.

MAC Address: MAC stands for Media Access Control. A MAC address is the hardware address

of a device connected to a network. The MAC address is a unique identifier for a device with an Ethernet interface. It is comprised of two parts: 3 bytes of data that corresponds to the Manufacturer ID (unique for each manufacturer), plus 3 bytes that are often used as the product’s serial number.

NAT: Network Address Translation. This process allows all of the computers on your home

network to use one IP address. Using XRT-401F’s NAT capability, you can access the Internet from any computer on your home network without having to purchase more IP addresses from your ISP.

Port: Network Clients (LAN PC) uses port numbers to distinguish one network

application/protocol over another. Below is a list of common applications and protocol/port

numbers:

Page 78

PPPoE: Point-to-Point Protocol over Ethernet. Point-to-Point Protocol is a secure data

transmission method originally created for dial-up connections; PPPoE is for Ethernet connections. PPPoE relies on two widely accepted standards, Ethernet and the Point-to-Point Protocol. It is a communications protocol for transmitting information over Ethernet between different manufacturers

Protocol: A protocol is a set of rules for interaction agreed upon between multiple parties so that

when they interface with each other based on such a protocol, the interpretation of their behavior is well defined and can be made objectively, without confusion or misunderstanding.

Router: A router is an intelligent network device that forwards packets between different

networks based on network layer address information such as IP addresses.

Subnet Mask: A subnet mask, which may be a part of the TCP/IP information provided by your

ISP, is a set of four numbers (e.g. 255.255.255.0) configured like an IP address. It is used to create IP address numbers used only within a particular network (as opposed to valid IP address numbers recognized by the Internet, which must be assigned by InterNIC).

TCP/IP, UDP: Transmission Control Protocol/Internet Protocol (TCP/IP) and Unreliable Datagram

Protocol (UDP). TCP/IP is the standard protocol for data transmission over the Internet. Both TCP and UDP are transport layer protocol. TCP performs proper error detection and error recovery, and thus is reliable. UDP on the other hand is not reliable. They both run on top of the IP (Internet Protocol), a network layer protocol.

WAN: Wide Area Network. A network that connects computers located in geographically

separate areas (e.g. different buildings, cities, countries). The Internet is a wide area network.

Web-based management Graphical User Interface (GUI): Many devices support a

graphicaluser interface that is based on the web browser. This means the user can use the familiar Netscape or Microsoft Internet Explorer to Control/configure or monitor the device being managed. .

Page 79

EC Declaration of Conformity

For the following equipment:

*Type of Product: Internet Broadband Router

*Model Number: XRT-401F

* Produced by: Manufacturer‘s Manufacturer‘s Address : 10F., No.96, Minquan Rd., Xindian Dist., New Taipei City 231,

is herewith confirmed to comply with the requirements set out in the Council Directive on the Approximation of the Laws of the Member States relating to Electromagnetic Compatibility Directive on (2004/108/EC). For the evaluation regarding the EMC, the following standards were applied:

Responsible for marking this declarati o n i f the:

Name : PLANET Technology Corp.

Taiwan (R.O.C.)

EMI EN 55022 (2006 + A1:2007, Class B) EN 61000-3-2 (2006) EN 61000-3-3 (1995 + A1: 2001 + A2: 2005)

EMS EN 55024 (1998 + A1:2001 + A2:2003) IEC 61000-4-2 (

2001)

IEC 61000-4-3 (2008) IEC 61000-4-4 (2004) IEC 61000-4-5 (2005) IEC 61000-4-6 (2008) IEC 61000-4-8 (2001) IEC 61000-4-11 (2004)

 Manufacturer  Authorized representative established within the EU

Authorized representative established within the EU (if applicable): Company Name: Planet Technology Corp. Company Address: 10F., No.96, Minquan Rd., Xindian Dist., New Taipei City 231, Taiwan

(R.O.C.) Person responsible for making this declaration Name, Surname Tom Shih Position / Title : Prod uct M an ager

Taiwan

15th Apr ., 2010

Place Date Legal Signature

PLANET TECHNOLOGY CORPORATION

e-mail: sales@planet.com.tw http://www.planet.com.tw

11F, No. 96, Min Chuan Road, Hsin Tien, Taipei, Taiwan, R.O.C. Tel:886-2-2219-9518 Fax:886-2-2219-9528