Intellinet 516204 User manual

Broadband Router User Guide

Broadband Router User Guide
Dec. 2001
Limitation of Liability
Information in this document is subject to change without notice and does not represent a commitment on the part.
The material contained herein is supplied without representation or warranty of any kind. Therefore assumes no
responsibility and shall have no liability of any kind arising from the supply or use of this document or the material
contained herein.
This manual copyright2001. All rights reserved. No part of this document may be copied or re-used without prior
written consent

1Broadband Router
About This User Guide
Welcome to the Networking world of multifunction routers! Thank you for investing
in a Broadband Router. We are dedicated to provide the most efficient, easy to
configure, and trouble free equipment in the networking industry.
This manual is intended as a basic introduction to your Broadband Router. It supplies
enough information to make the Broadband Router operational in most common
environments: connecting to the Internet , receiving calls from dial-in users, or
connecting to another network through the telephone network.
We’ll describe how to use your web browser to configure the Broadband Router and
to perform some basic operations, e.g. upgrading the software, or viewing the
connection log, a task which may be useful in ongoing operations. Finally, we’ll tell
you how to obtain information and help for subjects that are beyond the scope of this
manual.
This manual consists of seven chapters and three appendixes:
Chapter One: Introduction, explains the features and capabilities of the Broadband
Router.
Chapter Two: Installing the Broadband Router,gives the simple steps you follow to
install the Broadband Router and configure your workstations.
Chapter Three: Configuring the Broadband Router,explains how to log in to the
ARM Manager, describes the browser screen, and provides the steps needed to
configure your Broadband Router for specific applications. It provides easy-to-follow
instructions for quick Internet access and provides a guide to the most popular
Broadband Router configurations.
Chapter Four: Advanced Configuration, provides information on advanced router
configuration setup.
Chapter Five: Managing the Broadband Router,explains the management features
of the Broadband Router.
Chapter Six: Messages, lists messages you may see in the ARM message window,
and what they mean.
Appendix A: Specifications
Appendix B: Glossary
Appendix C: Warranty, Copyright, FCC Notice
Safety Warnings
•The Broadband Router is not intended to be serviced by the user. Do not open
the case.

iii
Contents
Chapter 1 Introduction
What’s in the box?
Overview of the Broadband Router
Broadband Router Applications
Accessing the Internet
Accessing Servers from the Public Network
Supporting Dial-in Access to Your Network
Accessing Internet and Dial-In Simultaneously
Creating Your Own Private Wide Area Network
Accessing Internet and LAN-to-LAN Simultaneously
Creating a Virtual Private Network (VPN)
A Configuration Example
Security Overview
A Physical Look at the Broadband Router
The Connectors on the Back
The LEDs on the Front
Chapter 2 Installing the Broadband Router
Installing the Broadband Router
Setting Up a Windows PC for Configuring the Broadband Router
Connecting more Devices through a Hub to the Broadband Router
Chapter 3 Configuring the Broadband Router
Internet Access in Five Minutes
Using Setup Wizard
Overview of The ARM Browser Screen
What is a Connection Profile?
Internet Access Interface
Configuring a Basic Internet Access Profile via EWAN
Configuring Auto Backup
Configuring a Basic Internet Access Profile via Modem
Adding Internet Access Profiles
Deleting or Modifying Internet Access Profiles
Remote Office Access
Advanced Options for Remote Office Profiles
Deleting or Modifying Remote Office Access Profiles
Dial-in User Access
Dial-In User Advanced Options
Deleting Dial-in User Profiles
Internet Access Time Restrictions
Chapter 4 Advanced Configuration
NAT(Network Address Translation)
Virtual Server/DMZ (De-military Zone)

iv
Firewall (IP/IPX Filtering)
VPN (Virtual Private Network )
Bridging
Chapter 5 Managing the Broadband Router
System Status
Connection Log
About System
System Upgrade
Clear Configuration
Reset System
Change Password
System Time
Chapter 6 Messages
Messages
Appendix A Broadband Router Specifications
Appendix B Glossary
Appendix C Warranty, Copyrights, FCC Notice
Warranty
Copyrights
FCC Part 15 Notice

1-1
1Broadband Router
1Introduction
This chapter gives the introduction to the Broadband Router.
What’s in the Box?
Your Broadband Router box should contain the items listed below
•1 Broadband Router
•1 AC Adapter, AC 9V 1A
• 1 RS-232 serial cable with DB-9 (9 pin) male connector and RJ45 plug to
connect the Broadband Router Console/COM port and external ISDN TA/
Analog Modem
•1 female to female 9 pin adaptor to connect the Broadband Router Console port
to a PC COM port.
•1 CAT5 UTP cross-over LAN cable to connect the Broadband Router EWAN
port to an external ADSL or Cable Modem
Note: Some Cable Modems use straight LAN cable
•1 CD-ROM containing the online documentation
•1 Quick-Start Guide
Overview of the Broadband Router
The Broadband Router is a small desktop router that sits between your local Ethernet
network and a remote network (e.g., the Internet or a remote office). The Broadband
Router contains an EWAN port connecting toan external ADSL/Cable modem , a
Console/ COM port for connection to a console device(such as a PC COM port ), and
a four-port 10/100Mbps Ethernet switch for connection to PCs on your local network.
The Console/COM port can alsobe used to connect to the Internet(as a back-up such
as when the ADSL/Cable modem line is not operational) or a remote office via an
external ISDN TA or Analog Modem, and even allows a remote user(a tele-commuter
or a traveling sales person) to dial in and access your local network.
Data comes into the Broadband Router from the local LAN and then is “routed” to the
remote network, and vice versa.
Broadband Router Applications
The main functions of the Broadband Router
-to allow devices on your LAN to access the Internet,
-to allow access to the servers from the public network,

1-2
-to support remote users to directly dial in and access your LAN,
-to support direct dial-up communication with remote offices and share resources
between remnote LANs.
- to create Virtual Private Network (VPN) to allow remote LANs to share resources
with each other over the Internet.
Accessing the Internet
The most common use for the Broadband Router is to provide Internet access, so that
everyone on your LAN can surf the web and send/receive email or files.
The Broadband Router automatically acquires the necessary IP address when the
connection to the Internet is established. You don’t need to apply for and assign an IP
address to each PC or workstation on your network.
Accessing Servers from the Public Network
If you want special servers to be accessible by remote users across the Internet (e.g.,
an e-mail server, an FTP server, or a web server), you can configure the Broadband
Router to proxy the service from its own address. This means that the remote user can
address the router as if it were the special server and the Broadband Router will re-
direct this connection to the appropriate computer on the network.
Supporting Dial-in Access to Your Network
You can set up your Broadband Router to allow users to connect to your network
and share resources from home or while they’re travelling. The Broadband Router
built-in configuration program makes the necessary setup a snap. As a security
feature, after a user calls in, the Broadband Router can hang up and call that user
back at a preconfigured telephone number.
Figure 1-1 Dial-in Access
You can set up the Broadband Router to provide Internet access for everyone on your
LAN and allow a remote user to dial in to your network via V.90 Modem or ISDN TA
simultaneously.

1-3
Figure 1-2 Internet Access and Dial-in Simultaneously
Creating Your Own Private Wide Area Network
You can create your own private wide area network with Broadband Router via
external ISDN TA / modem and allow two or more remote networks to connect to one
another and share resources. The remote network can use a broadband router even
though it is a different vendor - as long as it also supports LAN to LAN
communications.
Figure 1-3 Connecting Two Networks with Broadband Router
You can set up the Broadband Router to provide Internet access for everyone on your
LAN and create your own private wide area network via V.90 Modem or ISDN TA
simultaneously.

1-4
Figure 1-4 Internet Access and LAN-to-LAN Simultaneously
Creating a Virtual Private Network (VPN)
Virtual Private Networking (VPN) provides a means to connect remote LANs over
the Internet, while only local toll charges to an Internet Service Provider are incurred
even if the two LANs are physically remote to each other.
To create a VPN between two sites, a special connection called “tunnel” followed by
a VPN data session has to be set up over the Internet. After a VPN data session is set
up, data can be sent over it, optionally encrypted to prevent unauthorized access.
Additionally, VPN tunnels allow IP, IPX and Bridging traffic to flow across the
Internet, including NetBIOS information (for Windows networking) encapsulated
within IP or IPX packets.
All information required for a VPN is defined in a VPN profile, which contains, for
example, the IP address of the VPN partner and authentication information (including
the encryption key that is used).
When a PC from one site tries to communicate with a device on the other site for the
first time, the VPN tunnel and data session establishment process will be triggered
automatically. For the originating side, first the destination IP address will be used to
search for the corresponding VPN profile. Based on the information conifgured in the
matched VPN profile, a VPN tunnel is created, a VPN data session will be created
and authentication information exchanged, then data traffic can start to flow. For the
destination side, when a VPN data session creation is requested, the router will base
on the originating IP address to search for a matched profile. Once found, the
Broadband Router will use the information in the matched profile to authenticate the
incoming "call", after which data transfer can begin.
More than one VPN data sessions can be established over the same tunnel.
See chapter 4 for detailed configuration instructions.

1-5
Figure 1-5 Creating a Virtual Private Network
A Configuration Example
In Figure 1-6, two Broadband Routers are installed in two different locations. They
are connected to the Internet via ADSL/Cable modem, allowing users to surf the
Web. They are also connected to each other through the telephone network, forming a
private company network.
Figure 1-6 Connecting Two Private Networks
This example illustrates an important feature of the Broadband Router: a private
device can be accessed from the Internet by mapping the application port number to a
port number on the Broadband Router. In this case, an Internet user accesses a web
server with IP address 206.112.113.6, which is the Broadband Router’s IP address.
When properly configured, the Broadband Router will translate that port 80 of that
address to port 80 of the private IP address, 192.168.168.112.
In this example, all devices on both LANs (except for the Web servers) are
configured to obtain their IP addresses automatically (i.e., from the built-in DHCP
server in the Broadband Router). It is important for the Web Server on LAN #1 to
have the same IP address all the time (so that users can use the same IP address to
access it), it also means the Broadband Router should also be assigned a static IP
address.
IP addresses assigned to the devices on the LAN are only used in the local LAN
environment (with default IP network address of 192.168.168.0), therefore these
devices naturally form a private network and are not accessible by users across the
Internet, unless they are mapped. It is still possible to assign public IP addresses
obtained from your ISP to devices on your LAN so that they can be accessed by users

1-6
across the Internet. These public addresses can co-exist with private IP address on the
same LAN.
In order for LAN to LAN communication to work in such configurations, the default
private network Broadband Routeraddress (192.168.168.0) for one of the above
Broadband Router has to be changed (to 192.168.170.0 in the above example). The
traffic between these two networks is secure because data are sent across the
telephone network via a direct phone call.
ASecurity Overview
More and more people are concerned about security of their data in the Internet
The Broadband Router provides many ways to help make your network and your
data secure:
•All dial-in users and LAN-to-LAN communications require PPP PAP/CHAP/
MS-CHAP authentication (basically user name and password)
•The Broadband Router also supports call-back for dial-in users - so that remote
user are really who they say they are
•The Broadband Router uses a private IP addressing scheme to prevent devices on
your LAN from access by outside users
•Console, Telnet and ARM support password protection
•DES encryption with PPP/ECP negotiation is supported for VPN connections
•IP packet filtering may be used to futher enhance security requirements
A Physical Look at the Broadband Router
The Connectors on the Back
The following illustration shows the rear panel of Broadband Router.
(1 )4 RJ-45 10/100 Switch connectors for connecting to PCs and workstations or
connecting external Ethernet hub, or switch with uplink switch on port 1.
(2) 1 RJ-45 EWAN connector for connecting to Internet via ADSL/Cable modem
(3) 1 RJ-45 connector to be a COM port connecting to external ISDN TA/ modem
or to be a Console port connecting to PC.
(4) 1 AC power connector for connecting through an AC power adapter (included as
part of the product) to the wall power outlet
(5) 1 power ON/OFF switch

1-7
Figure 1-7 Broadband Router Connectors
The LEDs on the Front
There are 20 LEDs on the front of the Broadband Router that show connection and
traffic status of Power, PPPoE, COM, EWAN and LAN ports:
Figure 1-8 LEDs
Note: Some of the features above are optional. Please refer to Appendix A for
the details.
LAN COM EWAN POWER
LED1 LED2 LED3 LED4 LED5 LED6 LED7 LED8 LED9 LED10
FDX/CO
L
LNK/AC
T100/10 RX TX CD OH
ACT/
LINK COL PPPoE
ON FDX
Physical
Linkage 100Mbps N/A N/A
Carrier
Detect Off-Hook N/A
Physical
Linkage
PPPoE
Linkage
OFF HDX
No
Physical
Linkage 10Mbps No Data No Data
No
Carrier On-Hook N/A
No
Physical
Linkage
No
PPPoE
Linkage
FLASH Collision
Sending
or
Receiving N/A
Receivin
g Data
Sending
Data N/A N/A
Sending
or
Receivin
g Packet N/A
Sending or
Receiving
Packet

2-1
2Broadband RouterBroadband Router
2Installing the BroadbandRouter
Now you should be ready to connect your Broadband Router devices on your LAN .
Follow these steps to install the Broadband Router:
Step 1 Connect ADSL/Cable modem to the Broadband Router EWAN port using
crossover CAT5 UTP LAN cable.
Note: Some Cable Modems use straight LAN cables
Step 2 Connect a PC/Workstation to one of the LAN ports of the Broadband
Router, such as port 1 or port 2 (using a straight or cross-over LAN cable,
respectively). See below for more details of how to connect to an external
repeater hub or LAN switch.
Step 3 Connect the AC adapter to the Broadband Router and an electrical outlet.
Figure 2-1 Broadband Router Connectors

2-2
Setting Up a Windows PC for Configuring the
Broadband Router
This section describes how to configurea PC on the LAN in order to communicate with
the Broadband Router.
The PCneed to have an Ethernet interface cards installed,and be connected to the
Broadband Router either directly(to its LAN ports) or indirectly through an external
LAN hub or switch. It should also have TCP/IP installed,enabled, and configured to
obtain an IP address automatically(i.e., through a DHCP server).
If TCP/IP is not already installed, follow the steps below for its installation.
Note: Any TCP/IP capable workstation can communicate with the Broadband
Router. To configure workstations other than Windows 95/98/NT, please consult the
manufacturer’s documentation.
Step 1 Connect your PC to one of the Broadband Router Switch ports. If you
connect to LAN port 1, you should use a straight LAN cable and set the
Uplink switch to the Normal position. or use a crossover LAN cable and set
the Uplink switch to Uplink. See Figure 2-3..
Step 2 From the Win95/98 Start Button, select Settings, then Control Panel. The
Win95/98 Control Panel displays.
Step 3 Double-click on the Network icon.
Step 4 Check your list of Network Components in the Network window
Configuration tab. If TCP/IP has already been installed, go to Step 8.
Otherwise, select Add to install it now.
Installed components
Client for Microsoft Networks
Add button
Look for TCP/IP

2-3
Step 5 In the new Network Component Type window, select Protocol.
Step 6 In the new Select Network Protocol window, select Microsoft in the
Manufacturers area.
Step 7 In the Network Protocols area of the same window, select TCP/IP, then
click OK. You may need your Win95/98 CD to complete the installation.
After TCP/IP installation is complete, go back to the Network window
shown in Step 4.
Step 8 Select TCP/IP in the list of Network Components.
Step 9 Click Properties, and check the settings in each of the TCP/IP Properties
window:
-Bindings Tab: both Client for Microsoft Networks and File and printer
sharing for Microsoft Networks should be selected.
-Gateway Tab: All fields should be blank
-DNS Configuration Tab: Disable DNS should be selected
-IP Address Tab: Obtain IP address automatically should be selected
Step 10 When the Broadband Router connected to the LAN (and powered on),
reboot the PC. After the PC is re-booted, you should be ready to configure
the Broadband Router. See Chapter 3.
Select
Microsoft Select
TCP/IP
TCP/IP Properties Tabs
(IP Address Tab shown)

2-4
Connecting more Devices through a Hub to the
Broadband Router
The Broadband Router provides four LAN ports to allow up to four PCs or
Workstations to be connected to it directly. If you want to connect more devices, you
can connect an external hub or switch to LAN port 1 using a straight LAN cable if the
Uplink switch is set to the Uplink position, or using a cross-over LAN cable if the
Uplink switch is set to the Normal position.
Figure 2-2 Connecting a Hub or Switch to the Broadband Router
The uplink switch is shown in the following picture.
Figure 2-3 Uplink Switch

3-1
30Broadband Router
3Configuring the Broadband Router
Once you have completed the installation stage and have configured a PC properly as
described in chapter two, you are ready to configure the Broadband Router for actual
applications.
This chapter describes how to configure your Broadband Router for basic Internet
access.
Internet Access in Five Minutes
You can configure your Broadband Router quickly by the Setup Wizard at you
first time logging on the router.
Setup Wizard
The Wizard will lead you step by step to configure the router for your Internet Access
by connecting ADSL/Cable modem.
You can change your Internet Access configuration by clicking the Setup Wizard
item on the top of left side in ARM(Access Router Manager) menu.
1. Open your browser and type http://192.168.168.230 in the browser’s address
box, it is the default IP address of your router.
2. Logging On
After entering the default IP address as described above, a password prompt screen
will ask you to log on. If you are logging on for the first time, you should accept the
factory default password (which is “password”). The password is always displayed as
a string of asterisks (“*”). Clicking the Log On button will begin a Access Router
Manager (ARM) session. The next time you log in, even if you have modified the
password , the default password (“password”) will still be used as the default. You
need to change it to the correct password before you will be let in.
No matter what password you use, each character will always be displayed in the
logon prompt as a “*”.
If you forget the password, you need to follow steps described in chapter 5 to be able
to log on.

3-2
3. Enter your ISP information
There are 4 ways to connect to your ISP, these 4 methods can be found in the “Obtain
IP Addresses” section, they include:
(1) Static
(2) via DHCP
(3) via PPP over Ethernet
(4) via PPTP
(1) Some ISPs may give you a static IP, if this is the case you’ll need to select
Static in Obtain IP addresses and set the following settings.
After you finish your settings, please click Save.
Enter the following information:
The file name “df_profile” is the default file name of your Internet Access
connection which is configured by Setup Wizard.
Obtain IP Addresses: The method you want to connect to your ISP.
EWAN IP Address: The IP Address of your EWAN.

3-3
EWAN IP Netmask: The IP Netmask of your EWAN.
ISP Gateway IP Address: The IP address of your ISP Gateway.
(2) If your ISP will automatically give you an IP address(Cable connections),
select via DHCP the following screen will appear.
Please enter the following information:
Obtain IP Address: via DHCP(will automatically get an IP from your ISP for you),
(Optional) Host Name(System Name): The Host Name provided by your system.
(Optional) Clone MAC: If you want to assign the router a cloned MAC address,
please select enable.
(Optional) MAC Address: Input the MAC address that the ISP requires to establish
a connection.
Note: Some ISPs require a specific MAC address in order to establish a
connection.
(3) Some ISP’s require the PPPoE protocol in order to connect to the Internet. If
you choose via PPP over Ethernet the following will appear.
Please enter the following information:

3-4
Obtain IP Addresses:Some DSL-based ISPs use PPPoE to establish communication
with end-users.
ISP Account Name: The user name of your ISP account.
ISP Account Password: The password of your ISP account.
(Optional) Service Name: The Service Name provided by your ISP, if one is
required, otherwise, leave it empty.
(Optional) Access concentrator Name: The Access Concentrator Name provided by
your ISP, if one is required, otherwise, leave it empty.
Idle Timeout (0-3600 seconds): The default value of the idle timeout is 120 seconds,
which represents the number of seconds of inactivity over the connection. When this
value is reached, the Broadband Router will disconnect the call. You can change the
idle timeout value to anything between 0 to 3600 seconds. But if you select 0, the
connection will never be timed out.
(4) Some ISP’s require the PPTP protocol in order for you to connect to the Internet.
If you choose via PPTP the following screen will appear.
Obtain IP Addresses: Some DSL-based ISPs use PPTP to establish communication
with end-users.
(Optional) Host Name(System Name): You can give your router a name.
PPTP local IP Address: IP address of Broadband Router for the PPTP connection.
Consult your ISP for this information. check with your ISP to see if PPTP is used.
PPTP IP Netmask: IP network mask for the PPTP Tunnel. Consult your ISP for this
information.
PPTP Remote IP Address: IP address of the ISP for the PPTP Tunnel. consult your
ISP for this information.
ISP Account Name: The user name of your ISP account.
ISP Account password: The password of your ISP account.
Idle Timeout (0-3600 seconds): The default value of the idle timeout is 120seconds.
It represents the number of seconds of inactivity over the connection. When this value
is reached, the Broadband Router will disonnect the connection. You can change the