Asus Internet Security Router User manual

Internet Security
Router
User s Manual
Revision 1.1
Oct. 30, 2003

ii
Copyright Information
Nopartofthis manual,includingtheproductsand software describedinit, maybe reproduced,transmitted,
transcribed, storedina retrieval system,or translated into anylanguageinanyformorbyanymeans,except
documentation kept bythepurchaser for backup purposes,withouttheexpresswritten permission of
ASUSTeK COMPUTERINC. ( ASUS”).
ASUS PROVIDES THISMANUAL AS IS”WITHOUTWARRANTY OFANYKIND,EITHER EXPRESS OR
IMPLIED,INCLUDINGBUTNOTLIMITED TO THEIMPLIEDWARRANTIES ORCONDITIONSOF
MERCHANTABILITY OR FITNESS FORA PARTICULARPURPOSE.INNOEVENTSHALL ASUS,ITS
DIRECTORS, OFFICERS, EMPLOYEES OR AGENTS BELIABLEFOR ANYINDIRECT, SPECIAL,
INCIDENTAL, OR CONSEQUENTIALDAMAGES (INCLUDINGDAMAGESFOR LOSS OF PROFITS,LOSS
OF BUSINESS,LOSS OF USE ORDATA, INTERRUPTION OF BUSINESS AND THELIKE), EVEN IF
ASUS HAS BEEN ADVISED OFTHEPOSSIBILITY OFSUCHDAMAGESARISING FROM ANYDEFECT
OR ERRORINTHISMANUAL ORPRODUCT.
Productwarrantyor service will not be extended if: (1) theproduct is repaired,modified or altered,unlesssuch
repair, modificationof alteration is authorized inwriting byASUS;or(2)the serial number oftheproductis
defacedormissing.
Products and corporatenames appearinginthismanual mayor maynotbe registeredtrademarks or
copyrightsof theirrespective companies, andare used onlyforidentificationor explanation andtotheowners’
benefit, withoutintenttoinfringe.
SPECIFICATIONS ANDINFORMATIONCONTAINEDIN THIS MANUALAREFURNISHEDFOR
INFORMATIONALUSE ONLY, ANDARE SUBJECTTO CHANGE ATANY TIMEWITHOUTNOTICE, AND
SHOULDNOTBE CONSTRUED AS ACOMMITMENTBYASUS. ASUSASSUMES NORESPONSIBILITY
OR LIABILITYFOR ANYERRORS ORINACCURACIES THATMAYAPPEARIN THIS MANUAL,
INCLUDINGTHEPRODUCTSANDSOFTWARE DESCRIBEDINIT.
Copyright ©2003 ASUSTeK COMPUTERINC.AllRightsReserved.

iii
Table of Contents
1Introduction...............................................1
1.1 Features..................................................................................................................1
1.2 SystemRequirements............................................................................................1
1.3 Using thisDocument..............................................................................................1
1.3.1 Notational conventions................................................................................1
1.3.2 Typographical conventions.........................................................................1
1.3.3 Special messages........................................................................................1
2Getting toKnow theInternet Security
Router.......................................................3
2.1 PartsList.................................................................................................................3
2.2 Front Panel..............................................................................................................3
2.3 Rear Panel..............................................................................................................3
2.4 MajorFeatures........................................................................................................4
2.4.1 Firewall Features.........................................................................................4
2.4.1.1 AddressSharing andManagement...............................................4
2.4.1.1 ACL (AccessControlList)..............................................................5
2.4.1.2 Stateful PacketInspection..............................................................5
2.4.1.3 DefenseagainstDoSAttacks........................................................5
2.4.1.4 ApplicationCommand Filtering......................................................6
2.4.1.5 Application Level Gateway(ALG)..................................................6
2.4.1.6 URL Filtering....................................................................................6
2.4.1.7 Log andAlerts.................................................................................6
2.4.1.8 RemoteAccess...............................................................................7
2.4.2 VPN...............................................................................................................7
3Quick Start Guide.....................................9
3.1 Part1 —ConnectingtheHardware......................................................................9
3.1.1 Step1.ConnectanADSL oracable modem...........................................9
3.1.2 Step2.Connect computersor aLAN........................................................9
3.1.3 Step3. Attachthepower adapter...............................................................9

iv
3.1.4 Step 4. TurnontheInternetSecurityRouter,the ADSLor cablemodem
and powerup your computers..................................................................10
3.2 Part2 —ConfiguringYour Computers...............................................................11
3.2.1 Beforeyou begin........................................................................................11
3.2.2 Windows®XP PCs:...................................................................................11
3.2.3 Windows®2000 PCs:...............................................................................11
3.2.4 Windows®95, 98,and Me PCs...............................................................12
3.2.5 Windows®NT4.0workstations:...............................................................12
3.2.6 AssigningstaticIP addresses toyour PCs..............................................13
3.3 Part3 —QuickConfigurationoftheInternet SecurityRouter..........................14
3.3.1 Buttons Used in SetupWizard..................................................................14
3.3.2 SettingUp theInternetSecurityRouter....................................................14
3.3.3 TestingYourSetup....................................................................................20
3.3.4 DefaultRouterSettings.............................................................................20
4Getting Started with the Configuration
Manager.................................................21
4.1 Log into ConfigurationManager..........................................................................21
4.2 FunctionalLayout.................................................................................................22
4.2.1 Setup MenuNavigationTips.....................................................................22
4.2.2 CommonlyUsed Buttons andIcons.........................................................22
4.3 The HomePageof Configuration Manager.......................................................23
4.4 Overview of SystemConfiguration......................................................................23
5ConfiguringLAN Settings......................25
5.1 LANIP Address....................................................................................................25
5.1.1 LANIP ConfigurationParameters............................................................25
5.1.2 ConfiguringtheLAN IPAddress...............................................................25
5.2 DHCP (Dynamic HostControlProtocol).............................................................26
5.2.1 What isDHCP?..........................................................................................26
5.2.2 WhyuseDHCP?........................................................................................27
5.2.3 ConfiguringDHCPServer.........................................................................27
5.2.4 Viewing CurrentDHCPAddress Assignments........................................28
5.3 DNS.......................................................................................................................29
5.3.1 AboutDNS.................................................................................................29

v
5.3.2 AssigningDNSAddresses........................................................................29
5.3.3 ConfiguringDNS Relay.............................................................................29
5.4 Viewing LAN Statistics.........................................................................................30
6Configuring WAN Settings.....................31
6.1 WAN ConnectionMode.......................................................................................31
6.2 PPPoE...................................................................................................................31
6.2.1 WAN PPPoE ConfigurationParameters..................................................31
6.2.2 ConfiguringPPPoE forWAN....................................................................32
6.3 Dynamic IP............................................................................................................32
6.3.1 WAN DynamicIP Configuration Parameters...........................................32
6.3.2 ConfiguringDynamic IP for WAN.............................................................33
6.4 StaticIP.................................................................................................................34
6.4.1 WAN StaticIP ConfigurationParameters................................................34
6.4.2 ConfiguringStatic IP forWAN...................................................................34
6.5 Viewing WAN Statistics........................................................................................35
7ConfiguringRoutes................................37
7.1 Overview of IPRoutes.........................................................................................37
7.1.1 Do Ineedto defineIP routes?..................................................................37
7.2 Dynamic Routing usingRIP (RoutingInformationProtocol).............................38
7.2.1 Enabling/DisablingRIP..............................................................................38
7.3 StaticRouting........................................................................................................38
7.3.1 StaticRouteConfigurationParameters....................................................38
7.3.2 AddingStaticRoutes.................................................................................38
7.3.3 Deleting StaticRoutes...............................................................................38
7.3.4 Viewing theStaticRouting Table..............................................................39
8ConfiguringDDNS..................................41
8.1 DDNS Configuration Parameters........................................................................42
8.2 Access DDNSConfiguration Page.....................................................................43
8.3 ConfiguringRFC-2136 DDNSClient..................................................................43
8.4 ConfiguringHTTP DDNS Client..........................................................................44

vi
9ConfiguringFirewall/NATSettings.........45
9.1 Firewall Overview.................................................................................................45
9.1.1 Stateful PacketInspection.........................................................................45
9.1.2 DoS (Denialof Service)Protection...........................................................45
9.1.3 Firewalland AccessControlList (ACL)....................................................45
9.1.3.1 PriorityOrderof ACL Rule............................................................45
9.1.3.2 TrackingConnectionState...........................................................46
9.1.4 Default ACLRules.....................................................................................46
9.2 NATOverview.......................................................................................................46
9.2.1 Static(OnetoOne)NAT...........................................................................46
9.2.2 Dynamic NAT.............................................................................................47
9.2.3 NAPT(NetworkAddress andPortTranslation) orPAT(Port Address
Translation).................................................................................................48
9.2.4 ReverseStatic NAT...................................................................................49
9.2.5 ReverseNAPT/ VirtualServer.................................................................49
9.3 ConfiguringInboundACLRules..........................................................................49
9.3.1 InboundACL RuleConfigurationParameters.........................................49
9.3.2 Access InboundACL RuleConfigurationPage –(Firewall èInbound
ACL)............................................................................................................52
9.3.3 AddInbound ACLRules............................................................................52
9.3.4 ModifyInboundACL Rules.......................................................................53
9.3.5 DeleteInboundACLRules.......................................................................53
9.3.6 DisplayInboundACL Rules......................................................................53
9.4 ConfiguringOutbound ACLRules.......................................................................53
9.4.1 OutboundACL RuleConfiguration Parameters......................................54
9.4.2 Access OutboundACL RuleConfiguration Page –(Firewall è
Outbound ACL)..........................................................................................56
9.4.3 Addan Outbound ACLRule.....................................................................57
9.4.4 ModifyOutboundACL Rules....................................................................57
9.4.5 DeleteOutbound ACLRules....................................................................58
9.4.6 DisplayOutboundACL Rules...................................................................58
9.5 ConfiguringURL Filters........................................................................................58
9.5.1 URL FilterConfigurationParameters.......................................................58
9.5.2 Access URLFilter ConfigurationPage –(Firewall èURL Filter)..........58
9.5.3 Addan URL FilterRule..............................................................................59
9.5.4 Modifyan URL FilterRule.........................................................................59

vii
9.5.5 Delete an URLFilter Rule.........................................................................59
9.5.6 View ConfiguredURL FilterRules............................................................59
9.5.7 URL FilterRuleExample...........................................................................59
9.6 ConfiguringAdvanced Firewall Features –(Firewall èAdvanced).................60
9.6.1 ConfiguringSelf AccessRules.................................................................60
9.6.1.1 Self AccessConfigurationParameters........................................61
9.6.1.2 Access SelfAccessRuleConfigurationPage –(Firewall è
Advanced èSelf Access)............................................................61
9.6.1.3 Adda Self Access Rule................................................................61
9.6.1.4 Modifya SelfAccessRule............................................................62
9.6.1.5 Deletea Self Access Rule............................................................62
9.6.1.6 View ConfiguredSelf Access Rules............................................62
9.6.2 ConfiguringServiceList.............................................................................62
9.6.2.1 Service ListConfiguration Parameters........................................63
9.6.2.2 Access Service ListConfiguration Page –(Firewall èAdvanced
èService).....................................................................................63
9.6.2.3 Adda Service................................................................................63
9.6.2.4 Modifya Service............................................................................64
9.6.2.5 Deletea Service............................................................................64
9.6.2.6 View ConfiguredServices............................................................64
9.6.3 ConfiguringDoSSettings..........................................................................64
9.6.3.1 DoS Protection ConfigurationParameters..................................64
9.6.3.2 Access DoS ConfigurationPage –(Firewall èAdvanced è
DoS)...............................................................................................66
9.6.3.3 ConfiguringDoSSettings.............................................................66
9.7 FirewallPolicyList –(Firewall èPolicyList).....................................................66
9.7.1 ConfiguringApplication Filter....................................................................67
9.7.1.1 ApplicationFilterConfiguration Parameters................................67
9.7.1.2 Access ApplicationFilterConfigurationPage –(Firewall è
PolicyList èApplicationFilter)....................................................68
9.7.1.3 Addan ApplicationFilter...............................................................69
9.7.1.3.1 FTPExample:AddaFTPFilterRuleto BlockFTPDELETE
Command......................................................................................69
9.7.1.3.2 HTTP Example: AddaHTTPFilter Rule to BlockJAVAApplets
and JavaArchives.........................................................................71
9.7.1.4 Modifyan Application Filter..........................................................72
9.7.1.5 DeleteanApplication Filter...........................................................73
9.7.2 ConfiguringIPPool....................................................................................73
9.7.2.1 IP Pool ConfigurationParameters...............................................73

viii
9.7.2.2 Access IPPool ConfigurationPage –(Firewall èPolicyList è
IP Pool)..........................................................................................74
9.7.2.3 Addan IP Pool..............................................................................74
9.7.2.4 Modifyan IP Pool..........................................................................74
9.7.2.5 DeleteanIPPool..........................................................................75
9.7.2.6 IP Pool Example............................................................................75
9.7.3 ConfiguringNATPool................................................................................76
9.7.3.1 NATPool ConfigurationParameters...........................................76
9.7.3.2 Access NATPool Configuration Page –(Firewall èPolicyList
èNATPool).................................................................................77
9.7.3.3 AddaNATPool.............................................................................78
9.7.3.4 Modifya NATPool........................................................................78
9.7.3.5 Deletea NATPool........................................................................78
9.7.3.6 NATPool Example........................................................................78
9.7.4 Configuring TimeRange...........................................................................80
9.7.4.1 Time RangeConfigurationParameters.......................................80
9.7.4.2 Access TimeRange Configuration Page –(Firewall èPolicy
List èTimeRange)......................................................................81
9.7.4.3 AddaTime Range........................................................................81
9.7.4.4 Modifya TimeRange....................................................................81
9.7.4.5 Deletea Time Range....................................................................82
9.7.4.6 Deletea Scheduleina Time Range............................................82
9.7.4.7 Time Range Example...................................................................82
9.8 FirewallStatistics –Firewall èStatistics...........................................................83
10 ConfiguringVPN....................................85
10.1 Default Parameters..............................................................................................85
10.2 VPNTunnelConfiguration Parameters..............................................................87
10.3 Establish VPN Connection Using AutomaticKeying.........................................90
10.3.1 AddaRule forVPNConnectionUsing Pre-sharedKey.........................91
10.3.2 ModifyVPN Rules......................................................................................92
10.3.3 DeleteVPNRules......................................................................................92
10.3.4 DisplayVPNRules....................................................................................92
10.4 Establish VPN Connection Using Manual Keys.................................................93
10.4.1 AddaRule forVPNConnectionUsing Manual Key...............................93
10.4.2 ModifyVPN Rules......................................................................................94
10.4.3 DeleteVPNRules......................................................................................94

ix
10.4.4 DisplayVPNRules....................................................................................94
10.5 VPN Statistics.......................................................................................................95
10.6 VPNConnectionExamples.................................................................................96
10.6.1 Intranet Scenario –firewall + VPN and noNATforVPN traffic..............96
10.6.1.1 ConfigureRules onInternet SecurityRouter1 (ISR1)...............97
10.6.1.2 ConfigureRules onInternet SecurityRouter2 (ISR2)...............98
10.6.1.3 EstablishTunnel and Verify........................................................100
10.6.2 ExtranetScenario –firewall+ static NAT+VPN forVPN traffic..........100
10.6.2.1 SetuptheInternetSecurityRouters...........................................101
10.6.2.2 Configure VPNRulesonISR1...................................................102
10.6.2.3 Configure VPNRulesonISR2...................................................104
10.6.2.4 EstablishTunnel and Verify........................................................107
11 ConfiguringRemoteAccess................109
11.1 RemoteAccess..................................................................................................109
11.2 Manage User Groups andUsers......................................................................109
11.2.1 UserGroup ConfigurationParameters...................................................109
11.2.2 Access UserGroup Configuration Page –(Remote Access èUser
Group).......................................................................................................110
11.2.3 AddaUserGroup and/or aUser............................................................110
11.2.4 Modifya UserGrouporaUser...............................................................111
11.2.5 Deletea User Groupor a User...............................................................111
11.2.6 UserGroup andUsersConfigurationExample.....................................112
11.3 ConfigureGroup ACLRules..............................................................................112
11.3.1 Group ACLSpecific Configuration Parameters.....................................112
11.3.2 Access Group ACLConfiguration Page –(Remote Access èGroup
ACL)..........................................................................................................113
11.3.3 Add/Modify/Delete Group ACL Rules.....................................................113
11.4 RemoteUser LoginProcess.............................................................................113
11.5 ConfigureFirewall forRemoteAccess.............................................................115
11.6 VirtualIP Address Configuration forRemoteAccess VPN.............................116
11.6.1 Access VPN Virtual IP ConfigurationPage –(RemoteAccess èVPN
VirtualIP)..................................................................................................116
11.6.2 Assign VPN Virtual IPAddress for Remote AccessUsers...................116
11.6.3 Change VirtualIPAssignmentsfor Remote AccessUsers..................117
11.6.4 DeleteVirtualIPAddressforRemote AccessUsers............................117
11.7 Configure VPNfor Remote Access..................................................................118

x
11.7.1 MainModeRemoteAccess....................................................................118
11.7.2 Aggressive Mode Remote Access.........................................................120
12 System Management...........................123
12.1 Configure SystemServices...............................................................................123
12.2 ChangetheLogin Password.............................................................................124
12.3 ModifySystemInformation................................................................................124
12.4 SetupDateand Time.........................................................................................125
12.4.1 View the SystemDateand Time............................................................126
12.5 SystemConfiguration Management.................................................................126
12.5.1 Reset SystemConfiguration...................................................................126
12.5.2 Backup SystemConfiguration................................................................127
12.5.3 Restore SystemConfiguration................................................................127
12.6 Upgrade Firmware..............................................................................................128
12.7 ResettheInternet SecurityRouter....................................................................129
12.8 LogoutConfiguration Manager..........................................................................130
13 ALG Configuration................................131
14 IP Addresses, Network Masks, and
Subnets................................................135
14.1 IP Addresses......................................................................................................135
14.1.1 Structureof anIPaddress.......................................................................135
14.2 Networkclasses.................................................................................................135
14.3 Subnetmasks.....................................................................................................136
15 Troubleshooting....................................139
15.1 Diagnosing ProblemusingIPUtilities...............................................................140
15.1.1 ping...........................................................................................................140
15.1.2 nslookup...................................................................................................141
16 Glossary...............................................143