User manual AIRLIVE IGR-1500

[. . . ] IGR-1500 Four-WAN Internet Gateway User's Manual Declaration of Conformity We, Manufacturer/Importer OvisLink Corp. 5F. , NO. 6, Lane 130, Min-Chuan Rd. , Hsin-Tien City, Taipei County, Taiwan Declare that the product Four-WAN Internet Gateway IGR-1500 is in conformity with In accordance with 89/336 EEC-EMC Directive and 1999/5 EC-R & TTE Directive Clause EN Description Limits and methods of measurement of radio disturbance characteristics of information technology equipment Disturbances in supply systems caused by household appliances and similar electrical equipment "Harmonics" Disturbances in supply systems caused by household appliances and similar electrical equipment "Voltage fluctuations" Information Technology equipment-Immunity characteristics-Limits And methods of measurement 55022:1998/A1 :2000/A2:2003 61000-3-2:2000 EN EN 61000-3-3:1995/ A1:2001 55024:1998/A1 :2001/A2:2003 marking EN CE Manufacturer/Importer Signature Name Position/ Title : Albert Yeh Vice President (Stamp) Date 2007/8/23 AirLive IGR-1500 CE Declaration Statement Declaration OvisLink Corp. tímto prohlasuje, ze tento AirLive IGR-1500 je ve shod se základními pozadavky a dalsími píslusnými ustanoveními smrnice 1999/5/ES. erklærer herved, Dansk [Danish] at følgende udstyr AirLive IGR-1500 overholder de væsentlige krav og øvrige relevante krav i direktiv 1999/5/EF. [. . . ] (Figure 3-15) Figure 3-15 Static Routing and Dynamic Routing 25 3. 7. 2 Current Table This display shows the valid routing paths in IGR-1500. Users can view the information about current routing paths. (Figure 3-16) Figure 3-16 Current Table 26 3. 8 Access Control 3. 8. 1 Local IP Filtering (Gateway Mode only) AirLive IGR-1500 allows you to define the accessed restriction about to block or allow outgoing IP packets per protocol (port number). You may restrict specific IP to perform limited protocols or allow them to execute partial protocols. And the first thing you have to know is the port numbers and their usages. Local IP Filtering can be defined 10 items and item 1 has the highest priority. In principle, the same IP should not list in different items. If IP settings are conflicted, the higher priority item will be the obeyed rules. You can reserve dedicate IP address to dedicated user from Configure LAN & DHCP address. You can allow or restrict specific IP(s) to access some port numbers. Reservations IP function, by using this function, user can have dedicated IP address match to their computer NIC MAC Example 1: If you restrict the PC of IP 192. 168. 1. 13-192. 168. 1. 15 to access HTTP, the settings are: Item 1: Enable Filter entry: Block Port Number: 80 IP address: 192. 168. 1. 13-192. 168. 1. 15 Example 2: If you allow the PC of IP 192. 168. 1. 16-192. 168. 1. 18 to access FTP only, the settings are: Item 2: Enable Filter entry: Allow Port Number: 21 IP address: 192. 168. 1. 16-192. 168. 1. 18 Example 3: If you allow the PC of IP 192. 168. 1. 40, 192. 168. 1. 56, 192. 168. 1. 100-192. 168. 1. 120 to access port 50, port53, port100-120 only, the settings are: Item 3: Enable Filter entry: Allow Port Number: 50, 53, 100-120 IP address: 192. 168. 1. 40, 192. 168. 1. 56, 192. 168. 1. 100-120 (Figure 3-17) 27 Figure 3-17 Local IP Filtering Example Setting Protocol Port Number List Protocol TCP TCP TCP TCP UDP UDP TCP TCP TCP TCP UDP TCP UDP TCP UDP TCP TCP Service FTP SSH TELNET SMTP DNS TFTP GOTHER FINGER HTTP POP3 NFS NNTP NTP IMAP SNMP BGP WAIS Port no. 21 22 23 25 53 69 70 79 80 110 111 119 123 143 161 179 210 28 Protocol TCP TCP UDP TCP UDP UDP UDP TCP TCP TCP TCP TCP UDP TCP TCP TCP TCP Service LADP HTTPS IKE RLOGIN SYSLOG TALK RIP AFPOWERTCP Net-Meeting L2TP PPTP AOL PC Anywhere XWINDOW IRC Real-Media Port no. 389 443 500 513 514 517, 518 520 548 1503, 1702 1701 1723 5190~5194 5631~5632 6000-6063 6660~6669 7070 6000-6063 3. 8. 2 Remote IP Filtering (Gateway Mode only) AirLive IGR-1500 features to define accessed restriction for remote users. You may restrict some destination IP addresses that are not allowed to reach IGR-1500. IP Address: destination IP address that prohibits users to reach Enable: enable restrict function (Figure 3-18) Figure 3-18 Remote IP Filtering Example Setting 29 3. 8. 3 Intrusion Security (Gateway Mode only) AirLive IGR-1500 features Intrusion Security, to allow user setting as "BLOCK" or "PASS" function following by the table content. The restricted user can be defined with its IP and MAC address. (Figure 3-19) Figure 3-19 Intrusion Security 30 3. 8. 4 DoS Defense (Gateway Mode only) AirLive IGR-1500 also provides DoS (Denial of Service Defense) function to protect your network servers, hosts, routers and other devices from the attacking of villain using mass data transmission. (Figure 3-20) The default value in the display is the optimize parameter for Router. (Figure 3-21) Figure 3-20 DoS Defense Figure 3-21 Default Setting of DoS Defense 31 Some virus are using "PING" command to attack network, AirLive IGR-1500 can be defined as accept or reject "PING" command from WAN or LAN. (Figure 3-22) Figure 3-22 Disable Ping respond Function Description Checking the IP fragments. When it finds someone from WAN side tries IP Fragments Checking to attack your network using overlap IP fragments in a bad attention, this function will check over these packets and drop them. Finding out whether the source address(s) and destination address(s) are legal IP's or not. If they are illegal IP's or multicast addresses, this function will cast these packets away. [. . . ] Step 3: Now, we have 2 entries in the DNS table. Click on Add new item again. 67 Step 4: This time we are adding the DNS record with the real name for web server. Name: www. example. com Host: host1. example. com Step 5: The simplest case for the configuration of IN-BOUND ROUTER DNS server is done. 68 Now the Inbound Load-balancing DNS Server is configured to redirect the Internet requests of www. example. com to the IP address of either WAN1 or WAN2. But we'll still need to configure the virtual server. [. . . ]