Planet BM-500 User manual

Bandwidth Management
Gateway
BM-500
User s Manual

BM-500Bandwidth Management GatewayUser sManual
Copyright
Copyright (C) 2004 PLANETTechnology Corp. All rights reserved.
The productsand programs described in this User sManual are licensed productsofPLANETTechnology,This User s
Manual contains proprietary information protected by copyright, and this User sManual and all accompanying hardware,
software, and documentation are copyrighted.
No part of this User sManual may be copied, photocopied, reproduced, translated, or reduced to anyelectronic medium
or machine-readable form by any means by electronic or mechanical. Including photocopying, recording, or information
storage and retrieval systems,forany purpose otherthan the purchaser's personal use, and without the prior express
written permission of PLANETTechnology.
Disclaimer
PLANETTechnology does not warrant that the hardware will work properly in all environmentsand applications,and
makes no warranty and representation,eitherimplied or expressed, with respect to the quality,performance,
merchantability, or fitness for a particular purpose.
PLANEThas made every effort to ensure thatthis User sManual is accurate; PLANETdisclaims liability forany
inaccuracies or omissions thatmay have occurred.
Information in this User sManual is subjectto change without notice and does notrepresent acommitmenton the part of
PLANET.PLANETassumes no responsibility forany inaccuracies thatmay be contained in this User sManual.PLANET
makes no commitment to update orkeep current the information in this User sManual,and reserves the rightto make
improvements to this User s Manual and/or to the products described in this User s Manual,at any time without notice.
If you find information in this manual that is incorrect, misleading, or incomplete, wewould appreciate your commentsand
suggestions.
CE mark Warning
This is aclass Bdevice,In adomestic environment, this product may cause radio interference, in which case the user
may be required to take adequate measures.
Trademarks
The PLANETlogo is a trademark ofPLANETTechnology.
This documentation may refer to numerous hardware and software productsby their trade names. In most,if not all cases,
these designations are claimed as trademarks or registered trademarks by their respective companies.
Customer Service
For information on customer service and support for the Bandwidth Management Gateway,please refer tothe following
Website URL:
http://www.planet.com.tw
Before contacting customer service, please take a moment to gatherthe following information:
♦ Bandwidth Management Gateway serial numberand MAC address
♦ Any error messages that displayed when the problem occurred
♦ Any software running when the problem occurred
♦ Steps you took to resolve the problem on your own
Revision
User s Manual for PLANETBM-500
Model: BM-500
Rev: 1.0 (March, 2004)
Part No. EM-BM500

BM-500Bandwidth Management GatewayUser sManual
Table of Contents
CHAPTER 1: INTRODUCTION.........................................................................................................................1
1.1 FEATURES ...............................................................................................................................................................1
1.2 PACKAGE CONTENTS..............................................................................................................................................1
1.3 BANDWIDTH MANAGEMENT GATEWAY FRONT VIEW..............................................................................................2
1.4 BANDWIDTH MANAGEMENT GATEWAY REAR PANEL..............................................................................................2
1.5 SPECIFICATION........................................................................................................................................................3
CHAPTER 2: HARDWARE INSTALLATION....................................................................................................4
2.1 INSTALLATION REQUIREMENTS...............................................................................................................................4
2.2 OPERATION MODE ..................................................................................................................................................4
2.2.1 Transparent Mode Connection Example...................................................................................................4
2.2.2NATMode Connecting Example................................................................................................................5
CHAPTER 3: GETTING STARTED...................................................................................................................7
3.1 WEB CONFIGURATION.............................................................................................................................................7
3.2 SETTING UP IN TRANSPARENT MODE.....................................................................................................................8
3.3 SETTING UP IN NAT MODE...................................................................................................................................10
CHAPTER 4: WEB CONFIGURATION...........................................................................................................12
4.1 SYSTEM.................................................................................................................................................................12
4.1.1 Admin...........................................................................................................................................................13
4.1.2Settings........................................................................................................................................................16
4.1.3Date/Time....................................................................................................................................................23
4.1.4Language.....................................................................................................................................................24
4.1.5Permitted IPs...............................................................................................................................................25
4.1.6 Multiple NAT................................................................................................................................................28
4.1.7Hacker Alert.................................................................................................................................................31
4.1.8Route Table.................................................................................................................................................33
4.1.9DHCP...........................................................................................................................................................37
4.1.10 DNSProxy.................................................................................................................................................39
4.1.11 DDNS.........................................................................................................................................................40
4.1.12 Logout........................................................................................................................................................45
4.1.13 Software Update.......................................................................................................................................46
4.2 INTERFACE ............................................................................................................................................................48
4.3 ADDRESS...............................................................................................................................................................53
4.3.1LAN...............................................................................................................................................................53
4.3.2LAN Group...................................................................................................................................................57

BM-500Bandwidth Management GatewayUser sManual
4.3.3WAN.............................................................................................................................................................60
4.3.4WAN Group.................................................................................................................................................63
4.4 SERVICE................................................................................................................................................................67
4.4.1Pre-defined..................................................................................................................................................67
4.4.2Custom.........................................................................................................................................................68
4.4.3Group ...........................................................................................................................................................72
4.5 SCHEDULE.............................................................................................................................................................75
4.6 QOS......................................................................................................................................................................78
4.7 AUTHENTICATION ..................................................................................................................................................82
4.8 POLICY ..................................................................................................................................................................86
4.8.1Outgoing......................................................................................................................................................86
4.8.2Incoming......................................................................................................................................................91
4.9 CONTENTFILTERING .............................................................................................................................................97
4.9.1URLBlocking ..............................................................................................................................................97
4.9.2GeneralBlocking......................................................................................................................................101
4.10 VIRTUAL SERVER..............................................................................................................................................102
4.10.1Mapped IP...............................................................................................................................................103
4.10.2 Virtual Server..........................................................................................................................................106
4.11LOG ...................................................................................................................................................................115
4.11.1Traffic Log.................................................................................................................................................115
4.11.2 Event Log..................................................................................................................................................118
4.11.3 Connection Log.......................................................................................................................................121
4.11.4 Log Backup .............................................................................................................................................123
4.12ALARM...............................................................................................................................................................126
4.12.1Traffic Alarm............................................................................................................................................126
4.12.2 Event Alarm.............................................................................................................................................127
4.13ACCOUNTING REPORT......................................................................................................................................130
4.13.1 Outbound Accounting Report...............................................................................................................130
4.13.2 Inbound....................................................................................................................................................135
4.14 STATISTICS........................................................................................................................................................140
4.14.1 WAN Statistics........................................................................................................................................140
4.14.2 Policy Statistics.......................................................................................................................................141
4.15 STATUS..............................................................................................................................................................144
4.15.1 Interface Status.......................................................................................................................................144
4.15.2ARPTable................................................................................................................................................145
4.15.3 DHCPClients..........................................................................................................................................146

BM-500Bandwidth Management GatewayUser sManual
- 1 -
Chapter 1: Introduction
BM-500is specifically designedfor SOHO networks. It has built-in4-port 10/100MbpsEthernet LANportsand
NATfunction. Thus, no broadband router is required for users which have only one public IP address. It also
supportsvirtual server,Multi-DMZ anddynamic DNS function whichis veryuseful for users to share local
resource to Internet users.
For bandwidthmanagement, packetscan be classifiedbased onIPaddress, IPsubnetandTCP/UDPport
number. The device has more than 40 ofthe most common protocols such as H.323, Oracle, HTTP, FTP, etc.
for ease of definition; theadministrator can then definepolicies to ensure committedand maximumbandwidth
levels for inbound /outbound traffic in each class. Theadministrator can also define three prioritylevels for
each policyto ensure thathighprioritypacketsreceive themaximumavailablebandwidth.Inaddition, each
policy can have aschedule defined for whenthepolicyis activatedor inactivated inincrementsof30 minutes.
Both the NAT mode and transparent mode are supported, therefore allowingtheexisting network structure to
remain the samewithoutreconfiguring. The BM-500provides policy-basedfirewall protectionand several
hacker protections toprevent anyhacker attack.Besides,thecomprehensivealarmand logfunctionallow
the networkManagement Gatewayto easilyenhancethe securityoflocal network.
1.1 Features
♦ Provides four 10/100MbpsLAN port and one 10/100MbpsWAN port
♦ Supports NATmode andtransparentmode
♦ Transparent mode requiresno changing for the original networkstructure
♦ Traffic classification bases on IP, IP range/subnet, TCP/UDPport range
♦ Guaranteed andmaximumbandwidthwith 3 level ofpriorities
♦ Dynamic and prioritized bandwidth sharingwith fairness between equal-level priority
♦ Assigns dailyandweeklyaccess schedule toeach individual policy
♦ Professional NetworkLog and Accounting Report
♦ Supports MRTG-likeTraffic Statistics, easytotrace and analyze
♦ Provides Multi-Servers Load Balancing
♦ Provides Dynamic DNS and DHCPserver functions
♦ Supports ContentFilter onscheduled time
♦ Supports Virtual Server andIPmapping (Multi-DMZHost)
♦ Supports Multi-language web UI,easyto manage
♦ Support user authenticationbased user s user name and password
1.2 Package Contents
The following items should be included:
♦ Bandwidth Management Gateway
♦ PowerAdapter
♦ QuickInstallationGuide
♦ User s Manual CD
Ifanyofthecontents are missing or damaged, please contact your dealer or distributor immediately.

BM-500Bandwidth Management GatewayUser sManual
- 2 -
1.3 Bandwidth Management Gateway Front View
LED Description
PWRPower is supplied to this device.
STATUS Blinks to indicatethis devise is being turned on.
After one minute,this LED indicator will stop
blinking, it means this device is nowreadyto
use.
100 Steadyon indicates theport operate
on 100Mbps speed
WAN & LAN
LNK/ACT Steadyon indicates theport is
connected to other network device.
Blinkto indicates thereis traffic on
the port
1.4 Bandwidth Management Gateway Rear Panel
Port or
button Description
RESETPress this button to restore to factory
default settings.
WAN Connect to your xDSL/Cable modem
or other Internet connection device
LAN 1 to 4 Connect to your local PC, switch or
other local network device

BM-500Bandwidth Management GatewayUser sManual
- 3 -
1.5 Specification
Product Bandwidth Management Gateway
Model BM-500
Hardware WAN 1 x 10/100Base-TXConnections
LAN 4 x 10/100Base-TX, Auto-MDI/MDI-X
Button Reset button fro hardware reset / factorydefault
SystemLED System: PWR, STATUS
Network: LNK/ACT, 100
Power 5V DC, 2.4A
Operating Environment Temperature: 0~50°C
Relative Humidity:5%~90%
Dimension Wx D x H 220 x 149 x 37 mm
Regulatory FCC, CE Mark
Software
MaximumBandwidth Transparent: 10Mbps
NAT: 8Mbps
NAT + logging+ statistics: 3Mbps
Maximumconcurrent
session 5000
Management Web (English, Traditional Chinese, Simplified Chinese )
Operation Mode Transparent, NAT
WANconnectiontypein NAT
mode PPPoE, DHCPand Fixed IP
Traffic Classification IP, IPsubnet, TCP/UDPport
BandwidthAllocation Policyrules withInbound/Outbound traffic management
Guaranteed andmaximumbandwidth
Scheduled in unitof30 minutes
3 Priorities
Log Traffic Log, Event Log, Connection Log, Log backup by mail or syslog
server
Statistics WAN port statistics and policystatistics with graph display
Firewall Security Policy-based access control
Stateful Packet Inspection(SPI)
Scheduled in unitof30 minutes
Hacker Alert Detect SYNAttack, Detect ICMPFlood,Detect UDPFlood, Detect Ping
ofDeathAttack, Detect Tear Drop Attack, Detect IPSpoofingAttack,
Filter IPRoute Option, Detect Port Scan Attack, Detect LandAttack
Alarm w Traffic alarmfor user-defined traffic level
w Event alarmfor hacker attack
w The alarmmessage can sent to administrator bye-mail
Other Functions Firmware Upgradeable through Web
NTPsupport
Configuration Backup and Restore throughWeb
Dynamic DNS support
Multiple NAT and multiple DMZ ( mapped IP) support
Multiple server load balancing

BM-500Bandwidth Management GatewayUser sManual
- 4 -
Chapter 2: Hardware Installation
2.1 Installation Requirements
Before installing the BandwidthManagement Gateway,make sure your networkmeets the following
requirements.
-Mechanical Requirements
The Bandwidth Management Gatewayis to beinstalled betweenyour Internet connection and local area
network. The Bandwidth Management Gatewaycan be placed on the table or rack. Locate the unit near
the power outlet.
- Electrical Requirements
The Bandwidth Management Gatewayis apower-required device, it means, theBandwidth Management
Gatewaywill not workuntil it is powered. If your networked PCs will needto transmit data all the time,
please consider use an UPS (UninterruptedPower Supply) for your Bandwidth Management Gateway.It
will prevent youfromnetworkdata loss. In some area, installing a surgesuppression device mayalsohelp
to protect your Bandwidth Management Gatewayfrombeing damaged byunregulated surge or currentto
the Bandwidth Management Gateway.
- Network Requirements
In order for Bandwidth Management Gatewayto manage traffic, the traffic must pass throughBandwidth
Management Gatewayat a useful pointina network. In most situations, thebandwidth Management
Gatewayshould beplaced behind the Internet connection device.
This deploymentallowsthenetworkadministers to control all bandwidthbased on business priorities and
give business-critical and time-sensitive applications guarantee bandwidth and higher priority.
Business-critical applications can receivemaximumperformance while other less urgenttraffic is still
available on remaining bandwidth. BandwidthManagement Gatewayalsoprovides comprehensive
security,log and statistics functions to help monitor networkand bandwidthusage and allowadjustment of
the bandwidth management policies accordingly.
2.2 Operation Mode
BM-500supports two operationmodes, TransparentandNAT.In transparentmode, BM-500worksas
proxywith forward LANpacket to WAN and forward WAN packet to LAN. The LAN and WAN side IP
addresses are in thesamesubnet. In NATmode, LAN sideuser will share onepublic IPaddress ofWAN
port to make Internet connection. Pleasefind the followingtwopictures for example.
2.2.1 TransparentMode Connection Example

BM-500Bandwidth Management GatewayUser sManual
- 5 -
All theWAN and LAN side IP addresses are on the same subnet.
2.2.2 NAT Mode Connecting Example

BM-500Bandwidth Management GatewayUser sManual
- 6 -
LAN and WANside IP addresses are on the different subnet.

BM-500Bandwidth Management GatewayUser sManual
- 7 -
Chapter 3: Getting Started
3.1 Web Configuration
STEP1:
Connect both the Administrator sPCandthe LANportofthe BandwidthManagement Gatewaytoahubor
switch. Makesure thereisalinklightonthehub/switch for bothconnections. The BandwidthManagement
Gatewayhasanembeddedwebserverusedfor management andconfiguration. Useawebbrowserto
displaytheconfigurations of the BandwidthManagement Gateway(such asInternet Explorer 4(or above) or
Netscape4.0(or above) withfull javascript support). The defaultIP address ofthe BandwidthManagement
Gatewayis 192.168.1.1 witha subnet mask of 255.255.255.0. Therefore, the IP address of the Administrator
PC must be intherange between192.168.1.2–192.168.1.254
Ifthe companysLAN IP Address is not subnetof192.168.1.0, (i.e. LAN IP Address is 172.16.0.1), then the
Administrator must changehis/her PC IPaddress tobewithin thesamerange ofthe LANsubnet (i.e.
172.16.0.2). Reboot the PC ifnecessary.
Bydefault, the BandwidthManagement Gatewayis shippedwithitsDHCP Server function enabled. This
means the client computers on the LAN network including the Administrator PC canset their TCP/IPsettings
to automaticallyobtain an IPaddress fromthe Bandwidth Management Gateway.
The followingtable is alist ofprivateIP addresses. These addresses may notbeusedas aWAN IP address.
10.0.0.0 ~10.255.255.255
172.16.0.0 ~ 172.31.255.255
192.168.0.0 ~192.168.255.255
STEP2:
Once theAdministrator PC has an IPaddress on the same networkas the Bandwidth Management Gateway,
openup an Internet web browser and typein http://192.168.1.1 in the address bar.
Apop-up screen will appearand prompt for ausernameand password.Ausername and password is required
to connect to theBandwidth Management Gateway.Enter the default login usernameand password of
Administrator (see below).
Username: admin
Password: admin
ClickOK.

BM-500Bandwidth Management GatewayUser sManual
- 8 -
3.2 Setting Up in Transparent Mode
STEP1:
After enteringthe usernameand password,theBandwidthManagement Gateway WEB UI screen will display.
Select the Interface tab on the left menu and a sub-function list will be displayed.
• Select Transparent Mode.
• Enter required information to their corresponding fields.
LANinterface IPAddress
NetMask
Default Gateway
DNS Server
.
Note: The abovefigures are only examples. Pleasefill in the appropriate IPaddress information provided to
you by the ISP.
STEP2:
Clickon the Policy tab fromthe main function menu, and thenclickon Outgoing fromthe sub-function list.
STEP3:

BM-500Bandwidth Management GatewayUser sManual
- 9 -
Clickon NewEntry button.
STEP4:
When the NewEntry option appears, enter the following configuration:
SourceAddress –select “Inside_Any”
Destination Address –select “Outside_Any”
Service - select “ANY”
Action - select “Permit”
Clickon OK to applythe changes.
STEP5:
The configuration is successful when the screenbelow is displayed. Make sure that all thecomputers that
are connected to the LAN port have their Default GatewayIP Address set to the Bandwidth Management
GatewaysLANIP Address (i.e.192.168.1.1). At this point,all thecomputers on the LAN networkshould gain
access to the Internet immediately.Ifa Bandwidth Management Gatewayfilter function is required, please
refer to the Policysection in theusers manual.

BM-500Bandwidth Management GatewayUser sManual
- 10 -
3.3 Setting Up in NAT Mode
STEP1:
After entering theBandwidthManagement GatewayWEB UIscreen, select the Interface tab on theleft menu
and a sub-function list will be displayed.
Select the NATMode.
Enter the required information totheir corresponding fields.
LANInterface IPAddress192.168.1.1
NetMask255.255.255.0
Enter the information that your ISP provided.
STEP2:
Click on the Policy tabfrom the main function menu, and then click on Outgoing fromthe sub-function list.
Clickon the Policy tab fromthe main function menu, and thenclickon Incoming fromthe sub-function list.
STEP3:
Clickon NewEntry button.
STEP4:
When the NewEntry option appears, enter the following configuration:
SourceAddress –select “Inside_Any”
Destination Address –select “Outside_Any”
Service - select “ANY”
Action - select “Permit”
Clickon OK to applythe changes.

BM-500Bandwidth Management GatewayUser sManual
- 11 -
STEP5:
The configurationissuccessful whenthe screenbelow is displayed.Make sure that all thecomputers that
are connectedtotheLANport have their Default GatewayIP Address set to theBandwidthManagement
GatewaysLAN IPAddress(i.e. 192.168.1.1). At thispoint,all the computers on theLAN networkshould
gain access to Internet immediately.IfaBandwidth Management Gatewayfilter functionis required,
please refer to Address andPolicysections.

BM-500Bandwidth Management GatewayUser sManual
- 12 -
Chapter 4: Web Configuration
4.1 System
The Bandwidth Management GatewayAdministration and monitoring control is set bythe System
Administrator.The SystemAdministrator canadd or modifySystemsettings andmonitoring mode. The sub
Administrators can onlyread Systemsettings but not modifythem. In System, the SystemAdministrator can:
1. Add andchange the subAdministrator s names and passwords;
2. Backup all Bandwidth Management Gatewaysettings intolocal files;
3. Set up alerts for Hackers invasion.
“System”is the managingofsettings such as the privileges ofpackets that pass through the Bandwidth
Management Gatewayand monitoring controls. Administrators maymanage,monitor,and configure
Bandwidth Management Gatewaysettings. All configurations are “read-only”for all users other thanthe
Administrator; those users are notable to changeanysettings for the BandwidthManagement Gateway.
Admin: has control ofuser access to the Bandwidth Management Gateway.He/she can add/remove users
and change passwords.
Setting: The Administrator mayuse this function to backup Bandwidth Management Gatewayconfigurations
and export (save) themto an “Administrator”computer or anywhere on the network; or restore a
configuration file to the device; or restore the Bandwidth Management Gatewaybackto default factory
settings. Under Setting, the Administrator mayenable e-mail alert notification. This will alert Administrator(s)
automaticallywhenever theBandwidth Management Gatewayhas experienced unauthorized access or a
networkhit (hacking or flooding). Once enabled, an IPaddress ofa SMTP(Simple Mail Transfer protocol)
Server is required. Up totwo e-mail addresses can be entered for the alert notifications.
Date/Time: This function enables the Bandwidth Management Gatewayto be synchronized either with an
Internet Server time or withthe client computer s clock.
Language: Both Chinese and English are supported inthe Bandwidth Management Gateway.
Multiple NAT MultipleNAT allows local port to set multiple subnetworks and connect with the Internet
through different WAN IPAddresses.
Address: Enables theAdministrator to authorize specific internal/external IPaddress(s for Management
Gateway.
Hack Alert When abnormal conditions occur, the BandwidthManagement Gatewaywill sendan e-mail alert
to notifythe Administrator,and also displaywarning messages inthe Event windowof Alarm.
Route Table Use this functiontoenable theAdministrator to addstatic routes for the networkswhen the
dynamic route is not efficient enough.
DHCP Administrator can configure DHCP(Dynamic Host Configuration Protocol) settings for the LAN (LAN)
network.
DynamicDNS The Dynamic DNS (require Dynamic DNS Service) allowsyou toalias a dynamic IPaddress

BM-500Bandwidth Management GatewayUser sManual
- 13 -
to astatic hostname, allowing your device tobemore easilyaccessed by specific name. When this functionis
enabled, the IPaddress in Dynamic DNS Server will be automaticallyupdated with thenew IPaddress
provided byISP
Logout Administrator logs out the Bandwidth Management Gateway.This functionprotectsyour system
while youare away.
Software Update The administrator can update the devices software with the latest version.
Administrators mayvisit distributor s web site to download the latest firmware. Administrators mayupdate
the device firmware to optimizeits performance and keep up with the latest fixes for intruding attacks.
4.1.1 Admin
On the left hand menu, clickon Setup, and then select Admin below it. The current list ofAdministrator(s)
shows up.
Settings of the Administration table
Administrator Name: The username ofAdministrators for the Bandwidth Management Gateway.The user
admin cannot be removed.
Privilege: The privileges ofAdministrators (Admin or Sub Admin)
The username ofthe main Administrator is Administrator with read / write privilege.
SubAdmins maybe created bythe Admin byclicking NewSub Admin.SubAdmins have readonly
privilege.
Configure: Click Modify tochange the “SubAdministrator s”password and click Remove to delete a “Sub
Administrator.”
çç

BM-500Bandwidth Management GatewayUser sManual
- 14 -
Changing the Main/Sub-Administrator s Password
Step 1. The ModifyAdministrator Password windowwill appear. Enter in the required information:
nPassword: enter original password.
nNewPassword: enter new password
nConfirm Password: enter the newpasswordagain.
Step 2. Click OK to confirmpassword change or click Cancel to cancel it.
Adding anewSub Administrator
Step 1. In the Add NewSub Administrator window:
n Sub Admin Name: enter the username ofnew Sub Admin.
n Password: enter a password for the new Sub Admin.
n Confirm Password: enter the password again.
Step 2. Click OK to add the user orclick Cancel to cancel the addition.

BM-500Bandwidth Management GatewayUser sManual
- 15 -
Removing a Sub Administrator
Step 1. In the Administration table, locatetheAdministrator nameyou wantto edit, and clickon the
Remove optionintheConfigure field.
Step 2. The Remove confirmation pop-up box will appear. Click OK to remove thatSubAdmin or click
Cancel to cancel.

BM-500Bandwidth Management GatewayUser sManual
- 16 -
4.1.2 Settings
The Administrator mayuse this function tobackup Bandwidth Management Gatewayconfigurations and
export (save) themto an “Administrator”computer or anywhere onthenetwork; or restore a configuration
file to the device;or restorethe Bandwidth Management Gatewaybackto default factorysettings.
Entering the Settings window
Click Setting in the System menu to enter the Settings window.The Bandwidth Management Gateway
Configuration settings will be shown on the screen.