Intellinet 516211 User manual

Broadband Router User Guide

Broadband Router User Guide
March, 2001
Limitation of Liability
Information in this document is subject to change without notice. The material contained herein is supplied without
representation or warranty of any kind. Therefore assumes no responsibility and shall have no liability of any kind
arising from the supply or use of this document or the material contained herein.

1
About This User Guide
Welcome to the Networking world of multifunction routers! Thank you for investing
in a Broadband Router. We are dedicated to provide the most efficient, easy to
configure, and trouble free equipment in the networking industry.
This manual is intended as a basic introduction to your Broadband Router. It supplies
enough information to make the Broadband Router operational in most common
environments: connecting to the Internet , receiving calls from dial-in users, or
connecting to another network through the telephone network.
We’ll describe how to use your web browser to configure the Broadband Router and
to perform some basic operations, e.g. upgrading the software, or viewing the
connection log, a task which may be useful in ongoing operations. Finally, we’ll tell
you how to obtain information and help for subjects that are beyond the scope of this
manual.
This manual consists of seven chapters and three appendixes:
Chapter One: Introduction, explains the features and capabilities of the Broadband
Router.
Chapter Two: Installing the Broadband Router,gives the simple steps you follow to
install the Broadband Router and configure your workstations.
Chapter Three: Configuring the Broadband Router,explains how to log in to the
ARM Manager, describes the browser screen, and provides the steps needed to
configure your Broadband Router for specific applications. It provides easy-to-follow
instructions for quick Internet access and provides a guide to the most popular
Broadband Router configurations.
Chapter Four: Advanced Configuration, provides information on advanced router
configuration setup.
Chapter Five: Managing the Broadband Router,explains the management features
of the Broadband Router.
Chapter Six: Messages, lists messages you may see in the ARM message window,
and what they mean.
Appendix A: Specifications
Appendix B: Glossary
Appendix C: Warranty, Copyright, FCC Notice
Safety Warnings
•The Broadband Router is not intended to be serviced by the user. Do not open
the case.
•This product is intended to be supplied by a Listed Direct Plug-In Power Unit
marked "Class 2" and rated 9 V ac, 1 A.

iii
Contents
Chapter 1 Introduction?
Overview of the Broadband Router Multifunction Router
Broadband Router Applications
Accessing the Internet
Accessing Servers from the Public Network
Creating a Virtual Private Network (VPN)
A Configuration Example
A Security Overview
A Physical Look at the Broadband Router
The Connectors on the Back
The LEDs on the Front
Chapter 2 Installing the Broadband Router
Installing the Broadband Router
Setting Up a Windows PC for Configuring the Broadband Router
Connecting more Devices through a Hub to the Broadband Router
Chapter 3 Configuring the Broadband Router
Internet Access in Five Minutes
Using Different Browsers for Broadband Router Configuration
Logging On
Customizing the ARM for Your Specific Needs
Overview of The ARM Browser Screen
What is a Connection Profile?
Selecting Internet Access Interface
Configuring a Basic Internet Access Profile via EWAN
Setting Up Internet Access with Advanced Features
Modifying Public and Private IP Addresses
Setting the System Time
Setting Internet Access Time Restrictions
Chapter 4 Advanced Configuration
Configuring and Using Port Address Translation
Configuring Port Address Translation
Static DHCP Assignments
Creating VPN Connection Profiles
To Configure VPN Remote Office Access Profiles
Set up a VPN Connection Profile
Advanced Options Setup
Packet Filtering
A Packet Filtering Overview
Configuring IP Packet Rules
Configuring IPX Packet Rules
To Configure Advanced IP Settings

iv
To Configure Advanced IP Settings
The IP Routing Table
To Configure IPX Settings
The IPX Routing Table
The IPX SAP Table
To Enable Bridging Learning
Chapter 5 Managing the Broadband Router
How to View the Connection Log
How to Upgrade the Broadband Router Features/Software
How to Save or Clear Configuration Changes
How to Reset the Broadband Router
How to Change the ARM Password
What if I Forget the Password?
How to Customize the ARM Interface
How to Configure General System Settings
Chapter 6 Messages
Messages
Appendix A Broadband Router Specifications
Appendix B Glossary
Appendix C Warranty, Copyrights, FCC Notice
Warranty
Copyrights
FCC Part 15 Notice

1-1
1Broadband Router
1Introduction
This chapter gives the introduction to the Broadband Router.
What’s in the Box?
Your Broadband Router box should contain the items listed below
•1 Broadband Router
•1 AC Adapter, AC 9V 1A
•1 female to female 9 pin cable to connect PC COM port and Broadband Router
Console port.
•1 UTP CAT5 crossover LAN cable to connect EWAN port and ADSL / Cable
Modem
Note: Some Cable Modems use straight through cable
•1 CD-ROM containing the online documentation
•1 Quick Start Guide
•1 Warranty and registration card
Overview of the Broadband Router
The Broadband Router is a small desktop router that sits between your local Ethernet
network and a remote network (e.g., the Internet or a remote office). The Broadband
Router contains an EWAN port connecting toInternet via external ADSL/Cable
modem , a COM port worked as a managemant Console , and a one-port 10/100
Ethernet switch. Data comes into the Broadband Router from the local LAN and then
is “routed” to the remote network.In addition to its capability to route IP/IPX traffic,
the Broadband Router also acts as a bridge for other network protocols, such as
Appletalk or SNA.
Broadband Router Applications
The main functions of the Broadband Router
-to allow devices on your LAN to access the Internet,
-to access servers from the public network,
-to create Virtual Private Network (VPN).
Accessing the Internet
The most common use for the Broadband Router is to provide Internet access, so that
everyone on your LAN can surf the web and send/receive email or files.

1-2
The Broadband Router automatically acquires the necessary IP address when the
connection to the Internet is established. You don’t need to apply for and assign an IP
address to each PC or workstation on your network.
ivate wide area network with Broadband Router via external ISDN TA/modem and
provide Internet access for everyone on your LAN to surf the web and send/receive e-
mail or files simultaneously
Figure 1-1 Internet Access
Accessing Servers from the Public Network
If you want special servers to be accessible by remote users across the Internet (e.g.,
an e-mail server, an FTP server, or a web server), you can configure the Broadband
Router to proxy the service from its own address. This means that the remote user can
address the router as if it were the special server and the Broadband Router will re-
direct this connection to the appropriate computer on the network.
Creating a Virtual Private Network (VPN)
Virtual Private Networking (VPN) provides a means to connect remote LANs over
the Internet, while only local toll charges to an Internet Service Provider are incurred
even if the two LANs are physically remote to each other.
To create a VPN between two sites, a special connection called “tunnel” followed by
a VPN data session has to be set up over the Internet. After a VPN data session is set
up, data can be sent over it, optionally encrypted to prevent unauthorized access.
Additionally, VPN tunnels allow IP, IPX and Bridging traffic to flow across the
Internet, including NetBIOS information (for Windows networking) encapsulated
within IP or IPX packets.
All information required for a VPN is defined in a VPN profile, which contains, for
example, the IP address of the VPN partner and authentication information (including
the encryption key that is used).
When a PC from one site tries to communicate with a device on the other site for the

1-3
first time, the VPN tunnel and data session establishment process will be triggered
automatically. For the originating side, first the destination IP address will be used to
search for the corresponding VPN profile. Based on the information conifgured in the
matched VPN profile, a VPN tunnel is created, a VPN data session will be created
and authentication information exchanged, then data traffic can start to flow. For the
destination side, when a VPN data session creation is requested, the router will base
on the originating IP address to search for a matched profile. Once found, the
Broadband Router will use the information in the matched profile to authenticate the
incoming "call", after which data transfer can begin.
More than one VPN data sessions can be established over the same tunnel.
See chapter 4 for detailed configuration instructions.
Figure 1-2 Creating a Virtual Private Network
AConfiguration Example
In Figure 1-3, two Broadband Routers are installed in two different locations. They
are connected to the Internet via ADSL/Cable modem, allowing users to surf the
Web. They are also connected to each other through the telephone network, forming a
private company network.
Figure 1-3 Connecting Two Private Networks
This example also illustrates an important feature of the Broadband Router that a
private device can be accessed from the Internet by mapping the application port
number to a port number on the Broadband Router. In this case, an Internet user
references the URL http://206.112.113.6,which was assigned to the Broadband

1-4
Router by the ISP, and the Broadband Router will translate that address to
192.168.168.112, port 80.
All devices on both LANs (except for the Web servers) are configured to obtain their
IP addresses automatically (i.e., from the built-in DHCP server in the Broadband
Router). Since the Web Server on LAN #1 must have the same address all the time,
this machine has a statically configured DHCP address. These IP addresses are only
used in the local LAN environment, these devices naturally form a private network
(with default IP network address of 192.168.168.0) and are not accessible by users
across the Internet (if they are not mapped). In Broadband Router, it is possible to
assign public IP addresses obtained from your ISP and they will be accessible by
users across the Internet. These public addresses can co-exist in the same LAN
private address segment.
In order to let the LAN to LAN communications work, the default private network
address (192.168.168.0) for one of the above Broadband Router has to be changed
(to 192.168.170.0 in the above example). The traffic between these two networks is
secure because data are sent across the telephone network via a direct phone call.
ASecurity Overview
More and more people are concerned about security of their data in the Internet
The Broadband Router provides many ways to help make your network and your
data secure:
•All dial-in users and LAN-to-LAN communications require PPP PAP/CHAP/
MS-CHAP authentication (basically user name and password)
•The Broadband Router also supports call-back for dial-in users - so that remote
user are really who they say they are
•The Broadband Router uses a private IP addressing scheme to prevent devices on
your LAN from access by outside users
•Console, Telnet and ARM support password protection
•DES encryption with PPP/ECP negotiation is supported for VPN connections
•IP packet filtering may be used to futher enhance security requirements
A Physical Look at the Broadband Router
The Connectors on the Back
The following illustration shows the rear panel of Broadband Router.
(1 )1 RJ-45 10/100 Switch connectors for connecting to PCs and workstations or
connecting external Ethernet hub, or switch with uplink switch on port 1.
(2) 1 RJ-45 EWAN connector for connecting to Internet via ADSL/Cable modem
(3) 1 RS-232 DB-9 connector to be a Console port connecting to PC.
(4) 1 AC power connector for connecting through an AC power adapter (included as
part of the product) to the wall power outlet
(5) 1 power ON/OFF switch

1-5
Figure 1-4 Broadband Router Connectors
The LEDs on the Front
There are 7 LEDs on the front of the Broadband Router that show connection and
traffic status of Power, PPPoE, EWAN and LAN ports:
Figure 1-5 LEDs
Note: Some of the features above are optional. Please refer to Appendix A for
the details.
POWER
LED1 LED2 LED3 LED4 LED5 LED6 LED7
PPPoE COL ACTCOL ACT10/100 Power
ON PPPoE
Linkage N/A N/A N/A N/A 100Mbps Power On
OFF
No
PPPoE
Linkage N/A N/A N/A N/A 10 Mbps Power Off
FLASH
Sending
or
Receiving
Packet Collision
Sending
or
Receiving
Packet Collision
Sending
or
Receiving
Packet N/A N/A
LAN
EWAN

2-1
2Broadband Router
2Installing the BroadbandRouter
Now you should be ready to connect your Broadband Router devices on your LAN .
Follow these steps to install the Broadband Router:
Step 1 Connect ADSL/Cable modem to the Broadband Router EWAN port using
crossover UTP CAT-5 LAN Cable.
Note: Some Cable Modems use straight through cable
Step 2 Connect PCs/Workstations totheLAN port of the Broadband Router. If
you are connecting a hub or switch, see “Connecting more Devices
through a Hub or switch to the Broadband Router “ later in this
chapter.
Step 3 Connect the AC adapter t the Broadband Routerand an electrical outlet.
Figure 2-1 Broadband Router Connectors

2-2
Setting Up a Windows PC for Configuring the
Broadband Router
This section describes how to configure a PC on the LAN in order to communicate with
the Broadband Router
These PCs need to have an Ethernet interface cards installed,and be connected to the
Broadband Router either directly( to its LAN ports) or indirectly through an external
hub or switch. It shoud also have TCP/IP installed, enabled, and configured to obtain an
IP address automatically( i.e., through a DHCP server).
If TCP/IP is not already installed, follow the steps below for its installation.
Note: Any TCP/IP capable workstation can communicate with the Broadband
Router. To configure workstations other than Windows 95/98/NT, please consult the
manufacturer’s documentation.
Step 1 Connect your PC to one of the Broadband Router Switch ports. If you
connect to LAN port ,you should use a straight LAN cable and set the
Uplink switch to the Normal position. or use a crossover LAN cable and set
the Uplink switch to Uplink. See Figure 2-3..
Step 2 From the Win95/98 Start Button, select Settings, then Control Panel. The
Win95/98 Control Panel displays.
Step 3 Double-click on the Network icon.
Step 4 Check your list of Network Components in the Network window
Configuration tab. If TCP/IP has already been installed, go to Step 8.
Otherwise, select Add to install it now.
Installed components
Add button
Look for TCP/IP
Client for Microsoft Networks

2-3
Step 5 In the new Network Component Type window, select Protocol.
Step 6 In the new Select Network Protocol window, select Microsoft in the
Manufacturers area.
Step 7 In the Network Protocols area of the same window, select TCP/IP, then
click OK. You may need your Win95/98 CD to complete the installation.
After TCP/IP installation is complete, go back to the Network window
shown in Step 4.
Step 8 Select TCP/IP in the list of Network Components.
Step 9 Click Properties, and check the settings in each of the TCP/IP Properties
window:
-Bindings Tab: both Client for Microsoft Networks and File and printer
sharing for Microsoft Networks should be selected.
-Gateway Tab: All fields should be blank
-DNS Configuration Tab: Disable DNS should be selected
-IP Address Tab: Obtain IP address automatically should be selected
Step 10 When the Broadband Router connected to the LAN (and powered on),
reboot the PC. After the PC is re-booted, you should be ready to configure
the Broadband Router. See Chapter 3.
Select
Microsoft Select
TCP/IP
TCP/IP Properties Tabs
(IP Address Tab shown)

2-4
Connecting more Devices through a Hub to the
Broadband Router
The Broadband Router provides four switch ports to allow up to four PCs or
Workstations to be connected to it directly. If you want to connect more devices, you
can connect an external hub or switch to LAN port ,provided LAN port has been
configured as an Uplink port.
Figure 2-2 Connecting a Hub or Switch to the Broadband Router
The uplink switch is used to set LAN port as an uplink port. To set the uplink switch:
Step 1 Plug one end of a normal UTP CAT-5 cable into Port of the Broadband
Router , and the other end of the UTP CAT-5 cable into any normal
Ethernet hub, or switch.
Step 2 Set the switch to the Uplink position. See Figure 2-3
Figure 2-3 Uplink Switch

3-1
3Broadband Router
3Configuring the Broadband Router
Once you have completed the installation stage and have configured a PC properly as
described in chapter two, you are ready to configure the Broadband Router for actual
applications.
This chapter describes how to configure your Broadband Router for basic Internet
access, as well as for the following configurations:
•To set up Internet access with advanced features
•To set the system time
•To configure Internet access time restrictions
Internet Access in Five Minutes
In this section you will be shown how to configure the Broadband Router for basic
Internet access in less than five minutes using the web browser-based Acess Router
Manager (ARM).
Using Different Browsers for Broadband Router
Configuration
To configure your Broadband Router, you can use popular browsers such as
Netscape 4.5 and Internet Explorer 5.x. The following describes, after each browser is
brought up, how to use it to start the ARM interface:
Netscape Navigator 4.5 (or newer):
In the Location box (where you normally enter the URL address), enter the default
private IP address of the Broadband Router followed by hitting the return key:
http://192.168.168.230
Internet Explorer 5.0 (or newer):
In the Address box (where you normally enter the URL address), enter the default
private IP address of the Broadband Router followed by hitting the return key:
http://192.168.168.230
Logging On
After entering the default IP address as described above, a password prompt screen

3-2
will ask you to log on. If you are logging on for the first time, you should accept the
factory default password (which is “password”). The password is always displayed as
a string of asterisks (“*”). Clicking the Log On button will begin a Access Router
Manager (ARM) session. The next time you log in, even if you have modified the
password , the default password (“password”) will still be used as the default. You
need to change it to the correct password before you will be let in.
No matter what password you use, each character will always be displayed in the
logon prompt as a “*”.
If you forget the password, you need to follow steps described in chapter 5 to be able
to log on.
The Broadband Router comes with a basic feature set installed. If you have purchased
additional features from your distributor, you will also be given a “feature key”. In
this case, you will need to click the box below the Log On button that says “Check
here to install additional features” before you click the Log On button.

3-3
Customizing the ARM for Your Specific Needs
When you log on for the first time, the ARM Customization screen will be
automatically displayed, allowing you to customize the ARM session to suit your
own specific needs:
The choices available depend on what feature keys have been installed. The
selections you make determine what configuration menu and buttons will appear in
the ARM interface. For example, if you select Basic Internet Access only, the ARM
interface will display only buttons and screens that you need for basic Internet access.
If you subsequently use ARM to configure the Broadband Router for other
applications, you can return to this ARM Customization screen to “re-customize”
your ARM interface by selecting Customize User Interface from the ARM Menu
(on the left hand side of the ARM interface).
Basic Internet Access
Select this option if you need basic Internet access. This will enable you to configure
Internet Access for all of your LAN users.
Internet Access with Advanced Configuration
Select this option if you want to configure advanced options, such as changing the
private IP address (e.g., when you intend to create your own private WAN among
multiple Broadband Router ), or adding a public IP address (e.g., when you want to
install servers on the LAN which are accessible from the Internet).
Share Netware (IPX) Resource(optional)
Select this option if you use Novell servers on your network and want to allow dial-in
users or remote offices to share them.
Note: The choice displayed in this screen depend on the feature keys which are
installed in your system.
Overview of The ARM Browser Screen
Before you begin the configuration, take a moment to look at the ARM screen. Look
for these areas:

3-4
•ARM Menu
•Configuration Window
•Message Window
•Status Window
ARM Menu
This part of the browser screen contains items you can click to display the various
screens for configuring your Broadband Router, including EWAN, connection
profiles, and protocols, as well as system monitoring, tools, and help.
Configuration Window
This is the window where the actual configuration screens appear. Before any
selection of the configuration is made, the window shows a picture of the Broadband
Router with cables and peripheral devices that can be connected to it.
Message Window
Whenever appropriate, the Broadband Router will display system status or error
messages in this window. For example, when you try to connect to the Internet, if you
had configured your password incorrectly, the message window will display an
appropriate message.
System Status Monitoring Window
This section displays statistics and the status of all interfaces.This window is invoked
AAARM Menu AAMessage Window AAConfiguration Window

3-5
as a separate browser screen from the main ARM browser screen and appears
automatically each time you start ARM. If you close this window, you can always
restart it or bringing it to the foreground by clicking Monitoring - System Status from
the ARM Menu. It does not contain any toolbars or browser menu buttons. Although
the main ARM screen will timeout, this screen will not, and will continue to be
operational as long as it is active.
The following statistics are reported for each interface:
Device: lists all interfaces, including both the physical interface (i.e., the LAN port,
the EWAN port).
Status:indicates the current state of the interface:
(I) For LAN: this will always show Up.
(II) For EWAN:
(i) PPPoE:
profile name: Sow the profile you used if the interface is up and
funtioning.
No call: Means that this interface is not connected and the profile of
EWAN port is idle.
Down: Means that this interface is not connected and no EWAN profile
added.
(ii) DHCP & No:
profile name: Show the profile you used if the interface is up and
funtioning.
Down: Means that this interface is not connected.
Xmt Pkts: indicates the number of packets that have been transmitted through the
interface.
Rcv Pkts: indicates the number of packets that the interface has received.
Err Pkts: indicates the number of error (bad) packets that have been received.
Disconnect: if an active interface has been selected (highlighted), clicking this button
will cause the connection to be taken down. The LAN interface is not affected by this
operation.
Clear: resets the selected statistics values to zero.
Device Rcv Pkts Err PktsXmt Pkts
LAN
EWAN Up
Status
Down 192 191 0 0 0 0
Disconnect Clear

3-6
What is a Connection Profile?
To access the Internet, you need to apply for an account with an ISP (Internet Service
Provider), who will provide you the ISP Account name and ISP Account Password
that you need to call, as well as phone number if necessary to dial-up to your ISP.
You need to enter such information into a “connection profile” in the Broadband
Router. Likewise, a connection profile needs to be created for each dial-in user, each
remote office, or each VPN user.
Essentially, a connection profile contains all information that the Broadband Router
needs to access the Internet, or support a remote dial-in user, or set up a connection
with a remote office, or create a VPN. Such information includes dial-up phone
numbers, authentication information (the local user name and password and possibly
the remote site user name password), plus other information that may be required for
the communication.
Selecting Internet Access Interface
Select EWAN port to connect ADSL/Cable Modem.
The following screen show you the interface configuration ,please select EWAN to
be your interface from the Broadband Router.
Configuring a Basic Internet Access Profile (via
EWAN)
To configure an Internet access connection profile, from the ARM menu, press
Connection Profiles. If there are no other profiles at this point, you will immediately
enter a profile configuration screen. First decide what interface to use for Internet
access.
Step 1
Note: The ARM Customization screen is displayed the very first time you invoke
the ARM tool. To return to this screen, select Customize User Interface from the
ARM Menu.