Broadband Router User Guide
R24.0031.00
(Windows 95, 98, 2000, NT, Me, and Macintosh)
Configuring the Broadband Router
The Web-based configuration utility can be used to change the settings of
the broadband router. A brief description of these settings is provided below.
Startup and Log in
Open an Internet browser and enter the broadband router's IP address. The following
is the default IP address of the broadband router:
http://192.168.123.254
After the connection is established, you will see the Web User Interface.
There are two appearances of the Web User Interface, one for general users and
one for system administrators. In the general user mode, you are able to see
the settings, but you will not be able to change any settings. In the administrator
mode, you will be able to change the settings.
To log in as an administrator, enter the password in the System Password field
and click Log in. The default password is admin. When the correct password is
entered, the Web appearance will be changed into administrator configure mode.
There are several options listed in the side menu for system administration.
Status
The Status option allows you to check the operating status of the broadband
router:
- WAN Port Status
If the WAN port is assigned a dynamic IP, there will be a Renew button and
a Release button on the Sidenote column. You can click this button to renew
or release the IP manually.
- Modem Status
This will appear when a dial-up connection is selected. The modem status is
displayed and the Manual Dial-up button will appear. After the modem achieves
a connection, the Hang-up button will appear.
- Printer Status
Some examples of printer status messages include "Ready," "Not
ready," "Printing
", and "Device error."
When a job is printing, a Kill Job button may appear on the side column. Click
this button to manually end the current printing job.
Toolbox
This option enables you to change the administrator password. The first screen
you will see after you click Toolbox is the change password screen.
Note: It is very important that you reset
the password after you configure the broadband router. If you forget the system
password, refer to the Console Mode section in this manual
to reset a new one.
You can click Reset to Default and then reboot your computer to restore
the default settings of the broadband router.
You can also obtain information about the Firmware version and the WAN's MAC
Address in this area. Go to http://www.usr.com
to look for any firmware updates for your broadband router.
The Clone MAC button is useful when your ISP binds (or locks) your
connection to a specific MAC address. Cloning the MAC address allows you to
reassign the MAC address without registering it with your ISP. Some ISPs require
that you register the MAC address.
Primary Setup
This option displays the connection method of the WAN port. When you are using
a dial-up connection, the username and password dialog boxes will be shown here.
- LAN IP Address: The default IP address is 192.168.123.254. It is not recommended,
but you can change it to fit your needs. If you change the LAN IP address,
you should write down the new address. If you forget the new address, you
will have to reset the broadband router and you will lose all your configuration
settings.
- WAN Type: This option allows you to select the WAN connection type of your
ISP. Click Change to choose one of the following five options:
- Static IP Address: This option is used if your ISP has assigned
you a static IP address.
- Dynamic IP Address: This is used to obtain an IP address from your
ISP automatically.
- PPP over Ethernet: Some ISPs require the use of PPPoE to connect
to their services. This is generally used for DSL connections. Contact your
ISP for more information.
- Dial-up Network: This option is used if you want to connect to the
Internet through an analog modem or through an ISDN.
- More: This option allows you to manually add DNS information for
the WAN port.
Static IP Address
WAN IP Address, Subnet Mask, Gateway, Primary and Secondary DNS: enter the
proper setting value provided by your ISP.
Dynamic IP Address
- Host Name: This entry is optional, but is required by some ISPs.
- Renew IP Forever: This feature enables the broadband router to renew the
IP address automatically when the lease time is half, even if the system is
in an idle state. This allows for always-on connectivity.
PPP over Ethernet
- PPPoE Account and Password: This is the account and password that your
ISP assigned to you. If you don't want to change the password, you may leave
this field empty.
- PPPoE Service Name: This entry is optional, but your ISP may require this
field to be filled in.
- Maximum Idle Time: This is the elapsed time of no activity before your
PPPoE session is disconnected. Set this feature to 0 to disable it.
Dial-up Network
- Dial-up Telephone, Account and Password: This is assigned by your ISP.
Leave the password field empty if you do not want to change it.
- Primary and Secondary DNS: These fields are automatically assigned if they
are configured as "0.0.0.0."
- Maximum Idle Time: This is the elapsed time of no activity before your
dial-up session is disconnected.
- Baud Rate: This is the communication speed between the broadband router
and your modem or ISDN TA.
- Extra Setting: This is needed to customize the communication quality between
the ISP and your modem. This is required for ISDN TA.
DHCP Server
The DHCP server of the broadband router is set for enabled by default. The
settings of the TCP/IP environment include IP address, Subnet Mask, Gateway,
and DNS configurations. If the DHCP server of the broadband router is enabled
and you configure your PCs to obtain an IP address automatically, your PC will
automatically load the proper TCP/IP information provided by the broadband router.
The settings of DHCP server include the following items:
- DHCP Server: You are given two options: Disable and Enable.
- Range of IP Address Pool: Whenever there is a request, the DHCP server
will automatically allocate an unused IP address from the IP address pool
to the requesting PC. You can specify the starting and ending address of the
IP address pool.
- Domain Name: This information is optional and will be provided to the client
by the ISP. Some ISPs require that this information is entered. Selecting
More allows the gateway information to automatically be entered.
Virtual Server
The broadband router's NAT (Network Address Translation) firewall filters
out unrecognized packets to protect your intranet. All hosts behind this firewall
are invisible externally. Enabling the Virtual Server Mapping will make some
of the host's ports accessible.
A virtual server is defined as a Service Port. All requests to this port will
be redirected to the PC that is specified by the Server IP.
Port forwarding sets up public services on your network. When Internet users
make requests on your network, the broadband router will forward those requests
to the appropriate computer. The broadband router's DHCP function must be disabled
to use port forwarding. Port forwarding is generally used to set up a webserver,
ftp server, or e-mail server on your network.
To add a server using Forwarding, perform the following steps:
- Enter the port number and the IP Address of the server that you want to
allow Internet users to access.
- Configure as many entries as desired until all the entries are filled in.
- Click Apply in order to save the settings.
For example, if you have an FTP server (port 21) at 192.168.123.1, a Web server
(port 80) at 192.168.123.2, and a PPTP VPN server at 192.168.123.6, you need
to specify the following virtual server mapping table:
Service Port
|
Server IP
|
Enable
|
20 |
192.168.123.1 |
V |
21 |
192.168.123.1 |
V |
80 |
192.168.123.2 |
V |
1723 |
192.168.123.6 |
V |
Special AP
Some applications require open service ports, such as Internet games, video
conferencing, Internet telephony, and others. When a request is made to the
ISP's given address for a specific port, it is forwarded to the machine that
is hosting that particular service. These applications cannot work with a pure
NAT broadband router since all the ports are blocked by default. This is a result
of the broadband router's firewall function. Special Applications will allow
some of these applications to work with a NAT broadband router. If the Special
Applications still do not allow an application to function correctly, refer
to the DMZ host option in the Miscellaneous Items.
1. Trigger: This is the outbound port number that the application assigned
first.
2. Incoming Ports: When the trigger packet is detected, the inbound packets
to the specified port number are allowed to pass through the firewall.
This product provides some predefined settings in the grey pad on the bottom
of the Web Page Interface. Select Popular applications and click Copy to copy
a predefined setting.
Note: Only one PC can be assigned a specific
port number at one time.
Access Control
Access Control allows you to assign the access rights for each user. First,
you must divide users into different groups, as identified by their IP addresses.
You can assign the members of Group 1, 2, and 3. The others are all members
of the Default Group. Second, you must assign the access rights of each group.
The access rights can either allow or block users to access specified TCP and
UDP ports. For example:
Group Members Access Right Comments
Default - Allow () No access right (allow nothing)
Group 1 100-199 Allow (25,53,80,110) Can browse(80), receive(110) and send(25)
e-mail only
Group 2 50-99 Block (21,119) Cannot read net news(119) and FTP(21) only
Group 3 1-9,20 Block () Fully access (block nothing)
Miscellaneous Items
IP Address of DMZ Host:
The DMZ (Demilitarized Zone) host function allows a networked computer to be
exposed to unrestricted 2-way communication for certain gaming video and other
specific applications. This feature should be used only when necessary, since
it removes the security of the firewall.
Remote Administrator Host:
In general, only intranet users can browse the built-in Web pages to perform
administration tasks. This feature enables you to perform administrative tasks
from a remote host. When this feature is enabled, only the specified IP address
can perform remote administration. If the specified IP address is 0.0.0.0, any
host can connect to this product to perform administration tasks. When this
feature is enabled, the Web port will be shifted to 88.
|