Corega COR-WLBAR-AA User manual

Warranty
Corega International warrants product for two years from date of purchase
against defects in materials and workmanship. This warranty does not cover
any defects caused by accident, misuse, fair wear and tear, neglect, or an
attempt at repair. This warranty is offered as an additional benefit to the
consumer’s statutory rights and does not affect these rights in any way.
Corega International shall not be held responsible for any special, incidental,
or consequential damages resulting from any breach of warranty, or under any
other legal theory, including but not limited to lost profit, downtime, damage to
data stored in or used with Corega International products.
Trademarks
CoregaTM is a trademark of Corega Holdings KK., Japan.
Other trademarks, brand and product names are acknowledged as trademarks
of their respective holders. Information is subject to change without notice.
All rights reserved.
(GB) Warnings
ELECTRIC SHOCK HAZARD:
Install product in accordance with local and National Electrical Codes.
To de-energise equipment, disconnect the power cord.
(D) Warnhinweise
STROMSCHLAGGEFAHR:
Dieses Produkt muss entsprechend den örtlichen und nationalen
Elektrizitätsvorschriften installiert werden. Zum Abschalten der Ausrüstung
Stromkabel abziehen.
(I) Attenzione
RISCHIO DI SHOCK ELETTRICO:
Installare l'apparecchio in base alle normative elettriche locali e nazionali. Per
togliere l'alimentazione al dispositivo, scollegare il cavo relativo.
(E) Advertencias
PELIGRO DE ELECTROCUCIÓN:
Instale el producto de acuerdo con las recomendaciones de la
normativa sobre instalaciones eléctricas de su país. Para desactivar el equipo,
desconecte el cable de alimentación.
(F) Avertissements
RISQUE D'ÉLECTROCUTION:
Installez le produit conformément aux réglementations électriques nationales et
locales. Pour mettre l'équipement hors tension, débranchez le cordon
d'alimentation.
(FIN) Varoitukset
SÄHKÖISKUN VAARA:
Asenna tuote noudattaen paikallisia ja kansallisia säädöksia. Laitteen saa jännit-
teettömäksi vain irroittamalla sähköjohdon.
(RUS) Предупреждения
ОПАСНОСТЬ ПОРАЖЕНИЯ ЭЛЕКТРИЧЕСКИМ ТОКОМ:
Устанавливайте изделие в соответствии с местными и
национальными правилами по установке
электрооборудования. Для отключения питания
отключите шнур питания.
Предупреждение – это изделие класса A. В домашних
условиях это изделие может создавать радиопомехи. В
этом случае пользователю, возможно, понадобится
принять соответствующие меры.
617-10130/01

ADSL WIRELESS
802.11g 54MBPS
ROUTER
HUBS • SWITCHES • ADAPTERS • WIRELESS LAN • USB • KVMs • MEDIA CONVERTERS • ROUTERS • ADSL
COR-WLBAR-AA & COR-WLBAR-AB
ALL-IN-ONE-ROUTER

1
ENGLISH
Table of Contents
FCC STATEMENT 2
CE DECLARATION OF CONFORMITY 2
MANUFACTURER’S DISCLAIMER STATE 2
CHAPTER 1.0: GETTING TO KNOW YOUR ADSL WIRELESS ROUTER 3
1-1 FEATURES OF THE ADSL WIRELESS ROUTER 3
1-2 CONTENTS OF THE ADSL WIRELESS ROUTER PACKAGE 3
CHAPTER 2.0: HARDWARE INSTALLATION & SETUP 4
2-1 CONNECTORS AND INDICATORS 4
2-2 INSTALLATION 5
CHAPTER 3.0: BASIC INSTALLATION & SETUP 6
3-1 ONE PAGE SETUP 7
3-1-1 GATEWAY USING PPPoE 8
3-1-2 GATEWAY USING PPPoA 9
3-1-3 GATEWAY USING DYNAMIC IP 9
3-1-4 GATEWAY USING STATIC IP 10
3-1-5 GATEWAY USING CLASSICAL IP 10
3-1-6 MODEM USING LLC ENCAPS. 11
3-2 CONFIGURE WIRELESS SECURITY 12
3-2-1 WEP ENCRYPTION 12
3-2-2 WPA-PSK ENCRYPTION 13
3-3 STATUS 14
CHAPTER 4.0: ADVANCED CONFIGURATION 15
4-1 DHCP CONFIGURATION 15
4-2 DMZ CONFIGURATION 16
4-3 FIREWALL RULES 17
4-4 FIREWALL SERVICES 18
4-5 INTERNET ACCESS CONTROL 19
4-5-1 INTERNET ACCESS CONTROL - URL FILTER SETTINGS 20
4-6 PORT FORWARDING (VIRTUAL SERVER) SETTINGS 21
4-7 DDNS 22
4-8 SPECIAL APPLICATIONS 23
4-9 MISCELLANEOUS OPTIONS 24
4-10 ROUTING 25
4-11 TIME SCHEDULE 26
4-12 WIRELESS ACCESS CONTROL 27
4-13 VPN CONFIGURATION 28
4-13-1 VPN - ADD MANUAL POLICY 29
4-13-2 VPN - ADD AUTO POLICY 31
CHAPTER 5.0: MANAGEMENT 33
5-1 PC DATABASE 33
5-1-1 PC DATABASE - ADVANCED ADMINISTRATION 34
5-2 PASSWORD 35
5-3 REMOTE ACCESS 36
5-4 NETWORK DIAGNOSTICS 37
5-5 LOG 38
5-6 EMAIL 39
5-7 CONFIG FILES 40
5-8 FIRMWARE UPGRADE 41
CHAPTER 6.0: TROUBLESHOOTING 41
HARDWARE 41
CLIENT SIDE (COMPUTERS) 42
APPENDIX A: FREQUENTLY ASKED QUESTIONS 43
APPENDIX B: TECHNICAL SPECIFICATIONS 44
APPENDIX C: GLOSSARY 45

ENGLISH
2
FCC Statement
This device complies with Part 15 of FCC rule. Operation is subject to the following two conditions:
This device may not cause harmful interference.
This device must accept any interference received, including interference that may cause undesired operation.
This ADSL Wireless Router has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to
provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses, and can radiate radio frequency energy and, if not
installed and used according to the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in
a particular installation. If this equipment does cause harmful interference to radio or television reception, which is found by turning the equipment off and on, the user is
encouraged to try to correct the interference by one or more of the following measures:
Reorient or relocate the receiving antenna.
Increase the separation between the equipment or device.
Connect the equipment to an outlet other than the receiver’s.
Consult a dealer or an experienced radio/TV technician for assistance.
FCC Radiation Exposure Statement
This equipment complies with FCC radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with minimum
distance 20cm between the radiator and your body.
CE Declaration of Conformity:
This equipment complies with the specifications relating to electromagnetic compatibility, EN 55022/A1 Class B, and EN 50082-1. This meets the reasonable protection
requirements set out in the European Council Directive on the approximation of the laws of the member states relating to Electromagnetic Compatibility Directive
(89/336/EEC).
Manufacturer’s Disclaimer State
The information in this document is subject to changes without notice and does not represent a commitment on the part of vendor. No warranty or representation, either
expressed or implied, is made with respect to the quality, accuracy or fitness for any particular purpose of this document. The manufacturer reserves the right to make
changes to the content of this document and/or the products associated with it at any time without obligation to notify any person or organization. In no event will the
manufacturer be liable for direct, indirect, special, incidental or consequential damages arising out of the use or inability to use this product or documentation, even if
advised of the possibility of such damages. This document contains materials protected by copyright. All rights are reserved. No part of this manual may be reproduced
or transmitted in any form, by any means or for any purpose without the expressed written consent of its authors. Product names appearing in this document are
mentioned for identification purchases only. All trademarks, product names or brand names appearing in this document are registered property of their respective owners.

3
Chapter1.0 Getting to know your ADSL Wireless Router
1-1 Features of the ADSL Wireless Router
Congratulations on your purchase of this ADSL Wireless Router.
The router provides the following benefits:
•High Speed internet Access over ADSL (Up to 8Mbps internet downstream speed and 832Kbps upstream speed).
• Allows multiple computers to share a single ISP internet account.
• Wireless LAN connection via integrated Wireless Access Point.
• Provides 64bits/128bits key WEP (Wired Equivalent Privacy) and WPA-PSK wireless data encryption to secure wireless communication.
•4 port 10/100Mbps switch for wired connections to computers and printers.
•DHCP Server providing local IP addresses to local computers.
•Complete data security protecting the network from hackers.
• In-built filters allow denial of access to objectionable websites.
• Virtual Private Network support (VPN) and IPSec support.
1-2 Package Contents
After carefully unpacking the shipping carton, check the contents listed below.
1 x ADSL Wireless Router
1 x Power Adapter
1 x User’s Manual
1 x Telephone Cable
1 x Ethernet Cable
1 x CD
Figure 1. Pack Contents
ENGLISH

Chapter 2.0 Hardware Installation and Setup
2-1 Connectors and Indicators
The front and rear panels of the router are shown in Figure 2.
Figure 2. Front & Rear Panels.
Rear Panel Connectors
• Antenna Provides data transmission and reception for wireless devices. Please ensure that the Antenna is facing upwards.
• Reset Pressing this button for 3 seconds will reset the unit back to factory defaults.
• ADSL This is the WAN connection port to the telephone socket.
• LAN 1–4 Four LAN ports for local computers/printers.
• Power Inlet socket for external power adapter.
Front Panel Indicators
• Power 0ff - No power applied
Green - Power to the router
• Status Yellow - Glows when the router performs a self test, and diagnostics.
Off - When router is operating correctly.
• WLAN Enable/Activity Off - Wireless not enabled
Green - Wireless enabled
Flashing - Data activity on the wireless port
•10/100 LAN Link/Activity Off - Port not active
Green - Port has valid connection
Flashing - Data activity on the port
•ADSL Link/Activity Off - ADSL line not connected
Green - ADSL connection is established and ready
Flashing - ADSL connection is being established
ENGLISH
4
ADSL
RESET
LAN4
LAN3
LAN1
LAN2
POWER
Power Status
LAN
WirelessADSL
100 10
1
2
3
4
WLBAR-AA
Wireless, ADSL
Broadband
Access
Router

5
2-2 Installation
Connect the router as shown.
Figure 3. Hardware Installation
Power on the devices in the following sequence:
• ADSL Router
• Computer(s)
Note! The computer needs to be configured with the following:
• Ethernet Card supporting either;
-10Base-T
- 100Base-TX
- 802.11b or 802.11g Wireless
• TCP/IP Protocol
• Web browser such as Microsoft Internet Explorer 4.0 or later.
Note! If you are connecting via a wireless connection – the Access Point in the router is programmed with the following default parameters:
SSID - corega
WEP - disabled
ENGLISH

Chapter 3.0 Basic Installation & Setup
This chapter describes the procedures necessary to configure the basic functions of the router to allow internet access.
The following information should be supplied by your ISP:
Provided by some ISPs Host Name:
Domain Name:
IP address given by ISP • Dynamic
• Static
IP address
Subnet Mask
Default Gateway
DNS Server (Primary)
DNS Server (Secondary)
WAN VPI and VCI Values VPI
VCI
Operating Mode • LLC Encapsulation with Dynamic IP
• LLC Encapsulation with Static IP
• Gateway Classical IP
• PPPoE
• PPPoA
• Router using Classical IP
PPP Authentication Login Name
Password
Depending on your ISP, some or all of these parameters need to be programmed into the router.
Before attempting to configure the router, Corega suggest that you visit the support site of www.corega-international.com, and download a configuration file which may
help you with your particular installation. This should setup most of the parameters such that you only have to enter your username and password.
To access the router, point your web browser at: http://192.168.0.1
Note! For most users, a compatible IP address will be automatically allocated to each computer by the router’s internal DHCP server. If you cannot access the
router – check that the computer has been set to receive a dynamic IP address or manually configure a compatible IP address.
From Windows:
Start/Settings/Network & Dial Up Connections/Local Area Connection/Properties/TCP/IP
The following screen should appear:
Figure 4. Login Screen
The factory default values are:
Username admin
Password password
Click OK.
The following screen should appear:
ENGLISH
6

7
3-1 One Page Setup
Figure 5. One Page Setup
By setting the parameters on this page, users should then be able to access the internet using the router.
General
•Host Name: This entry is required by certain ISPs. (If not necessary – leave blank).
•Domain Name: This entry is required by certain ISPs. (If not necessary – leave blank).
•Private IP Address: This is the LAN IP address of the router. This is the address that is used to configure the router. The default values are:
192.168.0.1 for IP Address and
255.255.255.0 for Subnet Mask.
(Changing this factory default setting is optional, and is not necessary for most small networks).
•Time Zone: Select the relevant time zone from the drop down list. (Setting this is optional)
Wireless
•SSID: (Service Set Identifier). SSID is the unique name shared among all clients and the router in a wireless network. The SSID must be identical for all wireless
devices and must not exceed 32 characters. The default value for the SSID is ‘corega’.
•Broadcast SSID Enable: The router will broadcast the SSID to let wireless clients easily search and connect to this router. Default value is “enabled”.
•Mode: The router can operate in three possible modes. Select from the drop-down menu one of the following:
802.11g & 802.11b Allows the router to connect to 11Mbps (802.11b) and 54Mbps (802.11g) clients (Recommended)
802.11g Allows the router to connect only to 54Mbps (802.11g) clients
802.11b Allows the router to connect only to 11Mbps (802.11b) clients
•Region: Select the appropriate region from the drop-down menu. The permissible channels are different in each country due to local government regulations.
•Channel: Select the appropriate channel number from the drop-down menu. Make sure that all nodes in the same wireless LAN network use the same channel.
•Wireless Security Status: This shows the status of the wireless security function. Default value is disabled. To enable, click on Configure wireless security.
•Configure Wireless Security: See section. 3.2 on page 12.
ENGLISH

VC Setting:
•VPI: If you have uploaded a config file (see section 5.6 on page 39, this parameter will already be set. This is a value between 0-255 and is provided by your
Internet Service Provider (ISP).
•VCI: If you have uploaded a config file, this parameter will already be set. This is a value between 32-65535 and is provided by your Internet Service Provider
(ISP).
•VPI,VCI Auto Detect: If you have not uploaded a config file, and are not sure of the VPI and VCI parameters required by your ISP, then this utility will attempt
to determine the correct VPI & VCI parameters by examining the ADSL interface. (Make sure that the router is connected to the ADSL line if you use Auto Detect.
•Encapsulation: If you have uploaded a config file, this parameter will already be set. This will be set as either LLC or VC based, and is provided by your Internet
Service Provider (ISP).
WAN Connection
If you have uploaded a config file (see section 5-6), this parameter will already be set. WAN Connection type is the way the router works with DSLAM equipped in your
ISP side. This ADSL Wireless router supports six connection types listed as below. Different countries, and different operators use different types of connection type. It is
important to select the correct type for your network provider. If you are unsure about which WAN Connection Type, please consult your provider. -
- Gateway using PPPoE
- Gateway using PPPoA
- Gateway using Dynamic IP
-Gateway using Static IP
- Gateway using Classical IP (IP over ATM)
- Modem using LLC Encap
3-1-1 Gateway using PPPoE
Figure 6. Gateway using PPPoE
•Login Name: Enter your ISP Username.
•Password: Enter your ISP Password.
•Connect-on-demand: Only enable this option if your ISP charges by the megabyte or by minutes (seconds) of line usage. Enabling this option will cause the
router to connect to the ADSL line when there is a packet waiting to be transmitted. Set the Max Idle Time with the length of time the router will remain in an
idle state before reconnecting to collect incoming data.
•Keep Alive: This function keeps your PPPoE connection always active even when there is no data to transmit. However, in some situations, the PPPoE session
cannot be built immediately after disconnection because the system on the ISP site may need a little time to restore. You may need to check with your ISP to find
out how much time is required before the router can start to re-build the PPPoE session and then fill this in the “Redial Period”.
•Manual Connect/Disconnect: Allows the user to manual connect or disconnect the ADSL connection from the keyboard.
• IPAddress: This is the IP address of the WAN port. In most cases (default), this will be a Dynamic IP address. In some cases, this will be a Static IP address
issued by your ISP. If this is the case, select Fixed, and enter the IP address.
ENGLISH
8

9
3-1-2 Gateway using PPPoA
Figure 7. Gateway using PPPoA
•Login Name: Enter your ISP Username.
•Password: Enter your ISP Password.
•Connect-on-demand: Only enable this option if your ISP charges by the megabyte or by minutes (seconds) of line usage. Enabling this option will cause the
router to connect to the ADSL line when there is a packet waiting to be transmitted. Set the Max Idle Time with the length of time the router will remain in an
idle state before reconnecting to collect incoming data.
•Keep Alive: This function keeps your PPPoE connection always active even when there is no data to transmit. However, in some situations, the PPPoE session
cannot be built immediately after disconnection because the system on the ISP site may need a little time to restore. You may need to check with your ISP to find
out how much time is required before the router can start to re-build the PPPoE session and then fill this in the “Redial Period”.
•Manual Connect/Disconnect: Allows the user to manual connect or disconnect the ADSL connection from the keyboard.
•I
P Address: This is the IP address of the WAN port. In most cases (default), this will be a Dynamic IP address. In some cases, this will be a Static IP address
issued by your ISP. If this is the case, select Fixed, and enter the IP address.
3-1-3 Gateway using Dynamic IP
Figure 8. Gateway using Dynamic IP
This connection type is the default setting of this router. Leave this setting on the column according to the following conditions:
1. You want to employ NAT. NAT allows you to use single IP address as the external one to share internet access from all of your PCs, as well as protect them from
outside intruders.
2. Your ISP uses LLC Encapsulation and uses DHCP to assign an IP address when you connect to your ISP LLC encapsulation allows multiplexing of multiple protocols over a
single ATM virtual connection (VC). You can find more information on RFC 2684.
ENGLISH

3-1-4 Gateway using Static IP
Figure 9. Gateway using Static IP
Choose this setting according to the following conditions:
1. You want to employ NAT. NAT allows you to use single IP address as the external one to share internet access for all of your PCs, as well as protect them from outside
intruders.
2. Your ISP uses LLC Encapsulation and provides you with one or more IP addresses when you apply for the service. You can find more information on RFC 2684.
•WAN IP Address: Enter one IP address provided by your ISP.
•Subnet Mask: Enter the subnet mask values provided by your ISP.
•Gateway IP Address: Your ISP will provide you with the Default Gateway IP Address.
•Domain Name Server (DNS): Your ISP will provide you with at least one DNS IP Address. Multiple DNS IP settings are common. The first available DNS entry is
used in most cases.
3-1-5 Gateway using Classical IP (IP over ATM)
Figure 10. Gateway using Classical IP
Choose this setting according to the following conditions:
1. You want to employ NAT. NAT allows you to use a single IP address as the external one to share internet access for all of your PCs, as well as protect them from
outside intruders.
2. Your ISP uses Classical IP connection type (use LLC encapsulation and routing protocol) and provides you with one or more IP addresses when you apply for the
service. You can find more information on RFC 2684.
•WAN IP Address: Enter the IP address provided by your ISP.
•Subnet Mask: Enter the subnet mask values provided by your ISP.
•Gateway IP Address: Your ISP will provide you with the Default Gateway IP Address.
•Domain Name Server (DNS): Your ISP will provide you with at least one DNS IP Address. Multiple DNS IP settings are common. The first available DNS entry is
used in most cases.
ENGLISH
10

11
3-1-6 Modem using LLC Encaps
Figure 11. Modem Only
Choose this setting according to the following conditions:
1. You want this device acting as an ADSL modem.
2. Your ISP uses LLC encapsulation.
Your ISP may use DHCP to provide an IP address or to provide you with one or more IP addresses, as well as asking you to use PPPoA or PPPoE connection modes when
you apply for the service. However, as you have chosen to make this device act as an modem, you have to know how to configure your PCs.
Note: When the router is configured in this mode, many of the routers features are disabled (firewall, filtering, etc). Therefore, the ability to configure these options from
the menu on the left had side of the screen is not available.
ENGLISH

3.2 Configure Wireless Security.
From the One-Page-Setup screen, select the Configure option from under the wireless section.
Figure 12. Configuring Wireless Security
The default wireless security setting is “disabled”. This is to ensure that all wireless devices can initially connect to the router. It is recommended that you enable wireless
security on the router. Select either WEP or WPA-PSK security. All devices must use the same method of encryption.
3-2-1 WEP Encryption
(Wired Equivalent Privacy), WEP is an encryption mechanism used to protect your wireless data by providing a secure communications method. WEP uses a
combination of either 64 or 128-bit keys to encrypt data that is transmitted between all points in a wireless network to ensure data security. To code/decode the data
transmission, all points must use the identical key.
Figure 13. WEP Encryption
• Authentication Type: Select either Open System or Share Key as authentication type. If you are not sure, select Auto.
•WEP Data Encryption: Select either “64Bit” or “128Bit” encryption algorithm from the drop-down list. There are two ways to generate WEP key:
•Passphrase: Enter an alphanumeric text string in this column then click the “Generate Keys” button. Four 64-bit encryption keys or one 128-bit
encryption key will be created automatically.
You can enter the WEP key manually.
You may need to enter the WEP key manually to join the existing wireless network. If you are not sure which one to use, check with your network administrator.
ENGLISH
12

13
3-2-2 WPA-PSK Encryption
WPA is a wireless security system with far greater protection than WEP. It avoids most of WEP’s vulnerabilities. WPA has significant advantages over WEP. The encryption key
used to encrypt the data is different for every packet. This TKIP (Temporal Key Integrity Protocol) mechanism shares a starting key between devices. Each device then
changes their encryption key for every packet. It is extremely difficult for hackers to read messages, even if they have intercepted the data.
Figure 14. WEP Encryption
• PSK Enter the keyword key value. The data will be encyrpted using a key derived from this network key. The key must be from 8 to 63
characters.
• WPA Encryption Select the desired option from the drop down list. (Default is TKIP).
ENGLISH

3-3 Status
The Status page shows the status of the router.
Modem
•Modem Status Possible options are “Connecting” (when establishing an ADSL connection) and “Connected” (when the ADSL link is
active).
•DownStream Connection Speed This is the speed of the ADSL link from the ISP to the router. The actual speed is dependent upon a number of
parameters including your distance from the ISP’s ADSL equipment, and the number of other users also connected to
their equipment.
•UpStream Connection Speed This is the speed of the ADSL link from the router to the ISP.
•VPI The VPI ADSL parameter
•VCI The VCI ADSL parameter
Internet
•Connection Method Possible options are PPPoE, PPPoA, Dynamic IP, Static IP, Classical IP and Modem. These are selected in the One-Page-
Setup.
•Internet Connection This shows the status, either active or idle.
•Internet IP Address This is the IP address assigned to the router by your ISP.
LAN
•IP Address This is the first IP address that would be assigned by the internal DHCP Server. To change this value go to DHCP.
•Network Mask This is the subnet mask associated with the DHCP network IP address.
•DHCP Server Shows either enabled or disabled.
•MAC Address This is the physical MAC level address of the WAN (ADSL) port of the router.
Wireless
•Name (SSID) This is the SSID of the router. The default is “corega”.
•Region This is selected from the One-Page-Setup. Different regions support different numbers of wireless channels.
•Channel The active wireless channel. To change, go to One-Page-Setup.
•Wireless AP This shows that the internal wireless access point is active.
•Broadcast SSID This shows if the router is broadcasting the SSID name that it is using.
System
•Device Name Shows the device Name
•Firmware Version The revision of the router firmware.
ENGLISH
14

15
Chapter 4.0 Advanced Configuration
Most users will not need to change any advanced configuration on this router. This section is intended for users who are familiar with both wireless and routers.
4-1 DHCP Configuration
A DHCP (Dynamic Host Configuration Protocol) Server can automatically assign IP Addresses to each computer in your network. Unless you already have one in your LAN,
it is highly recommended that you set your router to act as a DHCP server.
Figure 15. DHCP Settings
•DHCP Server: Select “Enable” to use the DHCP server internal to the router. If you already have a DHCP server in your network, set the router's DHCP
option to “Disable”.
•Starting IP Address: Enter a numerical value, from 2 to 254, for the DHCP server to start at when assigning IP Addresses.
•Finish IP Address: Enter a numerical value, from 2 to 254, for the DHCP server to finish at when assigning IP Addresses.
•Lease Time: Enter the amount of time that DHCP clients (the PCs on LAN side) can use the IP Addresses assigned by the router’s DHCP server. Before the
time is up, DHCP clients have to request to renew the DHCP information.
•DNS Server: The IP Address of the Domain Name Server, which is currently used. Multiple DNS IP settings are common. The first DNS entry will be used in most
cases.
•WINS Server: Windows Internet Name Service (WINS Server) dynamically maps IP addresses to computer names (NetBIOS names). This allows users to access
resources by computer name instead of IP addresses. If you have a WINS server on the network, enter the IP address of the server in this box.
Click the “Save” button after making any changes, or click the “Cancel” button to exit the screen without saving any changes.
ENGLISH

4-2 DMZ
In computer networks, a DMZ (Demilitarized Zone) is a computer host or small network inserted as a “neutral zone” between a company’s private network and the outside
public network. It prevents outside users from getting direct access to computers on the local LAN.
The firewall protects computers on the local LAN from unauthorised access from computers on the ADSL WAN port or the Internet. However, some applications (such as
games) require a less secure network for them to interoperate. The DMZ settings allows a computer to be placed in this DMZ zone.
Figure 16. DMZ Settings
If you wish to enable DMZ, please check the “DMZ Enable” box and select the local computer from the drop down menu.
ENGLISH
16

17
4-3 Firewall Rules
This allows users to configure the Stateful Packet Inspection Firewall to protect the user from external hackers. The firewall is enabled as default to provide the user with
the maximum protection. Most users should not have to make any changes to the firewall
Figure 17. Firewall Rules
The default settings of the firewall are as follows:
Incoming Data Always Block This stops any unauthorised access to the router
Outgoing Data Always Allows This provides unrestricted access for users.
To change the Firewall, new rules can be created for both incoming and outgoing data flows. Use the Add, Edit, Move and Delete buttons to add new rules. Rules with a
higher number are processed before rules with a lower number. The default rule is always the last to be processed.
•Service Select from the drop down list the type of application to be covered by this rule. If a service is not listed, it can be created using Firewall Services in
section 4-4.
•Action Choose from the drop down menu of
BLOCK always
BLOCK by schedule - this allows the firewall to be enabled/disabled at particular times of the day.
ALLOW always
ALLOW by schedule - this allows the firewall to be enabled/disabled at particular times of the day.
•LAN Users Select which users on the LAN or wireless LAN will be effected by these rules.
•WAN Users Select which internet locations are effected by these rules.
•Log If selected, this allows the user to monitor the effectiveness of the firewall rules. Options are
Always - this logs all traffic, whether it meets the requirement of the rule or not. This is useful when debugging rules.
Never - select this if you do not want to monitor traffic.
Match - select this if you want to log instances when the rule matches.
Not Match - select this if you want to log instances when the rule does NOT match.
•Comment Add a user defined comment to a firewall rule so that you can remember why you set up the rule.
ENGLISH

4-4 Firewall Services
This section allows advanced users to create user defined services for use with the firewall. The following services are programmed as standard.
Service TCP/UDP Ports
FTP TCP 20:21
H.323 TCP 1720
HTTP TCP 80
HTTPS TCP 443
IDENT TCP 113
IRC TCP/UDP 6667
NEWS TCP 144
NFS UDP 2049
NNTP TCP 119
RCMD TCP 512
REAL-AUDIO TCP 7070
REXEC TCP 514
RTELNET TCP 107
RTSP TCP/UDP 554
SFTP TCP 115
SMTP TCP 25
SNMP TCP/UDP 161
SNMP-TRAP TCP/UDP 162
SQL-NET TCP 1521
SSH TCP/UDP 22
STRMWORKS UDP 1558
TACACS UDP 49
TELNET TCP 23
TFTP UDP 69
VDOLIVE TCP 7000
VPN-IPSEC UDP 500
VPN-L2TP UDP 1701
VPN-PPTP TCP 1723
To enter a new service, use the Add,Edit and Delete buttons.
ENGLISH
18