User manual SHARETECH LB-2210

[. . . ] Multi-Homing Dual WAN Firewall Router User's Manual Doc. No. : 120602-04 -1- Contents System Admin Setting Date/Time Multiple NAT Hack Alert Route Table DHCP DNS Proxy Dynamic DNS Logout Software Update Interface LAN WAN Address LAN LAN Group WAN WAN Group Service Pre-defined Custom -2- 5 7 12 19 20 25 27 31 33 37 41 42 43 44 45 51 52 56 59 63 67 68 69 Group Schedule Policy Outgoing Incoming VPN Autokey IKE PPTP Server PPTP Client Content filtering URL Blocking General Blocking Virtual Server Mapped IP Virtual Server LOG Traffic Log Event Log Log Backup Alarm Traffic Alarm Event Alarm Statistics WAN Statistics Policy Statistics Status -3- 73 77 81 82 89 93 94 98 103 107 108 112 113 114 118 125 126 129 132 135 136 139 143 144 145 147 Interface Status ARP Table DHCP Clients Setup Examples 148 149 150 151 -4- System The device Multi-Homing Administration and monitoring control is set by the System Administrator. The System Administrator can add or modify System settings and monitoring mode. The sub Administrators can only read System settings but not modify them. [. . . ] There are three sub menus under Service which are: Pre-defined, Custom, and Group. The Administrator can simply follow the instructions below to define the protocols and port numbers for network communication applications. Users then can connect to servers and other computers through these available network services. What is Service? TCP and UDP protocols support varieties of services, and each service consists of a TCP Port or UDP port number, such as TELNET(23), SMTP(21), POP3(110), etc. The 10/100M 2 WAN /4 LAN Multi-Homing Dual WAN Firewall Router defines two services: pre-defined service and custom service. The common-use services like TCP and UDP are defined in the pre-defined service and cannot be modified or removed. In the custom menu, users can define other TCP port and UDP port numbers that are not in the pre-defined menu according to their needs. When defining custom services, the client port ranges from 1024 to 65535 and the server port ranges from 0 to 1023. How do I use Service? The Administrator can add new service group names in the Group option under Service menu, and assign desired services into that new group. Using service group the Administrator can simplify the processes of setting up control policies. For example, there are 10 different computers that want to access 5 different services on a server, such as HTTP, FTP, SMTP, POP3, and TELNET. Without the help of service groups, the Administrator needs to set up 50 (10x5) control policies, but by applying all 5 services to a single group name in the service field, it takes only one control policy to achieve the same effect as the 50 control policies. - 67 - Pre-defined Entering a Pre-defined window Click Service on the menu bar on the left side of the window. A window will appear with a list of services and their associated IP addresses. This list cannot be modified. - 68 - Custom Entering the Custom window Click Service on the menu bar on the left side of the window. A window will appear with a table showing all services currently defined by the Administrator. - 69 - Adding a new Service Step 1 In the Custom window, click the New Entry button and a new service table appears. Step 2 In the new service table: New Service Name: This will be the name referencing the new service. Protocol: Enter the network protocol type to be used, such as TCP, UDP, or Other (please enter the number for the protocol type). Client Port: enter the range of port number of new clients. Server Port: enter the range of port number of new servers. The client port ranges from 1024 to 65535 and the server port ranges from 0 to 1023. Step 3 Click OK to add new services, or click Cancel to cancel. - 70 - Modifying Custom Services Step 1. In the Custom table, locate the name of the service to be modified. A table showing the current settings of the selected service appears on the screen Step 3. Click OK to accept editing; or click Cancel. - 71 - Removing Custom Services Step 1. In the Custom window, locate the service to be removed. [. . . ] A window will appear displaying the table of DHCP clients that are connected to the device. The table will list host computers on the LAN network that obtain its IP address from the Multi-Homing's DHCP server function. IP Address: the IP address of theLAN host computer MAC Address: MAC address of theLAN host computer Leased Time: The Start and End time of the DHCP lease for theLAN host computer. - 150 - Setup Examples Example 1: Example 2: Example 3: Example 4: Allow the LAN network to be able to access the Internet The LAN network can only access Yahoo. com website Outside users can access the LAN FTP server through Virtual Servers Install a server inside the LAN network and have the Internet (WAN 1) users access the server through IP Mapping------------ Please see the explanation of the examples below: Example 1: Allow the LAN network to be able to access the Internet Step 1 Enter the Outgoing window under the Policy menu. Step 2 Click the New Entry button on the bottom of the screen. Step 3 In the Add New Policy window, enter each parameter, then click OK. Step 4 When the following screen appears, the setup is completed. - 151 - Example 2: The LAN network can only access Yahoo. com website. Step 1. [. . . ]