Contents 5 Admin 8 Setting 12 Date/Time 22 Multiple Subnet 23 Hacker Alert 34 Blaster Alert 38 Route Table 39 DHCP 43 Host Table 46 DDNS 51 Lan
9Modify the Sub-Administrator’s Password Step 1. In the Admin window, locate the Administrator name you want to edit, and click on Modify in the Con
99Accessing the Schedule window Click on Schedule on the menu bar and the schedule window will appear displaying the active schedules. The follow
100Adding a new Schedule Step 1: Click on the New Entry button and the Add New Schedule window will appear. Step 2: Schedule Name: Fill i
101Modifying a Schedule Step 1: In the Schedule window, find the policy to be modified and click the corresponding Modify option in the Configure
102Removing a Schedule Step 1: In the Schedule window, find the policy to be removed and click the corresponding Remove option in the Configure fi
103
104QoS By configuring the QoS, you can control the outbound Upstream/downstream Bandwidth. The administrator can configure the bandwidth according
105Configuration of QoS Click QoS in the menu bar on the left hand side. Definitions: Name:The name of the QoS you want to configure. Downstream
106Add a New QoS Step 1. Click QoS in the menu bar on the left hand side. Step 2. Click the New Entry button to add new QoS. Definition Name:The
107Modify a QoS Step 1. Click QoS in the menu bar on the left hand side. Click the Modify button to modify QoS. Definition: Name:The name of the
108Removing a QoS Step 1. In the QoS window, find the QoS you want to change, and click Delete in the Configure column. Step 2. In the Delete QoS
10Removing a Sub Administrator Step 1. In the Administration table, locate the Administrator name you want to edit, and click on the Remove opti
109
110Authentication By configuring the Authentication, you can control the user’s (Internal user or remote user who connect by VPN and IPSec) connect
111Define the required fields of Authentication Authentication Management ! Provide the Administrator the port number and valid time to setup Ovis
112 & When the user connect to external network by Authentication, the following page will be displayed:
113& It will connect to the appointed website after passing Authentication: If the user ask for authentication positively, can enter the
114Auth-User Name: ! The user account for Authentication you want to set. Password: ! The password when setting up Authentication. Confirm Pas
115Setting a specific user to connect with external network only before passing the authentication of policy. (Adopt the built-in Auth User Fu
116STEP 2. Enter the following setting in Auth of Authentication function: ! Click New User ! Auth-User Name: Enter guest ! Password: Enter 123
117STEP 3﹒Add a policy in Outgoing Policy and input the Address and Authentication of STEP1, 2
118STEP 4﹒When user_1 is going to access to Internet through browser, the authentication UI will appear in Browser. After entering the correct user
11Settings The Administrator may use this function to backup Bandwidth Manager configurations and export (save) them to an “Administrator” computer
119Setting the users to connect with external network only before passing the authentication of policy. (Adopt external RADIUS Server built-in Windo
120STEP 3﹒Choose Internet Authentication Service (IAS)
121STEP 4﹒Click [Start] # [Control Panel] # [Administrative Tools], Choose [Internet Authentication Service]
122STEP 5﹒Press right button on RADIUS Clients and choose New RADIUS Client
123STEP 6﹒Enter the Name and Client Address (also the Ovislink-RS2000 IP)
124STEP 7﹒Choose RADIUS Standard; enter Shared Secret and Confirm Shared Secret. (The settings must be the same as RADIUS of Ovislink-RS2000)
125STEP 8﹒Press the right button on Remote Access Policies and select to add New Remote Access Policy.
126STEP 9﹒Select Use the wizard to set up a typical policy for a common scenario and enter the Policy name.
127STEP 10﹒Select Ethernet
128STEP 11﹒Choose User
12Entering the Settings window Click Setting in the System menu to enter the Settings window. The Bandwidth Manager Configuration settings will be s
129STEP 12﹒Select MD5-Challenge
130STEP 13﹒Press the right button on Radius and choose Properties.
131STEP 14﹒Select Grant remote access permission and Remove the original setting, click Add to add a new one.
132STEP 15﹒Add Service-Type
133STEP 16﹒Add Authenticate Only from the left side.
134STEP 17﹒Press Edit Profile button and select Authentication and select Unencrypted authentication (PAP, SPAP)
135STEP 18﹒Add Auth User. Click [Start] # [Setting]# [Control Panel] # [Administrative Tools], Choose [Computer Management]
136STEP 19﹒Press the right button on the Users and select New User. STEP 20﹒Complete the setting of Windows 2003 RADIUS Server.
137STEP 21﹒Enter IP, Port and Shared Secret (The setting must be the same as RADIUS Server) in RADIUS of Authentication STEP 22﹒Add Radius User
138STEP 23﹒Add a policy of Auth User Group (RADIUS) that set by STEP 22 in Outgoing Policy.
13Exporting Bandwidth Manager Gateway settings Step 1. Under Bandwidth Manager Configuration, click on the Download button next to Export System
139STEP 24﹒When the user is going to connect with Internet through browser, the Authentication windows will appear in browser. After entering the co
140Content filtering The Administrator may setup URL Blocking to prevent LAN network users from accessing a specific website on the Internet. An
141URL blocking Entering the URL blocking window Click on URL Blocking under the Configuration menu bar. Click on New Entry.
142Adding a URL Blocking policy Step 1: After clicking New Entry, the Add New Block String window will appear. Step 2: Enter the URL of the website
143 Modifying a URL Blocking policy Step 1: In the URL Blocking window, find the policy to be modified and click the corresponding Modify option i
144Removing a URL Blocking Step 1: In the URL Blocking window, find the policy to be removed and click the corresponding Remove option in the Co
145Blocked URL site: When a user from the LAN network tries to access a blocked URL, the error below will appear.
146General Blocking To let Popup、ActiveX、Java、Cookie in or keep them out. Step 1: Click Content Filtering in the menu. Step 2: 【General Blockin
147Step 4: Add a Outgoing Policy and use in Content Filtering function: When the system detects the setting, the Bandwidth Manage
148P2P Blocking Restrict the Internal Users to access to the file on Internet by P2P STEP 1﹒Select the following data in P2P of Content Blocking fu
14Importing Bandwidth Manager settings Step 1. Under Bandwidth Manager Configuration, click on the Browse button next to Import System Settings. Whe
149STEP 2﹒Add a new Outgoing Policy and use in Content Filtering function: STEP 3﹒Complete the policy of restricting the internal use
150Restrict the Internal Users to send message, files, video and audio by Instant Messaging STEP 1﹒Enter as following in IM Blocking of Content Blo
151Add a new Outgoing Policy and use in Content Filtering function: STEP 2﹒Complete the policy of restricting the internal users to
152Restrict the Internal Users to access to video, audio, and some specific sub-name file from http or ftp protocol directly STEP 1﹒Enter the follo
153STEP 2﹒Add a new Outgoing Policy and use in Content Filtering function: STEP 3﹒Complete the Outgoing Policy of restricting the i
154Virtual Server The Bandwidth Manager separates an enterprise’s Intranet and Internet into LAN networks and WAN networks respectively. Generally
155How to use Virtual Server and mapped IP Virtual Server and Mapped IP are part of the IP mapping scheme. By applying the incoming policies, Virtua
156Mapped IP LAN private IP addresses are translated through NAT (Network Address Translation). If a server is located in the LAN network, it has a
157Entering the Mapped IP window Step 1. Click Mapped IP under the Virtual Server menu bar and the Mapped IP configuration window will appear. Defi
158Adding a new IP Mapping Step 1. In the Mapped IP window, click the New Entry button. The Add New Mapped IP window will appear. ! WAN IP: select t
15Restoring Factory Default Settings Step 1. Select Reset Factory Settings under Bandwidth Manager Configuration. Step 2. Click OK at the bottom-rig
159Modifying a Mapped IP Step 1. In the Mapped IP table, locate the Mapped IP you want it to be modified and click its corresponding Modify option i
160Removing a Mapped IP Step 1. In the Mapped IP table, locate the Mapped IP desired to be removed and click its corresponding Remove option in the
161Virtual Server Virtual server is a one-to-many mapping technique, which maps a real IP address from the WAN interface to private IP addresses of
162Adding a Virtual Server Step 1. Click an available virtual server from Virtual Server in the Virtual Server menu bar to enter the virtual server
163Modifying a Virtual Server IP Address Step 1. Click the virtual server to be modified Virtual Server under the Virtual Server menu bar. A new win
164Removing a Virtual Server Step 1. Click the virtual server to be removed in the corresponding Virtual Server option under the Virtual Server m
165Virtual Server’s service Setting the Virtual Server’s services Step 1. For the Virtual Server which has already been set up with an IP address, c
166Adding New Virtual Server Service Configuration Step 1. Select Virtual Server in the menu bar on the left hand side, and then select Virtual Serv
167Modifying the Virtual Server configurations Step 1. In the Virtual Server window’s service table, locate the name of the service desired to be m
168Removing the Virtual Server service Step 1. In the Virtual Server window’s service table, locate the name of the service desired to be removed an
16Enabling E-mail Alert Notification Step 1. Select Enable E-mail Alert Notification under E-Mail Settings. This function will enable the Bandwidth
170Policy This section provides the Administrator with facilities to sent control policies for packets with different source IP addresses, source po
171Outgoing This section describes steps to create policies for packets and services from the LAN network to the WAN network. Entering the Outgoing
172Adding a new Outgoing Policy Step 1: Click on the New Entry button and the Add New Policy window will appear. Step 2: Source Address: Select
173Logging: Select Enable to enable flow monitoring. Statistics: Select Enable to enable flow statistics. Content Filtering: Select Enable to enable
174Modifying an Outgoing policy Step 1: In the Outgoing policy section, locate the name of the policy desired to be modified and click its correspon
175Removing the Outgoing Policy Step 1. In the Outgoing policy section, locate the name of the policy desired to be removed and click its correspon
176Enabled Monitoring function: Log: If Logging is enabled in the outgoing policy, the MH-2000 will log the traffic and event passing through the B
177Alarm: If Logging is enabled in the outgoing policy, the MH-2000 will log the traffic alarms and event alarms passing through the Bandwidth Manag
178Statistics: If Statistics is enabled in the outgoing policy, the Bandwidth Manager will display the flow statistics passing through the Bandwidth
17Web Management (WAN Interface) (Remote UI management) The administrator can change the port number used by HTTP port anytime. (Remote UI managemen
179Incoming This chapter describes steps to create policies for packets and services from the WAN network to the LAN network including Mapped IP and
180! Action: control actions to permit or deny packets from WAN networks to Virtual Server/Mapped IP travelling through the device. ! Option: spec
181Adding an Incoming Policy Step 1: Under Incoming of the Policy menu, click the New Entry button. Step 2: Source Address: Select names of the
182Statistics: select Enable to enable flow statistics. Schedule: Select the item listed in the schedule to enable the policy to automatically execu
183Modifying Incoming Policy Step 1: In the Incoming window, locate the name of policy desired to be modified and click its corresponding Modify
184Removing an Incoming Policy Step 1: In the Incoming window, locate the name of policy desired to be removed and click its corresponding [Remove
186 VPN The Ovislink-RS2000 adopts VPN to set up safe and private network service. And combine the remote Authentication system in order to integr
187Define the required fields of VPN: RSA: ! A public-key cryptosystem for encryption and authentication. Preshared Key: ! The IKE VPN mus
188DES (Data Encryption Standard): ! The Data Encryption Standard developed by IBM in 1977 is a 64-bit block encryption block cipher using a 56-b
18MTU (set networking packet length) The administrator can modify the networking packet length. Step 1. MTU Setting. The administrator can modify th
189Define the required fields of IPSec Function Name: ! The VPN name to identify the VPN tunnel definition. The name must be different for the tw
190Define the required fields of PPTP Server Function PPTP Server: ! To select Enable or Disable Client IP Range: ! Setting the IP addresses
191Define the required fields of PPTP Client Function User Name: ! Displays the PPTP Client user’s name when connecting to PPTP Server Server Add
192We set up six VPN examples in this chapter: No. Suitable Situation Example Ex1 IPSec Autokey Setting IPSec VPN connection between two Ovislink-R
193Setting IPSec VPN connection between two Ovislink-RS2000 Preparation Company A WAN IP: 61.11.11.11 LAN IP: 192.168.10.X Company B WAN IP: 2
194STEP 2﹒In the list of IPSec Autokey, fill in Name with VPN_A, and select LAN in From Source. Also fill in Subnet: 192.168.10.0 and Mask: 255.255.
195STEP 5﹒Select ISAKMP Algorithm in Encapsulation list. Choose the Algorithm when setup connection. Please select ENC Algorithm (3DES/DES/AES), AU
196STEP 7﹒After selecting Perfect Forward Secrecy and enter 28800 seconds in IPSec Lifetime, also can enter the Keep Alive IP of Company B: 192.168.
197The Default Gateway of Company B is the LAN IP of the Ovislink-RS2000 192.168.20.1. Follow the steps below: STEP 1﹒Enter the default IP of Gatew
198STEP 3﹒Select Remote Gateway-Fixed IP In To Destination list and enter the IP Address, Subnet 192.168.10.0, and Mask 255.255.255.0 of Company A.
1 Service 89 Pre-defined 90 Custom 91 Group 95 Schedule 99 QoS 105 Authentication 111 Content Filtering 141 URL Blocking 142 General Blocking
19To-Bandwidth Manager Packets Log The administrator select this option to the device’s To-Bandwidth Manager Packets Log. Once this function is e
199STEP 6﹒You can choose Data Encryption+Authentication or Authentication Only to communicate in IPSec Algorithm list: ENC Algorithm: 3DES/DES/AES/N
200STEP 9﹒Click OK to complete the setting of Company B STEP 10﹒Complete IPSec VPN Connection
201Setting VPN connection between Ovislink-RS2000 IPSec VPN and Windows 2000 IPSec VPN Preparation Company A Ovislink-RS2000 WAN IP: 61.11.11.11
202STEP 2﹒In the list of IPSec Autokey, fill in Name with VPN_A, and select LAN in From Source. Also fill in Subnet: 192.168.10.0 and Mask: 255.255.
203STEP 5﹒Select ISAKMP Algorithm in Encapsulation list. Choose the Algorithm when setup connection. Please select ENC Algorithm (3DES/DES/AES), AU
204STEP 7﹒After selecting Perfect Forward Secrecy and enter 28800 seconds in IPSec Lifetime, also can enter the Keep Alive IP of Company B: 211.22.2
205The PC of Company B use Real IP Address: 211.22.22.22. Follow the steps below: STEP 1﹒Enter Windows2000 and select Run in Start.
206STEP 2﹒In the Run WebUI, enter the command: mmc in Open field. STEP 3﹒Enter File in Console 1 WebUI, select File option and then select Add
207STEP 4﹒Enter Add in Add/Remote Snap-ins. And add IP Security Policy Management in Add Standalone Snap-in WebUI.
208STEP 5﹒Select Local computer to complete adding
20Bandwidth Manager Reboot The administrator select this option to the device’s Bandwidth Manager Reboot. Once this function is enabled, the Band
209STEP 6﹒Complete adding IP Security Policy Management
210STEP 8﹒Press the right button of the mouse in IP Security Policies on Local Computer selection and select Create IP Security Policy.
211STEP 9﹒Click on Next
212STEP 10﹒Enter IP Security Policy Name and Description and click on Next in IP Security Policy Wizard WebUI.
213STEP 11﹒Please cancel Active the default response rule selection and click on Next.
214STEP 12﹒Complete setting IP Security Policy and click on Finish. Select the Edit properties
215STEP 13﹒Enter VPN_B Properties WebUI and do not select Use Add Wizard. Select Add and enter Edit Properties
216STEP 14﹒Click on Add in New Rule Properties WebUI
217STEP 15﹒Please do not select Use Add Wizard in IP Filter List. Change the name as VPN_B WAN TO LAN and click Add
218STEP 16﹒After entering Filter Properties, please select A specific IP Address in Source address and enter the WAN IP of Company B: 211.22.22.22,
21Date/Time Synchronizing the Bandwidth Manager with the System Clock The administrator can configure the Bandwidth Manager.s date and time by eithe
219STEP 17﹒Complete the setting and close IP Filter List WebUI.
220STEP 18﹒ Select Require Security in Filter Action WebUI and click Edit.
221STEP 19﹒Enter Require Security Properties WebUI and select Session key perfect forward secrecy.
222STEP 20﹒Please select Custom/None/3DES/MD5 and click Edit
223STEP 21﹒Click Custom (provide for professional users) and select Settings.
224STEP 22﹒ Please select ESP and choose MD5 and 3DES. Also select Generate a new key every. Enter 28800 seconds and click OK triple times to go ba
225STEP 23﹒Enter Connection Type and select All network connections
226STEP 24﹒Enter Tunnel Setting WebUI. Select The tunnel endpoint is specified by this IP address and enter the WAN IP of Company A: 61.11.11.11
227STEP 25﹒ Enter Authentication Methods WebUI and select Edit.
228STEP 26﹒Select the item Use this string to protect preshared key and enter the preshared key: 123456789
22Multiple Subnet NAT mode Multiple Subnet allows local port to set multiple subnet works and connect with the internet through different WAN IP Add
229STEP 27﹒Complete Setting and close the WebUI
230STEP 28﹒Complete the VPN_B WAN TO LAN Settings
231STEP 29﹒Please enter VPN_B Properties WebUI again and do not select Use Add Wizard. Select Add to enter Edit Properties
232STEP 30﹒ Please select Add in New Rule Properties WebUI.
233STEP 31﹒Please do not select Use Add Wizard in IP Filter List. Please change the name as VPN_B LAN TO WAN and select Add.
234STEP 32﹒Enter Filter Properties and select A specific IP Subnet in Source address and enter the LAN IP of Company A: 192.168.10.0, Subnet mask: 2
235STEP 33﹒Complete Setting and close IP Filter List WebUI
236STEP 34﹒Select Require Security in Filter Action WebUI and click Edit
237STEP 35﹒Enter Require Security Properties WebUI and select Session key perfect forward secrecy (PFS)
238STEP 36﹒ Select Custom/ None/ 3DES/ MD5 and choose Edit
23Multiple Subnet settings Click Multiple Subnet in the System menu to enter Multiple Subnet window. Multiple Subnet ! Forwarding Mode: Display fo
239STEP 37﹒Select Custom (provide for professional users) and click Settings
240STEP 38﹒Please select Data integrity and encryption (ESP) and choose MD5 and 3DES. Also select Generate a new key every. Enter 28800 seconds and
241STEP 39﹒Select All network connections in Connection Type.
242STEP 40﹒Enter Tunnel Setting WebUI. Select The tunnel endpoint is specified by this IP address and enter the WAN IP of Company B: 211.22.22.22
243STEP 41﹒Enter Authentication Methods WebUI and select Edit.
244STEP 42﹒Select the item Use this string (preshared key) to protect preshared key and enter the preshared key: 123456789
245STEP 43﹒Complete Setting and close the WebUI
246STEP 44﹒Complete VPN_B LAN TO WAN Settings
247STEP 45﹒Please enter General in VPN_B Properties WebUI and click Advanced
248STEP 46﹒Please select Master key perfect forward secrecy (PFS) and click Methods.
24Add a Multiple Subnet NAT Mode. Step 1. Click the Add button below to add Multiple Subnet. Step 2. Enter the IP Address in the website name colum
249STEP 47﹒Please move IKE/ 3DES/ MD5 /Medium (2) to the top and complete all the settings.
250STEP 47﹒Complete all the Window2000 VPN Setting of Company B
251STEP 48﹒Please press the right button of the mouse on VPN_B and enable VPN_B.
252STEP 49﹒To reboot IPSec Service, please begin with Start and select Settings then enter Control Panel.
253STEP 50﹒ After entering Control Panel WebUI, please enter Administrative Tools.
254STEP 51﹒Please select Services item after entering Administrative Tools.
255STEP 52﹒After entering Services, please select IPSec Services to restart.
256STEP 53﹒Complete all of the settings.
257Setting IPSec VPN connection between two Ovislink-RS2000 (Connection adopts Aggressive Mode Algorithm) Preparation Company A WAN IP: 61.11
258STEP 2﹒In the list of IPSec Autokey, fill in Name with VPN_A, and select LAN in From Source. Also fill in Subnet: 192.168.10.0 and Mask: 255.255.
25Modify a Multiple Subnet Step 1. Find the IP Address you want to modify and click Modify Step 2. Enter the new IP Address in Modify Multiple Sub
259STEP 5﹒ Select Aggressive Mode Algorithm in Encapsulation. When setup connection, it will choose the Algorithm as 3DES ENC Algorithm, MD5 AUTH Al
260STEP 7﹒After selecting Perfect Forward Secrecy and enter 28800 seconds in IPSec Lifetime, also can enter the Keep Alive IP of Company B: 192.168.
261The Default Gateway of Company B is the LAN IP of OVISLINK-RS2000 192.168.20.1. Follow the steps below: STEP 1﹒Enter the default gateway of OVIS
262STEP 3﹒Select Remote Gateway-Fixed IP In To Destination list and enter the Remote IP Address, Subnet 192.168.10.0, and Mask 255.255.255.0 of Comp
263STEP 6﹒Select Data Encryption+Authentication in IPSec Algorithm. You can choose Data Encryption+Authentication or Authentication Only to commun
264STEP 9﹒Click OK to complete the setting of Company B STEP 10﹒Complete IPSec VPN Aggressive Mode Settings:
265Setting IPSec VPN connection between two Ovislink-RS2000 (Adopt GRE Packets) Preparation Company A WAN IP: 61.11.11.11 LAN IP: 192.168.10.X
266STEP 2﹒In the list of IPSec Autokey, fill in Name with VPN_A, and select LAN in From Source. Also fill in Subnet: 192.168.10.0 and Mask: 255.255.
267STEP 5﹒Select ISAKMP Algorithm in Encapsulation. Choose the Algorithm when setup connection. Please select ENC Algorithm (3DES/DES/AES), AUTH Alg
268STEP 6﹒Select Data Encryption+Authentication in IPSec Algorithm. You can choose Data Encryption+Authentication or Authentication Only to commu
26Removing a Multiple Subnet Step 1.Find the IP Address you want to delete and click Delete. Step 2.A confirmaion pop-up box will appear, click OK
269STEP 9﹒Click OK to complete the setting of Company A
270The Default Gateway of Company B is the LAN IP of Ovislink-RS2000: 192.168.20.1. Follow the steps below: STEP 2﹒Enter the default gateway of Ov
271STEP 4﹒Select Remote Gateway-Fixed IP In To Destination list and enter the Remote IP Address, Subnet 192.168.10.0, and Mask 255.255.255.0 of C
272STEP 7﹒Select GRE/IPSec and enter GRE Local IP: 192.168.50.200. GRE Remote IP: 192.168.50.100. (GRE Local IP must be at the same subnet (C class)
273STEP 10﹒Select Schedule and if it is permissive to connect with each other by Show remote Network Neighborhood. STEP 11﹒Click OK to complet
274STEP 12﹒Complete IPSec VPN GRE/IPSec Setting Ovislink-RS2000 IPSec VPN function also can combine with Authentication and Show remote Net
275Setting PPTP VPN connection between two Ovislink-RS2000 Preparation Company A WAN IP: 61.11.11.11 LAN IP: 192.168.10.X Company B WAN IP: 2
276Enter PPTP Server of VPN function in the Ovislink-RS2000 of Company A. Select Modify: ! Select Encryption ! Client IP Range: Enter 192.44.75.1
277Add the following settings in PPTP Server of VPN function in the Ovislink-RS2000 of Company A: ! Select New Entry ! User Name: Enter PPTP_Connec
278Add the following settings in PPTP Client of VPN function in the Ovislink-RS2000 of Company B: ! Select New Entry ! User Name: Enter PPTP_Connec
27Routing Mode Multiple Subnet allows local port to set Multiple Subnet Routing Mode works and connect with the internet through different WAN IP Ad
279STEP 4﹒Complete PPTP VPN Connection
280Setting VPN connection between Ovislink-RS2000 PPTP VPN and Windows 2000 PPTP VPN Preparation Company A Ovislink-RS2000 WAN IP: 61.11.11.11
281The default gateway of Company A 192.168.10.100 is the LAN IP of Ovislink-RS2000’s LAN IP. Enter the following setting: STEP 1﹒Enter PPTP Server
282STEP 2﹒Add the following settings in PPTP Server of VPN function in the Ovislink-RS2000 of Company A: ! Select New Entry ! User Name: Enter PPTP
283Enter the following settings in Company B (211.22.22.22): STEP 1﹒Enter Windows 2000, press the right key of the mouse in My Network Place and se
284STEP 2﹒Enter Network and Dial-up Connections WebUI and then enter Make New Connection.
285STEP 3﹒In the Location Information WebUI, enter country/region, city code, and the phone system you use, and then click OK
286STEP 4﹒Click OK in Phone And Modem Options WebUI.
287STEP 5﹒Click on Next in Network Connection Wizard.
288STEP 6﹒Select Connect to a private network through the Internet in Network Connection Wizard WebUI and click on Next
28Step 1. Click System Configuration on the left side menu bar, then click Multiple Subnet below it. Enter Multiple Subnet window. Step 2. The
289STEP 7﹒Enter IP Address in Network Connection Wizard WebUI and click Next.
290STEP 8﹒In Network Connection Wizard WebUI, create the connection For all users and click on Next.
291STEP 9﹒Click on Finish on Network Connection Wizard WebUI to Complete the New Connection Wizard setting
292STEP 10﹒ Enter the following settings in Connect Virtual Private Connection function: ! User name: Enter PPTP_Connection ! Password: Enter 123
293
294STEP 11﹒Complete PPTP VPN Connection Settings
295
296Log The Bandwidth Manager supports traffic logging and event logging to monitor and record services, connection times, and the source and destina
297Traffic Log The Administrator queries the Bandwidth Manager for information, such as source address, destination address, start time, and Protoco
298Downloading the Traffic Logs The Administrator can backup the traffic logs regularly by downloading it to the computer. Step 1. In the Tra
2Example 5 276 Example 6 281 LOG 297 Traffic Log 298 Event Log 301 Connection Log 304 Log Backup 307 Alarm 311 Traffic Alarm 312 Event Alar
29Adding a Multiple Subnet Routing Mode Step 1. Click the Add button below to add Multiple Subnet. Step 2. Enter the IP Address in Add Multiple Subn
299Clearing the Traffic Logs The Administrator may clear on-line logs to keep just the most updated logs on the screen. Step 1. In the Traffic Log
300Event Log When the Bandwidth Manager detects events, the Administrator can get the details, such as time and description of the events from the E
301Downloading the Event Logs Step 1. In the Event Log window, click the Download Logs button at the bottom of the screen. Step 2. Follow the File
302Clearing the Event Logs The Administrator may clear on-line event logs to keep just the most updated logs on the screen. Step 1. In the Event L
303Connection Log Click Log in the menu bar on the left hand side, and then select the sub-selection Connection Log. Definition: Time:The start an
304Download Logs Step 1. Click Log in the menu bar on the left hand side and then select the sub-selection Connection Log. Step 2. In Connection Log
305Clear Logs Step 1. Click Log in the menu bar on the left hand side, and then select the sub-selection Connection Logs. Step 2. In Connection Log
306Log Backup The Log Backup Step 1. Click Log #Log Backup. Step 2. ! Log Mail Configuration:When the Log Mail files accumulated up to 300Kbytes
307Enable Log Mail Support & Syslog Message Log Mail Configuration /Enable Log Mail Support Step 1. Firstly, go to Admin –Select Enable E-mail
308Disable Log Mail Support & Syslog Message Step 1. Go to LOG #Log Backup. Uncheck to disable Log Mail Support. Click OK. Step 2. Go to LO
30 Step 4: Adding a new Incoming Policy. In the incoming window, click the New Entry button.
309
310Alarm In this chapter, the Administrator can view traffic alarms and event alarms that occur and the Bandwidth Manager has logged. Bandwidth Man
311Traffic Alarm Entering the Traffic Alarm window Click the Traffic Alarm option below Alarm menu to enter the Traffic Alarm window. The table in
312Downloading the Traffic Alarm Logs The Administrator can back up traffic alarm logs regularly and download it to a file on the computer. Step 1.
313Clearing the Traffic Alarm Logs Step 1. In the Traffic Alarm window, click the Clear Logs button at the bottom of the screen. Step 2. In the
314Event Alarm Entering the Event Alarm window Click the Event Alarm option below the Alarm menu to enter the Event Alarm window. The table in Even
315Downloading the Event Alarm Logs The Administrator can back up event alarm logs regularly by downloading it to a file on the computer. Step 1.
316Clearing Event Alarm Logs The Administrator may clear on-line logs to keep the most updated logs on the screen. Step 1. In the Event Alarm wind
317
318 Accounting Report Accounting Report can be divided into two parts, one is Outbound Accounting Report, and the other is Inbound Accounting Rep
31Modify a Multiple Subnet Routing Mode Step 1. Find the IP Address you want to modify in Multiple Subnet menu, then click Modify button, on the r
319Inbound Accounting Report It is the statistics of downstream/upstream for all kinds of communication services; the Inbound Accounting report wi
320Outbound Accounting Report Step 1. Click the Accounting Report function, and then select Outbound.
321Outbound source IP Accounting Report Source IP:When LAN users use Bandwidth Manager to connect to WAN service server, all of the Downstream/Upstr
322 ''
323Outbound Destination IP Accounting Report Destination IP:When WAN service server uses Bandwidth Manager to connect to LAN user, all of the Downst
324
325Outbound Service Accounting Report Service: When LAN users use Bandwidth Manager to connect to WAN Service Server, all of the Downstream/Upstr
326 Press to return to Accounting Report window. ''
327
328Inbound Accounting Report Step 1. Click Service in the menu bar on the left hand side of the window. Click Group under it.
32Removing a Multiple Subnet Routing Mode Step 1. Find the IP Address you want to delete in Multiple Subnet menu, then click Delete button, on the r
329Inbound Source IP Accounting Report Source IP:When WAN users use Bandwidth Manager to connect to LAN service server, all of the Downstream/Upst
330
331Inbound Destination IP Accounting Report Destination IP:When WAN users use Bandwidth Manager to connect to LAN service server, all of the Downst
332
333Inbound Service Accounting Report Service: When WAN users use Bandwidth Manager to connect to LAN Service Server, all of the Downstream/Upstre
334 Press and return to Accounting Report window.
335
336Statistics In this chapter, the Administrator queries the Bandwidth Manager for statistics of packets and data which passes across the Bandwidth
337WAN Statistics Step 1. Click Statistics in the menu bar on the left hand side, and then select WAN Statistics. Step 2. The WAN Statistics will be
338Entering the Statistics window by Time The Statistics window displays the statistics of network connections (downstream and upstream as well) b
33Hacker Alert The Administrator can enable the device’s auto detect functions in this section. When abnormal conditions occur, the Bandwidth Manage
339Policy Statistics Entering the Statistics window Step 1. The Statistics window displays the statistics of current network connections. ! So
340Entering the Policy Satistics Step 1. Click Statistics in the menu bar on the left hand side, and then select WAN Statistics. Step 2. In Statisti
341
342Status In this section, the device displays the status information about the Bandwidth Manager. Status will display the network information fro
343Interface Status Entering the Interface Status window Click on Status in the menu bar, then click Interface Status below it. A window will a
344ARP Table Entering the ARP Table window Click on Status in the menu bar, then click ARP Table below it. A window will appear displaying a
345DHCP Clients Entering the DHCP Clients window Click on Status in the menu bar, then click on DHCP Clients below it. A window will appear dis
346Setup Examples Example 1: Allow the LAN network to be able to access the Internet Example 2: The LAN network can only access Yahoo.com websi
347Example 1:Allow the LAN network to be able to access the Internet Step 1 Enter the Outgoing window under the Policy menu. Step 2 Click the
348Step 4 When the following screen appears, the setup is completed.
34【SYN Flood Threshold Blocking Time ( Per Source IP) Seconds】: The System Administrator can enter the blocking time when the number of SYN packets
349Example 2: The LAN network can only access 61.11.11.11 website. Step 1. Enter the WAN window under the Address menu. Step 2. Click the New Entry
350Step 5. Go to the Outgoing window under the Policy menu. Step 6. Click the New Entry button. Step 7. In the Add New Policy window, enter
351Example 3:Outside users can access the LAN FTP server through Virtual Servers Step 1. Enter Virtual Server under the Virtual Server menu. Step
352Step 7. A new Virtual Service should appear. Step 8. Go to the Incoming window under the Policy menu, then click on the New Entry button.
353Step 9. In the Add New Policy window, set each parameter, then click OK. Step 10. An Incoming FTP policy should now be created.
354Example 4:Install a server inside the LAN network and have the Internet (WAN1)users access the server through IP Mapping Step 1. Enter the Ma
355 Step 4. When the following screen appears, the IP Mapping setup is completed. Step 5. Go to the Incoming window under the Policy menu. Step 6.
356Step 7. In the Add New Policy window, set each parameter, then click OK. Step 8. Open all the services. (ANY) Step 9. The setup is completed.
357Example 5: Configuration of QoS inside the LAN Network Step 1. Click QoS in the menu bar on the left hand side. Step 2. Click the New Entry bu
358Step 5. Click Policy on the left hand side menu bar, then click Outgoing under it. Step 6. In the outgoing window, click on the New Entry butto
35【UDP Flood Threshold( Per Source IP) Pkts/Sec】: The System Administrator can enter the maximum number of UDP packets per second from attacking sou
359Example 6: Configuration of QoS inside the WAN Network Step 1. Click QoS in the menu bar on the left hand side. Step 2. Click the New Entry bu
360Step 5. Click an available virtual server from Virtual Server in the Virtual Server menu bar to enter the virtual server configuration window. In
361Step 9. Enter the IP address of the LAN network server(s), to which the virtual server will be mapped. Up to four IP addresses can be assigned at
362Step 13. In Add Policy window, enter the related parameters and click OK.
36! Detect Land Attack: Some Systems may shut down when receiving packets with the same source and destination addresses, the same source port and
37Blaster Alert The Administrator can enable the device’s auto detect functions in this section. When abnormal conditions occur, the Bandwidth Manag
38Route Table In this section, the Administrator can add static routes for the networks. Entering the Route Table screen Click System on the left
3 Setup Examples 347 Allow the LAN network to be able to access the Internet 348 The LAN network canonly access 61.11.11.11 website 350 Outside use
39Adding a new Static Route Step 1. In the Route Table window, click the New Entry button. Step 2. In the Add New Static Route window, enter new
40Modifying a Static Route: Step 1. In the Route Table menu, find the route to edit and click the corresponding Modify option in the Configure fie
41Removing a Static Route Step 1. In the Route Table window, find the route to remove and click the corresponding Remove option in the Configure f
42DHCP In the section, the Administrator can configure DHCP (Dynamic Host Configuration Protocol) settings for the LAN (LAN) network. Entering the
43LAN Interface : ! Client IP Address Range 1: Enter the starting and the ending IP address dynamically assigning to DHCP clients. ! Client IP Add
44Enabling DHCP Support Step 1. In the Dynamic IP Address window, click Enable DHCP Support. Step 2. Enable DHCP Support:Enable /Disable DCHP S
45Host Table The Bandwidth Manager’s Administrator may use the Host Table function to make the Bandwidth Manager act as a DNS Server for the LAN.
46Entering the Host Table window Click on System in the menu bar, then click on Host Table below it. The Host Table window will appear. Below is t
47Adding a new Host Table Step 1: Click on the New Entry button and the Add New Host Table window will appear. Step 2: Fill in the appropriate
48Modifying a Host Table Step 1: In the Host Table window, find the policy to be modified and click the corresponding Modify option in the Conf
4System The device Bandwidth Manager administration and monitoring control is set by the system Administrator. The System Administrator can add or
49Removing a Host Table Step 1: In the Host Table window, find the policy to be removed and click the corresponding Remove option in the Configur
50DDNS The DDNS (require DDNS Service) allows you to alias a dynamic IP address to a static hostname, allowing your device to be more easily accesse
51How to register:Firstly, Click DDNS in the System menu to enter DDNS window, then click Add button,on the right side of the service providers, cli
52DDNS settings Step 1: Click Add button. Step 2: Click the information in the column of the new window. ! Service providers:Select service provid
53Modify a DDNS Step 1: Find the item you want to change and click Modify. Step 2: Enter the new information in the Modify DDNS window. Step 3: Cli
54Removing a DDNS Step 1: Find the item you want to change and click Delete. Step 2: A confirmation pop-up box will appear, click OK to delete the
55Language The administrator can configure the Bandwidth Manager Select the Language version. Step 1. Select the Language version (English Version/T
56Permitted IPs Only the authorized IP address is permitted to manage the Bandwidth Manager.
57Add a Permitted IP Address Step 1. Click New Entry button. Step 2. In IP Address field, enter the LAN IP address or WAN IP address. ! IP address:
58Modify a Permitted IP Address Step 1. In the table of Permitted IPs, highlight the IP you want to modify, and then click Modify. Step 2. In Modif
5Date/Time: This function enables the Bandwidth Manager to be synchronized either with an Internet Server time or with the client computer’s clock.
59Remove a Permitted IP addresses Step 1. In the table of Permitted IPs, highlight the IP you want to remove, and then click Remove. Step 2. In Rem
60Logout Select this option to the device’s Logout the Bandwidth Manager. This function protects your system while you are away. Step 1. Click Lo
61Software Update Under Software Update, the admin may update the device’s software with a newer software.
62Interface In this section, the Administrator can set up the IP addresses for the office network. The Administrator may configure the IP address
63LAN Entering the Interface menu Click on Interface in the left menu bar. Then click on LAN below it. The current settings of the interface add
64Configuring the Interface Settings LAN Interface Using the LAN Interface, the Administrator sets up the LAN network. The LAN network will use
65WAN Entering the Interface menu Click on Interface in the left menu bar. Then click on WAN below it. The current settings of the interface addres
66WAN Interface Using the WAN Interface, the Administrator sets up the WAN network. These IP Addresses are real public IP Addresses, and are routab
68For Dynamic IP Address (Cable Modem User): This option is for users who are automatically assigned an IP address by their ISP, such as cable modem
6DDNS The DDNS (require DDNS Service) allows you to alias a dynamic IP address to a static hostname, allowing your device to be more easily accessed
69For Static IP Address: This option is for users who are assigned a static IP Address from their ISP.Your ISP will provide all the information need
70Address The Bandwidth Manager allows the Administrator to set Interface addresses of the LAN network, LAN network group, WAN network, WAN network
71LAN Entering the LAN window Step 1. Click LAN under the Address menu to enter the LAN window. The current setting information such as the name of
72Adding a new LAN Address Step 1. In the LAN window, click the New Entry button. Step 2. In the Add New Address window, enter the settings of a ne
73Modifying an LAN Address Step 1. In the LAN window, locate the name of the network to be modified. Click the Modify option in its corresponding
74Removing an LAN Address Step 1. In the LAN window, locate the name of the network to be removed. Click the Remove option in its corresponding Con
75LAN Group Entering the LAN Group window The LAN Addresses may be combined together to become a group. Click LAN Group under the Address menu to en
76Adding an LAN Group Step 1. In the LAN Group window, click the New Entry button to enter the Add New Address Group window. Step 2. In the Add N
77Modifying an LAN Group Step 1. In the LAN Group window, locate the network group desired to be modified and click its corresponding Modify optio
78Removing an LAN Group Step 1. In the LAN Group window, locate the group to be removed and click its corresponding Remove option in the Configure f
7Admin On the left hand menu, click on Setup, and then select Admin below it. The current list of Administrator(s) shows up. Settings of the Admin
79WAN Entering the WAN window Click WAN under the Address menu to enter the WAN window. The current setting information, such as the name of the
80Adding a new WAN Address Step 1. In the WAN window, click the New Entry button. Step 2. In the Add New Address window, enter the settings for a
81Modifying an WAN Address Step 1. In the WAN table, locate the name of the network to be modified and click the Modify option in its correspondin
82Removing an WAN Address Step 1. In the WAN table, locate the name of the network to be removed and click the Remove option in its corresponding Co
83WAN Group Entering the WAN Group window Click the WAN Group under the Address menu bar to enter the WAN window. The current settings for the WAN n
84Adding an WAN Group Step 1. In the WAN Group window, click the New Entry button and the Add New Address Group window will appear. Step 2. In the A
85Modify an WAN Group Step 1. In the WAN Group window, locate the network group to be modified and click its corresponding Modify button in the Conf
86Removing an WAN Group Step 1. In the WAN Group window, locate the group to be removed and click its corresponding Modify option in the Configure
87
88Service In this section, network services are defined and new network services can be added. There are three sub menus under Service which are:
8Adding a new Sub Administrator Step 1. In the Admin window, click the New Sub Admin button to create a new Sub Administrator. Step 2. In the Add
89Pre-defined Entering a Pre-defined window Click Service on the menu bar on the left side of the window. Click Pre-defined under it. A window w
90Custom Entering the Custom window Click Service on the menu bar on the left side of the window. Click Custom under it. A window will appear wi
91Adding a new Service Step 1. In the Custom window, click the New Entry button and a new service table appears. Step 2. In the new service ta
92Modifying Custom Services Step 1. In the Custom table, locate the name of the service to be modified. Click its corresponding Modify option in th
93Removing Custom Services Step 1. In the Custom window, locate the service to be removed. Click its corresponding Remove option in the Configure
94Group Accessing the Group window Click Service in the menu bar on the left hand side of the window. Click Group under it. A window will appear
95Adding Service Groups Step 1. In the Group window, click the New Entry button. In the Add Service Group window, the following fields will appe
96Modifying Service Groups Step 1. In the Group window, locate the service group to be edited. Click its corresponding Modify option in the Con
97Removing Service Groups Step 1. In the Group window, locate the service group to be removed and click its corresponding Remove option in the Con
98Schedule The Bandwidth Manager allows the Administrator to configure a schedule for policies to take affect. By creating a schedule, the Admin
Commentaires sur ces manuels