Planet Networking & Communication MH-5001 User manual

Multi-Homing UTM Security Gateway User’s Manual
I
Multi-Homing
UTM Security Gateway
MH-5001
User’s Manual

Multi-Homing UTM Security Gateway User’s Manual
II
Copyright
Copyright (C) 2006 PLANET Technology Corp. All rights reserved.
The products and programs described in this User’s Manual are licensed products of PLANET Technology, This User’s Manual
contains proprietary information protected by copyright, and this User’s Manual and all accompanying hardware, software, and
documentation are copyrighted.
No part of this User’s Manual may be copied, photocopied, reproduced, translated, or reduced to any electronic medium or
machine-readable form by any means by electronic or mechanical. Including photocopying, recording, or information storage and
retrieval systems, for any purpose other than the purchaser's personal use, and without the prior express written permission of
PLANET Technology.
Disclaimer
PLANET Technology does not warrant that the hardware will work properly in all environments and applications, and makes no
warranty and representation, either implied or expressed, with respect to the quality, performance, merchantability, or fitness for a
particular purpose.
PLANET has made every effort to ensure that this User’s Manual is accurate; PLANET disclaims liability for any inaccuracies or
omissions that may have occurred.
Information in this User’s Manual is subject to change without notice and does not represent a commitment on the part of PLANET.
PLANET assumes no responsibility for any inaccuracies that may be contained in this User’s Manual. PLANET makes no commitment
to update or keep current the information in this User’s Manual, and reserves the right to make improvements to this User’s Manual
and/or to the products described in this User’s Manual, at any time without notice.
If you find information in this manual that is incorrect, misleading, or incomplete, we would appreciate your comments and
suggestions.
CE mark Warning
This is a class A device, in a domestic environment, this product may cause radio interference, in which case the user may be required
to take adequate measures.
WEEE Warning
To avoid the potential effects on the environment and human health as a result of the presence of hazardous
substances in electrical and electronic equipment, end users of electrical and electronic equipment should
understand the meaning of the crossed-out wheeled bin symbol. Do not dispose of WEEE as unsorted municipal
waste and have to collect such WEEE separately
Trademarks
The PLANET logo is a trademark of PLANET Technology.
This documentation may refer to numerous hardware and software products by their trade names. In most, if not all cases, these
designations are claimed as trademarks or registered trademarks by their respective companies.
Customer Service
For information on customer service and support for the Multi-Homing Security Gateway, please refer to the following Website URL:
http://www.planet.com.tw and email: [email protected]
Before contacting customer service, please take a moment to gather the following information:

Multi-Homing UTM Security Gateway User’s Manual
III
♦Multi-Homing Security Gateway serial number and MAC address
♦Any error messages that displayed when the problem occurred
♦Any software running when the problem occurred
♦Steps you took to resolve the problem on your own
Revision
User’s Manual for PLANET Multi-Homing Security Gateway
Model: MH-5001
Rev: 4.0 (July, 2006)
Part No. EM-MH5Kv4 (2081-B90070-000)

Multi-Homing Security Gateway User’s Manual
I
Table of Contents
About this user manual...................................................................................................................................................................7
What’s New in Version 4?..............................................................................................................................................................8
Chapter 1 Quick Start ............................................................................................................. 10
1.1 Check Your Package Contents.................................................................................................................................10
1.2 Five steps to configure MH-5001 quickly ...............................................................................................................10
1.3 Wiring the MH-5001 ...............................................................................................................................................12
1.4 Default Settings and architecture of MH-5001........................................................................................................12
1.5 Using the Setup Wizard...........................................................................................................................................14
1.6 Internet Connectivity ...............................................................................................................................................18
1.6.1 LAN1-to-WAN1 Connectivity.......................................................................................................................18
1.6.2 WAN1-to-DMZ1 Connectivity......................................................................................................................19
1.7 NAT/Router Mode and Transparent Mode..............................................................................................................22
1.7.1 NAT/Router Mode .........................................................................................................................................22
1.7.2 Transparent Mode ..........................................................................................................................................22
Chapter 2 System Overview................................................................................................. 25
2.1 Typical Example Topology......................................................................................................................................25
2.2 Changing the LAN1 IP Address ..............................................................................................................................26
2.2.1 From LAN1 to configure MH-5001 LAN1 network settings.........................................................................26
2.2.2 From CLI (command line interface) to configure MH-5001 LAN1 network settings ...................................27
2.2.3 Web GUI design principle..............................................................................................................................27
2.2.4 Rule principle.................................................................................................................................................28
Chapter 3 Basic Setup............................................................................................................. 31
3.1 Demands..................................................................................................................................................................31
3.2 Objectives................................................................................................................................................................31
3.3 Methods ...................................................................................................................................................................31
3.4 Steps.........................................................................................................................................................................32
3.4.1 Setup WAN1 IP..............................................................................................................................................32
3.4.2 Setup DMZ1, LAN1 Status............................................................................................................................33
3.4.3 Setup WAN1 IP alias .....................................................................................................................................35
3.4.4 Setup WAN Backup.......................................................................................................................................37
Chapter 4 System Tools ......................................................................................................... 39
4.1 Demands..................................................................................................................................................................39
4.2 Objectives................................................................................................................................................................39
4.3 Methods ...................................................................................................................................................................39
4.4 Steps.........................................................................................................................................................................43
4.4.1 General settings..............................................................................................................................................43
4.4.2 DDNS setting .................................................................................................................................................45
4.4.3 DNS Proxy setting..........................................................................................................................................45
4.4.4 DHCP Relay setting .......................................................................................................................................46
4.4.5 SNMP Control................................................................................................................................................46
4.4.6 Change MH-5001 interface............................................................................................................................47
Chapter 5 Remote Management ......................................................................................... 50

Multi-Homing Security Gateway User’s Manual
II
5.1 Demands..................................................................................................................................................................50
5.2 Methods ...................................................................................................................................................................50
5.3 Remote Management Access Methods....................................................................................................................50
5.4 Steps.........................................................................................................................................................................52
5.4.1 Telnet..............................................................................................................................................................52
5.4.2 SSH ................................................................................................................................................................52
5.4.3 WWW ............................................................................................................................................................52
5.4.4 HTTPS............................................................................................................................................................53
5.4.5 SNMP.............................................................................................................................................................53
5.4.6 ICMP..............................................................................................................................................................53
Chapter 6 Authentication ...................................................................................................... 54
6.1 Demands..................................................................................................................................................................54
6.2 Methods ...................................................................................................................................................................54
6.3 Steps.........................................................................................................................................................................54
6.3.1 Local Setting ..................................................................................................................................................54
6.3.2 Pop3(s) Setting...............................................................................................................................................55
6.3.3 Imap(s) Setting...............................................................................................................................................56
6.3.4 Radius Setting ................................................................................................................................................56
6.3.5 LDAP Setting.................................................................................................................................................57
6.3.6 Exempt Host...................................................................................................................................................58
Chapter 7 NAT............................................................................................................................ 59
7.1 Demands..................................................................................................................................................................59
7.2 Objectives................................................................................................................................................................60
7.3 Methods ...................................................................................................................................................................60
7.4 Steps.........................................................................................................................................................................61
7.4.1 Setup Many-to-one NAT rules.......................................................................................................................61
7.4.2 Setup Virtual Server for the FtpServer1.........................................................................................................64
7.5 NAT modes introduction .........................................................................................................................................67
7.5.1 Many-to-One type..........................................................................................................................................67
7.5.2 Many-to-Many type........................................................................................................................................68
7.5.3 One-to-One type.............................................................................................................................................69
7.5.4 NAT modes & types.......................................................................................................................................69
Chapter 8 Routing.................................................................................................................... 71
8.1 Demands..................................................................................................................................................................71
8.2 Objectives................................................................................................................................................................72
8.3 Methods ...................................................................................................................................................................72
8.4 Steps.........................................................................................................................................................................72
8.4.1 Add a static routing entry...............................................................................................................................72
8.4.2 Add a policy routing entry..............................................................................................................................74
8.4.3 The priority of the routing..............................................................................................................................76
Chapter 9 IP/Services grouping......................................................................................... 77
9.1 Demands..................................................................................................................................................................77
9.2 Objectives................................................................................................................................................................77
9.3 Methods ...................................................................................................................................................................77
9.4 Steps.........................................................................................................................................................................77

Multi-Homing Security Gateway User’s Manual
III
9.4.1 Setup Address.................................................................................................................................................77
9.4.2 Setup Service..................................................................................................................................................81
9.4.3 Setup Schedule...............................................................................................................................................83
Chapter 10 Firewall ................................................................................................................. 85
10.1 Demands..................................................................................................................................................................85
10.2 Objectives................................................................................................................................................................85
10.3 Methods ...................................................................................................................................................................85
10.4 Steps.........................................................................................................................................................................86
10.4.1 Block internal PC session (LAN ÆWAN)....................................................................................................86
10.4.2 Setup Anti-DoS..............................................................................................................................................88
Chapter 11 IP/MAC Binding................................................................................................. 91
11.1 Demands..................................................................................................................................................................91
11.2 Objectives................................................................................................................................................................91
11.3 Methods ...................................................................................................................................................................91
11.4 Steps.........................................................................................................................................................................91
Chapter 12 VPN Technical Introduction .......................................................................... 95
12.1 VPN benefit.............................................................................................................................................................95
12.2 Related Terminology Explanation...........................................................................................................................95
12.2.1 VPN................................................................................................................................................................95
12.2.2 IPSec ..............................................................................................................................................................95
12.2.3 Security Association.......................................................................................................................................95
12.2.4 IPSec Algorithms ...........................................................................................................................................95
12.2.5 Key Management ...........................................................................................................................................96
12.2.6 Encapsulation.................................................................................................................................................97
12.2.7 IPSec Protocols ..............................................................................................................................................97
12.3 Make VPN packets pass through MH-5001.............................................................................................................98
Chapter 13 Virtual Private Network – IPSec ................................................................. 99
13.1 Demands..................................................................................................................................................................99
13.2 Objectives................................................................................................................................................................99
13.3 Methods ...................................................................................................................................................................99
13.4 Steps.......................................................................................................................................................................100
DES/MD5 IPSec tunnel: the IKE way .........................................................................................................100
DES/MD5 IPSec tunnel: the Manual-Key way............................................................................................109
Chapter 14 Virtual Private Network –Dynamic IPSec...............................................116
14.1 Demands................................................................................................................................................................116
14.2 Objectives..............................................................................................................................................................116
14.3 Methods .................................................................................................................................................................116
14.4 Steps.......................................................................................................................................................................117
Chapter 15 Virtual Private Network – Hub and Spoke VPN .................................................. 123
15.1 Demands................................................................................................................................................................123
15.2 Objectives..............................................................................................................................................................123
15.3 Methods .................................................................................................................................................................124
15.4 Steps.......................................................................................................................................................................124
Chapter 16 Remote Access VPN – PPTP ........................................................................ 131

Multi-Homing Security Gateway User’s Manual
IV
16.1 Demands................................................................................................................................................................131
16.2 Objectives..............................................................................................................................................................131
16.3 Methods .................................................................................................................................................................132
16.4 Steps.......................................................................................................................................................................132
16.4.1 Setup PPTP Network Server ........................................................................................................................132
16.4.2 Setup PPTP Network Client.........................................................................................................................133
Chapter 17 Remote Access VPN – L2TP......................................................................... 135
17.1 Demands................................................................................................................................................................135
17.2 Objectives..............................................................................................................................................................135
17.3 Methods .................................................................................................................................................................135
17.4 Steps.......................................................................................................................................................................136
17.4.1 Setup L2TP Network Server ........................................................................................................................136
Chapter 18 Remote Access VPN – Windows client............................................................... 140
18.1 Demands................................................................................................................................................................140
18.2 Objects...................................................................................................................................................................140
18.3 Methods .................................................................................................................................................................140
18.4 Steps.......................................................................................................................................................................141
18.4.1 MH-5001 Setup............................................................................................................................................141
18.4.2 Create a custom MMC console ....................................................................................................................143
18.4.3 Create an IPSec policy .................................................................................................................................146
18.4.4 Add a filter rule from WinXP to MH-5001..................................................................................................148
18.4.5 Add a filter rule from MH-5001 to WinXP..................................................................................................151
18.4.6 Configure a rule for WinXP client to MH-5001...........................................................................................153
18.4.7 Configure a rule for MH-5001 to WinXP client...........................................................................................157
18.4.8 Enable the security settings..........................................................................................................................159
Chapter 19 Content Filtering – Web Filters.................................................................. 160
19.1 Demands................................................................................................................................................................160
19.2 Objectives..............................................................................................................................................................161
19.3 Methods .................................................................................................................................................................161
19.4 Steps.......................................................................................................................................................................162
19.5 Setting priorities.....................................................................................................................................................167
Chapter 20 Content Filtering – Mail Filters................................................................... 171
20.1 Demands................................................................................................................................................................171
20.2 Objectives..............................................................................................................................................................171
20.3 Methods .................................................................................................................................................................171
20.4 Steps for Anti-Virus...............................................................................................................................................172
20.5 Steps for Anti-Spam...............................................................................................................................................173
20.6 Steps for SMTP Relay ...........................................................................................................................................174
Chapter 21 Content Filtering – FTP Filtering ............................................................... 176
21.1 Demands................................................................................................................................................................176
21.2 Objectives..............................................................................................................................................................176
21.3 Methods .................................................................................................................................................................176
21.4 Steps.......................................................................................................................................................................177
Chapter 22 Content Filters – L7 Firewall................................................................................ 180
22.1 Demands................................................................................................................................................................180

Multi-Homing Security Gateway User’s Manual
V
22.2 Objectives..............................................................................................................................................................180
22.3 Methods .................................................................................................................................................................180
22.4 Steps.......................................................................................................................................................................181
22.4.1 View L7 Firewall Logs.................................................................................................................................182
Chapter 23 Intrusion Prevention Systems ............................................................................. 183
23.1 Demands................................................................................................................................................................183
23.2 Objectives..............................................................................................................................................................183
23.3 Methods .................................................................................................................................................................183
23.4 Steps.......................................................................................................................................................................184
Chapter 24 Bandwidth Management............................................................................... 186
24.1 Demands................................................................................................................................................................186
24.2 Objectives..............................................................................................................................................................187
24.3 Methods .................................................................................................................................................................188
24.4 Steps.......................................................................................................................................................................188
24.4.1 Outbound Traffic Management....................................................................................................................193
Chapter 25 Load Balancer................................................................................................... 196
25.1 Demands................................................................................................................................................................196
25.2 Objectives..............................................................................................................................................................196
25.3 Methods .................................................................................................................................................................196
25.4 Steps.......................................................................................................................................................................197
25.4.1 Outbound Load Balancer..............................................................................................................................197
Chapter 26 High Availability .............................................................................................. 199
26.1 Demands................................................................................................................................................................199
26.2 Objectives..............................................................................................................................................................200
26.3 Methods .................................................................................................................................................................200
26.4 Steps.......................................................................................................................................................................200
26.4.1 Setup High Availability................................................................................................................................200
Chapter 27 System Status................................................................................................... 202
27.1 Demands................................................................................................................................................................202
27.2 Objectives..............................................................................................................................................................202
27.3 Methods .................................................................................................................................................................202
27.4 Steps.......................................................................................................................................................................202
Chapter 28 Log System........................................................................................................ 205
28.1 Demands................................................................................................................................................................205
28.2 Objectives..............................................................................................................................................................205
28.3 Methods .................................................................................................................................................................205
28.4 Steps.......................................................................................................................................................................205
28.4.1 System Logs.................................................................................................................................................205
28.4.2 Syslog & Mail log........................................................................................................................................206
Chapter 29 System Maintenance...................................................................................... 208
29.1 Demands................................................................................................................................................................208
29.2 Steps for TFTP Upgrade........................................................................................................................................208
29.3 Steps for Firmware upgrade from Web GUI..........................................................................................................209
29.4 Steps for Database Update from Web GUI............................................................................................................210
29.5 Steps for Factory Reset..........................................................................................................................................211

Multi-Homing Security Gateway User’s Manual
VI
29.5.1 Step for factory reset under web GUI...........................................................................................................211
29.5.2 Step for NORMAL factory reset..................................................................................................................211
29.5.3 Steps for EMERGENT factory reset............................................................................................................211
29.6 Save the current configuration...............................................................................................................................212
29.7 Steps for Backup / Restore Configurations............................................................................................................212
29.8 Steps for Reset password.......................................................................................................................................213
Appendix A Command Line Interface (CLI)............................................................. 214
A.1 Enable the port of MH-5001 .......................................................................................... 214
A.2 CLI commands list (Normal Mode)............................................................................... 214
A.3 CLI commands list (Rescue Mode).............................................................................. 216
Appendix B Trouble Shooting........................................................................................ 219
Appendix C System Log Syntax.................................................................................... 225
Appendix D Glossary of Terms...................................................................................... 231

Multi-Homing Security Gateway User’s Manual
7
About this user manual
This user manual provides information about installing and configuring your MH-5001 Multi-Homing Security Gateway using its
built-in web browser interface (WBI) and command line interface (CLI). This guide is primarily for network and security personnel
who configure the Multi-Homing Security Gateway and monitor networks for evidence of intrusion attempts and inappropriate
transmission of regulated information. The WBI is a versatile, configurable monitoring platform. For you to understand and use its
functionality, you must understand the WBI and its capabilities.
All the examples after Chapter 2 in this manual, which instruct you how to configure the Multi-Homing Security Gateway, are taken
from MH-5001. The hardware and software specification of the MH-5001 will be introduced in Chapter 1. You can refer the
examples to configure your MH-5001. That will help you to quick your configuration and save you time.

Multi-Homing Security Gateway User’s Manual
8
What’s New in Version 4?
This section describes the enhancements that were made to MH-5001 as compared to the previous version. It includes changes to the
way that the MH-5001 operates, some of which are reflected by changes to the WBI and others that were made to the MH-5001
engine to improve performance and accuracy. As compared to the previous version, version 2.000 provides the following additional
improvements:
Anti-DoS
A denial of service (DoS) attack is an incident in which a user or organization is deprived of the services of a resource they would
normally expect to have. In order to avoid the loss of the particular network services such as e-mail or even security loss, MH-5001
provide Anti-DoS function to help users to block the well-known Denial-of-Service attacks such as WinNuke and LAN attacks.
- TCP SYN Flooding
- UDP Flooding
- ICMP Flooding
Please refer to Section 10.4.2 for details.
Authentication
The MH-5001 supports user authentication to the user database or to a RADIUS server. Users can be allowed to access internal
database after passing the authentication. In this version, we provide the following authentication types, such as Local, POP3(s),
IMAP(s), RADIUS, LDAP, etc. See Chapter 6 Authentication for details.
Books (Address/Service/Schedule)
Address: All rules require source and destination addresses. You have to add the addresses to each interface while inserting a new
firewall rule. These addresses must be valid addresses for the network connected to that interface. You can also organize related
addresses into address groups to make it easier to add rules. See Section 9.4.1 for details.
Service: Use service to control the types of communication accepted or denied by the firewall. In this version, we provide you with
the predefined services. You can also create your own custom services and add services to service group. See Section 9.4.2 for
details.
Schedule: Use scheduling to control when the rules are activated or deactivate. You can also organize the related schedules into
schedule groups. See Section 9.4.3 for details.
High Availability
Suppose your company is afraid that the firewall may be crashed someday, High Availability will meet the requirement to backup
the original system and let the network connection continually. It makes it possible to let the network in your company operate
smoothly. See Chapter 26 High Availability for details.
IP/MAC Binding
IP/MAC binding protects MH-5001 and your network from IP spoofing attacks. IP spoofing attempts to use the IP address of a
trusted computer to or through the MH-5001 from a different computer. There are two IP/MAC Binding type for your choice. You
can choose binding to bind the IP address with MAC address to allow the legal traffic passing through MH-5001. You can also

Multi-Homing Security Gateway User’s Manual
9
select range to allow a range of the IP addresses such as DHCP IP range passing through MH-5001. See Chapter 11 IP/MAC
Binding for Details.
IPSec VPN improvements
Hub and Spoke VPN: Suppose that your company has a main office and two branch offices or more which communicates using a
hub and spoke VPN configuration. The main office is the hub where the VPN tunnels terminate, while Branch_1 and Branch_2 are
the spokes. The Main office has a VPN tunnel to each branch office. Both Branch_1 and Branch_2 have their own VPN tunnel to
the hub. The VPN Spoke allows VPN traffic to pass from one tunnel to the other through a central MH-5001 hub. See Chapter 15
Virtual Private Network – Hub and Spoke VPN for details.
MPPE Support: In MH-5001 release II version, both PPTP and L2TP can support MPPE. In other words, you can choose
“Require data encryption” while a client computer running Windows XP/2000. However, this release II version will not support
MS-CHAP, you have to check MS-CHAPv2 checkbox if you would like to require data encryption.
Transparent Mode
Transparent mode provides the same basic firewall protection as NAT mode. Packets received by the MH-5001 are intelligently
forwarded or blocked according to the firewall rules. The MH-5001 can be inserted into your network without changing your
network or any of its components. See Section 1.7.2 for details.
WAN Backup
When WAN Backup is enabled, the system will start to ping the public Internet Server IP addresses with a sequence of every
specified Timeout to check the connection of the current default WAN link. When the current default WAN link is disconnected,
MH-5001 will try to make the ping action to the first Public Internet Server IP address within the specified Timeout. When all of
them are timeout, the default route/link will be switched to another WAN link to continue the ping action within the specified
Detection Interval until the system is successful to ping the specified public IP address. See Section 3.4.4 for details.
Layer 7 Application Layer Firewall
When L7 Firewall enabled, the MH-5001 can instant block the application layer services such as MSN, Yahoo, SIP, H.323, etc
services. The information can be found at Chapter 22.

MH-5001 User Manual Chapter 1
Quick Start
10
Chapter 1
Quick Start
This chapter introduces how to quick setup the MH-5001.
MH-5001 is an integrated all-in-one solution that can facilitate the maximum security and the best resource utilization for the
enterprises. It contains a high-performance stateful packet inspection (SPI) Firewall, policy-based NAT, ASIC-based wire-speed
VPN, upgradeable Intrusion Detection System, Dynamic Routing, Content Filtering, Bandwidth Management, WAN Load
Balancer, and other solutions in a single box. It is one of the most cost-effective all-in-one solutions for enterprises.
1.1 Check Your Package Contents
These are the items included with your MH-5001 purchase. They are the following items
1. MH-5001 x 1
2. Quick Installation Guide x 1
3. CD-ROM Manual / Installation Guide x 1
4. Power Cord x 1
5. Rack mount x 1
6. RS-232 cable x 1
1.2 Five steps to configure MH-5001 quickly
Let’s look at the common network topology without MH-5001 applying like Figure 1-. This is a topology which is almost used by
all the small/medium business or SOHO use as their Internet connectivity. Although that your topology is not necessarily the same
diagram below, but it still can give you a guideline to configure MH-5001 quickly.
Now you can pay attention at the IP Sharer in the diagram. The IP Sharer can provide you with NAT (Network Address Translation),
PAT (Port Address Translation) and other functions.
Figure 1-1 The example before MH-5001 applies on it
Figure 1-2 The example after MH-5001 applies on it
Here we would like to alter the original IP Sharer with the MH-5001 like Figure 1-. If we hope to have MH-5001 to replace the IP
Sharer, we just need to simply execute the following five steps as Figure 1- showed. By these steps, we hope to build an image to
tell you how to let MH-5001 work basically.

MH-5001 User Manual Chapter 1
Quick Start
11
Figure 1-3 Five steps to configure MH-5001
As the Figure 1- illustrated, with the five-step configurations, MH-5001 will have the same functions with the original IP Sharer.
Please see the following description of the five-step configurations.
1. Setup:
Install three physical lines inclusive of the power cord, outbound link (connected WAN1 port) and inbound direction
(connected LAN1 port). For the details, please refer section 1.3.
Continually, we will connect to the web GUI of MH-5001. So you must make sure that you have a PC which is located in the
same subnet with MH-5001 before this step. Note: The default LAN1 port is (192.168.1.254 / 255.255.255.0). Refer to section
1.5 for more information.
2. LAN:
Configure the LAN1 port of MH-5001. You can refer to section 1.4 for the default network configurations of MH-5001. Note:
If you were connected from LAN1 port and changed the LAN1 IP address settings of MH-5001. The network will be
disconnected since the IP address is different between your pc and MH-5001 LAN1 port.
3. WAN:
Configure the WAN1 port of MH-5001. You can refer to section 1.4 for the default network configurations of MH-5001.
4. NAT:
Configure the connection of LAN to WAN direction. It will make all the client pc access the Internet through MH-5001. For
more information, please refer to section 1.6.1.
5. Virtual Server:
If there is any server located inside the MH-5001. You may hope these servers can provide services outside. So you should
configure the Virtual Server which provides connections of WAN to LAN direction. For more information, please refer to
section 1.6.2.

MH-5001 User Manual Chapter 1
Quick Start
12
After you completely finished the above steps, the connectivity function of MH-5001 is probably well-done.
1.3 Wiring the MH-5001
A. First, connect the power cord to the socket at the back panel of the MH-5001 as in Figure 1- and then plug the
other end of the power adapter to a wall outlet or power strip. The Power LED will turn ON to indicate proper
operation.
Figure 1-4 Back panel of the MH-5001
B. Using an Ethernet cable, insert one end of the cable to the WAN port on the front panel of the MH-5001 and the
other end of the cable to a DSL or Cable modem, as in Figure 1-.
C. Computers with an Ethernet adapter can be directly connected to any of the LAN ports using a cross-over Ethernet
cable, as in Figure 1-.
D. Computers that act as servers to provide Internet services should be connected to the DMZ port using an Ethernet
Cable, as in Figure 1-.
Figure 1-5 Front end of the MH-5001
1.4 Default Settings and architecture of MH-5001
You should have an Internet account already set up and have been given most of the following information as Table 1-1.
Fill out this table when you edit the web configuration of MH-5001.

MH-5001 User Manual Chapter 1
Quick Start
13
Items Default value New value
Password: admin
IP Address ____.____.____.____
Subnet Mask ____.____.____.____
Gateway IP ____.____.____.____
Primary DNS ____.____.____.____
Fixed IP
Secondary DNS ____.____.____.____
PPPoE Username ____.____.____.____
PPPoE PPPoE Password ____.____.____.____
WAN1
(Port 1)
DHCP
Not initialized
IP Address ____.____.____.____
Subnet Mask ____.____.____.____
Gateway IP ____.____.____.____
Primary DNS ____.____.____.____
Fixed IP
Secondary DNS ____.____.____.____
PPPoE Username ____.____.____.____
PPPoE PPPoE Password ____.____.____.____
WAN2
(Port 2)
DHCP
Not initialized
IP Address 10.1.1.254 ____.____.____.____
DMZ1(Port 3) IP Subnet Mask 255.255.255.0 ____.____.____.____
IP Address 192.168.1.254 ____.____.____.____
LAN1(Port 4) IP Subnet Mask 255.255.255.0 ____.____.____.____
IP Address 192.168.2.254 ____.____.____.____
LAN2(Port 5) IP Subnet Mask 255.255.255.0 ____.____.____.____
Table 1-1 MH-5001 related network settings

MH-5001 User Manual Chapter 1
Quick Start
14
Figure 1-6 The default settings of MH-5001
As the above diagram Figure 1- illustrated, this diagram shows the default topology of MH-5001. And you can configure the
MH-5001 by connecting to the LAN1_IP (192.168.1.254) from the PC1_1 (192.168.1.1). In the following sections, we will teach
you how to quickly setup the MH-5001 in the basic appliances.
1.5 Using the Setup Wizard
A computer on your LAN1 must be assigned an IP address and Subnet Mask from the same range as the IP address and Subnet
Mask assigned to the MH-5001 in order to be able to make an HTTPS connection using a web browser. The MH-5001 is assigned
an IP address of 192.168.1.254 with a Subnet Mask of 255.255.255.0 by default. The computer that will be used to configure the
MH-5001 must be assigned an IP address between 192.168.1.1 and 192.168.1.253 with a Subnet Mask of 255.255.255.0 to be able
to connect to the MH-5001. This address range can be changed later. There are instructions in the MH-5001 Quick Installation
Guide, if you do not know how to set the IP address and Subnet Mask for your computer.

MH-5001 User Manual Chapter 1
Quick Start
15
Step 1. Login
Type “admin” in the account field, “admin” in
the Password field and click Login.
Note: Please do not access web UI through
proxy, or the login may be locked by others or
the original user.
Connect to https://192.168.1.254
Step 2. Run Setup Wizard
Click the Run Setup Wizard. After login to https://192.168.1.254
BASIC SETUP > Wizard
Step 3. System Name
Enter the Host Name and the Domain Name,
followed by clicking the Next.
BASIC SETUP > Wizard
Step 4. Operation Mode
MH-5001 Multi-Homing Security Gateway can
operate in NAT/Router mode or
Transparent mode. Choose which operation
Mode for this device to use.
BASIC SETUP > Wizard > Next
NAT/Route mode
In NAT/Route mode, you can create NAT mode rules and Route mode rules. For the related information, please
refer to Chapter 7 and Chapter 8.
yNAT mode rules use network address translation to hide the addresses in a more secure network from users
in a less secure network.
yRoute mode rules accept or deny connections between networks without performing address translation.

MH-5001 User Manual Chapter 1
Quick Start
16
Transparent mode
Transparent mode provides the same basic protection as NAT mode. Packets received by the MH-5001 are
intelligently forwarded or blocked according to firewall rules. MH-5001 can be inserted in your network at any
point without the need to make any changes to your network or any of its components. However, VPN, NAT,
Routing and some advanced firewall features (such as Authentication, IP/MAC Binding) are only available in
NAT/Route mode.
Note:
1. You cannot connect the LAN1/LAN2/DMZ interfaces to the same Hub while using Transparent mode,
otherwise the traffic from the PCs under LAN1/LAN2/DMZ interfaces may be blocked.
2. If you would like to change the operation mode from NAT/Route mode to Transparent mode, you have to
backup the configuration file and then do the factory reset first.
Table 1-2 The operation mode
Step 5. WAN Connectivity
Choose the type of IP Address Assignment
provided by your ISP to access the Internet.
Here we have four types to select. This will
determine how the IP address of WAN1 is
obtained. Click Next to proceed.
BASIC SETUP > Wizard > Next
Step 5.a —DHCP client
If Get IP Automatically (DHCP) is
selected, MH-5001 will request for IP address,
netmask, and DNS servers from your ISP. You
can use your preferred DNS by clicking the DNS
IP Address and then completing the Primary
DNS and Secondary DNS server IP addresses.
Click Next to proceed.
BASIC SETUP > Wizard > Next > DHCP

MH-5001 User Manual Chapter 1
Quick Start
17
Step 5.b —Fixed IP
If Fixed IP Address is selected, enter the
ISP-given IP Address, Subnet Mask, Gateway
IP, Primary DNS and Secondary DNS IP. Click
Next to proceed.
BASIC SETUP > Wizard > Next > Fixed IP
Step 5.c —PPPoE client
If PPP over Ethernet is selected, enter the
ISP-given User Name, Password and the
optional Service Name. Click Next to proceed.
BASIC SETUP > Wizard > Next > PPPoE
9Warning Message
Please Note that an alert message box “When changing to none fixed ip mode, system will delete all ip alias!”
will appear while you change Get IP Automatically (DHCP) or PPP over Ethernet but not Fixed IP Address as your WAN link.