LevelOne GBR-4001 User manual

GBR-4001
4-WAN Gigabit Broadband VPN Router
User Manual
V1.0
Digital Data Communications Asia Co., Ltd.
http://www.level1.com

Table of Contents
Table of Contents........................................................................................................................ II
Introduction.............................................................................................................................. 1
0.1Factory settings............................................................................................................. 1
0.2Contact Us ................................................................................................................... 1
Chapter 1. Product Overview ............................................................................................. 2
1.1 Key characteristics........................................................................................................ 2
1.2 Specifications ............................................................................................................... 3
Chapter 2. Hardware Installation........................................................................................ 4
2.1 Panel description........................................................................................................... 4
2.2 Precaution for installation.............................................................................................. 5
2.3 Preparing for installation ............................................................................................... 5
2.4 Hardware Installation .................................................................................................... 6
2.5 Hardware connection..................................................................................................... 7
Chapter 3. Login to the device........................................................................................... 8
3.1 Configuring the correct network settings......................................................................... 8
3.2 Login to the device........................................................................................................ 9
Chapter 4. Configuration Wizard ..................................................................................... 12
4.1 WAN1 Port Configuration - Dynamic IP access............................................................. 12
4.2 WAN1 port configuration - Static IP access................................................................... 13
4.3 WAN1 configuration -- PPPoE access........................................................................... 13
Chapter 5. Start menu ....................................................................................................... 15
5.1 Configuration Wizard.................................................................................................. 15
5.2 Interface status............................................................................................................ 15
5.3 Interface Traffic .......................................................................................................... 16
5.4 Restart Device ............................................................................................................ 17
Chapter 6. Network parameters ....................................................................................... 18
6.1 Configuration of WAN port.......................................................................................... 18
6.1.1 Network interface configuration ........................................................................... 18
6.1.2 Internet Connection List....................................................................................... 22
6.2 Line combination........................................................................................................ 24
6.2.1 Description of line combination function............................................................... 25
6.2.2 Global Settings.................................................................................................... 26
6.2.3 Load Balancing List............................................................................................. 28
6.2.4 Detection and Bandwidth..................................................................................... 28
6.2.5 Identity Binding .................................................................................................. 29
6.3 Configuration of LAN port .......................................................................................... 30
6.4 DHCP server .............................................................................................................. 31
6.4.1 DHCP server configuration .................................................................................. 31
6.4.2 Static DHCP ....................................................................................................... 33

6.4.3 DHCP auto binding ............................................................................................. 35
6.4.4 DHCP client list .................................................................................................. 35
6.4.5 Case of DHCP configuration ................................................................................ 36
6.5 DDNS Settings ........................................................................................................... 38
6.5.1 DDNS authentication........................................................................................... 39
6.6 UPnP ......................................................................................................................... 40
Chapter 7. Advanced Configuration................................................................................ 41
7.1 NAT and DMZ configuration ....................................................................................... 41
7.1.1 Description of NAT functions............................................................................... 41
7.1.2 Port Forwarding .................................................................................................. 42
7.1.3 NAT rules ........................................................................................................... 45
7.1.4 DMZ.................................................................................................................. 47
7.1.5 NAT and DMZ configuration instances ................................................................. 48
7.2 Static Route Settings ................................................................................................... 50
7.3 Policy routing............................................................................................................. 52
7.3.1 Enable policy routing........................................................................................... 53
7.3.2 Policy routing configuration................................................................................. 53
7.4 Anti-NetSniper ........................................................................................................... 55
7.5 Port mirroring............................................................................................................. 55
7.6 Port VLAN................................................................................................................. 56
7.7 SYSLOG configuration ............................................................................................... 58
Chapter 8. User management........................................................................................... 59
8.1 User status.................................................................................................................. 59
8.2 IP/MAC binding ......................................................................................................... 61
8.2.1 IP/MAC binding list ............................................................................................ 62
8.2.2 IP/MAC binding configuration ............................................................................. 63
8.2.3 IP/MAC binding instances ................................................................................... 64
8.3 PPPoE Server ............................................................................................................. 67
8.3.1 PPPoE introduction ............................................................................................. 67
8.3.2 PPPoE global Settings ......................................................................................... 68
8.3.3 PPPoE account configuration ............................................................................... 70
8.3.4 PPPoE user status................................................................................................ 72
8.3.5 Export PPPoE Accounts....................................................................................... 73
8.3.6 Import PPPOE Accounts ...................................................................................... 74
8.3.7 Instance of PPPoE server configuration................................................................. 75
8.4 WEB authentication .................................................................................................... 77
8.4.1 WebAuth Global Settings..................................................................................... 77
8.4.2 Web Authentication Account List.......................................................................... 78
8.4.3 WEB Authentication Client Status ........................................................................ 80
8.5 User Group Settings .................................................................................................... 81
Chapter 9. App Control ..................................................................................................... 82
9.1 Schedule Settings........................................................................................................ 82

9.2 Application Control..................................................................................................... 83
9.2.1 Application Management List............................................................................... 84
9.2.2 Internet Application Management Settings............................................................. 84
9.2.3 Internet Application Management ......................................................................... 86
9.3 QQ white list .............................................................................................................. 88
9.4 TM Whitelist.............................................................................................................. 90
9.5 Notification ................................................................................................................ 91
9.5.1 Daily Routine Notification ................................................................................... 92
9.5.2 Account expiration notification............................................................................. 93
9.6 Application Audit........................................................................................................ 94
9.7 Policy Database .......................................................................................................... 95
Chapter 10. QoS............................................................................................................... 97
10.1 Fixed Rate Limiting .................................................................................................... 97
10.2 Flexible bandwidth...................................................................................................... 98
10.3 Session Limiting....................................................................................................... 100
Chapter 11. Firewall....................................................................................................... 102
11.1 Attack Prevention ..................................................................................................... 102
11.2 Access control .......................................................................................................... 103
11.2.1 Access Control Rule .......................................................................................... 104
11.2.2 Access control list ............................................................................................. 105
11.2.3 Access Control Settings ..................................................................................... 106
11.2.4 Access Control Settings instance .........................................................................112
11.3 Domain filtering ........................................................................................................115
11.3.1 Domain filtering Settings ....................................................................................115
11.3.2 Domain Block Notification .................................................................................116
11.4 MAC Address Filtering ..............................................................................................118
11.4.1 MAC Address Filtering.......................................................................................119
11.4.2 MAC Address Filtering Settings ......................................................................... 120
Chapter 12. VPN............................................................................................................. 122
12.1 PPTP ....................................................................................................................... 122
12.1.1 PPTP overview.................................................................................................. 122
12.1.2 PPTP list........................................................................................................... 123
12.1.3 PPTP server configuration.................................................................................. 124
12.1.4 PPTP client Settings .......................................................................................... 126
12.1.5 PPTP configuration instance............................................................................... 128
12.2 IPSec ....................................................................................................................... 133
12.2.1 IPSec Overview ................................................................................................ 133
12.2.2 IPSec list .......................................................................................................... 140
12.2.3 IPSec Settings................................................................................................... 140
12.2.4 IPSec configuration instance .............................................................................. 146
Chapter 13. System ....................................................................................................... 154
13.1 Administrator ........................................................................................................... 154

13.2 Language ................................................................................................................. 155
13.3 Time ........................................................................................................................ 155
13.4 Configuration ........................................................................................................... 157
13.5 Firmware Upgrade .................................................................................................... 158
13.6 Remote Management................................................................................................. 159
13.7 Scheduled task.......................................................................................................... 160
Chapter 14. System ....................................................................................................... 162
14.1 Interface Status ......................................................................................................... 162
14.2 System information................................................................................................... 162
14.3 System log ............................................................................................................... 163
14.3.1 System log information...................................................................................... 163
14.3.2 Log Management Settings.................................................................................. 165
Chapter 15. Customer service...................................................................................... 166
Appendix A Configuration of LAN computers............................................................ 167
Appendix A FAQ............................................................................................................. 170
B-1. How ADSL users go online? ...................................................................................... 170
B-2. How the Fixed IP access users go online?.................................................................... 171
B-3. How the Dynamic IP (Cable Modem) access users go online?....................................... 171
B-4. How to restore the device to its factory settings?.......................................................... 172
Appendix B Figure Index............................................................................................... 174
Appendix C LICENSE STATEMENT / GPL CODE STATEMENT ................................. 178

http://www.level1.com Page 1
Introduction
Tip: In order to achieve the best results, it is proposed to upgrade Windows Internet Explorer
browser to Version 6.0 or above.
0.1 Factory settings
1. The factory settings of interfaces are shown in Table 0-1.
Type of interfaces
IP address/subnet mask
LAN port
192.168.1.1/255.255.255.0
WAN port
Dynamic IP access
Table 0-1 Factory settings of interfaces
2. The factory user name of the system administrator is admin, and the factory password is
admin (case-sensitive).
0.2 Contact Us
If you have any questions during installation or use, please contact us in the following manners.
Customer service: 0800-011-110
LEVELONE discussions: http://www.level1.com
E-mail support: [email protected]

http://www.level1.com Page 2
Chapter 1. Product Overview
1.1 Key characteristics
Support DSL, FTTX+LAN and Cable Modem and other access modes
Support the configuration of dynamic WAN port
Support traffic load balancing and line backup
Support policy routing
Support intelligent bandwidth management function
Support fine speed limit
Support the DHCP server function
Support virtual server and DMZ
Support the PPPoE server functions, and provide a fixed IP allocation, account billing and
other functions
Support routine business notification, due account notification functions
Support WEB authentication function
Support Internet behavior management for users, and provide a wealth of controlling policies
Support SYSLOG configuration
Support the Internet behavior audit function
Support URL, MAC address, keyword filtering and other firewall policies
Support QQ, MSN white list
Support internal/external network attack and defense
Support network vanguard
Support port mirroring
Support port VLAN
Support user groups, time management
Support multiprotocol VPN (PPTP, IPSec)

http://www.level1.com Page 3
Support UPnP
Support dynamic domain names (3322. org, iplink. com. cn)
Support HTTP remote management
Support the WEB upgrading mode
Support backup and import of WEB configuration files
Support filtering of MAC addresses
1.2 Specifications
Meets IEEE802.3 Ethernet and IEEE802.3u Fast Ethernet standards.
Supports TCP/IP, DHCP, ICMP, NAT, PPPoE, static routes and other protocols.
The physical ports support auto negotiation function, and support the MDI/MDI - X adapter
function.
Provide status indicators.
Operating environment: Temperature: 0 ± 40℃
Height: 0-4000m
Relative humidity: 10%-90%, no condensation

Chapter 2 Hardware Installation
http://www.level1.com Page 4
Chapter 2. Hardware Installation
2.1 Panel description
Figure 2_1 Front Panel - GBR-4001
Figure 2_2 Rear Panel - GBR-4001
1. LED description
LED
lights
Description
Function
PWR
Power indicator
It is constantly on when the power supply is working properly.
SYS
System status
indicator
Flashes in the frequency of 2 times per second, and the flashing
frequency declines when the system burden is heavy; Defective
often light or often.
Link/Act
Port status
indicator
When a device is properly connected to a port, the status LED
that corresponds to the port stays lit, and it will flash if there is
flow.
100M
Port rate LED
When a device is connected to a port and after the success of
100M negotiation, the LED corresponding to the port stays lit.
Table 2_1 LED description
2. Description of interfaces
Interface
Meaning
Notes
Remarks
LAN
LAN
interface
Integrated with multiple switched
Ethernet ports.
Some products are provided with
only one LAN port.
LAN/WAN are all RJ-45
ports, and support the
adapter function.

Chapter 2 Hardware Installation
http://www.level1.com Page 5
WAN
WAN
interface
The number of WAN interfaces
depends upon product model.
Console
Serial port
Asynchronous communication serial
ports that meet the RS232 standard
Some products support the
Console port.
Table 2_2 Description of interfaces
3. Reset button
Reset button can be used to recover the device's factory settings when you forget the administrator
password. Method: In the process of charged operation, hold down the Reset button for more
than 5 seconds, and then release the button. The device will be returned to its factory settings after
operation, and automatically restart.
Note: The above operations will delete all the original device configurations; please use it
with care!
2.2 Precaution for installation
1. Make sure to install the workbench and ensure the stability of the rack.
2. Do not place any heavy objects on the device.
3. Make sure that the device is stored in a dry and ventilated area with proper heat dissipation,
and do not put it in a dirty and damp place.
4. Avoid exposing the device directly to the sunlight and keep it far away from heating
elements;
5. Please use the original power cord.
2.3 Preparing for installation
1. We have applied to local operators (ISP, such as China Telecom, China Unicom, etc.) for
broadband services.
2. Preparation of related devices:
1) Modem (This item is not required when connected directly to Ethernet).
2) Hub or switch.

Chapter 2 Hardware Installation
http://www.level1.com Page 6
3) The PC with Ethernet card and Internet Protocol (TCP/IP) installed.
4) Power socket.
3. Preparation of tools and cables: Phillips screwdriver, network cable.
2.4 Hardware Installation
Before installing the device, make sure the broadband service is normal. If you cannot access,
please contact operators (ISP) to resolve the problem.After successfully accessing to the network,
follow these steps to install the device. The power plug must be removed during installation.
1. Installed on the work bench
Place the device on a stable workbench, and the installation steps are as follows:
1. Place the device on a sufficiently large, stable and properly grounded workbench, with its bottom
up;
2. Remove the adhesive protective paper from the foot pad, and stick the 4 pads in the 4 round slots
at the bottom of the casing respectively.
3. Flip over the device, and place it on the workbench stably.
2. Install on the standard rack
Install the device on a 19-inch standard rack, and the installation steps are as follows:
1. Check the grounding and stability of the rack.
2. Install the two L-shaped brackets in the accessories on both sides of the device panel, and fix
them with the screws in the accessories.
Figure 2_3 Product rack installation drawing I
3. Place the device in the appropriate location in the rack, and support it using a tray.
4. Secure the L-shaped brackets on the guide slots (as shown in the figure below) fixed at both ends
of the rack.

Chapter 2 Hardware Installation
http://www.level1.com Page 7
Figure 2_4 Product rack installation drawing II
2.5 Hardware connection
1. Establish a LAN connection
Connect the LAN port of the router or a PC or a hub or a switch in LAN with a network cable.
2. Establish a WAN connection
Connect the WAN port of the router to the Internet with a network cable, as shown in the figure
below.
3. Connect the power supply
Before connecting the power supply, make sure that both power supply and grounding are correct.
Figure 2_5 Establish a connection to LAN and WAN
Tip: The above network connection diagram is for reference only. Please configure the
network architecture according to the actual situation and needs.

Chapter 3 Logging Device
http://www.level1.com Page 8
Chapter 3. Login to the device
This chapter describes how to configure the correct network settings for the network computers,
how to log on to the appliances and how to use shortcut icons to quickly link to the GBR-4001
website for product information and services.
3.1 Configuring the correct network settings
Before logging to the device through the WEB interface, you must correctly configure the network
computers in network settings.
First, connect your computer to the LAN port of the device, and then set the computer's IP
address.
The first step is to set the computer's TCP/IP. If it has been set correctly, skip this step.
The second step is to set the computer's IP address. You can use either of the following methods:
1. Set the computer's IP address as one of the addresses from 192.168.1.2 - 192.168.1.254, the
subnet mask is 255.255.255.0, and the default gateway is 192.168.1.1 (the LAN IP address of
the device), and the DNS server is the address provided by the local operator.
2. Set the computer's TCP/IP as "Obtain an IP address automatically". After setting, the
built-in DHCP server of the device will automatically assign IP addresses to computers.
The third step is to use the Ping command on your computer to check whether it is connected to
the device. In Start ->Operation, type in cmd, and click <OK> to open the command window.
Type in ping 192.168.1.1.
The following lists two kinds of results of executing the Ping command in the Windows XP
environment:
If the screen is shown as follows, it indicates that the computer has been successfully and a
connection is established on the device.

Chapter 3 Logging Device
http://www.level1.com Page 9
If the screen is shown as follows, it indicates that the connection between the computer and the
device fails.
When connection fails, please check the following items:
1. Hardware connections: The LEDs that correspond to the LAN port on the device panel and
the PC network card LED must be on.
2. Configuring TCP/IP properties of the computer: If the LAN IP address of the device is
192.168.1.1, then the calculated IP address must be any one of the free addresses from
192.168.1.2 - 192.168.1.254.
3.2 Login to the device
When MS Windows, Macintosh, Unix or Linux operating systems are used on the PC, the device
can be configured through browsers (such as Internet Explorer or Firefox).
Open the browser, and type in the IP address of the device's LAN port in the address bar, such as
http://192.168.1.1. After the connection is established, you will see a login interface as shown in
Pinging 192.168.1.1 with 32 bytes of data:
Reply from 192.168.1.1: bytes=32 time<1ms TTL=255
Reply from 192.168.1.1: bytes=32 time<1ms TTL=255
Reply from 192.168.1.1: bytes=32 time<1ms TTL=255
Reply from 192.168.1.1: bytes=32 time<1ms TTL=255
Ping statistics for 192.168.1.1:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms
Pinging 192.168.1.1 with 32 bytes of data:
Request timed out.
Request timed out.
Request timed out.
Request timed out.
Ping statistics for 192.168.1.1:
Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),

Chapter 3 Logging Device
http://www.level1.com Page 10
Figure 3-1. In the first use, you should log in as a system administrator, that is, enter your
administrator username and password (the factory values of username, password are Admin, case
sensitive) on the login interface, and then click <OK>.
Figure 3_1 WEB login interface
If user name and password are correct, the browser will display the homepage of the WEB
management interface, as shown in Figure 3-2. The top-right corner of the page displays device
model, software version, hardware version and other information.
Figure 3_2 Homepage of the WEB interface

Chapter 3 Logging Device
http://www.level1.com Page 11
Homepage Description:
1. The top-right corner of the page displays device model, software version, hardware version
and three fast link icons. These 3 shortcut icons have the following functions:
1) Product Discussion–Link to the discussion forums of LEVELONE’s official website to
participate in discussions about the product.
2) Knowledge Base–Link to the knowledge base of LEVELONE’s official website for
searching related technical information.
3) Booking Service–Link to the booking service page of LEVELONE’s official website,
for advance reservation of the customer service in a certain working period.
2. This page displays the main menu bar on the left.
3. The main operating page is located on the right of the page, in which you can configure
various functions of the device, view the related configuration information and status
information, etc.
4. If this is the first time for you to log in the device, the main operation page will be linked
directly to the configuration wizard page. The next chapter describes how to configure the
basic parameters required for the normal running of the device in the Start -> Configuration
wizard page.

Chapter 4 Configuration Wizard
http://www.level1.com Page 12
Chapter 4. Configuration Wizard
By reading this chapter, you can understand the basic network parameters required for the device
to access to the Internet, and these parameters are configured to connect the device to the Internet.
Before configuring "Internet Line" in the Configuration Wizard, you should properly configure the
network settings of the network computer. For specific methods, see Chapter 3 Logging in the
Device.
If this is the first time for you to log in the device, a configuration wizard homepage appears
directly in the main operating page. As shown in Figure 4_1:
Figure 4_1 Home page of configuration wizard
In logging next time, the wizard will no longer automatically pop up: When checking it, you
can go directly to the System Status page in logging next time;
Exit the wizard: Exits the Configuration Wizard and returns to the System Status page.
Next step: Enter the Selection of device access mode page.
4.1 WAN1 Port Configuration - Dynamic IP access
Configure the second page of the wizard to configure the WAN1 port address of the device. The
default WAN line access takes dynamic IP access, as shown in Figure 4-2. If your Internet access
mode is dynamic IP access, please click <Finish>, to complete the configuration of the Internet
line.

Chapter 4 Configuration Wizard
http://www.level1.com Page 13
Figure 4_2 Configuration Wizard - Dynamic IP access
4.2 WAN1 port configuration - Static IP access
If your Internet access mode is fixed IP access, please select " Static IP access" in the drop-down
list box of Figure 4-3. The following describes the meaning of the parameters for configuration
of fixed IP access.
Figure 4_3 Configuration Wizard - Static IP access
IP address, subnet mask, gateway address, primary DNS server, secondary DNS server: Fill
in the WAN IP address, subnet mask, gateway address and DNS server address that ISP (Such
as China Telecom) offers you.
4.3 WAN1 configuration -- PPPoE access
If your Internet access mode is fixed IP access, please select "PPPoE access" in the drop-down list

Chapter 4 Configuration Wizard
http://www.level1.com Page 14
box of Figure 4_4. The following describes the meaning of the parameters for PPPoE access.
Figure 4_4 Configuration wizard - PPPoE access
User name: Type in the user name the ISP provides you. If you have any questions, please
ask your ISP.
User name: Type in the password the ISP provides you. If you have any questions, please ask
your ISP.
Tip:
1. After configuring the Internet line for the WAN1 port, please click < Finish >, this
configuration will take effect.
2. For the multi-WAN device, if you need to configure more than one line for Internet access,
go to Network parameters->WAN port configuration page to configure other Internet lines.

Chapter 5 Start Menu
http://www.level1.com Page 15
Chapter 5. Start menu
Start menu is located on the top of the Level 1 menu bar of the WEB interface, providing the
interface for 4 common pages, including: configuration wizard, running status, Interface Traffic ,
device reboot. In the Start menu, you can quickly configure the basic parameters required by the
device in working properly, view the information about the interfaces, and view the statistics data
of the devices' real-time traffics.
5.1 Configuration Wizard
The Start-> Configuration wizard pages can help you to quickly configure the basic parameters
required by some devices in working normally. For details, see Chapter 4 Configuration Wizard.
5.2 Interface status
This section describes the Start-> Interface status page, in which you can view the information
about the device's interfaces. As shown in the interface in Figure 5_1, the connection type,
connection status, IP address and other information about the interfaces can be viewed.
Figure 5_1 Information about Interface status