AirLive RS-1200 User manual

RS-1200
User’sManual
Dual WAN Security Gateway

2
Contents
System
Chapter 1 Administration …………………………………………….
5
Admin ……………………………………………………...
7
PermittedIPs …………………………………………….. 9
Logout ………………………………………………….…. 10
SoftwareUpdate ………………………………………….
11
Chapter 2 Configure …………………………………………………..
12
Setting ………………………………………………….…. 17
Date/Time ………………………………………………….22
Multiple Subnet … ……………………………...… … … …
23
RouteTable ………………………………………………...26
DHCP
……………………………………………………….30
DDNS ……………………………………………...… … … .. 32
HostTable ……………………………………………….…
34
Language ……………………………………………..……...
35
Interface
Chapter 3 Interface
…………………………………………………...
36
LAN ………………………………….……………………. 41
WAN ………………………………….…………………… 42
DMZ …………………………….………………………… 50

3
Policy Object
Chapter 4 Address
…………………………………………………….
52
Example ………………………………….…………………
54
Chapter 5 Service
………………………………………………….….62
Custom ………………………………….………………… 65
Group … ……………………………….………………….. 69
Chapter 6 Schedule …………………………………………………. 72
Chapter 7 QoS ………………………………………………….……. 75
Example ………………………………….………………. 78
Chapter 8 Authentication ……………………………………………
81
Example ………………………………….………………. 86
Chapter 9 ContentFiltering…………………………………………
90
URL ………………………………….…………………… 94
Script ……………………………….……………………. 97
P2P ………………………….…………………………… 99
IM …………………………….…………………………… 101
Download …………………………….…………………... 103
Chapter 10 VirtualServer………………………………………………...
105
Example ……………………………….………………….. 109
Chapter 11 VPN ………………………………………………………. 124
Example…………………………………………………….. 132
Policy
Chapter 12 Policy……………………………………………….……….. 156
Example ………………………………….………………. 162

4
Anti-Attack
Chapter13 AlertSetting ……………………………………………….180
InternalAlert ……………………………………………… 185
Chapter14 Atack Alarm … … … ……………………………………….189
InternalAlarm ……………………………………………..
191
ExternalAlarm………………………………………………
192
Monitor
Chapter15 LOG ……………………………………………….……….. 194
TrafficLog ……………………….…………………………
196
EventLog ……………………….………………………… 201
Connection Log … …………………….………………….
204
Log Backup … … … ……………….……………………… 207
Chapter16 Accounting
Report …………………….…………………. 210
Outbound ……………………….………………………… 212
Inbound ………………………….………………………… 217
Chapter17 Statistics …………………………………………….……..
223
WAN ……………………….………………………………. 225
Policy ……………………….………………………………
227
Chapter18 Status …………………………………………….…………
229
Interface ……………………….…………………………..
230
Authentication ……………………….……………………
232
ARPTable ……………………….………………………...233
DHCPClients ……………………….……………………. 234

5
Chapter 1 Administration
“System”is the managing of settings such as the privileges
of packets that pass through the AirLive RS-1200 and monitoring
controls.
The System Administrators can manage, monitor, and configure
AirLive RS-1200 settings. But all configurations are “read-only”
for all users other than the System Administrator; those users
are not able to change any setting of the AirLive RS-1200.

6
Define the required fields of Administrator
Administrator Name:
The username of Administrators and Sub Administrator for the RS-1200. The
admin user name cannot be removed; and the sub-admin user can be removed or
configure.
The default Account: admin; Password: admin
Privilege:
The privileges of Administrators (Admin or Sub Admin). The username of the main
Administrator is Administrator with reading / writing privilege. Administrator also
can change the system setting, log system status, and to increase or delete
sub-administrator. Sub-Admin may be created by the Admin by clicking New Sub
Admin. Sub Admin have only read and monitor privilege and cannot change any
system setting value.
Configure:
Click Modify to change the “Sub-Administrator’s” password or click Remove to
delete a “Sub Administrator.”

7
Adding a new Sub Administrator
STEP 1﹒In the Admin WebUI, click the New Sub Admin button to create a
new Sub Administrator.
STEP 2﹒In the Add New Sub Administrator WebUI (Figure 1-1) and enter the
following setting:
Sub Admin Name: sub_admin
Password: 12345
Confirm Password: 12345
STEP 3﹒Click OK to add the user or click Cancel to cancel it.
Figure1-1 Add New Sub Admin

8
Modify the Administrator’s Password
STEP 1﹒In the Admin WebUI, locate the Administrator name you want to edit, and
click on Modify in the Configure field.
STEP 2﹒The Modify Administrator Password WebUI will appear. Enter the
following information:
Password: admin
New Password: 52364
Confirm Password: 52364 (Figure1-2)
STEP 3﹒Click OK to confirm password change.
Figure1-2 Modify Admin Password

9
Add Permitted IPs
STEP 1﹒Add the following setting in Permitted IPs of Administration: (Figure1-3)
Name: Enter master
IP Address: Enter 163.173.56.11
Netmask: Enter 255.255.255.255
Service: Select Ping and HTTP
Click OK
Complete add new permitted IPs (Figure1-4)
Figure1-3 Setting Permitted IPs WebUI
Figure1-4 Complete Add New Permitted IPs
To make Permitted IPs be effective, it must cancel the Ping and WebUI selection
in the WebUI of RS-1200 that Administrator enter. (LAN, WAN, or DMZ Interface)
Before canceling the WebUI selection of Interface, must set up the Permitted IPs first,
otherwise, it would cause the situation of cannot enter WebUI by appointed Interface.

10
Logout
STEP 1﹒Click Logout in System to protect the system while Administrator are away.
(Figure1-5)
Figure1-5 Confirm Logout WebUI
STEP 2﹒Click OK and the logout message will appear in WebUI. (Figure1-6)
Figure1-6 Logout WebUI Message

11
Software Update
STEP 1﹒Select Software Update in SystemÆAdministraion,
and follow the steps below:
To obtain the version number from Version Number and obtain the latest
version from Internet. And save the latest version in the hardware of the
PC, which manage the RS-1200
Click Browse and choose the latest software version file.
Click OK and the system will update automatically. (Figure1-7)
Figure1-7 Software Update
It takes 3 minutes to update software. The system will reboot after update. During
the updating time, please don’t turn off the PC or leave the WebUI. It may cause some
unexpected mistakes. (Strong suggests updating the software from LAN to avoid
unexpected mistakes.)

12
Chapter 2 Configure
The Configure is according to the basic setting of the AirLive RS-1200.
In this chapter the definition is Setting, Date/Time, Multiple Subnet, Route
Table, DHCP, Dynamic DNS, Hosts Table, and Language settings.
Define the required fields of Settings
AirLive RS-1200 Configuration:
The Administrator can import or export the system settings. Click OK to import the
file into the RS-1200 or click Cancel to cancel importing. You also can revive to
default value here.
Email Settings:
Select Enable E-mail Alert Notification under E-mail Settings. This function will
enable the RS-1200 to send e-mail alerts to the System Administrator when the
network is being attacked by hackers or when emergency conditions occur. (It can
be set from Settings-Hacker Alert in System to detect Hacker Attacks)
Web Management (WAN Interface):
The System Manager can change the port number used by HTTP port
anytime. (Remote WebUI management)
After HTTP port has changed, if the administrator want to enter WebUI from
WAN, will have to change the port number of browser.
(For example: http://61.62.108.172:8080)

13
MTU Setting:
It provides the Administrator to modify the networking package length anytime. Its
default value is 1500 Bytes.
Link Speed / Duplex Mode:
By this function can set the transmission speed and mode of WAN Port when
connecting other device.
Administration Packet Logging:
After enable this function; the RS-1200 will record packet which source IP or
destination address is RS-1200. And record in Traffic Log for System
Manager to inquire about.

14
Define the required fields of Time Settings
Synchronize Time/Date:
Synchronizing the RS-1200 with the System Clock. The administrator can
configure the RS-1200’s date and time by either syncing to an Internet Network
Time Server (NTP) or by syncing to your computer’s clock.
GMT:
International Standard Time (Greenwich Mean Time)
Define the required fields of Multiple Subnet
Forwarding Mode:
To display the mode that Multiple Subnet use. (NAT mode or Routing Mode)
WAN Interface Address:
The IP address that Multiple Subnet corresponds to WAN.
LAN Interface Address/Subnet Netmask:
The Multiple Subnet range

15
NAT Mode:
It allows Internal Network to set multiple subnet address and connect with the
Internet through different WAN IP Addresses. For example：The lease line of a
company applies several real IPAddresses 168.85.88.0/24, and the company is
divided into R&D department, service, sales department, procurement department,
accounting department, the company can distinguish each department by different
subnet for the purpose of managing conveniently. The settings are as the
following：
1. R&D department subnet：192.168.1.1/24(LAN) ÅÆ 168.85.88.253(WAN)
2. Service department subnet：192.168.2.1/24(LAN) ÅÆ 168.85.88.252(WAN)
3. Sales department subnet：192.168.3.1/24(LAN) ÅÆ 168.85.88.251(WAN)
4. Procurement department subnet
192.168.4.1/24(LAN) ÅÆ 168.85.88.250(WAN)
5. Accounting department subnet
192.168.5.1/24(LAN) ÅÆ 168.85.88.249(WAN)
The first department (R&D department) had set while setting interface IP; the other four
ones have to be added in Multiple Subnet. After completing the settings, each
department uses the different WAN IPAddress to connect to the Internet. The settings
of each department are as following:
Service Sales Procurement Accounting
IPAddress 192.168.2.2~254 192.168.3.2~254 192.168.4.2~254 192.168.5.2~254
Subnet Netmask 255.255.255.0 255.255.255.0 255.255.255.0 255.255.255.0
Gateway 192.168.2.1 192.168.3.1 192.168.4.1 192.168.5.1
Routing Mode:
It is the same as NAT mode approximately but does not have to correspond to the
real WAN IP address, which let internal PC to access to Internet by its own IP.
(External user also can use the IP to connect with the Internet)

16
Define the required fields of DHCP
Subnet:
The domain name of LAN
NetMask:
The LAN Netmask
Gateway:
The default Gateway IP address of LAN
Broadcast IP:
The Broadcast IP of LAN
Define the required fields of DDNS
Domain Name:
The domain name that provided by DDNS
WAN IP Address:
The WAN IP Address, which the domain name corresponds to.
Define the required fields of Host Table
Domain Name:
It can be set by System Manager. To let the internal user to access to the
information that provided by the host by this domain name
Virtual IP Address:
The virtual IP address respective to Host Table. It must be LAN or DMZ IP
address.

17
System Settings- Exporting
STEP 1﹒In System Setting WebUI, click on button next to
Export System Settings to Client.
STEP 2﹒When the File Download pop-up window appears, choose the destination
place where to save the exported file and click on Save. The setting value of
RS-1200 will copy to the appointed site instantly. (Figure2-1)
Figure2-1 Select the Destination Place to Save the Exported File

18
System Settings- Importing
STEP 1﹒In System Setting WebUI, click on the Browse button next to Import
System Settings from Client. When the Choose File pop-up window
appears, select the file to which contains the saved RS-1200 Settings,
then click OK. (Figure2-2)
STEP 2﹒Click OK to import the file into the RS-1200 (Figure2-3)
Figure 2-2 Enter the File Name and Destination of the Imported File
Figure 2-3 Upload the Setting File WebUI

19
Restoring Factory Default Settings
STEP 1﹒Select Reset Factory Settings in RS-1200 Configuration WebUI
STEP 2﹒Click OK at the bottom-right of the page to restore the factory settings.
(Figure2-4)
Figure2-4 Reset Factory Settings

20
Enabling E-mail Alert Notification
STEP 1﹒Select Enable E-mail Alert Notification under E-Mail Settings.
STEP 2﹒Device Name: Enter the Device Name or use the default value.
STEP 3﹒Sender Address: Enter the Sender Address. (Required by some ISPs.)
STEP 4﹒SMTP Server IP: Enter SMTP server’s IP address.
STEP 5﹒E-Mail Address 1: Enter the e-mail address of the first user to be notified.
STEP 6﹒E-Mail Address 2: Enter the e-mail address of the second user to be
notified. (Optional)
STEP 7﹒Click OK on the bottom-right of the screen to enable E-mail Alert Notification.
(Figure2-5)
Figure2-5 Enable E-mail Alert Notification
Click on Mail Test to test if E-mail Address 1 and E-mail Address 2 can receive the
Alert Notification correctly.