Black Box Firetunnel 30 LRE1030E User manual

LRE1030E
User’s Manual
Version Release 7.02 (FW:1.xx)
Updated July 28, 2008

Black Box Corporation
1000 Park Drive, Lawrence, PA 15055-1018
USA, Canada: www.blackbox.com,
EU, Africa, Asia, South America, Australia: www.blackbox.eu
2
Firetunnel 30 User’s Manual
(Updated July 28, 2008)
Copyright Information
© 2008 Black Box Corporation
The contents of this publication may not be reproduced in whole or in part,
transcribed, stored, translated, or transmitted in any form or any means, without
the prior written consent of Black Box Corporation.
Published by Black Box Corporation. All rights reserved.
Disclaimer
Black Box does not assume any liability arising out of the application of use of any
products or software described herein. Neither does it convey any license under its
patent rights nor the patent rights of others. Black Box reserves the right to make
changes in any products described herein without notice. This publication is subject
to change without notice.
Trademarks
Mac OS is a registered trademark of Apple Computer, Inc.
Windows 98, Windows NT, Windows 2000, Windows Me and Windows XP are
registered trademarks of Microsoft Corporation.

Black Box Corporation
1000 Park Drive, Lawrence, PA 15055-1018
USA, Canada: www.blackbox.com,
EU, Africa, Asia, South America, Australia: www.blackbox.eu
3
Safety Warnings
Your Firetunnel 30 is built for reliability and long service life. For your
safety, be sure to read and follow the following safety warnings.
• Read this installation guide thoroughly before attempting to set up your
Firetunnel 30.
• Your Firetunnel 30 is a complex electronic device. DO NOT open or attempt to
repair it yourself. Opening or removing the covers can expose you to high
voltage and other risks. In the case of malfunction, turn off the power
immediately and have it repaired at a qualified service center. Contact your
vendor for details.
• Connect the power cord to the correct supply voltage.
• Carefully place connecting cables to avoid people from stepping or tripping on
them. DO NOT allow anything to rest on the power cord and DO NOT place the
power cord in an area where it can be stepped on.
• DO NOT use Firetunnel 30 in environments with high humidity or high
temperatures.
• DO NOT use the same power source for Firetunnel 30 as other equipment.
• DO NOT use your Firetunnel 30 and any accessories outdoors.
• If you wall mount your Firetunnel 30, make sure that no electrical, water or gas
pipes will be damaged during installation.
• DO NOT install or use your Firetunnel 30 during a thunderstorm.
• DO NOT expose your Firetunnel 30 to dampness, dust, or corrosive liquids.
• DO NOT use your Firetunnel 30 near water.
• Be sure to connect the cables to the correct ports.
• DO NOT obstruct the ventilation slots on your Firetunnel 30 or expose it to direct
sunlight or other heat sources. Excessive temperatures may damage your
device.
• DO NOT store anything on top of your Firetunnel 30.
• Only connect suitable accessories to your Firetunnel 30.
• Keep packaging out of the reach of children.
• If disposing of the device, please follow your local regulations for the safe
disposal of electronic products to protect the environment.

Black Box Corporation
1000 Park Drive, Lawrence, PA 15055-1018
USA, Canada: www.blackbox.com,
EU, Africa, Asia, South America, Australia: www.blackbox.eu
4
Table of Contents
Chapter 1: Introduction
1.1 Overview………………………………………………………………………….. 10
1.2 Product Highlights…………………………………………………………. 10
1.2.1 Increased Bandwidth, Scalability and Resilience…………….. 10
1.2.2 Virtual Private Network Support………………………………………. 10
1.2.3 Advanced Firewall Security………………………………………………. 11
1.2.4 Intelligent Bandwidth Management…………………………………. 11
1.3 Package Contents………………………………………………………….. 11
1.3.1 Front Panel……………………………………………………………………….. 12
1.3.2 Rear Panel…………………………………………………………………………. 13
1.3.3 Rack Mounting………………………………………………………………….. 14
1.3.4 Cabling……………………………………………………………………………… 14
Chapter 2: Router Applications
2.1 Overview………………………………………………………………………….. 15
2.2 Bandwidth Management with QoS……………………………… 15
2.2.1 QoS Technology………………………………………………………………… 15
2.2.2 QoS Policies for Different Applications…………………………….. 16
2.2.3 Guaranteed / Maximum Bandwidth…………………………………. 17
2.2.4 Policy Based Traffic Shaping…………………………………………….. 18
2.2.5 Priority Bandwidth Utilization…………………………………………… 19
2.2.6 Management by IP or MAC address………………………………….. 19
2.2.7 DiffServ (DSCP Marking)………………………………………………….. 20
2.2.8 DSCP (Matching)………………………………………………………………. 21
2.3 Outbound Traffic…………………………………………………………….. 21
2.3.1 Outbound Fail Over……………………………………………………………. 21
2.3.2 Outbound Load Balancing…………………………………………………. 22
2.4 Inbound Traffic……………………………………………………………….. 23
2.4.1 Inbound Fail Over………………………………………………………………. 23
2.4.2 Inbound Load Balancing……………………………………………………. 24
2.5 DNS Inbound…………………………………………………………………… 25
2.5.1 DNS Inbound Fail Over………………………………………………………. 26

Black Box Corporation
1000 Park Drive, Lawrence, PA 15055-1018
USA, Canada: www.blackbox.com,
EU, Africa, Asia, South America, Australia: www.blackbox.eu
5
2.5.2 DNS Inbound Load Balancing…………………………………………….. 27
2.6 Virtual Private Networking………………………………………….. 29
2.6.1 General VPN Setup……………………………………………………………. 29
2.6.2 VPN Planning - Fail Over……………………………………………………. 30
2.6.3 Concentrator……………………………………………………………………… 31
Chapter 3: Getting Started
3.1 Overview………………………………………………………………………….. 33
3.2 Before You Begin……………………………………………………………. 33
3.3 Connecting Your Router………………………………………………… 34
3.4 Configuring Your PC………………………………………………………. 35
3.5 Factory Default Settings………………………………………………. 37
3.5.1 Username and Password…………………………………………………. 37
3.5.2 LAN and WAN Port Addresses…………………………………………. 38
3.6 Information From Your ISP…………………………………………. 38
3.6.1 Protocols…………………………………………………………………………… 38
3.6.2 Configuration Information……………………………………………….. 39
3.7 Web Configuration Interface……………………………………….. 40
Chapter 4: Router Configuration
4.1 Overview………………………………………………………………………….. 41
4.2 Status……………………………………………………………………………….. 42
4.2.1 ARP Table………………………………………………………………………….. 42
4.2.2 Routing Table……………………………………………………………………. 43
4.2.3 Session Table……………………………………………………………………. 44
4.2.4 DHCP Table……………………………………………………………………….. 45
4.2.5 IPSec Status……………………………………………………………………… 45
4.2.6 PPTP Status…………………………………………………………………….. 46
4.2.7 System Status…………………………………………………………………… 46
4.2.8 System Log……………………………………………………………………….. 46
4.2.9 LAN Traffic Statistics…………………………………………………………. 47
4.3 Quick Start………………………………………………………………………. 48
4.3.1 DHCP…………………………………………………………………………………. 48
4.3.2 Static IP…………………………………………………………………………….. 48
4.3.3 PPPoE………………………………………………………………………………… 49

Black Box Corporation
1000 Park Drive, Lawrence, PA 15055-1018
USA, Canada: www.blackbox.com,
EU, Africa, Asia, South America, Australia: www.blackbox.eu
6
4.3.4 PPTP…………………………………………………………………………………… 49
4.3.5 Big Pond……………………………………………………………………………. 50
4.4 Configuration…………………………………………………………………… 51
4.4.1 LAN……………………………………………………………………………………. 51
4.4.1.1 Ethernet………………………………………………………………. 52
4.4.1.2 DHCP Server……………………………………………………….. 52
4.4.1.3 LAN Address Mapping ……………………………………….. 53
4.4.2 WAN………………………………………………………………………………….. 54
4.4.2.1 Settings………………………………………………………………. 55
4.4.2.1.1 DHCP………………………………………………… 56
4.4.2.1.2 Static IP……………………………………………. 57
4.4.2.1.3 PPPoE………………………………………………. 58
4.4.2.1.4 PPTP…………………………………………………. 59
4.4.2.1.5 Big Pond………………………………………….. 61
4.4.2.2 Bandwidth Setting………………………………………………. 62
4.4.2.3 WAN IP Alias……………………………………………………….. 62
4.4.3 Dual WAN………………………………………………………………………….. 63
4.4.3.1 General Settings…………………………………………………. 64
4.4.3.2 Outbound Load Balance……………………………………… 65
4.4.3.3 Inbound Load Balance……………………………………….. 66
4.4.3.4 Protocol Binding………………………………………………….. 69
4.4.4 System……………………………………………………………………………… 71
4.4.4.1 Time Zone…………………………………………………………… 71
4.4.4.2 Remote Access……………………………………………………. 72
4.4.4.3 Firmware Upgrade………………………………………………. 73
4.4.4.4 Backup / Restore………………………………………………… 74
4.4.4.5 Restart………………………………………………………………… 75
4.4.4.6 Password…………………………………………………………….. 76
4.4.4.7 Ping & Trace Route……………………………………………… 76
4.4.5 Firewall……………………………………………………………………………… 77
4.4.5.1 Packet Filter…………………………………………………………. 77
4.4.5.2 URL Filter……………………………………………………………… 79
4.4.5.3 LAN MAC Filter……………………………………………………… 82
4.4.5.4 Block WAN Request…………………………………………….. 84
4.4.5.5 Intrusion Detection…………………………………………….. 84
4.4.6 VPN……………………………………………………………………………………. 85
4.4.6.1 IPSec…………………………………………………………………… 86

Black Box Corporation
1000 Park Drive, Lawrence, PA 15055-1018
USA, Canada: www.blackbox.com,
EU, Africa, Asia, South America, Australia: www.blackbox.eu
7
4.4.6.1.1 IPSec Wizard…………………………………… 86
4.4.6.1.2 IPSec Policy…………………………………….. 90
4.4.6.2 PPTP…………………………………………………………………….. 95
4.4.7 QoS…………………………………………………………………………………… 96
4.4.8 Virtual Server……………………………………………………………………. 100
4.4.8.1 DMZ…………………………………………………………………….. 101
4.4.8.2 Port Forwarding Table…………………………………………. 102
4.4.9 Advanced………………………………………………………………………….. 103
4.4.9.1 Static Route………………………………………………………… 104
4.4.9.2 Dynamic DNS……………………………………………………… 105
4.4.9.3 Device Management…………………………………………… 106
4.4.9.4 IGMP……………………………………………………………………. 108
4.4.9.5 VLAN Bridge……………………………………………………….. 109
4.4.9.6 Schedule……………………………………………………………… 110
4.5 Log & E-mail Alert.................................................... 111
4.5.1 Log Configuration…………………………………………………………….. 111
4.5.2 System Log server……………………………………………………………. 111
4.5.3 E-mail Alert………………………………………………………………………. 112
4.6 Save Configuration To Flash………………………………………… 112
4.7 Logout………………………………………………………………………………. 113
Chapter 5: Troubleshooting
5.1 Basic Functionality…………………………………………………………. 114
5.1.1 Router Won’t Turn On………………………………………………………. 114
5.1.2 LEDs Never Turn Off………………………………………………………….. 114
5.1.3 LAN or Internet Port Not On……………………………………………. 114
5.1.4 Forgot My Password…………………………………………………………. 115
5.2 LAN Interface………………………………………………………………….. 115
5.2.1 Can’t Access Router from the LAN………………………………….. 115
5.2.2 Can’t Ping Any PC on the LAN…………………………………………. 116
5.2.3 Can’t Access Web Configuration Interface………………………. 116
5.2.3.1 Pop-up Windows…………………………………………………. 117
5.2.3.2 Javascripts………………………………………………………….. 117
5.2.3.3 Java Permissions…………………………………………………. 118
5.3 WAN Interface………………………………………………………………… 119
5.3.1 Can’t Get WAN IP Address from the ISP………………………….. 119

Black Box Corporation
1000 Park Drive, Lawrence, PA 15055-1018
USA, Canada: www.blackbox.com,
EU, Africa, Asia, South America, Australia: www.blackbox.eu
8
5.4 ISP Connection………………………………………………………………… 119
5.5 Problems with Date and Time………………………………………. 121
5.6 Restoring Factory Defaults…………………………………………… 121

Black Box Corporation
1000 Park Drive, Lawrence, PA 15055-1018
USA, Canada: www.blackbox.com,
EU, Africa, Asia, South America, Australia: www.blackbox.eu
9
Appendix A: Product Specifications
Appendix B: FCC Interference Statement
Appendix C: IPSec Logs and Events
C.1 IPSec Log Event Categories…………………………………………. 126
C.2 IPSec Log Event Table…………………………………………………… 126
Appendix D: Router Setup Examples
D.1 Outbound Fail Over………………………………………………………… 130
D.2 Outbound Load Balancing……………………………………………. 132
D.3 Inbound Fail Over………………………………………………………….. 134
D.4 DNS Inbound Fail Over…………………………………………………. 137
D.5 DNS Inbound Load Balancing……………………………………… 140
D.6 Dynamic DNS Inbound Load Balancing…………………….. 142
D.7 VPN Configuration…………………………………………………………. 147
D.7.1 LAN to LAN…………………………………………………………………….. 147
D.7.2 Host to LAN……………………………………………………………………. 149
D.8 IPSec Fail Over (Gateway to Gateway)…………………….. 151
D.9 VPN Concentrator…………………………………………………………… 153
D.10 Protocol Binding…………………………………………………………….. 157
D.11 Intrusion Detection………………………………………………………. 158
D.12 PPTP Remote Access by Windows XP……………………….. 159
D.13 PPTP Remote Access by Firetunnel……………………………. 166

Black Box Corporation
1000 Park Drive, Lawrence, PA 15055-1018
USA, Canada: www.blackbox.com,
EU, Africa, Asia, South America, Australia: www.blackbox.eu
10
Chapter 1: Introduction
1.1 Overview
Congratulations on purchasing Firetunnel 30 Router from Black Box. Combining a
router with an Ethernet network switch, Firetunnel 30 is a state-of-the-art device
that provides everything you need to get your network connected to the Internet
over your Cable or DSL connection quickly and easily. The Quick Start Wizard and
DHCP Server will get first-time users up and running with minimal fuss and
configuration, while sophisticated Quality of Service (QoS) and Load Balancing
features grant advanced users total control over their network and Internet
connection.
This manual illustrates the many features and functions of Firetunnel 30, and even
takes you through the various ways you can apply this versatile device to your home
or office. Take the time now to familiarize yourself with Firetunnel 30.
1.2 Product Highlights
1.2.1 Increased Bandwidth, Scalability and Resilience
With integrated Dual WAN ports, Firetunnel 30 combines two broadband lines such
as DSL or Cable into one Internet connection, providing optimal bandwidth sharing
for multiple PCs on your network, or allowing maximum reliability with network
redundancy. Load Balancing enables Firetunnel 30 to efficiently balance network
traffic across two connections, ideal for small-to-medium businesses that require
increased bandwidth, network scalability, and resilience for mission-critical network
and Internet applications. Auto failover can also be configured to ensure smooth,
continuous service should one connection fail, providing maximum business uptime
and productivity, plus uninterrupted service for you and your customers.
1.2.2 Virtual Private Network Support
Firetunnel 30 supports comprehensive IPSec & PPTP VPN protocols for businesses to
establish private encrypted tunnels over the Internet to ensure data transmission
security among multiple sites, such as a branch office or dial-up connection. IPSec
VPN is up to 30 simultaneous IPSec VPN connections are possible on Firetunnel 30,