LevelOne FBR-2000 User manual

LevelOne
FBR-2000
2-WAN Load Balance
Broadband Router
User Manual
V1.3

Table of Contents
System....................................................................................................................... 1
Admin ..................................................................................................................4
Settings................................................................................................................8
Entering the Settings window .......................................................................8
Exporting Multi-Homing Gateway Gateway settings.....................................9
Date/Time.......................................................................................................... 17
Synchronizing the Multi-Homing Gateway with the System Clock......................17
Multiple Subnet.................................................................................................. 19
Multiple Subnet settings .............................................................................20
Add Multiple Subnet NAT Mode. ................................................................ 21
Modify Multiple Subnet...............................................................................22
Delete Multiple Subnet ...............................................................................23
Hacker Alert....................................................................................................... 30
Auto Detect functions ................................................................................. 30
Route Table....................................................................................................... 34
Entering the Route Table screen ................................................................ 34
Route Table functions................................................................................. 34
Adding a new Static Route ......................................................................... 35
Removing a Static Route............................................................................ 37
DHCP ................................................................................................................ 38
Entering the DHCP window........................................................................38
DHCPAddress functions............................................................................ 38
DMZ Interface :........................................................................................... 39
Enabling DHCP Support.............................................................................40
Dynamic DNS.................................................................................................... 42
Modify dynamic DNS.................................................................................. 46
Delete Dynamic DNS.................................................................................. 47
Language........................................................................................................... 48

Permitted IPs..................................................................................................... 49
Add Permitted IP Address...........................................................................50
Modify Permitted IPAddress ......................................................................51
Remove Permitted IP addresses................................................................ 52
Logout................................................................................................................ 53
Interface................................................................................................................... 55
LAN....................................................................................................................56
Internal Interface.........................................................................................57
WAN.................................................................................................................. 58
Entering the Interface menu .......................................................................58
WAN 1/2 Interface ...................................................................................... 60
DMZ...................................................................................................................66
Address ................................................................................................................... 68
LAN....................................................................................................................69
Entering the LAN window ...........................................................................69
Adding a new LAN Address........................................................................ 70
Modifying an LAN Address .........................................................................71
Removing an LAN Address ........................................................................ 72
LAN Group......................................................................................................... 73
Entering the LAN Group window ................................................................ 73
Modifying an LAN Group ............................................................................75
Removing an LAN Group ........................................................................... 76
WAN.................................................................................................................. 77
Entering the WAN window.......................................................................... 77
Adding a new WAN Address....................................................................... 78
Modifying an WAN Address........................................................................ 79
Removing an WAN Address.......................................................................80
WAN Group.......................................................................................................81
Entering the WAN Group window............................................................... 81
Adding an WAN Group...............................................................................82

Modify an WAN Group................................................................................83
Removing an WAN Group.......................................................................... 84
DMZ...................................................................................................................85
Service..................................................................................................................... 94
Pre-defined........................................................................................................ 95
Entering a Pre-defined window................................................................... 95
Custom..............................................................................................................96
Entering the Custom window...................................................................... 96
Adding a new Service.................................................................................97
Modifying Custom Services........................................................................ 98
Removing Custom Services .......................................................................99
Group...............................................................................................................100
Accessing the Group window ...................................................................100
Adding Service Groups.............................................................................101
Modifying Service Groups......................................................................... 102
Removing Service Groups........................................................................ 103
Schedule................................................................................................................ 104
Accessing the Schedule window .............................................................. 105
Adding a new Schedule............................................................................ 106
Modifying a Schedule............................................................................... 107
Content filtering.................................................................................................... 109
URL Blocking................................................................................................... 110
Entering the URL blocking window............................................................110
Adding a URL Blocking policy....................................................................111
Modifying a URL Blocking policy ...............................................................112
Script Blocking................................................................................................. 115
Virtual Server ........................................................................................................ 117
How to use Virtual Server and mapped IP.................................................118
Mapped IP.......................................................................................................119

Entering the Mapped IP window............................................................... 120
Adding a new IP Mapping......................................................................... 121
Modifying a Mapped IP.............................................................................122
Removing a Mapped IP............................................................................123
Virtual Server................................................................................................... 124
Adding a Virtual Server.............................................................................125
Modifying a Virtual Server IP Address ......................................................127
Removing a Virtual Server........................................................................128
Setting the Virtual Server‟s services ......................................................... 129
Adding New Virtual Server Service Configuration ....................................130
Modifying the Virtual Server configurations .............................................. 132
VPN ........................................................................................................................ 135
IPSec Autokey................................................................................................. 136
PPTP Server....................................................................................................218
Entering the PPTP Server window ........................................................... 218
Modifying PPTP Server Design ................................................................ 219
Adding PPTP Server ................................................................................ 220
Modifying PPTP Server ............................................................................222
Removing PPTP Server............................................................................ 223
PPTP Client..................................................................................................... 224
Entering the PPTP Client window............................................................. 224
Adding a PPTP Client............................................................................... 225
Modifying PPTP Client..............................................................................227
Removing PPTP Client............................................................................. 228
Policy..................................................................................................................... 229
Outgoing..........................................................................................................230
Adding a new Outgoing Policy.................................................................. 232
Modifying an Outgoing policy....................................................................234
Removing the Outgoing Policy ................................................................. 235
Enabled Monitoring function:.................................................................... 236
Incoming..........................................................................................................239

Enter Incoming window ............................................................................ 239
Adding an Incoming Policy ....................................................................... 241
Modifying Incoming Policy........................................................................ 243
Removing an Incoming Policy .................................................................. 244
Log...................................................................................................................... 257
Traffic Log........................................................................................................258
Entering the Traffic Log window................................................................ 258
Traffic Log Table.......................................................................................259
Downloading the Traffic Logs ................................................................... 259
Clearing the Traffic Logs...........................................................................261
Event Log ........................................................................................................ 262
Entering the Event Log window................................................................ 262
Downloading the Event Logs.................................................................... 263
Clearing the Event Logs ...........................................................................264
Download Logs......................................................................................... 266
Log Backup......................................................................................................268
Enable Log Mail Support & Syslog Message............................................269
Disable Log Mail Support & Syslog Message...........................................270
Alarm................................................................................................................ 271
Traffic Alarm ....................................................................................................272
Entering the Traffic Alarm window ............................................................ 272
Downloading the Traffic Alarm Logs ......................................................... 273
Clearing the Traffic Alarm Logs................................................................. 274
Event Alarm..................................................................................................... 275
Entering the Event Alarm window............................................................. 275
Clearing Event Alarm Logs....................................................................... 277
Statistics........................................................................................................ 278

What is Statistics ...................................................................................... 278
How to use Statistics ................................................................................278
WAN Statistics................................................................................................. 279
Entering the Statistics window by Time..................................................... 280
Policy Statistics................................................................................................ 282
Entering the Statistics window.................................................................. 282
Entering the Policy Statistics.................................................................... 283
Status............................................................................................................... 284
Interface Status................................................................................................ 285
Entering the Interface Status window ....................................................... 285
ARP Table....................................................................................................... 286
Entering the ARP Table window................................................................ 286
DHCP Clients .................................................................................................. 287
Entering the DHCP Clients window .......................................................... 287
Setup Examples...................................................................................... 288

- 1-
System
The device FBR-2000 2-WAN Broadband Router Administration and monitoring control is set
by the System Administrator. The System Administrator can add or modify System settings
and monitoring mode. The sub Administrators can only read System settings but not modify
them. In System, the System Administrator can:
(1) Add and change the sub Administrator‟s names and passwords;
(2) Back up all Multi-Homing Gateway settings into local files;
(3) Set up alerts for Hackers invasion.
What is System?
“System” is the managing of settings such as the privileges of packets that pass through the
FBR-2000 2-WAN Broadband Router and monitoring controls. Administrators may manage,
monitor, and configure Multi-Homing Gateway settings. All configurations are “read-only” for
all users other than the Administrator; those users are not able to change any settings for the
Multi-Homing Gateway.
The eleven sub functions under System are Admin, Setting, Date/Time, Multiple Subnet,
Hack Alert, Route Table, DHCP, DNS Proxy, Dynamic DNS, Logout and Software Update.
Admin: has control of user access to the Multi-Homing Gateway. He/she can add/remove
users and change passwords.
Setting: The Administrator may use this function to backup Multi-Homing Gateway
configurations and export (save) them to an “Administrator” computer or anywhere on the
network; or restore a configuration file to the device; or restore the Multi-Homing Gateway
back to default factory settings. Under Setting, the Administrator may enable e-mail alert
notification. This will alert Administrator(s) automatically whenever the Multi-Homing Gateway
has experienced unauthorized access or a network hit (hacking or flooding). Once enabled,
an IP address of a SMTP(Simple Mail Transfer protocol) Server is required. Up to two e-mail
addresses can be entered for the alert notifications.
Date/Time: This function enables the Multi-Homing Gateway to be synchronized either with
an Internet Server time or with the client computer‟s clock.

- 2-
Multiple Subnet This function allows local port to set multiple subnet works and connect with
the internet through different WAN 1 IP Addresses.
Hacker Alert When abnormal conditions occur, the Multi-Homing Gateway will send an e-mail
alert to notify the Administrator, and also display warning messages in the Event window of
Alarm.
Route Table Use this function to enable the Administrator to add static routes for the
networks when the dynamic route is not efficient enough.
DHCP Administrator can configure DHCP (Dynamic Host Configuration Protocol) settings for
the LAN (LAN) network.
DNS-Proxy The Multi-Homing GatewayAdministrator may use the DNS Proxy function to
make the Multi-Homing Gateway act as a DNS Server for the Internal and DMZ network. All
DNS requests to a specific Domain Name will be routed to the Multi-Homing Gateway‟s IP
address. For example, let‟s say an organization has their mail server (i.e., mail.MH200.com)
in the DMZ network (i.e. 192.168.10.10). The outside Internet world may access the mail
server of the organization easily by its domain name, providing that theAdministrator has set
up Virtual Server or Mapped IP settings correctly. However, for the users in the Internal
network, their WAN DNS server will assign them a public IP address for the mail server. So
for the Internal network to access the mail server (mail.MH2000.com), they would have to go
out to the Internet, then come back through the Multi-Homing Gateway to access the mail
server. Essentially, the internal network is accessing the mail server by a real public IP
address, while the mail server serves their request by a NAT address and not a real one.
This odd situation occurs when there are servers in the DMZ network and they are binded to
real IP addresses. To avoid this, set up DNS Proxy so all the Internal network computers will
use the Multi-Homing Gateway as a DNS server, which acts as the DNS Proxy.
Dynamic DNS The Dynamic DNS (require Dynamic DNS Service) allows you to alias a
dynamic IP address to a static hostname, allowing your device to be more easily accessed by
specific name. When this function is enabled, the IP address in Dynamic DNS Server will be
automatically updated with the new IP address provided by ISP

- 3-
Language The software provides English version, German version, Traditional Chinese
Version and Simplified Chinese Version for you to choose.
Permitted IP Only the authorized IP address is permitted to manage the Multi-Homing
Gateway.
Logout Administrator logs out the Multi-Homing Gateway. This function protects your
system while you are away.
Software Update: Administrators may visit distributor‟s web site to download the latest
firmware. Administrators may update the device firmware to optimize its performance and
keep up with the latest fixes for intruding attacks.

- 4-
Admin
On the left hand menu, click on Setup, and then select Admin below it. The current list of
Administrator(s) shows up.
Settings of the Administration table
Administrator Name: The username of Administrators for the Multi-Homing Gateway. The
user admin cannot be removed.
Privilege: The privileges of Administrators (Admin or Sub Admin)
The username of the main Administrator is Administrator with read / write privilege.
Sub Admins may be created by the Admin by clicking New Sub Admin. Sub Admins have
read only privilege.
Configure: Click Modify to change the “Sub Administrator‟s” password and click Remove to
delete a “Sub Administrator.”

- 5-
Adding a new Sub Administrator
Step 1. In the Admin window, click the New Sub Admin button to create a new Sub
Administrator.
Step 2. In the Add New Sub Administrator window:
Sub Admin Name: enter the username of new Sub Admin.
Password: enter a password for the new Sub Admin.
Confirm Password: enter the password again.
Step 3. Click OK to add the user or click Cancel to cancel the addition.

- 6-
Changing the Sub-Administrator’s Password
Step 1. In the Admin window, locate the Administrator name you want to edit, and click on
Modify in the Configure field.
Step 2. The Modify Administrator Password window will appear. Enter in the required
information:
Password: enter original password.
New Password: enter new password
Confirm Password: enter the new password again.
Step 3. Click OK to confirm password change or click Cancel to cancel it.

- 7-
Removing a Sub Administrator
Step 1. In the Administration table, locate the Administrator name you want to edit, and click
on the Remove option in the Configure field.
Step 2. The Remove confirmation pop-up box will appear.
Step 3. Click OK to remove that Sub Admin or click Cancel to cancel.

- 8-
Settings
The Administrator may use this function to backup the FBR-2000 2-WAN Broadband Router
configurations and export (save) them to an “Administrator” computer or anywhere on the
network; or restore a configuration file to the device; or restore the Multi-Homing Gateway
back to default factory settings.
Entering the Settings window
Click Setting in the System menu to enter the Settings window. The Multi-Homing
Gateway Configuration settings will be shown on the screen.

- 9-
Exporting Multi-Homing Gateway Gateway settings
Step 1. Under Multi-Homing Gateway Configuration, click on the Download button next
to Export System Settings to Client.
Step 2. When the File Download pop-up window appears, choose the destination place in
which to save the exported file. The Administrator may choose to rename the file
if preferred.

- 10 -
Importing Multi-Homing Gateway settings
Step 1. Under Multi-Homing Gateway Configuration, click on the Browse button next to
Import System Settings. When the Choose File pop-up window appears, select
the file to which contains the saved Multi-Homing Gateway Settings, then click OK.
Step 2. Click OK to import the file into the Multi-Homing Gateway or click Cancel to cancel
importing.

- 11 -
Restoring Factory Default Settings
Step 1. Select Reset Factory Settings under Multi-Homing Gateway Configuration.
Step 2. Click OK at the bottom-right of the screen to restore the factory settings.

- 12 -
Enabling E-mail Alert Notification
Step 1. Select Enable E-mail Alert Notification under E-Mail Settings. This function will
enable the Multi-Homing Gateway to send e-mail alerts to the System Administrator
when the network is being attacked by hackers or when emergency conditions
occur.
Step 2. Device Name: Enter the Device Name.
Step 3. Sender Address(Required by some ISPs): Enter the Sender Address.(Some ISPs
need Required.)
Step 4. SMTP Server IP: Enter SMTP server‟s IP address.
Step 5. E-Mail Address 1: Enter the first e-mail address to receive the alarm notification.
Step 6. E-Mail Address 2: Enter the second e-mail address to receive the alarm notification.
(Optional)
Step 7. Click OK on the bottom-right of the screen to enable E-mail alert notification.

- 13 -
Web Management (WAN Interface) (Remote UI management)
The administrator can change the port number used by HTTP port anytime.
(Remote UI management)
Step 1. Set Web Management (WAN Interface). The administrator can change the port
number used by HTTP port anytime.