Planet MH-5000 User manual

Multi-Homing SecurityGatewayUser sManual
Multi-Homing Security
Gateway
MH-5000
User s Manual

Multi-Homing SecurityGatewayUser sManual
I
Copyright
Copyright (C) 2005 PLANET TechnologyCorp. All rights reserved.
The products and programs described inthisUser sManualare licensed products of PLANET Technology,This User sManual
contains proprietaryinformation protected bycopyright, and thisUser sManualand allaccompanying hardware, software, and
documentation are copyrighted.
No part of this User sManualmay be copied, photocopied, reproduced, translated, or reduced to anyelectronic medium or
machine-readable form byanymeans byelectronic or mechanical.Including photocopying, recording, or informationstorage and
retrieval systems, for any purpose other than the purchaser'spersonal use, and without the prior express written permission of
PLANET Technology.
Disclaimer
PLANET Technologydoes not warrantthat thehardware will work properly in allenvironments and applications, and makes no
warrantyand representation, either implied or expressed, with respect to the quality,performance, merchantability,or fitness for a
particular purpose.
PLANET has made everyeffort toensure that thisUser sManualisaccurate;PLANET disclaims liabilityfor anyinaccuracies or
omissions that mayhave occurred.
Information in this User sManualissubject to change without notice and doesnot represent acommitment on the part ofPLANET.
PLANET assumes no responsibility for anyinaccuracies that maybe contained in this User s Manual.PLANET makes no commitment
to update or keep current the information in this User sManual,and reserves the right to make improvementsto thisUser sManual
and/or to the products described in this User s Manual, atany time without notice.
Ifyou find information inthis manualthat isincorrect, misleading, or incomplete, we wouldappreciate your comments and
suggestions.
CE mark Warning
This isaclass A device, in adomestic environment, this product maycauseradiointerference, in which case the user may be required
to take adequate measures.
Trademarks
The PLANET logo is a trademark of PLANET Technology.
This documentation mayrefer to numerous hardware and software products bytheir trade names. In most, if not allcases, these
designations are claimed as trademarks or registered trademarks by their respective companies.
CustomerService
For information on customer service and support for the Multi-Homing SecurityGateway, please refer to the following Website URL:
http://www.planet.com.tw
Before contacting customer service, please take a moment to gatherthe following information:
♦ Multi-Homing SecurityGatewayserial number and MAC address
♦ Anyerror messages that displayed when the problem occurred
♦ Anysoftware running when the problem occurred
♦ Steps you took to resolve the problem on your own
Revision
User s Manual for PLANET Multi-Homing SecurityGateway
Model:MH-5000
Rev: 2.0 (February, 2005)
Part No. EM-MH5Kv2

Multi-Homing SecurityGatewayUser sManual
I
TableofContents
Aboutthis user manual...........................................................................................................................................6
What s New inVersion 2.000?................................................................................................................................7
Chapter 1 QuickStart.......................................................................................................................9
1.1 Check Your Package Contents.............................................................................................................9
1.2 Five steps to configureMH-5000 quickly...............................................................................................9
1.3 Wiring the MH-5000............................................................................................................................11
1.4 DefaultSettingsand architecture ofMH-5000.....................................................................................12
1.5 UsingtheSetup Wizard......................................................................................................................14
1.6 Internet Connectivity...........................................................................................................................17
1.6.1 LAN1-to-WAN1Connectivity.......................................................................................................17
1.6.2 WAN1-to-DMZ1 Connectivity......................................................................................................18
1.7 NAT/Router Mode and Transparent Mode...........................................................................................21
1.7.1 NAT/Router Mode.......................................................................................................................21
1.7.2 TransparentMode......................................................................................................................21
Chapter 2 SystemOverview..........................................................................................................23
2.1 Typical Example Topology..................................................................................................................23
2.2 Changingthe LAN1IPAddress...........................................................................................................24
2.2.1 From LAN1 to configure MH-5000LAN1 network settings...........................................................24
2.2.2 From CLI (commandline interface) toconfigure MH-5000LAN1 network settings.......................25
2.2.3 Web GUI designprinciple...........................................................................................................25
2.2.4 Rule principle..............................................................................................................................26
Chapter 3 Basic Setup...................................................................................................................29
3.1 Demands............................................................................................................................................29
3.2 Objectives...........................................................................................................................................29
3.3 Methods..............................................................................................................................................29
3.4 Steps..................................................................................................................................................30
3.4.1 Setup WAN1 IP..........................................................................................................................30
3.4.2 Setup DMZ1, LAN1Status..........................................................................................................31
3.4.3 Setup WAN1 IP alias..................................................................................................................33
3.4.4 Setup WAN Backup....................................................................................................................35
Chapter 4 SystemTools.................................................................................................................37
4.1 Demands............................................................................................................................................37
4.2 Objectives...........................................................................................................................................37
4.3 Methods..............................................................................................................................................37
4.4 Steps..................................................................................................................................................41
4.4.1 General settings.........................................................................................................................41
4.4.2 DDNSsetting..............................................................................................................................43
4.4.3 DNS Proxysetting......................................................................................................................43
4.4.4 DHCPRelaysetting....................................................................................................................44
4.4.5 SNMPControl............................................................................................................................44
4.4.6 Change MH-5000 interface.........................................................................................................45
Chapter 5 RemoteManagement....................................................................................................48

Multi-Homing SecurityGatewayUser sManual
II
5.1 Demands............................................................................................................................................48
5.2 Methods..............................................................................................................................................48
5.3 Remote Management Access Methods...............................................................................................49
5.4 Steps..................................................................................................................................................50
5.4.1 Telnet.........................................................................................................................................50
5.4.2 SSH...........................................................................................................................................50
5.4.3 WWW.........................................................................................................................................50
5.4.4 HTTPS.......................................................................................................................................51
5.4.5 SNMP.........................................................................................................................................51
5.4.6 ICMP..........................................................................................................................................51
Chapter 6 Authentication...............................................................................................................52
6.1 Demands............................................................................................................................................52
6.2 Methods..............................................................................................................................................52
6.3 Steps..................................................................................................................................................52
6.3.1 LocalSetting..............................................................................................................................52
6.3.2 Pop3(s)Setting...........................................................................................................................53
6.3.3 Imap(s) Setting...........................................................................................................................54
6.3.4 Radius Setting............................................................................................................................54
6.3.5 LDAP Setting..............................................................................................................................55
6.3.6 Exempt Host...............................................................................................................................56
Chapter 7 NAT.................................................................................................................................57
7.1 Demands............................................................................................................................................57
7.2 Objectives...........................................................................................................................................58
7.3 Methods..............................................................................................................................................58
7.4 Steps..................................................................................................................................................59
7.4.1 Setup Many-to-one NAT rules.....................................................................................................59
7.4.2 Setup Virtual ServerfortheFtpServer1.......................................................................................63
7.5 NAT modes introduction......................................................................................................................66
7.5.1 Many-to-One type.......................................................................................................................66
7.5.2 Many-to-Manytype.....................................................................................................................66
7.5.3 One-to-One type.........................................................................................................................67
7.5.4 NAT modes & types....................................................................................................................67
Chapter 8 Routing..........................................................................................................................69
8.1 Demands............................................................................................................................................69
8.2 Objectives...........................................................................................................................................70
8.3 Methods..............................................................................................................................................70
8.4 Steps..................................................................................................................................................70
8.4.1 Add a static routing entry............................................................................................................70
8.4.2 Add a policyrouting entry...........................................................................................................72
8.4.3 The priorityof the routing............................................................................................................74
Chapter 9 IP/Servicesgrouping....................................................................................................75
9.1 Demands............................................................................................................................................75
9.2 Objectives...........................................................................................................................................75
9.3 Methods..............................................................................................................................................75
9.4 Steps..................................................................................................................................................75
9.4.1 Setup Address............................................................................................................................75

Multi-Homing SecurityGatewayUser sManual
III
9.4.2 Setup Service.............................................................................................................................79
9.4.3 Setup Schedule..........................................................................................................................81
Chapter 10Firewall.........................................................................................................................83
10.1 Demands............................................................................................................................................83
10.2 Objectives...........................................................................................................................................83
10.3 Methods..............................................................................................................................................83
10.4 Steps..................................................................................................................................................84
10.4.1 Block internalPC session(LAN àWAN)....................................................................................84
10.4.2 Setup Anti-DoS...........................................................................................................................86
Chapter 11IP/MAC Binding...........................................................................................................89
11.1 Demands............................................................................................................................................89
11.2 Objectives...........................................................................................................................................89
11.3 Methods..............................................................................................................................................89
11.4 Steps..................................................................................................................................................89
Chapter 12VPN Technical Introduction.......................................................................................93
12.1 VPN benefit........................................................................................................................................93
12.2 RelatedTerminologyExplanation........................................................................................................93
12.2.1 VPN...........................................................................................................................................93
12.2.2 IPSec.........................................................................................................................................93
12.2.3 SecurityAssociation...................................................................................................................93
12.2.4 IPSec Algorithms........................................................................................................................93
12.2.5 KeyManagement.......................................................................................................................94
12.2.6 Encapsulation.............................................................................................................................95
12.2.7 IPSec Protocols..........................................................................................................................95
12.3 MakeVPN packets pass throughMH-5000.........................................................................................96
Chapter 13Virtual PrivateNetwork –IPSec.................................................................................97
13.1 Demands............................................................................................................................................97
13.2 Objectives...........................................................................................................................................97
13.3 Methods..............................................................................................................................................97
13.4 Steps..................................................................................................................................................98
Chapter 14Virtual PrivateNetwork –Dynamic IPSec................................................................115
14.1 Demands..........................................................................................................................................115
14.2 Objectives.........................................................................................................................................115
14.3 Methods............................................................................................................................................115
14.4 Steps................................................................................................................................................116
Chapter 15Virtual PrivateNetwork –Hub and Spoke VPN.......................................................123
15.1 Demands..........................................................................................................................................123
15.2 Objectives.........................................................................................................................................123
15.3 Methods............................................................................................................................................123
15.4 Steps................................................................................................................................................124
Chapter 16RemoteAccess VPN –PPTP....................................................................................129
16.1 Demands..........................................................................................................................................129
16.2 Objectives.........................................................................................................................................129
16.3 Methods............................................................................................................................................130
16.4 Steps................................................................................................................................................130

Multi-Homing SecurityGatewayUser sManual
IV
16.4.1 Setup PPTPNetwork Server.....................................................................................................130
16.4.2 Setup PPTPNetwork Client......................................................................................................131
Chapter 17RemoteAccess VPN –L2TP....................................................................................133
17.1 Demands..........................................................................................................................................133
17.2 Objectives.........................................................................................................................................133
17.3 Methods............................................................................................................................................133
17.4 Steps................................................................................................................................................134
17.4.1 Setup L2TP Network Server.....................................................................................................134
Chapter 18Content Filtering –Web Filters................................................................................137
18.1 Demands..........................................................................................................................................137
18.2 Objectives.........................................................................................................................................138
18.3 Methods............................................................................................................................................138
18.4 Steps................................................................................................................................................139
18.5 Setting priorities................................................................................................................................144
Chapter 19Content Filtering –Mail Filters.................................................................................147
19.1 Demands..........................................................................................................................................147
19.2 Objectives.........................................................................................................................................147
19.3 Methods............................................................................................................................................147
19.4 Steps for Anti-Virus...........................................................................................................................148
19.5 Steps for Anti-Spam..........................................................................................................................149
19.6 Steps for SMTPRelay.......................................................................................................................150
Chapter 20Content Filtering –FTPFiltering..............................................................................152
20.1 Demands..........................................................................................................................................152
20.2 Objectives.........................................................................................................................................152
20.3 Methods............................................................................................................................................152
20.4 Steps................................................................................................................................................153
Chapter 21Intrusion Detection Systems....................................................................................156
21.1 Demands..........................................................................................................................................156
21.2 Objectives.........................................................................................................................................156
21.3 Methods............................................................................................................................................156
21.4 Steps................................................................................................................................................157
Chapter 22Bandwidth Management...........................................................................................158
22.1 Demands..........................................................................................................................................158
22.2 Objectives.........................................................................................................................................159
22.3 Methods............................................................................................................................................160
22.4 Steps................................................................................................................................................160
22.4.1 Outbound Traffic Management.................................................................................................165
Chapter 23Load Balancer...........................................................................................................168
23.1 Demands..........................................................................................................................................168
23.2 Objectives.........................................................................................................................................168
23.3 Methods............................................................................................................................................168
23.4 Steps................................................................................................................................................169
23.4.1 Outbound Load Balancer..........................................................................................................169
Chapter 24High Availability........................................................................................................171
24.1 Demands..........................................................................................................................................171

Multi-Homing SecurityGatewayUser sManual
V
24.2 Objectives.........................................................................................................................................172
24.3 Methods............................................................................................................................................172
24.4 Steps................................................................................................................................................172
24.4.1 Setup High Availability..............................................................................................................172
Chapter 25System Status...........................................................................................................174
25.1 Demands..........................................................................................................................................174
25.2 Objectives.........................................................................................................................................174
25.3 Methods............................................................................................................................................174
25.4 Steps................................................................................................................................................174
Chapter 26Log System................................................................................................................177
26.1 Demands..........................................................................................................................................177
26.2 Objectives.........................................................................................................................................177
26.3 Methods............................................................................................................................................177
26.4 Steps................................................................................................................................................177
26.4.1 System Logs............................................................................................................................177
26.4.2 Syslog & Maillog......................................................................................................................178
Chapter 27System Maintenance................................................................................................180
27.1 Demands..........................................................................................................................................180
27.2 Steps for TFTP Upgrade...................................................................................................................180
27.3 Steps for Firmware upgradefrom WebGUI.......................................................................................181
27.4 Steps for Database Update from Web GUI........................................................................................182
27.5 Steps for FactoryReset....................................................................................................................183
27.5.1 Step for factoryreset underweb GUI........................................................................................183
27.5.2 Step for NORMAL factoryreset................................................................................................183
27.5.3 Steps forEMERGENT factoryreset..........................................................................................183
27.6 Save the currentconfiguration...........................................................................................................184
27.7 Steps for Backup / RestoreConfigurations........................................................................................184
27.8 Steps for Resetpassword.................................................................................................................185
AppendixA Command LineInterface(CLI)........................................................................186
A.1 Enable the port of MH-5000..........................................................................................................................186
A.2 CLI commands list (Normal Mode)................................................................................................................186
A.3 CLI commands list (RescueMode)................................................................................................................188
Appendix B Trouble Shooting.............................................................................................191
Appendix C System Log Syntax..........................................................................................195
Appendix D Glossaryof Terms............................................................................................201

Multi-Homing SecurityGatewayUser sManual
6
Aboutthis user manual
This user manualprovidesinformationabout installingand configuringyour MH-5000Multi-HomingSecurityGateway
using itsbuilt-inwebbrowser interface(WBI)and commandlineinterface (CLI).This guideisprimarilyfornetwork and
securitypersonnel who configuretheMulti-HomingSecurityGatewayandmonitor networks forevidence of intrusion
attempts andinappropriate transmission ofregulatedinformation. TheWBIisaversatile,configurablemonitoring
platform. For you to understand and useits functionality, youmust understand theWBI anditscapabilities.
Allthe examples afterChapter 2 in this manual, whichinstruct you howto configure the Multi-HomingSecurityGateway,
are taken fromMH-5000. Thehardware andsoftware specificationof theMH-5000 willbeintroduced inChapter1. You
canrefertheexamplesto configure your MH-5000.Thatwill helpyou toquick yourconfigurationand save you time.

Multi-Homing SecurityGatewayUser sManual
7
What sNew in Version 2.000?
This section describes theenhancementsthat were made to MH-5000as comparedtothe previous version. It includes
changes to thewaythat the MH-5000 operates, some ofwhichare reflectedbychanges to theWBIand others that were
madeto the MH-5000engine toimproveperformance and accuracy.As compared to the previous version,version 2.000
provides the following additionalimprovements:
Anti-DoS
Adenialof service(DoS) attack is anincident in whichauseror organization isdeprived of theservices ofaresource
theywouldnormallyexpect to have. Inordertoavoidtheloss of theparticularnetwork services suchas e-mailor even
securityloss, MH-5000provide Anti-DoSfunction tohelp usersto block the well-known Denial-of-Service attacks such as
WinNukeand LAN attacks.
-TCPSYN Flooding
-UDPFlooding
- ICMPFlooding
Please refertoSection10.4.2 fordetails.
Authentication
The MH-5000supports userauthentication tothe user database or toaRADIUS server. Users can beallowed toaccess
internal database afterpassingthe authentication.Inthisversion, weprovidethefollowingauthentication types, suchas
Local, POP3(s), IMAP(s), RADIUS, LDAP, etc. SeeChapter 6 Authenticationfordetails.
Books(Address/Service/Schedule)
Address: Allrulesrequiresource anddestination addresses. Youhave to addtheaddresses to each interface while
insertinganew firewallrule.Theseaddresses must bevalid addresses for the network connectedtothat interface.You
canalso organizerelated addresses into addressgroups to makeiteasier toaddrules. See Section 9.4.1fordetails.
Service: Use service to controlthe types of communication acceptedor deniedbythe firewall. Inthis version, we provide
youwith the predefined services. You can also create your owncustom services and add services to servicegroup. See
Section9.4.2 for details.
Schedule: Usescheduling tocontrolwhen therulesareactivatedordeactivate. You canalso organize the related
schedules into schedule groups. See Section9.4.3for details.
High Availability
Suppose your companyisafraid that the firewall maybe crashedsomeday, High Availabilitywill meet the requirement to
backup theoriginal system andlet thenetwork connection continually.It makes itpossibletolet thenetworkinyour
companyoperate smoothly. See Chapter 24HighAvailabilityfordetails.
IP/MAC Binding
IP/MAC bindingprotects MH-5000and your network from IP spoofing attacks.IP spoofingattempts to use theIPaddress
of a trusted computerto orthroughthe MH-5000 from adifferent computer.There aretwoIP/MAC Binding type for your
choice.You canchoosebindingtobindtheIPaddress withMACaddress toallowthe legaltraffic passingthrough

Multi-Homing SecurityGatewayUser sManual
8
MH-5000. Youcan also select range toallow arange of theIPaddressessuch as DHCPIPrange passingthrough
MH-5000. See Chapter 11 IP/MAC Binding for Details.
IPSecVPN improvements
Hub andSpokeVPN: Suppose that your companyhas amainoffice andtwobranch officesormore which
communicates usingahubandspoke VPNconfiguration.The main office isthehubwheretheVPN tunnels terminate,
whileBranch_1 and Branch_2 are thespokes.TheMainoffice has aVPN tunnel to eachbranch office.Both Branch_1
andBranch_2havetheirown VPN tunnel tothehub. The VPNSpoke allows VPN traffictopass fromone tunneltothe
other through a centralMH-5000 hub.SeeChapter15 Virtual Private Network –Hub and Spoke VPNfordetails.
MPPESupport: InMH-5000release II version, bothPPTPandL2TPcan support MPPE. Inother words, youcan
choose “Require data encryption”whileaclient computer running Windows XP/2000. However,this release II versionwill
notsupport MS-CHAP, youhave to check MS-CHAPv2 checkbox ifyou would like torequire data encryption.
Transparent Mode
Transparent modeprovidesthesame basic firewall protectionas NAT mode. Packetsreceivedbythe MH-5000 are
intelligentlyforwardedor blockedaccordingto the firewallrules. The MH-5000 can be insertedinto your networkwithout
changing your networkor anyof its components. SeeSection1.7.2 for details.
WANBackup
When WAN Backupis enabled,the systemwill start toping the public Internet Server IPaddresses with asequence of
everyspecified Timeout to check the connectionof thecurrent default WAN link. When the current default WAN link is
disconnected, MH-5000willtryto maketheping actionto the first Public Internet ServerIP addresswithinthespecified
Timeout. Whenall of them are timeout, the defaultroute/link willbeswitched toanother WAN link to continue theping
action within the specified Detection Interval until the system issuccessfultoping thespecified public IPaddress. See
Section3.4.4 for details.

MH-5000 User ManualChapter 1
Quick Start
9
Chapter 1
QuickStart
This chapterintroduces howtoquick setupthe MH-5000.
MH-5000is anintegrated all-in-onesolutionthat canfacilitatethe maximumsecurityand thebest resourceutilizationfor
the enterprises. It contains a high-performance statefulpacket inspection(SPI) Firewall,policy-based NAT,ASIC-based
wire-speed VPN,upgradeable Intrusion Detection System, DynamicRouting, Content Filtering, Bandwidth
Management, WANLoadBalancer,andother solutions inasingle box.Itisone of themostcost-effective all-in-one
solutions forenterprises.
1.1Check Your Package Contents
These are the items includedwith your MH-5000 purchase.Theyarethe followingitems
1. MH-5000 x 1
2. Quick Installation Guidex 1
3. CD-ROM Manual /InstallationGuide x 1
4. PowerCord x 1
5. Rack mount x 1
6. RS-232cablex 1
1.2Five steps to configure MH-5000 quickly
Let slook at thecommonnetwork topologywithout MH-5000applyinglike Figure 1-. This isatopologywhich is almost
used byallthe small/mediumbusiness or SOHOuse as their internet connectivity. Although that your topologyisnot
necessarilythe same diagram below,butit stillcan give you a guideline to configureMH-5000 quickly.
Nowyoucan payattention at theIP Sharer in thediagram. The IP Sharercanprovide youwith NAT (Network Address
Translation), PAT (Port Address Translation) and other functions.
Figure 1-1 TheexamplebeforeMH-5000 applies on it
Figure1-2 The example after MH-5000applies onit

MH-5000 User ManualChapter 1
Quick Start
10
Here we would liketo alter the original IP Sharerwith theMH-5000 like Figure 1-.If we hope to have MH-5000 to replace
the IP Sharer, we justneed to simplyexecutethe followingfive stepsasFigure1- showed. Bythese steps, we hope to
buildan imageto tellyouhow tolet MH-5000work basically.
Figure 1-3 Fivesteps to configure MH-5000
AstheFigure 1- illustrated, with thefive-stepconfigurations, MH-5000will have the samefunctions with the original IP
Sharer.Please see the following description of thefive-stepconfigurations.
1. Setup:
Install three physicallinesinclusive ofthe power cord, outbound link (connected WAN1 port)and inbounddirection
(connected LAN1port). Forthe details, please refer section1.3.
Continually, wewill connect to theweb GUI of MH-5000. So you must make surethatyou have aPC whichis
locatedin thesame subnet withMH-5000 before this step. Note:The default LAN1 port is (192.168.1.254 /
255.255.255.0). Refertosection 1.5for more information.
2. LAN:
Configure theLAN1 portof MH-5000.Youcan refertosection 1.4forthe defaultnetwork configurations of
MH-5000.Note: If you wereconnectedfrom LAN1 port and changedthe LAN1IP address settings of MH-5000.
The network will be disconnected since theIP address is different between your pcand MH-5000LAN1 port.
3. WAN:
Configure the WAN1port of MH-5000.Youcan refertosection 1.4 forthe default networkconfigurations of
MH-5000.
4. NAT:
Configure theconnection of LAN to WANdirection. It will make alltheclientpc access theinternet through
MH-5000.For more information, please refer to section1.6.1.

MH-5000 User ManualChapter 1
Quick Start
11
5. VirtualServer:
If there isany server located insidethe MH-5000. You mayhopethese servers can provide servicesoutside. So
you should configure theVirtual Serverwhich provides connections of WANtoLAN direction. Formore information,
please refertosection 1.6.2.
Afteryou completelyfinishedthe above steps, the connectivityfunctionof MH-5000 is probablywell-done.
1.3Wiring theMH-5000
A. First,connect the power cord to thesocket atthe back panelof the MH-5000 as inFigure 1- and then
plugthe other end ofthepower adapter toawalloutletorpower strip. The Power LEDwillturn ON to
indicate proper operation.
Figure1-4 Back panel of the MH-5000
B. UsinganEthernet cable, insert one end of thecabletothe WANport on the front panel of the MH-5000
andtheother endof thecableto a DSL orCable modem, asin Figure 1-.
C. Computers withanEthernet adapter can bedirectly connectedtoanyof theLAN ports using a
cross-overEthernet cable, as in Figure 1-.
D. Computers that act as servers to provide Internet services should be connected tothe DMZ portusing
anEthernet Cable, asin Figure 1-.

MH-5000 User ManualChapter 1
Quick Start
12
Figure 1-5 Front end of theMH-5000
1.4Default Settingsand architecture of MH-5000
You should haveanInternet account alreadyset up and havebeen given most of thefollowing informationas Table1-1.
Fillout thistable when you editthe web configuration of MH-5000.
Items Defaultvalue Newvalue
Password: admin
IP Address ____.____.____.____
SubnetMask ____.____.____.____
GatewayIP ____.____.____.____
PrimaryDNS ____.____.____.____
Fixed IP
SecondaryDNS ____.____.____.____
PPPoE Username ____.____.____.____
PPPoE PPPoE Password ____.____.____.____
WAN1
(Port 1)
DHCP
Not initialized
IP Address ____.____.____.____WAN2
(Port 2)
Fixed IP
SubnetMask
Not initialized
____.____.____.____

MH-5000 User ManualChapter 1
Quick Start
13
GatewayIP ____.____.____.____
PrimaryDNS ____.____.____.____
SecondaryDNS ____.____.____.____
PPPoE Username ____.____.____.____
PPPoE PPPoE Password ____.____.____.____
DHCP
IP Address 10.1.1.254 ____.____.____.____
DMZ1(Port3) IP Subnet Mask 255.255.255.0 ____.____.____.____
IP Address 192.168.1.254 ____.____.____.____
LAN1(Port 4) IP Subnet Mask 255.255.255.0 ____.____.____.____
IP Address 192.168.2.254 ____.____.____.____
LAN2(Port 5) IP Subnet Mask 255.255.255.0 ____.____.____.____
Table 1-1 MH-5000related network settings
Figure 1-6 Thedefault settings of MH-5000
Astheabove diagramFigure 1- illustrated, this diagramshowsthedefaulttopologyof MH-5000.Andyoucan configure
the MH-5000 byconnectingto the LAN1_IP (192.168.1.254)from the PC1_1 (192.168.1.1). In the following sections, we
will teach you how toquickly setup theMH-5000in thebasic appliances.

MH-5000 User ManualChapter 1
Quick Start
14
1.5Using the Setup Wizard
AcomputeronyourLAN1 must beassigned an IP address and SubnetMask fromthe same range as theIP address and
SubnetMask assigned totheMH-5000inorder tobe abletomake anHTTPS connection using awebbrowser. The
MH-5000isassigned anIPaddress of192.168.1.254withaSubnet Mask of255.255.255.0 bydefault. The computer
that willbeusedto configure theMH-5000 must be assigned an IPaddress between 192.168.1.1and 192.168.1.253with
a Subnet Mask of 255.255.255.0 to be abletoconnect to theMH-5000. This address rangecan be changed later. There
are instructions inthe MH-5000 Quick InstallationGuide, ifyoudonot know howtoset the IPaddress andSubnet Mask
foryour computer.
Step 1. Login
Type “admin”in the accountfield, “admin”in
the Password field and click Login.
Note: Please do not access web UI through
proxy,or the loginmaybe locked byothers or
the original user.
Connect to https://192.168.1.254
Step 2. Run Setup Wizard
Click the Run Setup Wizard. After login to https://192.168.1.254
BASIC SETUP>Wizard
Step 3. SystemName
Enter the Host Name and the Domain Name,
followed byclicking the Next.
BASIC SETUP>Wizard

MH-5000 User ManualChapter 1
Quick Start
15
Step 4. Operation Mode
MH-5000 Multi-Homing SecurityGatewaycan
operatein NAT/Router mode or
Transparent mode.Choose which operation
Mode for this device to use.
BASIC SETUP>Wizard>Next
NAT/Route mode
In NAT/Route mode,you can create NAT mode rules and Route mode rules. Forthe related information,please
refer to Chapter 7 and Chapter8.
Ÿ NAT mode rules use networkaddress translation to hide the addressesinamore secure network from users
in a less secure network.
Ÿ Route mode rules accept or denyconnections between networks without performing address translation.
Transparent mode
Transparentmode provides the same basic protection as NAT mode. Packets received bythe MH-5000 are
intelligentlyforwarded or blocked according tofirewallrules. MH-5000 can be inserted inyour network at any
point without the need to make any changes to your networkor anyof its components. However,VPN, NAT,
Routing and some advanced firewallfeatures (such as Authentication, IP/MAC Binding) are onlyavailablein
NAT/Route mode.
Note:
1. You cannotconnect theLAN1/LAN2/DMZ interfaces to the same Hub while using Transparent mode,
otherwise the traffic from the PCs under LAN1/LAN2/DMZinterfaces maybe blocked.
2. Ifyou would like to change the operation mode from NAT/Route mode to Transparent mode, you have to
backup the configuration file and then do the factoryreset first.
Table1-2The operation mode
Step 5. WAN Connectivity
Choose the type of IP Address Assignment
provided byyour ISP to access the Internet.
Here we have four types to select. Thiswill
determine how the IP address of WAN1 is
obtained. Click Next to proceed.
BASIC SETUP>Wizard>Next

MH-5000 User ManualChapter 1
Quick Start
16
Step 5.a DHCP client
If Get IPAutomatically (DHCP) is
selected, MH-5000 will request for IP address,
netmask, and DNS servers from your ISP. You
can use your preferred DNS by clicking the
DNS
IP Address and then completing the
Primary
DNS and Secondary DNS server IP addresses.
Click Next to proceed.
BASIC SETUP>Wizard>Next > DHCP
Step 5.b Fixed IP
IfFixed IP Address isselected, enter the
ISP-given IP Address, Subnet Mask,Gateway
IP, PrimaryDNS and SecondaryDNS IP. Click
Next to proceed.
BASIC SETUP>Wizard>Next > Fixed IP
Step 5.c PPPoE client
If PPP over Ethernet is selected, enter the
ISP-given User Name, Password and the
optional Service Name. Click Next to proceed.
BASIC SETUP>Wizard>Next > PPPoE

MH-5000 User ManualChapter 1
Quick Start
17
ü Warning Message
Please Note thatan alertmessage box “When changing to none fixed ipmode,system willdelete allip alias!”
willappear whileyou change Get IP Automatically(DHCP) or PPP over Ethernet but not Fixed IP Address as your WAN link.
Step 6. SystemStatus
Here we select Fixed IP method in WAN1
port. Then the MH-5000 provides ashort
summaryof the system. Please check if
anything mentioned above isproperly set into
the system. Click Finish to close the wizard.
BASIC SETUP>Wizard>Run Setup Wizard > Next> Next
1.6InternetConnectivity
Aftersetting up MH-5000with the wizard, MH-5000 canconnect to theISP. In thischapter, weintroduce LAN1-to-WAN1
Connectivitytoexplain howthecomputers underLAN1 can access theInternet atWAN1 through MH-5000.
Subsequently,weintroduce WAN1-to-DMZ1 Connectivitytoexplainhowthe servers under DMZ1 canbe accessed by
the LAN1 users andotherInternet userson the WAN1side.
You MUST press Applyto proceedto the nextpage.Once applyinganychanges,the settings are immediately
updated into the flashmemory.
1.6.1LAN1-to-WAN1 Connectivity
The LAN Settings pageallows you to modify the IPaddress and Subnet Mask thatwillidentify the MH-5000 onyour LAN.
This istheIP address youwill enterintheURL fieldofyourweb browser toconnectto theMH-5000.Itisalso theIP
address that all of the computers anddevices on yourLAN willuse as theirDefaultGateway.
Step 1. Device IPAddress
Setup the IP Address and IP Subnet Mask for
the MH-5000.
BASIC SETUP>LANSettings > LAN1Status

MH-5000 User ManualChapter 1
Quick Start
18
Step 2. Client IPRange
Enable the DHCP server ifyou want to use
MH-5000 to assign IP addresses to the
computersunder LAN1. Specifythe Pool
Starting Address, Pool Size, PrimaryDNS, and
SecondaryDNS that willbe assigned to them.
Example: inthe figure, the MH-5000 willassign
one IP address from 192.168.1.100 ~
192.168.1.119, together withthe DNS server
192.168.1.254,to the LAN1 PC thatrequests
foran IP address.
Step 3. Applythe Changes
Click Apply to save. Now youcan enablethe
DHCP clients on your LAN1 PCs to get an IP.
Step 4. Check NAT Status
The defaultsetting of NATisin Basic Mode.
After completing Step 3,the NAT is
automaticallyconfigured related rules toletall
private-IPLAN/DMZ-to-WANrequeststo be
translated with the publicIP assigned bythe
ISP.
ADVANCED SETTINGS > NAT> Status
Step 5. Check NAT Rules
The MH-5000 has added the NAT rules as the
right diagram. The rule Basic-LAN1 means
that, when matching the condition (requests of
LAN/DMZ-to-WAN direction with its source IP
falling in the range of 192.168.1.254 /
255.255.255.0), the request will be
translated into apublic-source-IP requests, and
then be forwarded to the destinations.
ADVANCED SETTINGS > NAT> NAT Rules
1.6.2WAN1-to-DMZ1 Connectivity
This section tells youhow to provideanFTPservice withaserverinstalled underyour DMZ1 to the public Internet users.
Afterfollowing thesteps, users at the WAN side can connect to the FTPserver at theDMZ1 side.