Planet Networking & Communication MH-2001 User manual

Multi-Homing Security Gateway
Overview
Thank you for purchases MH-2001, the Multi-Homing Security Gateway. As Inter-
net becomes essential for your business, the only way to prevent your Internet
connection from failure is to have more than one connection. PLANET’s Multi-Hom-
ing Security Gateway, MH-2001, reduces the risks of potential shutdown if one of
the Internet connections fails. Moreover, it allows you to perform load-balancing by
distributing the traffic through two WAN connections.
This quick installation guide includes the following sections:
1. Package Content
2. Hardware Description: Hardware outlook and panel description
3. DMZ Operation Mode: NAT and Transparent mode introduction.
4. Quick setup: Quick setup through Web browser
5. Further Configuration
1. Package Content
MH-2001
 MH-2001 x 1
 User’s Manual CD-ROM x 1
 Quick Installation Guide x 1
 Power Adapter x 1
 Cat5 Cable x 1
 Mat x 4
If any of the above items are missing or damaged, contact your local dealer for
support.

2
2. Hardware Description
2.1 Front Panel
- Port denition
Port Description
WAN1, WAN2 Connect to your xDSL/Cable modem or
other Internet connection devices
LAN Connect to your local PC, switch or
other local network device
DMZ Connect to your server or other net-
work device
- LED / Button denition
LED / Button Description
Reset Button Press this button to restore factory de-
fault setting
PWR Power is supplied to this device.
STATUS Blinks to indicate this devise is being
turned on and booting. After one min-
ute, this LED indicator will stop blink-
ing, it means this device is now ready
to use.
WAN1, WAN2, LAN, DMZ Steady on indicates the port is con-
nected to other network device.
Blink to indicates there is traffic on the
port

3
2.2 Rear Panel
DC Power: connect one end of the power supply to this port, the other end to the
electrical wall outlet.
Connecting Example:

4
3. DMZ Operation Mode
The MH-2001 DMZ port supports three operation modes, Disable, NAT and Trans-
parent. In Disable mode, the DMZ port is not active. In transparent mode, MH-
2001 works as proxy with forward DMZ packet to WAN and forward WAN packet to
DMZ. The DMZ and WAN side IP addresses are in the same subnet. In NAT mode,
DMZ side user will share one public IP address of WAN port to make Internet con-
nection. Please find the following two pictures for example.
3.1 Transparent Mode Connection Example
The WAN1 and DMZ side IP addresses are on the same subnet. This application is
suitable if you have a subnet of IP addresses and you do not want to change any
IP configuration on the subnet.

5
3.2 NAT Mode Connecting Example
DMZ and WAN1 IP addresses are on the different subnet. This provides higher
security level than transparent mode.

6
4. Quick Setup
4.1 Web Conguration
STEP 1:
Connect both the Administrator’s PC and the LAN port of the MH-2001 to a hub
or switch. Make sure there is a link light on the hub/switch for both connections.
The MH-2001 has an embedded web server used for management and configura-
tion. Use a web browser to display the configurations of the MH-2001 (such as
Internet Explorer 4(or above) or Netscape 4.0(or above) with full java script sup-
port). The default IP address of the MH-2001 is 192.168.1.1 with a subnet mask of
255.255.255.0. Therefore, the IP address of the Administrator PC must be in the
range between 192.168.1.2– 192.168.1.254
If the company’s LAN IP Address is not subnet of 192.168.1.0, (Ex. LAN IP Address
is 172.16.0.1), then the Administrator must change his/her PC IP address to be
within the same range of the LAN subnet. Reboot the PC if necessary.
By default, the MH-2001 is shipped with its DHCP Server function enabled. This
means the client computers on the LAN network including the Administrator PC can
set their TCP/IP settings to automatically obtain an IP address from the MH-2001.
The following table is a list of private IP addresses. These addresses may not be
used as a WAN IP address.
10.0.0.0 ~ 10.255.255.255
172.16.0.0 ~ 172.31.255.255
192.168.0.0 ~ 192.168.255.255

7
STEP 2:
Once the Administrator PC has an IP address on the same network as the MH-
2001, open up an Internet web browser and type in http://192.168.1.1 in the
address bar.
A pop-up screen will appear and prompt for a username and password. A username
and password is required to connect to the MH-2001. Enter the default login user-
name and password of Administrator (see below).
Username: admin
Password: admin
Click OK.

8
4.2 Congure WAN 1 interface:
After entering the username and password, the MH-2001 WEB UI screen will dis-
play. Select the Interface tab on the left menu. Click on WAN from the sub-function
list, and a sub-function list will be displayed.
Click Modify button to configure WAN NO. 1 and the following page will be dis-
played.

Alive Indicator Site IP: This feature is used to ping an address for
detecting WAN connection status.
ICMP: You can select an IP address by Assist, or type an IP address
manually.
DNS: You can select a DNS IP and Domain name by Assist,or type the
related data manually.
For PPPoE (ADSL User):
This option is for PPPoE users who are required to enter a username and
password in order to connect.
Username: Enter the PPPoE username provided by the ISP.
Password: Enter the PPPoE password provided by the ISP.
IP Address provided by ISP:
Dynamic: Select this if the IP address is automatically assigned
by the ISP.
Fixed: Select this if you were given a static IP address.
Enter the IP address that is given to you by your ISP.
Max. Upstream/Downstream Bandwidth: The bandwidth provided
by ISP.
Auto-Disconnect: The PPPoE connection will automatically discon-
nect after a length of idle time (no activities). Enter in the amount of
idle minutes before disconnection. Enter ‘0’ if you do not want the PPPoE
connection to disconnect at all.
For Dynamic IP Address (Cable Modem User): This option is for users
who are automatically assigned an IP address by their ISP, such as cable
modem users. The following fields apply:
MAC Address: This is the MAC Address of the device. Some ISPs
require specified MAC address. If the required MAC address is your PC’s,
click Clone MAC Address.
Hostname: This will be the name assign to the device. Some cable
modem ISP assign a specific hostname in order to connect to their net-
work. Please enter the hostname here. If not required by your ISP, you do
not have to enter a hostname.
Max. Upstream/Downstream Bandwidth: The bandwidth provided
by ISP.

For Static IP Address: This option is for users who are assigned a static
IP Address from their ISP. Your ISP will provide all the information needed
for this section such as IP Address, Netmask, Gateway, and DNS. Use this
option also if you have more than one public IP Address assigned to you.
IP Address: Enter the static IP address assigned to you by your ISP.
This will be the public IP address of the WAN 1 port of the device.
Netmask: This will be the Netmask of the WAN 1 network. (Ex.
255.255.255.0)
Default Gateway: This will be the Gateway IP address.
Domain Name Server (DNS): This is the IP Address of the DNS serv-
er.
Max. Upstream/Downstream Bandwidth: The bandwidth provided
by ISP.
4.3 Congure WAN 2 interface:
If you want to connect WAN 2 to another ISP connection, click Modify
button of WAN No. 2 then repeat above procedures to setup.
4.4 Congure DMZ interface:
Depends on your network requirement, you can disable the DMZ port,
make DMZ port transparent to WAN 1 or enable NAT function on it.
To configure the DMZ port, select the Interface tab on the left menu, then
click on DMZ, the following page is shown.
Please refer to section 3 for select the mode you need and configure rela-
tive IP parameters.

11
4.5 Congure Policy
STEP 1:
Click on the Policy tab from the main function menu, and then click on Outgoing
(LAN to WAN) from the sub-function list.
STEP 2:
Click on New Entry button.
STEP 3:
When the New Entry option appears, enter the following
configuration:
Source Address – select “Inside_Any”
Destination Address – select “Outside_Any”
Service - select “ANY”
Action - select “Permit”
Click on OK to apply the changes.

12
STEP 4:
The configuration is successful when the screen as below is displayed.
Please make sure that all the computers that are connected to the LAN port
have their Default Gateway IP Address set to the MH-2001’s LAN IP Address (Ex.
192.168.1.1). At this point, all the computers on the LAN network should gain ac-
cess to the Internet immediately. If you want to configure the advanced filter func-
tion on the MH-2001, please refer to the Policy section in the user’s manual.
5. Further conguration
The above steps introduce simple configuration for MH-2001. For further configu-
ration, please refer to the user’s manual on the CD. If you have other questions,
please contact the local dealer or distributor where you purchased this prod-
uct.