Planet ADSL VPN/Firewall Router ADW-4200 User manual

ADE-4200 / ADW-4200
ADSLVPN/Firewall Router
User s Manual

ii
Copyright
Copyright (C) 2003 PLANET TechnologyCorp.All rights reserved.
The products andprograms describedinthis User s Manual arelicensed products ofPLANET Technology,This
User s Manual contains proprietaryinformation protected bycopyright, andthis User s Manual and all
accompanying hardware, software, anddocumentation are copyrighted.
No part ofthis User s Manual maybe copied, photocopied,reproduced, translated,or reduced to anyelectronic
mediumor machine-readable formbyanymeans byelectronic or mechanical. Including photocopying,
recording, or information storage and retrieval systems, for anypurpose other than thepurchaser's personal
use, andwithout the prior express written permission of PLANET Technology.
Disclaimer
PLANET Technologydoes not warrant that thehardware will work properlyin all environmentsand applications,
and makes no warrantyand representation,either implied orexpressed, with respect tothequality,performance,
merchantability,or fitness for a particular purpose.
PLANET has made everyeffort to ensure that this Users Manualis accurate; PLANET disclaims liabilityfor any
inaccuracies or omissions that mayhave occurred.
Information in this User sManual is subject to changewithout notice and does not representacommitment on
the part ofPLANET.PLANET assumes no responsibilityfor anyinaccuracies that maybe containedinthis
User sManual. PLANET makes no commitment to update or keep current the information in this UsersManual,
and reserves the rightto makeimprovementsto this User sManual and/or tothe productsdescribedinthis
User s Manual, at anytime without notice.
If you findinformation in this manual that is incorrect, misleading,or incomplete, we wouldappreciateyour
comments and suggestions.
FCC Compliance Statement
This equipment generates and uses radio frequencyenergyand ifnotinstalled and used properly,that is, in
strict accordance with the instructions providedwith the equipment, maycause interference to radio and TV
communication.The equipment has been testedand foundto complywiththelimits for a Class Acomputing
device in accordance with the specifications in SubpartB ofPart 15 ofFCC rules, which are designed to provide
reasonable protectionagainst such interference in a residential installation. However, there is no guarantee that
interference will not occur in a particular installation.Ifyou suspect this equipment is causing interference, turn
your Ethernet Switch on and offwhile your radioor TV is showing interference, ifthe interference disappears
when you turn your Ethernet Switch offand reappears when you turn itbackon, there is interference being
caused bythe Ethernet Switch.
You can tryto correct theinterference byone or more ofthe following measures:
w Reorient the receiving radioor TV antennawhere this maybe done safely.
w To the extent possible, relocate the radio, TV or other receiver awayfromthe Switch.
w PlugtheEthernet Switch into adifferent power outletso thattheSwitch andthereceiverareondifferent
branch circuits.
Ifnecessary,you shouldconsult the placeofpurchase or an experienced radio/televisiontechnician for
additional suggestions.
CE mark Warning
The is a class B device,In a domestic environment, this product maycause radio interference, in which case
the user maybe requiredtotake adequate measures.
Trademarks
The PLANET logo is atrademark ofPLANET Technology.This documentation mayrefer to numerous hardware
and softwareproductsbytheir trade names. In most, ifnotall cases, thesedesignations areclaimed as
trademarks or registered trademarks bytheir respective companies.
Revision
User s Manual for PLANET ADSLVPN/Firewall Router:
Model:ADE-4200A/B, ADW-4200A/B
Rev:1.0(October 2003)
Part No.: EM-AD4200

Table of Contents
CHAPTER 1.INTRODUCTION..............................................................................................................................1
1.1 AN OVERVIEWOFTHEADE-4200/ADW-4200.................................................................................................1
1.2 PACKAGE CONTENTS.......................................................................................................................................1
1.3 ADE-4200/ADW-4200 FEATURES..................................................................................................................1
1.4 ADE-4200/ADW-4200 APPLICATION ..............................................................................................................3
CHAPTER 2.USING THE ROUTER......................................................................................................................5
2.1 CAUTIONS FORUSING THE ADE-4200/ADW-4200...........................................................................................5
2.2 THE TOP PANEL LEDS....................................................................................................................................5
2.3 THE REAR PORTS ...........................................................................................................................................6
2.4 CABLING.........................................................................................................................................................7
CHAPTER 3.CONFIGURATION...........................................................................................................................8
3.1 BEFORE CONFIGURATION................................................................................................................................8
3.2 CONNECTING THEADE-4200/ADW-4200.......................................................................................................8
3.3 CONFIGURING PC IN WINDOWS.......................................................................................................................8
3.3.1For Windows 98/ME..............................................................................................................................8
3.3.2For Windows NT4.0.............................................................................................................................11
3.3.3For Windows 2000..............................................................................................................................12
3.3.4For Windows XP..................................................................................................................................14
3.4 FACTORY DEFAULT SETTINGS........................................................................................................................16
3.4.1Username and Password....................................................................................................................16
3.4.2LAN and WAN Port Addresses...........................................................................................................17
3.5 INFORMATION FROM THE ISP.........................................................................................................................17
3.6 CONFIGURING WITHTHEWEB BROWSER........................................................................................................17
3.6.1STATUS.............................................................................................................................................19
3.6.2Quick Start.........................................................................................................................................20
3.6.3Configuration.....................................................................................................................................20
3.6.3.1 LAN.............................................................................................................................................................20
3.6.3.1.1 Ethernet................................................................................................................................................20
3.6.3.1.2 Wireless................................................................................................................................................21
3.6.3.1.3 Port Setting...........................................................................................................................................22
3.6.3.1.4 DHCPServer........................................................................................................................................24
3.6.3.2 WAN...........................................................................................................................................................24
3.6.3.2.1 ISP........................................................................................................................................................24
3.6.3.2.1.1 RFC 1483 routed...........................................................................................................................26
3.6.3.2.1.2 RFC 1483 bridged.........................................................................................................................26
3.6.3.2.1.4 PPPoArouted................................................................................................................................27
3.6.3.2.1.4 IPoArouted...................................................................................................................................28
3.6.3.2.1.5 PPPoE routed...............................................................................................................................29
3.6.3.2.2 DNS......................................................................................................................................................30
3.6.3.3 System........................................................................................................................................................30
3.6.3.3.1 Time Zone.............................................................................................................................................30
3.6.3.3.2 RemoteAccess.....................................................................................................................................31
3.6.3.3.3 Firmware Upgrade................................................................................................................................32
3.6.3.3.4 Backup/Restore....................................................................................................................................32
3.6.3.3.5 Restart Router.......................................................................................................................................32
3.6.3.3.6 User Management................................................................................................................................33
3.6.3.4 Firewall.......................................................................................................................................................33
3.6.3.4.1 General Settings...................................................................................................................................34
3.6.3.4.2 Packet Filter..........................................................................................................................................36
3.6.3.4.2.1 Port Filters.....................................................................................................................................36
3.6.3.4.2.2Address Filters..............................................................................................................................37
3.6.3.4.2.3 Packetfilter example.....................................................................................................................37
3.6.3.4.3 Intrusion Detection................................................................................................................................41
3.6.3.4.4 MAC Address Filter...............................................................................................................................44
3.6.3.4.5 URLFilter..............................................................................................................................................45
3.5.3.4.5.1 Keyword Filtering..........................................................................................................................46
3.5.3.4.5.2 Domain Filtering:...........................................................................................................................46
3.6.3.5 VPN............................................................................................................................................................47

iv
3.6.3.5.1 PPTP....................................................................................................................................................48
3.6.3.5.1.1 PPTPfor Remote Access..............................................................................................................48
3.6.3.5.1.2 PPTPfor LAN to LAN....................................................................................................................49
3.6.3.5.1.3An Example of Configuring a Remote Access PPTPVPN Dial-in Connection..............................50
3.6.3.5.1.4An Example of Configuring a Remote Access PPTPVPN Dial-out Connection............................54
3.6.3.5.1.5An Example of Configuring a LAN-to-LAN PPTPVPN Connection...............................................56
3.6.3.5.2 IPSec....................................................................................................................................................58
3.6.3.5.2.1 IPSec configuration.......................................................................................................................58
3.6.3.5.2.2An Example of Configuring a LAN-to-LAN IPSec VPN Connection...............................................61
3.6.3.6 Virtual Server..............................................................................................................................................63
3.6.3.6.1 An Example of Configuring a Web Server on the Local Network..........................................................65
3.6.3.6.2 An example of configuring the Web Server & the Router to be accessible remotely.............................66
3.6.3.7 Advanced....................................................................................................................................................68
3.6.3.7.1 Routing Table........................................................................................................................................68
3.6.3.7.2 Dynamic DNS.......................................................................................................................................69
3.6.3.7.2.1 Example of Configuring DDNS......................................................................................................69
3.6.3.7.3 Checking Emails...................................................................................................................................70
3.6.3.7.4 Device Management.............................................................................................................................71
3.6.3.7.4.1 Embedded Web Server.................................................................................................................71
3.6.3.7.4.2 Universal Plug and Play (UPnP)...................................................................................................72
3.6.3.7.4.3 SNMP Access Control...................................................................................................................72
3.6.4Save Configuration to Flash..............................................................................................................72
3.6.5Logout...............................................................................................................................................73
CHAPTER 4.TROUBLESHOOTING...................................................................................................................74
APPENDIXA.SPECIFICATION...........................................................................................................................75
APPENDIX B. PRODUCTSUPPORT..................................................................................................................76

1
Chapter 1. Introduction
1.1 An Overview of theADE-4200/ADW-4200
The ADE-4200 ADSLVPN/Firewall Router and ADW-4200 ADSLWireless VPN/Firewall
Router provide office and residential users the ideal solution for sharing ahigh-speed
ADSLbroadband Internet connection on an 11Mbps wireless network or a10/100Mbps
Fast Ethernet backbone. Theycan support downstream transmission rates of up to
8Mbps and upstream transmission ratesofup to 1Mbps. The products support PPPoA
(RFC 2364 -PPPover ATMAdaptation Layer 5), RFC 1483 encapsulation over ATM
(bridged orrouted), PPPover Ethernet (RFC 2516), and IPoA(RFC1577)to establish a
connection with ISP.
Theyalso serveas an Internet firewall, protecting your network from being accessed by
outside users. Not onlyprovide the natural firewall function (Network Address
Translation, NAT), theyalso provide rich firewall features to secure auser snetwork. All
incoming datapackets are monitored and filtered. Besides, theycan also be configured
to blockinternal users from accessing to the Internet.
Furthermore, PPTPand IPSec VPN are also supported. Utilizing 56-bit DES and 168-
bit 3DES encryption, header authentication, and Internet KeyExchange (IKE) access
control, their full IPSecVPN (virtual Private Network) capabilityprovides complete data
securityand privacyfor access and exchange of sensitivedata. The PLANETADE-
4200 and ADW-4200 offer the securityand flexibilityto make fast and simplesecure
ADSLnetwork connections.
1.2 Package Contents
1. One ADSLVPN/Firewall Router
2. One CD-ROM containing the on-line manual
3. One RJ-11ADSL/telephone cable
4. One straight-through CAT-5 Ethernet cable
5. One AC-DC power adapter (output: 12V DC, 1A)
6. One Quick Start Guide
1.3 ADE-4200/ADW-4200 Features
ADE-4200/ADW-4200 provides the following features:
ADSLMulti-Mode Standard: Supports downstream transmission rates of up to 8Mbps
and upstream transmission ratesof up to 1024Kbps. It also supportsrate management
that allowsADSLsubscribers to select an Internet access speed suiting their needs and
budgets. It is compliant with Multi-Mode standard (ANSI T1.413, Issue 2; G.dmt
(G.992.1); G.lite (G992.2).
Wireless Ethernet 802.11b access point: ADW-4200 Provides a wireless Ethernet

PLANET ADE-4200/ADW-4200 ADSLVPN/Firewall Router
2
802.11b access point for extending the communication media to WLAN.
Fast Ethernet Switch: A4-port 10/100Mbpsfast Ethernet switch is supported in the
LAN site and automaticswitching between MDI and MDI-X for10Base-Tand 100Base-
TXports is supported. An Ethernet straight or crossover cablecan be used directly,this
fast Ethernet switch will detect it automatically.
Multi-Protocol to Establish AConnection: Supports PPPoA(RFC 2364 -PPPover
ATMAdaptation Layer 5), RFC 1483 encapsulation over ATM(bridged or routed), PPP
over Ethernet (RFC 2516), and IPoA(RFC1577) to establish aconnection with the ISP.
The product also supports VC-based and LLC-based multiplexing.
Quick Installation Wizard: Supports aWEBGUI page to install this device quickly.
With this wizard, an end user can enter the information easilywhichtheyfrom the ISP,
then surfthe Internet immediately.
Universal Plug and Play(UPnP) and UPnPNATTraversal: This protocol is used to
enable simple and robust connectivityamong stand-alone devices and PCs from many
different vendors. It makes network simple and affordable forusers.UPnParchitecture
leverages TCP/IPand the Web to enable seamlessproximitynetworking in addition to
control and data transfer among networked devices.
Network Address Translation (NAT): Allowsmulti-users to access outside resource
such as Internet simultaneouslywith one IPaddress/one Internet access account.
Besides, manyapplication layer gateway(ALG) are supported such as web browser,
ICQ, FTP,Telnet, E-mail, News, Net2phone, Ping, NetMeeting and others.
Firewall: Supports SOHO firewall with NATtechnology.Automaticallydetects and
blocks the Denial of Service (DoS) attack. The packet filtering and SPI are also
supported. The hacker sattackwill be recorded associated withtimestamp in the
securityloggingarea. More firewall features will be added continually,please visit our
web site to download latest firmware.
Domain Name System (DNS) relay: provides an easywayto map the domain name (a
friendlyname for users such as www.yahoo.com)and IPaddress. When alocal
machine sets its DNS server with this router sIPaddress, then everyDNS conversion
requests packet from the PC to this routerwill be forwarded to the real DNS in the
outside network. After the router getsthe reply, then forwards it back to the PC.
Dynamic Domain Name System (DDNS): The Dynamic DNS service allowsyou to
alias adynamic IP address to astatic hostname. This dynamic IP address is the WAN
IP address. For example, to usethe service,you must first applyan account from this
free Web server http://www.dyndns.org/. There aremore than 5DDNS servers
supported.
Virtual Private Network (VPN): Allowsauser to make atunnel with aremote site
directlyto secure the data transmission among the connection. Users can use
embedded PPTPclient/server and IPSec supported bythis router to makeaVPN
tunnel orthe user can run the PPTPclient in PC and the router alreadyprovides IPSec
and PPTPpass through function to establishaVPN connection ifthe user likesto run
the PPTPclient in his local computer.

Chapter 1 Introduction
3
PPPover Ethernet (PPPoE): Provide embedded PPPoE client function to establish a
connection. Users can get greater accessspeed without changing the operation
concept, sharing the same ISPaccount and paying for one accessaccount. NoPPPoE
client software is required for the local computer.The AlwaysON, Dial On Demand and
auto disconnection (Idle Timer) functions are provided too.
Virtual Server: Users can specifysome services to be visible from outside users. The
router can detect incoming service request and forward it to the specific local computer
to handle it. For example, users can assignaPC in aLAN acting as aWEB server
inside and expose it to the outside network. Outside users can browse an inside web
server directlywhile it is protected byNAT. ADMZ host setting is also provided to a local
computer exposed to the outside network, Internet.
Rich Packet Filtering: Not onlyfilters the packet based on IPaddress, but also based
on Port numbers.
Dynamic Host Control Protocol (DHCP) client and server: In the WAN site, the
DHCPclient can get an IPaddressfrom the Internet Server Provider (ISP) automatically.
In the LANsite, the DHCPserver can allocate up to 253 client IPaddressesand
distribute them including IPaddress, subnet mask aswell as DNS IPaddressto local
computers. It provides an easywayto manage the local IPnetwork.
Static andRIP1/2 Routing: Supports an easystatic table or RIP1/2 routing protocol to
support routing capability.
SNTP: An easywayto get the network real time information from an SNTPserver.
Web based GUI: supports web based GUI for configuration and management. It is
user-friendlywith an on-line help, providing necessaryinformation and assist user
timing. It alsosupportsremote management capabilityfor remote usersto configure
and manage this product.
Firmware Upgradeable: the device can be upgraded to the latest firmware through the
WEB based GUI.
Rich management interfaces: Supportsflexible management interfaces with local
console port, LAN port, and WAN port. Users can useterminal application through
console port to configure and manage the device, or Telnet, WEBGUI, and SNMP
through LAN or WANports to configure and manage a device.
1.4 ADE-4200/ADW-4200 Application
Internet Connection with Firewall:
Theyare the perfectsolution to connect asmall group of PCs to ahigh-speed broadband
Internet connection. Multi-users can havehigh-speed Internet access simultaneously.With
their policy-based firewall and Intrusion detection function, the internal network is secured
from anyhacker attack.
VPN Connectivity:

PLANET ADE-4200/ADW-4200 ADSLVPN/Firewall Router
4
The ADE-4200 and ADW-4200 VPN connectivitysupport client-to-VPN gatewayand VPN
LAN-to-LANconnections. Using theseconnection capabilities, mobile workers mayattach
to and access LAN resources from the public Internet while theyare workingat home or at
branches abroad. All corporate remote offices can deployaADE-4200 /ADW-4200 and
establish secure connection with headquarters and share resources and information
through the Internet in a safe and secure way.

5
Chapter 2. Using the Router
2.1 Cautions for using the ADE-4200/ADW-4200
Do not place the ADE-4200/ADW-4200 underhigh humidity and high
temperature.
Do not use the same power source for ADE-4200/ADW-4200 with other
equipment.
Do not open or repair the case yourself. If the ADE-4200/ADW-4200 is too
hot, turn off the power immediately and have a qualified serviceman repair it.
Place the ADE-4200/ADW-4200 on a stable surface.
Only use the power adapter that comes with the package.
2.2 The Top Panel LEDs
ADSLVPN/ Firewall Router
ADE-4200
PWRSYS1234MAILPPPADSL
LAN
ADE-4200

PLANET ADE-4200/ADW-4200 ADSLVPN/Firewall Router
6
PWRSYS1234WLANMAILPPPADSL
ADSL Wireless VPN / Firewall Router
ADW-4200
LAN
ADW-4200
LED Meaning
PWR Lit when power ON
SYS Lit when system is ready
LAN port
1 ~ 4 Lit when connected to Ethernet device Green for 100Mbps; Orange for 10Mbps
Blinking when data transmit/received
WLAN
(ADW-4200 only)
Lit green when the wireless connection is
established. Flasheswhen sending or
receiving data.
MAIL Lit when there is email in the email account
PPP Lit when there is a PPPoA/PPPoE
connection
ADSL Lit when successfullyconnected to an ADSL
DSLAM
2.3 The Rear Ports
Console
ADSL
9600, N,8,1
ON
OFF
RESET
1234
12V DC
+
LAN
ADE-4200
9600, N, 8, 1
ON
OFF
12V DC
+
1234
Console
ADSL LAN
ADW-4200
Port Meaning

Chapter 2 Using ADE-4200/ADW-4200
7
ADSL Connect the supplied RJ-11 cable to this port when
connecting to the ADSL/telephone network.
Console Connect a PS2 or DB9 RS-232 cable to this port
when connecting to a PC s RS-232 port (9-pin serial
port). Please note that console cable is not
provided on standard package.
LAN 1 —4
(RJ-45
connector)
Connectan UTPEthernet cable to one of the four
LAN ports when connecting to aPC or an
office/home network of 10Mbpsor 100Mbps.
Reset After the device is powered on, press it to reset the
device or restore to factorydefault settings.
The operation is as below:
0-3 seconds: reset the device
3-6 seconds: no action
6 seconds or above: restore to factorydefault
settings (this is used when you can not login to the
router, e.g. forgot the password)
PWR Connect the supplied power adapter to this jack.
Power Switch
Power ON/OFF switch
2.4 Cabling
The most common problem is bad cabling or ADSLline. Make sure that all connected
devices are turned on. On the front of the product is a bank ofLEDs. As a first check,
verifythat the LAN Link and ADSLline LEDs are lit. Iftheyare not, verifythat you are
using the proper cables.

8
Chapter 3. Configuration
The ADE-4200/ADW-4200 can be configured with your Web browser. The web browser
is included as astandard application in the following operation systems, UNIX, Linux,
Mac OS, Windows98/NT/2000/Me, etc. The product provides averyeasyand user-
friendlyinterface for configuration.
3.1 Before Configuration
This section describes the configuration required byLAN-attached PCs that
communicate with the ADE-4200/ADW-4200, either to configurethe device, or for
network access. ThesePCs must havean Ethernet interface installed properly,be
connected to the ADE-4200/ADW-4200 either directlyor through an external repeater
hub, and haveTCP/IPinstalled and configured to obtain an IPaddress through a DHCP
server or afixed IPaddress that must be inthe same subnet of the ADE-4200/ADW-
4200. The default IPaddress ofthe ADE-4200/ADW-4200 is 192.168.1.254 and subnet
maskis 255.255.255.0. The bestand easywayis to configure the PC to get an IP
address from the ADE-4200/ADW-4200. Alsomake sureyou haveUNINSTALLED any
kind ofsoftware firewall that can cause problems accessing the 192.168.1.254 IP
address ofthe router.
Please followthe steps belowfor PCsnetwork environment installation. First ofall,
please check your PC snetwork components.The TCP/IPprotocol stack and Ethernet
network adapter must be installed. If not, please refer to MS Windows related manuals.
Any TCP/IP capableworkstationcanbeusedtocommunicatewith or through
theADE-4200/ADW-4200Toconfigureother types ofworkstations,please
consult the manufacturers documentation.
3.2 Connecting the ADE-4200/ADW-4200
1. Connect the Router to a LAN (Local Area Network) and the ADSL/telephone
network.
2. Power on the device
3. Make sure the PWRand SYS LEDs are lit steady& LAN LED is lit.
4. Before proceeding to the next step, make sure you have uninstalled anysoftware
firewall.
3.3 Configuring PC inWindows
3.3.1 For Windows 98/ME
1. Go to Start / Settings / Control Panel. In the Control Panel, double-click on
Network and choose the Configuration tab.

Chapter 3 Configuration
9
2. Select TCP/ IP-> NE2000 Compatible, or the name ofanyNetwork Interface Card
(NIC) in your PC.
3. Click Properties.
4. Select the IPAddress tab. In this page, click the Obtain an IPaddress
automatically radio button.

PLANET ADSLVPN / Firewall Router
10
5. Then select the DNS Configuration tab.
6. Select the Disable DNS radio button and click “OK”to finish the configuration.

Chapter 3 Configuration
11
3.3.2 For Windows NT4.0
1. Go to Start / Settings / Control Panel. In the Control Panel, double-click on
Network and choose the Protocols tab.
2. Select TCP/IPProtocol and click Properties.
3. Select the Obtain an IPaddress from a DHCPserver radio button and click OK.

PLANET ADSLVPN / Firewall Router
12
3.3.3 For Windows 2000
1. Go to Start / Settings / Control Panel. In the Control Panel, double-click on
Network and Dial-up Connections.
2. Double-click LANArea Connection.
3. In the LANArea Connection Status window,click Properties.

Chapter 3 Configuration
13
4. Select Internet Protocol (TCP/IP) and click Properties.
5. Select the Obtain an IPaddress automaticallyand the Obtain DNS server address
automaticallyradio buttons.
6. Click OK to finish the configuration.

PLANET ADSLVPN / Firewall Router
14
3.3.4 For Windows XP
1. Go to Start / Control Panel (in Classic View). In the Control Panel, double-click on
Network Connections.
2. Double-click Local Area Connection
3. In the LANArea Connection Status window,click Properties.

Chapter 3 Configuration
15
4. Select Internet Protocol (TCP/IP) and click Properties.
5. Select the Obtain an IPaddress automaticallyand the Obtain DNS server address
automaticallyradio buttons

PLANET ADSLVPN / Firewall Router
16
6. Click OK to finish the configuration.
3.4 Factory Default Settings
Before configurating this ADE-4200/ADW-4200, you need to knowthe following default
settings.
1. Web Configurator
Username: admin
Password : admin
2. Device IPNetwork settings in LAN site
IPAddress : 192.168.1.254
Subnet Mask: 255.255.255.0
3. ISPsetting in WAN site
PPPoE
4. DHCPserver
DHCPserver is enabled.
Start IPAddress: 192.168.1.100
IPpool counts: 100
3.4.1 Username and Password
The default username and password are admin and admin respectively.
If you ever forget the password to log in, you may press the RESETbutton to
restore the factory default settings..