Asus SL6000 Manual

Solwise Ltd .
Set-up instructions for
Asus SL6000 VPN ADSL Router
www.solwiseforum.co.uk
The Solwise Forum is designed to be the first port-of-call for technical support and sales advice for the whole
Solwise product range.
Please check the forum for coverage on any technical problems you have. Many people have trodden your path
before you, and a quick check on the forum will reduce the pressure on our support staff.
Revision 0.03
September 24 2003

Chapter 1. Introduction Solwise Asus SL6000 ADSL Ethernet Router User’s Guide
2
Notification is hereby given that Solwise Ltd. reserves the right to modify, change, update or revise this
document from time to time as required without the prior obligation to notify any person, company or
organization. Further, Solwise makes no warranty or representation, either express or implied, with respect
to merchantability, or fitness of its products for a particular purpose.
Solwise Ltd.
13/15 Springfield Way
Anlaby
Hull HU10 6RJ
UK
Tel [phone] (local rate)
Fax [phone]
Tech Support Tel [phone]
SBV 1100
Email [e-mail]
Http www.solwise.co.uk
Copyright
All rights reserved. No part of this document may be reproduced in any form or by any means without
written permission from the product manufacturer.
Changes are periodically made to the information in this document. They will be incorporated in
subsequent editions. The product manufacturer may take improvement and/or changes in the product
described in this document at any time.
FCC compliance
This equipment complies with Part 68 of the FCC Rules. On this equipment is a label that contains, among
other information, the FCC registration number and Ringer Equivalence Number (REN) for this equipment.
You must, upon request, provide this information to your telephone company.
If your telephone equipment causes harm to the telephone network, the Telephone Company may
discontinue your service temporarily. If possible, they will notify in advance. But, if advance notice isn’t
practical, you will be notified as soon as possible. You will be informed of your right to file a complaint with
the FCC.
Your telephone company may make changes in its facilities, equipment, operations, or procedures that could
affect proper operation of your equipment. If they do, you will be notified in advance to give you an
opportunity to maintain uninterrupted telephone service. The FCC prohibits this equipment to be connected
to party lines or coin-telephone service.
In the event that this equipment should fail to operate properly, disconnect the equipment from the phone
line to determine if it is causing the problem. If the problem is with the equipment, discontinue use and
contact your dealer or vendor.

SL6000 User’s Guide
3
DOC compliance information
NOTICE: The Canadian Department of Communications label identifies certified equipment. This
certification means that the equipment meets certain telecommunications network protective, operational
and safety requirements. The Department does not guarantee the equipment will operate to the user’s
satisfaction.
Before installing this equipment, users ensure that it is permissible to be connected to the facilities of the
local Telecommunications Company. The equipment must also be installed using an acceptable method of
connection. The customer should be aware that compliance with the above conditions might not prevent
degradation of service in some situations.
Repairs to certified equipment should be made by an authorized Canadian maintenance facility designated
by the supplier. Any repairs or alterations made by the user to this equipment, or equipment malfunctions,
may give the telecommunications company cause to request the user to disconnect the equipment.
Users should ensure for their own protection that the electrical ground connections of the power utility,
telephone lines and internal metallic water pipe system, if present, are connected together. This precaution
may be particularly important in rural areas.
CAUTION: Users should not attempt to make such connections themselves, but should contact the
appropriate electric inspection authority, or electrician, as appropriate.
NOTICE: The Load Number (LN) assigned to each terminal device denotes the percentage of the total load
to be connected to a telephone loop which is used by the device, to prevent overloading. The termination on
a loop may consist of any combination of devices subject only to the requirement that the sum of the Load
Numbers of all the devices does not exceed 100.
European CTR 21 compliance
The equipment has been approved in accordance with Council Decision 98/482/EC for pan-European single
terminal connection to the public switched telephone network (PSTN). However, due to differences between
the individual PSTNs provided in different countries, the approval does not, of itself, give an unconditional
assurance of successful operation on every PSTN network termination point. In the event of problem, you
should contact your equipment supplier in the first instance.

Solwise Asus SL6000 ADSL Ethernet Router User’s Guide Chapter 1. Introduction
5
Table of Contents
1Introduction..........................................................8
1.1 Overview................................................................... 8
1.2 Specifications and Features ..................................... 8
1.3 What’s in the package? .......................................... 10
1.4 Front Panel ............................................................. 10
1.5 Rear Panel.............................................................. 11
2Connecting to your network and line.................12
3Setting up TCP/IP on your computer ................14
3.1 Installing TCP protocol on your PC ........................ 14
3.1.1 Introduction.................................................... 14
3.1.2 Configure the PC(TCP/IP settings) for
Window 98 and Windows ME................................. 14
3.1.3 Configure the PC (TCP/IP Settings) for
Windows 2000 ........................................................ 16
3.1.4 Configure the PC (TCP/IP settings) for
Windows XP ........................................................... 18
4PPPoA Router configuration (For the UK) ........20
4.1 Connecting to the setup screens ............................ 20
4.2 Running the Set-up Wizard .................................... 21
4.3 Enabling NAT.......................................................... 31
4.4 Enabling outbound access through the
firewall............................................................................ 34
4.4.1 Modifying the existing rules ........................... 35
4.4.2 Creating an Allow All rule .............................. 37
4.5 Configuring Port Forwarding................................... 39
5Configuring Firewall/NAT Settings ....................41
5.1 DoS (Denial of Service) Protection and
Stateful Packet Inspection ............................................. 41
5.2 Default ACL Rules .................................................. 41
5.3 Configuring Inbound ACL Rules ............................. 42
5.3.1 Options in Inbound ACL Configuration
Page 42
5.3.2 Add Inbound ACL .......................................... 44
5.3.3 Modify Inbound ACL Rules............................ 45
5.3.4 Delete Inbound ACL Rules............................ 45
5.3.5 Display Inbound ACL Rules .......................... 46

Chapter 1. Introduction Solwise Asus SL6000 ADSL Ethernet Router User’s Guide
6
5.4 Configuring Outbound ACL Rules .......................... 46
5.4.1 Options in Outbound ACL
Configuration Page................................................. 46
5.4.2 Add an Outbound ACL Rule.......................... 48
5.4.3 Modify Outbound ACL Rules......................... 49
5.4.4 Delete Outbound ACL Rules......................... 49
5.4.5 Display Outbound ACL Rules........................ 50
5.5 Configuring Service List.......................................... 50
5.5.1 Options in Service Configuration Page ......... 50
5.5.2 Add a Service ................................................ 51
5.5.3 Modify a Service ............................................ 51
5.5.4 Delete a Service ............................................ 51
5.5.5 View Configured Services ............................. 51
5.6 Firewall Statistics .................................................... 52
6Configuring VPN ...............................................53
6.1 Default Parameters................................................. 53
6.2 9.2 Establish VPN Connection Using
Automatic Keying........................................................... 55
6.2.1 VPN Tunnel Configuration Parameters
for Automatic Keying............................................... 56
6.2.2 Add a Rule for VPN Connection Using
Pre-shared Key....................................................... 58
6.2.3 Modify VPN Rules ......................................... 60
6.2.4 Delete VPN Rules.......................................... 60
6.2.5 Display VPN Rules ........................................ 60
6.3 Establish VPN Connection Using Manual
Keys............................................................................... 61
6.3.1 VPN Tunnel Configuration Parameters
– Manual Key.......................................................... 61
6.3.2 Add a Rule for VPN Connection Using
Manual Key............................................................. 62
6.3.3 Modify VPN Rules ......................................... 64
6.3.4 Delete VPN Rules.......................................... 64
6.3.5 Display VPN Rules ........................................ 64
6.4 VPN Statistics ......................................................... 65
7The Configuration Pages in more detail............67
7.1 LAN......................................................................... 67
7.1.1 Ethernet ......................................................... 67
7.1.2 DHCP ............................................................ 68

Solwise Asus SL6000 ADSL Ethernet Router User’s Guide Chapter 1. Introduction
7
7.2 WAN ....................................................................... 69
7.2.1 ADSL ............................................................. 69
7.2.2 Channel ......................................................... 70
7.3 Networking.............................................................. 74
7.3.1 DNS Server ................................................... 74
7.3.2 DNS Relay..................................................... 75
7.3.3 Routing .......................................................... 76
7.4 Firewall.................................................................... 77
7.4.1 Inbound ACL.................................................. 77
7.4.2 Outbound ACL............................................... 80
7.4.3 Group ACL..................................................... 83
7.4.4 Self Access.................................................... 86
7.4.5 Service........................................................... 87
7.4.6 DOS............................................................... 88
7.4.7 Policy List....................................................... 89
7.5 VPN ........................................................................ 98
7.5.1 Tunnel............................................................ 98
7.6 Log........................................................................ 102
7.7 System Management............................................ 103
7.7.1 Global Setting .............................................. 103
7.7.2 User Account ............................................... 104
7.7.3 Time Zone ................................................... 105
8Command Line Interface mode ......................106
9Appendix A IP Addresses, Network
Masks, and Subnets.....................................111
9.1 IP Addresses ........................................................ 111
9.1.1 Structure of an IP address........................... 111
9.1.2 Network classes .......................................... 112
9.2 Subnet masks....................................................... 112
10 Appendix B Binary Numbers...........................115
10.1 Binary Numbers................................................... 115
10.1.1 Bits and bytes ............................................ 115
11 Appendix C Glossary ......................................117
12 Appendix D Resetting to Defaults using
the Reset Button...........................................124

8
1 Introduction
1.1 Overview
The ASUS ADSL Router features multi-mode ADSL technology that
provides a downstream rate of up to 8M bps over existing copper
wire lines, which is more than 100 times faster than a traditional 56K
analogue modem. The SL6000 model can be connected to your PC
or LAN through the 10/100Base-T Ethernet interface and includes a
4-port 10/100 switching hub
It is designed to meet both the needs of single user, and multiple
users at small office and home office who want fast Internet access.
A wide variety of features and interoperability offer scalability and
flexibility for all the applications
1.2 Specifications and Features
ADSL Specifications
Line Coding Discrete Multi-Tone (DMT)
Standard Compliant
Full rate ADSL ANSI T1.413 Issue 2
ITU G.992.1 (G.dmt) Annex A, B
Splitterless G.992.2 (G.lite)
ITU G.994.1, G.996.1
Data Rate Maximum transmission rate: Downstream up to 8 Mbps, and Upstream
up to 800 kbps
Rate Adaption Data rate auto-negotiate in 32 kbps increments
ATM Specification
ATM Adaptation Layer Support AAL5, AAL2
VCs Support 8 Permanent Virtual Circuits (PVCs)
Service Class UBR, CBR, rt-VBR, nrt-VBR
OAM ITU-T I.610 OAM Principles & Functions F4, F5
Basic Protocol
RFC 1483
Multiple protocol encapsulation over AAL5:
Support Logical Link Control (LLC) encapsulation
Support VC-based multiplexing
Support Bridged and Routing
RFC 2364
PPP over AAL5:
Support LLC encapsulation
Support VC-based multiplexing
RFC2516 Support PPP over Ethernet Relay
Support PPP over Ethernet
RFC 1577 Classical IP & ARP over ATM
RFC 1661 PPP Link Control Protocol (LCP)
RFC 1332 Internet Protocol Control Protocol (IPCP)
RFC 1334 PPP Authentication Protocol (PAP)
RFC 1994 PPP Challenge Handshake Authentication Protocol (CHAP)

Solwise Asus SL6000 ADSL Ethernet Router User’s Guide Chapter 1. Introduction
9
Bridged Function (ADSL)
IEEE802.1d Transparent bridge with spanning tree support.
PPPoE relay
Security features
Firewall
Packet Filtering Method: SPI (Stateful Packet Inspection)
ACL (Access Control List)
DOS (Denial of Service)
Logging and Reporting
NAT (RFC1631)
Static NAT, Dynamic NAT
Port-level NAT: PAT (Port Address Translation)
Virtual Server
VPN
IKE (Internet Key Exchange) Security Association (SA) assignment
Manual Key
Pre-shared Key
Perfect Forward Secrecy: D-H 1/2(Diffie-Hellman group 1/2)
IKE Mode: Main/Quick/Aggressive
IPSec (IP security)
AH/ESP (Authentication Header/Encryption Security Payload)
IPSec encryption algorithm: DES (56-bit)/3DES (168-bit)
Authentication Algorithms: MD5, SHA-1
Performance
VPN: Up to 60Mbps
Firewall: 100Mbps
NAT: Up to 90Mbps
Routing
IP Routing Sub-Protocol: TCP, UDP, ICMP, ARP, RIPv1, and RIPv2
Static Routes: User definable (at least 8 static routes)
PPPoE RFC2516
LAN Service DHCP Server
DNS Proxy (Relay)
WAN Service DHCP Client
Other Features
Management
Configuration through menu driven console via RS232 (Optional)
Configuration through Web interface (GUI)
Configuration through Telnet sessions (Optional)
SNMPv1 and MIB II support, ILMI4.0
Implement Log & Trace function
Led indication on off flashing
Power Power On Power down N/A
WAN link ADSL line up ADSL line disconnect Handshaking
WAN tx/rx N/A No data transmission Data transmission
LAN tx/rx LAN enable LAN disable Data transmission
Interface Port
LAN 4 RJ-45 ports for 10/100 Base-T Ethernet connection
WAN One RJ11 port to connect to ADSL.
RS 232 One RS-232 port for console management
Dimensions
Height 34.6 mm (1.36 inches)
Width 202.95 mm (7.99 inches)

Chapter 1. Introduction Solwise Asus SL6000 ADSL Ethernet Router User’s Guide
10
Depth 182.5 mm (7.18 inches)
Weight 485g
Power Supply
Input Voltage AC 230V, 50Hz (For EURO Region)
Power Consumption 15VAC, 700mA
Operating Environment
Operating Temperature 0 C to 40 C (32F to 104F)
Non-Operating
Temperature -20 C to 65 C (-4F to 149F)
Humidity 5 % to 95 % (non-condensing)
Regulatory Agency
Compliance FCC, CE, UL
1.3 What’s in the package?

One ADSL Router

One 15VAC Adapter

One RJ-11 Telephone Cable

One 10Base-T Ethernet straight-through Cable

One Software CD containing the User’s Guide and configuration software
1.4 Front Panel
LED Indicators
The VPN ADSL Router-modem is equipped with LEDs on the front
panel as described in the table below (from left to right):
Label Color Function
POWER green On: Unit is powered
on Off: Unit is
powered off
ALARM green Used in factory for
testing purpose.