Atel Electronics RP-SR634 User manual

#05135 RP-SR634
USER’S MANUAL

CE Mark Warning
This equipment complies with the requirements relating to electromagnetic compatibility,
EN55022 class B for ITE, the essential protection requirement of Council Directive
89/336/EEC on the approximation of the laws of the Member States relating to
electromagnetic compatibility.
FCC Certifications
This Equipment has been tested and found to comply with the limits for a Class B digital
device, pursuant to Part 15 of the FCC rules. These limits are designed to provide
reasonable protection against harmful interference in a residential installation. This
equipment generates, uses and can radiate radio frequency energy and, if not installed and
used in accordance with the instructions, may cause harmful interference to radio
communications. However, there is no guarantee that interference will not occur in a
particular installation. If this equipment does cause harmful interference to radio or television
reception, which can be determined by turning the equipment off and on, the user is
encouraged to try to correct the interference by one or more of the following measures:
- Reorient or relocate the receiving antenna.
- Increase the separation between the equipment and receiver.
- Connect the equipment into an outlet on a circuit different from that to which the receiver is
connected.
- Consult the dealer or an experienced radio/TV technician for help.
This device complies with Part 15 of the FCC Rules. Operation is subject to the following two
conditions: (1) this device may not cause harmful interference, and (2) this device must
accept any interference received; including interference that may cause undesired operation.
Company has an on-going policy of upgrading its products and it may be possible that
information in this document is not up-to-date. Please check with your local distributors
for the latest information. No part of this document can be copied or reproduced in any
form without written consent from the company.
Trademarks:
All trade names and trademarks are the properties of their respective companies.
Copyright © 2003,All Rights Reserved.
Document Version: 2.1

Table of Contents
WELCOME TO MULTI HOMING ................................................1
SETTING UPTHE HARDWARE....................................................2
NETWORKING WITH THE WIZARD .........................................3
UNDERSTANDINGTHE USER INTERFACE .............................4
BASIC CONFIGURATION..............................................................6
CONNECTION TYPE SET-UP ...............................................................8
CONFIGURING A STATIC IPADDRESS..................................................8
CONFIGURING A (DYNAMIC) DHCPACCOUNT .................................9
CONFIGURING MULTI HOMING TO USE AADSL PPPOE ACCOUNT..10
CONFIGURING MULTI HOMING TO USE A PPTP CONNECTION..............12
NAT CONFIGURATION.......................................................................12
DOMAIN NAME SERVICE (DNS)......................................................13
CONFIGURING THE DNS SERVICE ...................................................13
LOAD BALANCE..............................................................................14
ADVANCED NETWORKING TOOLS ...................................................15
MAC CLONING...............................................................................15
CLONING A MAC ADDRESS.............................................................15
DYNAMIC DNS...............................................................................16
DYNAMIC DNS CONFIGURATION....................................................17
LAN (LOCALAREA NETWORK) INTERFACE ...................................18
ROUTER SERVICES ..........................................................................20
SECURITY.......................................................................................21
DISABLING ICMP REPLIES..............................................................22
BLOCKING INDIVIDUAL (OR SERVICE PORT) OF IPADDRESSES ON THE
INTERNET........................................................................................23
MODIFYING AN IPADDRESS OR REMOVING AN POLICY FROM THE
INCOMING POLICY LIST...................................................................24
MAPPING INTERNAL PORTS TO THE OUTSIDE ..................................26

VIRTUAL SERVER ............................................................................27
PORT TRIGGERING...........................................................................28
URL BLOCKING..............................................................................30
INTRANET ......................................................................................31
ACTIVATING/DEACTIVATING THE DHCP SERVICE ...........................33
IPADDRESS POOLASSIGNMENT .....................................................33
AUTOMATIC MAC-IPASSOCIATION ................................................36
ADMINISTRATION .......................................................................37
CHANGING THE VALID USER AND PASSWORD...................................38
CONTROLLING WEB ACCESS CONFIGURATION BY IPADDRESS .......39
SELETE THE LANGUAGE MODE OF GUI............................................40
DISPLAY SYSTEM STATUS.................................................................42
SETUP SYSTEM TIME........................................................................42
RESTARTING YOUR SYSTEM.............................................................42
SET FACTORY DEFAULT ....................................................................43
UPDATE YOUR SYSTEM SOFTWARE...................................................43
PRESERVING YOUR SYSTEM CONFIGURATION ..................................43
LOADING YOUR SYSTEM CONFIGURATION........................................43
VIEW SYSTEM LOG...........................................................................44
APPENDIX A
SPECIFICATIONS & ACCESSORIES ........................................45
LEDS DEFINITION...........................................................................46
SYSTEM LED..............................................................................46
PORT LED...................................................................................46
PORTS’LED SUMMARY TABLE........................................................47
FACTORY SETTING BUTTON.............................................................47
KEY FEATURE .................................................................................48
APPENDIX B
SPECIFYING INTERNETADDRESSES..................................49
APPENDIX C
COMMON PORT NUMBERS.......................................................51

Welcome to
Multi Homing
The safest and most convenient way to
the Information Superhighway
W
elcome to Multi Homing! This powerful network tool will enable
you to securely connect multiple computers to the Internet through
a single DSL/Cable modem or T1/E1/ISDN CSU/DSU.
Through this simple comprehensive appliance, you can connect multiple
computers in your home or office using standard Ethernet networking.
Its highly configurable built-in network firewall provides you with the power to
choose specific services allowed through your network, while keeping all
malicious Internet attackers out. Multi Homing also provides super advanced
features like sophisticated bandwidth control.
The simple Web-based interface will help you configure your Multi Homing
with true point-and-click ease.
This document will provide you with the guidance needed to tailor-fit Multi
Homing to your own networking needs.
Thank you for choosing Multi Homing to be part of your networking solution.
1
Chapter
1

Setting up the
Hardware
Network cabling made easy.
Multi Homing is a turnkey solution to connect your home or office to
the Internet through a high speed or 'always on' connection. The
following easy steps will get you hooked up and ready to go onto
the Internet.
1. Behind the Multi Homing unit, locate 6 Ethernet network ports (RJ-45).
These look like standard phone jacks, but wider.
2. Connect the wide area network (WAN) uplink port to the equipment
provided by your Internet service provider (ISP) (e.g. Cable/DSL modem
or T1/E1/ISDN CSU/DSU)
3. Connect the local area network (LAN) port to your office network hub or
switch
4. Set up a computer on your LAN1to obtain a dynamic IP address (please
refer to your operating system manual or reference guide for details)
5. Obtain an IP address from Multi Homing
6. Start up a Internet browser on your configuration computer and point it to
http://192.168.1.1. You should see the graphical user interface (GUI)
screen.
Congratulations! You have completed the hardware configuration requirements
for Multi Homing. Incidentally, you can now add to your title "Network
Administrator"
1This computer will be referred to as the "configuration computer" or "Administrator computer" in other parts of this document
2
Chapter
2

Networking with
the Wizard
Using the Multi Homing Networking
Wizard is the fastest way to get started!
Multi Homing comes with a web-based wizard that breezes you
through configuration. The wizard presents you with each necessary
configuration step and each possible option. Upon completion of a
wizard-based set up, Multi Homing will be ready for use. When set to factory
defaults, the wizard starts up automatically -- It can also be invoked by clicking
on the Configuration Wizard button on the home tab. At the end of the initial
configuration, the appliance will ask the user for a username and password. This
is a standard authentication mechanism used to ensure that subsequent
configuration changes are done by the proper individuals. Do not give the
username/password to people who are not authorized to change your network
configuration.
3
Chapter
3

Understanding
the User Interface
Navigation Rules
Multi Homing has a web-based graphical user interface (GUI) that can
be accessed using a standard HTML (HTTP v1.0) compliant
browser. Once the LAN is properly connected a network
administrator can connect to it through the URL http://192.168.1.1
The GUI has two main navigational components: Tabs and Menus.
Each Tab represents a major group of functions that a user can configure and
are located on the top part of the screen.
The Home tab presents version information as well as a brief feature list. The
Networking tab includes all the essential configuration items required to get a
LAN up and running.
The Security tab provides configuration items that control firewall behavior.
By default, Multi Homing comes configured to lock out unsolicited network
connections. To allow specific services to be allowed through Multi Homing,
some modifications under this tab is required.
4
Chapter
4
Menu
Items
Navigation
Tabs
User
Dialog
Area

The Intranet tab accommodates changes that are LAN specific. Under this tab,
a network administrator can specify rules for the assignment of IP addresses as
well as manipulate tools that improve local area network performance and
resource availability, such as the transparent proxy cache.
The Administration Tab provides control, monitoring and troubleshooting
tools.
The Help Tab provides additional context sensitive information.
Menus are located at the left side of the screen provides additional navigation
for tab components.
5
After each session involving configuration modifications, the changes should be
saved and the system should be restarted to activate the changes.

Basic
Configuration
First things first
T
his chapter covers the use of all the configuration items under the
Networking Tab. Once configured, you should be able to securely
access the Internet through your Multi Homing.
Wide Area Network (WAN1)
The Internet is made up of wide area networks (WAN) and local area networks
(LAN). Each local area network connects to the Internet through a wide area
network.
The Multi Homing is the gateway used by your LAN to connect to your WAN.
Your WAN is provided by your Internet service provider (ISP) using a WAN
medium (Cable/DSL modem or T1/E1/ISDN CSU/DSU).
You will need information provided by your ISP to complete this step.
Depending on your WAN medium, your ISP may provide you with either a
static or dynamic (DHCP/BootP) connection. This information should be
included in the package that came from your ISP. Generally, if your ISP has
provided you with a fixed IP address, you have a static IP address. If your ISP
has provided a username and password, you have a PPPoE2link. If your ISP
provided neither an IP address or username/password pair, you most likely
2Point to Point Protocol over Ethernet (PPPoE) is a common authentication/billing mechanism used by ISPs.
6
Chapter
5

have a DHCP based connection. If unsure, contact your Internet provider's
customer support.
Dynamic Host Configuration Protocol (DHCP) based configurations do not
require further set-up since IP address, gateway and DNS information are
automatically set by the ISP.
Secondary Wide Area Network (WAN 2)
Multi Homing has a second WAN port for a secondary WAN connection to the
Internet. Having two WAN ports, Multi Homing can share the Internet traffics
thru load balancing while for WAN connection fault tolerance. The setup of
secondary WAN interface (WAN 2) is the same as the primary WAN interface.
You can choose a second ISP to provide your WAN 2 connection. Like primary
WAN connection, you have the choice of Static, Dynamic, PPPoE connection
type to suit your ISP supporting package. Otherwise, you may simple disable it
if this does not apply to you.
7

CONNECTION TYPE SET-UP
1. Determine which connection type is assigned by ISP (check
documentation provided by ISP)
2. Click on Networking tab
3. Under the WAN1 Interface menu item, click on Connection
Type
4. Click on the appropriate radio button
5. Click on Apply
6. Do the rest of setting according to prompt window
CONFIGURING A STATIC IP ADDRESS
1. Determine the fixed IP address assigned by the ISP
2. Click on the Networking tab
3. Under the WAN2 Interface menu item, click on IP Address3
4. Enter the IP address provided by the ISP in the appropriate
text box
5. Enter the netmask of the IP address provided by the ISP in
the appropriate text box
6. Enter the default router (or gateway) information provided by
the ISP in the appropriate text box.
7. Click on Update
8. Do the rest of setting according to prompt window
8
3This option is only available if the connection type is configured to be static

CONFIGURING A (DYNAMIC) DHCP ACCOUNT
9
DHCP accounts do not need further configuration. However, for DHCP
accounts with ISPs that restrict IP addresses to specific MAC addresses, see the
subsection on MAC Cloning in the Advanced Networking Tools section of this
chapter.

CONFIGURING MULTI HOMING TO USE A ADSL
PPPOE ACCOUNT
1. Determine the username and password information provided
by the ISP
2. Click on the Networking tab
3. Under the WAN1 Interface menu item, click on
ADSL-PPPoE
4. Enter the username and password provided by the ISP into
the appropriate fields.
5. Select the Authentication mode in the drop list4
6. Enter AC Name5and Service Name provided by ISP
7. Select the appropriate connection mode for your
ADSL-PPPoE link6
8. Click on Apply
9. Do the rest setting according to prompt window
4 PAP CHAP MSCHAP V1 MSCHAP V2
5AC name= Accesss concerntrator
10
6ADSL-PPPoE allows your ISP to monitor the amount of time you are using the Internet for billing purposes. If your ISP or network
provider bills you for the amount of time that you are connected, you should set the 'Connect on Demand' option and set the
'Maximum Idle Time'. This feature automatically connects your system when needed, and disconnects it if you are not using the
Internet. This feature is both convenient and practical.

STARTING WAN1 ADSL-PPPOE MANUALLY
1. Click on ADSL-PPPoE under WAN1 Interface in the
Networking tab.
2. Click on Start
STOPPING WAN1 ADSL-PPPOE MANUALLY
1. Click on ADSL-PPPoE under WAN1 Interface in the
Networking tab.
2. Click on Stop.7
11
7Router will reconnect after restart if you manual STOP the PPPOE connection

CONFIGURING MULTI HOMING TO USE A PPTP
CONNECTION
1. Click on Connection Type under WAN1 Interface in the
Networking tab.
2. Click on ADSL-PPTP and press Apply.
3. Enter My IP Address (ex: 192.168.100.100), My Subnet Mask
(ex: 255.255.255.0), Server IP Address (ex: 192.168.100.1),
PPTP Account (ex: 123456) , PPTP Password (ex: 123456) and
press Apply.
NAT CONFIGURATION
SET UP ONE-TO-MANY NAT WITH WAN1 INTERFACE
1. Click on NAT under WAN1 Interface in the Networking tab.
2. Click on One-to-Many NAT and press Apply.
SET UP MANY-TO-MANY NAT WITH WAN1
INTERFACE
1. Click on NAT under WAN1 Interface in the Networking tab.
2. Click on Advanced Setting.
3. Enter Public IP Range (ex: 61.220.168.202-61.220.168.206).
4. Press Apply.
SET UP ONE-TO-ONE NAT WITH WAN1 INTERFACE
1. Click on NAT under WAN1 Interface in the Networking tab.
2. Click on Advanced Setting.
3. Enter Public IP in WAN (ex: 61.220.168.204), Private IP in
LAN (ex: 192.168.1.50).
12
4. Click on Apply

Domain Name Service (DNS)
Domain name service helps you to work with IP addresses by mapping them
out to simple 'human readable' names. Multi Homing needs the correct values
for certain LAN side client services (like web-browsing) to work properly. The
DNS server IP addresses should be provided to you by your ISP.8
CONFIGURING THE DNS SERVICE
1. Click on the Networking tab
2. Under the WAN1 interface menu item, select DNS Settings
3. Enter up to 3 DNS IP addresses into their corresponding
fields
4. Click on Apply
13
8DHCP and PPPoE configurations may not require this step.

Load Balance
Click on Load Balance under WAN2 Interface in the Networking tab.
SETTING LOAD BALANCE BY BANDWIDTH
1. Choose Bandwidth in Load Balance by combo box.
2. Choose Rate in WAN1:WAN2 combo box (ex: 50%: 50%).
3. Press Apply button.
SETTING LOAD BALANCE BY IP
1. Enter some IP addresses (ex: 140.131.50.20) in the text box
under Hosts which use WAN#1.
2. Enter some IP addresses (ex: 211.72.254.6) in the text box
under Hosts which use WAN#2.
3. Press Apply.
SETTING LOAD BALANCE BY PORT
1. Click some items under Ports which use WAN#1.
2. Click some items under Ports which use WAN#2.
3. Press Apply.
ADDING LOAD BALANCE PREDEFINED PORT
1. Click on Predefined.
2. Enter Port Number (ex: 23), Description (ex: Telnet), and
press Apply.
DELETING LOAD BALANCE PREDEFINED PORT
1. Click on Predefined.
14
2. Choose one pair of item and leave them blank.

Advanced Networking Tools
Multi Homing provides advanced networking features that aid in deploying the
network. The crafty Network Administrator can find various applications for
these tools.
MAC Cloning
Some ISPs audit connections using the MAC addresses9. These systems only
allow 'registered' MAC address to connect to the Internet. To circumvent this
obstacle, Multi Homing provides a 'MAC Cloning' feature which allows the
Network Administrator to modify the MAC address that is reported to the ISP.
This feature facilitates the use of Multi Homing in such environments.
CLONING A MAC ADDRESS
1. Obtain a registered MAC address (to determine the MAC
address on a desktop computer, refer to the operating system
manual)
2. Click on the Networking tab
3. Under the WAN1 Interface menu item, click on MAC Cloning
4. Enter the MAC address obtained in step 1 (separate each
hex-byte by a colon, e.g. AA:BB:CC:DD:EE:FF)
5. Click on Apply
15
9Machine Access Control Layer Address (MAC Address) is a 6-byte (48-bit) number used to uniquely identify networking equipment.
Each network interface card should have a unique MAC address assigned to it by its manufacturer. MAC addresses are commonly
represented in hexadecimal values.

Dynamic DNS
Conventional DNS information associates a static IP address with a human
readable machine name, for use on the World Wide Web. When a DNS server
receives a name lookup request, it compares it against a list of published IP-host
name associations. Once a match is found, the server replies with either the IP
address or host name. Since the published lists are static, conventional DNS
servers are unable to map DHCP or PPPoE configured hosts as the
configuration protocols do not guarantee that the host computer will always
have the same IP address. (thus, the IP address-hostname mapping will not
always be correct).
Dynamic DNS overcomes the fixed IP requirement of conventional DNS by
running a daemon that automatically updates DNS server information. To
avail of this service, you will have to register with one of several dynamic DNS
service providers and configure Multi Homing to forward IP address changes to
the dynamic DNS server.
This feature is particularly useful for providing WAN side services (e.g. HTTP
or FTP).
16