User manual AIRLIVE RS-1000

[. . . ] AirLive RS-1000 Security Bandwidth Management User's Manual Contents System Admin Setting Date/Time Language Permitted IP Multiple NAT Hack Alert Route Table DHCP Host Table Dynamic DNS Logout 1 3 7 16 18 19 23 28 31 35 36 37 42 Software Update 43 44 54 55 59 63 67 71 72 73 78 82 87 92 97 Interface Address LAN LAN Group WAN WAN Group Service Pre-defined Custom Group Schedule QoS Authentication Policy Outgoing Incoming 98 105 113 114 119 120 122 126 134 135 138 141 144 147 148 Content Filtering URL Blocking General Blocking Virtual Server Mapped IP Virtual Server LOG Traffic Log Event Log Connection Log Log Backup Alarm Traffic Alarm Event Alarm 151 154 156 162 168 170 171 173 174 176 177 178 Accounting Report Outbound Inbound Statistics WAN Statistics Policy Statistics Status Interface Status ARP Table DHCP Clients Setup Examples System The Security Bandwidth Manager Administration and monitoring control is set by the System Administrator. The System Administrator can add or modify System settings and monitoring mode. The sub Administrators can only read System settings but not modify them. In System, the System Administrator can: 1. [. . . ] Upstream BandwidthTo configure the Guarateed Bandwidth and Maximum Bandwidth. QoS PriorityTo configure the priority of distrubuting Upstream/Downstream and unused bandwidth. Click the OK button to modify QoS. Delete QoS Step 1. In the QoS window, find the QoS you want to change, and click Delete in the Configure column. Step 2. In the Delete QoS window, click OK to delete the QoS or click Cancel to discard the change. Authentication By configuring the Authentication, you can control the user's (Internal user or remote user who connect by VPN and IPSec) connection authority. The user has to pass the authentication to access to Internet. Add New User STEP 1Setting the user's Address in LAN of Address function. STEP 2Enter the following setting in Authentication function: " Click New User " Auth-User Name: Enter guest " Password: Enter 1234 " Confirm Password: Enter 1234 " Click OK " Complete Authentication Setting " STEP 3Add a policy in Outgoing Policy and input the Address and Authentication of STEP1, 2 STEP 4When user_1 is going to access to Internet through browser, the authentication UI will appear in Browser. After entering the correct user name and password, click OK to access to Internet. STEP 5If the user does not need to access to Internet anymore and is going to logout, he/she can click LOGOUT Auth-User to logout the system. Or enter the Logout Authentication WebUI (http:// LAN Interface: Authentication port number/ logout. html) to logout. Policy This section provides the Administrator with facilities to sent control policies for packets with different source IP addresses, source ports, destination IP addresses, and destination ports. Control policies decide whether packets from different network objects, network services, and applications are able to pass through the Security Bandwidth Manager. The device uses policies to filter packets. The policy settings are: source address, destination address, services, permission, packet log, packet statistics, and flow alarm. Based on its source addresses, a packet can be categorized into: (1). Outgoing: a client is in the LAN networks, while a server is in the WAN networks. (2) Incoming, a client is in the WAN networks, while a server is in the LAN networks. The policy settings are source addresses, destination addresses, services, permission, log, statistics, and flow alarm. Among them, source addresses, destination addresses and IP mapping addresses have to be defined in the Address menu in advance. Services can be used directly in setting up policies, if they are in the Pre-defined Service menu. Custom services need to be defined in the Custom menu before they can be used in the policy settings. If the destination address of an incoming policy is a Mapped IP address or a Virtual Server address, then the address has to be defined in the Virtual Server section instead of the Address section. Outgoing This section describes steps to create policies for packets and services from the LAN network to the WAN network. Entering the Outgoing window Step 1. Click Policy on the left hand side menu bar, Step 2. A window will appear with a table displaying currently defined Outgoing policies. !! Figure7-1 Create an Outgoing Policy The fields in the Outgoing window are: " Source: source network addresses that are specified in the LAN section of Address menu, or all the LAN network addresses. [. . . ] Go to the Incoming window under the Policy menu. Click the New Entry button. 183 Step 6. In the Add New Policy window, set each parameter, then click OK. The setup is completed. 184 Example 5: Use QoS to setup LAN to WAN network to attain the maximum downstream/upstream bandwidth. [. . . ]